diff mbox

bash: Fix build with clang+security flags

Message ID 20160826173423.31040-1-raj.khem@gmail.com
State New
Headers show

Commit Message

Khem Raj Aug. 26, 2016, 5:34 p.m. UTC 
Signed-off-by: Khem Raj <raj.khem@gmail.com>

---
 ...1-help-fix-printf-format-security-warning.patch | 223 ++++++++++++++++++++-
 meta/recipes-extended/bash/bash_4.3.30.bb          |   2 +
 2 files changed, 218 insertions(+), 7 deletions(-)

-- 
2.9.3

-- 
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Comments

Khem Raj Aug. 26, 2016, 5:41 p.m. UTC | #1 
ignore it

> On Aug 26, 2016, at 10:34 AM, Khem Raj <raj.khem@gmail.com> wrote:

> 

> Signed-off-by: Khem Raj <raj.khem@gmail.com>

> ---

> ...1-help-fix-printf-format-security-warning.patch | 223 ++++++++++++++++++++-

> meta/recipes-extended/bash/bash_4.3.30.bb          |   2 +

> 2 files changed, 218 insertions(+), 7 deletions(-)

> 

> diff --git a/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch b/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch

> index 5405c84..516debb 100644

> --- a/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch

> +++ b/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch

> @@ -17,10 +17,10 @@ Upstream-Status: Pending

>  builtins/help.def | 2 +-

>  1 file changed, 1 insertion(+), 1 deletion(-)

> 

> -diff --git a/builtins/help.def b/builtins/help.def

> -index 1894f17..cf624c6 100644

> ---- a/builtins/help.def

> -+++ b/builtins/help.def

> +Index: bash-4.3.30/builtins/help.def

> +===================================================================

> +--- bash-4.3.30.orig/builtins/help.def

> ++++ bash-4.3.30/builtins/help.def

> @@ -127,7 +127,7 @@ help_builtin (list)

> 

>    if (glob_pattern_p (list->word->word))

> @@ -30,6 +30,215 @@ index 1894f17..cf624c6 100644

>        print_word_list (list, ", ");

>        printf ("'\n\n");

>      }

> ---

> -2.8.1

> -

> +Index: bash-4.3.30/shell.c

> +===================================================================

> +--- bash-4.3.30.orig/shell.c

> ++++ bash-4.3.30/shell.c

> +@@ -1864,7 +1864,7 @@ show_shell_usage (fp, extra)

> +     {

> +       fprintf (fp, _("Type `%s -c \"help set\"' for more information about shell options.\n"), shell_name);

> +       fprintf (fp, _("Type `%s -c help' for more information about shell builtin commands.\n"), shell_name);

> +-      fprintf (fp, _("Use the `bashbug' command to report bugs.\n"));

> ++      fprintf (fp, "%s", _("Use the `bashbug' command to report bugs.\n"));

> +     }

> + }

> +

> +Index: bash-4.3.30/error.c

> +===================================================================

> +--- bash-4.3.30.orig/error.c

> ++++ bash-4.3.30/error.c

> +@@ -170,7 +170,7 @@ programming_error (format, va_alist)

> +   fprintf (stderr, "Report this to %s\n", the_current_maintainer);

> + #endif

> +

> +-  fprintf (stderr, _("Aborting..."));

> ++  fprintf (stderr, "%s", _("Aborting..."));

> +   fflush (stderr);

> +

> +   abort ();

> +@@ -262,12 +262,12 @@ internal_warning (format, va_alist)

> +   va_list args;

> +

> +   error_prolog (1);

> +-  fprintf (stderr, _("warning: "));

> ++  fprintf (stderr, "%s", _("warning: "));

> +

> +   SH_VA_START (args, format);

> +

> +   vfprintf (stderr, format, args);

> +-  fprintf (stderr, "\n");

> ++  fprintf (stderr, "%s", "\n");

> +

> +   va_end (args);

> + }

> +Index: bash-4.3.30/eval.c

> +===================================================================

> +--- bash-4.3.30.orig/eval.c

> ++++ bash-4.3.30/eval.c

> +@@ -186,7 +186,7 @@ static sighandler

> + alrm_catcher(i)

> +      int i;

> + {

> +-  printf (_("\007timed out waiting for input: auto-logout\n"));

> ++  printf ("%s", _("\007timed out waiting for input: auto-logout\n"));

> +   fflush (stdout);

> +   bash_logout ();	/* run ~/.bash_logout if this is a login shell */

> +   jump_to_top_level (EXITPROG);

> +Index: bash-4.3.30/execute_cmd.c

> +===================================================================

> +--- bash-4.3.30.orig/execute_cmd.c

> ++++ bash-4.3.30/execute_cmd.c

> +@@ -2284,7 +2284,7 @@ execute_pipeline (command, asynchronous,

> +       /* Make a pipeline between the two commands. */

> +       if (pipe (fildes) < 0)

> + 	{

> +-	  sys_error (_("pipe error"));

> ++	  sys_error ("%s", _("pipe error"));

> + #if defined (JOB_CONTROL)

> + 	  terminate_current_pipeline ();

> + 	  kill_current_pipeline ();

> +Index: bash-4.3.30/make_cmd.c

> +===================================================================

> +--- bash-4.3.30.orig/make_cmd.c

> ++++ bash-4.3.30/make_cmd.c

> +@@ -320,9 +320,9 @@ make_arith_for_command (exprs, action, l

> +   if (nsemi != 3)

> +     {

> +       if (nsemi < 3)

> +-	parser_error (lineno, _("syntax error: arithmetic expression required"));

> ++	parser_error (lineno, "%s", _("syntax error: arithmetic expression required"));

> +       else

> +-	parser_error (lineno, _("syntax error: `;' unexpected"));

> ++	parser_error (lineno, "%s", _("syntax error: `;' unexpected"));

> +       parser_error (lineno, _("syntax error: `((%s))'"), exprs->word->word);

> +       free (init);

> +       free (test);

> +Index: bash-4.3.30/parse.y

> +===================================================================

> +--- bash-4.3.30.orig/parse.y

> ++++ bash-4.3.30/parse.y

> +@@ -4204,7 +4204,7 @@ cond_error ()

> +   char *etext;

> +

> +   if (EOF_Reached && cond_token != COND_ERROR)		/* [[ */

> +-    parser_error (cond_lineno, _("unexpected EOF while looking for `]]'"));

> ++    parser_error (cond_lineno, "%s", _("unexpected EOF while looking for `]]'"));

> +   else if (cond_token != COND_ERROR)

> +     {

> +       if (etext = error_token_from_token (cond_token))

> +@@ -4213,7 +4213,7 @@ cond_error ()

> + 	  free (etext);

> + 	}

> +       else

> +-	parser_error (cond_lineno, _("syntax error in conditional expression"));

> ++	parser_error (cond_lineno, "%s", _("syntax error in conditional expression"));

> +     }

> + }

> +

> +@@ -4295,7 +4295,7 @@ cond_term ()

> + 	      free (etext);

> + 	    }

> + 	  else

> +-	    parser_error (lineno, _("expected `)'"));

> ++	    parser_error (lineno, "%s",  _("expected `)'"));

> + 	  COND_RETURN_ERROR ();

> + 	}

> +       term = make_cond_node (COND_EXPR, (WORD_DESC *)NULL, term, (COND_COM *)NULL);

> +@@ -4327,7 +4327,7 @@ cond_term ()

> + 	      free (etext);

> + 	    }

> + 	  else

> +-	    parser_error (line_number, _("unexpected argument to conditional unary operator"));

> ++	    parser_error (line_number, "%s", _("unexpected argument to conditional unary operator"));

> + 	  COND_RETURN_ERROR ();

> + 	}

> +

> +@@ -4377,7 +4377,7 @@ cond_term ()

> + 	      free (etext);

> + 	    }

> + 	  else

> +-	    parser_error (line_number, _("conditional binary operator expected"));

> ++	    parser_error (line_number, "%s", _("conditional binary operator expected"));

> + 	  dispose_cond_node (tleft);

> + 	  COND_RETURN_ERROR ();

> + 	}

> +@@ -4403,7 +4403,7 @@ cond_term ()

> + 	      free (etext);

> + 	    }

> + 	  else

> +-	    parser_error (line_number, _("unexpected argument to conditional binary operator"));

> ++	    parser_error (line_number, "%s", _("unexpected argument to conditional binary operator"));

> + 	  dispose_cond_node (tleft);

> + 	  dispose_word (op);

> + 	  COND_RETURN_ERROR ();

> +@@ -6023,7 +6023,7 @@ parse_compound_assignment (retlenp)

> + 	{

> + 	  current_token = tok;	/* for error reporting */

> + 	  if (tok == yacc_EOF)	/* ( */

> +-	    parser_error (orig_line_number, _("unexpected EOF while looking for matching `)'"));

> ++	    parser_error (orig_line_number, "%s", _("unexpected EOF while looking for matching `)'"));

> + 	  else

> + 	    yyerror(NULL);	/* does the right thing */

> + 	  if (wl)

> +Index: bash-4.3.30/print_cmd.c

> +===================================================================

> +--- bash-4.3.30.orig/print_cmd.c

> ++++ bash-4.3.30/print_cmd.c

> +@@ -375,7 +375,7 @@ xtrace_set (fd, fp)

> +     }

> +   if (fp == 0)

> +     {

> +-      internal_error (_("xtrace_set: NULL file pointer"));

> ++      internal_error ("%s", _("xtrace_set: NULL file pointer"));

> +       return;

> +     }

> +   if (fd >= 0 && fileno (fp) != fd)

> +Index: bash-4.3.30/variables.c

> +===================================================================

> +--- bash-4.3.30.orig/variables.c

> ++++ bash-4.3.30/variables.c

> +@@ -2237,7 +2237,7 @@ make_local_variable (name)

> +

> +   if (vc == 0)

> +     {

> +-      internal_error (_("make_local_variable: no function context at current scope"));

> ++      internal_error ("%s", _("make_local_variable: no function context at current scope"));

> +       return ((SHELL_VAR *)NULL);

> +     }

> +   else if (vc->table == 0)

> +@@ -3685,7 +3685,7 @@ all_local_variables ()

> +

> +   if (vc == 0)

> +     {

> +-      internal_error (_("all_local_variables: no function context at current scope"));

> ++      internal_error ("%s", _("all_local_variables: no function context at current scope"));

> +       return (SHELL_VAR **)NULL;

> +     }

> +   if (vc->table == 0 || HASH_ENTRIES (vc->table) == 0 || vc_haslocals (vc) == 0)

> +@@ -4404,7 +4404,7 @@ pop_var_context ()

> +   vcxt = shell_variables;

> +   if (vc_isfuncenv (vcxt) == 0)

> +     {

> +-      internal_error (_("pop_var_context: head of shell_variables not a function context"));

> ++      internal_error ("%s", _("pop_var_context: head of shell_variables not a function context"));

> +       return;

> +     }

> +

> +@@ -4417,7 +4417,7 @@ pop_var_context ()

> +       dispose_var_context (vcxt);

> +     }

> +   else

> +-    internal_error (_("pop_var_context: no global_variables context"));

> ++    internal_error ("%s", _("pop_var_context: no global_variables context"));

> + }

> +

> + /* Delete the HASH_TABLEs for all variable contexts beginning at VCXT, and

> +@@ -4491,7 +4491,7 @@ pop_scope (is_special)

> +   vcxt = shell_variables;

> +   if (vc_istempscope (vcxt) == 0)

> +     {

> +-      internal_error (_("pop_scope: head of shell_variables not a temporary environment scope"));

> ++      internal_error ("%s", _("pop_scope: head of shell_variables not a temporary environment scope"));

> +       return;

> +     }

> +

> diff --git a/meta/recipes-extended/bash/bash_4.3.30.bb b/meta/recipes-extended/bash/bash_4.3.30.bb

> index 765562f..4a1b181 100644

> --- a/meta/recipes-extended/bash/bash_4.3.30.bb

> +++ b/meta/recipes-extended/bash/bash_4.3.30.bb

> @@ -69,3 +69,5 @@ SRC_URI[patch046.md5sum] = "7e5fb09991c077076b86e0e057798913"

> SRC_URI[patch046.sha256sum] = "b3b456a6b690cd293353f17e22d92a202b3c8bce587ae5f2667c20c9ab6f688f"

> 

> BBCLASSEXTEND = "nativesdk"

> +

> +TOOLCHAIN = "gcc"

> --

> 2.9.3

>
-- 
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core
diff mbox

Patch

diff --git a/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch b/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch
index 5405c84..516debb 100644
--- a/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch
+++ b/meta/recipes-extended/bash/bash/0001-help-fix-printf-format-security-warning.patch
@@ -17,10 +17,10 @@  Upstream-Status: Pending
  builtins/help.def | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-diff --git a/builtins/help.def b/builtins/help.def
-index 1894f17..cf624c6 100644
---- a/builtins/help.def
-+++ b/builtins/help.def
+Index: bash-4.3.30/builtins/help.def
+===================================================================
+--- bash-4.3.30.orig/builtins/help.def
++++ bash-4.3.30/builtins/help.def
 @@ -127,7 +127,7 @@ help_builtin (list)
  
    if (glob_pattern_p (list->word->word))
@@ -30,6 +30,215 @@  index 1894f17..cf624c6 100644
        print_word_list (list, ", ");
        printf ("'\n\n");
      }
--- 
-2.8.1
-
+Index: bash-4.3.30/shell.c
+===================================================================
+--- bash-4.3.30.orig/shell.c
++++ bash-4.3.30/shell.c
+@@ -1864,7 +1864,7 @@ show_shell_usage (fp, extra)
+     {
+       fprintf (fp, _("Type `%s -c \"help set\"' for more information about shell options.\n"), shell_name);
+       fprintf (fp, _("Type `%s -c help' for more information about shell builtin commands.\n"), shell_name);
+-      fprintf (fp, _("Use the `bashbug' command to report bugs.\n"));
++      fprintf (fp, "%s", _("Use the `bashbug' command to report bugs.\n"));
+     }
+ }
+ 
+Index: bash-4.3.30/error.c
+===================================================================
+--- bash-4.3.30.orig/error.c
++++ bash-4.3.30/error.c
+@@ -170,7 +170,7 @@ programming_error (format, va_alist)
+   fprintf (stderr, "Report this to %s\n", the_current_maintainer);
+ #endif
+ 
+-  fprintf (stderr, _("Aborting..."));
++  fprintf (stderr, "%s", _("Aborting..."));
+   fflush (stderr);
+ 
+   abort ();
+@@ -262,12 +262,12 @@ internal_warning (format, va_alist)
+   va_list args;
+ 
+   error_prolog (1);
+-  fprintf (stderr, _("warning: "));
++  fprintf (stderr, "%s", _("warning: "));
+ 
+   SH_VA_START (args, format);
+ 
+   vfprintf (stderr, format, args);
+-  fprintf (stderr, "\n");
++  fprintf (stderr, "%s", "\n");
+ 
+   va_end (args);
+ }
+Index: bash-4.3.30/eval.c
+===================================================================
+--- bash-4.3.30.orig/eval.c
++++ bash-4.3.30/eval.c
+@@ -186,7 +186,7 @@ static sighandler
+ alrm_catcher(i)
+      int i;
+ {
+-  printf (_("\007timed out waiting for input: auto-logout\n"));
++  printf ("%s", _("\007timed out waiting for input: auto-logout\n"));
+   fflush (stdout);
+   bash_logout ();	/* run ~/.bash_logout if this is a login shell */
+   jump_to_top_level (EXITPROG);
+Index: bash-4.3.30/execute_cmd.c
+===================================================================
+--- bash-4.3.30.orig/execute_cmd.c
++++ bash-4.3.30/execute_cmd.c
+@@ -2284,7 +2284,7 @@ execute_pipeline (command, asynchronous,
+       /* Make a pipeline between the two commands. */
+       if (pipe (fildes) < 0)
+ 	{
+-	  sys_error (_("pipe error"));
++	  sys_error ("%s", _("pipe error"));
+ #if defined (JOB_CONTROL)
+ 	  terminate_current_pipeline ();
+ 	  kill_current_pipeline ();
+Index: bash-4.3.30/make_cmd.c
+===================================================================
+--- bash-4.3.30.orig/make_cmd.c
++++ bash-4.3.30/make_cmd.c
+@@ -320,9 +320,9 @@ make_arith_for_command (exprs, action, l
+   if (nsemi != 3)
+     {
+       if (nsemi < 3)
+-	parser_error (lineno, _("syntax error: arithmetic expression required"));
++	parser_error (lineno, "%s", _("syntax error: arithmetic expression required"));
+       else
+-	parser_error (lineno, _("syntax error: `;' unexpected"));
++	parser_error (lineno, "%s", _("syntax error: `;' unexpected"));
+       parser_error (lineno, _("syntax error: `((%s))'"), exprs->word->word);
+       free (init);
+       free (test);
+Index: bash-4.3.30/parse.y
+===================================================================
+--- bash-4.3.30.orig/parse.y
++++ bash-4.3.30/parse.y
+@@ -4204,7 +4204,7 @@ cond_error ()
+   char *etext;
+ 
+   if (EOF_Reached && cond_token != COND_ERROR)		/* [[ */
+-    parser_error (cond_lineno, _("unexpected EOF while looking for `]]'"));
++    parser_error (cond_lineno, "%s", _("unexpected EOF while looking for `]]'"));
+   else if (cond_token != COND_ERROR)
+     {
+       if (etext = error_token_from_token (cond_token))
+@@ -4213,7 +4213,7 @@ cond_error ()
+ 	  free (etext);
+ 	}
+       else
+-	parser_error (cond_lineno, _("syntax error in conditional expression"));
++	parser_error (cond_lineno, "%s", _("syntax error in conditional expression"));
+     }
+ }
+ 
+@@ -4295,7 +4295,7 @@ cond_term ()
+ 	      free (etext);
+ 	    }
+ 	  else
+-	    parser_error (lineno, _("expected `)'"));
++	    parser_error (lineno, "%s",  _("expected `)'"));
+ 	  COND_RETURN_ERROR ();
+ 	}
+       term = make_cond_node (COND_EXPR, (WORD_DESC *)NULL, term, (COND_COM *)NULL);
+@@ -4327,7 +4327,7 @@ cond_term ()
+ 	      free (etext);
+ 	    }
+ 	  else
+-	    parser_error (line_number, _("unexpected argument to conditional unary operator"));
++	    parser_error (line_number, "%s", _("unexpected argument to conditional unary operator"));
+ 	  COND_RETURN_ERROR ();
+ 	}
+ 
+@@ -4377,7 +4377,7 @@ cond_term ()
+ 	      free (etext);
+ 	    }
+ 	  else
+-	    parser_error (line_number, _("conditional binary operator expected"));
++	    parser_error (line_number, "%s", _("conditional binary operator expected"));
+ 	  dispose_cond_node (tleft);
+ 	  COND_RETURN_ERROR ();
+ 	}
+@@ -4403,7 +4403,7 @@ cond_term ()
+ 	      free (etext);
+ 	    }
+ 	  else
+-	    parser_error (line_number, _("unexpected argument to conditional binary operator"));
++	    parser_error (line_number, "%s", _("unexpected argument to conditional binary operator"));
+ 	  dispose_cond_node (tleft);
+ 	  dispose_word (op);
+ 	  COND_RETURN_ERROR ();
+@@ -6023,7 +6023,7 @@ parse_compound_assignment (retlenp)
+ 	{
+ 	  current_token = tok;	/* for error reporting */
+ 	  if (tok == yacc_EOF)	/* ( */
+-	    parser_error (orig_line_number, _("unexpected EOF while looking for matching `)'"));
++	    parser_error (orig_line_number, "%s", _("unexpected EOF while looking for matching `)'"));
+ 	  else
+ 	    yyerror(NULL);	/* does the right thing */
+ 	  if (wl)
+Index: bash-4.3.30/print_cmd.c
+===================================================================
+--- bash-4.3.30.orig/print_cmd.c
++++ bash-4.3.30/print_cmd.c
+@@ -375,7 +375,7 @@ xtrace_set (fd, fp)
+     }
+   if (fp == 0)
+     {
+-      internal_error (_("xtrace_set: NULL file pointer"));
++      internal_error ("%s", _("xtrace_set: NULL file pointer"));
+       return;
+     }
+   if (fd >= 0 && fileno (fp) != fd)
+Index: bash-4.3.30/variables.c
+===================================================================
+--- bash-4.3.30.orig/variables.c
++++ bash-4.3.30/variables.c
+@@ -2237,7 +2237,7 @@ make_local_variable (name)
+ 
+   if (vc == 0)
+     {
+-      internal_error (_("make_local_variable: no function context at current scope"));
++      internal_error ("%s", _("make_local_variable: no function context at current scope"));
+       return ((SHELL_VAR *)NULL);
+     }
+   else if (vc->table == 0)
+@@ -3685,7 +3685,7 @@ all_local_variables ()
+ 
+   if (vc == 0)
+     {
+-      internal_error (_("all_local_variables: no function context at current scope"));
++      internal_error ("%s", _("all_local_variables: no function context at current scope"));
+       return (SHELL_VAR **)NULL;
+     }
+   if (vc->table == 0 || HASH_ENTRIES (vc->table) == 0 || vc_haslocals (vc) == 0)
+@@ -4404,7 +4404,7 @@ pop_var_context ()
+   vcxt = shell_variables;
+   if (vc_isfuncenv (vcxt) == 0)
+     {
+-      internal_error (_("pop_var_context: head of shell_variables not a function context"));
++      internal_error ("%s", _("pop_var_context: head of shell_variables not a function context"));
+       return;
+     }
+ 
+@@ -4417,7 +4417,7 @@ pop_var_context ()
+       dispose_var_context (vcxt);
+     }
+   else
+-    internal_error (_("pop_var_context: no global_variables context"));
++    internal_error ("%s", _("pop_var_context: no global_variables context"));
+ }
+ 
+ /* Delete the HASH_TABLEs for all variable contexts beginning at VCXT, and
+@@ -4491,7 +4491,7 @@ pop_scope (is_special)
+   vcxt = shell_variables;
+   if (vc_istempscope (vcxt) == 0)
+     {
+-      internal_error (_("pop_scope: head of shell_variables not a temporary environment scope"));
++      internal_error ("%s", _("pop_scope: head of shell_variables not a temporary environment scope"));
+       return;
+     }
+ 
diff --git a/meta/recipes-extended/bash/bash_4.3.30.bb b/meta/recipes-extended/bash/bash_4.3.30.bb
index 765562f..4a1b181 100644
--- a/meta/recipes-extended/bash/bash_4.3.30.bb
+++ b/meta/recipes-extended/bash/bash_4.3.30.bb
@@ -69,3 +69,5 @@  SRC_URI[patch046.md5sum] = "7e5fb09991c077076b86e0e057798913"
 SRC_URI[patch046.sha256sum] = "b3b456a6b690cd293353f17e22d92a202b3c8bce587ae5f2667c20c9ab6f688f"
 
 BBCLASSEXTEND = "nativesdk"
+
+TOOLCHAIN = "gcc"