aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* dslite: Quote resolveip hostname argumentHans Dedecker2016-10-062-4/+8
| | | | | | | | | Quote resolveip hostname argument to avoid bad shell injections. While at it fix pattern match logic in case multiple IPv6 addresses are returned for a hostname as they're seperated by newline by resolveip and not a white space Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* package: Add U-Boot for at91Ben Whitten2016-10-061-0/+102
| | | | | | | Adds u-boot for the at91 platform and a couple of boards. The build honours COPTS to benefit from fortify source et al. Signed-off-by: Ben Whitten <ben.whitten@gmail.com>
* uhttpd: rename certificate defaults sectionJo-Philipp Wich2016-10-061-2/+2
| | | | | | | Now that the uhttpd init script can generate certificates using openssl as well, update the section name and related comment to be more generic. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* hostapd: make -mesh and -p2p variants depend on the cfg80211 symbolFelix Fietkau2016-10-051-3/+3
| | | | | | Avoids build failures when the nl80211 driver is disabled Signed-off-by: Felix Fietkau <nbd@nbd.name>
* base-files: also generate configs when current is empty (FS#193)Koen Vandeputte2016-10-052-6/+6
| | | | | | | | | | | | | | | Before a configuration is generated, an empty file is created to store it in. (required by UCI) If something happens during config generation (power cut, interruption, ..) an empty file exists and it is never regenerated again, causing some daemons to fail starting (NTPD, logread, ..) Fix this by also generating new configs if a critical file is empty. Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
* kernel: fix kmod-sound-hda-core on Linux 3.18Jo-Philipp Wich2016-10-051-3/+3
| | | | | | | The kmod-sound-hda-core module attempts to package snd-hda-core.ko which does not exist in Linux 3.18, therfore only use it for kernels >= 4.1 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* uhttpd: support using OpenSSL for certificate generationHannu Nyman2016-10-052-3/+8
| | | | | | | | | | | | | | | | | | Support the usage of the OpenSSL command-line tool for generating the SSL certificate for uhttpd. Traditionally 'px5g' based on PolarSSL (or mbedTLS in LEDE), has been used for the creation. uhttpd init script is enhanced by adding detection of an installed openssl command-line binary (provided by 'openssl-util' package), and if found, the tool is used for certificate generation. Note: After this patch the script prefers to use the OpenSSL tool if both it and px5g are installed. This enables creating a truly OpenSSL-only version of LuCI without dependency to PolarSSL/mbedTLS based px5g. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* kernel: add missing snd-hda-intel module for Linux 3.18 and 4.1Jo-Philipp Wich2016-10-051-2/+3
| | | | | | | Prior to kernel 4.4, the hda-intel module depends on the hda-controller utility submodule so bundle it for the older kernel versions. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* kernel: move kmod-owl-loader to the right .mk fileFelix Fietkau2016-10-042-21/+21
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: fix sound-hda-core dependencyFelix Fietkau2016-10-041-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* gre: Support fqdn as remote tunnel endpointHans Dedecker2016-10-042-5/+31
| | | | Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* iproute2: tc cake qdisc add nat, docsis & ptm modesKevin Darbyshire-Bryant2016-10-042-13/+57
| | | | | | | | | Add cake nat de-masquerading mode: nat, nonat. Also docsis & ptm overhead related keywords: nat, nonat, ptm, docsis-downstream-ip, docsis-downstream, docsis-upstream-ip & docsis-upstream. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* kmod-sched-cake: update to 161002 versionKevin Darbyshire-Bryant2016-10-041-2/+3
| | | | | | | | | | | Implement IPv4 de-masquerading. * Implement PTM (VDSL2) overhead 65/64 compensation. * Update diffserv4 priorities. *Requires corresponding update to iproute2/tc for user/kernel space handling. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* base-files: remove non-working filter option for wifi detectChristian Lamparter2016-10-041-2/+2
| | | | | | | | | | | This patch removes the non-working wifi driver filter for the wifi detection script. I figured that rather than replacing ${2:-$DRIVERS} with ${1:-$DRIVERS}, it would be better to remove it. Nobody needed it in the previous years. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* linux/modules/fs: Fix missing vfat dependenciesDaniel Dickinson2016-10-041-1/+1
| | | | | | | | | vfat filesystem fails to mount due to missing codepages with factory-formatted flash drives. Depend on cp437 iso8559-1 and utf8 nls modules as this covers most factory-formatted vfat filesystems. Signed-off-by: Daniel Dickinson <lede@cshore.thecshore.com>
* package/devel/trace-cmd: Update to 2.6diizzyy2016-10-041-2/+2
| | | | | | Update to 2.6 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* kernel/sound: Add support for PCI HD Audio devicesDaniel Dickinson2016-10-041-0/+230
| | | | | | | | | This patch set adds support for PCI Intel HD Audio sound devices. This is useful for multimedia packages in the packages feed that one may use to create audio servers. Signed-off-by: Daniel Dickinson <lede@cshore.thecshore.com>
* mountd: update to latest git HEADJohn Crispin2016-10-041-2/+2
| | | | | | adds a cmake fix Signed-off-by: John Crispin <john@phrozen.org>
* valgrind: improve mips supportHauke Mehrtens2016-10-032-0/+56
| | | | | | | | | | | We have to remove the FPU check, it will run in an endless loop on LEDE when compile without FPU emulation support. The second patch fixes this problem: valgrind: mmap(0x400000, 303104) failed in UME with error 22 (Invalid argument). valgrind still does not support mips16, build LEDE without mips16 support. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* valgrind: remove 110-add_a_out_h.patchHauke Mehrtens2016-10-031-157/+0
| | | | | | This patch is not needed any more, valgrind is not using a.out.h any more. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* netfilter: fix file conflicts between kmod-ipt- and kmod-nft- packagesMatthias Schiffer2016-09-301-2/+2
| | | | | | | | The nf_reject_* and nf_nat_masquerade_* modules are moved into the corresponding kmod-nf- packages. Appropriate dependencies are added to the kmod-nft- packages. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* kernel: fix module dependency checkingMatthias Schiffer2016-09-301-0/+1
| | | | | | | Since the kernel makefile is using .ONESHELL, we need to add -e to .SHELLFLAGS so errors are not ignored. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* ath9k: remove patch causing stability issues with powersave devices (FS#176)Felix Fietkau2016-09-306-45/+8
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* iproute2: fix no fortify build failureKevin Darbyshire-Bryant2016-09-301-0/+10
| | | | | | | | | | Fix rt_names build failure when FORTIFY_SOURCE disabled. Include limits.h which otherwise gets automatically included by fortify headers. Solves FS #194 Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* brcmfmac43430-firmware: remove package and switch to linux-firmwareÁlvaro Fernández Rojas2016-09-292-63/+9
| | | | | | | Now that the firmware for BCM43430 has been submitted to linux-firmware use it and remove RPiDistro package. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* kernel: do not enable the unpackaged rfkill-gpio driverFelix Fietkau2016-09-291-2/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: fix rfkill dependencyJohn Crispin2016-09-291-1/+3
| | | | Signed-off-by: John Crispin <john@phrozen.org>
* mac80211: use upstream patches for rtl8xxxuÁlvaro Fernández Rojas2016-09-29108-455/+488
| | | | | | Also improves rtl8188eu support. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* procd: update to latest git HEADJohn Crispin2016-09-281-2/+2
| | | | | | | | this adds 2 new inittab handlers * askconsolelate * respawnlate Signed-off-by: John Crispin <john@phrozen.org>
* netifd: update to the latest version, adds various fixesFelix Fietkau2016-09-281-2/+2
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath10k-firmware: move to firmware section in buildrootStijn Segers2016-09-281-4/+16
| | | | | | | This patch moves the ath10k firmware packages to the firmware submenu in the buildroot, where it belongs. Signed-off-by: Stijn Segers <francesco.borromini@inventati.org>
* ath10k-firmware: update the qca988x firmware to 10.2.4.70.54Martin Blumenstingl2016-09-281-13/+5
| | | | | | | | | | | | | | Use firmware version 10.2.4.70.54 from kvalo's git repository. The old version (even though it's version number is greater) is an old version from September 2015. Using only the firmware versions from kvalo's git repo is recommended, because those are tested by QCA's internal QCA. The QCA988X directory received a small reorganization as a "hw2.0" subdirectory was added - this patch also takes care of that as board.bin was moved to that subdirectory. Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
* toolchain: Force installation into /libFlorian Fainelli2016-09-281-24/+16
| | | | | | | | For 64-bit capable systems, a symbolic link is set up for /lib64 to point to /lib, so make sure the installation goes into /lib, irrespective of where the C library files come from in an external toolchain. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* rfkill: add fake rfkill supportJohn Crispin2016-09-271-1/+1
| | | | | | allow building of modules depending on RFKILL even if RFKILL is not enabled. Signed-off-by: John Crispin <john@phrozen.org>
* perf: fix build with musl on PowerPCMatthias Schiffer2016-09-281-0/+8
| | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* kernel: remove echainiv.ko from kmod-crypto-ivMatthias Schiffer2016-09-281-4/+3
| | | | | | | There is a separate package kmod-crypto-echainiv for echainiv.ko. Selecting both packages led to a conflict, so remove the file from kmod-crypto-iv. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* mac80211: backport brcmfmac changes from 2016-09-27Rafał Miłecki2016-09-273-1/+97
| | | | | | | | This fixes bug that could cause WARNING on every add_key/del_key call. It also replaces WARNING with a simple message. They may still occur e.g. on station going out of range and A-MPDU stall in the firmware. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* openssl: update to 1.0.2jMagnus Kroken2016-09-273-49/+2
| | | | | | | | | | | | | | A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i. As a result any attempt to use CRLs in OpenSSL 1.0.2i will crash with a null pointer exception. Patches applied upstream: * 301-fix_no_nextprotoneg_build.patch * 302-Fix_typo_introduced_by_a03f81f4.patch Security advisory: https://www.openssl.org/news/secadv/20160926.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* linux-firmware: Add mirrorsdiizzyy2016-09-271-1/+3
| | | | | | | Adds Google's mirrors as primary source and kernel.org as fallback. Discussed in #lede-dev on Freenode Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* openssl: Make DTLS configurable.Rosen Penev2016-09-272-0/+10
| | | | Signed-off by: Rosen Penev <rosenp@gmail.com>
* openssl: Remove J-PAKE. Nothing uses it.Rosen Penev2016-09-271-1/+2
| | | | Signed-off by: Rosen Penev <rosenp@gmail.com>
* busybox: v1.25.0 upstream patchesKevin Darbyshire-Bryant2016-09-273-0/+75
| | | | | | Include upstream patches for gzip, ip & ntpd. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* libjson-c: Update to 0.12.1Daniel Engberg2016-09-272-26/+5
| | | | | | Updates libjson-c and removes backport patch. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* libunwind: use url aliasdiizzyy2016-09-271-1/+1
| | | | | | Use alias instead of hardcoded URL Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* iwinfo: fix WPA cipher reportingJo-Philipp Wich2016-09-271-2/+2
| | | | | | | | | | | Within the Lua binding, use the same logic as the command line interface for reporting the used WPA ciphers. Instead of printing the intersection of pairwise and group ciphers, report both group and pairwise ciphers. This fixes a case where a connection which uses CCMP for pairwise and TKIP as groupwise cipher is getting reported as using the NONE cipher. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* iproute: properly support high routing table IDsJo-Philipp Wich2016-09-273-24/+487
| | | | | | | | | | | | | | | | | | | | | The Linux kernel uses two distinct fields to denote the routing table ID in use by network routes; the 8 bit `rtm_table` member of `struct rtmsg` and the 32 bit `RTA_TABLE` netlink attribute. If a routing table ID is larger than 255, the `RT_TABLE` attribute must be used and the `rtm_table` field has to be set to the special `RT_TABLE_UNSPEC` value. This commit adds a patch which... - switches the *_n2a() and *_a2n() functions of rt_names.c to use dynamically sized, name-sorted arrays instead of fixed arrays limited to 1024 slots in order to support IDs up to 65535 - adds proper handling of high table IDs to iprule.c and iproute.c when adding, removing and dumping ip rules and network routes After this change, the Busybox ip applet fully supports IP rules with high ID numbers, using the same logic as the full iproute2. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* 6in4: fix invalid local variable declaration (FS#188)Jo-Philipp Wich2016-09-272-3/+3
| | | | | | | | Remove an invalid local variable declaration in the tunnel update subshell invocation. Local declarations outside of function scopes are illegal since the Busybox update to version 1.25.0 . Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* mac80211: backport brcmfmac changes from 2016-09-26Rafał Miłecki2016-09-2726-2/+1316
| | | | | | | All these patches are in wireless-drirvers-next. There is support for hidden SSID, few new devices and many fixes. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* base-files: make default_prerm work offlineMatthias Schiffer2016-09-261-4/+12
| | | | | | | IPKG_INSTROOT must be respected for offline removal (used for per-device rootfs). Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* base-files: fix check for empty password warningMatthias Schiffer2016-09-261-2/+1
| | | | | | | | | | | | | Now that we know that the password is in /etc/shadow and not in /etc/passwd, we can properly fix the logic for the empty password check. Only 'root::' is an empty password, 'root:x:' and 'root:!:' allow no password login at all. This fixes the empty password warning still showing after the root password has been locked using 'passwd -l root' (e.g. to allow public-key auth only). Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>