-
Notifications
You must be signed in to change notification settings - Fork 7.3k
Revert "lib: newlib: Add workaround for #38258" #38733
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Conversation
The commit 9bd1483 was added as a workaround for the Xtensa initial malloc failure bug. This bug has been fixed in the Zephyr SDK 0.13.1 release and therefore this workaround is no longer needed. Signed-off-by: Stephanos Ioannidis <root@stephanos.io>
This commit sets the minimum required Zephyr SDK version to 0.13.1, which fixes the following critical issues: 1. Xtensa initial malloc failure (GitHub issue zephyrproject-rtos#38258) 2. ARMv8-M security extension vulnerability (CVE-2021-35465) Signed-off-by: Stephanos Ioannidis <root@stephanos.io>
@@ -16,7 +16,7 @@ | |||
# FORMAT=json: Print the output as a json formatted string, useful for Python | |||
|
|||
# This is the minimum required Zephyr-SDK version which supports CMake package | |||
set(TOOLCHAIN_ZEPHYR_MINIMUM_REQUIRED_VERSION 0.13) | |||
set(TOOLCHAIN_ZEPHYR_MINIMUM_REQUIRED_VERSION 0.13.1) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have earlier limited the requested Zephyr SDK based on arch when the SDK was a minor bump affecting only some architectures like here:
zephyr/cmake/verify-toolchain.cmake
Lines 19 to 23 in 835ff89
if("${ARCH}" STREQUAL "arm64") | |
set(TOOLCHAIN_ZEPHYR_MINIMUM_REQUIRED_VERSION 0.12.4) | |
else() | |
set(TOOLCHAIN_ZEPHYR_MINIMUM_REQUIRED_VERSION 0.12) | |
endif() |
but as Zephyr 0.13.1
affects both xtensa and arm i'm also fine with just bumping for everyone.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
so just placing this comment to get general opinions from everyone.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this will break CI environments, please send an announcement and let people update their installed SDK first.
why do we need to worry about downstream CIs in this way?? where would you make such an annoucement |
@stephanosio we could split the commits in the PR so we could merge the revert while waiting on the SDK version bump. |
@nashif I have sent out an announcement. p.s. As discussed in the TSC meeting today, a formal process regarding these breaking changes will be discussed in the Process WG later. |
Should downstream never test Zephyr's main branch? Genuine question.
In the usual Zephyr communication channels. |
Also stop hardcoding the SDK version number: Zephyr's CMake can automatically find the latest SDK in the home directory but not in /opt/toolchains so add some symbolic links. Fixes the build broken since zephyrproject-rtos/zephyr#38733 Signed-off-by: Marc Herbert <marc.herbert@intel.com>
Tired of fixing Zephyr breakages all the time (latest in zephyrproject-rtos/zephyr#38733) Also unhardcode ZEPHYR_SDK_INSTALL_DIR thanks to the previous commit. Signed-off-by: Marc Herbert <marc.herbert@intel.com>
Tired of fixing Zephyr breakages all the time (latest in zephyrproject-rtos/zephyr#38733) Also unhardcode ZEPHYR_SDK_INSTALL_DIR thanks to the previous commit. Signed-off-by: Marc Herbert <marc.herbert@intel.com>
Fixes #38258
NOTE: This PR also contains a commit to update the minimum required Zephyr SDK version to 0.13.1, which is required to support this.