Sven Eckelmann [Fri, 20 May 2016 15:53:15 +0000 (17:53 +0200)]
ar71xx: enable sysupgrade for the OpenMesh MR1750v2
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:14 +0000 (17:53 +0200)]
ar71xx: add user-space support for the OpenMesh MR1750v2
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:13 +0000 (17:53 +0200)]
ar71xx: add kernel support for the OpenMesh MR1750v2
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:12 +0000 (17:53 +0200)]
ar71xx: add OM2P-HSv3 to the OM2P profile
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:11 +0000 (17:53 +0200)]
package/uboot-envtools: add OpenMesh OM2P-HSv3 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:10 +0000 (17:53 +0200)]
package/om-watchdog: add OpenMesh OM2P-HSv3 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:09 +0000 (17:53 +0200)]
ar71xx: enable sysupgrade for the OpenMesh OM2P-HSv3
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:08 +0000 (17:53 +0200)]
ar71xx: add user-space support for the OpenMesh OM2P-HSv3
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Fri, 20 May 2016 15:53:07 +0000 (17:53 +0200)]
ar71xx: add kernel support for the OpenMesh OM2P-HSv3
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Tue, 17 May 2016 15:51:36 +0000 (17:51 +0200)]
ar71xx: Allow OpenMesh CE images with more than 3 files
The CE image format used by OpenMesh can contain extra blocks which
are not used for flashing. Only the first three embedded images
(fwupgrade.cfg, kernel, rootfs) are required in this order to successfully
flash an image via sysupgrade. All extra embedded images should be ignored
for the available devices.
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Tue, 17 May 2016 15:51:35 +0000 (17:51 +0200)]
ar71xx: Move OpenMesh image target validation into subfunction
The platform_check_image_openmesh function used break statements to signal
that the board name matched the image target. This worked because the
sysupgrade binary checked the image inside a loop. The break statement
stopped the loop and skipped any additional check.
Instead the check should be done without such sideeffects by simply
combining the board names and image targets. Only a mismatch should cause a
negative result for the caller and skipping of the additional checks.
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Tue, 17 May 2016 15:51:34 +0000 (17:51 +0200)]
ar71xx: Generate sysupgrade images for OpenMesh devices
Some OpenWrt based firmwares like Gluon expect that a sysupgrade image
exists when a device firmware can be updated via sysupgrade. This image
wasn't created until now because OpenMesh devices use the same image for
factory and sysupgrade flash. Copying the image from *factory.bin to
*sysupgrade.bin is therefore enough to make the sysupgrade functionality
visible.
Reported-by: Matthias Schiffer <mschiffer@universe-factory.net>
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Sven Eckelmann [Tue, 17 May 2016 15:51:33 +0000 (17:51 +0200)]
ar71xx: Add support for initramfs images for OpenMesh devices
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
Felix Fietkau [Sun, 22 May 2016 21:10:54 +0000 (23:10 +0200)]
ar71xx: move nand device image definitions to a separate file
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 22 May 2016 21:10:02 +0000 (23:10 +0200)]
ar71xx: move generic device image definitions to a separate file
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 22 May 2016 21:06:59 +0000 (23:06 +0200)]
ar71xx: split ubnt image building code into a separate file
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 22 May 2016 21:04:50 +0000 (23:04 +0200)]
ar71xx: split legacy image building code into a separate file
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 22 May 2016 20:57:32 +0000 (22:57 +0200)]
ar71xx: split tp-link image building code into a separate file
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Russell Senior [Sun, 22 May 2016 20:24:05 +0000 (13:24 -0700)]
x86_64: enable mmc to support booting off sd
Improved support for PCEngines APU
Signed-off-by: Russell Senior <russell@personaltelco.net>
Russell Senior [Mon, 16 May 2016 07:52:24 +0000 (00:52 -0700)]
ath25: update kernel from 3.18 to 4.4
Summary of changes:
* moved config-3.18 to config-4.4 and patches-3.18 to patches-4.4
* removed most of the first two patches, that seem to be upstream already
* changed deprecated/removed IRQF_DISABLED to zero following examples in upstream kernel patches
* added config line to disable device-tree to satisfy kernel configuration
* add new image generation code
Build tested and run tested on an Accton MR3201A.
Signed-off-by: Russell Senior <russell@personaltelco.net>
Signed-off-by: Sergey Ryazanov <ryazanov.s.a@gmail.com>
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Sat, 14 May 2016 19:58:35 +0000 (21:58 +0200)]
ramips: Add specific compatible properties for esw
Currently, for RT5350 and MT7628, esw is marked as compatible with
"ralink,rt3050-esw". While this is true, the switches within RT5350
and MT7628 actually support more functionality than the RT3050 switch.
One such example is per-VLAN untagging, which is an important feature.
RT3352 is another example of this, but it already has an additional
compatible property, which allows to differentiate it from RT3050.
This commit adds such more specific properties for RT5350 and MT7628
as well.
Signed-off-by: Stanislav Galabov <sgalabov@gmail.com>
John Crispin [Mon, 23 May 2016 09:20:20 +0000 (11:20 +0200)]
mediatek: update patches
* fixes NAND
* adds latest ethernet patches
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 16 May 2016 03:32:45 +0000 (05:32 +0200)]
base-files: fix some failsafe issues
* if the shell was closed booting continued
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 23 May 2016 05:49:06 +0000 (07:49 +0200)]
fstools: update to latest git version
* adds support for ACL mount flags
* adds vfat fsck support
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 17 May 2016 08:46:09 +0000 (10:46 +0200)]
procd: update to latest head
fixes /dev/console handling during early boot
Signed-off-by: John Crispin <john@phrozen.org>
Mathias Kresin [Sat, 21 May 2016 10:16:37 +0000 (12:16 +0200)]
lantiq: VG3503J - use the 11G firmware
Use the 11G firmware for the phys as the oem firmware does.
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:16:36 +0000 (12:16 +0200)]
lantiq: VG3503J - merge profiles
The only difference between the VG3503J profiles is the version of the
gphy firmware that gets loaded. This can be handled perfect fine in one
device tree source file.
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:13:40 +0000 (12:13 +0200)]
uboot-lantiq: ARV752DPW - use correct switch driver
There is no RTL8206 switch driver.
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:13:39 +0000 (12:13 +0200)]
uboot-lantiq: VGV7510KW22 - use ddr ram params from brnboot
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:13:38 +0000 (12:13 +0200)]
uboot-lantiq: VGV7510KW22 - use leds to indicate boot status
Switch on the red power led if kernel image can't be loaded. Otherwise
switch the green led on.
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:13:37 +0000 (12:13 +0200)]
uboot-lantiq: VGV7510KW22 - cleanup board config
According to the author, all SPI related configs are copy & paste
leftovers. Which makes sense since nothing is connected to the SPI bus
on this device.
The NOR SPL isn't required for this board, since the NOR is directly
memory mapped.
Allow to overwrite the env in ram while using brn variant. Do not set
the power GPIO pin twice.
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:13:36 +0000 (12:13 +0200)]
uboot-lantiq: reorder and rework patches
use:
- 00nn for u-boot patches
- 01nn for new boards
While doing the rework, the board definitions for the easy50712 and
easy80920 were moved to distinct board definitions patches.
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:13:35 +0000 (12:13 +0200)]
uboot-lantiq: drop unused board patches
None of the boards is supported by lede. No need to keep the patches in
the lede tree.
Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias Kresin [Sat, 21 May 2016 10:09:36 +0000 (12:09 +0200)]
lantiq: disable phy led complex (test) functions by default
They can be added using the phy led device tree bindings if required.
Signed-off-by: Mathias Kresin <dev@kresin.me>
John Crispin [Tue, 17 May 2016 18:03:22 +0000 (20:03 +0200)]
imx6: move profile definitions to the image/Makefile
Signed-off-by: John Crispin <john@phrozen.org>
Cezary Jackiewicz [Thu, 19 May 2016 05:37:58 +0000 (07:37 +0200)]
ramips: cleanup for Hame MPR-A2
- disable all ethernet ports except port 0 on MPR-A2
Port 0 is the only ethernet port on this router, so disable all other PHYs in order to save power.
- don't use a VLAN for the single ethernet port of the MPR-A2
Like A5-V11, this router only has one ethernet port.
Signed-off-by: Cezary Jackiewicz <cezary@eko.one.pl>
John Crispin [Mon, 23 May 2016 07:29:52 +0000 (09:29 +0200)]
mdns: update to latest git HEAD
* fixes loopback handling
Signed-off-by: John Crispin <john@phrozen.org>
Felix Fietkau [Sun, 22 May 2016 17:51:00 +0000 (19:51 +0200)]
image.mk: fix profile selection in the image builder
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 20:16:56 +0000 (22:16 +0200)]
mvebu: backport upstream ethernet driver improvements and enable buffer manager support
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 22 May 2016 13:51:52 +0000 (15:51 +0200)]
oxnas: use global UBIFS_OPTS, all profiles use the same settings
Fixes build when selecting a device profile
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 22 May 2016 13:43:08 +0000 (15:43 +0200)]
mwlwifi: remove the a-mpdu failure messages entirely instead of hiding them in the debug log
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 22 May 2016 10:33:39 +0000 (12:33 +0200)]
mvebu: fix device I/O coherency issues
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 20:35:22 +0000 (22:35 +0200)]
kernel: remove bogus CONFIG_LOG_BUF_SHIFT overrides
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 20:32:30 +0000 (22:32 +0200)]
mvebu: correct patch name of the crypto sram fix
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 20:06:19 +0000 (22:06 +0200)]
mvebu: fix bus ranges for the crypto processor sram
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 18:02:05 +0000 (20:02 +0200)]
libpcap: set a static default for PCAP_HAS_USB
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 17:56:47 +0000 (19:56 +0200)]
mvebu: tune kernel config for performance
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 17:09:59 +0000 (19:09 +0200)]
mvebu: enable core drivers in the kernel config instead of packaging them
Simplify profile package selection
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 16:07:28 +0000 (18:07 +0200)]
mvebu: add some more flash driver fixes
Disable marvell,nand-keep-config property on WRT1900AC to allow the
flash driver to properly probe the chip
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 16:07:12 +0000 (18:07 +0200)]
mvebu: rename recently added flash driver fix
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 15:50:08 +0000 (17:50 +0200)]
mwlwifi: fix excessive logspam if starting a BA session fails
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 15:47:42 +0000 (17:47 +0200)]
mwlwifi: fix excessive use of busy-waiting that was tripping up the flash driver
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 15:47:20 +0000 (17:47 +0200)]
mwlwifi: update to 10.3.0.17-
20160520-1
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 13:16:09 +0000 (15:16 +0200)]
mvebu: prevent crash in the flash driver in case of a spurious interrupt
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 13:15:51 +0000 (15:15 +0200)]
mvebu: backport an upstream NAND flash driver fix
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 09:35:33 +0000 (11:35 +0200)]
ramips: use green power LED as status indicator for Buffalo WSR-1166 and WSR-600
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 11:57:26 +0000 (13:57 +0200)]
build: allow whitespace characters in VERSION_DIST
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 10:42:44 +0000 (12:42 +0200)]
uhttpd: use configured distribution name for SSL certificate CN
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sat, 21 May 2016 08:02:29 +0000 (10:02 +0200)]
ar71xx: remove linux 4.1 support
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Dirk Neukirchen [Sat, 21 May 2016 05:35:36 +0000 (07:35 +0200)]
cyassl/wolfssl: update to 3.9.0
wolfssl has a fine grained feature and compatibility control
for compiling stunnel, lighthttp or (partly) openssl dropin
ustream-ssl uses features that require normally
HAVE_SNI, HAVE_STUNNEL and the openssl compatibility headers
ar71xx ipkg sizes of wolfssl 3.9.0:
- with stunnel: 144022
- this patch (w.o. stunnel): 131712
- without openssl(extra): 111104
- w.o openssl/sni:108515
- w.o openssl/sni/ecc: 93954
so patch 300 saves around 12k compressed ipkg size
v2: keep & rename patch 300 for clarity, fixes ustream-ssl/cyassl
that broke with v1
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Felix Fietkau [Fri, 20 May 2016 22:11:40 +0000 (00:11 +0200)]
mac80211: add missing config symbols to PKG_CONFIG_DEPENDS
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Rafał Miłecki [Thu, 19 May 2016 22:56:51 +0000 (00:56 +0200)]
nvram: install init.d quirks script on brcm47xx only
It contains some quirks for old MIPS devices.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Álvaro Fernández Rojas [Fri, 20 May 2016 17:07:36 +0000 (19:07 +0200)]
brcm2708: fix SUBTARGET checks for bcm2709/bcm2710
This regression was introduced in commit
cf58007a
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Felix Fietkau [Fri, 20 May 2016 12:36:51 +0000 (14:36 +0200)]
mvebu: update to linux 4.4
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Fri, 20 May 2016 12:36:31 +0000 (14:36 +0200)]
mvebu: fix portability issues in the image makefile code
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Fri, 20 May 2016 12:17:53 +0000 (14:17 +0200)]
kernel: define CONFIG_CPU_THERMAL in kmod-thermal
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Wed, 18 May 2016 11:56:53 +0000 (13:56 +0200)]
image.mk: simplify device profile check, prepare for supporting selecting multiple profiles
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 19 May 2016 13:34:36 +0000 (15:34 +0200)]
image.mk: fix evaluation order for image profile check
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Wed, 18 May 2016 11:43:57 +0000 (13:43 +0200)]
bcm2708: explicitly check for SUBTARGET instead of using the device SUBTARGETS variable
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Tue, 17 May 2016 12:09:26 +0000 (14:09 +0200)]
libubox: update to the latest version
adds a SIGCHLD handling fix and jshn performance improvements
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Fri, 20 May 2016 12:14:52 +0000 (14:14 +0200)]
arm64: update to linux 4.4
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Fri, 20 May 2016 12:19:30 +0000 (14:19 +0200)]
kernel: add missing config symbols for 4.4
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 19 May 2016 21:10:43 +0000 (23:10 +0200)]
ramips: remove fake vlan rx offload from ethernet driver
The network stack does not need it to do GRO
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Alexander Couzens [Fri, 20 May 2016 11:10:36 +0000 (13:10 +0200)]
ar71xx/cpe510: enable LNA for CPE210/220/510/520
The LNA improves the rx path. Within a simple test setup
it improved the signal from -60dbm to -40dbm.
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Daniel Golle [Fri, 20 May 2016 03:39:52 +0000 (05:39 +0200)]
oxnas: drop compatibility with old kernels from mach-ox820
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Fri, 20 May 2016 03:39:04 +0000 (05:39 +0200)]
oxnas: drop compatibility with old kernels from pinctrl
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Fri, 20 May 2016 03:37:53 +0000 (05:37 +0200)]
oxnas: drop compatibility with old kernels from irq-rps
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Fri, 20 May 2016 03:35:35 +0000 (05:35 +0200)]
oxnas: drop compatibility with old kernels from dwmac-oxnas
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Fri, 20 May 2016 06:24:32 +0000 (08:24 +0200)]
oxnas: sync 010-arm_introduce-dma-fiq-irq-broadcast with cns3xxx
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Álvaro Fernández Rojas [Thu, 19 May 2016 17:32:46 +0000 (19:32 +0200)]
kernel: update kernel 4.4 to version 4.4.11
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Alexey Brodkin [Thu, 19 May 2016 05:20:33 +0000 (08:20 +0300)]
toolchain: Bump ARC tools to arc-2016.03
This change switches ARC tools to the most recent arc-2016.03
version.
ARC GNU tools of version arc-2016.03 bring some quite significant
changes like:
* Binutils v2.26+ (upstream commit id
202ac19 with additional ARC
* patches)
* GCC v4.8.5
* GDB 7.10
More about changes, improvements and fixes could be found here:
https://github.com/foss-for-synopsys-dwc-arc-processors/toolchain/releases/tag/arc-2016.03
Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
Kevin Darbyshire-Bryant [Thu, 19 May 2016 15:57:19 +0000 (16:57 +0100)]
base-files: sysfixtime typo in exclude dnsmasq.time
Typo, missing space before ] in previous commit caused shell syntax
failure and incorrect restoration of time.
Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
Daniel Golle [Thu, 19 May 2016 16:05:20 +0000 (18:05 +0200)]
image.mk: fix building ubifs images
A hook for ubifs was left-out in the new image building code. Add it.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Felix Fietkau [Thu, 19 May 2016 15:55:34 +0000 (17:55 +0200)]
kernel: fix unaligned access issue in the bridge multicast-to-unicast patch
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 19 May 2016 15:35:49 +0000 (17:35 +0200)]
mac80211: fix unaligned accesses in the tx path
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Álvaro Fernández Rojas [Thu, 19 May 2016 15:13:15 +0000 (17:13 +0200)]
ramips: use backported upstream patches
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Felix Fietkau [Thu, 19 May 2016 13:02:30 +0000 (15:02 +0200)]
curl: remove axtls config option, the library does not exist in our tree
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Dirk Neukirchen [Thu, 19 May 2016 11:27:41 +0000 (13:27 +0200)]
curl: update to 7.49
fixes:
CVE-2016-3739: TLS certificate check bypass with mbedTLS/PolarSSL
- remove crypto auth compile fix
curl changelog of 7.46 states its fixed
- fix mbedtls and cyassl usability #19621 :
add path to certificate file (from Mozilla via curl) and
provide this in a new package
tested on ar71xx w. curl/mbedtls/wolfssl
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Felix Fietkau [Thu, 19 May 2016 12:09:25 +0000 (14:09 +0200)]
ar71xx: fix a remaining unaligned access issue
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 19 May 2016 13:18:12 +0000 (15:18 +0200)]
kirkwood: move ubi/ubifs options to the image makefile
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Wed, 18 May 2016 13:48:57 +0000 (15:48 +0200)]
lantiq: move ubi/ubifs options to the image makefile
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Dirk Neukirchen [Thu, 19 May 2016 11:38:35 +0000 (13:38 +0200)]
perf: disable libcrypto dependency
upstream change:
8ee4646038e47d065d35703e3e343136c4cd42aa
fixes dependency w. Kernel 4.6
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Kevin Darbyshire-Bryant [Thu, 5 May 2016 11:25:53 +0000 (12:25 +0100)]
dnsmasq: sysupgrade hook to conditionally preserve dnsmasq.time
conditionally save dnsmasq.time across sysupgrade
dnsmasq uses /etc/dnsmasq.time as record of the last known good
system time to aid its validation of dnssec timestamps. dnsmasq
updates the timestamp on process start/stop once it considers the system
time as valid. The timestamp file should be preserved across system
upgrade but should not be included as part of normal configuration
backups to prevent restores corrupting the current timestamp.
Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
Kevin Darbyshire-Bryant [Thu, 5 May 2016 11:34:49 +0000 (12:34 +0100)]
base-files: sysfixtime exclude dnsmasq.time
dnsmasq maintains dnsmasq.time across reboots and uses it as a means of
determining if current time is good enough to validate dnssec time
stamps. By including /etc/dnsmasq.time as a time source for sysfixtime,
the mechanism was effectively defeated because time was set to the
last time that dnsmasq considered current even though that time is in
the past. Since that time is out of date, dns(sec) resolution would
fail thus defeating any ntp based mechanisms for setting the clock
correctly.
In theory the process is defeated by any files in /etc that are newer
than /etc/dnsmasq.time however dnsmasq now updates the file's timestamp
on process TERM so hopefully /etc/dnsmasq.time is the latest file
timestamp in /etc as part of LEDE shutdown/reboot.
Either way, including /etc/dnsmasq.time as a time source for
sysfixtime is not helpful.
Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
Jo-Philipp Wich [Thu, 19 May 2016 08:25:11 +0000 (10:25 +0200)]
Revert "dnsmasq: sysupgrade hook to conditionally preserve dnsmasq.time"
This reverts commit
d830cb08826dc593406d9003d061016061b6c3c4.
Reverting this commit due to a missing Signed-off-by.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Thu, 19 May 2016 08:24:32 +0000 (10:24 +0200)]
Revert "base-files: sysfixtime exclude dnsmasq.time"
This reverts commit
382779e009af7c1c688fbd98adf71fb19ce66254.
Reverting this commit due to a missing Signed-off-by.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Daniel Dickinson [Tue, 26 Apr 2016 08:50:27 +0000 (04:50 -0400)]
imagebuilder: Fix sorting package list breaks opkg dependency handling for provides
When imagebuild sorts package lists it breaks opkg's ability to realize
that a providers for a Provides has already been installed, when the sort
results in the provider being later in the list of packages that a package
which depends on a Provides (and hence the provider is not yet installed
for opkg to realize the provider was available doesn't not handle the case
of a package that is to be installed satisfying a dependency, only one that
is already installed (or which it schedules to be installed, which in the
absence of an installed provider is whichever provider happens to be the
default)
Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>
Kevin Darbyshire-Bryant [Thu, 5 May 2016 11:25:53 +0000 (12:25 +0100)]
dnsmasq: sysupgrade hook to conditionally preserve dnsmasq.time
conditionally save dnsmasq.time across sysupgrade
dnsmasq uses /etc/dnsmasq.time as record of the last known good
system time to aid its validation of dnssec timestamps. dnsmasq
updates the timestamp on process start/stop once it considers the system
time as valid. The timestamp file should be preserved across system
upgrade but should not be included as part of normal configuration
backups to prevent restores corrupting the current timestamp.
Kevin Darbyshire-Bryant [Thu, 5 May 2016 11:34:49 +0000 (12:34 +0100)]
base-files: sysfixtime exclude dnsmasq.time
dnsmasq maintains dnsmasq.time across reboots and uses it as a means of
determining if current time is good enough to validate dnssec time
stamps. By including /etc/dnsmasq.time as a time source for sysfixtime,
the mechanism was effectively defeated because time was set to the
last time that dnsmasq considered current even though that time is in
the past. Since that time is out of date, dns(sec) resolution would
fail thus defeating any ntp based mechanisms for setting the clock
correctly.
In theory the process is defeated by any files in /etc that are newer
than /etc/dnsmasq.time however dnsmasq now updates the file's timestamp
on process TERM so hopefully /etc/dnsmasq.time is the latest file
timestamp in /etc as part of LEDE shutdown/reboot.
Either way, including /etc/dnsmasq.time as a time source for
sysfixtime is not helpful.
Daniel Dickinson [Mon, 2 May 2016 02:40:09 +0000 (22:40 -0400)]
script/symlink-tree.sh: Fix missing config dir
Apparently symlink-tree has not been used in quite some time as it
fails to symlink the always required config dir
Also, if we pulled from git but .git is missing we get
many error messages on the symlinked tree without this
patch (which symlinks .git, if present)
Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>