[meta-freescale] [meta-fsl-ppc][PATCH 5/5] cryptodev: update to 1.7 plus FSL patches

[Liu Ting]

Hello Otavio,

> -----Original Message-----
> From: Otavio Salvador [mailto:otavio.salvador at ossystems.com.br]
> Sent: Friday, July 17, 2015 8:00 PM
> To: Liu Ting-B28495
> Cc: meta-freescale at yoctoproject.org
> Subject: Re: [meta-freescale] [meta-fsl-ppc][PATCH 5/5] cryptodev: update to
> 1.7 plus FSL patches
> 
> On Fri, Jul 17, 2015 at 6:29 AM,  <b28495 at freescale.com> wrote:
> > From: Cristian Stoica <cristian.stoica at freescale.com>
> >
> > To avoid build issue when Poky upgrades cryptodev, keep a copy of
> > cryptodev-{linux,modules,tests) recipe in this repository.
> >
> > Based on the upstream, this includes the following FSL patches:
> > 0001-add-support-for-composite-TLS10-SHA1-AES-algorithm-o.patch
> > 0002-add-support-for-COMPAT_CIOCAUTHCRYPT-ioctl.patch
> > 0003-PKC-support-added-in-cryptodev-module.patch
> > 0004-Compat-versions-of-PKC-IOCTLs.patch
> > 0005-Asynchronous-interface-changes-in-cryptodev.patch
> > 0006-ECC_KEYGEN-and-DLC_KEYGEN-supported-in-cryptodev-mod.patch
> > 0007-RCU-stall-fixed-in-PKC-asynchronous-interface.patch
> > 0008-Add-RSA-Key-generation-offloading.patch
> > 0009-Fixed-compilation-error-of-openssl-with-fsl-cryptode.patch
> > 0010-add-support-for-composite-TLS10-SHA1-3DES-algorithm-.patch
> > 0011-add-support-for-TLSv1.1-record-offload.patch
> > 0012-add-support-for-TLSv1.2-record-offload.patch
> > 0013-clean-up-code-layout.patch
> > 0014-remove-redundant-data-copy-for-pkc-operations.patch
> > 0015-fix-pkc-request-deallocation.patch
> > 0016-add-basic-detection-of-asym-features.patch
> > 0017-remove-dead-code.patch
> > 0018-fix-compat-warnings.patch
> > 0019-fix-size_t-print-format.patch
> > 0020-fix-uninitialized-variable-compiler-warning.patch
> >
> > Signed-off-by: Cristian Stoica <cristian.stoica at freescale.com>
> > Signed-off-by: Ting Liu <ting.liu at freescale.com>
> 
> I understand the motivation to do this but it increases the risk of this
> version to being forgotten and security issues to not be solved.
> 
> The commit itself is fine but I would wonder if the duplication of the recipe
> is the right way to solve this.
[Liu Ting-B28495] yes, I know your concern. The best way is to upstream all the FSL patches. But the developer said the process is not under control, especially when we need to meet the SDK release cycle. The build may break too when using bbappends if there is update in poky.
Anyway, I can format a new patch if bbappend preferred.

> 
> --
> Otavio Salvador                             O.S. Systems
> http://www.ossystems.com.br        http://code.ossystems.com.br
> Mobile: +55 (53) 9981-7854            Mobile: +1 (347) 903-9750