aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* ubox: fix sha256 mirror hashHauke Mehrtens2017-03-301-1/+1
| | | | | | | | | | Commit 5c20a4fec923c3 ("ubox: turn logd into a separate package") changed the PKG_SOURCE_DATE which is also included in the tar file. This change resulted in a new tar with a different hash, but the sha256 hash was not updated. Fix the sha256 hash value in this commit to match what would be created from git and what is already on the mirror. Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
* odhcpd: fix sha256 sumHauke Mehrtens2017-03-301-1/+1
| | | | | | | | The sha256sum added in commit b8567cb44e9e4f ("odhcpd: update to git HEAD version (FS#396)") does not match the sha256sum of the file on the mirror or when I clone it. Update the sha256 sum to the correct value. Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
* firewall: document rules for IPSec ESP/ISAKMP with 'name' optionYousong Zhou2017-03-282-15/+16
| | | | | | | | | | These are recommended practices by REC-22 and REC-24 of RFC6092: "Recommended Simple Security Capabilities in Customer Premises Equipment (CPE) for Providing Residential IPv6 Internet Service" Fixes FS#640 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* iw: enable MESH ID in scan outputMatthias Schiffer2017-03-251-4/+5
| | | | | | | | Make scan output useful for 802.11s meshes. The common print_ssid function is used, so this doesn't add any additional code. Based-on-patch-by: Jan-Tarek Butt <tarek@ring0.de> Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* busybox: vi: backporting patches to fix ZZ and :x commandYousong Zhou2017-03-253-1/+154
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* umdns: update to the version 2017-03-21Rafał Miłecki2017-03-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | This includes following changes: 480d7bc Fix sending unicast questions on cache expire a0403cd Keep source sockaddr for every cached DNS record 1478293 Fix code freeing cached non-A(AAA) records too early 9f1cc22 Fix replying to "QU" questions received on unicast interface 943bedb Fix reading port of incoming packets c725494 Use MCAST_PORT define for port 5353 ce7e9e9 Use one define for DNS-Based Service Discovery service name e1bacef Drop entries cached for interface we're going to delete 496aeba Fix comment typo in cache_gc_timer f89986b Fix refreshing cached A(AAA) records that expire Previous updates made umdns work as expected on startup but there were still many bugs. They were mostly related to runtime - cache management and requests + responses. E.g. umdns was never able to send question on DNS record expire. It was also ignoring all incoming unicast questions. Since these issues are quite serious it makes sense to backport this update to the stable branch. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* umdns: update to the version 2017-03-14Rafał Miłecki2017-03-241-3/+3
| | | | | | | | | This includes 3 cleanups: fd5a160 Don't cache hosts as services 80dd246 Refresh DNS records A and AAAA directly 6515101 Access cached records (instead of services) to read list of hosts Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* iproute2: fix ip monitor can't work when NET_NS is not enabledYousong Zhou2017-03-192-1/+41
| | | | | | | | The bug appeared in v4.1.0 and was fixed since v4.8.0 Fixes FS#620 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* curl: fix CVE-2017-2629 SSL_VERIFYSTATUS ignoredHauke Mehrtens2017-03-133-5/+36
| | | | | | | This fixes the following security problem: https://curl.haxx.se/docs/adv_20170222.html Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: update to version 2.4.2Hauke Mehrtens2017-03-132-4/+4
| | | | | | | | | This fixes the following security problems: * CVE-2017-2784: Freeing of memory allocated on stack when validating a public key with a secp224k1 curve * SLOTH vulnerability * Denial of Service through Certificate Revocation List Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mac80211: mwifiex-sdio: select DRIVER_11AC_SUPPORTÁlvaro Fernández Rojas2017-03-111-1/+1
| | | | Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* mac80211: mwifiex-pcie: select DRIVER_11AC_SUPPORTÁlvaro Fernández Rojas2017-03-111-1/+1
| | | | Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* mvebu: wrt3200acm enable SDIO interfaceHenryk Heisig2017-03-112-0/+11
| | | | | | add mwifiex-sdio package to wrt3200acm Signed-off-by: Henryk Heisig <hyniu@o2.pl>
* mac80211: add support for Marvell 802.11n/802.11ac SDIO Wireless cardsHenryk Heisig2017-03-112-1/+27
| | | | | | | | This adds option to build kernel module and firmware packages for a Marvell 8887 SDIO Wireless device Signed-off-by: Henryk Heisig <hyniu@o2.pl> Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* brcm2708: remove duplicated gzip from image generationÁlvaro Fernández Rojas2017-03-111-1/+0
| | | | | | Images are now automatically gziped so remove custom image command Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* ar71xx: add ath10k driver and firmware for Netgear R6100 to firmware imageStijn Segers2017-03-111-1/+1
| | | | | | | | A Netgear R6100 owner reported the LEDE images lack the ath10k driver and firmware [1]. This patch adds both to the R6100 image. [1] https://forum.lede-project.org/t/netgear-r6100-5ghz-wifi-not-working-after-initial-install/2222 Signed-off-by: Stijn Segers <francesco.borromini@inventati.org>
* umdns: update to the 2017-03-10 versionRafał Miłecki2017-03-101-3/+3
| | | | | | | This fixes crash in interface_start caused by freeing interface in interface_free without stopping a timeout. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* brcm2708: add support for the new Raspberry Pi Zero WStijn Tintel2017-03-094-4/+12
| | | | | | Tested-by: Stijn Tintel <stijn@linux-ipv6.be> Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* brcm2708: order boards and models alphabeticallyStijn Tintel2017-03-084-20/+24
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* brcm2708: update linux 4.4 patches to latest versionÁlvaro Fernández Rojas2017-03-0843-9/+3194
| | | | | | | | | | As usual these patches were extracted and rebased from the raspberry pi repo: https://github.com/raspberrypi/linux/tree/rpi-4.4.y - led1 can't be controlled on rpi-3 for linux 4.4, remove it. - Fix modules.mk typos. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* brcm2708-gpu-fw: update to latest versionÁlvaro Fernández Rojas2017-03-081-8/+8
| | | | | | This is needed in order to add support for the new RPi Zero W Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* ramips: fix Linksys RE6500 switch port mappingJo-Philipp Wich2017-03-071-1/+4
| | | | | | | | Properly map the internal switch ports to the proper LAN1..LAN4 labels. Fixes #530. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* ppp: propagate master peerdns setting to dynamic slave interfaceJo-Philipp Wich2017-03-073-2/+4
| | | | | | | | | | Honour the parent interfaces peerdns option when spawning a virtual DHCPv6 interface in order to avoid pulling in IPv6 DNS servers when the user opted to inhibit peer DNS servers in the configuration. Fixes #597. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* kernel: update kernel 4.4 to 4.4.52Kevin Darbyshire-Bryant2017-03-033-11/+11
| | | | | | | | Bump kernel from 4.4.50 to 4.4.52 Refresh patches Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* bcm53xx: backport accepted BCM5301X and BCM53573 patchesRafał Miłecki2017-03-039-0/+689
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: include Broadcom PHY driver in the kernelRafał Miłecki2017-03-031-0/+2
| | | | | | | | | | | | | | | | | Initial idea was to use package with this PHY driver for devices that need it. Unfortunately this can't work as bgmac is built-in and PHY probing happens before loading modules - it results in PHY subsystem picking default (generic) PHY driver. There were two ways of solving this: 1) Making bcm53xx use bgmac as module xor 2) Built-in Broadcom PHY driver After some quick discussion it seems we can simply built-in the driver as increased kenel size is relatively small (1805 B). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kirkwood: fix include in etc/board.d/02_networkAlberto Bursi2017-03-011-0/+1
| | | | | | the mtd_get_mac_ascii function called within this script requires the inclusion of /lib/functions/system.sh Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* wireless-tools: Change download url to githubHsing-Wang Liao2017-03-011-1/+1
| | | | Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
* grub2: update to 2.02~rc1Alif M. Ahmad2017-03-011-2/+2
| | | | Signed-off-by: Alif M. Ahmad <alive4ever@live.com>
* iftop: bump to latest upstreamKevin Darbyshire-Bryant2017-03-012-73/+8
| | | | | | | | | Drops a LEDE carried patch now upstream. Convert to autotools. A number of nits fixed upstream (dns & short packet handling most notable) Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* swconfig: Bugfix switch_port uci option parsingBen Kelly2017-03-011-2/+2
| | | | | | | | When not defining 'device' or 'vlan' in relevant switch_port uci sections, behaviour is inconsistent due to *devn, *port and *vlan pointers not being zero initialized. Signed-off-by: Ben Kelly <ben@benjii.net>
* netifd: fix stopping netifd + interfacesFelix Fietkau2017-03-011-10/+3
| | | | | | | stop() is overwritten by rc.common, so implement stop_service instead. While at it, remove the now unnecessary restart() override Signed-off-by: Felix Fietkau <nbd@nbd.name>
* libpcap: add optional netfilter supportMartin Schiller2017-03-012-2/+9
| | | | | | This is needed to use the nflog interface with tcpdump Signed-off-by: Martin Schiller <mschiller@tdt.de>
* archs38: only calculate entry point address when necessaryFelix Fietkau2017-03-011-5/+2
| | | | | | | $(eval) runs even during prereq check, which can cause bogus error messages Signed-off-by: Felix Fietkau <nbd@nbd.name>
* arc770: only calculate entry point address when necessaryFelix Fietkau2017-03-011-5/+2
| | | | | | | $(eval) runs even during prereq check, which can cause bogus error messages Signed-off-by: Felix Fietkau <nbd@nbd.name>
* px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtlsFelix Fietkau2017-03-0118-8017/+22
| | | | | | | | px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mbedtls: add --function-sections and --data-sections to CFLAGSFelix Fietkau2017-03-011-0/+2
| | | | | | | This allows binaries that links these libraries statically to be reduced by using --gc-sections on link Signed-off-by: Felix Fietkau <nbd@nbd.name>
* scripts/feeds: Reuse TOPDIR if defined in environmentMichal Sojka2017-03-011-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The feeds script sets value of TOPDIR in a way that is inconsistent with how toplevel Makefile sets it. The inconsistency manifests when I use a "build directory" with symlinks to LEDE source (see below). When make is invoked in such a directory, make's TOPDIR variable is set to that directory, whereas scripts/feeds sets TOPDIR to the top of LEDE source, which results in creating feeds directory inside the LEDE source instead of in the build directory. This patch changes the script so that it reuses the TOPDIR value form the environment if it exists. The result is that 'make package/symlinks' correctly fetches feeds to the build directory instead in the source. I use the following commands to create the build directory: ln -s $SRC/config config ln -s $SRC/Config.in Config.in ln -s $SRC/feeds.conf.default feeds.conf.default ln -s $SRC/include include ln -s $SRC/Makefile Makefile mkdir package ln -s $SRC/package/base-files package/base-files ln -s $SRC/package/boot package/boot ln -s $SRC/package/devel package/devel ln -s $SRC/package/firmware package/firmware ln -s $SRC/package/kernel package/kernel ln -s $SRC/package/libs package/libs ln -s $SRC/package/Makefile package/Makefile ln -s $SRC/package/network package/network ln -s $SRC/package/system package/system ln -s $SRC/package/utils package/utils ln -s $SRC/rules.mk rules.mk ln -s $SRC/scripts scripts ln -s $SRC/target target ln -s $SRC/toolchain toolchain ln -s $SRC/tools tools This allows me to easily test changes in LEDE on multiple targets. Signed-off-by: Michal Sojka <sojkam1@fel.cvut.cz>
* kernel: add Chinese codepagesHsing-Wang Liao2017-03-011-0/+32
| | | | Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
* gen-dependencies.sh: fix handling variations in "file" outputFelix Fietkau2017-03-011-1/+1
| | | | | | On some systems, file adds ", with debug info" after "not stripped" Signed-off-by: Felix Fietkau <nbd@nbd.name>
* rstrip.sh: fix handling variations in "file" outputFelix Fietkau2017-03-011-1/+1
| | | | | | On some systems, file adds ", with debug info" after "not stripped" Signed-off-by: Felix Fietkau <nbd@nbd.name>
* libpcap: remove feature dependencies on kmod-* packagesFelix Fietkau2017-03-011-2/+0
| | | | | | USB support could be built into the kernel as well Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ebtables: update to last commitAnsuel Smith2017-03-013-183/+12
| | | | | | Refreshed patches Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* hostapd: mv netifd.sh hostapd.shDaniel Albers2017-03-012-1/+1
| | | | | | same name for the file on the host and target Signed-off-by: Daniel Albers <daniel.albers@public-files.de>
* ath10k-firmware: update qca9984 firmwarePavel Kubelun2017-03-011-3/+3
| | | | | | Bump qca9984 firmware. Signed-off-by: Pavel Kubelun <be.dissent@gmail.com>
* ppp: honor ip6table for IPv6 PPP interfacesUlrich Weber2017-03-012-1/+3
| | | | | | | | as we do for IPv4 PPP interfaces. When we create the dynamic IPv6 interface we should inherit ip6table from main interface. Signed-off-by: Ulrich Weber <ulrich.weber@riverbed.com>
* ppp: add pppoe-discovery to an independent packageFlorian Eckert2017-03-011-0/+17
| | | | | | | | pppoe-discovery performs the same discovery process as pppoe, but does not initiate a session Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* base-files: Added a deprecation notice on wifi detectDavid Pinilla Caparrós2017-03-011-1/+7
| | | | | | | | When running wifi detect, the user will be told on error output that wifi detect is deprecated, that wifi config must be used instead. Also the commit that changes it is referenced for further info. Signed-off-by: David Pinilla Caparrós <dpinitux@gmail.com>
* base-files: Add wifi config to wifi command usageDavid Pinilla Caparrós2017-03-011-2/+2
| | | | | | | | | | Since commit 5f8f8a366136a07df661e31decce2458357c167a wifi detect does not longer work and wifi config it's used to configure not yet configured wireless devices. This commit changes command usage to reflect that change. Signed-off-by: David Pinilla Caparrós <dpinitux@gmail.com>
* ar71xx: fix platform_find_rootfspart()Thibaut VARENE2017-03-011-1/+1
| | | | | | | | platform_find_rootfspart() fails if the kernel partition comes before the rootfs partition. The proposed patch fixes this while preserving what I understand was the original idea: stop at first match. Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>