aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* hostapd: set group_mgmt_cipher when ieee80211w is enabledJo-Philipp Wich2018-01-071-1/+3
| | | | | | | | | | | | In order to properly support 802.11w, hostapd needs to advertise a group management cipher when negotiating associations. Introduce a new per-wifi-iface option "ieee80211w_mgmt_cipher" which defaults to the standard AES-128-CMAC cipher and always emit a "group_mgmt_cipher" setting in native hostapd config when 802.11w is enabled. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* argp-standalone: clean up patch fuzzKevin Darbyshire-Bryant2018-01-051-8/+8
| | | | | | Refresh patches to tidy up fuzz. No functional changes Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* lua: clean up patch fuzzKevin Darbyshire-Bryant2018-01-055-43/+44
| | | | | | Refresh patches to tidy up fuzz. No functional changes Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* busybox: clean up patch fuzzKevin Darbyshire-Bryant2018-01-052-8/+3
| | | | | | Refresh patches to tidy up fuzz. No functional changes Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* opkg: switch source url to git.openwrt.orgJo-Philipp Wich2018-01-041-2/+2
| | | | | | | As LEDE is rebranding to OpenWrt now, adjust the Git source references accordingly. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* netifd: update to latest git HEADHans Dedecker2018-01-041-3/+3
| | | | | | fd5c399 proto: allow dumping protocol handlers without config_params Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* uci: add missing 'option' support to uci_rename()Tony Ambardar2018-01-021-2/+3
| | | | | | | When using the uci.sh wrapper, allow parameters to match those supported by the uci binary i.e. "uci rename <config>.<section>[.<option>]=<name>". Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* package/libs/zlib: Add host buildDaniel Engberg2018-01-021-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | Some packages such as Python/Python3 (host pip/pip3) needs this to compile. More detailed explanation provided by Alexandru: "i need the zlib/host for Python/Python3 ; because, it seems the host pip/pip3 needs this to work ; i suspect in older versions this worked, because some of the host's build env would be used in the build, and then the zlib-dev from the host distro would be used ; now, the host-build does not seem to have any -I/usr/include stuff, which is good and it also seems that Python/Python3 does not like it if the zlib-dev package is too old, so using this zlib/host would be good for this as well" Source: https://github.com/lede-project/source/pull/1329#issuecomment-351055861 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* package/libs/zlib: Add option for O3 optimizationDaniel Engberg2018-01-022-0/+21
| | | | | | | | | | Add option to use O3 optimization as not all devices have space constraints. This option is default using GCC in upstream but isn't in the CMake makefile for some reason. Source: https://github.com/madler/zlib/blob/master/configure#L170 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* package/libs/zlib: Add ARM and NEON optimizationsDaniel Engberg2018-01-024-1/+2770
| | | | | | | | | | | | | | | | | | | This adds two optimizations for ARM: NEON optimized Adler(-)32 checksum algorithm (ARMv7 and newer NEON CPUs) ARM(v7+) specific optimization for inflate I've also connected inflate optimization to the build using the following source as template. https://github.com/mirror/chromium/commit/0397489124ce7e6aced020f8b85f5034c7d5f49b#diff-a62ad2db6c83dbc205d34bb9a8884f16 Additional info: https://codereview.chromium.org/2676493007/ https://codereview.chromium.org/2722063002/ Sources: https://github.com/madler/zlib/pull/251 (only the first commit) https://github.com/madler/zlib/pull/256 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* package/libs/zlib: Use toolchain build logicDaniel Engberg2018-01-021-22/+4
| | | | | | Use build logic provided by toolchain instead of doing it manually. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* procd: procd_send_signal use signal namesKevin Darbyshire-Bryant2018-01-022-1/+5
| | | | | | | | | | | Usage documentation for 'procd_send_signal' states "The signal is SIGHUP by default, and must be specified by NAME." Make actual behaviour match the stated documented behaviour. https://wiki.openwrt.org/inbox/procd-init-scripts Suggested-by: Jo-Philip Wich <jow@mein.io> Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* procd: update to latest git HEADJohn Crispin2018-01-021-3/+3
| | | | | | | | a5954cf procd: Add %m to several functions that return errno. 810d7a5 procd: Remove redundant errno variable in several printf functions. fa5ce1c procd: Replace strerror(errno) with %m. Signed-off-by: John Crispin <john@phrozen.org>
* umdns: update to latest git HEADJohn Crispin2018-01-021-3/+3
| | | | | | 7897441 umdnsd: Replace strerror(errno) with %m. Signed-off-by: John Crispin <john@phrozen.org>
* kernel: make uas work during early bootDaniel Albers2018-01-021-1/+1
| | | | | | | | | | | | Add the uas(p) module to the modules loaded early on the boot process. The uas(p) is an modern alternative, which is used by the modern USB3 storage cases, compared to the bot protocol. To be able to use uas(p) storage cases for extroot, the kernel module has to be loaded before the search for extroot has been called. This patch changes the load order to support uas(p) storage cases for extroot. Signed-off-by: Daniel Albers <daniel.albers@public-files.de>
* fstools: update to latest git HEADJohn Crispin2018-01-021-3/+3
| | | | | | | | | 11efbf3 overlay: fix race condition when switching to jffs2 bdeb95a libblkid-tiny: add support for NTFS superblock ef2cc03 fstools: Replace strerror(errno) with %m format. 98fd5b4 libblkid-tiny: add support for UBI superblock Signed-off-by: John Crispin <john@phrozen.org>
* base-files: protect stop and reload actions with procd_lockRoman Yeryomin2018-01-021-0/+2
| | | | | Signed-off-by: Roman Yeryomin <roman@advem.lv> Signed-off-by: Andrejs Hanins <ahanins@gmail.com>
* procd: introduce procd_lock for init script protectionRoman Yeryomin2018-01-021-0/+15
| | | | | | | | | Use flock to protect init script from concurrent execution (of the same script). Important for services which generate native config files. Signed-off-by: Roman Yeryomin <roman@advem.lv> Signed-off-by: Andrejs Hanins <ahanins@gmail.com>
* busybox: enable flock by defaultRoman Yeryomin2018-01-021-1/+1
| | | | | | | This is needed for procd init script protection to work. flock adds 4248 bytes to stripped busybox binary. Signed-off-by: Roman Yeryomin <roman@advem.lv>
* busybox: backport cve-2017-16544 fixJohn Crispin2018-01-021-0/+40
| | | | | | | | | | | | | | | | | In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks. Fixes: FS#1181 - CVE-2017-16544: Backport the patch from: https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8 https://nvd.nist.gov/vuln/detail/CVE-2017-16544 Signed-off-by: Derek Werthmuller <thewerthfam@gmail.com> Signed-off-by: John Crispin <john@phrozen.org>
* base-files: rc.common: fix enable() return code and logicRoman Yeryomin2018-01-021-7/+8
| | | | | | | | | | | | | | | In current state, if there is START but no STOP, enbale() will return 1 (failure), which is wrong. Moreover there is no need to check for START/STOP twice. Instead, add err variable to save success state and and return it's value. Also eliminate the need to disable() by using 'ln -sf', which will first delete the old symlink if one exists. Changes from v1: - fixed description Signed-off-by: Roman Yeryomin <roman@advem.lv>
* procd: update to latest git HEADJohn Crispin2018-01-021-2/+2
| | | | | | | 7aad940 procd: initd: fix path allocation in early_insmod 006c19c procd: Remove unnecessary memset calls. Signed-off-by: John Crispin <john@phrozen.org>
* uci: bump to git HEAD versionJo-Philipp Wich2018-01-011-3/+3
| | | | | | | 5beb95d lua: additionally return name when looking up sections ff33bb2 lua: support extended section notation Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* nftables: fix sha256sumHauke Mehrtens2017-12-311-1/+1
| | | | | | The mirror was delivering a file with a different hash. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mwlwifi: update to version 10.3.4.0 / 2017-12-14Kabuli Chana2017-12-311-3/+3
| | | | | | Lastest stamped version Signed-off-by: Kabuli Chana <newtownBuild@gmail.com>
* kmod-sched-cake: bump to latest bakeKevin Darbyshire-Bryant2017-12-301-3/+3
| | | | | | | | | Fix overhead accounting error introduced by f33c4d6 refactor cake_advance_shaper and ack_filter Symptoms were links running under rate. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* iptables: fix nftables compile issue (FS#711)rektide de la faye2017-12-291-0/+20
| | | | | | | | | | | | | | | | Enabling IPTABLES_NFTABLES resulted in an error during build:# *** No rule to make target '../extensions/libext.a', needed by 'xtables-compat-multi'." Comments from Alexander Lochmann and Fedor Konstantinov in FS#711 provided fixes for this build error, allowing iptables to compile. https://bugs.lede-project.org/index.php?do=details&task_id=711. This commit updates the Makefile.am xtables_compat_multi_LDFLAGS and _LDADD, moving linking of extensions to LDFLAGS. Signed-off-by: rektide de la faye <rektide@voodoowarez.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* base-files: fix logic when to show failsafe bannerMatthias Schiffer2017-12-292-2/+2
| | | | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Fixes: 8170f280c4 ("base-files: set FAILSAFE in /etc/profile when /tmp/.failsafe exists")
* base-files: set FAILSAFE in /etc/profile when /tmp/.failsafe existsMatthias Schiffer2017-12-292-2/+5
| | | | | | | Since dropbear clears the environment, FAILSAFE was not set as intended in failsafe mode. This also broke sysupgrade from failsafe mode over SSH. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* busybox: add missing TARGET_CPPFLAGS and TARGET_LDFLAGSMatthias Schiffer2017-12-281-2/+3
| | | | | | | | | | | | | Unconditionally pass TARGET_CPPFLAGS (not passed at all before) and TARGET_LDFLAGS (passed only in certain non-default configuration before the Makefile streamlining). Without these flags, hardening options (PKG_FORTIFY_SOURCE and PKG_RELRO) were not actually applied to busybox. The addition of these flags increases the size of the stripped busybox binary by about 6KB (~4KB with fortify headers, ~2KB with "-znow -zrelro") with the default hardening options PKG_FORTIFY_SOURCE_1 and PKG_RELRO_FULL. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* busybox: streamline MakefileMatthias Schiffer2017-12-281-50/+17
| | | | | | | Use default Build/Install steps where possible. No binary change in default configuration, so PKG_RELEASE is not incremented. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* dnsmasq: send procd signal on service reloadFlorian Eckert2017-12-262-2/+2
| | | | | | | Send a SIGHUP signal via procd to the dnsmasq service so the instance(s) re-read(s) the /tmp/hosts/dhcp config. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* dnsmasq: rewrite config on host name modificationFlorian Eckert2017-12-261-1/+1
| | | | | | | If the hostname in /etc/config/system is modified the dnsmasq should also get triggered to rewrite/reload the config. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* layerscape: add byte_swap.py script for ls-rcw packageYangbo Lu2017-12-263-27/+67
| | | | | | | This patch is to add a byte_swap.py script for rcw bin byte swapping instead of using tclsh. Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
* layerscape: fix PKG_BUILD_DIR for packagesYangbo Lu2017-12-262-2/+2
| | | | | | | | | | PKG_BUILD_DIR was defined with quoting PKG_VERSION in layerscape package makefiles. Now PKG_VERSION has been removed from these makefiles. When PKG_BUILD_DIR quotes PKG_VERSION, '=' should be used instead ':=' to make sure PKG_VERSION has been defined in common makefile. Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
* kernel: add i2c-smbus module packagePhilip Prindeville2017-12-261-3/+18
| | | | | | | Intel motherboards (as well as the Cavium ThunderX SoC) use a superset of the I2C protocol called SMBus. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* nghttp2: bump to 1.29.0Hans Dedecker2017-12-241-2/+2
| | | | | | | | | | | | | | | | | | | | 439b9b6c (tag: v1.29.0) Update manual pages 48498452 Bump up version number to v1.29.0, LT revision to 29:1:15 d30f3816 Update manual pages 4d1139f6 Remove SPDY 48f57407 nghttpx: Update doc c1f14d73 Update manual pages 216f4dad nghttpx: Remove redundant check a4e27d76 Revert "nghttpx: Use an existing h2 backend connection as much as possible" 2365f12e Fix CMAKE_MODULE_PATH 03f7ec0f nghttpx: Write API request body in temporary file 2056e812 nghttpx: Increase api-max-request-body 1ebb6810 nghttpx: Faster configuration loading with lots of backends a3ebeeaf nghttpx: Fix crash with --backend-http-proxy-uri option 422ad1be Use NGHTTP2_REFUSED_STREAM for streams which are closed by GOAWAY 97f1735c Bump up version number to 1.29.0 Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* usbmode: update to latest git HEADJohn Crispin2017-12-241-3/+3
| | | | | | | | f40f84c support PantechMode d8dc335 support Quanta and Blackberry modes 333e486 fix support for Option modems Signed-off-by: John Crispin <john@phrozen.org>
* wireguard: bump to 20171221Kevin Darbyshire-Bryant2017-12-231-2/+2
| | | | | | | | | | | | | | | | 7e945a8 version: bump snapshot f2168aa compat: kernels < 3.13 modified genl_ops 52004fd crypto: compile on UML 6b69b65 wg-quick: dumber matching for default routes aa35d9d wg-quick: add the "Table" config option 037c389 keygen-html: remove prebuilt file No patch refresh required. Compile-test-for: ar71xx Run-tested-on: ar71xx Archer C7 v2 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* uci: update to latest git HEAD (FS#1182)Hans Dedecker2017-12-221-3/+3
| | | | | | | 25fd142 list: remove unncessary increment of n_section (FS#1182) 021fd65 file: remove unnecessary uci_fixup_section calls Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* odhcpd: update to latest git HEADHans Dedecker2017-12-221-4/+4
| | | | | | | 7aa2594 odhcpd: Replace strerror(errno) with %m format 750e457 Support muliple RAs on single interface Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* layerscape: fix package downloadHauke Mehrtens2017-12-218-16/+16
| | | | | | | | | | | | | | | | The git hash was changed for multiple layerscape packages without changing the version number. The LEDE build system will not download the packages again if the old version is already there and so some people and the build bots are using wrong version of some packages. Use PKG_SOURCE_DATE instead of PKG_VERSION to generate packages with the date and the first charterers of the git hash. This will change the file name and make the build system download them again, also if in future the git hash is changed the file name will change and trigger a new download. This should fix a problem spotted by build bot. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ramips: drop LinkIt Smart 7688 Duo userspace supportMathias Kresin2017-12-211-1/+0
| | | | | | | | | | The LinkIt Smart 7688/LinkIt Smart 7688 Duo are identical beside the extra ATmega32U4 - accessible via UART - on the the Duo. Since all relevant hardware is identical, drop the Duo special handling in userspace. Signed-off-by: Mathias Kresin <dev@kresin.me>
* uboot-layerscape-armv8_32b: fix package downloadHauke Mehrtens2017-12-201-2/+2
| | | | | | | | | | | | | | | | In commit 2b1ec44dbd3cd3 ("layerscape: add ls1012afrdm device support") The git revision and the mirror hash for this package was updated to a version which includes ls1012afrdm-uboot.bin, but the file name at dl/uboot-layerscape-armv8_32b-2017.09.tar.xz staid the same. This way most user did not download the new version but used the old file. Convert this package to the normal git clone parameters by using PKG_SOURCE_DATE instated of PKG_VERSION, now the file name in dl also contains the git hash and should change every time the git hash is updated. This should fix a problem spotted by build bot. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-crypto-hw-talitos: fix dependenciesHauke Mehrtens2017-12-201-1/+1
| | | | | | | | | | | With the updated to kernel 4.9.70 in commit f704b643b9cab ("kernel: Update kernel 4.9 to 4.9.70"), the talitos.ko kernel module got a new dependency to kmod-crypto-des in this upstream commit: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=552f74cbd6ec806ab5ce45336a26cae1e015dbe2 This fixes a build problem found by built bot. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* libiconv-full: fix compile-time linking error GCC7Jake Staehle2017-12-191-1/+1
| | | | | | | | | | | | | | | LEDE Flyspray Task 1091: Fix libiconv-full 'undefined reference' compile linker error using GCC7 Musl Tested with targets x86 (i386 and x86_64) Addition of CFLAGS "std=gnu89" fixes the linker issues, credit to harrylwc Issue found with 'minidlna' package, which depends on 'libiconv-full' Error in compile log: ../lib/.libs/libiconv.so: undefined reference to `aliases_lookup' ../lib/.libs/libiconv.so: undefined reference to `aliases2_lookup' collect2: error: ld returned 1 exit status Makefile:64: recipe for target 'iconv_no_i18n' failed Signed-off-by: Jake Staehle <jacob@staehle.us>
* mt76: update to the latest version, reverts MAC address changes causing ↵Felix Fietkau2017-12-171-3/+3
| | | | | | | | | | | | | | | | | | | performance regressions cf4a5ce mt76: fix memcpy to potential null pointer on failed allocation ca5ca8c mt76x2: fix possible NULL pointer dereferencing in mt76x2_ampdu_action() 2d4b8f5 mt76x2: mac: fix possible NULL pointer dereferencing in mt76x2_mac_write_txwi() 4ca8bba mt76x2: eeprom: fix typo in mt76x2_get_power_info_5g() 00f7e60 mt7603: fix configuration for HT40 31e9bdb mt7603: main: fix possible NULL pointer dereferencing in mt7603_ampdu_action() bf90dd2 mt7603: mcu: fix potential NULL pointer dereferencing on failed allocation 860b185 Revert "mt76x2: init: disable APCLI by default" bcd576e Revert "mt76x2: drop wiphy->addresses" bdc6f2f Revert "mt76x2: clean up MAC/BSSID address initialization" d242650 Revert "mt76x2: remove MAC address limitation for multi-vif setups" 68b0cf1 mt76x2: add functions for setting extended MAC address registers Signed-off-by: Felix Fietkau <nbd@nbd.name>
* lantiq: sync image filename with boardnameMathias Kresin2017-12-161-47/+47
| | | | | | | | | | | | | Use <manufacturer>_<modelname> as image name. Use the BOARD_NAME variable to ensure that the former used boardname is still used as the subdirectory name for the sysupgrade-tar image, to not break sysupgrade from earlier versions. While at it, normalise the image filenames by using only lower case characters and bin as file extension for sysupgrade images. Signed-off-by: Mathias Kresin <dev@kresin.me>
* lantiq: use the compatible string as board nameMathias Kresin2017-12-161-5/+5
| | | | | | | | | | | Use the first compatible string as board name in userspace. Add the new board name as well as the former used board name to the image metadata to keep compatibilty with already deployed installations. Don't add the former used boardname for boards which exists only in master or evaluation boards. Signed-off-by: Mathias Kresin <dev@kresin.me>
* kernel: add missing dependencies to kmod-crypto-acompressHauke Mehrtens2017-12-161-0/+2
| | | | | | | kmod-lib-lzo and kmod-lib-lz4 depend in kernel 4.14 on kmod-crypto-acompress, add this missing dependency. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>