aboutsummaryrefslogtreecommitdiffstats
path: root/package/libs
Commit message (Collapse)AuthorAgeFilesLines
* Revert "libevent2: Don't build tests and samples"Jo-Philipp Wich2018-08-091-13/+0
| | | | | | | | This reverts commit fe90d14880ad80e5cbc0eba036f8f9f83fa77396. The cherry pick does not apply cleanly to 18.06. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* ustream-ssl: update to version 2018-05-22Hauke Mehrtens2018-08-081-4/+4
| | | | | | | 5322f9d mbedtls: Fix setting allowed cipher suites e8a1469 mbedtls: Add support for a session cache Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: Update to 2.12.0Hauke Mehrtens2018-08-084-30/+120
| | | | | | | | | | | | | | | | | | | Multiple security fixes * CVE-2018-0497 Remote plaintext recovery on use of CBC based ciphersuites through a timing side-channel * CVE-2018-0498 Plaintext recovery on use of CBC based ciphersuites through a cache based side-channel Disable OFB block mode and XTS block cipher mode, added in 2.11.0. Disable Chacha20 and Poly1305 cryptographic primitives, added in 2.12.0 Patch the so version back to the original one, the API changes are looking no so invasive. The size of mbedtls increased a little bit: ipkg for mips_24kc before: 163.967 Bytes ipkg for mips_24kc after: 164.753 Bytes Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: Activate the session cacheHauke Mehrtens2018-08-081-9/+0
| | | | | | | | | | | | | | This make sit possible to store informations about a session and reuse it later. When used by a server it increases the time to create a new TLS session from about 1 second to less than 0.1 seconds. The size of the ipkg file increased by about 800 Bytes. ipkg for mips_24kc before: 163.140 Bytes ipkg for mips_24kc after: 163.967 Bytes Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: cleanup config patchDaniel Engberg2018-08-081-40/+32
| | | | | | | Clean up patch, use "//" consistently. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: Deactivate platform abstractionHauke Mehrtens2018-08-081-0/+9
| | | | | | | | This makes mbedtls use the POSIX API directly and not use the own abstraction layer. The size of the ipkg decreased by about 100 bytes. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* libevent2: Don't build tests and samplesEneas U de Queiroz2018-08-081-0/+13
| | | | | | | | | | | | The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software. This reduces build time significantly. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> (cherry picked from commit 26dbf79f4905e6b5ba5aafdc2271c3a864dd1924)
* libubox: fix mirror hashJo-Philipp Wich2018-08-071-1/+1
| | | | | | | | | | | | Correct the mirror hash to reflect whats on the download server. A locally produced libubox SCM tarball was also verified to yield an identical checksum compared to the one currently on the download server. Fixes FS#1707. Fixes 5dc32620c4 ("libubox: update to latest git HEAD") Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 432eaa940fee0b8023bee122da4cb08f3216209f)
* uclient: update to latest git HEADJo-Philipp Wich2018-08-031-3/+3
| | | | | | | | | | | | | | | f2573da uclient-fetch: use package name pattern in message for missing SSL library 9fd8070 uclient-fetch: Check for nullpointer returned by uclient_get_url_filename f41ff60 uclient-http: basic auth: Handle memory allocation failure a73b23b uclient-http: auth digest: Handle multiple possible memory allocation failures 66fb58d uclient-http: Handle memory allocation failure 2ac991b uclient: Handle memory allocation failure for url 63beea4 uclient-http: Implement error handling for header-sending eb850df uclient-utils: Handle memory allocation failure for url file name ae1c656 uclient-http: Close ustream file handle only if allocated Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit e44162ffca448d024fe023944df702c9d3f6b586)
* libubox: update to latest git HEADJohn Crispin2018-07-251-3/+3
| | | | | | | c83a84a fix segfault when passed blobmsg attr is NULL Signed-off-by: John Crispin <john@phrozen.org> (cherry picked from commit 5dc32620c4aa66d05eb5585784ed954854e8194c)
* libnfnetlink: Remove dead mirrorDaniel Engberg2018-06-141-2/+1
| | | | | | Remove mirrors.evolva.ro as it's no longer available Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* nghttp2: bump to 1.32.0Hans Dedecker2018-05-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 572735e4 Update manual pages e8d693c3 Bump up version number to 1.32.0, LT revision to 30:2:16 f44dfcd9 Update AUTHORS 1f1b0d93 Update manual pages ce8c749b Merge pull request #1173 from nghttp2/asio-client-sni 3e4f257b asio: Support client side SNI 86fab997 Upgrade neverbleed to the latest master c3ecd445 Merge pull request #1171 from nghttp2/h2load-rate-and-duration c65ca20a h2load: -r and --duration are mutually exclusive a5c408c5 Ignore all input after calling session_terminate_session 06379b28 Fix treatment of padding e04de48e Merge pull request #1162 from nghttp2/libressl 00964642 Use LIBRESSL_IN_USE instead of defined(LIBRESSL_VERSION_NUMBER) 8d0b4544 libressl 2.7 has X509_VERIFY_PARAM_* d8a34131 libressl 2.7 has SSL_CTX_get0_certificate 5db17d0a Compile with libressl 2.7.2 1bf69b56 Define LIBRESSL_LEGACY_API and LIBRESSL_2_7_API 3febaef1 Bump up LT revision to 30:1:16 due to v1.31.1 release b1bd6035 Fix frame handling b48bcb21 examples: Use C style comment in .c files 6f3ce2c7 examples: Remove unused lambda capture 2f9121cf Merge branch 'Sp1l-Sp1l/allow-no-npn' e65e7711 Add comment on #endif 636ef51b Fix compile error with -Wunused-function 400934e5 [PATCH] Allow building without NPN 4c3a3acf Merge pull request #1146 from vszakats/cmakestaticlib 9aa6002c Merge pull request #1144 from hellojaewon/master f342260b cmake: add ENABLE_STATIC_LIB option to build static lib a6dd4970 Fix typo 842509da Don't allow 101 HTTP status code because HTTP/2 removes HTTP Upgrade 4add618a Bump up version number to 1.32.0-DEV Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* libusb: Add SourceForge mirror.Rosen Penev2018-05-021-1/+3
| | | | | | SourceForge is still getting updated so might as well have it here. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* wolfssl: fix options and add support for wpa_supplicant featuresDaniel Golle2018-05-022-5/+40
| | | | | | | | Some options' default values have been changed upstream, others were accidentally inverted (CONFIG_WOLFSSL_HAS_DES3). Also add options needed to build hostapd/wpa_supplicant against wolfssl. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ustream-ssl: update to latest git HEADJohn Crispin2018-05-011-3/+3
| | | | | | | | 527e700 ustream-ssl: Remove RC4 from ciphersuite in server mode. 39a6ce2 ustream-ssl: Enable ECDHE with OpenSSL. 45ac930 remove polarssl support Signed-off-by: John Crispin <john@phrozen.org>
* libnl: Disable debug supportHauke Mehrtens2018-04-301-0/+3
| | | | | | | | | | | | | | | | | | | This dereses the size of the libnl pakcage a little bit old: 857 bin/packages/mips_24kc/base/libnl_3.4.0-1_mips_24kc.ipk 41195 bin/packages/mips_24kc/base/libnl-core_3.4.0-1_mips_24kc.ipk 7818 bin/packages/mips_24kc/base/libnl-genl_3.4.0-1_mips_24kc.ipk 24322 bin/packages/mips_24kc/base/libnl-nf_3.4.0-1_mips_24kc.ipk 136075 bin/packages/mips_24kc/base/libnl-route_3.4.0-1_mips_24kc.ipk new: 852 bin/packages/mips_24kc/base/libnl_3.4.0-1_mips_24kc.ipk 35020 bin/packages/mips_24kc/base/libnl-core_3.4.0-1_mips_24kc.ipk 7615 bin/packages/mips_24kc/base/libnl-genl_3.4.0-1_mips_24kc.ipk 24114 bin/packages/mips_24kc/base/libnl-nf_3.4.0-1_mips_24kc.ipk 131134 bin/packages/mips_24kc/base/libnl-route_3.4.0-1_mips_24kc.ipk Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* libusb: Update to 1.0.22Rosen Penev2018-04-301-4/+4
| | | | | | | | | | Switched download from SourceForge to GitHub. It seems the author migrated to that. Also fixed the website URL as the SourceForge link is dead. Compile tested on ar71xx and mvebu. Small size decrease on ar71xx: 30444 vs. 30099 bytes. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* tools/zlib: move zlib build to toolsHauke Mehrtens2018-04-281-2/+0
| | | | | | | | | | | | | This allows us to link the other tools against our libz and we do not need the system zlib any more. Only the static linked library is copied to the staging directory so we have a statically linked library on all systems and not only on Linux. This also adds the new dependencies of the packages which are depending on zlib. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Tested-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
* ustream-ssl: px5g: Rebuild packageHauke Mehrtens2018-04-181-1/+1
| | | | | | | | | | | | mbedtls changed in version 2.7.0 the soversion of the libmbedcrypto.so library, all applications using this shared library have to be recompiled to be able to load the new library. Some binaries got rebuild to for the 2.7.0 release and are now using libmbedcrypto.so.1, the older ones are still using libmbedcrypto.so.0. Fixes: 75c5ab4ca ("mbedtls: update to version 2.7.0") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* nghttp2: bump to 1.31.1Hans Dedecker2018-04-151-2/+2
| | | | | | | | 1e22b36c Update manual pages 0f818baf Bump up version number to 1.31.1 c411d169 Fix frame handling Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* libubox: update to latest git HEADHans Dedecker2018-04-121-3/+3
| | | | | | 6eff829 utils: fix build error with g++ Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* libubox: update to the latest versionFelix Fietkau2018-04-071-3/+3
| | | | | | | | 42a8ecd jshn: fix format string for int64 type 92009b7 utils: ensure that byte-order conversion functions evaluate the argument only once ace6489 switch from typeof to the more portable __typeof__ Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Revert "libubox: update to the latest version"Felix Fietkau2018-04-071-3/+3
| | | | | | | This reverts commit def82714d92d124dc5376c340132392ff7a3d4a5. Needs further fixes Signed-off-by: Felix Fietkau <nbd@nbd.name>
* libubox: update to the latest versionFelix Fietkau2018-04-071-3/+3
| | | | | | | 42a8ecd jshn: fix format string for int64 type 92009b7 utils: ensure that byte-order conversion functions evaluate the argument only once Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Revert "ncurses: Remove obsolete compile fixes"Jo-Philipp Wich2018-04-042-0/+58
| | | | | | | | | This reverts commit 4fb684a7558ea5c11580378be062f73da07f8479. The compile fixes are still required for host systems using GCC 5.x, such as Ubuntu 16.04 LTS. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* ncurses: Remove obsolete compile fixesRosen Penev2018-04-032-58/+0
| | | | | | | | | | It seems both issues (GCC5 and Musl) were fixed at some point. Thus, they can be dropped. Did not bump version as there is no change in functionality or size. Compile-tested on ar71xx and mvebu, both with musl. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* package/libs/mbedtls: add package with some mbedtls binaries.Paul Wassi2018-03-311-2/+23
| | | | | | Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
* mbedtls: update to version 2.8.0Hauke Mehrtens2018-03-312-20/+20
| | | | | | | | | | | | This fixes some minor security problems. Old size: 162262 bin/packages/mips_24kc/base/libmbedtls_2.7.0-1_mips_24kc.ipk New size: 163162 bin/packages/mips_24kc/base/libmbedtls_2.8.0-1_mips_24kc.ipk Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ncurses: Update to 6.1.Rosen Penev2018-03-316-47/+36
| | | | | | | | | | | | | | Compile tested on ar71xx. Old size: 6527 bin/packages/mips_24kc/base/terminfo_6.0-1_mips_24kc.ipk 141465 bin/packages/mips_24kc/base/libncurses_6.0-1_mips_24kc.ipk New size: 6873 bin/packages/mips_24kc/base/terminfo_6.1-1_mips_24kc.ipk 146950 bin/packages/mips_24kc/base/libncurses_6.1-1_mips_24kc.ipk Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libtool: Update to 2.4.6Rosen Penev2018-03-312-14/+3
| | | | | | | | | | | | Compile tested on mvebu. old size: 12947 bin/packages/mips_24kc/base/libltdl_2.4-2_mips_24kc.ipk new size: 13002 bin/packages/mips_24kc/base/libltdl_2.4.6-1_mips_24kc.ipk Signed-off-by: Rosen Penev <rosenp@gmail.com>
* openssl: update to 1.0.2oPaul Wassi2018-03-313-5/+5
| | | | | | Fixes CVE-2018-0739 Signed-off-by: Paul Wassi <p.wassi@gmx.at>
* libubox: update to the latest versionFelix Fietkau2018-03-231-3/+3
| | | | | | | 3aad294 libubox: Plug a small memory leak. eebe3fc utils: use constant byte-order conversion Signed-off-by: Felix Fietkau <nbd@nbd.name>
* nghttp2: bump to 1.31.0Hans Dedecker2018-03-051-2/+2
| | | | | | | | | | | | | | | | | | | | | 6e744662 Update bash_completion 478eac09 Update manual pages 88e2029e Bump up version number to 1.31.0, LT revision to 30:0:16 45d76cf5 nghttpx: Close listening socket on graceful shutdown 54573f28 Merge pull request #1137 from nghttp2/session-set-user-data 17793e99 Add nghttp2_session_set_user_data() public API function 5eac3c90 Update manual pages e70195ae nghttpx: Update doc fe51e7fa Merge pull request #1130 from nghttp2/avoid-inet_pton-macro eb951c2c src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro 39f0ce7c Merge pull request #1126 from nghttp2/nghttpx-expired-client-cert 65157811 Merge pull request #1123 from nghttp2/mruby-client-cert-not-before-after e8af7afc nghttpx: Add an option to accept expired client certificate 38abfd18 nghttpx: Add mruby tls_client_not_before, and tls_client_not_after ff3edc09 nghttpx: Fix potential memory leak 0bb15406 Bump up version number to 1.31.0-DEV Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* libunwind: fix build with musl on PPCMatthias Schiffer2018-02-251-0/+383
| | | | | | | | | | | Works around two incompatiblities between glibc and (POSIX-compliant) musl: - missing register definitions from asm/ptrace.h - non-POSIX-compliant ucontext_t on PPC32 with glibc Compile tested on mpc85xx. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* libnftnl: backport flowtable supportFelix Fietkau2018-02-213-1/+1704
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mbedtls: activate deprecated functionsHauke Mehrtens2018-02-161-9/+0
| | | | | | | | | Some functions used by a lot of other software was renamed and is only active when deprecated functions are allowed, deactivate the removal of deprecated functions for now. Fixes: 75c5ab4caf9 ("mbedtls: update to version 2.7.0") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: update to version 2.7.0Hauke Mehrtens2018-02-152-41/+39
| | | | | | | | This fixes the following security problems: * CVE-2018-0488: Risk of remote code execution when truncated HMAC is enabled * CVE-2018-0487: Risk of remote code execution when verifying RSASSA-PSS signatures Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* bunwind: build for ARM64Hauke Mehrtens2018-02-101-1/+1
| | | | | | | ARM64 is supported by libunwind since some versions, allow building it for aarch64. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* libubox: bump to git HEAD versionHans Dedecker2018-02-081-3/+3
| | | | | | b0c830 sh/jshn.sh: add json_for_each_item() Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* nghttp2: bump to 1.30.0Hans Dedecker2018-02-041-2/+2
| | | | | | | | | | | | | | | | | | | | | | | f0836c7e Update manual pages 25db178b Bump up version number to 1.30.0, LT revision to 29:2:15 1b6713e6 Update AUTHORS c1a496cf nghttpx: Fix bug that h1 backend idle timeout expires sooner e098a211 mruby: Fix bug that response header is unexpectedly overwritten 0ba4bf51 Merge pull request #1120 from dylanplecki/issue-1119-mruby-header-overwrite 6deee203 Fix #1119: Stop overwrite of first header on mruby call to env.req.set_header(..) 6761a933 Merge pull request #1105 from nghttp2/nghttpx-upgrade-scheme 5cc3d159 nghttpx: Add upgrade-scheme parameter to backend option 652f57e7 Merge pull request #1104 from nghttp2/allow-ping-after-goaway acd6b40e Allow PING frame to be sent after GOAWAY 0fbb46ed Merge pull request #1101 from nghttp2/remember-pushed-links 6ad629de Merge pull request #1102 from nghttp2/fix-missing-alpn-validation 74754982 nghttpx: Fix missing ALPN validation (--npn-list) a31a2e3b nghttpx: Remember which resource is pushed a776b0db Merge pull request #1092 from nghttp2/define-103 cfd926f0 src: Define 103 status code 72f52716 Bump up version number to 1.30.0-DEV Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* openssl: remove call to now absent clean-staging make targetYousong Zhou2018-01-301-3/+0
| | | | | | | | | It's not needed now since commit a621b8c ("include: clean package staging dir files before configure") Fixes FS#1309 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* build: cleanup SSP_SUPPORT configure optionJulien Dusser2018-01-271-1/+1
| | | | | | | | | | | | | | | | | | Configure variable SSP_SUPPORT is ambiguous for packages (tor, openssh, avahi, freeswitch). It means 'toolchain supporting SSP', but for toolchain and depends it means 'build gcc with libssp'. Musl no longer uses libssp (1877bc9d8f), it has internal support, so SSP_SUPPORT was disabled leading some package to not use SSP. No information why Glibc and uClibc use libssp, but they may also provide their own SSP support. uClibc used it own with commit 933b588e25 but it was reverted in f3cacb9e84 without details. Create an new configure GCC_LIBSSP and automatically enable SSP_SUPPORT if either USE_MUSL or GCC_LIBSSP. Signed-off-by: Julien Dusser <julien.dusser@free.fr>
* libunwind: enable build for armMaxim Gorbachyov2018-01-271-1/+1
| | | | | | Tested with perf on mvebu. Signed-off-by: Maxim Gorbachyov <maxim.gorbachyov@gmail.com>
* openssl: tell the build system that we are doing CROSS_COMPILEYousong Zhou2018-01-261-0/+5
| | | | | | | | | | So that it will not try to run c_rehash with the just built binaries on certs/demo. Fixes openwrt/packages#5432 Reported-by: Val Kulkov <val.kulkov@gmail.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* libnftnl: update to 1.0.9Philip Prindeville2018-01-201-7/+7
| | | | | | | | Also, drop unsupported configure options. Don't use git retrieve but released tarball instead. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* treewide: replace LEDE_GIT with PROJECT_GITJo-Philipp Wich2018-01-104-4/+4
| | | | | | | Remove LEDE_GIT references in favor to the new name-agnostic PROJECT_GIT variable. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* libubox: fix package bumpJo-Philipp Wich2018-01-071-4/+4
| | | | | | | | The previous commit was incorrectly rebased and referred to a not yet existing PROJECT_GIT variable. Fixes: d86a269c1f libubox: update to latest git HEAD Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* libubox: update to latest git HEADJo-Philipp Wich2018-01-071-1/+1
| | | | | | 1c08e80 jshn: properly support JSON "null" type Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* zlib: only enable NEON optimizations on eligible targetsJo-Philipp Wich2018-01-071-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | Instead of inferring the availability of NEON support from the target optimization flags, use a preprocessor test to decide whether to enable ARMv8 NEON optimizations. Fixes the following build error spotted by the mediatek/32 buildbot: [ 26%] Building C object CMakeFiles/zlib.dir/contrib/arm/inflate.o In file included from .../zlib-1.2.11/contrib/arm/chunkcopy.h:10:0, from .../zlib-1.2.11/contrib/arm/inflate.c:87: .../arm_neon.h:31:2: error: #error You must enable NEON instructions (e.g. -mfloat-abi=softfp -mfpu=neon) to use arm_neon.h #error You must enable NEON instructions (e.g. -mfloat-abi=softfp -mfpu=neon) to use arm_neon.h ^ In file included from .../zlib-1.2.11/contrib/arm/inflate.c:87:0: .../zlib-1.2.11/contrib/arm/chunkcopy.h:18:9: error: unknown type name 'uint8x16_t' typedef uint8x16_t chunkcopy_chunk_t; ^ [...] CMakeFiles/zlib.dir/build.make:302: recipe for target 'CMakeFiles/zlib.dir/contrib/arm/inflate.o' failed Fixes: 3acecba520 "package/libs/zlib: Add ARM and NEON optimizations" Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* argp-standalone: clean up patch fuzzKevin Darbyshire-Bryant2018-01-051-8/+8
| | | | | | Refresh patches to tidy up fuzz. No functional changes Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>