aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* ipq-wifi: add BDF for Aruba AP-303David Bauer2019-12-202-0/+2
| | | | | | The BDF originates from the vendor-firmware. Signed-off-by: David Bauer <mail@david-bauer.net>
* fstools: update to latest git HEADRafał Miłecki2019-12-201-3/+3
| | | | | | | | | | | | 111a43f libblkid-tiny: vfat: Change parsing label in special cases f43a1aa libblkid-tiny: vfat: Fix reading labels which starts with byte 0x05 157924d libblkid-tiny: add blkid_probe_set_id_label() stub 0c5761f libblkid-tiny: use separated buffer for each block device read b82c5c1 libblkid-tiny: add functions for allocating & freeing probe struct 12851d6 blockd: don't flush devices list on "hotplug" call 5ea47fe blockd: fix vlist memory corruption Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* uci: update to latest Git HEADPetr Štetiar2019-12-191-4/+5
| | | | | | | | | | | 165b44413145 uci: Fix extra semicolons warnings 66264ed9ec9e cmake: add more hardening compiler flags cca6f105fae2 libuci: refactor uci_get_errorstr 750b046eb77f tests: cram: Lua: add test case for uci_get_errorstr 654d7c33da28 lua: add missing forward declaration 03dfbbe6fef7 cli: fix format string clang-10 warning Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uboot-envtools: ath79: fix missing etactica eg200 supportKarl Palsson2019-12-191-0/+1
| | | | | | | | | | Was inadvertantly missed from the inital forward port from ar71xx to ath79. Fixes: 1588114cf2a3 ("ath79: add etactica-eg200 support") Signed-off-by: Karl Palsson <karlp@etactica.com> [commit description/subject facelift] Signed-off-by: Petr Štetiar <ynezz@true.cz>
* base-files: send informational UDP message each second waitingPaul Fertser2019-12-191-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The preinit network initialisation and failsafe informational message are inherently racy as the interface takes some time to become functional after "ip link set $pi_ifname up" command. Consider this timing: [ 12.002713] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready [ 12.008819] IPv6: ADDRCONF(NETDEV_UP): eth1.1: link is not ready [ 12.118877] random: procd: uninitialized urandom read (4 bytes read) [ 13.068614] eth1: link up (1000Mbps/Full duplex) [ 13.073309] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready [ 13.080445] IPv6: ADDRCONF(NETDEV_CHANGE): eth1.1: link becomes ready Since the UDP message was sent prior to link becoming ready, it was never seen on the wire. The default failsafe timeout is set to 2 seconds, so with this patch there are two attempts to send the message, one spent in vain, and the other visible in tcpdump on an attached host. Of course, in cases when the interface is brought up faster it leads to two messages, however it should be harmless. This patch (almost) doesn't affect normal boot time while still allowing to enter failsafe reliably with a single button press, matching the official "generic failsafe" documentation. Signed-off-by: Paul Fertser <fercerpav@gmail.com>
* iputils: move iputils tools to packages feedPetr Štetiar2019-12-197-510/+0
| | | | | | | | | iputils has moved from the master tree to the packages feed, and is switching from the abandoned skbuff.net upstream to github.com/iputils/iputils. Ref: https://git.openwrt.org/556698cedf9e86a0ffe9f148d4e8e733676c26f6 Signed-off-by: Petr Štetiar <ynezz@true.cz>
* kernel: make dwc3 usb driver depends on kernel 4.14Ansuel Smith2019-12-191-2/+2
| | | | | | | - usb-dwc3-of-simple is not used anymore as we have qcom dedicated driver - usb-phy-qcom-dwc3 is not dependent of dwc3-of-simple Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* mac80211: brcm: add support for BCM4359 SDIO chipsetRafał Miłecki2019-12-197-0/+519
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* mac80211: brcm: backport 5.5 and 5.6 kernel patchesRafał Miłecki2019-12-1910-1/+325
| | | | | | | | | This update doesn't include: 3b1e0a7bdfee brcmfmac: add support for SAE authentication offload be898fed355e brcmfmac: send port authorized event for FT-802.1X due to nl80211 dependencies. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* cypress-nvram: add new packageÁlvaro Fernández Rojas2019-12-181-0/+95
| | | | | | | This package contains nvram files for brcmfmac, a mac80211 driver for FullMAC Cypress devices. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* wireguard: bump to 0.0.20191212Kevin Darbyshire-Bryant2019-12-171-2/+2
| | | | | | | | | | | | 1ec6ece version: bump snapshot e13de91 main: remove unused include <linux/version.h> 72eb17c wg-quick: linux: support older nft(8) 1d8e978 global: fix up spelling e02713e wg-quick: linux: add support for nft and prefer it b4e3a83 compat: support building for RHEL-8.1 instead of RHEL-8.0 f29e3ac socket: convert to ipv6_dst_lookup_flow for 5.5 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* brcmfmac-board-rpi: remove uneeded packageÁlvaro Fernández Rojas2019-12-171-53/+0
| | | | Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* cypress-firmware: add new packageÁlvaro Fernández Rojas2019-12-171-0/+239
| | | | | | | This package contains firmwares provided by Cypress See https://community.cypress.com/community/linux Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* uboot-envtools: check for config prior to appendImran Khan2019-12-172-2/+2
| | | | | | | | | | | | | In the rare event a pre-populated fw_env.config exists in the rootfs prior to firstboot, calling fw_setenv after the system has initialised will annihilate the devices environment due to two identical lines in fw_env.config. Check for existence prior to blind appendage. Signed-off-by: Imran Khan <gururug@gmail.com> Signed-off-by: Daniel Golle <daniel@makrotopia.org> [daniel@makrotopia.org: fixed patch format, improved grep, cosmetics]
* rpcd: update to latest Git HEADJo-Philipp Wich2019-12-171-3/+3
| | | | | | aaa0836 file: extend exec acl checks to commands with arguments Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* mac80211: fix txpower when using DFS channelsDavid Bauer2019-12-161-2/+7
| | | | | | | | | | | With this patch, txpower for the PHY is applied when configuring the PHY instead of the VIF. Otherwise, the configured txpower is not applied for the first initialized VIF when using DFS channels, as it is currently applied too early when the CAC hasn't finished. Reported-by: Martin Weinelt <martin@darmstadt.freifunk.net Signed-off-by: David Bauer <mail@david-bauer.net> Tested-by: Martin Weinelt <martin@darmstadt.freifunk.net>
* odhcpd: update to latest git HEADHans Dedecker2019-12-151-3/+3
| | | | | | d60f0a6 treewide: optimize syslog priority values Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* sunxi: add support for FriendlyARM Nano PI NEO Air dev boardRoman Bazalevsky2019-12-131-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hardware: Allwinner H3 upto 1.2GHz 512MB DDR3 RAM 8GB on-board eMMC - mountable, can be used as boot with custom boot.scr microSD-card slot WiFi 802.11n (AP6212A) - working Bluetooth (AP6212A) - not working for now Micro-USB OTG + 2*USB headers UART 3.3V - working GPIO/I2C/SPI 2.54mm headers Standard sunxi SD-card installation procedure - copy image to SD card, insert in into slot and boot. First time you will need UART adapter to enable on-board wireless (or just build custom image with enabled WiFi). To boot from eMMC: - boot from SD - copy SD image to emmc (dd bs=... if=.... of=/dev/mmcblk2) - mount eMMC boot partition and replace boot script on it - unmount, reboot To use i2c, spi and more uarts - replace dtb on boot partition with fixed one (use dtc or fdt-tools). Signed-off-by: Roman Bazalevsky <rvb@rvb.name> [rebase onto device name consolidation patches] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* sunxi: use vendor_device scheme for device definitionsAdrian Schmutzler2019-12-131-34/+34
| | | | | | | | | | | | This changes device definition to resemble the vendor_device scheme already present for the majority of device compatible strings. By doing this, we achieve several advantages at once: - Image names and node names are more consistent with other targets. - SUPPORTED_DEVICES can be set automatically for all but two cases. - Image names and node names are in line with DEVICE_TITLEs. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* ath10k-firmware: update Candela Tech firmware imagesKoen Vandeputte2019-12-101-24/+24
| | | | | | | | | | | | | | The release notes since last time for wave-1: * November 29, 2019: Fix IBSS merge issue, related to TSF id leakage bug in firmware code. Thanks for Ahmed Zaki @ Mage-Networks for helping to diagnose and test. The release notes since last time for wave-2: * December 6, 2019: Fix 160Mhz problem caused by logic that did not take into account the fact that 160Mhz has only 1/2 of the NSS of lower bandwidths in the rate table. Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
* mac80211: don't call md5sum on non-existing fileDaniel Golle2019-12-081-1/+1
| | | | | | | | | | | | If no AP is configured, hostapd-${phy}.conf is not being created, hence md5sum fails and causes log pollution: netifd: radio1 (3183): md5sum: can't open '/var/run/hostapd-phy1.conf': No such file or directoy Hence make sure the file exists when calling md5sum. Fixes: a5bc9787d4 ("mac80211: add support for dynamically reconfiguring wifi") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* hostapd: re-introduce process trackingDaniel Golle2019-12-082-0/+7
| | | | | | | | | | | Before commit 60fb4c92b6 ("hostapd: add ubus reload") netifd was tracking hostapd/wpa_supplicant and restarting wifi in case of a process crash. Restore this behaviour by tracking the PIDs of hostapd and wpa_supplicant. Also make sure hostapd and/or wpa_supplicant have been started before emmitting ubus calls to them using ubus wait_for. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mac80211: track unmanaged interfacesDaniel Golle2019-12-081-3/+42
| | | | | | | | | In addition to wpa_supplicant and hostapd managed interfaces, also track unmanaged interfaces. This is used to make sure that running 'wifi' always returns into a clean state regardless of what the user did before. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* hostapd: manage instances via procd instead of pidfileFelix Fietkau2019-12-081-9/+41
| | | | | | | | Allows graceful restart of crashing hostapd/wpa_supplicant instances Signed-off-by: Felix Fietkau <nbd@nbd.name> Signed-off-by: Daniel Golle <daniel@makrotopia.org> [daniel@makrotopia.org: attempt to launch only present services]
* hostapd: fix crash regression triggered by mesh modeFelix Fietkau2019-12-081-1/+1
| | | | | | | Fixes: 60fb4c92b6 ("hostapd: add ubus reload") Signed-off-by: Felix Fietkau <nbd@nbd.name> Signed-off-by: Daniel Golle <daniel@makrotopia.org> [daniel@makrotopia.org: polish commit message]
* hostapd: enable CTRL_IFACE_MIB for hostapd-fullDavid Bauer2019-12-087-0/+35
| | | | | | | | This enables the CTRL_IFACE_MIB symbol for wpad-full and hostapd-full. If it is not enabled, statistic outputs such as "hostapd_cli all_sta" are empty. Signed-off-by: David Bauer <mail@david-bauer.net>
* iproute2: update to 5.4.0Hans Dedecker2019-12-063-7/+7
| | | | | | | Update iproute2 to latest stable version, see https://lwn.net/Articles/805654/ for the changes in 5.4.0 Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* wireguard: bump to 0.0.20191205Jason A. Donenfeld2019-12-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * wg-quick: linux: suppress error when finding unused table This fixes a spurious warning messages seen with recent versions of iproute2 and kernels. * wg-quick: linux: ensure postdown hooks execute * wg-quick: linux: have remove_iptables return true * wg-quick: linux: iptables-* -w is not widely supported Adding in iptables had some hiccups. For the record, I'm very unhappy about having to put any firewalling code into wg-quick(8). We'll of course need to support nftables too at some point if this continues. I'm investigating with upstream the possibility of adding a sysctl to patch the issue that iptables is handling now, so hopefully at somepoint down the line we'll be able to shed this dependency once again. * send: use kfree_skb_list * device: prepare skb_list_walk_safe for upstreaming * send: avoid touching skb->{next,prev} directly Suggestions from LKML. * ipc: make sure userspace communication frees wgdevice Free things properly on error paths. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* gre: add ipv6 parameter to gre interfacesAlin Nastac2019-12-022-3/+5
| | | | | | | | | IPv6 protocol is enabled on all gre interfaces, but gre(v6)tap interfaces are usually added to a bridge interface, in which case IPv6 should be enabled only on the bridge interface. Signed-off-by: Alin Nastac <alin.nastac@gmail.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [PKG_RELEASE increase]
* curl: bump to 7.67.0Hans Dedecker2019-12-021-2/+2
| | | | | | For changes in 7.67.0; see https://curl.haxx.se/changes.html#7_67_0 Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* mac80211: switch to upstream owl-loader driverChristian Lamparter2019-11-304-22/+112
| | | | | | | | | | | | | | | | | | The Owl Loader (named after the codename that Atheros gave these devices back in the day) has been accepted upstream. This patch removes the "misc" driver OpenWrt had and adds the remaining differences against the version that ships with 5.4-rc1 into a separate "120-owl-loader-compat.patch" file that can be cut down once AR71XX is being dealt with. Note: I decided to keep the existing (kmod-)owl-loader package name around for now. The kernel module file in the kmod package will be called ath9k_pci_owl_loader.ko though. Acked-by: Hauke Mehrtens <hauke@hauke-m.de> Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* busybox: add glibc dependency for vi regex optionSatadru Pramanik2019-11-301-1/+2
| | | | | | | | | | | | | | | | | | Build with musl libc fails with BUSYBOX_DEFAULT_FEATURE_VI_REGEX_SEARCH enabled. Enabling BusyBox's vi regex search option depends upon GNU regex. Musl libc does not support GNU regex[1]. So this patch adds explicit dependency on GNU libc and while at it remove the FIXME comment. 1. https://wiki.musl-libc.org/functional-differences-from-glibc.html Ref: https://dev.archive.openwrt.org/ticket/21741.html Ref: https://forum.openwrt.org/t/busybox-not-compiling/ Ref: https://github.com/openwrt/packages/issues/4453 Signed-off-by: Satadru Pramanik <satadru@umich.edu> [commit subject/description tweaks, From: fix, USE_GLIBC fix, removed comments] Signed-off-by: Petr Štetiar <ynezz@true.cz>
* Revert "mt76: probe load mt7615 driver asynchronously"DENG Qingfang2019-11-301-1/+0
| | | | | | | | | | | | | This reverts commit 81764319637f ("mt76: probe load mt7615 driver asynchronously"). After said commit, users report that MT7615 no longer works on boot and they have to manually enable WiFi (via command "wifi") to make it working again. Fixes: FS#2546 Ref: https://forum.openwrt.org/t/xiaomi-r3p-no-wifi-on-boot/45509 Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn> [commit description facelift] Signed-off-by: Petr Štetiar <ynezz@true.cz>
* netifd: update to latest git HEADHans Dedecker2019-11-291-3/+3
| | | | | | e45b140 interface: warn if ip6hint is truncated Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* mac80211: unify setup of iw htmode for mesh and adhocSantiago Piccinini2019-11-291-49/+16
| | | | | | | | | This also fixes mac80211_prepare_vif iw set channel in monitor or mesh mode. Signed-off-by: Santiago Piccinini <spiccinini@altermundi.net> Signed-off-by: Daniel Golle <daniel@makrotopia.org> [daniel@makrotopia.org: fixed commit message]
* ucert: update to latest git HEADDaniel Golle2019-11-291-3/+3
| | | | | | | | | | | | e4bd927 cast ucert_argv to proper type when passing to execv Fixes warnings: warning: passing argument 2 of 'execv' from incompatible pointer type [-Wincompatible-pointer-types] 254 | execv(usign_argv[0], usign_argv) Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* wireguard: bump to 0.0.20191127Jason A. Donenfeld2019-11-271-2/+2
| | | | | | | | | | * messages: recalculate rekey max based on a one minute flood * allowedips: safely dereference rcu roots * socket: remove redundant check of new4 * allowedips: avoid double lock in selftest error case * tools: add syncconf command Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* procd: update to latest git HEADHans Dedecker2019-11-261-3/+3
| | | | | | 3aa051b system: sysupgrade: close input side of pipe before reading Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* uboot-envtools: ath79: add support for YunCore XD4200 and A782Piotr Dymacz2019-11-251-1/+3
| | | | Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* libubox: update to latest Git HEADPetr Štetiar2019-11-241-3/+3
| | | | | | | | | | | | | | | | | | | 07413cce72e1 tests: jshn: add more test cases 26586dae43a8 jshn: fix missing usage for -p and -o arguments 8e832a771d3a jshn: fix off by one in jshn_parse_file cb698e35409b jshn: jshn_parse: fix leaks of memory pointed to by 'obj' c42f11cc7c0f jshn: main: fix leak of memory pointed to by 'vars' 93848ec96dc5 jshn: refactor main into smaller pieces 9b6ede0e5312 avl: guard against theoretical null pointer dereference c008294a8323 blobmsg_json: fix possible uninitialized struct member 0003ea9c45cc base64: fix possible null pointer dereference 8baeeea1f52d add assert.h component b0a5cd8a28bf add cram based unit tests 1fefb7c4d7f9 add initial GitLab CI support c955464d7a9b enable extra compiler checks 6228df9de91d iron out all extra compiler warnings Signed-off-by: Petr Štetiar <ynezz@true.cz>
* nghttp2: bump to 1.40.0Hans Dedecker2019-11-231-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 41060943 Bump up version number to 1.40.0, LT revision to 33:0:19 5ae9bb89 Fail fast if huffman decoding context is in failure state bb519154 Merge pull request #1413 from nghttp2/check-authority 77f5487a Add nghttp2_check_authority as public API db9a8f6e Merge pull request #1409 from nghttp2/fix-wrong-stream-close-error-code 6f28a69b Merge pull request #1411 from richard78917/fix_warning 6ce4835e Fix the bug that stream is closed with wrong error code 29042f1c priority_spec::valid(): remove const qualifier from return value d08c4395 Merge pull request #1405 from nghttp2/huffman 5d6964cf Faster huffman decoding 0d855bfc Faster huffman encoding 6f967c6e Fix errors reported by coverity scan b8a43db8 Merge pull request #1394 from wrowe/fix-static-libname 70b62c1a Merge pull request #1393 from wrowe/fix-static-msvcrt 28b1f0b9 Avoid filename collision of static and dynamic lib 1dd966f1 Merge branch 'fix-nghttpx-mruby' fe8946dd nghttpx: Fix bug that mruby is incorrectly shared between backends 72b71a6b Add new flag ENABLE_STATIC_CRT for Windows f8933fe5 nghttpx: Reconnect h1 backend if it lost connection before sending headers 89c33d69 Update neverbleed 7079dc5e Update neverbleed to fix memory leak 5080db84 Revert "nghttpx: Reconnect h1 backend if it lost connection before sending headers" 053c7ac5 nghttpx: Returns 408 if backend timed out before sending headers 8a59ce6d nghttpx: Reconnect h1 backend if it lost connection before sending headers f2fde180 Remove redundant null check before delete 95efb3e1 Don't read too greedily 0a6ce87c Add nghttp2_option_set_max_outbound_ack 2aa79fa9 Bump up LT revision to 32:0:18 3980678d Merge branch 'nghttpx-fix-request-stall' 319d5ab1 nghttpx: Fix request stall 448bbbc3 integration-tests: gofmt e575a2aa Merge pull request #1377 from Aldrog/cmake_systemd 4f7aedc9 cmake: Support building nghttpx with systemd 7a590893 Fix clang-8 warning ee443134 Fix FPE with default backend abef9b90 Fix log-level is not set with cmd-line or configuration file 12a999f0 Bump up version number to 1.40.0-DEV acfb3607 Update manual pages Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* base-files: config_generate: split macaddr with multiple ifacesSungbo Eo2019-11-232-7/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | netifd does not handle network.@device[x].name properly if it contains multiple ifaces separated by spaces. Due to this, board.d lan_mac setup does not work if multiple ifaces are set to LAN by ucidef_set_interface_lan. To fix this, create a device node for each member iface when running config_generate instead. Those are named based on the member ifname: ucidef_set_interface_lan "eth0 eth1.1" ucidef_set_interface_macaddr "lan" "yy:yy:yy:yy:yy:01" will return config device 'lan_eth0_dev' option name 'eth0' option macaddr 'yy:yy:yy:yy:yy:01' config device 'lan_eth1_1_dev' option name 'eth1.1' option macaddr 'yy:yy:yy:yy:yy:01' ref: https://github.com/openwrt/openwrt/pull/2542 Signed-off-by: Sungbo Eo <mans0n@gorani.run> [always use new scheme, extend description, change commit title] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* mac80211: add default value for noscanSebastian Kemper2019-11-231-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | Commit b3d8b3a introduced a new test: [ -n "$noscan" -a "$noscan" -gt 0 ] && hostapd_noscan=1 But if length of "$noscan" is zero (noscan is not set) this doesn't stop the shell to evaluate the rest of the test. root@hank2:~# [ -n "$noscan" -a "$noscan" -gt 0 ] ash: out of range root@hank2:~# So when radios are brought up this shows in the log: Sat Nov 23 10:51:38 2019 daemon.info procd: - init complete - Sat Nov 23 10:52:24 2019 daemon.notice netifd: radio1 (1243): sh: out of range Sat Nov 23 10:52:25 2019 user.notice firewall: Reloading firewall due to ifup of wan (eth0.2) Sat Nov 23 10:52:25 2019 daemon.notice netifd: radio0 (1242): sh: out of range Sat Nov 23 10:52:26 2019 authpriv.info dropbear[1536]: Not backgrounding This commit sets noscan to 0 if unset and removes the gratuitous length check, preventing the warning. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* dnsmasq: correct sense & usage of dnsseccheckunsignedKevin Darbyshire-Bryant2019-11-232-2/+3
| | | | | | | | | | | | | dnsmasq v2.80 made 'dnssec-check-unsigned' the default, thus the uci option was rendered ineffectual: we checked unsigned zones no matter the setting. Disabling the checking of unsigned zones is now achieve with the "--dnssec-check-unsigned=no" dnsmasq option. Update init script to pass required option in the disabled case. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* e2fsprogs: Fix CVE-2019-5094 in libsupportHauke Mehrtens2019-11-222-1/+204
| | | | | | | | This adds the following patch from debian: https://git.kernel.org/pub/scm/fs/ext2/e2fsprogs.git/commit/?h=debian/stable&id=09fe1fd2a1f9efc3091b4fc61f1876d0785956a8 libsupport: add checks to prevent buffer overrun bugs in quota code Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mac80211: update to version 5.4-rc8Hauke Mehrtens2019-11-2218-386/+17
| | | | | | | | This updates mac80211 to backports based on kernel 5.4-rc8. The deleted patches were applied upstream. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* firewall: update to latest Git HEADJo-Philipp Wich2019-11-221-3/+3
| | | | | | | 8174814 utils: persist effective extra_src and extra_dest options in state file 72a486f zones: fix emitting match rules for zones with only "extra" options Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* wireless-regdb: Make it build with python2Hauke Mehrtens2019-11-211-0/+58
| | | | | | | | This backports a patch to build it work with python2 in addition to python3. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Acked-by: Petr Štetiar <ynezz@true.cz>
* uboot-mvebu: add uDPU boardVladimir Vid2019-11-212-2/+22
| | | | | | | | | | * add u-boot support for uDPU * add line to copy u-boot binary to STAGING_DIR_IMAGE, this can later be used as BL33 variable required for ATF build * add patch to increase max gunzip size in mvebu_armada-37xx.h which is required for booting the itb recovery images Signed-off-by: Vladimir Vid <vladimir.vid@sartura.hr>
* packages/boot: add arm-trusted-firmware-mvebu and initial uDPU supportVladimir Vid2019-11-211-0/+112
| | | | | | | | | | | | | | | | | ATF mvebu is required for building a functional bootloader for A7K/A8K and A37xx platforms. uDPU device is added as the first target. A3700 platform has a wide range of settings which can be used per device, so options are defined under the Device sections. Platform also required WTP (recovery) tools and mv-ddr package for the DDR topology configuration. 32-bit cross compiler is used for building the WTMI image. After the build, flash-image.bin can be used with the bubt command from the u-boot shell to flash the new version of u-boot. Signed-off-by: Vladimir Vid <vladimir.vid@sartura.hr>