aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* mvebu: tidy up support for GL.iNet GL-MV1000Adrian Schmutzler2020-04-271-3/+3
| | | | | | | | | | | | | | | | | This fixes a bunch of cosmetic issues with GL.iNet GL-MV1000: - apply alphabetic sorting in multiple files - use armada-3720 prefix for DTS like for other devices - fix vendor capitalization for model in DTSes - remove trivial comment in DTS files - use DEVICE_VENDOR/DEVICE_MODEL - remove redundant SUPPORTED_DEVICES - use SOC instead of DEVICE_DTS - remove empty line at EOF Fixes: 050c24f05c85 ("mvebu: add support for GL.iNet GL-MV1000") Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* mvebu: add support for GL.iNet GL-MV1000Li Zhang2020-04-261-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | This patch adds supports for GL-MV1000. Specification: - SOC: Marvell Armada 88F3720 (1GHz) - Flash: 16MB (W25Q128FWSIG) - RAM: 1GB DDR4 - Ethernet: 3x GE (1 WAN + 2 LAN) - EMMC: 8GB EMMC (KLM8G1GETF-B041) - MicroSD: 1x microSD slot - USB: 1x USB 2.0 port(TypeA),1x USB 3.0 port(TypeC) - Button: 1x reset button,1x slide switch - LED: 3x greed LED - UART: 1x UART on PCB (JP1: 3.3V, RX, TX, GND) Update firmware instructions ============================ In the compiled,please gzip -d xxx.img.gz,then update firmware on uboot web. Signed-off-by: Li Zhang <li.zhang@gl-inet.com> [Copied dts file to files-5.4] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: support intel X7xx 10/40GbE adaptersXiaobo Tian2020-04-261-0/+42
| | | | | | Signed-off-by: Xiaobo Tian <peterwillcn@gmail.com> [Add i40evf/i40evf.ko and setect CONFIG_IAVF] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* uboot-envtools: fix domywifi_dw33d Bad CRC errorweidong jia2020-04-261-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | The current dw33d partition index has changed, this patch solves this problem. old partition layout dev: size erasesize name mtd0: 00040000 00010000 "u-boot" mtd1: 00010000 00010000 "u-boot-env" mtd2: 00fa0000 00010000 "oem-firmware" mtd3: 00010000 00010000 "art" mtd4: 00500000 00020000 "kernel" mtd5: 05b00000 00020000 "ubi" mtd6: 02000000 00020000 "oem-backup" new partition layout dev: size erasesize name mtd0: 00500000 00020000 "kernel" mtd1: 05b00000 00020000 "ubi" mtd2: 02000000 00020000 "oem-backup" mtd3: 00040000 00010000 "u-boot" mtd4: 00010000 00010000 "u-boot-env" mtd5: 00fa0000 00010000 "oem-firmware" mtd6: 00010000 00010000 "art" Signed-off-by: weidong jia <jwdsccd@gmail.com>
* uboot-envtools: update to 2020.04Lucian Cristian2020-04-261-7/+8
| | | | | | also revert to directly download the archive from https Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* mac80211: ath10k: increase rx buffer size to 2048Linus Lüssing2020-04-262-1/+38
| | | | | | | | | | | | | | | | | | | | | | | Before, only frames with a maximum size of 1528 bytes could be transmitted between two 802.11s nodes. For batman-adv for instance, which adds its own header to each frame, we typically need an MTU of at least 1532 bytes to be able to transmit without fragmentation. This patch now increases the maxmimum frame size from 1528 to 1656 bytes. Tested with two ath10k devices in 802.11s mode, as well as with batman-adv on top of 802.11s with forwarding disabled. Fix originally found and developed by Ben Greear. Link: https://github.com/greearb/ath10k-ct/issues/89 Link: https://github.com/greearb/ath10k-ct/commit/9e5ab25027e0971fa24ccf93373324c08c4e992d Cc: Ben Greear <greearb@candelatech.com> Signed-off-by: Linus Lüssing <ll@simonwunderlich.de> Signed-off-by: Sven Eckelmann <sven@narfation.org>
* perf: build with NO_LIBCAP=1Yangbo Lu2020-04-261-0/+1
| | | | | | | | | Build with NO_LIBCAP=1. This is to resolve build issue. Package perf is missing dependencies for the following libraries: libcap.so.2 Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
* gdb: disable gdbserver for arcLuiz Angelo Daros de Luca2020-04-261-0/+1
| | | | | | | | | | Although gdb is supported, gdbserver is still not. checking whether gdbserver is supported on this host... no Build breaks as gdbserver executable is not found during packaging. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* kernel: netdev: fix kmod-sfp symbolsDavid Bauer2020-04-261-2/+2
| | | | | | Fixes: ec2f7a47d379 ("kernel: add module to support SFP cages") Signed-off-by: David Bauer <mail@david-bauer.net>
* relayd: bump to version 2020-04-25Kevin Darbyshire-Bryant2020-04-261-3/+3
| | | | | | | | f4d759b dhcp.c: further improve validation Further improve input validation for CVE-2020-11752 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* umdns: update to version 2020-04-25Kevin Darbyshire-Bryant2020-04-261-3/+3
| | | | | | | | | | | cdac046 dns.c: fix input validation fix Due to a slight foobar typo, failing to de-reference a pointer, previous fix not quite as complete as it should have been. Improve CVE-2020-11750 fix Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* kernel: netdev: fix kmod-sfp description capitalizationDavid Bauer2020-04-261-1/+1
| | | | Signed-off-by: David Bauer <mail@david-bauer.net>
* kernel: netdev: add phylink dependency for sfpDavid Bauer2020-04-261-1/+1
| | | | | | Fixes: ec2f7a47d379 ("kernel: add module to support SFP cages") Signed-off-by: David Bauer <mail@david-bauer.net>
* kernel: netdev: add kmod-phylinkDavid Bauer2020-04-261-0/+16
| | | | Signed-off-by: David Bauer <mail@david-bauer.net>
* kernel: add module to support SFP cagesRené van Dorst2020-04-251-0/+20
| | | | | | Enables kernel SFP case support. Signed-off-by: René van Dorst <opensource@vdorst.com>
* procd: extend requirejail attribute handlingDaniel Golle2020-04-251-3/+3
| | | | | | | | e2ed964 jail: don't fail unless requirejail is set 17e7ae7 jail: don't load libpreload-seccomp.so if it doesn't exist Fixes openwrt/packages#11913 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ltq-adsl(-fw): Makefile clean-up and fixesAdrian Schmutzler2020-04-243-10/+10
| | | | | | | | | | | | | | | This fixes a few minor issues (partially cosmetic) in ltq-adsl and ltq-adsl-fw Makefiles: - fix PKG_SOURCE_URL and switch to https - remove non-existant FW_NAME variable - fix package name for config inclusion - fix config symbol for debugging Fixes: 1d0a9d0c0470 ("move ltq-adsl") Cc: John Crispin <john@phrozen.org> Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* kernel: replace "+@" IPV6 dependency by "+"Adrian Schmutzler2020-04-241-1/+1
| | | | | | | | | | The combination +@IPV6:kmod-ipsec6 is not valid, the +a:b syntax implies the @. Fix it. Fixes: 2e6b6f9fcaae ("kernel: add @IPv6 dependency to ipv6 modules") Reported-by: Oldřich Jedlička (@oldium) Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* fstools: update to the latest versionFelix Fietkau2020-04-221-3/+3
| | | | | | | | | | 84965b92f635 blockd: print symlink error code and string message 62c578c22f9d blockd: report "target" path as "mount" for autofs available mounts d1f1f2b38fa1 block: remove mount target file if it's a link 830441d790d6 blockd: remove symlink linkpath file if it's a dir or link c80f7002114f libfstools/mtd: attempt to read from OOB data if empty space is found Signed-off-by: Felix Fietkau <nbd@nbd.name>
* openssl: bump to 1.1.1gPetr Štetiar2020-04-211-2/+2
| | | | | | | | Fixes NULL dereference in SSL_check_chain() for TLS 1.3, marked with high severity, assigned CVE-2020-1967. Ref: https://www.openssl.org/news/secadv/20200421.txt Signed-off-by: Petr Štetiar <ynezz@true.cz>
* base-files: ensure VERBOSE is setAlexander Couzens2020-04-211-1/+1
| | | | | | | If not set, it shows the following error sh: out of range Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
* ubus: update to latest git HEADHans Dedecker2020-04-201-3/+3
| | | | | | 171469e lua: avoid truncation of large numeric values Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* uboot-rockchip: fix ident stringPetr Štetiar2020-04-201-1/+1
| | | | | | | | Commit 797506011695 ("uboot-rockchip: add new package") has added `OpenWRT` ident string, fix it to proper `OpenWrt`. Fixes: 797506011695 ("uboot-rockchip: add new package") Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uboot-rockchip: add new packageTobias Mädel2020-04-201-0/+57
| | | | | | | This package is needed for the rockchip target. Signed-off-by: Tobias Mädel <t.maedel@alfeld.de> Tested-by: Tobias Schramm <t.schramm@manjaro.org>
* arm-trusted-firmware-rockchip: add new packageTobias Mädel2020-04-201-0/+49
| | | | | | | | | This is needed to build the uboot-rockchip, needed for the rockchip target Signed-off-by: Tobias Mädel <t.maedel@alfeld.de> Tested-by: Tobias Schramm <t.schramm@manjaro.org> [replaced `mkdir -p` with INSTALL_DIR variable] Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uboot-kirkwood: update to 2020.04Pawel Dembicki2020-04-2010-118/+101
| | | | | | | | | | | | | Update U-Boot to current 2020.04 release for kirkwood platform. Catch up with upstream and move some configuration options from the header files to the corresponding defconfig files. Compile tested: all devices Run tested: nsa310, pogoplugv4 Tested-by: Cezary Jackiewicz <cezary@eko.one.pl> [nsa310] Signed-off-by: Pawel Dembicki <paweldembicki@gmail.com>
* relayd: bump to version 2020-04-20Kevin Darbyshire-Bryant2020-04-201-3/+3
| | | | | | | | 796da66 dhcp.c: improve input validation & length checks Addresses CVE-2020-11752 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* umdns: update to version 2020-04-20Kevin Darbyshire-Bryant2020-04-201-4/+4
| | | | | | | | e74a3f9 dns.c: improve input validation Addresses CVE-2020-11750 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* procd: fix jail when running on glibcDaniel Golle2020-04-191-3/+3
| | | | | | d200b70 jail: include /etc/nsswitch.conf in jail for glibc. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* dante: Fix compile with glibcHauke Mehrtens2020-04-182-1/+54
| | | | | | | | | | | | | | | | | | | When compiled with glibc the config_scan.c wants to use the cpupolicy2numeric() function which is only available when HAVE_SCHED_SETSCHEDULER is set. It looks like the wrong define was used here. This fixes a build problem with glibc in combination with the force ac_cv_func_sched_setscheduler=no in the OpenWrt CONFIGURE_VARS. This fixes the following compile error with glibc: ---------------------------------------------------------------------- /bin/ld: config_scan.o: in function `socks_yylex': dante-1.4.1/sockd/config_scan.l:461: undefined reference to `cpupolicy2numeric' collect2: error: ld returned 1 exit status make[5]: *** [Makefile:522: sockd] Error 1 Fixes: aaf46a8fe23e ("dante: disable sched_getscheduler() - not implemented in musl") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* rbcfg: Add missing mode to open callHauke Mehrtens2020-04-182-2/+2
| | | | | | | | | | | | | | | | | | | When open() is called with O_CREAT a 3. parameter has to be given with the file system permissions of the new file. Not giving this is an error, which results in a compile error with glibc. This fixes the following compile error with glibc: ---------------------------------------------------------------------- In file included from /include/fcntl.h:329, from main.c:18: In function 'open', inlined from 'rbcfg_update' at main.c:501:7: /include/bits/fcntl2.h:50:4: error: call to '__open_missing_mode' declared with attribute error: open with O_CREAT or O_TMPFILE in second argument needs 3 arguments __open_missing_mode (); ^~~~~~~~~~~~~~~~~~~~~~ Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* upgs: Remove extra _DEFAULT_SOURCE definitionHauke Mehrtens2020-04-181-4/+0
| | | | | | | | | | | | | | | This extra _DEFAULT_SOURCE definition results in a double definition which is a compile error. This fixes the following compile error with glibc: ---------------------------------------------------------------------- ugps-2019-06-25-cd7eabcd/nmea.c:19: error: "_DEFAULT_SOURCE" redefined [-Werror] #define _DEFAULT_SOURCE <command-line>: note: this is the location of the previous definition cc1: all warnings being treated as errors Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* busybox: backport Remove stime() function callsHauke Mehrtens2020-04-181-0/+84
| | | | | | | glibc 2.31 does not provide stime() any more, backport a fix from current busybox master to avoid using this function. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* openvpn: update to 2.4.9Magnus Kroken2020-04-183-4/+4
| | | | | | | | | | | | | | | This is primarily a maintenance release with bugfixes and improvements. This release also fixes a security issue (CVE-2020-11810) which allows disrupting service of a freshly connected client that has not yet negotiated session keys. The vulnerability cannot be used to inject or steal VPN traffic. Release announcement: https://openvpn.net/community-downloads/#heading-13812 Full list of changes: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.9 Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* binutils: add ALTERNATIVES for strings (FS#3001)Hans Dedecker2020-04-181-1/+2
| | | | | | | | Don't move strings anymore to /bin/strings to avoid clash with busybox /usr/bin/strings but move it to /usr/bin/binutils-strings. Use ALTERNATIVES support to install it as /usr/bin/strings Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* mbedtls: update to 2.16.6Magnus Kroken2020-04-171-2/+2
| | | | | | | | | | | | Security fixes for: * CVE-2020-10932 * a potentially remotely exploitable buffer overread in a DTLS client * bug in DTLS handling of new associations with the same parameters Full release announement: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* mac80211: make sure existing iface belongs to correct (fullmac) phyDaniel Golle2020-04-172-9/+19
| | | | | | | | | | | | | | Some FullMAC cfg80211 wireless devices do not support virtual interfaces, hence there is script logic to keep the existing network device. Improve this to support renaming the interface if needed and make sure the existing interface actually belongs to the right phy. Change calls to 'iw' to avoid outputing warnings and errors to not confuse users of such devices. Also bump PKG_RELEASE which has been forgotten in the previous two mac80211 changes. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* elfutils: aarch64 fix build on muslLucian Cristian2020-04-171-0/+59
| | | | | | | | | aarch64_initreg.c: In function 'aarch64_set_initial_registers_tid': aarch64_initreg.c:85:37: error: invalid operands to binary & (have 'long double' and 'unsigned int') dwarf_fregs[r] = fregs.vregs[r] & 0xFFFFFFFF; ~~~~~~~~~~~~~~ ^ Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* uboot-sunxi: bump to 2020.04 relasePetr Štetiar2020-04-179-43/+14
| | | | | | | | | | | Refreshed patches, removed upstreamed patch: 260-configs-a64-olinuxino-emmc-add-eMMC-boot-part-config.patch Boot tested on a64-olinuxino-emmc. Cc: Zoltan HERPAI <wigyori@uid0.hu> Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uboot-imx6: bump to 2020.04 releasePetr Štetiar2020-04-174-13/+11
| | | | | | | | | Refreshed all patches, run tested on apalis. Cc: Vladimir Vid <vladimir.vid@sartura.hr> Cc: Tim Harvey <tharvey@gateworks.com> Cc: Koen Vandeputte <koen.vandeputte@ncentric.com> Signed-off-by: Petr Štetiar <ynezz@true.cz>
* mac80211: drop data frames without key on encrypted linksDavid Bauer2020-04-171-0/+148
| | | | | | | | | | | | | | | | | | | | | | | | | If we know that we have an encrypted link (based on having had a key configured for TX in the past) then drop all data frames in the key selection handler if there's no key anymore. This fixes an issue with mac80211 internal TXQs - there we can buffer frames for an encrypted link, but then if the key is no longer there when they're dequeued, the frames are sent without encryption. This happens if a station is disconnected while the frames are still on the TXQ. Detecting that a link should be encrypted based on a first key having been configured for TX is fine as there are no use cases for a connection going from with encryption to no encryption. With extended key IDs, however, there is a case of having a key configured for only decryption, so we can't just trigger this behaviour on a key being configured. Cc: stable@vger.kernel.org Reported-by: Jouni Malinen <j@w1.fi> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: David Bauer <mail@david-bauer.net>
* mac80211: fix detecting existing interfaceDaniel Golle2020-04-171-1/+1
| | | | | | | | | Instead of using the actual interface name, a hard-coded 'wlan0' has slipped into the script. Replace it. Fixes: ccf2aa9d4b ("mac80211: detect existing interface before adding") Reported-by: John Crispin <john@phrozen.org> Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* procd: jail fixes and improvementsDaniel Golle2020-04-141-3/+3
| | | | | | | | | | | 32c717e jail: only mess with rootfs if CLONE_NEWNS was set b275a62 instance: harmonize instance API 511fd97 jail: make /proc more secure 4953b7c jail: mount /sys read-only a4d6442 jail: replace /etc/resolv.conf with symlink in extroot+overlay a4cc165 jail: always mount /dev as additional tmpfs Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* netifd: clean up netns functionalityDaniel Golle2020-04-141-3/+3
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* Revert "kmod-sched: add act_police"Kevin Darbyshire-Bryant2020-04-141-10/+0
| | | | | | | | | | | This reverts commit 1b973b54ea4d5d20dec5e71c48bff6a3e0bcb4ac. It turns out act_police is included in the kmod-sched package so this package turns out to be superfluous and causes file provision conflicts. Ooooops! Best revert it then. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* netifd: fix jail ifdown and jails without jail_ifnameDaniel Golle2020-04-141-3/+3
| | | | | | | | The previous commit introduced a regression for netns jails without jail_ifname set. Fix that. Fixes: 4e4f7c6d2d ("netifd: network namespace jail improvements") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* netifd: network namespace jail improvementsDaniel Golle2020-04-141-3/+3
| | | | | | | aaaca2e interface: allocate and free memory for jail name d93126d interface: allow renaming interface when moving to jail netns Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mac80211: adapt for single-instance wpadDaniel Golle2020-04-142-8/+8
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* hostapd: reduce to a single instance per serviceDaniel Golle2020-04-148-174/+62
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* elfutils: update to 0.179Rosen Penev2020-04-136-64/+106
| | | | | | | | | | | | | | | | | Removed sys/cdefs usage. The header is deprecated. Removed canonicalize_file_name define. It's already fixed upstream. Added --disable-debuginfod. Seems to be needed. Modified patch 005 to build more stuff. It was failing before. It still only builds libraries. Modified patch 100 to use strerror under non-glibc. It is used under glibc as strerror is not thread safe. It is under musl and uClibc-ng. strerror_l is not available under uClibc-ng. Signed-off-by: Rosen Penev <rosenp@gmail.com>