[OE-core] [PATCH 00/23] cve-check related fixes

Mikko Rapeli mikko.rapeli at bmw.de
Thu Jul 20 13:22:48 UTC 2017


Results from cve-check are not very good at the moment.
One of the reasons for this is that component names used in CVE
database differ from yocto recipe names. This series fixes several
of those name mapping problems by setting the CVE_PRODUCT correctly
in the recipes. To check this mapping with after a build, I'm exporting
LICENSE and CVE_PRODUCT variables to buildhistory for recipes and
packages.

Mikko Rapeli (23):
  buildhistory.bbclass: add LICENSE and CVE_PRODUCT to recipe and
    package data
  buildhistory.bbclass: add BUILDHISTORY_FORCE_UPDATE option
  acpid.inc: set CVE_PRODUCT to acpid2
  bluez5.inc: set CVE_PRODUCT to bluez
  eglinfo.inc: set CVE_PRODUCT to eglinfo
  flac_1.3.1.bb: set CVE_PRODUCT to libflac
  gcc-common.inc: set CVE_PRODUCT to gcc
  glib.inc: set CVE_PRODUCT to glib
  glibc-common.inc: set CVE_PRODUCT to glibc
  icu.inc: set CVE_PRODUCT to international_components_for_unicode
  libpcre_8.40.bb: set CVE_PRODUCT to prce
  libpcre2_10.23.bb: set CVE_PRODUCT to pcre2
  libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate
  libsndfile1_1.0.28.bb: set CVE_PRODUCT to libsndfile
  nspr_4.14.bb: set CVE_PRODUCT to netscape_portable_runtime
  python.inc: set CVE_PRODUCT to python
  lttng-ust_2.9.1.bb: set CVE_PRODUCT to ust
  quota_4.03.bb: set CVE_PRODUCT to linux_diskquota
  sqlite3.inc: set CVE_PRODUCT to sqlite
  wpa-supplicant_2.6.bb: set CVE_PRODUCT to wpa_supplicant
  cve-check.bbclass: use weak assignment for default CVE_PRODUCT
  kernel.bbclass: set CVE_PRODUCT to linux_kernel if not set by recipe
  cve-check.bbclass: use "+git" as separator in PV instead of "git+"

 meta/classes/buildhistory.bbclass                  | 28 +++++++++++++++++++---
 meta/classes/cve-check.bbclass                     |  4 ++--
 meta/classes/kernel.bbclass                        |  2 ++
 meta/recipes-bsp/acpid/acpid.inc                   |  2 ++
 meta/recipes-connectivity/bluez5/bluez5.inc        |  2 ++
 .../wpa-supplicant/wpa-supplicant_2.6.bb           |  2 ++
 meta/recipes-core/glib-2.0/glib.inc                |  2 ++
 meta/recipes-core/glibc/glibc-common.inc           |  1 +
 meta/recipes-devtools/gcc/gcc-common.inc           |  2 ++
 meta/recipes-devtools/python/python.inc            |  2 ++
 meta/recipes-extended/quota/quota_4.03.bb          |  2 ++
 meta/recipes-graphics/eglinfo/eglinfo.inc          |  2 ++
 meta/recipes-kernel/lttng/lttng-ust_2.9.1.bb       |  2 ++
 meta/recipes-multimedia/flac/flac_1.3.2.bb         |  2 ++
 .../libsamplerate/libsamplerate0_0.1.9.bb          |  2 ++
 .../libsndfile/libsndfile1_1.0.28.bb               |  2 ++
 meta/recipes-support/icu/icu.inc                   |  2 ++
 meta/recipes-support/libpcre/libpcre2_10.23.bb     |  2 ++
 meta/recipes-support/libpcre/libpcre_8.40.bb       |  2 ++
 meta/recipes-support/nspr/nspr_4.14.bb             |  2 ++
 meta/recipes-support/sqlite/sqlite3.inc            |  2 ++
 21 files changed, 64 insertions(+), 5 deletions(-)

-- 
1.9.1




More information about the Openembedded-core mailing list