webos-image: db8=139

:Release Notes:
Volume testing,
Notify DB8 about attached/detached media.

:Detailed Notes:
0fe80cf Add volume test
b8b7194 Add status for registerMedia method

:Testing Performed:
MiniBAT, DB8 unit tests.

:QA Notes:

:Issues Addressed:
[BHV-6877] [DB8] Volume testing
[BHV-3659] Notify DB8 about attached/detached media
[BHV-7827] CCC: db8=139

Open-webOS-DCO-1.0-Signed-off-by: Igor Kuksyuk <igor.kuksiuk@lge.com>

Change-Id: If3d2065eb1551bbc05fd0befe979fc9bb45cb66e
Reviewed-on: https://g2g.palm.com/5654
Reviewed-by: DCO Verification
Build: Igor Kuksyuk <igor.kuksiuk@lge.com>
Reviewed-by: Build Verification
Reviewed-by: Igor Kuksyuk <igor.kuksiuk@lge.com>
Tested-by: Igor Kuksyuk <igor.kuksiuk@lge.com>
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
webos-image: libpbnjson=35,v2.7.0

:Release Notes:
resolve referred schemas right after parsing,
develop a command line tool to validate JSON.

:Detailed Notes:
submissions/32..submissions/35
5a19d2c Fix compatibility with 2.6 version of pbnjson
11b3b36 Add compatibility with 2.6 version of pbnjson
0a214cf Resolve referred schemas right after parsing
9594392 Implement JSON validation in the pbnjson_validate
d66e2ba Allow reporting schema parsing errors in C++
0b4cd67 Create skeleton for pbnjson_validate

:Testing Performed:
unit tests, build

:QA Notes:

:Issues Addressed:
[BHV-2621] Develop a command line tool to validate JSON against schema
[BHV-1564] Resolve referred schemas right after parsing
[BHV-7907] CCC: libpbnjson=35,v2.7.0

Open-webOS-DCO-1.0-Signed-off-by: Andrii Zora <andrii.zora@lge.com>

Change-Id: Iff547f62976de09d170a56a4c847ffdf050a256d
Reviewed-on: https://g2g.palm.com/5670
Reviewed-by: DCO Verification
Build: Andrii Zora <andrii.zora@lge.com>
Reviewed-by: Andrii Zora <andrii.zora@lge.com>
Reviewed-by: Build Verification
Tested-by: Andrii Zora <andrii.zora@lge.com>
Reviewed-by: Anatolii Sakhnik <anatolii.sakhnik@lge.com>
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
webos-image: lighttpd=v1.4.32-0webos1

:Release Notes:
Integrate lighttpd CVE-2013-4508, CVE-2013-4559,
CVE-2013-4560 patches

:Detailed Notes:

:Testing Performed:
miniBAT, P2 tests

:QA Notes:

:Issues Addressed:
[BHV-5094] [Security Issue] lighttpd - CVE-2013-4508, 2013-4559, CVE-2013-4560
[BHV-6552] CCC: lighttpd=v1.4.32-0webos1

Open-webOS-DCO-1.0-Signed-off-by: Iurii Artemenko <iurii.artemenko@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I5961b6904d2d039eb0af50614f51e3c7873ed608
Originally-reviewed-on: https://g2g.palm.com/5520
Cherry-picked-from-commit: 42c72a00b64d049913cf7fa85ed719675df0dff8
Cherry-picked-from-branch: @afro
openssl: fix security vulnerability CVE-2014-0198

:Release Notes:
Fix denial of service via null pointer dereference

:Detailed Notes:
OpenSSL incorrectly handled memory in the do_ssl3_write()
function. A remote attacker could use this issue to possibly
cause OpenSSL to crash, resulting in a denial of service.

Imported from OE 580033721abbbb4302bc803ebc70c90e331e4587

:Testing Performed:
miniBAT
P2 tests

:QA Notes:

:Issues Addressed:
[ANG-7714] openssl CVE-2014-0198 security vulnerability
[ANG-7715] CCC: openssl=r2

Open-webOS-DCO-1.0-Signed-off-by: Andrii Motsok <andrii.motsok@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I37fd0c9274df75d9b0958991476c3cd9fa6aeb54
Originally-reviewed-on: https://g2g.palm.com/5550
Cherry-picked-from-commit: 2cf71f18e58afbd220cae4627d9c7ac58702a3f2
Cherry-picked-from-branch: @afro
webos-image: libjpeg-turbo=v8d+1.2.1-0webos1

:Release Notes:
Integrate CVE-2013-6630, CVE-2013-6629 patches

:Detailed Notes:

:Testing Performed:
MiniBAT
P2 tests

:QA Notes:

:Issues Addressed:
[BHV-5087] [Security Issue] libjpeg-turbo - CVE-2013-6630, CVE-2013-6629
[ANG-7713] [Afro] CCC: libjpeg-turbo=v8d+1.2.1-0webos1

Open-webOS-DCO-1.0-Signed-off-by: Kyrylo Kropivyanskiy <kyrylo.kropivyanskiy@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I41a5aa63f0a420ed276f063cbca38e422350e6b2
Originally-reviewed-on: https://g2g.palm.com/5549
Cherry-picked-from-commit: 0cc83b4260bbb9709ee9d9317574521624df0fab
Cherry-picked-from-branch: @afro
webos-image: libpng=v1.6.0-0webos1

:Release Notes:
Integrate libpng CVE-2014-0333, CVE-2013-6954 patches

:Detailed Notes:

:Testing Performed:
MiniBAT
P2 tests

:QA Notes:

:Issues Addressed:
[BHV-5085] [Security Issue] libpng - CVE-2014-0333, CVE-2013-6954
[ANG-7839] [Afro] CCC: libpng=v1.6.0-0webos1

Open-webOS-DCO-1.0-Signed-off-by: Kyrylo Kropivyanskiy <kyrylo.kropivyanskiy@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I737d602c352b97ac0d4599569eaae615f64b7e8c
Originally-reviewed-on: https://g2g.palm.com/5589
Cherry-picked-from-commit: 9c739188e55d885ca8e00908bddeea3c80375a95
Cherry-picked-from-branch: @afro
webos-image: libtiff=v4.0.3-0webos1

:Release Notes:
Integrate libtiff CVE-2013-4244, CVE-2013-4231 patches

:Detailed Notes:

:Testing Performed:
miniBAT, P2 tests

:QA Notes:

:Issues Addressed:
[BHV-5090] [Security Issue] libtiff - CVE-2013-4244, CVE-2013-4231
[BHV-6553] CCC: libtiff=v4.0.3-0webos1

Open-webOS-DCO-1.0-Signed-off-by: Iurii Artemenko <iurii.artemenko@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I74b8ebae2f689739b7097bd438bec2391d64b21b
Originally-reviewed-on: https://g2g.palm.com/5519
Cherry-picked-from-commit: e333e78ff4d24a81f5c2661b8bead3fde7a3cf55
Cherry-picked-from-branch: @afro
webos_version: Split by ';branch=' a bit sooner

:Release Notes:
PV was parsed incorrectly when WEBOS_VERSION didn't have any
underscore. This change also fixes branch parameters with dash
or underscore in name, which were parsed as submission/sha-1
separator.

:Detailed Notes:

:Testing Performed:
Only build tested.

:QA Notes:
No change to image.

:Issues Addressed:
[ES-862] Clarify documentation for creating pre-submission builds

Open-webOS-DCO-1.0-Signed-off-by: Martin Jansa <martin.jansa@lge.com>
Change-Id: I95f48e293ad3350b654495f436e2dd08f9f6814d
Reviewed-on: https://g2g.palm.com/5662
Build: Martin Jansa <Martin.Jansa@lge.com>
Reviewed-by: Martin Jansa <Martin.Jansa@lge.com>
Tested-by: Martin Jansa <Martin.Jansa@lge.com>
Reviewed-by: DCO Verification
Reviewed-by: Build Verification
webos-image: pmlogdaemon=119

:Release Notes:

:Detailed Notes:
submissions/118..submissions/119
862d37c Implement whitelist mechanism to control logging
0600410 Fix memory leak
425ef27 Remove support for Java exceptions crash reporting
09d7a64 Revert "Remove support for Java exceptions crash reporting"
22563ed Remove support for Java exceptions crash reporting

:Testing Performed:
Compiled and tested all changes on TV

:QA Notes:

:Issues Addressed:
[BHV-7924] Fix memory leak in pmlogdaemon
[BHV-7927] Cherry pick whitlelisting changes from afro to BHV
[BHV-8658] CCC: pmlogdaemon=119 ...

Open-webOS-DCO-1.0-Signed-off-by: Gayathri Srinivasan <gayathri.srinivasan@lge.com>

Change-Id: Ib8f296cfaa2d4329c720b67f34c5e8d35499394d
Reviewed-on: https://g2g.palm.com/5732
Reviewed-by: DCO Verification
Reviewed-by: Martin Jansa <Martin.Jansa@lge.com>
Tested-by: Martin Jansa <Martin.Jansa@lge.com>
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
webos-image: db8=140

:Release Notes:
Add singleleveldb support into DB8
Remove unrequired subsriptions
Add dependency from leveldb_tl library

:Detailed Notes:
submissions/139..submissions/140
85b2e56 Remove old MediaHandler API
240a6e5 Singledb support

:Testing Performed:
MiniBAT, DB8 unit tests

:QA Notes:

:Issues Addressed:
[BHV-8154] CCC: db8=140

Open-webOS-DCO-1.0-Signed-off-by: Maksym Sditanov <maxim.sditanov@lge.com>

Change-Id: I880619d8a98f779b539c323fdab86c0204fcdfe6
Reviewed-on: https://g2g.palm.com/5691
Reviewed-by: DCO Verification
Reviewed-by: Maksym Sditanov <maxim.sditanov@lge.com>
Tested-by: Maksym Sditanov <maxim.sditanov@lge.com>
Reviewed-by: Martin Jansa <Martin.Jansa@lge.com>
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
lttng-ust: Workaround for gcc-cross issue

:Release Notes:
Workaround for issue in OpenEmbedded gcc-cross package for GCC 4.7.2
compiler that affects lttng-ust.

:Detailed Notes:
Declare symbols __start___tracepoints_ptrs and __stop___tracepoints_ptrs
as hidden only rather than hidden and weak. This works around an as of
yet undiagnosed issue with the OpenEmbedded patchset for GCC 4.7.2.

:Testing Performed:
Confirmed that pmtrace_bundle tracepoints function with this patch
using current toolchain.

:QA Notes:
BAT - PASS
MiniBAT - PASS
No Regressions
QA validation for this change - PASS

:Issues Addressed:
[BHV-2914] lttng traces for palm bundle not working correctly
[BHV-7781] CCC: lttng-ust=v2.2.0-0webos1 (workaround gcc-cross issue)

Open-webOS-DCO-1.0-Signed-off-by: Martin Unsal <martin.unsal@lge.com>
Change-Id: I49f829ae0cbf53947ce2c21b77655632b995626b
Reviewed-on: https://g2g.palm.com/5645
Reviewed-by: DCO Verification
Tested-by: Susan Montooth <susan.montooth@lge.com>
Build: Susan Montooth <susan.montooth@lge.com>
Reviewed-by: Build Verification
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
webos-image: glib-2.0=webos2

:Release Notes:
Add caching for the receiver addresses for g_socket_receive_from()

:Detailed Notes:
CPU consumption issue was already reported in glib bugzilla.
https://bugzilla.gnome.org/show_bug.cgi?id=668842

:Testing Performed:
miniBAT

:QA Notes:
:Issues Addressed:
[BHV-8273] g_socket_receive performance issue
[ANG-8673] [Afro] CCC: glib-2.0=webos2

Open-webOS-DCO-1.0-Signed-off-by: Jeongseok Kim <jeongseok.kim@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I3df6cc02994a4a2eb50cf428e473a319a67bdf8d
Originally-reviewed-on: https://g2g.palm.com/5697
Cherry-picked-from-commit: 368644be67c14da1a9c5f7157175298d42a347be
Cherry-picked-from-branch: @afro
webos-image: shadow=webos1

:Release Notes:
Place vipw.shadow, vigr.shadow and /usr/bin/su into a separate
shadow-gpl package whose LICENSE is "GPLv2".

:Detailed Notes:
Note that /usr/bin/su appears first in the search path before the
/bin/su provided by busybox.

:Testing Performed:
Build tested
miniBAT

vigr
vigr.shadow
vipw
vipw.shadow
su
/usr/bin/su

:QA Notes:
No changes to the image.

:Issues Addressed:
[ANG-4576] Place vipw.shadow, vigr.shadow and /usr/bin/su into
           a separate shadow-gpl package
[ANG-5947] CCC: shadow=webos1

Open-webOS-DCO-1.0-Signed-off-by: Dmytro Bozhko <dmytro.bozhko@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Andrii Motsok <andrii.motsok@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I97aa28e1acd7a3ef0ae2852514132e30807aa002
Originally-reviewed-on: https://g2g.palm.com/5249
Cherry-picked-from-commit: dc42b83064b427985eac21af1237c70e37218832
Cherry-picked-from-branch: @afro
webos-image: luna-service2=191,v3.9.0

:Release Notes:
Rename LS::Service to LS::Handle
Add payload validaton
Add category introspection
Add C++ usage examples
Add monitor messages on reception
Fix monitor pending connections
Refactor LS::Message and LS::Call
Add C integration tests
Forse to use category names with leading slashes
Enable memchecker for integration tests

:Detailed Notes:
submissions/190..submissions/191
17690c6 Merge branch 'develop'
c498cfa Merge branch 'master' into develop
c8ffc2e Adjust version to 3.9.0
1cc3b38 fix issue with validation against local refs
f3bef51 Rename LS::Service to LS::Handle
bf2f4fc merge category introspection into develop
655a259 Add introspection to ls-monitor
6f30741 make descr introspection output available methods
f02282b refactor lserror_pbnjson into simple_pbnjson
6f6283b add effective methods test and fix exposed bug
2f058fa implement extended service introspection
960f9d2 prepare introspection for multiple views
88323ce fix tests and defs bug for category descriptions
1908940 Merge branch 'bhv-1546-examples' into develop
442cb7f Add example of using member functions
570f6b3 Add monitor messages on reception
1de1dd2 Fix monitor pending connections in hub
c4785dc Let LS::Call work with LS::Message
7322057 Implement C++ server/client example
c46fd2b Remove examples of deprecated use
af6b76c Create integration test from C examples
3987ca9 Force users to register categories with leading slash
4e9d88d Implement copy constructor/assignment for Message
e158ce9 Enable memory checker for integration tests
74874b7 Remove reference to service from LS::Message

:Testing Performed:
MinBAT. Unit-tests.

:QA Notes:

:Issues Addressed:
[BHV-1592] Implement optional validation of received payload
[BHV-1547] Create doxygen documentation of C++ API
[BHV-1590] Develop introspection methods
[BHV-1591] Enhance ls-monitor to query category description
[BHV-1592] Implement optional validation of received payload
[BHV-1546] Develop showcase examples
[BHV-6153] timestamps in ls-monitor output do not always
           reflect the order in which events occurred in the system
[BHV-4555] ls-monitor does not output traffic initiated
           by clients which have no root permissions
[BHV-6670] Fix LSHandleGetCategory() without leading slash
[BHV-8864] CCC: luna-service2=191,v3.9.0

Open-webOS-DCO-1.0-Signed-off-by: Alexandr Smoktal <alexandr.smoktal@lge.com>

Change-Id: Ib1ba215e5309928553f563177287938ceb7bb6ea
Reviewed-on: https://g2g.palm.com/5738
Reviewed-by: DCO Verification
Build: Alexandr Smoktal <alexandr.smoktal@lge.com>
Reviewed-by: Build Verification
Reviewed-by: Alexandr Smoktal <alexandr.smoktal@lge.com>
Tested-by: Alexandr Smoktal <alexandr.smoktal@lge.com>
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
webos-image: dbus=v1.6.8-0webos1

:Release Notes:
Integrate dbus CVE-2013-2168 patch

:Detailed Notes:

:Testing Performed:

:QA Notes:

:Issues Addressed:
[BHV-5089] [Security Issue] dbus - CVE-2013-2168
[ANG-7464] CCC: dbus=v1.6.8-0webos1

Open-webOS-DCO-1.0-Signed-off-by: Kyrylo Kropivyanskiy <kyrylo.kropivyanskiy@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: Ibb87d077d45186487cad377c90e93d7eb157f74c
Originally-reviewed-on: https://g2g.palm.com/5513
Cherry-picked-from-commit: 87e61c112619a09e213d87ae2dbea6fb3b8ab0e6
Cherry-picked-from-branch: @afro
Revert "webos-image: luna-service2=191,v3.9.0"

Revert https://g2g.palm.com/#/c/5738/ because the fixed assert
on blank category names triggered crashes in at least three
components. (See BHV-9238, BHV-9237, BHV-9229.) Also suspected
in appinstall / permissions problems such as BHV-9094, BHV-9223

This reverts commit 21c192d0a87a5a793b2ad2d80e0893eb2a0d7858.

Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I27d2332e72a4bd8342255744afcd42b5ee744275
Reviewed-on: https://g2g.palm.com/5805
Build: Susan Montooth <susan.montooth@lge.com>
Reviewed-by: DCO Verification
Reviewed-by: Build Verification
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
Tested-by: Susan Montooth <susan.montooth@lge.com>
webos-image: luna-init=10

:Release Notes:
Add fractional timezones to ext-timezones.json file

:Detailed Notes:
submissions/9..submissions/10
49bb137 Merge branch 'develop'
d9502fa Edit gen-ext-timezones.py file to generate new fractional timezones

:Testing Performed:
Build verified and tested that all miniBATs pass.
Verified that the following luna-command (and similar ones) works with this
change in addition to https://gpro.palm.com/#/c/48395/:
luna-send -n 1 luna://com.palm.systemservice/setPreferences '{"timeZone":{"Z
oneID":"Etc/GMT-6:30"}}'
and the linux system calls like "date" and "readlink -f /etc/localtime"
return expected values like below:
 # date
 Wed May 21 00:41:41 GMT-6:30 2014
 # readlink -f /etc/localtime
 /usr/share/zoneinfo/Etc/GMT-6:30

:Issues Addressed:
[BHV-8473] Add fractional Etc timezones
[BHV-9252] CCC: tzdata=starfish1 luna-init=10

Open-webOS-DCO-1.0-Signed-off-by: Sapna Todwal <sapna.todwal@lge.com>


Change-Id: I5cf8f2b4d9586db4f7450338ceb9d1151a9af256
Reviewed-on: https://g2g.palm.com/5803
Reviewed-by: DCO Verification
Tested-by: Sapna Todwal <sapna.todwal@lge.com>
Build: Susan Montooth <susan.montooth@lge.com>
Reviewed-by: Build Verification
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
alsa-utils: Configure usage of libsamplerate

:Release Notes:
Make the usage of libsamplerate be configurable and disable it.

:Detailed Notes:

:Testing Performed:
Playing different sampling frequency files and observed no side effects or issues

:QA Notes:

:Issues Addressed:
[ANG-4934] Remove libsamplerate from the image
[ANG-7421] [Afro] CCC: libsamplerate=0

Open-webOS-DCO-1.0-Signed-off-by: Kyrylo Kropivyanskiy <kyrylo.kropivyanskiy@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I7f22133da735c9c785c864fdcf965e47e1e255e7
Originally-reviewed-on: https://g2g.palm.com/5345
Cherry-picked-from-commit: 0cd18e98815029cfb4119957a1ec0e0e16601692
Cherry-picked-from-branch: @afro
webos-image: jemalloc=12

:Release Notes:
Explicitly link with pthread

:Detailed Notes:
submissions/11..submissions/12
c35bf4 Explicitly link with pthread

:Testing Performed:
Only build tested.

:QA Notes:
No functional change to image

:Issues Addressed:
[BHV-7450] jemalloc: Explicitly link with pthread
[BHV-9296] CCC: jemalloc=12

Open-webOS-DCO-1.0-Signed-off-by: Andrii Motsok <andrii.motsok@lge.com>

Change-Id: Icc828e75e5b996cc76d2b089c47429cdd379bf79
Reviewed-on: https://g2g.palm.com/5627
Reviewed-by: DCO Verification
Reviewed-by: Susan Montooth <susan.montooth@lge.com>
Tested-by: Susan Montooth <susan.montooth@lge.com>
webos-image: libmikmod=v3.1.12-0webos1

:Release Notes:
libmikmod contains sequrity issues (CVE-2009-0179, CVE-2007-6720,
CVE-2009-3996). Need to fix them.

:Detailed Notes:
CVE-2009-0179 - libmikmod 3.1.11 through 3.2.0, as used by MikMod and
possibly other products, allows user-assisted attackers to cause a
denial of service (application crash) by loading an XM file.
CVE-2007-6720 - libmikmod 3.1.9 through 3.2.0, as used by MikMod,
SDL-mixer, and possibly other products, relies on the channel count of
the last loaded song, rather than the currently playing song, for
certain playback calculations, which allows user-assisted attackers to
cause a denial of service (application crash) by loading multiple songs
(aka MOD files) with different numbers of channels.
CVE-2009-3996 - Heap-based buffer overflow in IN_MOD.DLL (aka the
Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12,
might allow remote attackers to execute arbitrary code via an
Ultratracker file. Note that inspite of its description, this patch is
applicable to Linux

:Testing Performed:
miniBAT
P2 tests
BAT

:QA Notes:

:Issues Addressed:
[BHV-5102] libmikmod - CVE-2009-0179, CVE-2007-6720, CVE-2009-3996
[ANG-7463] CCC: libmikmod=v3.1.12-0webos1

Open-webOS-DCO-1.0-Signed-off-by: Andrii Motsok <andrii.motsok@lge.com>
Open-webOS-DCO-1.0-Signed-off-by: Susan Montooth <susan.montooth@lge.com>

Change-Id: I2cc78d12b8f1d47caff83f14c86a8e91e9498fde
Originally-reviewed-on: https://g2g.palm.com/5486
Cherry-picked-from-commit: 36162e64675fb6373963f03b7fca795ef22ae539
Cherry-picked-from-branch: @afro