aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* kernel: update 4.4 to 4.4.87Kevin Darbyshire-Bryant2017-09-091-2/+2
| | | | | | | | | | Fixes CVE-2017-11600 No patch refresh required Compile & run tested: ar71xx - Archer C7 v2 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* ramips: add support for the HNET C108Kristian Evensen2017-09-097-0/+197
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The HNET C108 (http://www.szhwtech88.com/Product-product-cid-100-id-4374.html) is a mifi based on MT7602A, which has the following specifications: * CPU: MT7620A * 1x 10/100Mbps Ethernet. * 16 MB Flash. * 64 MB RAM. * 1x USB 2.0 port. Only power is connected, this port is meant for charging other devices. * 1x mini-PCIe slots. * 1x SIM slots. * 1x 2.4Ghz WIFI. * 1x button. * 6000 mAh battery. * 5x controllable LEDs. Works: * Wifi. * Switch. * mini-PCIe slot. Only tested with a USB device (a modem). * SIM slot. * Sysupgrade. * Button (reset). Not working (also applies to the factory firmware): * Wifi LED. It is always switched on, there is no relation to the up/down state or activity of the wireless interface. Not tested: * SD card reader. Notes: * The C108 has no dedicated status LED. I therefore set the LAN LED as status LED. Installation: The router comes pre-installed with OpenWRT, including a variant of Luci. The initial firmware install can be done through this UI, following normal procedure. I.e., access the UI and update the firmware using the sysupgrade-image. Remember to select that you do not want to keep existing settings. Recovery: If you brick the device, the C108 supports recovery using TFTP. Keep the reset button pressed for ~5sec when booting to trigger TFTP. Set the address of the network interface on your machine to 10.10.10.3/24, and rename your image file to Kernal.bin. Signed-off-by: Kristian Evensen <kristian.evensen@gmail.com>
* kernel: rtl8306: fix port link statusMathias Kresin2017-09-081-0/+4
| | | | | | | | | | | In case the link changes from down to up, the register is only updated on read. If the link failed/was down, this bit will be 0 until after reading this bit again. Fixes a reported link down by swconfig alebit the link is up (query for the link again will show the correct link status) Signed-off-by: Mathias Kresin <dev@kresin.me>
* lantiq: fix xrx200 switch carrier stateMathias Kresin2017-09-081-4/+3
| | | | | | | | | | | | | | | | In conditions where none of the switch ports is connected during boot, the priv->port[i].link != priv->port[i].phydev->link condition is false since both link values are equal (false). The carrier of the switch netdev is never set to off and the link state reported by ip is UNKNOWN. Turn the carrier off if none of the switch ports has a link, regardless whether something has been changed. Add a check for a carrier to prevent unnecessary calls to netif_carrier_off() if the carrier is already off. Based on a patch send by Martin Schiller. Signed-off-by: Mathias Kresin <dev@kresin.me>
* dnsmasq: backport arcount edns0 fixKevin Darbyshire-Bryant2017-09-082-1/+45
| | | | | | | | | Don't return arcount=1 if EDNS0 RR won't fit in the packet. Omitting the EDNS0 RR but setting arcount gives a malformed packet. Also, don't accept UDP packet size less than 512 in received EDNS0. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* mediatek: fix mdio schedule while atomic errorJohn Crispin2017-09-071-0/+16
| | | | Signed-off-by: John Crispin <john@phrozen.org>
* dnsmasq: backport official fix for CVE-2017-13704Kevin Darbyshire-Bryant2017-09-073-38/+95
| | | | | | | | | Remove LEDE partial fix for CVE-2017-13704. Backport official fix from upstream. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> (PKG_RELEASE increase)
* uclient: update to 2017-09-06Matthias Schiffer2017-09-061-3/+3
| | | | | | | 24d6eded73de uclient-http: fix Host: header for literal IPv6 addresses 83ce236dab86 uclient-fetch: read_data_cb: fix a potential buffer overflow Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* ramips: fix default LED configurationKristian Evensen2017-09-061-0/+0
| | | | | | | | | | | | | | | Commit 77645ffcd9ad ("ramips: add support for the GnuBee Personal Cloud One") dropped the execution permission from 01_leds with the result that the file isn't started during first boot and no default LED configuration is added. Revert the introduced file permission change. Fixes: FS#979 Signed-off-by: Kristian Evensen <kristian.evensen@gmail.com> [cherry picked the fix from a board support patch] Signed-off-by: Mathias Kresin <dev@kresin.me>
* odhcp6c: add workaround for broken extendprefix scenarioHans Dedecker2017-09-052-3/+20
| | | | | | | | | | | | Extendprefix is typically used to extend an IPv6 RA prefix from a mobile wan link to the LAN; such scenario requires correct RA prefix settings like the on link flag not being set. However some mobile manufacter set the RA prefix on link flag which breaks basic IPv6 routing. Work around this issue by filtering out the route being equal to the extended prefix. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* lantiq: drop kernel 4.4 supportMathias Kresin2017-09-0546-18378/+0
| | | | Signed-off-by: Mathias Kresin <dev@kresin.me>
* lantiq: switch to kernel 4.9Edward O'Callaghan2017-09-051-1/+1
| | | | Signed-off-by: Edward O'Callaghan <funfunctor@folklore1984.net>
* kernel: update 4.4 to 4.4.86Kevin Darbyshire-Bryant2017-09-054-21/+21
| | | | | | | | Refresh patches Compile & run tested: ar71xx - Archer C7 v2 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* ar71xx: WNDR4300: use the switch LED trigger on the WAN portDaniel Gonzalez Cabanelas2017-09-051-1/+2
| | | | | | | | | | The WAN port on the Netgear WNDR4300 router has two LEDs, amber and green. Use the switch LED trigger to behave as the rest of the LAN HW controlled LEDs - Green: 1 Gbps - Amber: 100/10 Mbps Signed-off-by: Daniel Gonzalez Cabanelas <dgcbueu@gmail.com>
* ramips: fix mt76x8 dependenciesJohn Crispin2017-09-052-5/+5
| | | | | | | The commit merging mt7628 and mt7688 failed to update some dependencies. Signed-off-by: John Crispin <john@phrozen.org>
* ar71xx: add support for TL-WR1041N(v2) LAN/WAN LEDs.Kuang Rufan2017-09-041-1/+20
| | | | | | | | 1. Add support to LAN/WAN LEDs attached to ar8327. 2. Fix the problem that LAN/WAN LEDs does not blink in hardware (auto) mode when connected to 10M/100M ethernet. Signed-off-by: Kuang Rufan <master@a1983.com.cn>
* odhcp6c: add ra_holdoff config option and update to git HEAD version (FS#964)Hans Dedecker2017-09-032-6/+9
| | | | | | | | | 51733a6 ra: align RA update interval with RFC4861 (FS#964) Add ra_holdoff config option which allows to configure the RA minimum update interval which is by default 3 seconds as stated in RFC4861. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* kernel: update 4.9 to 4.9.47Stijn Tintel2017-09-038-48/+36
| | | | | | | | Refresh patches. Compile-tested on ramips/mt7621 and x86/64. Runtime-tested on ramips/mt7621 and x86/64. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* base-files: add /etc/profile.d to conffilesStijn Tintel2017-09-031-0/+1
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* base-files: order conffiles alphabeticallyStijn Tintel2017-09-031-10/+10
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* ubox: update to git HEAD versionHans Dedecker2017-09-011-3/+3
| | | | | | | | | | | | | | b1bc8d5 kmodloader: log error message in case of out of memory f346111 kmodloader: lift restriction on module alias info f1ef2c3 kmodloader: fix possible segfaults 9cb63df kmodloader: fix endianess check 2cff779 kmodloader: Check module endian before loading d54f38a kmodloader/get_module_info: initialized aliases to make it more clean a0b6fef kmodloader: insmod: fix a memoryleak in error case 278c4c4 kmodloader/get_module_name: null-terminate the string 16f7e16 syslog: remove unnecessary sizeof struct between messages Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* rukes.mk: this patch broken grub2 buildsJohn Crispin2017-09-011-2/+0
| | | | | | | | Revert "rules.mk: add missing CPP definition" This reverts commit 569f74ef49bae9326a723050a400346686983d86. Signed-off-by: John Crispin <john@phrozen.org>
* generic: make switch_port_stats tx/rx_bytes long longThibaut VARENE2017-09-012-3/+3
| | | | | | | | | | | | | | This generic structure defines tx_bytes and rx_bytes as unsigned long (u32), while several devices would typically report unsigned long long (u64). The code can work as is, but there's a chance that with a sufficiently fast interface the overflow might happen too fast to be correctly noticed by the consumers of this data. This patch makes both field unsigned long long and updates the only known consumer of this data: swconfig_leds.c Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
* generic: provide get_port_stats() on rtl836x switchesThibaut VARENE2017-09-016-0/+74
| | | | | | | | | | This patch provides a generic switch_dev_ops 'get_port_stats()' callback by taping into the relevant port MIB counters. This callback is used by swconfig_leds led trigger to blink LEDs with port network traffic. Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
* generic: provide get_port_stats() on b53 switchesThibaut VARENE2017-09-011-1/+57
| | | | | | | | | | This patch provides a generic switch_dev_ops 'get_port_stats()' callback by taping into the relevant port MIB counters. This callback is used by swconfig_leds led trigger to blink LEDs with port network traffic. Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
* generic: provide get_port_stats() on adm6996 switchesThibaut VARENE2017-09-011-0/+32
| | | | | | | | | | This patch provides a generic switch_dev_ops 'get_port_stats()' callback by taping into the relevant port MIB counters. This callback is used by swconfig_leds led trigger to blink LEDs with port network traffic. Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
* generic: provide get_port_stats() on ar8xxx switchesThibaut VARENE2017-09-013-0/+61
| | | | | | | | | | | | | This patch provides a generic switch_dev_ops 'get_port_stats()' callback by taping into the relevant port MIB counters. The implementation uses a generic callback that select the correct MIB counter index based on chip version. This callback is used by swconfig_leds led trigger to blink LEDs with port network traffic. Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
* ramips: provide get_port_stats() on mt7530/762x switchesThibaut VARENE2017-09-011-0/+36
| | | | | | | | | | This patch provides a generic switch_dev_ops 'get_port_stats()' callback by taping into the relevant port MIB counters. This callback is used by swconfig_leds led trigger to blink LEDs with port network traffic. Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
* procd: mdns: Support txt values with spacesKarl Palsson2017-09-011-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Properly quote the arguments so that you can register a service with TXT entries that contains spaces. Example: procd_add_mdns myservice tcp 9999 "key=descriptive text field 1" \ "another=something equally verbose" Output before: $ avahi-browse -r -v _myservice._tcp _myservice._tcp local hostname = [blah.local] address = [192.168.255.74] port = [9999] txt = ["verbose" "equally" "another=something" "1" "field" "text" "key=descriptive"] Output now: $ avahi-browse -r -v _myservice._tcp _myservice._tcp local hostname = [blah.local] address = [192.168.255.74] port = [9999] txt = ["another=something equally verbose" "key=descriptive text field 1"] Signed-off-by: Karl Palsson <karlp@etactica.com>
* Revert "dropbear: Link ssh and scp command to /bin instead of /usr/bin"John Crispin2017-08-311-3/+3
| | | | | | This reverts commit f7528ed0a8586434e18e9007b1bf0d05a18d6418. Signed-off-by: John Crispin <john@phrozen.org>
* kernel: update 4.4 to 4.4.85Kevin Darbyshire-Bryant2017-08-312-3/+3
| | | | | | | | Refresh patches Compile & run tested: ar71xx - Archer C7 v2 Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* ar71xx: fix switch port numbering on RB750r2 and RB750UPr2João Chaínho2017-08-311-2/+6
| | | | | | | This patch fixes the switch port numbering on Mikrotik RB750r2 (hEX lite) and RB750UPr2 (hEX PoE lite). Tested on a RB750UPr2. Maybe this patch is applicable to other devices (e.g. RB951Ui-2nD, RB952Ui-5ac2nD) but I have no way to test them. Signed-off-by: João Chaínho <joaochainho@gmail.com>
* dropbear: Link ssh and scp command to /bin instead of /usr/binRosen Penev2017-08-311-3/+3
| | | | | | | | ssh and scp commands interfere with OpenSSH when installed in /usr/bin . One use case is when installing dropbear to get root access when only OpenSSH is available (OpenSSH disallows root password logins). Once dropbear installs, it replaces OpenSSH's executables, even when removed with opkg. OpenSSH must be reinstalled to get them back. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* musl: update to 1.1.16+ git HEAD 2017-08-30Koen Vandeputte2017-08-311-2/+2
| | | | | | | | | | | | | | | | | | | Fixes critical issues for memset() & fflush() Changes: 5f7efb8 move IPPORT_RESERVED from netdb.h to netinet/in.h 5f3b652 add powerpc64 and s390x to list of supported archs in INSTALL file 9d4c902 fix undefined behavior in memset due to missing sequence points c7f56b4 __init_libc: add fallbacks for __progname setup cc08669 add SIOCGSTAMPNS socket ioctl macro to ioctl.h 02b50c9 fix mips ioctl macros to match linux asm/sockios.h 670d6d0 fix unsynchronized access to FILE structure in fflush(0) Tested on cns3xxx & imx6 Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
* busybox: update to 1.27.2Magnus Kroken2017-08-3030-1121/+951
| | | | | | | | | | Refresh patches, delete patches backported from upstream. This fixes ntpd sync issues (ntpd would not sync if the first provided peer address was unreachable). Signed-off-by: Magnus Kroken <mkroken@gmail.com> Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* uboot-envtools: Add support for IPQ806x AP148 and DB149Ram Chandra Jangir2017-08-301-0/+21
| | | | | | | | | IPQ806x AP148 and DB149 boards didn't have the UCI ubootenv section initialized, so the usage of fw_printenv required manual configuration. With this change, the "fw_printenv" and "fw_setenv" command will automatically work on NOR and NAND based platforms. Signed-off-by: Ram Chandra Jangir <rjangir@codeaurora.org>
* busybox: move passwd applet to /binDaniel Golle2017-08-301-0/+11
| | | | | | | | | | busybox currently installs passwd into /usr/bin which prevents its 'full' shadow-utils variant from being installed. Move the passwd applet to /bin to avoid that collision. shadow also provides /usr/bin/login which doesn't collide with busybox as the busybox login applet is installed at /bin/login. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* busybox: move traceroute applets to /binDaniel Golle2017-08-302-8/+13
| | | | | | | | | | | busybox currently installs traceroute and traceroute6 into /usr/bin which prevents their 'full' iputils variants from being installed. Move those applets to /bin so they can coexist with their iputils siblings using the same PATH convention already applied for coreutils and other drop-in 'full' versions. Refresh existing patch while at it. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* samba36: Remove syslog and load printers lines.Rosen Penev2017-08-301-2/+0
| | | | | | printer support is removed using 200-remove_printer_support.patch. the syslog parameter requires samba to be compiled with --with-syslog. Currently samba does not log to syslog and probably has not for a long time. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* scripts/dowload.pl: use glob to expand target dirZoltan Gyarmati2017-08-301-1/+1
| | | | | | | | | | | | | | If CONFIG_DOWNLOAD_FOLDER is set to for example "~/dl", the download script fails to create the .hash and .dl files with the following errors: Cannot create file ~/dl/dropbear-2017.75.tar.bz2.dl: No such file or directory sh: 1: cannot create ~/dl/dropbear-2017.75.tar.bz2.hash: Directory nonexistent If the tarball already exists in the ~/dl dir, it's properly found and used, so this issue only affects the download.pl script. This patch calls glob() on the target dir parameter, which will expand `~`. Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
* musl: bump to latest 1.1.16+ git HEADKoen Vandeputte2017-08-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: 1698fe6 fix build failure for sh4a due to missing colon in asm statement 80bf595 trap UB from attempts to join a detached thread e31c8c2 ppc64: fix setjmp/longjmp handling of TOC pointer 52cf5c1 qsort: add a short comment about the algorithm dc2f368 disable global visibility override hack (vis.h) by default 947d330 add _NL_LOCALE_NAME extension to nl_langinfo a08910f fix missing volatile qualifier on lock in __get_locale 2e6e084 remove ineffective compiler assist from printf bc42dcb fix undefined behavior in ptrace d906fa3 unify the use of FUTEX_PRIVATE 60ab365 fix undefined behavior in free f688884 reapply va_arg hacks removal to wprintf bd00cc8 remove useless declarations in string.h f3055e0 allow specifying argv[0] when invoking a program via ldso command 43c423a fix regression in dlopen promotion from RTLD_LOCAL to RTLD_GLOBAL 66b53cf ldso: avoid spurious & possible erroneous work for libs with no deps 94f7441 powerpc64: add single-instruction math functions 9d12a6a fix clang CFLAGS checks and silence unused argument warnings ce385fc s390x: add single-instruction math functions e6def54 fix arm run-time abi string functions 91d34c4 fix regression in getspnam[_r] error code for insufficient buffer size 5948bc1 fix omission of microblaze user.h definitions b7bfb5c fix iconv conversions for iso88592-iso885916 64f8558 handle errors from localtime_r in ctime_r 2d7d05f set errno when getpw*_r, getgr*_r, and getspnam_r fail 5c10c33 handle localtime errors in ctime 1c86c7f handle mremap failure in realloc of mmap-serviced allocations 1080008 getdate: correctly specify error number af05173 catopen: set errno to EOPNOTSUPP 84eff79 fix glob failure to match plain "/" to root directory bc313e8 use hard-coded sh4a atomic opcodes to avoid linker errors on sh 179766a towupper/towlower: fast path for ascii chars 1c49700 remove long-obsolete clang workarounds from mips* syscall_arch.h files 4073f03 fix fstatat syscall on mips64 81f4a12 fix fchown fallback on arches without chown(2) 97bd6b0 fix iconv conversions to legacy 8bit encodings f9f686b have posix_spawnattr_setflags check for supported flags 77e895d add no-op POSIX_SPAWN_USEVFORK to spawn.h 5555041 s390x: provide sigcontext struct definition bb439bb implement new posix_spawn flag POSIX_SPAWN_SETSID 58e2396 remove va_arg hacks in printf core with undefined behavior e1232f5 make ttyname[_r] return ENODEV rather than ENOENT 1a7fa5e fix regression in support for resolv.conf attempts option 8c44a06 fix scalbn when result is in the subnormal range 2577b1b allow full-range file offsets to mmap on archs with 64-bit syscall args b3751c3 fix dl_iterate_phdr in static PIE binaries 1ca5975 fix read past end of buffer in getaddrinfo backend 54807d4 aarch64: add single instruction math functions b6e1fe0 fix strptime output for %C without %y 834ef7a fix processing of strptime %p format 85dfab7 fix off-by-one in strptime %j 9571c53 regex: fix newline matching with negated brackets e6917ec increase limit on locale name length from 15 to 23 bytes e4fc9ad search locale name variants for gettext translations 16319a5 make setlocale return a single name for LC_ALL if all categories match 0c53178 fix dlopen/dlsym regression opening libs already loaded at startup dbff2bb fix POSIX-format TZ dst transition times for southern hemisphere 74bca42 s390x: fix fpreg_t and remove unused per_struct a393d5c precalculate gnu hash rather than doing it lazily in find_sym inner loop 8cba1dc fix threshold constants in j0f, y0f, j1f, y1f cb52539 remove unused refcnt field for shared libraries c49d3c8 avoid loading of multiple libc versions via explicit pathname 3ec8b3a fix one-byte overflow in legacy getpass function 733d1ea fix wide scanf's use of a compound literal past its lifetime 6a209f1 fix possible fd leak, unrestored cancellation state on dns socket fail 500f5be in static dl_iterate_phdr, fix use of possibly-uninitialized aux data 6582baa fix free of uninitialized buffer pointer on error in regexec 6476b81 emulate lazy relocation as deferrable relocation 4823b13 reorder addend handling before symbol lookup in relocation code 4ff234f rework ldso handling of global symbol table for consistency c9783e4 treat STB_WEAK and STB_GNU_UNIQUE like STB_GLOBAL in find_sym fc85fb3 fix ld-behavior-dependent crash in ppc64 ldso startup 827c4e6 fix lsearch and lfind to pass key as first arg to the compar callback 0a4a16d allow page size to vary on arm b261a24 fix build regression in arm atomics asm with new binutils 9201c3a s390x: implement dlsym d6601f0 avoid unbounded strlen in gettext functions dbbb373 fix use of uninitialized pointer in gettext core 01e6bbe fix bindtextdomain logic error deactivating other domains 6894f84 fix spurious EINTR errors from multithreaded set*id, etc. 1f53e7d fix crashes in x32 __tls_get_addr 27b3fd6 fix crash from corrupted tls module list after failed dlopen 809ff8c treat base 1 as an error in strtol-family functions 786fda8 fix getopt[_long] clobbering of optopt on success 150747b reduce impact of REG_* namespace pollution in x86[_64] signal.h Tested on cns3xxx & imx6 Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com> Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* samba36: Don't resolve interfaces.Rosen Penev2017-08-302-7/+2
| | | | | | | It's redundant and also buggy. IPv6 link local addresses and ::1 are not resolved for example. Doesn't matter since lo and br-lan for example, resolve to them. Signed-off-by: Rosen Penev <rosenp@gmail.com> Acked-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* samba36: Remove guest ok since LuCI configures it.Rosen Penev2017-08-301-2/+1
| | | | | | guest ok is set per share and as such, don't override it. also, fix an error introduced in the last commit. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* ramips: merge mt7628/mt7688 into mt76x8L. D. Pinney2017-08-3010-354/+103
| | | | | | | | | | The ramips subtargets of mt7628 and mt7688 dts files all #include "mt7628an.dtsi" They are essentially a single subtarget. This patch merges the ramips subtargets mt7628 and mt7688 into a single subtarget mt76x8. Signed-off-by: L. D. Pinney <ldpinney@gmail.com>
* kernel: update 4.9 to 4.9.45Koen Vandeputte2017-08-305-21/+13
| | | | | | | | Refreshed all patches Compiled & run-tested on targets: cns3xxx, imx6 Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
* dnsmasq: forward.c: fix CVE-2017-13704Kevin Darbyshire-Bryant2017-08-302-1/+38
| | | | | | | | | | | | | | | | Fix SIGSEGV in rfc1035.c answer_request() line 1228 where memset() is called with header & limit pointing at the same address and thus tries to clear memory from before the buffer begins. answer_request() is called with an invalid edns packet size provided by the client. Ensure the udp_size provided by the client is bounded by 512 and configured maximum as per RFC 6891 6.2.3 "Values lower than 512 MUST be treated as equal to 512" The client that exposed the problem provided a payload udp size of 0. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> Acked-by: Hans Dedecker <dedeckeh@gmail.com>
* mediatek: various additional ethernet fixesJohn Crispin2017-08-303-24/+157
| | | | | | | | * fixes default affinity * adds a napi watchdog - we were seeing stalled TX queues * adds up/down locking Signed-off-by: John Crispin <john@phrozen.org>
* netifd: update to git HEAD versionHans Dedecker2017-08-291-3/+3
| | | | | | 7d94ede system-linux: parse map-e fmrs parameters as nested data json object Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* map: use nested json data object to store map-e fmrs parametersHans Dedecker2017-08-292-7/+11
| | | | | | | Replace the string array containing the fmrs parameters by a nested data json object holding an array of fmrs parameters Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* lantiq: ACMP252: clean up device modulesDaniel Golle2017-08-291-4/+7
| | | | | | | Install kmod-rt2800-pci instead of only the rt2x00 library. Fixes missing wireless interface on AudioCodes AC-MP252. Signed-off-by: Daniel Golle <daniel@makrotopia.org>