From ad65262e8beb050a8f6c43988270f587bf620ffaf99b130849b6ef6cb397aa66 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Sat, 9 Mar 2019 20:51:03 +0000 Subject: [PATCH 1/4] Accepting request 682651 from home:joestringer:branches:security:netfilter - Pull in bpf global data section support patches * Corresponds to changes here: https://github.com/cilium/iproute2/tree/static-data OBS-URL: https://build.opensuse.org/request/show/682651 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iproute2?expand=0&rev=170 --- bpf-bss-section-poc.patch | 113 +++++++++++++++++++++++++++ bpf-data-section-support-poc.patch | 118 +++++++++++++++++++++++++++++ iproute2.changes | 7 ++ iproute2.spec | 6 +- 4 files changed, 242 insertions(+), 2 deletions(-) create mode 100644 bpf-bss-section-poc.patch create mode 100644 bpf-data-section-support-poc.patch diff --git a/bpf-bss-section-poc.patch b/bpf-bss-section-poc.patch new file mode 100644 index 0000000..cd2f3b1 --- /dev/null +++ b/bpf-bss-section-poc.patch @@ -0,0 +1,113 @@ +From 8f256b14edf9fdba3e0c688b76a4124d8627cde1 Mon Sep 17 00:00:00 2001 +From: Joe Stringer +Date: Thu, 24 Jan 2019 20:55:39 -0800 +Subject: [PATCH iproute2-next 2/2] bpf: bss section poc +To: Stephen Hemminger +Cc: netdev@vger.kernel.org, daniel@iogearbox.net + +The .bss section denotes uninitialized data, which is for instance what +clang will generate if a static variable is set to zero by default. +Teach the bpf library about .bss so that such variables can be properly +initialized. + +Signed-off-by: Joe Stringer +--- + lib/bpf.c | 37 +++++++++++++++++++++++++++++++++++-- + 1 file changed, 35 insertions(+), 2 deletions(-) + +diff --git a/lib/bpf.c b/lib/bpf.c +index eb208275ebaa..69eaa5ee732d 100644 +--- a/lib/bpf.c ++++ b/lib/bpf.c +@@ -1159,6 +1159,7 @@ struct bpf_elf_ctx { + int sec_text; + int sec_btf; + int sec_data; ++ int sec_bss; + char license[ELF_MAX_LICENSE_LEN]; + enum bpf_prog_type type; + __u32 ifindex; +@@ -2048,6 +2049,14 @@ static int bpf_fetch_data(struct bpf_elf_ctx *ctx, int section, + return 0; + } + ++static int bpf_fetch_bss(struct bpf_elf_ctx *ctx, int section, ++ struct bpf_elf_sec_data *data) ++{ ++ ctx->sec_bss = section; ++ ctx->sec_done[section] = true; ++ return 0; ++} ++ + static void bpf_btf_report(int fd, struct bpf_elf_ctx *ctx) + { + fprintf(stderr, "\nBTF debug data section \'.BTF\' %s%s (%d)!\n", +@@ -2262,6 +2271,11 @@ static bool bpf_has_glob_data(const struct bpf_elf_ctx *ctx) + return ctx->sec_data; + } + ++static bool bpf_has_bss_data(const struct bpf_elf_ctx *ctx) ++{ ++ return ctx->sec_bss; ++} ++ + static int bpf_fetch_ancillary(struct bpf_elf_ctx *ctx, bool check_text_sec) + { + struct bpf_elf_sec_data data; +@@ -2286,6 +2300,9 @@ static int bpf_fetch_ancillary(struct bpf_elf_ctx *ctx, bool check_text_sec) + else if (data.sec_hdr.sh_type == SHT_PROGBITS && + !strcmp(data.sec_name, ".data")) + ret = bpf_fetch_data(ctx, i, &data); ++ else if (data.sec_hdr.sh_type == SHT_NOBITS && ++ !strcmp(data.sec_name, ".bss")) ++ ret = bpf_fetch_bss(ctx, i, &data); + else if (data.sec_hdr.sh_type == SHT_SYMTAB && + !strcmp(data.sec_name, ".symtab")) + ret = bpf_fetch_symtab(ctx, i, &data); +@@ -2414,6 +2431,19 @@ static int bpf_apply_relo_glob(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *pro + return 0; + } + ++static int bpf_apply_relo_bss(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *prog, ++ GElf_Rel *relo, GElf_Sym *sym, ++ struct bpf_relo_props *props) ++{ ++ unsigned int insn_off = relo->r_offset / sizeof(struct bpf_insn); ++ ++ if (insn_off >= prog->insns_num) ++ return -EINVAL; ++ ++ prog->insns[insn_off].imm = 0; ++ return 0; ++} ++ + static int bpf_apply_relo_call(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *prog, + GElf_Rel *relo, GElf_Sym *sym, + struct bpf_relo_props *props) +@@ -2470,10 +2500,12 @@ static int bpf_apply_relo_data(struct bpf_elf_ctx *ctx, + ret = bpf_apply_relo_map(ctx, prog, &relo, &sym, props); + else if (sym.st_shndx == ctx->sec_data) + ret = bpf_apply_relo_glob(ctx, prog, &relo, &sym, props); ++ else if (sym.st_shndx == ctx->sec_bss) ++ ret = bpf_apply_relo_bss(ctx, prog, &relo, &sym, props); + else if (sym.st_shndx == ctx->sec_text) + ret = bpf_apply_relo_call(ctx, prog, &relo, &sym, props); + else +- fprintf(stderr, "ELF contains non-{map,data,call} related relo data in entry %u pointing to section %u! Compiler bug?!\n", ++ fprintf(stderr, "ELF contains non-{bss,call,data,map} related relo data in entry %u pointing to section %u! Compiler bug?!\n", + relo_ent, sym.st_shndx); + if (ret < 0) + return ret; +@@ -2569,7 +2601,8 @@ static int bpf_fetch_prog_sec(struct bpf_elf_ctx *ctx, const char *section) + return ret; + } + +- if (bpf_has_map_data(ctx) || bpf_has_call_data(ctx) || bpf_has_glob_data(ctx)) ++ if (bpf_has_map_data(ctx) || bpf_has_call_data(ctx) || ++ bpf_has_glob_data(ctx) || bpf_has_bss_data(ctx)) + ret = bpf_fetch_prog_relo(ctx, section, &lderr, &sseen, &prog); + if (ret < 0 && !lderr) + ret = bpf_fetch_prog(ctx, section, &sseen); +-- +2.19.1 + diff --git a/bpf-data-section-support-poc.patch b/bpf-data-section-support-poc.patch new file mode 100644 index 0000000..e3486c3 --- /dev/null +++ b/bpf-data-section-support-poc.patch @@ -0,0 +1,118 @@ +From 4e0dcb220bd77a5ddf0f8956740281efbf1ead90 Mon Sep 17 00:00:00 2001 +From: Daniel Borkmann +Date: Wed, 31 Oct 2018 20:25:22 +0100 +Subject: [PATCH iproute2-next 1/2] bpf: data section support poc +To: Stephen Hemminger +Cc: netdev@vger.kernel.org, daniel@iogearbox.net + +Signed-off-by: Daniel Borkmann +--- + lib/bpf.c | 40 ++++++++++++++++++++++++++++++++++++++-- + 1 file changed, 38 insertions(+), 2 deletions(-) + +diff --git a/lib/bpf.c b/lib/bpf.c +index 45f279fa4a41..eb208275ebaa 100644 +--- a/lib/bpf.c ++++ b/lib/bpf.c +@@ -1142,6 +1142,7 @@ struct bpf_elf_ctx { + Elf_Data *sym_tab; + Elf_Data *str_tab; + Elf_Data *btf_data; ++ Elf_Data *glo_data; + char obj_uid[64]; + int obj_fd; + int btf_fd; +@@ -1157,6 +1158,7 @@ struct bpf_elf_ctx { + int sec_maps; + int sec_text; + int sec_btf; ++ int sec_data; + char license[ELF_MAX_LICENSE_LEN]; + enum bpf_prog_type type; + __u32 ifindex; +@@ -2037,6 +2039,15 @@ static int bpf_fetch_text(struct bpf_elf_ctx *ctx, int section, + return 0; + } + ++static int bpf_fetch_data(struct bpf_elf_ctx *ctx, int section, ++ struct bpf_elf_sec_data *data) ++{ ++ ctx->sec_data = section; ++ ctx->glo_data = data->sec_data; ++ ctx->sec_done[section] = true; ++ return 0; ++} ++ + static void bpf_btf_report(int fd, struct bpf_elf_ctx *ctx) + { + fprintf(stderr, "\nBTF debug data section \'.BTF\' %s%s (%d)!\n", +@@ -2246,6 +2257,11 @@ static bool bpf_has_call_data(const struct bpf_elf_ctx *ctx) + return ctx->sec_text; + } + ++static bool bpf_has_glob_data(const struct bpf_elf_ctx *ctx) ++{ ++ return ctx->sec_data; ++} ++ + static int bpf_fetch_ancillary(struct bpf_elf_ctx *ctx, bool check_text_sec) + { + struct bpf_elf_sec_data data; +@@ -2267,6 +2283,9 @@ static int bpf_fetch_ancillary(struct bpf_elf_ctx *ctx, bool check_text_sec) + !strcmp(data.sec_name, ".text") && + check_text_sec) + ret = bpf_fetch_text(ctx, i, &data); ++ else if (data.sec_hdr.sh_type == SHT_PROGBITS && ++ !strcmp(data.sec_name, ".data")) ++ ret = bpf_fetch_data(ctx, i, &data); + else if (data.sec_hdr.sh_type == SHT_SYMTAB && + !strcmp(data.sec_name, ".symtab")) + ret = bpf_fetch_symtab(ctx, i, &data); +@@ -2380,6 +2399,21 @@ static int bpf_apply_relo_map(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *prog + return 0; + } + ++static int bpf_apply_relo_glob(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *prog, ++ GElf_Rel *relo, GElf_Sym *sym, ++ struct bpf_relo_props *props) ++{ ++ unsigned int insn_off = relo->r_offset / sizeof(struct bpf_insn); ++ int *data; ++ ++ if (insn_off >= prog->insns_num) ++ return -EINVAL; ++ ++ data = ctx->glo_data->d_buf + sym->st_value; ++ prog->insns[insn_off].imm = *data; ++ return 0; ++} ++ + static int bpf_apply_relo_call(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *prog, + GElf_Rel *relo, GElf_Sym *sym, + struct bpf_relo_props *props) +@@ -2434,10 +2468,12 @@ static int bpf_apply_relo_data(struct bpf_elf_ctx *ctx, + + if (sym.st_shndx == ctx->sec_maps) + ret = bpf_apply_relo_map(ctx, prog, &relo, &sym, props); ++ else if (sym.st_shndx == ctx->sec_data) ++ ret = bpf_apply_relo_glob(ctx, prog, &relo, &sym, props); + else if (sym.st_shndx == ctx->sec_text) + ret = bpf_apply_relo_call(ctx, prog, &relo, &sym, props); + else +- fprintf(stderr, "ELF contains non-{map,call} related relo data in entry %u pointing to section %u! Compiler bug?!\n", ++ fprintf(stderr, "ELF contains non-{map,data,call} related relo data in entry %u pointing to section %u! Compiler bug?!\n", + relo_ent, sym.st_shndx); + if (ret < 0) + return ret; +@@ -2533,7 +2569,7 @@ static int bpf_fetch_prog_sec(struct bpf_elf_ctx *ctx, const char *section) + return ret; + } + +- if (bpf_has_map_data(ctx) || bpf_has_call_data(ctx)) ++ if (bpf_has_map_data(ctx) || bpf_has_call_data(ctx) || bpf_has_glob_data(ctx)) + ret = bpf_fetch_prog_relo(ctx, section, &lderr, &sseen, &prog); + if (ret < 0 && !lderr) + ret = bpf_fetch_prog(ctx, section, &sseen); +-- +2.19.1 + diff --git a/iproute2.changes b/iproute2.changes index d02aa7b..687dd12 100644 --- a/iproute2.changes +++ b/iproute2.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Mar 6 00:59:48 UTC 2019 - Joe Stringer + +- Pull in bpf global data section support patches + * Corresponds to changes here: + https://github.com/cilium/iproute2/tree/static-data + ------------------------------------------------------------------- Sat Jan 26 10:39:56 UTC 2019 - mkubecek@suse.cz diff --git a/iproute2.spec b/iproute2.spec index 5848344..cfa6a32 100644 --- a/iproute2.spec +++ b/iproute2.spec @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -38,6 +38,8 @@ Patch4: xfrm-support-displaying-transformations-used-for-Mob.patch Patch6: split-link-and-compile-steps-for-binaries.patch Patch7: examples-fix-bashisms-in-example-script.patch Patch102: Revert-emp-fix-warning-on-deprecated-bison-directive.patch +Patch201: bpf-data-section-support-poc.patch +Patch202: bpf-bss-section-poc.patch BuildRequires: bison BuildRequires: db-devel BuildRequires: fdupes @@ -84,7 +86,7 @@ bash command line completion support for iproute. %prep %setup -qn %name-%rversion -%patch -P 1 -P 2 -P 3 -P 4 -P 6 -P 7 -p1 +%patch -P 1 -P 2 -P 3 -P 4 -P 6 -P 7 -P 201 -P 202 -p1 %if 0%{?sles_version} == 11 %patch -P 102 -p1 %endif From c67d196218f6d02ced94c49bf1cee4113fe3018002f66be3bb72a2c68fd0550b Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Sat, 23 Mar 2019 16:13:04 +0000 Subject: [PATCH 2/4] Accepting request 687901 from home:seanlew:branches:security:netfilter Update iproute2 OBS-URL: https://build.opensuse.org/request/show/687901 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iproute2?expand=0&rev=171 --- iproute2-4.20.0.tar.sign | Bin 566 -> 0 bytes iproute2-4.20.0.tar.xz | 3 --- iproute2-5.0.0.tar.sign | Bin 0 -> 566 bytes iproute2-5.0.0.tar.xz | 3 +++ iproute2.changes | 14 ++++++++++++++ iproute2.spec | 4 ++-- 6 files changed, 19 insertions(+), 5 deletions(-) delete mode 100644 iproute2-4.20.0.tar.sign delete mode 100644 iproute2-4.20.0.tar.xz create mode 100644 iproute2-5.0.0.tar.sign create mode 100644 iproute2-5.0.0.tar.xz diff --git a/iproute2-4.20.0.tar.sign b/iproute2-4.20.0.tar.sign deleted file mode 100644 index 64eec8f4a567b58090d4741f8843c06b320bcf6945f321f3cc2f5ec8fc82fdaa..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 566 zcmV-60?GY}0y6{v0SEvc79j+mZ^K2fTj%FyxIB-5r+;9T&E$Rs0$ekhLI4U05P+wD zV3p0}e!u_^|8~!3Vb2|A@QYp&)T6XrB3hP&~x}yLb_#9>C{EkKh%xUqeR3;(RNH*-P!fOMgatM+g!s zj@qul>iHkT;Dg+-V6OBV9rg zY|};A0X~%Uv&$&JoovK1h%0Elrp~thMi#v?`~clJt?Q2?J_fUL8h}w(z}#0<<)_aE zz)Oe59mo04)gr5I0=0N&h%8#P?oD(9dn$_PTD`rTpe^%QGfiA7ny%d zq0rlv_@pru&gLZTYzeZ6<8hrtR^)?+r2tX?V~H~{=4FF^-`L@=Ep36Git%rL`yT5N EUtW$DF8}}l diff --git a/iproute2-4.20.0.tar.xz b/iproute2-4.20.0.tar.xz deleted file mode 100644 index ddf8b20..0000000 --- a/iproute2-4.20.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c8adaa6a40f888476b23acb283cfa30c0dd55f07b5aa20663ed5ba2ef1f6fda8 -size 707016 diff --git a/iproute2-5.0.0.tar.sign b/iproute2-5.0.0.tar.sign new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..141601655434c0ecadbff92fa1c6082520d86998d06e35bc849ce8a2a6882814 GIT binary patch literal 566 zcmV-60?GY}0y6{v0SEvc79j+mZ^K2fTj%FyxIB-5r+;9T&E$Rs0$hJD=aHvW0veft$)S$<4#RhA|Ik)sW(d!LM9aQZYHP zLEE-V>nSzE;htDNokv;lXViIhp+QM-RLzgmSy=i3XXJzJ09P8VOaFpzR~zE(&Kw*f zh^Tdo2uL*EHz#moF$pgpw`JQC+fCH_)fMnN6bnSX)-a<#3ANMXIWzQf%L;%xFNIueLy9C@2Y40RNVOwd&crMWxB z@(F5ko0mcQum_F^hp#a?qJTd4bFdIvw_AYoSfu$qBo`3ZbVFKOHcj`=2j0;gU&91p zL|bWmzM%r71Yr`8{#RL0MNhg0w;t=#;LjDePsb|oNT-ZhC|~`@NaRlQFtp=Igzrm> EotyOw$^ZZW literal 0 HcmV?d00001 diff --git a/iproute2-5.0.0.tar.xz b/iproute2-5.0.0.tar.xz new file mode 100644 index 0000000..55b4192 --- /dev/null +++ b/iproute2-5.0.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:df047302a39650ef832c07e8dab5df7a23218cd398bd310c8628e386161d20ba +size 710656 diff --git a/iproute2.changes b/iproute2.changes index 687dd12..172cdda 100644 --- a/iproute2.changes +++ b/iproute2.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Sat Mar 23 05:39:54 UTC 2019 - seanlew@opensuse.org + +- Update to new upstream release 5.0.0 + * ip route: get print JSON output when -j is given + * ip route: print route type in JSON output + * tc: m_connmark: fix action error messages + * ipaddress: print error messages on stderr + * iprule: fix printing hint about unresolved iifname + oofname + * man: Document COLORFGBG environment variable + * tcpedit: Fix wrong pedit ipv6 structure id + * ss: Render buffer to output every time a number of chunks alloc + * ss: fix compilation under glibc < 2.18 + ------------------------------------------------------------------- Thu Mar 6 00:59:48 UTC 2019 - Joe Stringer diff --git a/iproute2.spec b/iproute2.spec index cfa6a32..b3728d3 100644 --- a/iproute2.spec +++ b/iproute2.spec @@ -17,9 +17,9 @@ Name: iproute2 -Version: 4.20 +Version: 5.0.0 Release: 0 -%define rversion 4.20.0 +%define rversion 5.0.0 Summary: Linux network configuration utilities License: GPL-2.0-only Group: Productivity/Networking/Routing From fdb095ffbeeb44d1d354b1e25bcd2a65b7b1e8c9b9935a77f88680de88857e7f Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Mon, 13 May 2019 10:10:03 +0000 Subject: [PATCH 3/4] Accepting request 702616 from home:mkubecek:branches:security:netfilter - update to version 5.1 OBS-URL: https://build.opensuse.org/request/show/702616 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iproute2?expand=0&rev=172 --- ...c-ematch-fix-deprecated-yacc-warning.patch | 26 +++++++++++++++ iproute2-5.0.0.tar.sign | Bin 566 -> 0 bytes iproute2-5.0.0.tar.xz | 3 -- iproute2-5.1.0.tar.sign | Bin 0 -> 566 bytes iproute2-5.1.0.tar.xz | 3 ++ iproute2.changes | 31 ++++++++++++++++++ iproute2.spec | 10 ++++-- 7 files changed, 67 insertions(+), 6 deletions(-) create mode 100644 Revert-tc-ematch-fix-deprecated-yacc-warning.patch delete mode 100644 iproute2-5.0.0.tar.sign delete mode 100644 iproute2-5.0.0.tar.xz create mode 100644 iproute2-5.1.0.tar.sign create mode 100644 iproute2-5.1.0.tar.xz diff --git a/Revert-tc-ematch-fix-deprecated-yacc-warning.patch b/Revert-tc-ematch-fix-deprecated-yacc-warning.patch new file mode 100644 index 0000000..b77e412 --- /dev/null +++ b/Revert-tc-ematch-fix-deprecated-yacc-warning.patch @@ -0,0 +1,26 @@ +From: Michal Kubecek +Date: Mon, 13 May 2019 11:09:08 +0200 +Subject: Revert "tc/ematch: fix deprecated yacc warning" +Patch-mainline: Never, build fix for older distributions + +This reverts commit 38983334f6d59318f40cda5cab771a92c2510695. + +For SLE <= 12 and openSUSE 42.3 only. Their bison (version 2.7) does not +recognize new syntax. +--- + tc/emp_ematch.y | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +--- a/tc/emp_ematch.y ++++ b/tc/emp_ematch.y +@@ -8,8 +8,8 @@ + + %locations + %token-table +-%define parse.error verbose +-%define api.prefix {ematch_} ++%error-verbose ++%name-prefix "ematch_" + + %union { + unsigned int i; diff --git a/iproute2-5.0.0.tar.sign b/iproute2-5.0.0.tar.sign deleted file mode 100644 index 141601655434c0ecadbff92fa1c6082520d86998d06e35bc849ce8a2a6882814..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 566 zcmV-60?GY}0y6{v0SEvc79j+mZ^K2fTj%FyxIB-5r+;9T&E$Rs0$hJD=aHvW0veft$)S$<4#RhA|Ik)sW(d!LM9aQZYHP zLEE-V>nSzE;htDNokv;lXViIhp+QM-RLzgmSy=i3XXJzJ09P8VOaFpzR~zE(&Kw*f zh^Tdo2uL*EHz#moF$pgpw`JQC+fCH_)fMnN6bnSX)-a<#3ANMXIWzQf%L;%xFNIueLy9C@2Y40RNVOwd&crMWxB z@(F5ko0mcQum_F^hp#a?qJTd4bFdIvw_AYoSfu$qBo`3ZbVFKOHcj`=2j0;gU&91p zL|bWmzM%r71Yr`8{#RL0MNhg0w;t=#;LjDePsb|oNT-ZhC|~`@NaRlQFtp=Igzrm> EotyOw$^ZZW diff --git a/iproute2-5.0.0.tar.xz b/iproute2-5.0.0.tar.xz deleted file mode 100644 index 55b4192..0000000 --- a/iproute2-5.0.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:df047302a39650ef832c07e8dab5df7a23218cd398bd310c8628e386161d20ba -size 710656 diff --git a/iproute2-5.1.0.tar.sign b/iproute2-5.1.0.tar.sign new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..20d20f53278cd0afb090c30454b9a2cf2da1fce363bf731d5dfd398cab9252f3 GIT binary patch literal 566 zcmV-60?GY}0y6{v0SEvc79j+mZ^K2fTj%FyxIB-5r+;9T&E$Rs0$kOciU0};5P+wD zV3p0}eh8fq0EK1sfilW?qMde8_hT$gz6BZLEZ1Wv`yZeI9v&)D2p^6Z}L>U9uG_#9>B8Pmxf!L4QqN5Nt2%GYgsMOU}VBb4Y2 zbirp!X49ro*HaG&-^tgz2zR5pd1OpHGs<@nH7-Y=xJqhqKJ@ZHqUH2%SXM4PUR<+n zUKOSl=mfGUrKh!PXRuFUC@d-kx9O5$(A1mVPtC_;q{1244v#4THEJ_OdFIvYKFN`J zc}Iy0wV5MQOu)b+^^&EFp8Q<{3OTAvoDh~g-5b1FECV>m+7<(s0gZOhy_n$D!+5-H zdYIwHWpphY(*C7~LS~iIfBb>S$7QnrE+2~oO{hnaoHUQNjwIFAFJwbsl`3EXPD6+#?QXe43C8@7B)5$m|k&`~KprsI+{vWIz E;q@sAh5!Hn literal 0 HcmV?d00001 diff --git a/iproute2-5.1.0.tar.xz b/iproute2-5.1.0.tar.xz new file mode 100644 index 0000000..4d01142 --- /dev/null +++ b/iproute2-5.1.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dc5a980873eabf6b00c0be976b6e5562b1400d47d1d07d2ac35d5e5acbcf7bcf +size 722412 diff --git a/iproute2.changes b/iproute2.changes index 172cdda..01bd419 100644 --- a/iproute2.changes +++ b/iproute2.changes @@ -1,3 +1,34 @@ +------------------------------------------------------------------- +Mon May 13 09:28:09 UTC 2019 - Michal Kubecek + +- Revert-tc-ematch-fix-deprecated-yacc-warning.patch: + fix build on SLE12 and openSUSE Leap 42.3 + +------------------------------------------------------------------- +Mon May 13 08:25:42 UTC 2019 - Michal Kubecek + +- Update to new upstream release 5.1 + * bridge: fdb: add support for src_vni option + * devlink: report cell size + * devlink: add dev info and dev flash subcommands + * devlink: add health subcommand + * ip link: display netrom link type + * ip link: bond_slave: add xstats support + * ip link: bridge: support mcast to unicast flag + * ip netns: add attach subcommand to attach existing netns + * ip xfrm: add option to hide keys in state output + * ip xfrm: support xfrm interfaces + * rdma: add unbound workqueue to list of poll context types + * rdma: provide parent context index for all objects except CM_ID + * rdma: add prefix for driver attributes + * ss: support AF_XDP + * tc: add hit counter for matchall + * tc: add kind property to csum action + * tc: q_cake: support fwmark option + * improve batch and dump performance by caching link lookups + * more JSON support + * many text/JSON output fixes + ------------------------------------------------------------------- Sat Mar 23 05:39:54 UTC 2019 - seanlew@opensuse.org diff --git a/iproute2.spec b/iproute2.spec index b3728d3..35d2544 100644 --- a/iproute2.spec +++ b/iproute2.spec @@ -12,14 +12,14 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: iproute2 -Version: 5.0.0 +Version: 5.1 Release: 0 -%define rversion 5.0.0 +%define rversion 5.1.0 Summary: Linux network configuration utilities License: GPL-2.0-only Group: Productivity/Networking/Routing @@ -37,6 +37,7 @@ Patch3: add-explicit-typecast-to-avoid-gcc-warning.patch Patch4: xfrm-support-displaying-transformations-used-for-Mob.patch Patch6: split-link-and-compile-steps-for-binaries.patch Patch7: examples-fix-bashisms-in-example-script.patch +Patch101: Revert-tc-ematch-fix-deprecated-yacc-warning.patch Patch102: Revert-emp-fix-warning-on-deprecated-bison-directive.patch Patch201: bpf-data-section-support-poc.patch Patch202: bpf-bss-section-poc.patch @@ -87,6 +88,9 @@ bash command line completion support for iproute. %prep %setup -qn %name-%rversion %patch -P 1 -P 2 -P 3 -P 4 -P 6 -P 7 -P 201 -P 202 -p1 +%if 0%{?suse_version} < 1500 +%patch -P 101 -p1 +%endif %if 0%{?sles_version} == 11 %patch -P 102 -p1 %endif From 470682ea9d70b69b9f31b10ca8cd2c892c9b634697fb7089af02cd94860beb05 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Mon, 13 May 2019 12:39:49 +0000 Subject: [PATCH 4/4] Accepting request 702632 from home:mrostecki:branches:security:netfilter Fix changelog entry with BPF global data patches - filenames of patches were missing. OBS-URL: https://build.opensuse.org/request/show/702632 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iproute2?expand=0&rev=173 --- iproute2.changes | 7 ++++--- iproute2.spec | 2 +- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/iproute2.changes b/iproute2.changes index 01bd419..3f29acc 100644 --- a/iproute2.changes +++ b/iproute2.changes @@ -46,9 +46,10 @@ Sat Mar 23 05:39:54 UTC 2019 - seanlew@opensuse.org ------------------------------------------------------------------- Thu Mar 6 00:59:48 UTC 2019 - Joe Stringer -- Pull in bpf global data section support patches - * Corresponds to changes here: - https://github.com/cilium/iproute2/tree/static-data +- Add patches which enable support of BPF global data section, + pulled from https://github.com/cilium/iproute2/tree/static-data + * bpf-bss-section-poc.patch + * bpf-data-section-support-poc.patch ------------------------------------------------------------------- Sat Jan 26 10:39:56 UTC 2019 - mkubecek@suse.cz diff --git a/iproute2.spec b/iproute2.spec index 35d2544..146db18 100644 --- a/iproute2.spec +++ b/iproute2.spec @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ #