netdiscover: fix compilation with GCC 10

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #13066 from neheb/hfs2

hfsprogs: fix compilation without sys/cdefs

hfsprogs: fix compilation without sys/cdefs

sys/cdefs.h does not come with musl. It's also deprecated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #13060 from wodu/linuxptp_maint

linuxptp: Update to version 3.0

Merge pull request #13059 from aparcar/which

treewide: replace `which` with `command -v`

openvswitch: bump to version 2.13.1

The two backported patches are included in 2.13.1

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

linuxptp: Update to version 3.0

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

treewide: replace `which` with `command -v`

Fix shellcheck SC2230
> which is non-standard. Use builtin 'command -v' instead.

Once applied to everything concerning OpenWrt we can disable the busybox
feature `which` and save 3.8kB.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #13058 from guidosarducci/master-fix-gcc10-netperf

netperf: fix compilation with GCC10

netperf: fix compilation with GCC10

GCC10 defaults to -fno-common, which breaks compilation when there are
multiple definitions of implicit "extern" variables. Remove the extra
definitions.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>

Merge pull request #13055 from micmac1/apa2446

apache: security bump to 2.4.46

apache: security bump to 2.4.46

From CHANGES_2.4:

SECURITY: CVE-2020-11984 (cve.mitre.org)
  mod_proxy_uwsgi: Malicious request may result in information disclosure
  or RCE of existing file on the server running under a malicious process
  environment. [Yann Ylavic]

SECURITY: CVE-2020-11993 (cve.mitre.org)
  mod_http2: when throttling connection requests, log statements
  where possibly made that result in concurrent, unsafe use of
  a memory pool. [Stefan Eissing]

SECURITY:
  mod_http2: a specially crafted value for the 'Cache-Digest' header
  request would result in a crash when the server actually tries
  to HTTP/2 PUSH a resource afterwards.
  [Stefan Eissing, Eric Covener, Christophe Jaillet]

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #13028 from neheb/ldnsss

ldns: fix compilation without deprecated APIs

Merge pull request #13025 from neheb/ulff

libulfius: update to 2.6.8

Merge pull request #13029 from neheb/boinc

boinc: fix compilation without deprecated OpenSSL APIs

libulfius: update to 2.6.8

Upstream fixed the libmicrohttp issue. Removed local patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liborcania: update to 2.1.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #13051 from ptpt52/miniupnpd-check-running

net/miniupnpd: check by /etc/init.d/miniupnpd running

net/miniupnpd: check by /etc/init.d/miniupnpd running

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>

Merge pull request #13049 from PolynomialDivision/dawn/bump_version

dawn: bump version

dawn: bump version

test_storage: fix compilation with musl 1.2.0
datastorage/test: improve scalability and performance
datastorage: fixed use of wrong client search
general: add memory auditing
memory auditing: bug fixes to memory auditing and hearing map
datastorage: fixes to linked list handling
tcpsocket: fix read callback function and arbitrary memory allocations
tcpsocket: leave loop if we read 0 byte

Furthermore, you can now dump the memory usage by sending a SIGHUP to
dawn process.

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #13045 from EricLuehrsen/unbound_20200806

unbound: follow resolv.conf.auto to new location

unbound: follow resolv.conf.auto to new location

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

Merge pull request #13039 from peter-stadler/django-rest-framework

django-restframework: update to version 3.11.1

Merge pull request #13042 from ja-pa/libssh-security-fix

libssh: patch security issue

libssh: patch security issue

Fixes:
CVE-2020-16135

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #13020 from rittere/master

tayga: Added 64:ff9b:1::/48 as well-known prefix for NAT64 (RFC 8215)

Merge pull request #12811 from TDT-AG/pr/20200714-ntpd

ntpd: add config include support

tayga: PKG_RELEASE increased

Signed-off-by: Eike Ritter <git@rittere.co.uk>

Merge pull request #12976 from pprindeville/update-xtables-addons-3.10

xtables-addons: update for 3.10

Merge pull request #13031 from neheb/erl

erlang: fix compilation without deprecated OpenSSL APIs

Merge pull request #13035 from ja-pa/python3-maxminddb-2.0.2

python3-maxminddb: update to version 2.0.2

Merge pull request #13033 from commodo/pynacl-fix

python-pynacl: fix build with new libsodium patch

Merge pull request #13032 from neheb/freer

freeradius3: fix compilation without deprecated OpenSSL APIs

Merge pull request #13026 from neheb/yarr

yara: fix compilation without deprecated OpenSSL APIs

Merge pull request #12549 from neheb/extr

libextractor: remove ffmpeg plugin

Merge pull request #13027 from neheb/ina

inadyn: update to 2.7

django-restframework: update to version 3.11.1

update to newest version.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

Merge pull request #13024 from neheb/mottion

motion: fix old libmicrohttpd usage

net/pagekitec: Update to v0.91.200718

This fixes misleading errors in the status file, and increases buffer
sizes to match the python implementation.

Signed-off-by: Karl Palsson <karlp@etactica.com>

Merge pull request #13036 from TDT-AG/pr/20200806-acme

acme: fix alignment space vs tabs

acme: fix alignment space vs tabs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

python3-maxminddb: update to version 2.0.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #13001 from neheb/sco

scons: update to 4.0.1

scons: update to 4.0.1

Cleaned up Makefile to standards.

Replaced HIDDEN with BUILDONLY. It's more descriptive.

Added PKG_HOST_ONLY. This is a host only package.

Added HOST_BUILD_PARALLEL.

Added URL for uscan.

Added patch to fix library searching.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #11116 from ja-pa/ooni

ooniprobe: new packages

python-pynacl: fix build with new libsodium patch

Fixes https://github.com/openwrt/packages/issues/13016
Patch [1] broke compilation for python-pynacl.

The fix is to patch PyNaCl to consider that
PYNACL_HAS_CRYPTO_SCALARMULT_ED25519 is always available.

[1] https://github.com/openwrt/packages/commit/3ef28a4ab0cb60877c4ec68f5ba8c276021a1ab6

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

freeradius3: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

erlang: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

boinc: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ldns: fix compilation without deprecated APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

inadyn: update to 2.7

Remove pic hack.

Fix license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

yara: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

motion: fix old libmicrohttpd usage

Doesn't seem to be needed for this package but it does fix several
warnings.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #13021 from stangri/master-simple-adblock

simple-adblock: README and config update

xtables-addons: update for 3.10

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

simple-adblock: README and config update

Signed-off-by: Stan Grishin <stangri@melmac.net>

ooniprobe: add new package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

tayga: Added 64:ff9b:1::/48 as well-known prefix for NAT64 (RFC 8215)

Signed-off-by: Eike Ritter <git@rittere.co.uk>

gnunet-fuse: update to version 0.13.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #13015 from neheb/sms2

smstools3: fix compilation with GCC10

Merge pull request #13018 from TDT-AG/pr/20200804-ttyd

ttyd: add backport patch for ssl issue on firefox

ttyd: add backport patch for ssl issue on firefox

If ttyd is configured to ssl, you will get the following message in the
log `refuse to serve WS client for illegal ws path`. Upstream a patch
has already been applied which fixes this.

Since there is no newer version than 1.6.1, this fix is backported as a
patch. And could be removed if a new version of ttyd is available.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #13011 from TDT-AG/pr/20200803-ttyd

ttyd: fix debug config option

shadowsocks-libev: note the deprecation of ss_server.bind_address

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

smstools3: fix compilation with GCC10

GCC10 defaults to -fno-common , which breaks compilation as there are
multiple variables defined outside of the header file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libsodium: add autoreconf

The patch, while it works, requires autoreconf. Added.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12983 from peter-stadler/patch-2

nginx-util: fix dependency

Merge pull request #12998 from neheb/nloh2

nlohmannjson: build with meson

Merge pull request #12996 from neheb/exfa

exfatprogs: update to 1.0.4

Merge pull request #13008 from commodo/python-batch1

python-cffi,numpy,python-asn1crypto: bump package versions

Merge pull request #13014 from tru7/libfmt

libfmt: bump to version 7.0.2

libfmt: bump to version 7.0.2

Signed-off-by: Othmar Truniger <github@truniger.ch>

ttyd: fix debug config option

Append missing debug option value.
If this is not append and the debug option is selected, then we get the
following error output on ttyd start.

> ttyd: missing start command

To fix this add missing debug option value.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

nginx-util: fix dependency

Add DEPENDS since EXTRA_DEPENDS is not used by `make menuconfig`.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

numpy: bump to version 1.19.1

Recommended Cython version is 0.29.21

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-asn1crypto: bump to version 1.4.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-cffi: bump to version 1.14.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #13004 from commodo/netatalk-fix-clang

netatalk: fix compile error in mac os

netatalk: fix compile error in mac os

fix compile error in mac os when dtrace installed.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

Merge pull request #12997 from neheb/pyt

python3: fix host compilation with clang

Merge pull request #13002 from liudf0716/apfree-wifidog

apfree-wifidog: fix bug of cert generating condition and enable misuse

shadowsocks-libev: support ss-server option local_{ipv4,ipv6}_address

At the moment ss-server seems to be the only component using these two
options.  It also accepts "local_address" of either ip4 or ip6 address,
but the meaning is different from that of ss-local, ss-tunnel etc.
where it is for listen bind

With this commit, we start deprecation process of uci option
"bind_address".  The name was replaced with "local_addr" in upstream
project commit 5fa98a66 ("Fix #1911") and available as json config
option "local_address".  This upstream change was released in 3.2.0

Link: https://github.com/shadowsocks/shadowsocks-libev/commit/4a42da641b6e0039497998614e84c94205939c24
Link: https://github.com/openwrt/packages/issues/12931
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

apfree-wifidog: fix bug of cert generating condition and enable misuse

Signed-off-by: Dengfeng Liu <dfliuc@isoftstone.com>

glib2: fix full language build

Needs -lintl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libextractor: make ffmpeg plugin depend on BUILD_PATENTED

FFMpeg has patented functionality. Make libextractor respect
BUILD_PATENTED.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nlohmannjson: build with meson

Just blindly copying the include files is not quite correct. The build
system merges all of them into one file.

A pkgconfig file also gets generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vala: fix compilation under clang

Used under macOS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python3: fix host compilation with clang

Matched rpath parameter with Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

softethervpn: fix compilation with clang

Needs , not = for the rpath parameter.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ola: fix compilation with clang

Needs , not = for the rpath parameter.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

exfatprogs: update to 1.0.4

Faster fsck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

graphicsmagick: fix old CONFIG_DEPEND

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12899 from aaronjg/openwrtize-openfortivpn

openfortivpn: use a more 'OpenWRT' paradigm throughout the code

Merge pull request #12904 from odmdas/odmdas-freeradius3-Makefile

freeradius3: add missing conffiles to Makefile

Merge pull request #12994 from dangowrt/libsodium-build-with-scalarmult_ed25519_ref10

libsodium: compile with scalarmult_ed25519_ref10

Merge pull request #12984 from gladiac1337/haproxy-2.2.2

haproxy: Update HAProxy to v2.2.2

libextractor: update to 1.10

Made two compile options dependent on whether or not the plugins are
selected.

Removed autoreconf as autools files are not being patched.

Added PKG_BUILD_PARALLEL for faster compilation.

Added patch to fix compilation with libjpeg-turbo. libjpeg-turbo can be
fixed to include this API, but it's probably better for size reasons to
patch libextractor instead.

Added -liconv since it seems to be needed for some reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libsodium: compile with scalarmult_ed25519_ref10

scalarmult_ed25519_ref10 was excluded from 'minimal' variant (which is
what we are building) by upstream commit f5076db5f8ef27.
Revert that to allow downstream projects to make use of it (eg. gnunet)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

freeradius3: add missing conffiles to Makefile

Config files
/etc/freeradius3/policy.d/accounting
/etc/freeradius3/policy.d/filter
/etc/freeradius3/proxy.conf
/etc/freeradius3/sites-available/default
and link
/etc/freeradius3/sites-enabled/default
are in the freeradius3 package and are mentioned in the main config file
/etc/freeradius3/radiusd.conf
Thus, they must be explicitly specified in the Makefile.

File
/etc/freeradius3/sites/default
is not included in the package, is not created during installation,
is not mentioned in the main config file and should therefore be excluded
from the Makefile.

Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>