Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.0/patches/2198163/?format=api
{ "id": 2198163, "url": "http://patchwork.ozlabs.org/api/1.0/patches/2198163/?format=api", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/1.0/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "" }, "msgid": "<20260219134834.151782-2-fabien.lehoussel@smile.fr>", "date": "2026-02-19T13:48:29", "name": "[v2,1/2] linux/linux.mk: add generation of compile_commands.json", "commit_ref": null, "pull_url": null, "state": "superseded", "archived": false, "hash": "72b5b45752d3ae12a64736b8cad045ca3d48d65b", "submitter": { "id": 91059, "url": "http://patchwork.ozlabs.org/api/1.0/people/91059/?format=api", "name": "Fabien LEHOUSSEL", "email": "fabien.lehoussel@smile.fr" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260219134834.151782-2-fabien.lehoussel@smile.fr/mbox/", "series": [ { "id": 492679, "url": "http://patchwork.ozlabs.org/api/1.0/series/492679/?format=api", "date": "2026-02-19T13:48:28", "name": "Linux kernel CVE filtering improvements", "version": 2, "mbox": "http://patchwork.ozlabs.org/series/492679/mbox/" } ], "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2198163/checks/", "tags": {}, "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=SP4Wj+R2;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fGvqL5tmmz1xvg\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Fri, 20 Feb 2026 00:48:46 +1100 (AEDT)", "from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 36F2B82344;\n\tThu, 19 Feb 2026 13:48:44 +0000 (UTC)", "from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 2RYAT_tbWoBb; Thu, 19 Feb 2026 13:48:43 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 676B682347;\n\tThu, 19 Feb 2026 13:48:43 +0000 (UTC)", "from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n by lists1.osuosl.org (Postfix) with ESMTP id 1B7261CE\n for <buildroot@buildroot.org>; Thu, 19 Feb 2026 13:48:41 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp4.osuosl.org (Postfix) with ESMTP id 0D5114098E\n for <buildroot@buildroot.org>; Thu, 19 Feb 2026 13:48:41 +0000 (UTC)", "from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id sJYW2j3V8wtC for <buildroot@buildroot.org>;\n Thu, 19 Feb 2026 13:48:40 +0000 (UTC)", "from mail-wm1-x332.google.com (mail-wm1-x332.google.com\n [IPv6:2a00:1450:4864:20::332])\n by smtp4.osuosl.org (Postfix) with ESMTPS id 3C3154097A\n for <buildroot@buildroot.org>; Thu, 19 Feb 2026 13:48:40 +0000 (UTC)", "by mail-wm1-x332.google.com with SMTP id\n 5b1f17b1804b1-48372efa020so7696555e9.2\n for <buildroot@buildroot.org>; Thu, 19 Feb 2026 05:48:40 -0800 (PST)", "from FRSMI25-GRAVITY.idf.intranet\n (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145])\n by smtp.gmail.com with ESMTPSA id\n 5b1f17b1804b1-4839f97831bsm16604295e9.12.2026.02.19.05.48.36\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Thu, 19 Feb 2026 05:48:37 -0800 (PST)" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp1.osuosl.org 676B682347", "OpenDKIM Filter v2.11.0 smtp4.osuosl.org 3C3154097A" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1771508923;\n\tbh=/Tp2jR+sRPiOzgKZiox8fRPieD4D5DOTeKintcbq+Yc=;\n\th=To:Cc:Date:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=SP4Wj+R2SLkk6pcizyxqZiKMmKilHu8/tSVhH+PsnWwWAkAEQKZHNEe8Pl/0awZ+F\n\t CXGQPxDviPpdn9RuTstvnnS1R5tM5Xx3pRATyObJw7ty02ePkAuJ0vwXmyFtEXNlOP\n\t SfPigi6rba/mrOxRl5kDtjamfOjnHEeFX9aV4BXQyyaNfKcd7NZ439g6KvCpdoE1P0\n\t UPndMuVb6+jfSlzs9PZUhlHcXxqOTPdyks46w0G2wyi8K5BlJgAmxcSl0UyWwUIHwS\n\t EhFx2M7zWegCvg3gsd93UMiiKNBn9JjofhiEAfM/b5dErn0pE7GxY6r5n722BxIpoV\n\t NAf7nlHDhHZmA==", "Received-SPF": "Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::332; helo=mail-wm1-x332.google.com;\n envelope-from=fabien.lehoussel@smile.fr; receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp4.osuosl.org 3C3154097A", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20230601; t=1771508918; x=1772113718;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from\n :to:cc:subject:date:message-id:reply-to;\n bh=R+lyYzbjth9Ii3j5AJ3O4IZ7ZYioXPS8uCPVfFZDixY=;\n b=VNnh2iiNTkEwtq/muZOfKp7OHbupK3oCEFxns0tNza4AveBDhLB0BgGpGYAa0rL94a\n fe7zfBTA0fCraXlJghz3/zmuF8reBEI/FQbW3cFAecVbXUbv58qjISnoLLC/SevIMgaM\n rI2cNR3iglxlwWypg2ApW6eAOuOPVRcS1PqqGhv/BWuoPngu9tDGYVj65tnMiRw+57He\n oAItopg3r2yIQejwQ5lZms0lppXm2TTNqYNtBal+WIw4Yu7LwkWF0KH9FBl3I+sUcOtZ\n k2locVah9mophc2hfIUluQD68PapEAV3vZnUcroiyZQWQFhlpp0BSsaipIVzr7ubNv4b\n KZqQ==", "X-Gm-Message-State": "AOJu0Yx3bJ3dbFLEAO8UVWOclx5eRV9JGmWQa1Fx8KYHXjdDNckgml7E\n fYmY8O3l/jl+8Ywwjee25UM1miQ+Pe/1qAwIsV0KtOYbFAG10q5jZlSWS9ttH4fB4iWpT9HyvEY\n 0lu71", "X-Gm-Gg": "AZuq6aLAEno1kh9Xk3qFXUMND/5Qd3JGVCHbRq/U9ktBCpHYE7OxBFim+SDaj/ZQ4oA\n gWftQBTQHrWLHGv+KMSZHEUCPOu2ONwjv6rySGzwI/vMA8//NgvyDQ8tAU07maQuqkP3NRM4Nib\n oBv7WJZZpccIjunZVYzdm2eWHlHdTD92eABsiAbJwGQpC+r2mxFzLpfnNe0CUc7fTfui9YDrDDM\n cDrXZ/Af/IQ0TMW6oe/gmEcYoTJQchD5aVzjTVrc8moQlPvIFEN4V9IULECNbtFcEKlTLNucY8O\n jxmC2DFEZ0AimIlNHE8F1A3Oyyz4fCae+v7HOaCnZc0XDBchflTqthSxRgoMZgY3rc8xN0ocheS\n wW3ItZy3mInuwQBfO9TkLIo/xKQ9dj5Myt3mG2tAWbqDEXlWb/6BdD8IHDJ4x7YGE71ewOGyTgi\n BaPsTObaVti+scO/6X/bXj2qJcmBtuvjuA73F3191bv0nPbZGNQUb8Evx0eHGa1YMeh/QrPvCZN\n Oz/fNnH/kIssquvR9JsRvj9ci3idFqaZxdycZVGpA==", "X-Received": "by 2002:a05:600c:a09:b0:480:4d38:7abc with SMTP id\n 5b1f17b1804b1-48379bbc49emr281725735e9.11.1771508917905;\n Thu, 19 Feb 2026 05:48:37 -0800 (PST)", "To": "buildroot@buildroot.org", "Cc": "Thomas Perale <thomas.perale@mind.be>,\n Fabien Lehoussel <fabien.lehoussel@smile.fr>", "Date": "Thu, 19 Feb 2026 14:48:29 +0100", "Message-ID": "<20260219134834.151782-2-fabien.lehoussel@smile.fr>", "X-Mailer": "git-send-email 2.43.0", "In-Reply-To": "<20260219134834.151782-1-fabien.lehoussel@smile.fr>", "References": "<20260219134834.151782-1-fabien.lehoussel@smile.fr>", "MIME-Version": "1.0", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=smile.fr; s=google; t=1771508918; x=1772113718; darn=buildroot.org;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:from:to:cc:subject:date\n :message-id:reply-to;\n bh=R+lyYzbjth9Ii3j5AJ3O4IZ7ZYioXPS8uCPVfFZDixY=;\n b=ZGfFH/qRKuj+Man+nrhvJG12MOaW2d7u+2YGGLcZXF7Lg5GCX2+IrdgzhTvMhmQLni\n wHvWYTpM6YexZvW7kUmWTVOJa5mKOE2ohXU6RG5bfX0tDho4XZc/30xfY5MjaHCB16AH\n 7ABCgVkl850BIO1caPAP6xqnMLGVTy2IpogrE=", "X-Mailman-Original-Authentication-Results": [ "smtp4.osuosl.org;\n dmarc=pass (p=reject dis=none)\n header.from=smile.fr", "smtp4.osuosl.org;\n dkim=pass (1024-bit key,\n unprotected) header.d=smile.fr header.i=@smile.fr header.a=rsa-sha256\n header.s=google header.b=ZGfFH/qR" ], "Subject": "[Buildroot] [PATCH v2 1/2] linux/linux.mk: add generation of\n compile_commands.json", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "From": "Fabien Lehoussel via buildroot <buildroot@buildroot.org>", "Reply-To": "Fabien Lehoussel <fabien.lehoussel@smile.fr>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "Enable automatic generation of compile_commands.json during the kernel\nbuild process to facilitate security analysis and CVE filtering.\n\nThe compile_commands.json file is generated after the kernel build\nusing the native kernel target (available since Linux 5.4). It\ncontains the complete list of compiled source files with their\ncompilation commands and flags.\n\nThe generated file is saved as linux_compile_commands.json in the\nbinaries directory and can be used to:\n- Extract the exact list of compiled kernel files\n- Cross-reference with CVE databases (NVD, CNA) to filter relevant\n vulnerabilities\n\nIn the future, this information could be leveraged to:\n- Map affected files to their corresponding Kconfig CONFIG_ options\n- Determine which CVEs are actually applicable based on the current\n build configuration\n- Provide more accurate vulnerability impact analysis\n\nSigned-off-by: Fabien Lehoussel <fabien.lehoussel@smile.fr>\n---\n linux/Config.in | 20 ++++++++++++++++++++\n linux/linux.mk | 12 ++++++++++++\n 2 files changed, 32 insertions(+)", "diff": "diff --git a/linux/Config.in b/linux/Config.in\nindex 4ed9104695..c6929a4a7c 100644\n--- a/linux/Config.in\n+++ b/linux/Config.in\n@@ -519,6 +519,26 @@ config BR2_LINUX_KERNEL_INSTALL_TARGET\n \t /boot if DTBs have been generated by the kernel build\n \t process.\n \n+\n+config BR2_LINUX_KERNEL_COMPILE_COMMANDS\n+\tbool \"Generate compile_commands.json file\"\n+\thelp\n+\t Generate compile_commands.json during the Linux kernel build.\n+\t This file contains the exact list of all compiled kernel files\n+\t with the current build options/configuration in JSON format\n+\n+\t The generated file is copied to the binaries directory as\n+\t linux_compile_commands.json and can be used for:\n+\t - Static analysis and code indexing tools\n+\t - Cross-referencing with CVE databases (NVD, CNA) to determine\n+\t which vulnerabilities are actually applicable to the current\n+\t kernel build configuration\n+\n+\t Note: This option requires Linux kernel 5.4 or newer.\n+\n+\t If unsure, say N.\n+\n+\n config BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL\n \tbool \"Needs host OpenSSL\"\n \thelp\ndiff --git a/linux/linux.mk b/linux/linux.mk\nindex c61089bfe0..649921a87b 100644\n--- a/linux/linux.mk\n+++ b/linux/linux.mk\n@@ -550,6 +550,18 @@ define LINUX_BUILD_CMDS\n \t$(LINUX_APPEND_DTB)\n endef\n \n+define LINUX_GENERATE_COMPILE_COMMANDS\n+\t@$(call MESSAGE,\"Generating compile_commands.json\")\n+\t$(Q)$(LINUX_MAKE_ENV) $(BR2_MAKE) $(LINUX_MAKE_FLAGS) \\\n+\t\t-C $(@D) \\\n+\t\tcompile_commands.json\n+\tcp $(@D)/compile_commands.json $(BINARIES_DIR)/linux_compile_commands.json\n+endef\n+\n+ifeq ($(BR2_LINUX_KERNEL_GENERATE_COMPILE_COMMANDS),y)\n+LINUX_POST_BUILD_HOOKS += LINUX_GENERATE_COMPILE_COMMANDS\n+endif\n+\n ifeq ($(BR2_LINUX_KERNEL_APPENDED_DTB),y)\n # When a DTB was appended, install the potential several images with\n # appended DTBs.\n", "prefixes": [ "v2", "1/2" ] }