buildroot, branch 2017.11.2

Update for 2017.11.2

2018-01-21T21:08:22+00:00

Signed-off-by: Peter Korsgaard

package/xen: Force disable SDL for xen-qemu build

2018-01-21T20:19:55+00:00

Fixes autobuilder issue: http://autobuild.buildroot.net/results/8bcb80dc93d38bb38ca32ad93d52c22d1176d57e/ Signed-off-by: Alistair Francis Signed-off-by: Peter Korsgaard (cherry picked from commit a5dd72181e1a79ffe65c788a2c1db9acdf6aa933) Signed-off-by: Peter Korsgaard

rpcbind: Backport fixes to memory leak security fix

2018-01-21T20:18:25+00:00

Commit 954509f added a security fix for CVE-2017-8779, involving pairing all svc_getargs() calls with svc_freeargs() to avoid a memory leak. However it also introduced a couple of issues: - The call to svc_freeargs() from rpcbproc_callit_com() may result in an attempt to free static memory, resulting in undefined behaviour. - A typo in the svc_freeargs() call from pmapproc_dump() causes NIS (aka ypbind) to fail. Backport upstream fixes for these issues to version 0.2.3. Signed-off-by: Ed Blake Signed-off-by: Thomas Petazzoni (cherry picked from commit 5a9a95d0eb15c189f1361c12c105eb0ba8842c77) Signed-off-by: Peter Korsgaard

iputils: fix ping and traceroute6 executable permissions

2018-01-21T20:17:41+00:00

The iputils executables are installed without the setuid bit set, which prevents some programs from working. This patch adds a permission table to fix the permissions of the ping and traceroute6 executables. Signed-off-by: Einar Jon Gunnarsson Signed-off-by: Thomas Petazzoni (cherry picked from commit b0e2d00289eeb1a7201ba49e5cedfd3175f92140) Signed-off-by: Peter Korsgaard

toolchain/toolchain-external: libatomic should also be copied for musl toolchains

2018-01-21T20:17:28+00:00

libatomic, like libgcc_s, is provided by gcc, so there is no reason to copy it over only for the glibc and uclibc cases, it should also be copied for the musl case. Without this, a program linked with libatomic on a musl system will fail to run due to the missing library. Signed-off-by: Thomas Petazzoni Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni (cherry picked from commit ece9385523351d20e314bddc1f277aef8de7fb40) Signed-off-by: Peter Korsgaard

linux-headers: bump 4.{4, 9, 14}.x series

2018-01-21T20:15:50+00:00

[Peter: drop 4.14.x bump] Signed-off-by: Fabio Estevam Signed-off-by: Thomas Petazzoni (cherry picked from commit f8fc447c20745bf851ceba8ac0963439103acb0e) Signed-off-by: Peter Korsgaard

bind: security bump to version 9.11.2-P1

2018-01-21T20:14:37+00:00

Fixes the following security issue: CVE-2017-3145: Improper sequencing during cleanup can lead to a use-after-free error, triggering an assertion failure and crash in named. For more details, see the advisory: https://lists.isc.org/pipermail/bind-announce/2018-January/001072.html Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni (cherry picked from commit d72a2b9247d885c4fc5c2ca6066d3ae6a27a8653) Signed-off-by: Peter Korsgaard

linux-firmware: fix install for Chelsio T[45]

2018-01-16T22:24:13+00:00

It's broken since 1c9846ec "linux-firmware: Bump to the latest version" Fix it by updating the name of the file to install. Do not use * since it would install also old versions that would take 1MB extra space in the target. Signed-off-by: Ricardo Martincoski Cc: Peter Korsgaard Cc: Yann E. MORIN Cc: Yegor Yefremov Signed-off-by: Peter Korsgaard

support/kconfig: apply upstream nconfig ncurses/ncursesw fix

2018-01-16T22:23:05+00:00

Buildroot's "make nconfig" command stopped working a while ago on Gentoo systems. Running the command would result in a crash. The issue is caused by lxdialog's cflags which are also used to build nconfig; It would detect *ncursesw* and turn on WIDECHAR support -- but the Makefile would still link to plain *ncurses* while building nconfig (which was built without WIDECHAR support). This would cause a crash after using *wattrset* on a WINDOW instance. WIDECHAR *wattrset* would try to set the _color member in the WINDOW struct which does not exist in the NON-WIDECHAR ncurses instance. It would end up clobbering data outside the struct (usually _line entries). An upstream patch fixes the issue, so we're applying it to Buildroot's kconfig. Signed-off-by: Guillermo A. Amaral Signed-off-by: Thomas Petazzoni (cherry picked from commit 8aa4ee2b02abe2a04b15ee3ef53887ade9a4afc4) Signed-off-by: Peter Korsgaard

package/ti-cgt-pru: bump to 2.2.1

2018-01-16T19:33:45+00:00

See: http://www.ti.com/tool/download/PRU-CGT-2-2 The ti-cgt-pru v2.1.x installer are affected by a bug with recent distribution (Fedora 27 and Ubuntu 17.10) using kernel 4.13 or 4.14 with a glibc 2.26. The installer is stuck in a futex(wait) system call. While at it, add license hash. Fixes: http://autobuild.buildroot.net/results/68f/68f60ad38d9b6eae83b5d233966616a25d8c9391 Signed-off-by: Romain Naour Cc: Ash Charles Cc: Matthew Weber Tested-by: Matt Weber Signed-off-by: Thomas Petazzoni (cherry picked from commit 0e162b932d67668a4f075da803efb62b01ec917d) Signed-off-by: Peter Korsgaard