aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* build: fix invocation of bundled ld.so in SDK and ImagebuilderJo-Philipp Wich2017-12-131-15/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | Commit 72d751cba9 "build: rework library bundling" introduced a new helper binary "runas" whose sole purpose was mangling the argv vector passed to the actual called ELF image so that the renamed executable could obtain the proper name from argv[0]. This approach, however totally defeated the purpose of calling bundled ELF executables through the shipped ld.so loader since the execv() invocation performed by "runas" would cause the kernel the interprete the final program image through the system ELF loader again. To solve the problem, use an alternative approach of shipping a shared object "runas.so" which uses an ELF ".init_array" function pointer to obtain the argv[] vector of the to-be-executed main() function and mangle it in-place. The actual argv[0] value to use is communicated out-of-band using an environment variable "RUNAS_ARG0" by the shell wrapper script. The wrapper script also takes care of setting LD_PRELOAD to instruct the shipped ELF loader to preload the actual ELF program image with the "runas.so" helper library. Fixes FS#909. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit ef1cafa736679eb035d405bcdf903fd1fb329865)
* kmod-sched-cake: drop maintainerKevin Darbyshire-Bryant2017-12-131-1/+0
| | | | | | | Drop myself from maintainership of 'cake'. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> (cherry picked from commit c7f8bcede6be73d0c07e058d57b55e4efc746440)
* zlib: use default Build/Configure ruleStijn Tintel2017-12-131-11/+9
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 462ca4e059dbead678163da26fb4e14748f3021e)
* lzo: use default Build/Configure ruleStijn Tintel2017-12-131-6/+3
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit b3cba687a447478253f95febf17fa9376c98105d)
* netfilter: add iptables-mod-rpfilter packageAlin Nastac2017-12-133-0/+34
| | | | | | | | | | Unlike /proc/sys/net/ipv4/conf/INTF/rp_filter flag, rule iptables -t raw -I PREROUTING -m rpfilter --invert -j DROP prevents conntrack table to become full when a packet flood with randomly selected source IP addresses is received from the lan side. Signed-off-by: Alin Nastac <alin.nastac@gmail.com> (cherry picked from commit d8748e537f11ab5f2b5e2ed25d94baa5ce353984)
* bzip2: add symlink to binaryDaniel Golle2017-12-131-1/+3
| | | | | | | | | Other distributions incl. the OpenWrt ImageBuilder and SDK expect to find the bzip2 executable in /bin. Create a symlink at that location for compatibility. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit eb7c14d512482e18d05f61afa44205167ea094c0)
* dropbear: add option to set max auth triesStijn Tintel2017-12-132-2/+4
| | | | | | | | Add a uci option to set the new max auth tries paramater in dropbear. Set the default to 3, as 10 seems excessive. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 6371159b4ae8b4dd94d6319ac805b0c26962bb14)
* dropbear: server support option '-T' max auth triesKevin Darbyshire-Bryant2017-12-132-2/+132
| | | | | | | | | | | | | Add support for '-T n' for a run-time specification for maximum number of authentication attempts where 'n' is between 1 and compile time option MAX_AUTH_TRIES. A default number of tries can be specified at compile time using 'DEFAULT_AUTH_TRIES' which itself defaults to MAX_AUTH_TRIES for backwards compatibility. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> (cherry picked from commit 9aaf3d3501642640c9ec74268e671171c8de6103)
* hostapd: configure NAS ID regardless of encryptionYury Shvedov2017-12-131-3/+3
| | | | | | | | | | | | RADIUS protocol could be used not only for authentication but for accounting too. Accounting could be configured for any type of networks. However there is no way to configure NAS Identifier for non-WPA networks without this patch. Signed-off-by: Yury Shvedov <yshvedov@wimarksystems.com> [cleanup commit message] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 37c1513b1f98c93bf84bbcedd9782568e7d4abba)
* hostapd: add acct_interval optionYury Shvedov2017-12-131-2/+5
| | | | | | | | | Make an ability to configure Accounting-Interim-Interval via UCI Signed-off-by: Yury Shvedov <yshvedov@wimarksystems.com> [add hostapd prefix, cleanup commit message] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 0e7bbcd43b6f4b54ecc5c40130b5f86cbc9f1c07)
* valgrind: bump to 3.13.0Luiz Angelo Daros de Luca2017-12-133-49/+4
| | | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com> (cherry picked from commit 991899cc5449d8595593a66c0130fdcaa088b36a)
* busybox: backport 'ip rule suppress_{prefixlength, ifgroup}'Stefan Tomanek2017-12-131-0/+145
| | | | | | | | | This is a backport from the busybox repository (192dce4b84fb32346ebc5194de7daa5da3b8d1b4); it enables the use of the suppress_{prefixlength,ifgroup} flags for policy routing rules. Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de> (cherry picked from commit de6ff1512955953e56735896c044c7aac97e14d9)
* libunwind: update to version 1.2.1Yousong Zhou2017-12-132-48/+2
| | | | | | | | | | | Changes since 1.2 a77b0cd Bump version to v1.2.1 5f354cb mips/tilegx: Add missing unwind_i.h header file 620d1c3 Add aarch64 getcontext functionality. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (cherry picked from commit 77dc6a2ae7c94ac3d496ebab589d4574ac7169d0)
* imagebuilder: don't rewrite package list outputDaniel Golle2017-12-131-1/+1
| | | | | | | | | No longer rewrite opkg list output in package_list function, remove the awk call in the pipe (which was intended for a single specific use-case). Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit d80d1b6c42aa663e6104f817daa5ea29d2e7073d)
* imagebuilder: clean package_listDaniel Golle2017-12-131-6/+6
| | | | | | | | | | | | commit 19ac879954 (imagebuilder: add package_list function) introduced a new function 'package_list' to the imagebuilder Makefile. Unfortunately the package list was poluted by stdout noise of the Makefile itself as well as opkg. Redirect those outputs to stderr to make sure that the package_list returned doesn't contain progress info output but really only packages. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 1b555e1d2b1cb2ae3dd1832225e6c9d2c5df0a37)
* build: remove old kernel-headers build directoriesFelix Fietkau2017-12-131-0/+1
| | | | | | | Saves space after updating kernel versions Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 76b62e602233d1a2e1f8ef1c0833bd22ebaaf832)
* imagebuilder: add package_list functionPaul Spooren2017-12-131-7/+14
| | | | | | | | | | The imagebuilder can now list all available packages by using make package_list. This is usefull for scripts to retrieve a list of all packages with versions (and size) Signed-off-by: Paul Spooren <paul@spooren.de> [daniel@makrotopia.org: fixed commit message] (cherry picked from commit 19ac879954210df3c6a010990bef42ad5c7fd967)
* base-files: board.json's switch reset means existence, not argumentJonas Gorski2017-12-131-1/+4
| | | | | | | | Don't pass the value unconditionally to swconfig as a parameter but instead only call reset if it is 1. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com> (cherry picked from commit fd952c7a83e5357f5dcab28c0bcaca756e27eaa0)
* gdb: remove Build/Compile rule ; default one worksAlexandru Ardelean2017-12-131-7/+0
| | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit ab485383fa4d60d6342cd5a4eb6b5429afba6b97)
* rb532: enable high-res timers, refresh kernel configFelix Fietkau2017-12-131-2/+1
| | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 2dc23a7576614181e35a0bf6444fc55144dd711b)
* xburst: enable high-res timers, refresh kernel configFelix Fietkau2017-12-131-7/+3
| | | | | | | Helps with system performance Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit f859a7b696d79fae8dd98859a3451a6f9d77570f)
* kernel: add CONFIG_SCHED_HRTICK=y to the generic configFelix Fietkau2017-12-131-0/+1
| | | | | | | | It is used by pretty much every target Signed-off-by: Felix Fietkau <nbd@nbd.name> (backported from commit b47fd7656336162360ebf66147326763ddae3f8d) Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* package/grub2: update to 2.02Alif M. Ahmad2017-12-131-6/+3
| | | | | | | Update to version 2.02 Signed-off-by: Alif M. Ahmad <alive4ever@live.com> (cherry picked from commit 415c47de79ada7496c39f435df0b0523472aee58)
* ip17xx: correct aneg_done return valueSergey Ryazanov2017-12-131-1/+1
| | | | | | | | | | PHY core treats any positive return value as the auto-negotiation done indication. Since we do not actually check any device register in this callback then update it to return positive value with a neutral meaning instead of the register flag to avoid confusing for future readers. Signed-off-by: Sergey Ryazanov <ryazanov.s.a@gmail.com> (cherry picked from commit 2cc61e6e8e951b1480a024fdb66bc539aa163bbc)
* mvswitch: fix autonegotiation issueSergey Ryazanov2017-12-131-0/+7
| | | | | | | | | | | | | | | | The Marvel 88E6060 switch has an MDIO interface, but does not emulate regular PHY behavior for the host. The network core can not detect using the generic code, whether the connection via the attached PHY can be used or not. The PHY's state machine is stuck in a state of auto-negotiation and does not go any further so the Ethernet interface of the router stay forever in the not-runing state. Fix this issue by implementing the aneg_done callback to be able to inform the network core that the Ethernet interface link to which the switch is connected can be marked as RUNNING. Signed-off-by: Sergey Ryazanov <ryazanov.s.a@gmail.com> (cherry picked from commit 913b2290caad437bb523d6f1ee5a70707f7f7ef4)
* ppp: propagate master firewall zone to dynamic slave interfaceHans Dedecker2017-12-132-1/+4
| | | | | | | | | | | Assign the virtual DHCPv6 interface the firewall zone of the parent interface so fw3 knows the zone to which the virtual DHCPv6 interface belongs. This guarantees the firewall settings are applied correctly for the virtual DHCPv6 interface and allows to query the zone to which the virtual DHCPv6 interface belongs via the fw3 network option. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> (cherry picked from commit 21f25bc4a325b3075d6426047640e9cf6176894c)
* usbmode: remove devices with unsupported modesJulian Labus2017-12-131-2/+7
| | | | | | | | remove files which include the following mode options BlackberryMode OptionMode PantechMode QuantaMode Signed-off-by: Julian Labus <julian@labus-online.de> (cherry picked from commit b757de65b3c3aa210022c65445df1d6dbbf9eadd)
* tar: override symlink permissionsFelix Fietkau2017-12-131-0/+10
| | | | | | | | | On Linux, symlink permissions cannot be altered and are always 0777. On Mac OS X they can be 0755. Force 0777 here to keep tarballs reproducible across systems Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit e25cedd0b5621dc02e47eea674006578ac062c9f)
* tools/sparse: Update to snapshot 2017-03-31Daniel Engberg2017-12-131-4/+4
| | | | | | | | Update sparse to snapshot 2017-03-31 Switch to HTTPS Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit 9235a29e1a9764361940d4b38f4fce0358d8d9ee)
* elfutils: Pass -Wno-unused-result to silence warnings as errorsFlorian Fainelli2017-12-131-1/+1
| | | | | | | | | | | | | | | | | | | | elfutils turns on -Werror by default, and patch 100-musl-compat.patch changes how strerror_r is used and we no longer use the function's return value. This causes the following build error/warning to occur with glibc-based toolchains: dwfl_error.c: In function 'dwfl_errmsg': dwfl_error.c:158:18: error: ignoring return value of 'strerror_r', declared with attribute warn_unused_result [-Werror=unused-result] strerror_r (error & 0xffff, s, sizeof(s)); ^ cc1: all warnings being treated as errors Fixing this would be tricky as there are two possible signatures for strerror_r (XSI and GNU), just turn off unused-result warnings instead. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit 484f768dfa295d9fccd82c57cae00458f32b7182)
* gcc: fix documentation entries added by 910-mbsd_multi.patchFelix Fietkau2017-12-132-12/+12
| | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 8851a18a88aff548ae2648e26deb7595ebb45733)
* scripts/download.pl: print the command used to download filesFelix Fietkau2017-12-131-0/+1
| | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit cbe0a7ecc0b76f4d97d87ca59a0ff8074b8946f4)
* tools/libressl: update to 2.5.4Hannu Nyman2017-12-131-3/+3
| | | | | Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit d7a3120cdcc1aeed5a95636803d250e35ba8706e)
* tools/isl: update to 0.18Syrone Wong2017-12-131-2/+2
| | | | | Signed-off-by: Syrone Wong <wong.syrone@gmail.com> (cherry picked from commit a0f4b4b3a2cd4db1a2b9bab3c06970361192368f)
* lldpd: bump to 0.9.7Stijn Tintel2017-12-131-2/+2
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 423a7a6b752d4780f7f61722443ed5f4f50e3bda)
* libunwind: update to 1.2Yousong Zhou2017-12-133-19/+58
| | | | | | | | | | | | Addresses CVE-2015-3239: Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes. Upstream stable-v1.2 fixed the missing unwind_i.h issue but no new tarball is released yet Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (cherry picked from commit 5d48dc1146171520445c43ee894d9dfce09ae4e2)
* lantiq: spi: double time out toleranceHauke Mehrtens2017-12-131-0/+37
| | | | | | | | | | | | | | | | | | | | The generic SPI code calculates how long the issued transfer would take and adds 100ms in addition to the timeout as tolerance. On my 500 MHz Lantiq Mips SoC I am getting timeouts from the SPI like this when the system boots up: m25p80 spi32766.4: SPI transfer timed out blk_update_request: I/O error, dev mtdblock3, sector 2 SQUASHFS error: squashfs_read_data failed to read block 0x6e After increasing the tolerance for the timeout to 200ms I haven't seen these SPI transfer time outs any more. The Lantiq SPI driver in use here has an extra work queue in between, which gets triggered when the controller send the last word and the hardware FIFOs used for reading and writing are only 8 words long. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 6153248052b2e067df9596c2d619345261b1d3f7)
* base-files: fix default procd reloadAlexandru Ardelean2017-12-131-1/+1
| | | | | | | | | | | | | | | | | | | Bug introduced with 6713694. I did not count on procd handling reload as mentioned in this doc: https://wiki.openwrt.org/inbox/procd-init-scripts ``` procd_set_param file /var/etc/your_service.conf # /etc/init.d/your_service reload will restart the daemon if these files have changed procd_set_param netdev dev # likewise, except if dev's ifindex changes. procd_set_param data name=value ... # likewise, except if this data changes. ``` The service would be restarted regardless of any of those params. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit c7ee30d53af12ea725296cc323f68e8fe04e532c)
* ramips: support jumbo frame on mt7621 up to 2kMichael Lee2017-12-134-17/+32
| | | | | Signed-off-by: Michael Lee <igvtee@gmail.com> (cherry picked from commit eee09bfe01e8cc2db1501f82dde7b9b6bb424faf)
* lldpd: drop specific respawn params [use system-wide]Alexandru Ardelean2017-12-131-3/+0
| | | | | | | | I think I added these respawn params [a while back], when I did the conversion to procd init script format. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit ce8bfa9407bc1518107a99edc8568a59fe269fa5)
* elfutils: bump to 0.169Luiz Angelo Daros de Luca2017-12-136-241/+271
| | | | | | | | | Removed patches (now upstream): - 004-maybe-uninitialized.patch - 007-fix_TEMP_FAILURE_RETRY.patch Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com> (cherry picked from commit ccc54b29352a7d30762b84761414aa1798ce1183)
* devel/trace-cmd: Update to 2.6.1Daniel Engberg2017-12-131-7/+4
| | | | | | | | Update trace-cmd to version 2.6.1 Switch to tarball download Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit b295966f8767ff84b55e547ae5c2967772c3ede2)
* comgt-3g: enable modem before to setpinGiuseppe Lippolis2017-12-131-0/+1
| | | | | | | some modems needs to be enabled with CFUN=1 before to set the pin Signed-off-by: Giuseppe Lippolis <giu.lippolis@gmail.com> (cherry picked from commit db776c01e1202307b78a4bb757f78db5ea48e27e)
* devel/strace: Update to 4.16Daniel Engberg2017-12-132-3/+3
| | | | | | | | Update strace to 4.16 Refresh patch Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit 4b0a2ca9a47ce30f08161b5b12991f15d590938c)
* network/utils/ipset: Update to 6.32Daniel Engberg2017-12-131-2/+2
| | | | | | | Update ipset to 6.32 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit ea2927e1eaa321033b28f08db0ec59e7df5f7806)
* mac80211: gracefully handle preexisting VIFJo-Philipp Wich2017-12-131-0/+6
| | | | | | | | | | | | | | | | | | | | | Gracefully handle cases where the to-be-created wireless interface already exists on the system which might commonly happen with non-multi-SSID capable wireless drivers. This fixes commit 8301e613655c2d95fa5430a1a57d92d966fdc70b which caused previously ignored "Too many open files in system (-23)" errors to fail the wireless setup procedure. With the updated approach we'll still try recreating the vif after one second if the first attempt to do so failed with ENFILE but we will now consider the operation successfull if a second attempt still yields ENFILE with the requested ifname already existing on the system. Fixes FS#664, FS#704. Suggested-by: Vittorio Gambaletta <openwrt@vittgam.net> Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 4a033475453b63d0d5ae41489e7c395882567698)
* scripts: Probe external toolchains for libthread-dbFlorian Fainelli2017-12-131-0/+1
| | | | | | | | libthread-db is a package that can be configured for external toolchains, so let's have the script probe for it. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit 6704410b158b47aecf507971ad2ee5e3db840e3a)
* build: new fixes for symlinked .config handlingSergey Ryazanov2017-12-131-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | When running "make {config|defconfig|oldconfig}" with symlinked .config (e.g. to env/.config) it renames symlink to .config.old, creates new .config file, and writes the updated configuration into it. This breaks the desired workflow when changes in the configuration can be checked using "scripts/env diff" and commited using "scripts/env save". Since the env/.config file is not updated. The things become even worse when working with feeds, since feeds script quite often silently invokes "make {oldconfig|defconfig}" and breaks the symlink. Fix this issue by exporting KCONFIG_OVERWRITECONFIG=1, which forces mconf to overwrite the .config content, instead of renaming it and creating a new file. This variable is set only if .config is a symlink, otherwise the variable is not exported and the old behaviour is preserved. This change uses the same behaviour as "make menucofig", which has already been fixed in commit 5bf98b1acc3b6b178f8954c5075a58e1e6a99d6a. Also make a tiny cosmetic update to the "make menuconfig" target code layout to make it look like other config handling targets. Signed-off-by: Sergey Ryazanov <ryazanov.s.a@gmail.com> (cherry picked from commit e06d8f0f6f041c8ac1acba810eea96c32dc983e4)
* build: allow val.% targets to bypass the prepare stepsFelix Fietkau2017-12-131-0/+3
| | | | | | | | Significantly reduces time spent processing those targets and should also silence some log clutter which could confuse buildbot Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit ddbb036bbb8a1030dd8f6fae0004d390b5f2b8a5)
* x86: keep /boot mounted for kexecDaniel Golle2017-12-131-4/+7
| | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 63571cb56c7ff2692b5c9aa78133c3f4996e2ac5)