Bug 15893

Summary: [5.0.10 RC2] Fail to build libsoup-2.4 for beaglebone
Product: [Build System, Metadata & Runtime] OE-Core Reporter: Yi Zhao <yi.zhao>
Component: coreAssignee: Steve Sakoman <steve>
Status: VERIFIED FIXED QA Contact: Yi Zhao <yi.zhao>
Severity: normal    
Priority: Medium CC: meta.mr.watcher, meta.watcher, randy.macleod, ross.burton, yi.zhao
Version: 5.0.10   
Target Milestone: 5.0.10   
Hardware: BeagleBone   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: Regression (Used to work)
Verified: Documentation change: No (bug/feature does not impact docs)
Attachments:
Description Flags
log.do_complie none

Description Yi Zhao 2025-06-03 13:40:39 UTC
Poky git rev: scarthgap/ac257900c33754957b2696529682029d997a8f28
Build host: Ubuntu 22.04.5 LTS

In conf/local.conf:
MACHINE ?= "beaglebone-yocto"

$ bitbake core-image-sato-sdk

Error log:

../libsoup-2.74.3/tests/auth-test.c:1554:39: error: unknown type name 'SoupServerMessage'; did you mean 'SoupServerClass'?
 1554 |                                       SoupServerMessage *msg,
      |                                       ^~~~~~~~~~~~~~~~~
      |                                       SoupServerClass
../libsoup-2.74.3/tests/auth-test.c: In function 'do_missing_params_test':
../libsoup-2.74.3/tests/auth-test.c:1575:13: warning: assignment to 'GUri *' {aka 'struct _GUri *'} from incompatible pointer type 'SoupURI *' {aka 'struct _SoupURI *'} [-Wincompatible-pointer-types]
 1575 |         uri = soup_test_server_get_uri (server, "http", NULL);
      |             ^
In file included from /buildarea4/yzhao1/yocto/scarthgap/build-beaglebone/tmp/work/cortexa8hf-neon-poky-linux-gnueabi/libsoup-2.4/2.74.3/recipe-sysroot/usr/include/glib-2.0/gobject/gobject.h:30,
                 from /buildarea4/yzhao1/yocto/scarthgap/build-beaglebone/tmp/work/cortexa8hf-neon-poky-linux-gnueabi/libsoup-2.4/2.74.3/recipe-sysroot/usr/include/glib-2.0/gobject/gbinding.h:31,
                 from /buildarea4/yzhao1/yocto/scarthgap/build-beaglebone/tmp/work/cortexa8hf-neon-poky-linux-gnueabi/libsoup-2.4/2.74.3/recipe-sysroot/usr/include/glib-2.0/glib-object.h:24,
                 from /buildarea4/yzhao1/yocto/scarthgap/build-beaglebone/tmp/work/cortexa8hf-neon-poky-linux-gnueabi/libsoup-2.4/2.74.3/recipe-sysroot/usr/include/glib-2.0/gio/gioenums.h:30,
                 from /buildarea4/yzhao1/yocto/scarthgap/build-beaglebone/tmp/work/cortexa8hf-neon-poky-linux-gnueabi/libsoup-2.4/2.74.3/recipe-sysroot/usr/include/glib-2.0/gio/giotypes.h:30,
                 from /buildarea4/yzhao1/yocto/scarthgap/build-beaglebone/tmp/work/cortexa8hf-neon-poky-linux-gnueabi/libsoup-2.4/2.74.3/recipe-sysroot/usr/include/glib-2.0/gio/gio.h:28,
                 from ../libsoup-2.74.3/libsoup/soup-types.h:9,
                 from ../libsoup-2.74.3/libsoup/soup-address.h:11,
                 from ../libsoup-2.74.3/libsoup/soup.h:11,
                 from ../libsoup-2.74.3/tests/test-utils.h:12,
                 from ../libsoup-2.74.3/tests/auth-test.c:3:
../libsoup-2.74.3/tests/auth-test.c:1586:39: error: 'on_request_read_for_missing_params' undeclared (first use in this function)
 1586 |                           G_CALLBACK (on_request_read_for_missing_params),
      |                                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


This issue was introduced the following commit:

commit cca757c4619f89bbb7e2de73e93f683c630f1b92
Author: Vijay Anusuri <vanusuri@mvista.com>
Date:   Wed May 21 15:23:21 2025 +0530

    libsoup-2.4: Fix CVE-2025-32910
    
    import patch from debian to fix
     CVE-2025-32910
    
    Upstream-Status: Backport [import from debian https://salsa.debian.org/gnome-team/libsoup/-/tree/debian/bullseye/debian/patches?ref_type=heads
    Upstream commit https://gitlab.gnome.org/GNOME/libsoup/-/commit/e40df6d48a1cbab56f5d15016cc861a503423cfe
    &
    https://gitlab.gnome.org/GNOME/libsoup/-/commit/405a8a34597a44bd58c4759e7d5e23f02c3b556a
    &
    https://gitlab.gnome.org/GNOME/libsoup/-/commit/ea16eeacb052e423eb5c3b0b705e5eab34b13832]
    
    Reference:
    https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/417
    https://security-tracker.debian.org/tracker/CVE-2025-32910
    
    (From OE-Core rev: 0fc936f23e6f70021acf4e711ef49d3a5cc966fe)
    
    Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
    Signed-off-by: Steve Sakoman <steve@sakoman.com>
Comment 1 Yi Zhao 2025-06-03 13:44:03 UTC
Created attachment 5119 [details]
log.do_complie
Comment 2 Steve Sakoman 2025-06-06 16:13:19 UTC
A fix for this issue is out for review on the mailing list:

https://lists.openembedded.org/g/openembedded-core/message/218166
Comment 3 Ross Burton 2025-06-09 17:22:51 UTC
This isn't specific to beaglebone and appears to only happen if apachectl is on the build host.
Comment 5 Yi Zhao 2025-07-16 05:47:31 UTC
Verified with 5.0.11 (poky git rev: ae2d52758fc2fcb0ed996aa234430464ebf4b310)