Revert "sd-device: ignore bind/unbind events for now"
This reverts commit
56c886dc7ed5b2bb0882ba85136f4070545bfc1b.
Fixes #11277 and #11299.
(cherry picked from commit
b261494128e60dd3168e0ea961606ec4f39c5739)
(cherry picked from commit
ff2145bfe5aac524c5870a295293b8e3cc74e27a)
Gbp-Pq: Name Revert-sd-device-ignore-bind-unbind-events-for-now.patch
sd-device: fix segfault when error occurs in device_new_from_{nulstr,strv}()
As devpath may not be set yet.
When debug logging is enabled, log_device_*() calls
sd_device_get_sysname(). So, we should not assume that devpath is always
set.
Fixes #11258.
(cherry picked from commit
18fee12a2d489378a2a9b647db0d0eb8c43f5362)
(cherry picked from commit
9ae73a6273461361eef7e83d48aadee111d6616e)
Gbp-Pq: Name sd-device-fix-segfault-when-error-occurs-in-device_new_fr.patch
libudev-util: make util_replace_whitespace() read only len characters
This effectively reverts
df8ba4fa0e8be1ff7899d08a4b6be0196c8405a0.
Fixes #11264.
(cherry picked from commit
577ab71c58d36bc8577d15f172a306c9c05cd2f4)
(cherry picked from commit
c3712308fc090116e388f395e4a8bb0bd8446ea6)
Gbp-Pq: Name libudev-util-make-util_replace_whitespace-read-only-len-c.patch
Pass separate dev_t var to device_path_parse_major_minor
MIPS/O32's st_rdev member of struct stat is unsigned long, which
is 32bit, while dev_t is defined as 64bit, which make some problems
in device_path_parse_major_minor.
Don't pass st.st_rdev, st_mode to device_path_parse_major_minor,
while pass 2 seperate variables. The result of stat is alos copied
out into these 2 variables. Fixes: #11247
(cherry picked from commit
f5855697aa19fb92637e72ab02e4623abe77f288)
(cherry picked from commit
a0d4edf0e7fe6674c44258a73e0722494d659976)
Gbp-Pq: Name Pass-separate-dev_t-var-to-device_path_parse_major_minor.patch
test-json: check absolute and relative difference in floating point test
The test fails under valgrind, so there was an exception for valgrind.
Unfortunately that check only works when valgrind-devel headers are
available during build. But it is possible to have just valgrind installed,
or simply install it after the build, and then "valgrind test-json" would
fail.
It also seems that even without valgrind, this fails on some arm32 CPUs.
Let's do the usual-style test for absolute and relative differences.
(cherry picked from commit
aa70783f55b369521b94e0985e84bbdaae16b174)
(cherry picked from commit
88938bf95b850849d075d7a6ebe37bb1d9780efe)
Gbp-Pq: Name test-json-check-absolute-and-relative-difference-in-float.patch
Docs: Add Missing Space Between Words
(cherry picked from commit
8d7fac92f07cc662e51dcda7c9f3a322454895c7)
(cherry picked from commit
e60c80a908a2c8c6036e41d083134c9e095aa268)
Gbp-Pq: Name Docs-Add-Missing-Space-Between-Words.patch
ask-password-api: do not call ask_password_keyring() if keyname == NULL
Fixes #11295.
(cherry picked from commit
1f00998c8739ac6adc2b7623cc1e5a8f67d95d7d)
(cherry picked from commit
095a38313daf043413c863634378c8ea7e5f6a09)
Gbp-Pq: Name ask-password-api-do-not-call-ask_password_keyring-if-keyn.patch
udev-event: do not read stdout or stderr if the pipefd is not created
Fixes #11255.
(cherry picked from commit
adeb26c1affd09138bb96a9e25b795d146e64c97)
(cherry picked from commit
32a11a27b69031240beea38260d93e034ea33036)
Gbp-Pq: Name udev-event-do-not-read-stdout-or-stderr-if-the-pipefd-is-.patch
switch-root: fix error message
Fixes #11261.
(cherry picked from commit
a5c67ccc575e6ebf12710cb7df84f65a51c5dc58)
(cherry picked from commit
ebcd154e1df434865d2752efdccbc7737bb28029)
Gbp-Pq: Name switch-root-fix-error-message.patch
core: free lines after reading them
Closes https://github.com/systemd/systemd/issues/11251.
(cherry picked from commit
7334ade4a7e103b1a01d1c8fe1ea7c7a854a1c31)
(cherry picked from commit
5fa79ab2eb900fc58824060e3dcf9508276c9047)
Gbp-Pq: Name core-free-lines-after-reading-them.patch
Do not start server if it is already runnning (#11245)
(cherry picked from commit
7da7340afdd4760fb2dd9d000105c324a77aff4b)
Gbp-Pq: Name Do-not-start-server-if-it-is-already-runnning-11245.patch
systemd (240-6) unstable; urgency=high
* High urgency as this fixes a vulnerability.
[ Felipe Sateler ]
* Reenable pristine-tar in gbp.conf.
The pristine-tar bug has been fixed, so we can use it again.
This reverts commit
9fcfbbf6fea15eacfa3fad74240431c5f2c3300e.
* d/watch: add version mangle to transform -rc to ~rc.
Upstream has started releasing rcs, so let's account for that
* Fix comment about why we disable hwclock.service.
Systemd nowadays doesn't do it itself because the kernel does it on its
own when necessary, and when not, it is not safe to save the hwclock (eg,
there is no certainty the system clock
is correct)
* udev: Backport upstream preventing mass killings when not running under
systemd (Closes: #918764)
[ Dimitri John Ledkov ]
* debian/tests/storage: improve cleanups.
On fast ppc64el machines, cryptsetup start job may not complete by the
time tearDown is executed. In that case stop, causes to simply cancel the
start job without actually cleaning up the dmsetup node. This leads to
failing subsequent test as it no longer starts with a clean device. Thus
ensure the systemd-cryptsetup unit is started, before stopping it.
Also rmmod scsi_debug module at the end, to allow re-running the test in a
loop.
* debian/tests/upstream: Mark TEST-13-NSPAWN-SMOKE as flakey.
* debian/tests/control: add socat to upstream tests for pull #11591
* Blacklist TEST-10-ISSUE-2467 #11706
* debian/tests/storage: fix for LUKS2 and avoid interactive password
prompts.
[ Martin Pitt ]
* udevadm: Fix segfault with subsystem-match containing '/'
(Closes: #919206)
* sd-bus: if we receive an invalid dbus message, ignore and proceed
* sd-bus: enforce a size limit on D-Bus object paths.
This avoids accessing/modifying memory outside of the allocated stack
region by sending specially crafted D-Bus messages with very large object
paths.
Vulnerability discovered by Chris Coulson <chris.coulson@canonical.com>,
patch provided by Riccardo Schirone <rschiron@redhat.com>.
(CVE-2019-6454)
[dgit import unpatched systemd 240-6]