| Summary: | LSB Desktop Tests: desktop-xml failed | ||
|---|---|---|---|
| Product: | [Build System, Metadata & Runtime] OE-Core | Reporter: | Hongxu Jia <hongxu.jia> |
| Component: | core | Assignee: | Hongxu Jia <hongxu.jia> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Medium | CC: | hongxu.jia, liezhi.yang, mark.hatle, meta.mr.watcher, meta.watcher, sgw, yi.zhao |
| Version: | 1.5 | ||
| Target Milestone: | 1.5 M5 | ||
| Hardware: | x86 | ||
| OS: | Multiple | ||
| Whiteboard: | |||
| OS type for building Yocto: | --- | Type of Regression: | --- |
| Verified: | Documentation change: | Don't know | |
|
Description
Hongxu Jia
2013-09-10 04:51:53 UTC
The commit http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=8780c5ddf2916bbd42fc67b79c286652aebb1546 add a patch to fix a security issue. It modify include file 'tree.h' to add 'const char *dummy_children' for 'struct _xmlNs'. But lsb test suites didn't do this in his own include file, so the LSB desktop-xml tests failed. Disable this patch for linuxstdbase could fix this issue. Hi Saul, The upstream of libxml2 has not fixed this issue: git clone git://git.gnome.org/libxml2 And I have filed a bug to them https://bugzilla.gnome.org/show_bug.cgi?id=708205 After this is fixed and released, also need to report another bug to LSB to update their libxml2 source code. The time cycle is long, should we mark this bug as "Waiting For Upstream" or accept this patch to workaround for LSB test. Thanks, Hongxu The libxml2-CVE-2012-2871.patch changes a public structure by adding fields *in the middle*, so that broke the ABI. This patch was the quick fix that Chromium did as they statically link to libxml2 so the API breakage isn't an issue, the proper fix is already in libxslt. As long as we have libxml 2.9.0 and libxslt 1.1.27 onwards (which we do), the issue is correctly fixed. The patch is obsolete, abandon it could fix the LSB desktop-xml tests failure. Ross has done the revert job. |