aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* openssl: update to version 1.0.2kHauke Mehrtens2017-01-286-13/+13
| | | | | | | | | This fixes the following security problems: CVE-2017-3731: Truncated packet could crash via OOB read CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64 CVE-2016-7055: Montgomery multiplication may produce incorrect results Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* lantiq: fix brnImage signature for the VGV7510KW22BRN imagesMathias Kresin2017-01-281-2/+2
| | | | | | | | The VGV7510KW22BRN and VGV7519BRN do not have the same brnImage signature. It was accidentally changed with ba42c1d ("lantiq: un-macro the image building code"). Signed-off-by: Mathias Kresin <dev@kresin.me>
* ath9k: fix up a refcount imbalance error in the IRQ related fixFelix Fietkau2017-01-273-7/+39
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* procd: update to latest git HEADMatthias Schiffer2017-01-271-3/+3
| | | | | | 0f58977 init: fix /tmp permissions on zram Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* base-files: fix user creation on sysupgrade with few opkg control filesMatthias Schiffer2017-01-271-1/+1
| | | | | | | | | | | If only a single opkg control file exists (which can happen with CONFIG_CLEAN_IPKG), grep would not print the file name by default. Instead of forcing it using -H, we just switch to -l (print only file names) and get rid of the cut. Add -s to suppress an error message when no control files exist. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* include/rootfs.mk: keep Require-User lines with CONFIG_CLEAN_IPKGMatthias Schiffer2017-01-271-1/+9
| | | | | | | | Require-User is handled by /etc/uci-defaults/13_fix_group_user on first boot, so we need to keep these when removing all opkg data with CONFIG_CLEAN_IPKG. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* imagebuilder: properly escape single quotes in device titlesJo-Philipp Wich2017-01-261-1/+1
| | | | | | | | | | | | | The name "Plat'Home OpenBlocks AX3" causes the imagebuilders "make info" command to fail with: bash: -c: line 0: syntax error near unexpected token `(' bash: -c: line 0: `echo; [...]' Makefile:99: recipe for target '_call_info' failed Properly escape single quotes to avoid breaking the echo commands. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* ath9k: add stability fixes for long standing hang issues (FS#13, #34, #373, ↵Felix Fietkau2017-01-2516-57/+523
| | | | | | | | | | | | | #383) The radio would stop communicating completely. This issue was easiest to trigger on AR913x devices, e.g. the TP-Link TL-WR1043ND, but other hardware was occasionally affected as well. The most critical issue was a race condition in disabling/enabling IRQs between the IRQ handler and the IRQ processing tasklet Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: refresh patchFelix Fietkau2017-01-251-17/+17
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Add back the commit "ath9k: Add airtime fairness scheduler"Felix Fietkau2017-01-259-15/+728
| | | | | | | | | This reverts commit c296ba834db4ce8c71e0ad7030aab188fe60b27b. According to several reports, the issues with the airtime fairness changes are gone in current versions. It's time to re-apply the patch now. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bcm53xx: disable building Linksys EA6300 V1 imageRafał Miłecki2017-01-251-1/+2
| | | | | | | This device has 2 TRX partitions (main one and failsafe one) and Linux may not detect them properly failing to run userspace. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* x86: fix sysupgrades on disks with 4k block sizeFelix Fietkau2017-01-251-9/+2
| | | | | | | Even when the disk uses 4k blocks, the partition table still uses units of 512 byte sectors. Always use ibs=512 for the offsets Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: brcmfmac: don't use uninitialize mem for country codesRafał Miłecki2017-01-241-2/+2
| | | | | | | There was a bug in brcmfmac patch that could result in treating random memory as source of country codes. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* mac80211: move (& update) upstream accepted brcmfmac patchesRafał Miłecki2017-01-245-0/+3
| | | | | | These 3 patches are now in wireless-drivers-next tree. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* brcm47xx: backport arch patch with Luxul devices supportRafał Miłecki2017-01-242-14/+260
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* packages: mark packages depending on a target as nonsharedMathias Kresin2017-01-248-0/+16
| | | | | | | | | The packages can't be build as shared packages due to the unmet dependencies. Fixes FS#418. Signed-off-by: Mathias Kresin <dev@kresin.me>
* sdk: explicitely remove ccache directories when packing SDKJo-Philipp Wich2017-01-241-0/+6
| | | | | | | | | | Upon first invocation, the ccache program will create the required directory hierarchy so there is no point in shipping these empty directories. Removing those paths also avoids shipping dangling symlinks in case the directories got linked elsewhere, e.g. into a shared global cache. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* lantiq: remove CPU_TYPE:=mips32r2, it gets overwritten anywayFelix Fietkau2017-01-241-2/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* x86: unify CPU_TYPE for legacy and geodeFelix Fietkau2017-01-242-5/+2
| | | | | | | | | | According to some reports, -march=pentium-mmx is a better choice for older Geode CPUs than -march=geode anyway. Bump the minimum architecture of the legacy target from i486 to pentium-mmx. Anything older is not worth supporting anyway. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uml: mark as source-onlyFelix Fietkau2017-01-241-1/+1
| | | | | | Get rid of a special case in the buildbot script Signed-off-by: Felix Fietkau <nbd@nbd.name>
* malta: mark as source-only to avoid wasting build resourcesFelix Fietkau2017-01-241-1/+1
| | | | | | | | The le64 and be64 subtargets do not share a package architecture with any other targets, so they are pretty wasteful for a development-only target. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* malta: move FEATURES to the target makefileFelix Fietkau2017-01-245-4/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* build: remove mips16 feature flag from target makefilesFelix Fietkau2017-01-2410-9/+11
| | | | | | | It can be implicitly derived from the MIPS32 revision support in the kernel configuration Signed-off-by: Felix Fietkau <nbd@nbd.name>
* build: remove obsolete mips32r2 CPU_TYPEFelix Fietkau2017-01-241-1/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ramips/rt288x: switch CPU_TYPE to 24kcFelix Fietkau2017-01-241-1/+1
| | | | | | | | | | | While rt288x only has a MIPS 4KEc processor, it implements the MIPS32r2 architecture just like the 24Kc, so the instruction set should be 100% compatible. Switching it to 24kc allows it to share the package architecture with a lot of other targets instead of creating a special case, saving buildbot resources. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* x86: remove the xen_domu subtargetFelix Fietkau2017-01-246-135/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* x86/generic: add xen DomU supportFelix Fietkau2017-01-243-4/+67
| | | | | | Copy the relevant config options from the xen_domu subtarget Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: fix stray "out of range" shell errors in hostapd.shJo-Philipp Wich2017-01-232-3/+3
| | | | | | | | | | | | The hostapd_append_wpa_key_mgmt() procedure uses the possibly uninitialized $ieee80211r and $ieee80211w variables in a numerical comparisation, leading to stray "netifd: radio0 (0000): sh: out of range" errors in logread when WPA-PSK security is enabled. Ensure that those variables are substituted with a default value in order to avoid emitting this (harmless) shell error. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* openvpn: let all openvpn variants provide a virtual openvpn packageJo-Philipp Wich2017-01-211-1/+2
| | | | | | | | | | Add PROVIDES:=openvpn to the default recipe in order to let all build variants provide a virtual openvpn package. The advantage of this approach is that downstream packages can depend on just "openvpn" without having to require a specific flavor. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* kmod-sched-cake: fix parameter passing kernel/user spaceKevin Darbyshire-Bryant2017-01-211-3/+3
| | | | | | | | | | | | The last two parameters passed between user space tc and kernel space sched-cake were transposed due to a merge mistake in a parameter header file. As such, using a packet overhead figure was likely to set cake to wash packet DSCP values. Similarly, the DSCP wash flag was used as an offset to the displayed packet overhead value. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* zlib: Update to 1.2.11Daniel Engberg2017-01-211-3/+3
| | | | | | | | Update to 1.2.11 as suggested by upstream Also add SF as primary source and main site as fallback Note: SF doesn't carry the 1.2.11 update yet. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* lede-keyring: bundle latest usign certificatesJo-Philipp Wich2017-01-201-3/+3
| | | | | | Includes the public usign certificates used by the 17.01.* release builds. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* sdk: fix Git URL detectionJo-Philipp Wich2017-01-201-2/+5
| | | | | | | Instead of relying on complex sed patterns that trip up make syntax rules, use GNU Makes builtin filter function to match desired URLs. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* sdk: avoid using private repository clone urls as base repo entryJo-Philipp Wich2017-01-191-1/+1
| | | | | | | Only consider the repository origin url as valid base feed entry if it is a git://, http:// or https:// location. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* lantiq: fix an ethernet stability issue triggered by receving packets during ↵Felix Fietkau2017-01-191-0/+53
| | | | | | | | | | | | | | boot Disabling ethernet during reboot (only to enable it again when the ethernet driver attaches) can put the chip into a faulty state where it corrupts the header of all incoming packets. This happens if packets arrive during the time window where the core is disabled, and it can be easily reproduced by rebooting while sending a flood ping to the broadcast address. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* lantiq: fix spurious irq stormFelix Fietkau2017-01-191-0/+87
| | | | | | | | | | | Since the MIPS IRQ stack patches, lantiq devices were emitting a storm of messages like this: [ 567.872172] Spurious IRQ: CAUSE=0x1100c300 Fix this by reworking the IRQ dispatch code Signed-off-by: Felix Fietkau <nbd@nbd.name>
* git-kernel: $(SUBDIR) should always be $(LINUX_VERSION)Mirko Vogt2017-01-191-1/+1
| | | | | | | | | | | | | | | | | | Before SUBDIR was set to $(PATCHVER) which may or may not include the minor version number of the linux kernel version. Usually it doesn't. So the git-clone'd linux kernel was packed without the minor version number taken into account, which broke further processing, as it expected the extracted dir being named linux-$(LINUX_VERSION) (=with minor version) rather than linux-$(PATCHVER) (=without minor version). Changing SUBDIR to $(LINUX_VERSION) creates consistent behaviour here. Signed-off-by: Mirko Vogt <mirko-openwrt@nanl.de>
* sdk: do not strip static librariesJo-Philipp Wich2017-01-181-1/+1
| | | | | | | | | | | | | Do not strip static libraries shipped with the SDK in order to preserve the archive index. If we strip the index of the shipped libraries, host programs will fail to link these libraries with errors like: libssl.a: error adding symbols: Archive has no index; run ranlib to add one The error was found while investigating a Python host build failure within the SDK environment. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* netifd: update to git HEAD versionHans Dedecker2017-01-171-2/+2
| | | | | | a057f6e device: fix DEV_OPT_SENDREDIRECTS definition Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* curl: fix HTTPS network timeouts with OpenSSLStijn Segers2017-01-161-0/+36
| | | | | | | | | Backport an upstream change to fix HTTPS timeouts with OpenSSL. Upstream curl bug #1174. Signed-off-by: Stijn Segers <francesco.borromini@inventati.org> [Jo-Philipp Wich: reword commit message, rename patch to 001-*] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* LEDE v17.01: set branch defaultsJo-Philipp Wich2017-01-163-11/+7
| | | | Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* base-files: add ARCH_PACKAGES to openwrt_release and os-releaseMatthias Schiffer2017-01-162-0/+2
| | | | | | | | | Knowing the package architecture at runtime can be useful, e.g. to configure opkg repository URLs. The value of ARCH_PACKAGES ("%A" in VERSION_SED) as added to openwrt_release (as DISTRIB_ARCH) and os-release (as LEDE_ARCH). Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* ubox: turn logd into a separate packageAndrej Vlasic2017-01-162-3/+15
| | | | | | | | Currently system log is always included as a part of ubox. Add logd as a seperate package and add it to default packages list. Signed-off-by: Andrej Vlasic <andrej.vlasic@sartura.hr> Signed-off-by: Luka Perkov <luka.perkov@sartura.hr>
* mbedtls: add static files in staging_dirDomagoj Pintaric2017-01-161-0/+1
| | | | | Signed-off-by: Domagoj Pintaric <domagoj.pintaric@sartura.hr> Signed-off-by: Luka Perkov <luka.perkov@sartura.hr>
* kernel: make ledtrig-netdev use a work queue for updatesFelix Fietkau2017-01-161-16/+16
| | | | | | | | This fixes hangs in igb that happen if the update call interrupts an already existing dev_get_stats call. In that case the calling CPU deadlocks because it's trying to acquire the same spinlock recursively. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* include/feeds.mk: base list of enabled feeds on available instead of ↵Matthias Schiffer2017-01-161-1/+1
| | | | | | | | installed feeds This fixes handling of CONFIG_FEED_* options for uninstalled feeds. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* opkg: use default PKG_BUILD_DIRMatthias Schiffer2017-01-161-1/+0
| | | | | | | opkg doesn't have BUILD_VARIANTs anymore, so the previously defined PKG_BUILD_DIR would lead to a weird 'opkg-' path component. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* mac80211: brcmfmac: add early (& hacky) patch for storing country codesRafał Miłecki2017-01-161-0/+60
| | | | | | | This allows some basic region switching on Netgear R8000. More devices & codes may be added. Ideally it should be converted into DT info & patch. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* mac80211: use wiphy_read_of_freq_limits in brcmfmacRafał Miłecki2017-01-151-0/+31
| | | | | | | | This makes use of cfg80211 feature backported & described in 188626f17c09 ("mac80211: backport cfg80211 support for ieee80211-freq-limit DT property"). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: add pending BCM5301X patches: Netgear R8000 WiFi & Luxul DTSRafał Miłecki2017-01-154-1/+343
| | | | | | | | This specifies wireless limitations for Netgear R8000 making sure people won't use channels incorrectly (limited performance). There are also 2 new DTS files not used by us yet. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>