| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
|\
| |
| | |
ca-certificates: updated to version 20161102
|
|/
|
|
| |
Signed-off-by: Stanislav Izmalkov <izstas@live.ru>
|
|\
| |
| | |
squashfs4: use upstream xz compression header format
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
In the upstream kernel and the upstream squashfs4 tools the xz
compression header looks the following:
struct disk_comp_opts {
__le32 dictionary_size;
__le32 flags;
};
We added some other members and also moved some existing members. Place
the members which are already in upstream header at the same position
as in that kernel and add our own at the end. The kernel should not
have a problem when there are some additional members and just ignore
them.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
|\ \
| | |
| | | |
nftables: version bump to 0.6
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Use release tarball instead of fetching the sources from git and drop
disable-doc-generation patch as running autoreconf is more expensive
than generating the docs should the required tools be found on the build
host.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
| |/
| |
| |
| |
| |
| | |
Also use release tarballs instead of fetching the sources from git.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
|\ \
| | |
| | | |
firewall version bump to 2016-11-06 and xt_id removal
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This extension was added specifically for use by firewall3. Since
firewall-2016-11-06 no longer uses it remove it before it finds other
creative uses.
Should there already be such a use-case outside of OpenWrt I suggest to
package this extension properly a la xtables-addons instead.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This version fixes loading of extensions for users of musl as it no
longer relies on undefined behaviour wrt dlclose. There is also a fix
which allows to build firewall without patched kernel headers when using
musl.
Another major feature is support for iptables-1.6.0 and vanilla iptables
in general.
Last but not least firewall no longer depends on the "in-house" iptables
extension xt_id and uses xt_comment instead for tracking its own rules.
For other changes consult the commit log.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
|\ \ \
| | | |
| | | | |
toolchain/musl: fix quoted time zone name handling
|
| | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Fix parsing and handling of the < > quoted time zone names:
Compare the correct character instead of repeatedly comparing
the first character.
Patch has been submitted to musl upstream as
http://www.openwall.com/lists/musl/2016/10/24/3
Longer explanation in
http://www.openwall.com/lists/musl/2016/10/19/1
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
|\ \ \
| |_|/
|/| | |
kmod-crypto-iv fix and Linux 4.8 support
|
| | |
| | |
| | |
| | |
| | |
| | | |
Commit 3a01d0ee2b991c8c267620e63a4ab47cd8c30cc4 upstream
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
| |/
| |
| |
| |
| |
| |
| |
| | |
There is a separate package kmod-crypto-echainiv for echainiv.ko. Selecting
both packages led to a conflict, so remove the file from kmod-crypto-iv.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
|
|\ \
| |/
|/| |
CVE-2016-5195 (dirtycow) fixes for 3.18, 4.1, 4.4
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Fixes CVE-2016-5195, backport the mm patch into 097- until the kernel
version is upgraded.
Compile-tested on ar71xx, ramips.
Runtime-tested on ramips.
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Patch 610- is updated as check_entry helper was killed
Patch 666- is updated (thanks to Stijn Tintel)
Fixes CVE-2016-5195 (dirtycow)
Compile-tested on brcm47xx and rb532
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Patch 610- is updated as check_entry helper was killed in 3.18.37
Patch 666- is updated (thanks to Stijn Tintel)
Fixes CVE-2016-5195 (dirtycow)
Compile-tested on adm5120 and mcs814x
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
|\ \
| | |
| | | |
ar71xx: Add support to DomyWifi DW33D
|
| |/
| |
| |
| | |
Signed-off-by: Jing Lin <mumuqz@163.com>
|
|\ \
| |/
|/| |
add tpm support
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This adds kernel support for tpm's providing:
* kmod-tpm - tpm framework
* kmod-tpm-i2c-infineon - infineon i2c 1.2 spec tpm
* kmod-random-tpm - tpm backed rng
Signed-off-by: Ian Pozella <Ian.Pozella@imgtec.com>
Signed-off-by: Abhijit Mahajani <Abhijit.Mahajani@imgtec.com>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
|/
|
|
| |
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
|
|\
| |
| | |
Revert legacy kernels (3.18/4.1) to last known-good release
|
| |
| |
| |
| |
| |
| | |
Stay on 4.1.27
This reverts commit 231ef70f455fcc230a400af90a13e181a2c261cd.
|
| |
| |
| |
| |
| |
| | |
Stay on 3.18.36
This reverts commit 83767cf94f909f5932540da7641a12b7dfa71d85.
|
|\|
| |
| | |
ar71xx: backport flow-control related patches
|
| |
| |
| |
| |
| |
| |
| | |
It apparently causes a regression on some devices if the ethernet cable
is plugged in while booting.
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| |
| |
| | |
Should fix LAN speed issues on some devices. This is an updated version
of the previously reverted commit with the same name.
It improves the check for MACs connected to a built-in switch
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|/
|
|
|
|
|
|
| |
This reverts commit fca52fb7f382d25307d8633d1ed171f79989f65d.
It was found to cause the WAN port to fail on some AR934x devices
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|\
| |
| | |
odhcp* and omcproxy upstream relocation
|
| |
| |
| |
| |
| |
| |
| | |
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.
Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
|
| |
| |
| |
| |
| |
| |
| | |
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.
Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
|
|/
|
|
|
|
|
| |
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.
Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
|
|\
| |
| | |
include: improve consistency of PATH etc. in host and target package builds
|
| |
| |
| |
| |
| |
| |
| | |
Package/*/install was using a different PATH than all other steps like
Build/Install, which was confusing and easily led to mistakes.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Having a different PATH in Host/Install than in other steps like Host/Build
is confusing and easily leads to mistakes. Setting all of Host/Exports
makes host builds match target builds (Build/Install is part of
$(STAMP_BUILT), which has Build/Exports set).
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
| |
| |
| |
| |
| |
| |
| |
| | |
It seems the intention was to add both $(STAGING_DIR_HOST)/... and
$(STAGING_DIR)/host/... instead of passing $(STAGING_DIR_HOST) twice. This
makes the definition match HOST_CPPFLAGS and HOST_LDFLAGS.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
| |
| |
| |
| |
| |
| |
| | |
Makes it more consistent with package builds.
Based-on-patch-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
|
|\ \
| |/
|/| |
netfilter,iptables: add optional CHECKSUM module
|
|/
|
|
| |
Signed-off-by: Denis Osvald <denis.osvald@sartura.hr>
|
|\
| |
| | |
gemini: bump to 4.4
|