aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* netifd: update to latest git HEAD (coverity fixes)Hans Dedecker2018-04-161-3/+3
| | | | | | | | | | | | 513eb27 system-linux: check ioctl return value in system_vlan() df1625d system-linux: check ioctl return value in system_if_flags() 209c508 system-linux: fix segfault on alloc failure in system_if_check() 4a8e20e system-linux: fix segfault on error in system_add_ip6_tunnel() 36e4700 handler: fix resource leak on error in netifd_init_script_handlers() 86a0e7c system-linux: remove unnecessary open call in system_if_dump_info() 1e2cf67 system-linux: fix memory leak on error in system_add_vxlan() Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* lldpd: bump to 1.0.1Stijn Tintel2018-04-151-2/+2
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* nghttp2: bump to 1.31.1Hans Dedecker2018-04-151-2/+2
| | | | | | | | 1e22b36c Update manual pages 0f818baf Bump up version number to 1.31.1 c411d169 Fix frame handling Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* mt76: update to the latest versionFelix Fietkau2018-04-151-3/+3
| | | | | | | | | | | | | | | 1d23142 mt76: add led active low to debugfs 549f43b mt7603: ensure that the ACK flag is set for A-MPDUs with any acked subframe df9f9f6 mt7603: always try tx rate1 first 9c52f36 mt7603: pull the final rate index from the status descriptor f36f308 mt7603: improve validation of rx frames 9a23989 mt7603: remove warning on rx with invalid channel info 7a31731 mt76: check for pending reset before attempting to schedule tx 873a7c9 mt7603: call mt76_txq_schedule_all as a barrier to prevent tx during reset d9e5da3 mt76: add rcu locking in tid reorder function a8e8921 mt7603: add more checks to avoid dereferencing invalid pointers in wcid lookup Signed-off-by: Felix Fietkau <nbd@nbd.name>
* base-files: remove /etc/sysctl.d/ from conffilesMatthias Schiffer2018-04-131-3/+1
| | | | | | | | Let's use /etc/sysctl.d for package-provided snippets and leave /etc/sysctl.conf to the admin. Don't backup /etc/sysctl.d on upgrades, so old defaults get replaced properly. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* base-files: move netfilter sysctl defaults to specific kmod packagesMatthias Schiffer2018-04-135-13/+27
| | | | | | | Avoid warnings when applying settings for uninstalled kmods. See also FS#1073. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* base-files: move sysctl defaults to /etc/sysctl.d/10-default.confMatthias Schiffer2018-04-133-32/+35
| | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* base-files: evaluate /etc/sysctl.d/* before /etc/sysctl.confMatthias Schiffer2018-04-132-2/+2
| | | | | | | We can use /etc/sysctl.d/* for package-supplied sysctl snippets, giving admins the option to use /etc/sysctl.conf to override settings. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* base-files: remove /etc/uci-defaults/11_migrate-sysctlMatthias Schiffer2018-04-131-16/+0
| | | | | | | 11_migrate-sysctl has not been updated with new file hashes since 2012. Let's get rid of it. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* ath10k-ct: Update firmwareBen Greear2018-04-131-24/+24
| | | | | | | | | | | | | | | This firmware has only small changes from the last commit, but it does have an important fix for at least some PTK rekey logic. The old firmware would have issues if the driver managed to set a clear key while encryption was 'enabled'. This new firmware for both wave-1 and wave-2 should not be susceptible to this type of bug any more. And remove mesh-bcast IE flag from wave-2, still need more work before we can enable that flag in ath10k-ct firmware it seems. Signed-off-by: Ben Greear <greearb@candelatech.com>
* ipq40xx: unbundle firmware and board fileMathias Kresin2018-04-131-1/+1
| | | | | | | | | | | Don't select the firmware with the board file, it prevents an easy use of the -ct ath10k firmware. Select the firmware within the default packages instead. Remove the per device selection of the firmware now that it the firmware is selected by default. Signed-off-by: Mathias Kresin <dev@kresin.me>
* ipq40xx: add support for Netgear EX6100v2/EX6150v2David Bauer2018-04-132-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifications: SOC: Qualcomm IPQ4018 (DAKOTA) ARM Quad-Core RAM: 256 MB Winbond W632GU6KB12J FLASH: 16 MiB Macronix MX25L12805D ETH: Qualcomm QCA8072 WLAN1: Qualcomm Atheros QCA4018 2.4GHz 802.11b/g/n/ac 2x2 WLAN2: Qualcomm Atheros QCA4018 5GHz 802.11n/ac 1x1 (EX6100) 2x2 (EX6150) INPUT: Power, WPS, reset button AP / Range-extender toggle LED: Power, Router, Extender (dual), WPS, Left-/Right-arrow SERIAL: Header next to QCA8072 chip. VCC, TX, RX, GND (Square hole is VCC) WARNING: The serial port needs a TTL/RS-232 v3.3 level converter! The Serial setting is 115200-8-N-1. Tested and working: - Ethernet - 2.4 GHz WiFi (Correct MAC-address) - 5 GHz WiFi (Correct MAC-address) - Factory installation from WebIF - Factory installation from tftp - OpenWRT sysupgrade (Preserving and non-preserving) - LEDs - Buttons Not Working: - AP/Extender toggle-switch Untested: - Support on EX6100v2. They share the same GPL-Code and vendor-images. The 6100v2 seems to lack one 5GHz stream and differs in the 5GHz board-blob. I only own a EX6150v2, therefore i am only able to verify functionality on this device. Install via Web-Interface: Upload the factory image to the device to the Netgear Web-Interface. The device might asks you to confirm the update a second time due to detecting the OpenWRT firmware as older. The device will automatically reboot after the image is written to flash. Install via TFTP: Connect to the devices serial. Hit Enter-Key in bootloader to stop autobooting. Command "fw_recovery" will start a tftp server, waiting for a DNI image to be pushed. Assign your computer the IP-address 192.168.1.10/24. Push image with tftp -4 -v -m binary 192.168.1.1 -c put <OPENWRT_FACTORY> Device will erase factory-partition first, then writes the pushed image to flash and reboots. Parts of this commit are based on Thomas Hebb's work on the openwrt-devel mailinglist. See https://lists.openwrt.org/pipermail/openwrt-devel/2018-January/043418.html Signed-off-by: David Bauer <mail@david-bauer.net>
* ipq-wifi: Add 8devices JalapenoRobert Marko2018-04-132-1/+2
| | | | | | | Add custom board-2.bin for 8devices Jalapeno. Upstreaming is in progress. Signed-off-by: Robert Marko <robimarko@gmail.com>
* hostapd: fix compile of -mini variantsDaniel Golle2018-04-131-0/+23
| | | | | | Fixes commit d88934aa5a (hostapd: update to git snapshot of 2018-04-09) Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mac80211: pass hostapd control socket to mesh-mode supplicantDaniel Golle2018-04-131-1/+1
| | | | | | | | | | | Unlike when operating in Ad-Hoc mode, we apparently need to pass the hostapd control socket interface to wpa_supplicant when using 802.11s mesh mode. There also seems to still be something wrong with the logic setting channel and (v)htmode parameters... Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* hostapd: update to git snapshot of 2018-04-09Daniel Golle2018-04-1332-76/+1085
| | | | | | | | | And import patchset to allow 802.11s mesh on DFS channels, see also http://lists.infradead.org/pipermail/hostap/2018-April/038418.html Fix sae_password for encryption mesh (sent upstream as well). Also refreshed existing patches and fixed 463-add-mcast_rate-to-11s. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* libubox: update to latest git HEADHans Dedecker2018-04-121-3/+3
| | | | | | 6eff829 utils: fix build error with g++ Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* ebtables: update to latest git 2018-04-11Matthias Schiffer2018-04-122-5/+5
| | | | | | | | | | | 2e783b227766 ebt_ip: add support for matching IGMP type b5fbb8d786c9 ebt_ip: add support for matching ICMP type and code c5e5b784fd1a Move ICMP type handling functions from ebt_ip6 to useful_functions.c 11da52177196 include: sync linux/netfilter_bridge/ebt_ip.h with kernel Note: the new features require at least kernel 4.17 or backported patches. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* packages/uboot-omap: bugfix: serial using ns16550 fifo not enabledAlexander Couzens2018-04-112-1/+310
| | | | | | | | The serial was working before, but not when doing copy&pasting longer commands in a short time. Fixes: a4def18f29e1 ("uboot-omap: Update to u-boot v2017.01") Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
* iptables: split physdev match out as a separate packageMatthias Schiffer2018-04-092-3/+26
| | | | | | | Split physdev match out of ipt-extra to allow installing ipt-extra without pulling in br-netfilter. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* kernel: kmod-ebtables: do not depend on kmod-br-netfilterMatthias Schiffer2018-04-091-1/+1
| | | | | | | While ebtables can be combined with br-netfilter, there is no good reason to make it a dependency. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* kernel: unhide kmod-br-netfilterMatthias Schiffer2018-04-091-1/+0
| | | | | | | kmod-br-netfilter is not only a support module, but can be useful on its own, using the net.bridge.bridge-nf-call-* sysctls. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* kernel: change dependency of kmod-ebtables-* on kmod-ebtables to selectingMatthias Schiffer2018-04-091-1/+1
| | | | | | | | Non-selecting dependencies easily lead to Kconfig failures due to recursive dependencies. We hit such an issue in Gluon; the easiest fix is to make the dependency selecting. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* dnsmasq: remove example domains from rfc6761.conf (FS#1447)Hans Dedecker2018-04-092-5/+1
| | | | | | | | | | | | RFC6771 does not exclude the forwarding of the example domain as it states : "Caching DNS servers SHOULD NOT recognize example names as special and SHOULD resolve them normally." Example domains cannot be assigned to any user or person by DNS registrars as they're registered in perpetuity to IANA meaning they can be resolved; therefore let's remove the example domains from the rfc6761.conf file. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* odhcpd: update to latest git HEADHans Dedecker2018-04-091-4/+4
| | | | | | 31f217f router: improve RFC7084 compliancy Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* mt76: update to the latest versionFelix Fietkau2018-04-091-3/+3
| | | | | | | | | | | | | | | | | | | c66094e mt76x2: fix possible NULL pointer dereferencing in mt76x2_tx() 249fa2d mt76x2: fix warning in ieee80211_get_key_rx_seq() 54d6710 mt76: use mt76_poll_msec routine in mt76pci_load_firmware() eb359f1 mt76x2: remove unnecessary len variable in mt76x2_eeprom_load() 7e6e00b mt76: initialize available_antennas_{tx,rx} info 6469dca mt76: add mt76_init_stream_cap routine ced433d mt76x2: add mac80211 {set,get}_antenna callbacks 238f3f1 mt76x2: remove warnings in mt76x2_mac_write_txwi() 880611b mt7603: main: fix warning in ieee80211_get_key_rx_seq() bc35af8 mt76x2: fix tssi initialization for 5GHz band 700ed20 mt76x2: make mt76x2_mac_reset routine static 6e7d5ce mt76x2: remove unnecessary MT_TX_ALC_CFG_4 configuration 5153ece mt76x2: set default values in TX_ALC_CFG_{1,2} for tempetaure compensation a3e7740 mt76x2: fix tx_alc_enabled check Signed-off-by: Felix Fietkau <nbd@nbd.name>
* libubox: update to the latest versionFelix Fietkau2018-04-071-3/+3
| | | | | | | | 42a8ecd jshn: fix format string for int64 type 92009b7 utils: ensure that byte-order conversion functions evaluate the argument only once ace6489 switch from typeof to the more portable __typeof__ Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Revert "libubox: update to the latest version"Felix Fietkau2018-04-071-3/+3
| | | | | | | This reverts commit def82714d92d124dc5376c340132392ff7a3d4a5. Needs further fixes Signed-off-by: Felix Fietkau <nbd@nbd.name>
* libubox: update to the latest versionFelix Fietkau2018-04-071-3/+3
| | | | | | | 42a8ecd jshn: fix format string for int64 type 92009b7 utils: ensure that byte-order conversion functions evaluate the argument only once Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ramips: add U-Boot env support for ALFA Network AC1200RMPiotr Dymacz2018-04-061-0/+1
| | | | Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* uboot-envtools: fix ALFA Network AWUSFREE1 supportPiotr Dymacz2018-04-061-7/+9
| | | | Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* busybox: update to 1.28.3Hannu Nyman2018-04-051-2/+2
| | | | | | | | | Bug fix release. 1.28.3 has fixes for * ash and hush (do not leave stray open file destriptors in children), * cpio (fix for symlink extraction), * grep ("grep -Fw a" was matching "aa"). Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* odhcp6c: update to latest git HEADHans Dedecker2018-04-051-4/+4
| | | | | | | | 74b5a3 script: fix possible negative delay 473f248 dhcpv6: always trigger script update in case of IA updates ea18935 ra: rework route information option handling Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* firewall: update to the latest version, adds hw flow offload supportFelix Fietkau2018-04-051-3/+3
| | | | | | 35b3e74 defaults: add support for setting --hw on the xt_FLOWOFFLOAD rule Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: add support for enabling hardware flow offload via iptablesFelix Fietkau2018-04-051-5/+82
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: add hardware offload patch for flow tables supportFelix Fietkau2018-04-051-2/+3
| | | | | | Supports offloading through VLAN, bridge and PPPoE devices as well Signed-off-by: Felix Fietkau <nbd@nbd.name>
* base-files: change /var link from /tmp to tmpAlexander Couzens2018-04-051-1/+1
| | | | | | | | Some packages are already using $(1)/var on package install. On multiuser systems this breaks the build when multiple users build OpenWrt. Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
* Revert "ncurses: Remove obsolete compile fixes"Jo-Philipp Wich2018-04-042-0/+58
| | | | | | | | | This reverts commit 4fb684a7558ea5c11580378be062f73da07f8479. The compile fixes are still required for host systems using GCC 5.x, such as Ubuntu 16.04 LTS. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* base-files: get_dt_led: don't warn about missing ledMathias Kresin2018-04-041-2/+1
| | | | | | | | | It's intentional that some boards within a target don't have all LEDs which are tried to be setup in a common script. Don't show a warning in such cases. Fixes: 4f4fc993db4c ("base-files: add more name source to get_dt_led helper function") Signed-off-by: Mathias Kresin <dev@kresin.me>
* leds-apu2: add newer board namesSebastian Fleer2018-04-031-1/+4
| | | | | | In recent firmware releases the board names changed from "apuX" to "PC Engines apuX" Signed-off-by: Sebastian Fleer <pubalias@posteo.net>
* package/utils/f2fs-tools: Update to 1.10.0Daniel Engberg2018-04-031-2/+2
| | | | | | | Update f2fs-tools to 1.10.0 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> Signed-off-by: Rosen Penev <rosenp@gmail.com>
* ncurses: Remove obsolete compile fixesRosen Penev2018-04-032-58/+0
| | | | | | | | | | It seems both issues (GCC5 and Musl) were fixed at some point. Thus, they can be dropped. Did not bump version as there is no change in functionality or size. Compile-tested on ar71xx and mvebu, both with musl. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* nand-utils: add flash_erase utilityAdriĆ  Llaudet2018-04-031-2/+2
| | | | | | | | | | flash_erase utility allows to erase MTD partitions on NAND flash. Useful when you want to clean or write an MTD partition from scratch. e.g., before using kobs-ng to flashing SPL images it's recommended to erase the MTD partition to ensure it's empty. Signed-off-by: AdriĆ  Llaudet <adria.llaudet@gmail.com>
* busybox: update to 1.28.2Hannu Nyman2018-04-0310-594/+578
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update busybox to 1.28.2, refresh patches and default config. * modify 230-add_nslookup_lede.patch as opt_complementary was removed Also move nslookup_longopts variable declaration to be inside the same conditional as the function itself. * modify 250-date-k-flag.patch to match upstream (opt_complementary) * remove 600-cve-2017-16544.patch that is upstreamed Notes about config changes: * Some applet-specific LONG_OPTIONS config options were removed * Config help text indentation changed, caused lots of text formatting changes for convert_menuconfig.pl * convert_defaults.pl moved lots of defaults around, summary of actual changes below New applets/features: --------------------- ARCH HEXEDIT MINIPS NETCAT NUKE RESUME RUN_INIT SETFATTR New options: ------------ FEATURE_CATN FEATURE_CROND_SPECIAL_TIMES FEATURE_LIBBUSYBOX_STATIC FEATURE_SETPRIV_CAPABILITIES FEATURE_SETPRIV_CAPABILITY_NAMES FEATURE_SETPRIV_DUMP FEATURE_SH_READ_FRAC FEATURE_SWAPONOFF_LABEL FEATURE_VOLUMEID_MINIX FEATURE_XARGS_SUPPORT_ARGS_FILE FEATURE_XARGS_SUPPORT_PARALLEL HUSH_GETOPTS HUSH_READONLY HUSH_TIMES Removed: -------- FEATURE_HAVE_RPC MSH Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* samba36: fix some security problemsHauke Mehrtens2018-04-038-3/+322
| | | | | | | | | | This Adds fixes for the following security problems based on debians patches: CVE-2016-2125: Unconditional privilege delegation to Kerberos servers in trusted realms CVE-2017-12163: Server memory information leak over SMB1 CVE-2017-12150: SMB1/2/3 connections may not require signing where they should CVE-2018-1050: Denial of Service Attack on external print server. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mtd-utils: Mark some lzma functions as staticHauke Mehrtens2018-04-031-19/+19
| | | | | | | | These functions are not declared in any header file and only used in same compile unit, mark them as static to remove one gcc warning and make it easier for the compiler to optimize them out. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* netifd: update to latest git HEADHans Dedecker2018-04-031-3/+3
| | | | | | 3dc8c91 interface-ip: fix memory leak in interface_ip_add_target_route() Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* odhcp6c: update to latest git HEADHans Dedecker2018-03-311-3/+3
| | | | | | | | | | 5cbd305 odhcp6c: improve code readibility eb83b7e treewide: improve error handling b7b11cb dhcpv6: initialize ifreq struct f0469e2 ra: handle socket fail creation d573461 odhcp6c: fix file pointer leakage Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* package/libs/mbedtls: add package with some mbedtls binaries.Paul Wassi2018-03-311-2/+23
| | | | | | Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
* mbedtls: update to version 2.8.0Hauke Mehrtens2018-03-312-20/+20
| | | | | | | | | | | | This fixes some minor security problems. Old size: 162262 bin/packages/mips_24kc/base/libmbedtls_2.7.0-1_mips_24kc.ipk New size: 163162 bin/packages/mips_24kc/base/libmbedtls_2.8.0-1_mips_24kc.ipk Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>