aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* dropbear: security update to 2016.74Jo-Philipp Wich2016-08-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | - Security: Message printout was vulnerable to format string injection. If specific usernames including "%" symbols can be created on a system (validated by getpwnam()) then an attacker could run arbitrary code as root when connecting to Dropbear server. A dbclient user who can control username or host arguments could potentially run arbitrary code as the dbclient user. This could be a problem if scripts or webpages pass untrusted input to the dbclient program. - Security: dropbearconvert import of OpenSSH keys could run arbitrary code as the local dropbearconvert user when parsing malicious key files - Security: dbclient could run arbitrary code as the local dbclient user if particular -m or -c arguments are provided. This could be an issue where dbclient is used in scripts. - Security: dbclient or dropbear server could expose process memory to the running user if compiled with DEBUG_TRACE and running with -v The security issues were reported by an anonymous researcher working with Beyond Security's SecuriTeam Secure Disclosure www.beyondsecurity.com/ssd.html Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* mwlwifi: upgrade to 10.3.0.18-20160804Imre Kaloz2016-08-111-2/+2
| | | | | | adds support for the Linksys WRT1900ACSv2 and WRT1200ACv2 Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
* kernel: add missing config symbolFelix Fietkau2016-08-111-1/+2
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath10k-firmware: Update to latest 99X0 CT firmware.Ben Greear2016-08-111-2/+2
| | | | | | | | | | Among other things, this compiles out support for peer caching. The feature did not seem to work well in my testing of AP mode, and totally breaks my own special use of station mode. Briefly tested on ea8500. Signed-off-by: Ben Greear <greearb@candelatech.com>
* ath10k-ct: Fix loading 9980 firmware.Ben Greear2016-08-111-2/+2
| | | | | | | | | | | ath10k-ct driver was using bad defaults for 9980 if user had not specified a fwcfg file to over-ride them. Also, support configurable station-kickout-threshold, which might work around issues with flakey connections. Signed-off-by: Ben Greear <greearb@candelatech.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [fix PKG_VERSION]
* kernel: add plan 9 fs packageMatteo Croce2016-08-112-0/+39
| | | | | | | 9pfs is used by kvm to share files between host and guest, add proper config option to enable it. Signed-off-by: Matteo Croce <matteo.croce@canonical.com>
* hostapd: Allow RADIUS accounting without 802.1xPetko Bordjukov2016-08-111-10/+9
| | | | | | | | RADIUS accounting can be used even when RADIUS authentication is not used. Move the accounting configuration outside of the EAP-exclusive sections. Signed-off-by: Petko Bordjukov <bordjukov@gmail.com>
* preinit: use only the image config optionsMathias Kresin2016-08-102-19/+0
| | | | | | | | | | The pi_* variables and the fs_failsafe_wait_timeout variable are set by the CONFIG_TARGET_PREINIT_* config options. No need to maintain the same values twice. All other fs_ variables were never used. Signed-off-by: Mathias Kresin <dev@kresin.me>
* ltq-hcd: fix xway dependencyMathias Kresin2016-08-101-1/+1
| | | | | | Due to missing parameter the package wasn't build for the xway target. Signed-off-by: Mathias Kresin <dev@kresin.me>
* openssl: re-enable CMAC supportFelix Fietkau2016-08-091-1/+1
| | | | | | Needed by a few packages Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uclient: change SSL support error messageJo-Philipp Wich2016-08-081-2/+2
| | | | | | | Change the error message about missing SSL support to be more explicit by mentioning required package names. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* mac80211: Update the regdb to master-2016-06-10Petko Bordjukov2016-08-071-21/+66
| | | | | | | | | | | | | | | Changes include: * Higher maximum transmit power in the 5170-5250 band of the BG regdomain * Introduction of the CU regdomain * Introduction of the 5725-5875 band (short-range devices) in the DE regdomain * Introduction of 60 GHz channels 1-4 in the KR regdomain * Introduction of the 5725-5875 band (short-range devices) in the NL regdomain Signed-off-by: Petko Bordjukov <bordjukov@gmail.com>
* hostapd: remove unused hostapd-common-old packageFelix Fietkau2016-08-053-606/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath9k: improve powersave filter handlingFelix Fietkau2016-08-041-0/+70
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath9k: improve performance in tx status handlingFelix Fietkau2016-08-041-0/+305
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* Revert "kernel: remove long obsolete gpio spi controller driver patch"Felix Fietkau2016-08-041-0/+16
| | | | This reverts commit 9e62a7668c4085563a907da51a08819c88d04f33.
* kernel: mark compression modules as hiddden to obsolete the compressor ↵Felix Fietkau2016-08-041-0/+3
| | | | | | kconfig hack Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: mark kmod-udptunnel as hiddden to replace the NET_UDP_TUNNEL kconfig ↵Felix Fietkau2016-08-041-0/+2
| | | | | | hack Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: remove unused morse led trigger driverFelix Fietkau2016-08-043-31/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: remove long obsolete gpio spi controller driver patchFelix Fietkau2016-08-041-16/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: remove esfq qdiscFelix Fietkau2016-08-043-264/+3
| | | | | | It has been obsolete for years now Signed-off-by: Felix Fietkau <nbd@nbd.name>
* sysupgrade: unmount filesystems before rebootMathias Kresin2016-08-042-0/+3
| | | | | | | | | | | | | | | sysupgrade immediately reboots after flashing an image and doesn't allow to unmount filesystems. At least in case the image used for sysupgrade is stored on a FAT formatted usb flash drive, the following warning is printed during the next mount of the flash drive: FAT-fs (sda1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. Although a data corruption during read operations is unlikely, there is no need to scare the users. Signed-off-by: Mathias Kresin <dev@kresin.me>
* base-files: remove dead codeDaniel Golle2016-08-041-6/+0
| | | | | | | | | /etc/init.d/boot tried to create /dev/root based on the kernel's cmdline which won't work on any recent targets. Remove that code now that fstools can detect the mounted rootfs based on /proc/self/mountinfo and /dev/root was long gone anyway. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* kernel: modularize bridge netfilter support a bit further to get rid of some ↵Felix Fietkau2016-08-031-4/+19
| | | | | | kernel bloat Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: remove switch driver kmod packagesFelix Fietkau2016-08-031-140/+0
| | | | | | | | Targets that need switch drivers should select them in their kernel config. This prevents some bloat from creeping into targets that don't need switchdev/dsa Signed-off-by: Felix Fietkau <nbd@nbd.name>
* linux/modules: Add SCH5627 Super I/O chipsLucian Cristian2016-08-031-0/+16
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* rtc-rv5c386a: package does not build inside the SDKJohn Crispin2016-08-031-1/+1
| | | | | | | the packages failed to build inside the SDK due to missing header files. Signed-off-by: John Crispin <john@phrozen.org>
* uboot-lantiq: package does not build inside the SDKJohn Crispin2016-08-031-1/+1
| | | | | | | the packages failed to build inside the SDK due to missing ethernet firmware files. Signed-off-by: John Crispin <john@phrozen.org>
* mkelfimage: remove package, it is a host tool that has been unused for yearsFelix Fietkau2016-08-022-46/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uboot-ar71xx: fix default selection for NBG460N/550N/550NHFelix Fietkau2016-08-021-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: fix minor memleak on AP restart / warning on driver unloadFelix Fietkau2016-08-021-0/+54
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ath9k: fix sta initialization bug leading to stability issuesFelix Fietkau2016-08-021-0/+33
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* gdb: fix build with gcc 4.1.2 as host compilerHauke Mehrtens2016-08-011-0/+16
| | | | | | | | | | | | | | | | | | | | The additional warnings are causing compile errors on gcc version 4.1.2 as a host compiler. cc -c -Wall -Wdeclaration-after-statement -Wpointer-arith -Wpointer-sign -Wno-unused -Wunused-value -Wunused-function -Wno-switch -Wno-char-subscripts -Wmissing-prototypes -Wdeclaration-after-statement -Wempty-body -Wmissing-parameter-type -Wold-style-declaration -Wold- style-definition -Wformat-nonliteral -I. -I. -I./../../include filter_host.c cc1: error: unrecognized command line option "-Wempty-body" cc1: error: unrecognized command line option "-Wmissing-parameter-type" cc1: error: unrecognized command line option "-Wold-style-declaration" cc1: error: unrecognized command line option "-Wempty-body" cc1: error: unrecognized command line option "-Wmissing-parameter-type" cc1: error: unrecognized command line option "-Wold-style-declaration" Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* base-files: increase vm.min_free_kbytesFelix Fietkau2016-08-011-0/+16
| | | | | | | | Network drivers typically allocate memory in atomic context. For that to be reliable, there needs to be enough free memory. Set the value heuristically based on the total amount of system RAM. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uqmi: add metric option to interface configFlorian Eckert2016-07-261-2/+7
| | | | | | It is now possible to add an metric option for the qmi proto in dhcp mode. Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com>
* uqmi: fix option ipv6Florian Eckert2016-07-261-5/+1
| | | | | | | If option ist not set then ipv6 is still enabled on this Interface. Check if variable is zero will fix this issue. Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com>
* build: create a package feed directory containing all packagesFelix Fietkau2016-08-011-1/+9
| | | | | | Needed for proper dependency handling for per-device rootfs Signed-off-by: Felix Fietkau <nbd@nbd.name>
* perf: prevent build from within the sdk and mark as nonsharedFelix Fietkau2016-07-311-1/+2
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: remove hostap driverFelix Fietkau2016-07-3110-613/+5
| | | | | | | It has been marked as broken for well over a month now and nobody has complained. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dnsmasq: drop --interface and --except-interface options when the interface ↵Felix Fietkau2016-07-291-2/+2
| | | | | | cannot be found Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to the latest version, adds an event handling fixFelix Fietkau2016-07-291-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dnsmasq: remove use of uci state for getting network ifnameFelix Fietkau2016-07-291-2/+2
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dnsmasq: replace the iface hotplug script with a procd triggerFelix Fietkau2016-07-293-11/+8
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dnsmasq: make the check for existing DHCP servers more reliableFelix Fietkau2016-07-291-0/+6
| | | | | | If there is no carrier yet, wait for 2 seconds (STP forwarding delay) Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dnsmasq: write atomic config fileUlrich Weber2016-07-291-8/+10
| | | | | | | | | multiple invocation of dnsmasq script (e.g. by procd and hotplugd) might cause procd to restart dnsmasq with an incomplete config file. Config file generation might take quite a long time on larger configs due ubus calls for each listening interface... Signed-off-by: Ulrich Weber <ulrich.weber@riverbed.com>
* netifd: update to the latest versionFelix Fietkau2016-07-291-2/+2
| | | | | | | | Emits an initial event after the first link-up of a force_link interface. This is needed for making the dnsmasq dhcp check more reliable Signed-off-by: Felix Fietkau <nbd@nbd.name>
* procd: add default timeout for reload trigger actionsFelix Fietkau2016-07-291-0/+10
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* igmpproxy: remove procd_open_trigger/procd_close_trigger callsFelix Fietkau2016-07-291-3/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dropbear: remove procd_open_trigger/procd_close_trigger callsFelix Fietkau2016-07-291-2/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* sysntpd: remove procd_open_trigger/procd_close_trigger callsFelix Fietkau2016-07-291-3/+0
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>