aboutsummaryrefslogtreecommitdiffstats
path: root/package/utils
Commit message (Collapse)AuthorAgeFilesLines
* bzip2: Fix CVE-2016-3189Rosen Penev2018-08-302-1/+12
| | | | | | | | | | | Issue causes a crash with specially crafted bzip2 files. More info: https://nvd.nist.gov/vuln/detail/CVE-2016-3189 Taken from Fedora. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit f9469efbfa7ce892651f9a6da713eacbef66f177)
* mbedtls: change libmbedcrypto.so soversion back to 0Hauke Mehrtens2018-04-141-1/+1
| | | | | | | | | | | | | | | | | | mbedtls changed in version 2.7.0 and 2.7.2 the soversion of the libmbedcrypto.so library, use the old version again to be able to use the new library with binaries compiled against the old mbedtls library. Some binaries got rebuild to for the 2.7.0 release and are now using libmbedcrypto.so.1, the older ones are still using libmbedcrypto.so.0. Go back to libmbedcrypto.so.0 and make the system rebuild the binaries which were rebuild for 2.7.0 again. This should make the libmbedcrypto.so library be compatible with the old version shipped with 17.01. Fixes: 3ca1438ae0 ("mbedtls: update to version 2.7.2") Fixes: f609913b5c ("mbedtls: update to version 2.7.0") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: update to version 2.7.0Hauke Mehrtens2018-03-101-1/+1
| | | | | | | | | | | | | | | | | | | This fixes the following security problems: * CVE-2018-0488: Risk of remote code execution when truncated HMAC is enabled * CVE-2018-0487: Risk of remote code execution when verifying RSASSA-PSS signatures This release is also ABI incompatible with the previous one, but it is API compatible. Some functions used by a lot of other software was renamed and the old function names are provided as a static inline now, but they are only active when deprecated functions are allowed, deactivate the removal of deprecated functions for now. Also increase the PKG_RELEASE version to force a rebuild and update of packages depending on mbedtls to handle the changed ABI. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* usbutils: Update usb.ids file to latestRosen Penev2017-12-131-3/+3
| | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit fc4e7bdca75f4d283374d3dfe0d0ac1cd4885612)
* packages: nvram: fix memory leak in _nvram_freeZhai Zhaoxuan2017-12-131-0/+4
| | | | | | | | The value of nvram_tuple_t is allocated in _nvram_realloc, but it is not freed in _nvram_free. Signed-off-by: Zhai Zhaoxuan <zhaizhaoxuan@xiaomi.com> (cherry picked from commit c382237ac33a787043b22abc42f0c5a80278baae)
* usbutils: avoid duplicating the git revisionPhilip Prindeville2017-12-131-1/+1
| | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> (cherry picked from commit 3008fc9a7bbdcbb2563c99178ce8085396dd41e6)
* nvram: add help message for nvram magic not foundBangLang Huang2017-12-131-0/+1
| | | | | | | | The program would failed if nvram magic not found in specific partition. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit 69da83d9f12e4e48b546fc3fc3ff555034959211)
* nvram: improve argument check when program startBangLang Huang2017-12-131-8/+9
| | | | | | | | print help message when argument count is less than 2. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit c7e2a6fe923dc86bab14d94ead322a045efca4c9)
* nvram: add usage() functionBangLang Huang2017-12-131-10/+13
| | | | | | | | Merge the help message into a single function, so that we can use it somewhere else. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit 2a253e7cdbacd1bd19da80ea6f35a93b42655c3b)
* nvram: fix memory leakBangLang Huang2017-12-132-3/+10
| | | | | | | | | | | | | | Fix memory leak on nvram_open() and nvram_open_rdonly(). For nvram_open(), the 'fd' should be closed on error, and mmap_area should be unmap when nvram magic can not be found. For nvram_open_rdonly(), the 'file' variable should free before return. Once nvram_find_mtd() return successfully, it will allocate memory to save mtd device string. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit 1948d8e08c72106a01b359a30217cf92657cc79d)
* bzip2: add symlink to binaryDaniel Golle2017-12-131-1/+3
| | | | | | | | | Other distributions incl. the OpenWrt ImageBuilder and SDK expect to find the bzip2 executable in /bin. Create a symlink at that location for compatibility. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit eb7c14d512482e18d05f61afa44205167ea094c0)
* busybox: backport 'ip rule suppress_{prefixlength, ifgroup}'Stefan Tomanek2017-12-131-0/+145
| | | | | | | | | This is a backport from the busybox repository (192dce4b84fb32346ebc5194de7daa5da3b8d1b4); it enables the use of the suppress_{prefixlength,ifgroup} flags for policy routing rules. Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de> (cherry picked from commit de6ff1512955953e56735896c044c7aac97e14d9)
* usbmode: remove devices with unsupported modesJulian Labus2017-12-131-2/+7
| | | | | | | | remove files which include the following mode options BlackberryMode OptionMode PantechMode QuantaMode Signed-off-by: Julian Labus <julian@labus-online.de> (cherry picked from commit b757de65b3c3aa210022c65445df1d6dbbf9eadd)
* busybox: fix installation of cron and ntpd scripts in the default configFelix Fietkau2017-12-131-2/+2
| | | | | | Fixes: 0b24850e9778 ("busybox: don't install NTP scripts if NTP isn't configured") Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 3169a6a7ada17e2ea8ef4641edee68134c04b92b)
* busybox: don't install NTP scripts if NTP isn't configuredPhilip Prindeville2017-12-131-0/+4
| | | | | | | | | If you're using Chrony or NTPD you don't want the busybox NTP server as well. Make it's installation truly conditional. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [simplify] (cherry picked from commit 0b24850e97789818fadcbce4b8de4abc429fd9f2)
* adb: Also pass TARGET_CPPFLAGSFlorian Fainelli2017-12-131-1/+1
| | | | | | | | Fixes build issues with external toolchains that do not have STAGING_DIR in their default search path. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit 4aa1560de3ce7e1ce813f450025ee0c55ab868eb)
* px5g: Fix TARGET_LDFLAGS and add TARGET_CPPFLAGSFlorian Fainelli2017-12-131-2/+2
| | | | | | | | | Make sure we pass down TARGET_CPPFLAGS to let toolchains with no default search paths to find the mbdetls headers, and override TARGET_LDFLAGS to include libraries we are linking against. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit 306ee6436170d4c3c0c677653e9a20a8ee116cf7)
* bsdiff: Also pass down TARGET_CPPFLAGSFlorian Fainelli2017-12-131-2/+2
| | | | | | | | Fixes build with external toolchains not having STAGING_DIR in their default search path(s). Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit 562ebe798255a2bb71c6a621d6a70662dfbd63c4)
* mdadm: fix parameter quotingJo-Philipp Wich2017-12-131-8/+12
| | | | | | | | Ensure that path defines are passed quoted to the compiler in order to avoid cpp syntax errors. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit d4e7af52788fe6a5495064606e674ed6897a69cb)
* mdadm: Fix config generationRosen Penev2017-12-132-11/+9
| | | | | | | | | | | | | | | | | | The init script generated something like "DEVICE=/dev/sda" when it should have been generating "DEVICE /dev/sda". mdadm errors on this. Patch by jow. Also changed the default sendmail path to /usr/sbin/sendmail. No package in LEDE provides /sbin/sendmail. msmtp provides /usr/sbin/sendmail so use that. Also add a patch to fix file paths for mdadm runtime files. mdadm currently errors on them since /run is missing. Once /run is added to stock LEDE, this patch can be removed. Signed-off-by: Rosen Penev <rosenp@gmail.com> [rewrap commit message] Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 8eadec40bdc205568e34e19b07b2a3035c9223fb)
* mdadm: Do not check RUN_DIRFlorian Fainelli2017-12-131-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Fixes build failure on hosts that do not have mdadm installed/configured: make[3]: Entering directory `/local/users/fainelli/openwrt/trunk/build_dir/target-mipsel-linux-gnu_glibc/mdadm-4.0' ***** Parent of /run/mdadm does not exist. Maybe set different RUN_DIR= ***** e.g. make RUN_DIR=/dev/.mdadm ***** or set CHECK_RUN_DIR=0 make[3]: *** [check_rundir] Error 1 make[3]: Leaving directory `/local/users/fainelli/openwrt/trunk/build_dir/target-mipsel-linux-gnu_glibc/mdadm-4.0' make[2]: *** [/local/users/fainelli/openwrt/trunk/build_dir/target-mipsel-linux-gnu_glibc/mdadm-4.0/.built] Error 2 make[2]: Leaving directory `/local/users/fainelli/openwrt/trunk/package/utils/mdadm' make[1]: *** [package/utils/mdadm/compile] Error 2 make[1]: Leaving directory `/local/users/fainelli/openwrt/trunk' make: *** [package/mdadm/compile] Error 2 Fixes: 980c41f8e04f ("utils/mdadm: Update to 4.0") Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit 5229c453630c0b023c3d65ef6005adbe48062bbb)
* kernel: remove out of tree direct-io disable hackFelix Fietkau2017-12-131-1/+1
| | | | | | | | | Direct-IO support has to be enabled for the release build anyway, so this hack is not worth keeping Signed-off-by: Felix Fietkau <nbd@nbd.name> (backported from commit 0b7ed65cec8084bb98ae0e2758b7aca6c447cd4b) Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* utils/mdadm: Update to 4.0Daniel Engberg2017-12-135-31/+53
| | | | | | | | | | | | Update mdadm to 4.0 Remove 000-compile.patch as it's fixed upstream Refresh patches Add mdadm.h-Undefine-dprintf-before-redefining.patch Source: http://git.openembedded.org/openembedded-core/tree/meta/recipes-extended/mdadm/files Add RAID 0,1 and 10 as depends to make mdadm usable. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit 980c41f8e04f5586731e84492001971eb8371590)
* mdadm: extend uci config supportJo-Philipp Wich2017-12-133-7/+82
| | | | | | | | Extend the mdadm package to allow to explicitely configure arrays as well as device list entries. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 813efe57e434037fb58bd3e16ebd3a1cfd6ceb82)
* f2fs-tools: fix mkfs.f2fs on big-endian systemsStijn Tintel2017-09-032-1/+67
| | | | | | | Fixes: FS#749 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit cdb494fdc2d3399e698893ff0cfd06d3c802364f)
* f2fs-tools: drop musl compat patchStijn Tintel2017-09-031-10/+0
| | | | | | | It is no longer needed since version 1.4.1. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 252c8ddf146f196faaa34cf7af9b3eacb79e6add)
* f2fs-tools: drop patch in favour of CONFIGURE_VARSStijn Tintel2017-09-032-19/+3
| | | | | | | | | Override the failing check in configure with CONFIGURE_VARS instead of carrying a patch that's unlikely to be accepted by upstream. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> Acked-by: John Crispin <john@phrozen.org> (cherry picked from commit d87f27af54e7c122c8f320f7266dd5061bb47a8b)
* f2fs-tools: Switch to gz tarballDaniel Engberg2017-09-031-3/+3
| | | | | | At some point kernel.org decided to drop xz generated tarballs, switch to gz which they still provide. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* mtd-utils: use source package name for lzo in PKG_BUILD_DEPENDSMatthias Schiffer2017-07-081-1/+1
| | | | | | PKG_BUILD_DEPENDS should always refer to source package names. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* usbmode: update usb-modeswitch-data to 20170205Julian Labus2017-05-291-2/+2
| | | | | | add support for new hardware Signed-off-by: Julian Labus <julian@labus-online.de>
* usbmode: update to latest versionJulian Labus2017-05-291-3/+3
| | | | | | 453da8e convert-modeswitch.pl: fix message indices Signed-off-by: Julian Labus <julian@labus-online.de>
* usbmode: Update to latest HEADFlorian Fainelli2017-05-291-3/+3
| | | | | | | | | | | Brings the following changes: 22f041e18df0 Extend StandardEject sequence to include LUN 1 61fdf7e9b1cc cmake: Search for libjson-c 2769852e76b5 cmake: Find libubox/blobmsg_json.h 8a47c4b6649f add TargetClass support Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* util-linux: fix build with uclibcHauke Mehrtens2017-05-241-0/+24
| | | | | | | | | | Fix build of scriptreplay with uClibc. Some parts of the libm detection were backported to 2.29.2, but some parts were missing, which are added here. This patch is needed when libm is a separate library, this is not needed for LEDE master, because libm is there integrated in the libc for uClibc and musl. Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
* busybox: revert accidential version bumpJo-Philipp Wich2017-04-271-1/+1
| | | | | | | | | Due to an oversight during patch conflict resolution, the PKG_VERSION got accidentially bumped instead of the PKG_RELEASE field. Revert the bad version change as there exists no upstream 1.25.2 version. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* busybox: nslookup_lede: mimic output format of old Busybox appletJo-Philipp Wich2017-04-272-22/+61
| | | | | | | | | | | | | When invoking "nslookup_lede" with a domain argument and without explicit query type, issue both A and AAAA queries and display the resulting IP addresses in a numbered list style, similar to how the old BusyBox nslookup used to output the records. This is required for compatibility with certain scripts. Ref: https://forum.lede-project.org/t/nslookup-ipv6-in-lede-17-01-1 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* busybox: nslookup_lede: fix compatibility with v1.25Jo-Philipp Wich2017-04-272-6/+7
| | | | | | | | | | | | | | The ":*" optstring syntax was only recently introduced with BusyBox v1.26, older versions need a corresponding hint in the "opt_complementary" variable to denote flag values that should be stored as llist entries. Add the required opt_complementary entry to fix random SIGBUS, SIGILL or SIGSEGV related crashes on BusyBox 1.25.x when attempting to use the "-q" flag of the "nslookup_lede" applet. Ref: https://forum.lede-project.org/t/nslookup-ipv6-in-lede-17-01-1 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* busybox: fix build of nslookup_lede applet without IPv6 (#728)Jo-Philipp Wich2017-04-211-9/+33
| | | | | | | | | Protect any IPv6 related with appropriate guards to fix compilation with disabled IPv6 support in Busybox. Fixes #728. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* busybox: Move libresolv detection to LEDE MakefileFlorian Fainelli2017-04-212-18/+6
| | | | | | | | | | | Since the LEDE nslookup applet is already specific to LEDE, move the libresolv detection into the busybox Makefile that LEDE uses. This fixes builds with external toolchains that don't automatically search for headers and/or libraries without being told so. Fixes: de5b8e5d2fe1 ("busybox: add musl compatible nslookup replacement") Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* utils/f2fs-tools: Update to 1.8.0Daniel Engberg2017-04-172-59/+7
| | | | | | | | | | Update f2fs-tools to 1.8.0 Refresh patches Remove selinux patch, use configure argument instead. Switch to xz tarball Adjust url to avoid redirects Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* busybox: add musl compatible nslookup replacementJo-Philipp Wich2017-04-153-0/+931
| | | | | | | | | | Add an alternative nslookup applet implementation which is compatible with musl libc wrt. name server selection and which supports a number of additional features such as query type selection. Fixes #155, #217 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* util-linux: re-enable parallel buildsFelix Fietkau2017-04-111-1/+1
| | | | | | The original build error in 'more' seems to be gone Signed-off-by: Felix Fietkau <nbd@nbd.name>
* util-linux: unconditionally enable ncursesw supportFelix Fietkau2017-04-111-6/+1
| | | | | | | The build dependency is unconditional, and some components might fail if ncurses is not available Signed-off-by: Felix Fietkau <nbd@nbd.name>
* utils/util-linux: Update to 2.29.2Daniel Engberg2017-04-113-39/+6
| | | | | | | | | | Update util-linux to 2.29.2 Remote 0001-fix-uClibc-ng-scanf-check.patch as it's been merged upstream. Refresh patches Change ncurses to ncursesw to fix compilation and avoid confusion Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> Signed-off-by: Felix Fietkau <nbd@nbd.name> [remove faulty dependency changes]
* sysntpd: restore support for peer-less (standalone) modePiotr Dymacz2017-04-021-1/+1
| | | | | | | | | | | | | | | | | ntpd from Busybox supports peer-less (standalone) mode when it's started with option -l and without any peer provided with option -p. In this mode ntpd uses local time as reference and acts as stratum 1 server. This mode can be used in isolated networks, where Internet access and/or other NTP server/s are not available, but the device has some other way of getting correct time, like e.g. GPS (ugps supports setting local time by default). Support for this mode was incorrectly disabled/removed in: 1527f96ca6e196fa17c96fdb3ae520158fa5943f Signed-off-by: Piotr Dymacz <pepe2k@gmail.com> Acked-by: Jo-Philipp Wich <jo@mein.io>
* ugps: fix and improve init scriptPiotr Dymacz2017-04-022-3/+7
| | | | | | | | | | The ugps tool expects device path in last argument. If it's provided before other options, they won't be processed at all. Additionally, make it possible to use absolute path for gps character device in related uci configuration. Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* busybox: vi: backporting patches to fix ZZ and :x commandYousong Zhou2017-03-253-1/+154
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtlsFelix Fietkau2017-03-0118-8017/+22
| | | | | | | | px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Revert "px5g-standalone: provide px5g via PROVIDES"Stijn Tintel2017-02-201-1/+0
| | | | | | | | | | | | | This reverts commit cc66f819b4e778732a32f08f5dc39a2554682b73. This commit causes opkg to install px5g-standalone instead of px5g when installing luci-ssl. As luci-ssl depends on mbedtls, using px5g-standalone makes no sense. Next to that, it creates deprecated SHA1 certificates. Revert the commit to avoid pxg5-standalone to be installed by accident. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit ca8aee0c570561fc59fb0d0e6b5eac418054c372)
* ugps: fix typoCezary Jackiewicz2017-02-162-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Removing redundant spaces from the name of the option. Without fix: root@LEDE:~# opkg install ugps Installing ugps (2016-10-24-32a6b2b7-1) to root... Downloading http://downloads.lede-project.org/releases/17.01-SNAPSHOT/packages/mips_24kc/base/ugps_2016-10-24-32a6b2b7-1_mips_24kc.ipk Configuring ugps. uci: Parse error (invalid character in name field) at line 3, byte 23 uci: Parse error (invalid character in name field) at line 3, byte 23 sh: out of range root@LEDE:~# uci show gps uci: Parse error (invalid character in name field) at line 3, byte 23 With this fix: root@LEDE:~# uci show gps gps.@gps[0]=gps gps.@gps[0].tty='ttyACM0' gps.@gps[0].adjust_time='1' Signed-off-by: Cezary Jackiewicz <cezary@eko.one.pl>
* packages: mark packages depending on a target as nonsharedMathias Kresin2017-01-241-0/+2
| | | | | | | | | The packages can't be build as shared packages due to the unmet dependencies. Fixes FS#418. Signed-off-by: Mathias Kresin <dev@kresin.me>