aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* openssl: backport build fix when hardware support is usedHauke Mehrtens2016-09-242-0/+35
| | | | | | | This fix added to the openssl 1.0.2 branch. In addition add the header for the existing backport. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ar71xx: add model detection for many Ubiquiti AirMax XM devicesNeal Oakey2016-09-241-0/+36
| | | | | | Signed-off-by: Neal Oakey <neal.oakey@bingo-ev.de> [Matthias Schiffer: minor adjustments] Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* image: per-device rootfs: don't fail without opkgMatthias Schiffer2016-09-241-2/+2
| | | | | | | Ignore errors caused by /etc/opkg not existing (i.e. when opkg is not selected). Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* image: allow specifying additional packages for device-specific rootfsMatthias Schiffer2016-09-242-3/+24
| | | | | | | | Add a new option to each device in multi-profile mode, allowing to provide a list of packages to add or remove. In case of added packages, the user must take care that these are selected to be built. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* treewide: remove bad local shell variable declarationsJo-Philipp Wich2016-09-247-21/+16
| | | | | | | Local variable declarations outside of functions are illegal since the Busybox update to v1.25.0, therfore remove them from the appropriate places. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* curl: update to version 7.50.3Hauke Mehrtens2016-09-242-3/+3
| | | | | | | | | | | | | | This fixes the following security problems: 7.50.1: CVE-2016-5419 TLS session resumption client cert bypass CVE-2016-5420 Re-using connections with wrong client cert CVE-2016-5421 use of connection struct after free 7.50.2: CVE-2016-7141 Incorrect reuse of client certificates 7.50.3: CVE-2016-7167 curl escape and unescape integer overflows Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* openssl: update to 1.0.2iMagnus Kroken2016-09-247-43/+19
| | | | | | | | | | | | | | | Drop 302-fix_no_cmac_build.patch, it has been applied upstream. Security fixes: * (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304) * (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305) * 10 Low severity issues Security advisory: https://www.openssl.org/news/secadv/20160922.txt Changelog: https://www.openssl.org/news/cl102.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* image: don't override opkg list directory in per-device rootfs modeMatthias Schiffer2016-09-242-5/+3
| | | | | | | | | | | | opkg's -l option is always interpreted relative to the installation root. This leads to very weird paths inside the rootfs (containing the whole path to the LEDE tree on the build machine) and causes the subsequent deletion of the list directory to fail (cluttering the resulting images). Instead, use the default list directory and remove its contents in prepare_rootfs. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* ramips: do not "local" variables outside of a functionMartin Blumenstingl2016-09-241-1/+1
| | | | | | | | | Older busybox versions allowed using the local keyword outside of functions, whereas 1.25.0 (which was introduced in 06fa1c46fc32) do not allow this anymore (leading to the following error when executing the script: "file: local: line nn: not in a function"). Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
* lantiq: do not "local" variables outside of a functionMartin Blumenstingl2016-09-242-5/+5
| | | | | | | | | Older busybox versions allowed using the local keyword outside of functions, whereas 1.25.0 (which was introduced in 06fa1c46fc32) do not allow this anymore (leading to the following error when executing the script: "file: local: line nn: not in a function"). Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
* scripts/package-metadata.pl: fix generation of dependencies on virtual packagesMatthias Schiffer2016-09-231-1/+4
| | | | | | | | Dependencies on purely virtual packages (satisfied by PROVIDES) that were not using "selects" ("+" flag) would be prepended with the prefix "PACKAGE_" twice, breaking the first alternative. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* linux-firmware: update to current Git headJo-Philipp Wich2016-09-231-3/+3
| | | | | | | | | | | | | | | | | | | Update the linux-firmware package in order to force the buildbots to fetch the proper mirrored version. Currently each builder has its own copy of the linux-firmware checkout staged in its own dl/, since the package was updated before the mirrored copy has been uploaded. The builders then subsequently uploaded their own copy instead, leading to md5sum mismatches since each clone produces different tarballs. By bumping the package to a new version and uploading the mirrored archive with the proper md5sum beforehand, the builders will fetch that instead and not upload their own copies. To properly solve that problem in the future we need to ensure that packed checkouts become reproducable. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* kernel: fix broken dependency of kmod-owl-loader on kmod-ath9kFelix Fietkau2016-09-221-1/+1
| | | | | | | It messes up the build order of package/kernel/linux vs package/kernel/mac80211 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* tools/firmware-utils: fix portability issue in mkmerakifw-oldFelix Fietkau2016-09-221-1/+1
| | | | | | Fixes build failure on Mac OS X Signed-off-by: Felix Fietkau <nbd@nbd.name>
* linux-firmware: update md5sumJo-Philipp Wich2016-09-221-1/+1
| | | | | | | | | | | | Since the md5sum of the mirrored Git clone archive has been set in the Makefile before that particular archive was uploaded to the source mirror, the buildbots uploaded their own, different copy instead invalidating the mirror md5sum for anyone else. In order to fix the mismatch, update the md5sum to reflect the archive being present on the download server. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* bcm53xx: move BCM53573 USB 2.0 patch to use backports prefixRafał Miłecki2016-09-211-2/+3
| | | | | | It was pushed into the usb-next branch. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* busybox: fix md5sumHauke Mehrtens2016-09-201-1/+1
| | | | | | | The md5sum was not updated in commit 06fa1c46fc3 "busybox: update to version 1.25.0" Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ltq-vdsl-app: update to version 4.17.18.6Hauke Mehrtens2016-09-203-28/+5
| | | | Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
* ltq-vdsl: update to version 4.17.18.6Hauke Mehrtens2016-09-202-12/+38
| | | | Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
* ltq-vdsl-mei: update mei driver to version 1.5.17.6Hauke Mehrtens2016-09-204-51/+87
| | | | Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
* dsl-vrx200-firmware-xdsl: update to more recent versionsHauke Mehrtens2016-09-201-7/+7
| | | | | | | | | | The Annex A firmware will be updated to: 05.08.01.08.01.06_05.08.00.0B.01.01_osc The Annex B firmware will be updated to: 05.07.09.09.00.06_05.07.04.04.00.02_osc Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
* busybox: update to version 1.25.0Hauke Mehrtens2016-09-2033-570/+482
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The following patches were removed: 010-networking-fix-uninitialized-memory-when-displaying-.patch https://git.busybox.net/busybox/commit/?id=f2c043acfcf9dad9fd3d65821b81f89986bbe54e 030-ip-fix-problem-on-mips64-n64-big-endian-musl-systems.patch https://git.busybox.net/busybox/commit/?id=4ab372d49a6e82b0bf097dedb96d26330c5f2d5f 204-udhcpc_src_ip_rebind.patch https://git.busybox.net/busybox/commit/?id=abe8f7515aded80889d78c2c1c8947997918cf90 230-ntpd_delayed_resolve.patch https://git.busybox.net/busybox/commit/?id=c8641962e4cbde48108ddfc1c105e3320778190d https://git.busybox.net/busybox/commit/?id=e4caf1dd9ce8569371a0eeb77ccf02a572dc0f11 260-arping_missing_includes.patch Not needed any more, still builds with musl for me. Add in 92fd6e6f1a "busybox: fix arping applet building on musl" The Kconfig files were updated with these commands: cd config ../convert_menuconfig.pl .../build_dir/target-*/busybox-1.25.0 cd .. ./convert_defaults.pl < .../build_dir/target-*/busybox-1.25.0/.config > Config-defaults.in Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* base-files: Allow subtargets to define base-files.mkFlorian Fainelli2016-09-191-0/+1
| | | | Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* kernel: owl-loader for delayed Atheros ath9k fixupChristian Lamparter2016-09-193-0/+298
| | | | | | | | | | | | | | | | | | | | | | | | | Some devices (like the Cisco Meraki Z1 Cloud Managed Teleworker Gateway) need to be able to initialize the PCIe wifi device. Normally, this is done during the early stages of booting linux, because the necessary init code is read from the memory mapped SPI and passed to pci_enable_ath9k_fixup. However,this isn't possible for devices which have the init code for the Atheros chip stored on NAND in an UBI volume. Hence, this module can be used to initialze the chip when the user-space is ready to extract the init code. Martin Blumenstingl made a few fixes and added support for lantiq: kernel: owl-loader: add support for OWL emulation PCI devices kernel: owl-loader: don't re-scan the bus when ath9k_pci_fixup failed kernel: owl-loader: use dev_* instead of pr_* logging functions kernel: owl-loader: auto-generate the eeprom filename as fallback kernel: owl-loader: add a debug message when swapping the eeprom data kernel: owl-loader: add missing newlines in log messages kernel: owl-loader: add support for the lantiq platform These patches have been integrated. Thanks! Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com> Signed-off-by: Christian Lamparter <chunkeey@googlemail.com>
* firmware-utils mkmerakifw-old: firmware generator for Z1Christian Lamparter2016-09-192-0/+370
| | | | | | This patch adds firmware generation tool for Cisco's Z1 Signed-off-by: Christian Lamparter <chunkeey@googlemail.com>
* cyassl: remove duplicate submenu levelJohn Crispin2016-09-191-3/+2
| | | | Signed-off-by: John Crispin <john@phrozen.org>
* cyassl: make CyaSSL/WolfSSL more configurableAndreas Schultz2016-09-192-4/+5
| | | | | | | | The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
* dnsmasq: Add match section supportHans Dedecker2016-09-191-0/+17
| | | | | | | | | | | | | | | Match sections allow to set a tag specified by the option networkid if the client sends an option and optionally the option value specified by the match option. The force option will convert the dhcp-option to force-dhcp-option if set to 1 in the dnsmasq config if options are specified in the dhcp_option option. config match option networkid tag option match 12,myhost option force 1 list dhcp_option '3,192.168.1.1' Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* iwinfo: Bump to 2016-07-29Florian Fainelli2016-09-191-2/+2
| | | | Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* ar71xx: update kernel config symbolsPiotr Dymacz2016-09-191-6/+0
| | | | Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* ar71xx: mark U-Boot and radio calibration data partitions as read-onlyPiotr Dymacz2016-09-192-17/+17
| | | | | | | General convention is to keep U-Boot and radio calibration data (ART) mtd partitions marked as read-only. Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* kirkwood: fix uimage creation for some kirkwood devicesbobafetthotmail2016-09-191-1/+0
| | | | | | | | | because with the current system I'm getting fake uImages that are actually a renamed zImage, and that's plain wrong. This fixes bug https://bugs.lede-project.org/index.php?do=details&task_id=131 and https://bugs.lede-project.org/index.php?do=details&task_id=139 Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* base-files: remind users to set root passwordJohn Crispin2016-09-191-0/+13
| | | | | | print a warning when a shell spawns, telling users to set a root password. Signed-off-by: John Crispin <john@phrozen.org>
* cns3xxx: eliminate hardcoded kernel/rootfs partition splitFelix Fietkau2016-09-194-171/+36
| | | | | | | | | | | | | | This changes the sysupgrade format. To support upgrades from the old firmware to the new one, legacy images are provided. Because of the old partition split, these have to be specific to the NOR or SPI device. The new sysupgrade images are suitable for begin put on flash directly, and they are independent of NOR vs SPI flash variant. Flashing back to old firmware is supported via using the old full-flash images instead of the old sysupgrade images. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* cns3xxx: move laguna.c changes out of patches, update it in files/Felix Fietkau2016-09-193-133/+64
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ubifs: add full overlayfs supportFelix Fietkau2016-09-194-0/+738
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bcm53xx: use upstream accepted ILP clk driver for BCM53573Rafał Miłecki2016-09-171-30/+13
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kernel: add nlmon kernel moduleHauke Mehrtens2016-09-161-0/+15
| | | | | | This driver allows to monitor netlink communication on the system. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* busybox: libnetlink: fix alignment of netlink messagesHauke Mehrtens2016-09-161-0/+100
| | | | | | | | | | | | A padding to align a message should not only be added between different attributes of a netlink message, but also at the end of the message to pad it to the correct size. Without this patch the following command does not work and returns an error code: ip link add type nlmon Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* base-files: reduce vm.min_free_kbytes for devices with 32M RAMFelix Fietkau2016-09-161-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* linux-firmware: update to the commit from 2016-09-15Rafał Miłecki2016-09-161-3/+3
| | | | | | This adds e.g. BCM43430 firmware (not packaged yet). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* arm64: fix build for linux 4.4.21Álvaro Fernández Rojas2016-09-161-0/+2
| | | | | | linux 4.4.21 adds 2 new symbols for arm64. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* kernel: update kernel 4.4 to version 4.4.21Álvaro Fernández Rojas2016-09-1610-230/+20
| | | | | | | Refresh patches for all targets that support kernel 4.4. Compile-tested on brcm2708 only. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* sunxi: add rtl8xxxu into pcduino v3 profileÁlvaro Fernández Rojas2016-09-151-1/+1
| | | | | | Now that RTL8188EU is supported in rtl8xxu select it for pcDuino v3 Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* rtl8xxxu: add support for rtl8188euÁlvaro Fernández Rojas2016-09-15105-0/+6333
| | | | | | | Patches by Jes Sorensen: https://git.kernel.org/cgit/linux/kernel/git/jes/linux.git/ Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* linux-firmware: rename r8188eu-firmware to rtl8188eu-firmwareÁlvaro Fernández Rojas2016-09-151-3/+3
| | | | | | This is consistent with the names used for other realtek firmwares. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* mac80211: stop brcmfmac from selecting all SDIO firmwaresÁlvaro Fernández Rojas2016-09-151-2/+1
| | | | | | | | | Now that we have firmwares separated and brcm2708 being the only target that actually selects SDIO support, avoid selecting all firmwares by default. sunxi should select the proper firmwares once SDIO support is enabled and tested. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* brcmfmac43430-firmware: rename to brcmfmac-firmware-43430-sdioÁlvaro Fernández Rojas2016-09-152-7/+7
| | | | | | This is consistent with the rest of brcmfmac firmwares. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* linux-firmware: separate packages for Broadcom FullMAC SDIO firmwaresÁlvaro Fernández Rojas2016-09-152-4/+11
| | | | | | | | | | | | Using few packages will allow saving some space by decreasing rootfs size. Moreover there are more firmware files that may require packaging and even more to come later. This can especially useful now, with per device rootfs. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* ar71xx: set region code of TP-Link TL-WDR3600/4300 to USMatthias Schiffer2016-09-151-0/+2
| | | | | | | | There are currently two stock firmwares for the TL-WDR3600/4300, a US and a universal version. Both allow installing images with US region code, so we don't need to provide multiple images. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>