package.bbclass: ensure license excluded files aren't packaged

An excluded package left its files behind, which meant they could end up in
another package instead, meaning we could ship GPLv3 binaries even with GPLv3
in INCOMPATIBLE_LICENSE. Skip the files belonging to the excluded packages to
prevent this from occurring.

(From OE-Core master rev: c045bfe6b991006ac80f0e2d06a8917ae58d9262)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
image-mklibs: ensure sysroot is correctly set when calling gcc

[YOCTO #2519]

When getting gcc from sstate, it is possible to get a gcc with a bogus
sysroot configuration, as discussed in [1] or in [YOCTO #2519].

mklibs script will eventually call gcc, so we need to make sure that it
provides gcc with the right sysroot location.

[1] http://lists.openembedded.org/pipermail/openembedded-core/2013-September/084159.html

(From OE-Core master rev: 3a66dd762e493ad2cda57110be67c3b06628050a)

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
build-appliance-image: Update to dylan head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gst-ffmpeg: fix CVE-2013-3674

The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before
1.2.1 does not validate the presence of non-header data in a buffer, which
allows remote attackers to cause a denial of service (out-of-bounds array
access and application crash) via crafted CD Graphics Video data.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3674

(From OE-Core master rev: f1721553a873b242bc26ad3e4d618aea39dfd507)

Signed-off-by: Ming Liu <ming.liu@windriver.com>
Signed-off-by: Jeff Polk <jeff.polk@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libtiff: fix CVE-2013-1960

Heap-based buffer overflow in the tp_process_jpeg_strip function in tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted TIFF image
file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1960

(From OE-Core dora rev: 66387677cbd85ba4a76a254942377621acd68249)

Signed-off-by: Ming Liu <ming.liu@windriver.com>
Signed-off-by: Jeff Polk <jeff.polk@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libtiff: CVE-2013-4232

cve description:
Use-after-free vulnerability in the t2p_readwrite_pdf_image function
in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause
a denial of service (crash) or possible execute arbitrary code via a
crafted TIFF image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4232

(From OE-Core dora rev: 60482e45677c467f55950ce0f825d6cb9c121c9c)

Signed-off-by: Baogen Shang <baogen.shang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libtiff: CVE-2013-4243

cve description:
Heap-based buffer overflow in the readgifimage function in the gif2tiff
tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial
of service (crash) and possibly execute arbitrary code via a crafted height
and width values in a GIF image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4243

(From OE-Core dora rev: a2a200a3951cecd7dd43dee360e0260051c97416)

Signed-off-by: Baogen Shang <baogen.shang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
build-appliance-image: Update to dylan head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
grub git: lower default preference

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
build-appliance-image: Update to dylan head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Merge remote-tracking branch 'oe-core/dylan' into angstrom-staging-yocto1.4
xf86-video-modesetting: update to 0.8.1

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
xserver-xorg: upgrade to 1.14.4

The xinerama and dixstruct patches are merged in 1.14.4, so drop them.

Also drop explicit PR statement.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>

Conflicts:
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.0/aarch64.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.0/crosscompile.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.0/fix_open_max_preprocessor_error.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.0/macro_tweak.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.0/mips64-compiler.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.2/aarch64.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.2/crosscompile.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.2/fix_open_max_preprocessor_error.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.2/macro_tweak.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg-1.14.2/mips64-compiler.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg/aarch64.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg/crosscompile.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg/fix_open_max_preprocessor_error.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg/macro_tweak.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg/mips64-compiler.patch
	meta/recipes-graphics/xorg-xserver/xserver-xorg_1.14.0.bb
	meta/recipes-graphics/xorg-xserver/xserver-xorg_1.14.2.bb
	meta/recipes-graphics/xorg-xserver/xserver-xorg_1.14.4.bb
xserver: remove unrecognised options

--disable-xorgcfg was removed in 2008.

--with-fontdir was renamed to --with-fontrootdir in 2009 and the default value
is good.

--disable-xf86misc was removed in 2008.

--disable-acfb, -ccfb and -mcfb should have been --disable-afb, -cfb, -mfb, and
were removed in 2008.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libsdl: Add support for libsdl-native

Change-Id: I4fb1e623c7bbb1f35ae3001c839cd7e16ce1bd65
Signed-off-by: Alexandru Niculita <alexnick87@gmail.com>
libsdl: Backport xData32 patch for x11 update

Signed-off-by: Saul Wold <sgw@linux.intel.com>
libsdl: Clean up configure option QA warnings

WARNING: QA Issue: nativesdk-libsdl: configure was passed unrecognised options: --disable-video-gem --disable-video-xbios --enable-dlopen --disable-debug --enable-endian

The gem and xbios options exist but their helptext is wrong and there
is no "video" in the name. This patch removes the now obsolete options
and corrects the names of the others to match reality.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libsdl 1.2.15: add patch to get rid of SetGammaRamp errors in XBMC

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
xorg-lib-common: fix malloc0returnsnull usage

Xorg libraries that use Xmalloc need to know if malloc(0) returns NULL or not,
and as this is a runtime test it can't be checked for.  Previously
xorg-lib-common declared that malloc(0) did return NULL, but this isn't true for
eglibc (only uclibc).

Instead, use libc-specific overrides to pass the relevant option.

(ideally the check would use the autoconf cache so this can be stored in the site files)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libx11: upgrade to 1.6.1

Upgrade libx11 to version 1.6.1.

Update:
* Remove PR and INC_PR.
* File Xcms.txt position changes.
* Drop backport patch keysymdef_include.patch.
* Update disable_tests.patch.

[YOCTO #4973]

Signed-off-by: Kai Kang <kai.kang@windriver.com>

[sgw - Removed PR and INC_PR]

Signed-off-by: Saul Wold <sgw@linux.intel.com>