| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| | |
firewall version bump to 2016-11-06 and xt_id removal
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This extension was added specifically for use by firewall3. Since
firewall-2016-11-06 no longer uses it remove it before it finds other
creative uses.
Should there already be such a use-case outside of OpenWrt I suggest to
package this extension properly a la xtables-addons instead.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This version fixes loading of extensions for users of musl as it no
longer relies on undefined behaviour wrt dlclose. There is also a fix
which allows to build firewall without patched kernel headers when using
musl.
Another major feature is support for iptables-1.6.0 and vanilla iptables
in general.
Last but not least firewall no longer depends on the "in-house" iptables
extension xt_id and uses xt_comment instead for tracking its own rules.
For other changes consult the commit log.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
|\ \
| | |
| | | |
toolchain/musl: fix quoted time zone name handling
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Fix parsing and handling of the < > quoted time zone names:
Compare the correct character instead of repeatedly comparing
the first character.
Patch has been submitted to musl upstream as
http://www.openwall.com/lists/musl/2016/10/24/3
Longer explanation in
http://www.openwall.com/lists/musl/2016/10/19/1
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
|\ \ \
| |_|/
|/| | |
kmod-crypto-iv fix and Linux 4.8 support
|
| | |
| | |
| | |
| | |
| | |
| | | |
Commit 3a01d0ee2b991c8c267620e63a4ab47cd8c30cc4 upstream
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
| |/
| |
| |
| |
| |
| |
| |
| | |
There is a separate package kmod-crypto-echainiv for echainiv.ko. Selecting
both packages led to a conflict, so remove the file from kmod-crypto-iv.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
|\ \
| |/
|/| |
CVE-2016-5195 (dirtycow) fixes for 3.18, 4.1, 4.4
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Fixes CVE-2016-5195, backport the mm patch into 097- until the kernel
version is upgraded.
Compile-tested on ar71xx, ramips.
Runtime-tested on ramips.
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Patch 610- is updated as check_entry helper was killed
Patch 666- is updated (thanks to Stijn Tintel)
Fixes CVE-2016-5195 (dirtycow)
Compile-tested on brcm47xx and rb532
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Patch 610- is updated as check_entry helper was killed in 3.18.37
Patch 666- is updated (thanks to Stijn Tintel)
Fixes CVE-2016-5195 (dirtycow)
Compile-tested on adm5120 and mcs814x
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
|\ \
| | |
| | | |
ar71xx: Add support to DomyWifi DW33D
|
| |/
| |
| |
| | |
Signed-off-by: Jing Lin <mumuqz@163.com>
|
|\ \
| |/
|/| |
add tpm support
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This adds kernel support for tpm's providing:
* kmod-tpm - tpm framework
* kmod-tpm-i2c-infineon - infineon i2c 1.2 spec tpm
* kmod-random-tpm - tpm backed rng
Signed-off-by: Ian Pozella <Ian.Pozella@imgtec.com>
Signed-off-by: Abhijit Mahajani <Abhijit.Mahajani@imgtec.com>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
|/
|
|
| |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
|\
| |
| | |
Revert legacy kernels (3.18/4.1) to last known-good release
|
| |
| |
| |
| |
| |
| | |
Stay on 4.1.27
This reverts commit 231ef70f455fcc230a400af90a13e181a2c261cd.
|
| |
| |
| |
| |
| |
| | |
Stay on 3.18.36
This reverts commit 83767cf94f909f5932540da7641a12b7dfa71d85.
|
|\|
| |
| | |
ar71xx: backport flow-control related patches
|
| |
| |
| |
| |
| |
| |
| | |
It apparently causes a regression on some devices if the ethernet cable
is plugged in while booting.
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| |
| |
| | |
Should fix LAN speed issues on some devices. This is an updated version
of the previously reverted commit with the same name.
It improves the check for MACs connected to a built-in switch
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|/
|
|
|
|
|
|
| |
This reverts commit fca52fb7f382d25307d8633d1ed171f79989f65d.
It was found to cause the WAN port to fail on some AR934x devices
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|\
| |
| | |
odhcp* and omcproxy upstream relocation
|
| |
| |
| |
| |
| |
| |
| | |
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.
Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
|
| |
| |
| |
| |
| |
| |
| | |
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.
Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
|
|/
|
|
|
|
|
| |
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.
Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
|
|\
| |
| | |
include: improve consistency of PATH etc. in host and target package builds
|
| |
| |
| |
| |
| |
| |
| | |
Package/*/install was using a different PATH than all other steps like
Build/Install, which was confusing and easily led to mistakes.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Having a different PATH in Host/Install than in other steps like Host/Build
is confusing and easily leads to mistakes. Setting all of Host/Exports
makes host builds match target builds (Build/Install is part of
$(STAMP_BUILT), which has Build/Exports set).
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
| |
| |
| |
| |
| |
| |
| |
| | |
It seems the intention was to add both $(STAGING_DIR_HOST)/... and
$(STAGING_DIR)/host/... instead of passing $(STAGING_DIR_HOST) twice. This
makes the definition match HOST_CPPFLAGS and HOST_LDFLAGS.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
| |
| |
| |
| |
| |
| |
| | |
Makes it more consistent with package builds.
Based-on-patch-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
|\ \
| |/
|/| |
netfilter,iptables: add optional CHECKSUM module
|
|/
|
|
| |
Signed-off-by: Denis Osvald <denis.osvald@sartura.hr>
|
|\
| |
| | |
gemini: bump to 4.4
|
| |
| |
| |
| | |
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
|
| |
| |
| |
| | |
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
|
|\|
| |
| | |
brcm63xx fixes
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Fix support for the Comtrend CT-536+, CT-5361 and CT-5621T routers support.
Currently the firmware is broken for these routers, because there is a missing
bar in the code at the DTS file avoiding to match with DTS stuff at the kernel. This
causes the router boots without ethernet connectivity. The status led also has a typo.
Signed-off-by: Daniel Gonzalez <dgcbueu@gmail.com>
Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
|
| |
| |
| |
| |
| |
| |
| | |
One button of the HG556a-C has the wrong GPIO pin defined in the dts file,
fix it
Signed-off-by: Daniel Gonzalez <dgcbueu@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Defer the CFE_EXTRAs evaluation to allow overriden BLOCK_SIZE and
IMAGE_OFFSET take effect, and replace the unused IMAGE_SIZE with
IMAGE_OFFSET in DEVICE_VARS.
This fixes image generation for targets using different offsets or
blocksizes.
Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
|