Bump buildroot to 2019.02
This commit is contained in:
@@ -1,31 +0,0 @@
|
||||
From d16133e3e293fe16b291114d344fbd5a61d5ed65 Mon Sep 17 00:00:00 2001
|
||||
From: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
|
||||
Date: Thu, 20 Jul 2017 19:48:26 -0700
|
||||
Subject: [PATCH] glx: Only include compositeext.h if COMPOSITE is
|
||||
supported
|
||||
|
||||
Regressed-in: ea483af99a6351323afe00a0b630cd63310efdb1
|
||||
Signed-off-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
|
||||
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
|
||||
---
|
||||
glx/glxscreens.c | 3 +++
|
||||
1 file changed, 3 insertions(+)
|
||||
|
||||
diff --git a/glx/glxscreens.c b/glx/glxscreens.c
|
||||
index 78e0aaff9..609661274 100644
|
||||
--- a/glx/glxscreens.c
|
||||
+++ b/glx/glxscreens.c
|
||||
@@ -43,7 +43,10 @@
|
||||
#include "glxutil.h"
|
||||
#include "glxext.h"
|
||||
#include "protocol-versions.h"
|
||||
+
|
||||
+#ifdef COMPOSITE
|
||||
#include "compositeext.h"
|
||||
+#endif
|
||||
|
||||
static DevPrivateKeyRec glxScreenPrivateKeyRec;
|
||||
|
||||
--
|
||||
2.11.0
|
||||
|
||||
@@ -1,52 +0,0 @@
|
||||
From 0ff8977a348c316cd9909b890c48d7f5175a5eba Mon Sep 17 00:00:00 2001
|
||||
From: Matthieu Herrb <matthieu@herrb.eu>
|
||||
Date: Tue, 23 Oct 2018 21:29:08 +0200
|
||||
Subject: [PATCH] Disable -logfile and -modulepath when running with elevated
|
||||
privileges
|
||||
|
||||
Could cause privilege elevation and/or arbitrary files overwrite, when
|
||||
the X server is running with elevated privileges (ie when Xorg is
|
||||
installed with the setuid bit set and started by a non-root user).
|
||||
|
||||
CVE-2018-14665
|
||||
|
||||
Issue reported by Narendra Shinde and Red Hat.
|
||||
|
||||
Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>
|
||||
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
|
||||
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
|
||||
Reviewed-by: Adam Jackson <ajax@redhat.com>
|
||||
(cherry picked from commit 50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e)
|
||||
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
|
||||
---
|
||||
hw/xfree86/common/xf86Init.c | 8 ++++++--
|
||||
1 file changed, 6 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/hw/xfree86/common/xf86Init.c b/hw/xfree86/common/xf86Init.c
|
||||
index d59c224d5..183158c21 100644
|
||||
--- a/hw/xfree86/common/xf86Init.c
|
||||
+++ b/hw/xfree86/common/xf86Init.c
|
||||
@@ -1135,14 +1135,18 @@ ddxProcessArgument(int argc, char **argv, int i)
|
||||
/* First the options that are not allowed with elevated privileges */
|
||||
if (!strcmp(argv[i], "-modulepath")) {
|
||||
CHECK_FOR_REQUIRED_ARGUMENT();
|
||||
- xf86CheckPrivs(argv[i], argv[i + 1]);
|
||||
+ if (xf86PrivsElevated())
|
||||
+ FatalError("\nInvalid argument -modulepath "
|
||||
+ "with elevated privileges\n");
|
||||
xf86ModulePath = argv[i + 1];
|
||||
xf86ModPathFrom = X_CMDLINE;
|
||||
return 2;
|
||||
}
|
||||
if (!strcmp(argv[i], "-logfile")) {
|
||||
CHECK_FOR_REQUIRED_ARGUMENT();
|
||||
- xf86CheckPrivs(argv[i], argv[i + 1]);
|
||||
+ if (xf86PrivsElevated())
|
||||
+ FatalError("\nInvalid argument -logfile "
|
||||
+ "with elevated privileges\n");
|
||||
xf86LogFile = argv[i + 1];
|
||||
xf86LogFileFrom = X_CMDLINE;
|
||||
return 2;
|
||||
--
|
||||
2.11.0
|
||||
|
||||
@@ -3,6 +3,7 @@ http://cgit.freedesktop.org/xorg/xserver/tree/hw/xfree86/drivers/modesetting/Mak
|
||||
|
||||
Patch sent upstream: https://bugs.freedesktop.org/show_bug.cgi?id=91584
|
||||
|
||||
[rebased for version 1.20.0]
|
||||
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
|
||||
|
||||
diff -uNr xorg-server-1.17.2.org/configure.ac xorg-server-1.17.2/configure.ac
|
||||
@@ -14,6 +15,6 @@ diff -uNr xorg-server-1.17.2.org/configure.ac xorg-server-1.17.2/configure.ac
|
||||
|
||||
- if test "x$DRM" = xyes; then
|
||||
+ if test "x$DRM" = xyes -a "x$DRI2" = xyes; then
|
||||
dnl 2.4.46 is required for cursor hotspot support.
|
||||
PKG_CHECK_EXISTS(libdrm >= 2.4.46)
|
||||
XORG_DRIVER_MODESETTING=yes
|
||||
fi
|
||||
|
||||
@@ -0,0 +1,31 @@
|
||||
From 2e8fca00f5bdb02f2f59aaa428d1e9d808ab0e86 Mon Sep 17 00:00:00 2001
|
||||
From: Bernd Kuhls <bernd.kuhls@t-online.de>
|
||||
Date: Sat, 16 Jun 2018 19:20:16 +0200
|
||||
Subject: [PATCH] include/misc.h: fix uClibc build
|
||||
|
||||
A similar fix was used for Dovecot:
|
||||
https://www.dovecot.org/list/dovecot/2017-November/110019.html
|
||||
|
||||
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
|
||||
---
|
||||
include/misc.h | 4 ++++
|
||||
1 file changed, 4 insertions(+)
|
||||
|
||||
diff --git a/include/misc.h b/include/misc.h
|
||||
index 14920c3c3..390e52b60 100644
|
||||
--- a/include/misc.h
|
||||
+++ b/include/misc.h
|
||||
@@ -185,6 +185,10 @@ typedef struct _xReq *xReqPtr;
|
||||
#endif
|
||||
#endif
|
||||
|
||||
+#undef bswap_16
|
||||
+#undef bswap_32
|
||||
+#undef bswap_64
|
||||
+
|
||||
/**
|
||||
* Calculate the number of bytes needed to hold bits.
|
||||
* @param bits The minimum number of bits needed.
|
||||
--
|
||||
2.17.1
|
||||
|
||||
@@ -32,27 +32,9 @@ config BR2_PACKAGE_XSERVER_XORG_SERVER
|
||||
select BR2_PACKAGE_XLIB_LIBXKBFILE
|
||||
select BR2_PACKAGE_XLIB_XTRANS
|
||||
select BR2_PACKAGE_XDATA_XBITMAPS
|
||||
select BR2_PACKAGE_XPROTO_BIGREQSPROTO
|
||||
select BR2_PACKAGE_XPROTO_COMPOSITEPROTO
|
||||
select BR2_PACKAGE_XPROTO_DAMAGEPROTO
|
||||
select BR2_PACKAGE_XPROTO_FIXESPROTO
|
||||
select BR2_PACKAGE_XPROTO_FONTSPROTO
|
||||
select BR2_PACKAGE_XPROTO_GLPROTO
|
||||
select BR2_PACKAGE_XPROTO_INPUTPROTO
|
||||
select BR2_PACKAGE_XPROTO_KBPROTO
|
||||
select BR2_PACKAGE_XPROTO_RANDRPROTO
|
||||
select BR2_PACKAGE_XPROTO_RENDERPROTO
|
||||
select BR2_PACKAGE_XPROTO_RESOURCEPROTO
|
||||
select BR2_PACKAGE_XPROTO_VIDEOPROTO
|
||||
select BR2_PACKAGE_XPROTO_XCMISCPROTO
|
||||
select BR2_PACKAGE_XPROTO_XEXTPROTO
|
||||
select BR2_PACKAGE_XPROTO_XF86BIGFONTPROTO
|
||||
select BR2_PACKAGE_XPROTO_XF86DGAPROTO
|
||||
select BR2_PACKAGE_XPROTO_XF86VIDMODEPROTO
|
||||
select BR2_PACKAGE_XPROTO_XPROTO
|
||||
select BR2_PACKAGE_XORGPROTO
|
||||
select BR2_PACKAGE_XUTIL_UTIL_MACROS
|
||||
select BR2_PACKAGE_XKEYBOARD_CONFIG
|
||||
select BR2_PACKAGE_XPROTO_DRI2PROTO if BR2_PACKAGE_SYSTEMD
|
||||
help
|
||||
X.Org X server
|
||||
|
||||
@@ -66,29 +48,27 @@ config BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_14
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_19
|
||||
bool
|
||||
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_23
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_24
|
||||
bool
|
||||
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI
|
||||
int
|
||||
default 14 if BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_14
|
||||
default 19 if BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_19
|
||||
default 23 if BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_23
|
||||
default 24 if BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_24
|
||||
|
||||
choice
|
||||
bool "X Window System server version"
|
||||
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_19
|
||||
bool "1.19.6"
|
||||
select BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_23
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_20
|
||||
bool "1.20.3"
|
||||
select BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_24
|
||||
select BR2_PACKAGE_XLIB_LIBXFONT2
|
||||
select BR2_PACKAGE_XPROTO_PRESENTPROTO
|
||||
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_17
|
||||
bool "1.17.4"
|
||||
select BR2_PACKAGE_XSERVER_XORG_SERVER_VIDEODRV_ABI_19
|
||||
select BR2_PACKAGE_XLIB_LIBXFONT
|
||||
select BR2_PACKAGE_XPROTO_PRESENTPROTO
|
||||
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_14
|
||||
bool "1.14.7"
|
||||
@@ -99,7 +79,7 @@ endchoice
|
||||
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_VERSION
|
||||
string
|
||||
default "1.19.6" if BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_19
|
||||
default "1.20.3" if BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_20
|
||||
default "1.17.4" if BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_17
|
||||
default "1.14.7" if BR2_PACKAGE_XSERVER_XORG_SERVER_V_1_14
|
||||
|
||||
@@ -111,11 +91,9 @@ choice
|
||||
config BR2_PACKAGE_XSERVER_XORG_SERVER_MODULAR
|
||||
bool "Modular X.org"
|
||||
depends on BR2_INSTALL_LIBSTDCPP
|
||||
select BR2_PACKAGE_LIBDRM if (BR2_PACKAGE_XPROTO_XF86DRIPROTO || \
|
||||
BR2_PACKAGE_XPROTO_DRI2PROTO)
|
||||
select BR2_PACKAGE_LIBDRM
|
||||
select BR2_PACKAGE_LIBPCIACCESS
|
||||
select BR2_PACKAGE_XLIB_LIBXSHMFENCE if \
|
||||
(BR2_PACKAGE_XPROTO_DRI3PROTO && BR2_TOOLCHAIN_HAS_SYNC_4)
|
||||
select BR2_PACKAGE_XLIB_LIBXSHMFENCE if BR2_TOOLCHAIN_HAS_SYNC_4
|
||||
help
|
||||
This variant of the X.org server is the full-blown variant,
|
||||
as used by desktop GNU/Linux distributions. The drivers (for
|
||||
|
||||
46
bsp/buildroot/package/x11r7/xserver_xorg-server/S40xorg
Normal file
46
bsp/buildroot/package/x11r7/xserver_xorg-server/S40xorg
Normal file
@@ -0,0 +1,46 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# Starts Xorg
|
||||
#
|
||||
|
||||
BIN=/usr/bin/Xorg
|
||||
PIDFILE=/var/run/xorg.pid
|
||||
|
||||
# ":0.0 vt01" makes sure Xorg finds the correct terminal.
|
||||
# -allowMouseOpenFail allows the server to start up even if the mouse device
|
||||
# can't be opened or initialised.
|
||||
# -noreset prevents a server reset when the last client connection is closed.
|
||||
XORG_ARGS=":0.0 vt01 -s 0 -noreset -allowMouseOpenFail"
|
||||
|
||||
start() {
|
||||
printf "Starting Xorg: "
|
||||
start-stop-daemon -S -q -b -m -p $PIDFILE --exec $BIN -- $XORG_ARGS
|
||||
[ $? = 0 ] && sleep 3 && echo "OK" || echo "FAIL"
|
||||
}
|
||||
|
||||
stop() {
|
||||
printf "Stopping Xorg: "
|
||||
start-stop-daemon -K -q -p $PIDFILE
|
||||
[ $? = 0 ] && echo "OK" || echo "FAIL"
|
||||
}
|
||||
|
||||
restart() {
|
||||
stop
|
||||
sleep 2
|
||||
start
|
||||
}
|
||||
|
||||
case "$1" in
|
||||
start)
|
||||
start
|
||||
;;
|
||||
stop)
|
||||
stop
|
||||
;;
|
||||
restart|reload)
|
||||
restart
|
||||
;;
|
||||
*)
|
||||
echo "Usage: $0 {start|stop|restart}"
|
||||
exit 1
|
||||
esac
|
||||
@@ -3,8 +3,8 @@ sha1 7a95765e56b124758fcd7b609589e65b8870880b x
|
||||
sha256 fcf66fa6ad86227613d2d3e8ae13ded297e2a1e947e9060a083eaf80d323451f xorg-server-1.14.7.tar.bz2
|
||||
# From https://lists.x.org/archives/xorg-announce/2015-October/002650.html
|
||||
sha256 0c4b45c116a812a996eb432d8508cf26c2ec8c3916ff2a50781796882f8d6457 xorg-server-1.17.4.tar.bz2
|
||||
# From https://lists.x.org/archives/xorg-announce/2017-December/002830.html
|
||||
md5 3e47777ff034a331aed2322b078694a8 xorg-server-1.19.6.tar.bz2
|
||||
sha1 2dd560ac49bdbda7f67166546af43541fabf517f xorg-server-1.19.6.tar.bz2
|
||||
sha256 a732502f1db000cf36a376cd0c010ffdbf32ecdd7f1fa08ba7f5bdf9601cc197 xorg-server-1.19.6.tar.bz2
|
||||
sha512 38519a8d0af9dd034045fc346959496dd718fa59b6188307974797a1cd9c349deb54987f6232ea8396baf810dcc710c0ff191f76ed2186cae4d44921b3680412 xorg-server-1.19.6.tar.bz2
|
||||
# From https://lists.x.org/archives/xorg-announce/2018-October/002928.html
|
||||
md5 8ee29e8b24cef6b3cfa747ec01b9155a xorg-server-1.20.3.tar.bz2
|
||||
sha1 a522cd543606b4d0509d821b8061904951171c50 xorg-server-1.20.3.tar.bz2
|
||||
sha256 1b3ce466c12cacbe2252b3ad5b0ed561972eef9d09e75900d65fb1e21f9201de xorg-server-1.20.3.tar.bz2
|
||||
sha512 ee44554f86df4297f54c5871fe7a18954eeef4338775a25f36d6577b279c4775f61128da71b86cfaeadcc080838d6749dede138d4db178866579da2056543fba xorg-server-1.20.3.tar.bz2
|
||||
|
||||
@@ -32,24 +32,7 @@ XSERVER_XORG_SERVER_DEPENDENCIES = \
|
||||
xlib_libxkbfile \
|
||||
xlib_xtrans \
|
||||
xdata_xbitmaps \
|
||||
xproto_bigreqsproto \
|
||||
xproto_compositeproto \
|
||||
xproto_damageproto \
|
||||
xproto_fixesproto \
|
||||
xproto_fontsproto \
|
||||
xproto_glproto \
|
||||
xproto_inputproto \
|
||||
xproto_kbproto \
|
||||
xproto_randrproto \
|
||||
xproto_renderproto \
|
||||
xproto_resourceproto \
|
||||
xproto_videoproto \
|
||||
xproto_xcmiscproto \
|
||||
xproto_xextproto \
|
||||
xproto_xf86bigfontproto \
|
||||
xproto_xf86dgaproto \
|
||||
xproto_xf86vidmodeproto \
|
||||
xproto_xproto \
|
||||
xorgproto \
|
||||
xkeyboard-config \
|
||||
pixman \
|
||||
mcookie \
|
||||
@@ -60,6 +43,7 @@ XSERVER_XORG_SERVER_DEPENDENCIES = \
|
||||
# -Os on several architectures.
|
||||
XSERVER_XORG_SERVER_CONF_OPTS = \
|
||||
--disable-config-hal \
|
||||
--enable-record \
|
||||
--disable-xnest \
|
||||
--disable-xephyr \
|
||||
--disable-dmx \
|
||||
@@ -73,8 +57,7 @@ XSERVER_XORG_SERVER_CONF_OPTS += \
|
||||
--with-systemd-daemon \
|
||||
--enable-systemd-logind
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += \
|
||||
systemd \
|
||||
xproto_dri2proto
|
||||
systemd
|
||||
else
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += \
|
||||
--without-systemd-daemon \
|
||||
@@ -89,12 +72,6 @@ else
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --disable-xwayland
|
||||
endif
|
||||
|
||||
# Present protocol only required for xserver 1.15+, but does not matter if
|
||||
# enabled for older versions as they don't use it (not even optionally).
|
||||
ifeq ($(BR2_PACKAGE_XPROTO_PRESENTPROTO),y)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += xproto_presentproto
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_XSERVER_XORG_SERVER_MODULAR),y)
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --enable-xorg
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += libpciaccess
|
||||
@@ -144,7 +121,7 @@ endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_MESA3D_DRI_DRIVER),y)
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --enable-dri --enable-glx
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += mesa3d xproto_xf86driproto
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += mesa3d
|
||||
else
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --disable-dri --disable-glx
|
||||
endif
|
||||
@@ -165,7 +142,7 @@ ifeq ($(BR2_PACKAGE_HAS_UDEV),y)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += udev
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --enable-config-udev
|
||||
# udev kms support depends on libdrm and dri2
|
||||
ifeq ($(BR2_PACKAGE_LIBDRM)$(BR2_PACKAGE_XPROTO_DRI2PROTO),yy)
|
||||
ifeq ($(BR2_PACKAGE_LIBDRM),y)
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --enable-config-udev-kms
|
||||
else
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --disable-config-udev-kms
|
||||
@@ -188,13 +165,6 @@ else
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --disable-libunwind
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_XPROTO_RECORDPROTO),y)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += xproto_recordproto
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --enable-record
|
||||
else
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --disable-record
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_XLIB_LIBXFONT2),y)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += xlib_libXfont2
|
||||
endif
|
||||
@@ -214,14 +184,9 @@ XSERVER_XORG_SERVER_CONF_OPTS += --disable-composite
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_XSERVER_XORG_SERVER_MODULAR),y)
|
||||
ifeq ($(BR2_PACKAGE_XPROTO_DRI2PROTO),y)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += xproto_dri2proto
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --enable-dri2
|
||||
else
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --disable-dri2
|
||||
endif
|
||||
ifeq ($(BR2_PACKAGE_XLIB_LIBXSHMFENCE)$(BR2_PACKAGE_XPROTO_DRI3PROTO),yy)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += xlib_libxshmfence xproto_dri3proto
|
||||
ifeq ($(BR2_PACKAGE_XLIB_LIBXSHMFENCE),y)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += xlib_libxshmfence
|
||||
XSERVER_XORG_SERVER_CONF_OPTS += --enable-dri3
|
||||
ifeq ($(BR2_PACKAGE_HAS_LIBEGL)$(BR2_PACKAGE_HAS_LIBGL)$(BR2_PACKAGE_LIBEPOXY),yyy)
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += libepoxy
|
||||
@@ -258,4 +223,9 @@ XSERVER_XORG_SERVER_CONF_OPTS += --with-sha1=libsha1
|
||||
XSERVER_XORG_SERVER_DEPENDENCIES += libsha1
|
||||
endif
|
||||
|
||||
define XSERVER_XORG_SERVER_INSTALL_INIT_SYSV
|
||||
$(INSTALL) -D -m 755 package/x11r7/xserver_xorg-server/S40xorg \
|
||||
$(TARGET_DIR)/etc/init.d/S40xorg
|
||||
endef
|
||||
|
||||
$(eval $(autotools-package))
|
||||
|
||||
Reference in New Issue
Block a user