4 years agoar71xx: TL-WR1043N v4/v5: add orange WAN LED support
Tim Thorpe [Thu, 30 Nov 2017 08:32:04 +0000 (02:32 -0600)]
ar71xx: TL-WR1043N v4/v5: add orange WAN LED support

Add missing definitions for the orange WAN LED on the TL-WR1043N(D) v4 and
v5. Minor format correction on a constant for consistency.

Signed-off-by: Tim Thorpe <>
4 years agoar71xx: generate BR region-code factory image for TP-Link TL-WR940N
Henryk Heisig [Thu, 7 Dec 2017 20:30:24 +0000 (21:30 +0100)]
ar71xx: generate BR region-code factory image for TP-Link TL-WR940N

Signed-off-by: Henryk Heisig <>
4 years agofirmware-utils: mktplinkfw: add support for BR region code
Henryk Heisig [Thu, 7 Dec 2017 20:28:28 +0000 (21:28 +0100)]
firmware-utils: mktplinkfw: add support for BR region code

Signed-off-by: Henryk Heisig <>
4 years agobusybox: enable find -newer needed for shorewall firewall, no size increase on binary
Lucian Cristian [Sat, 9 Dec 2017 17:11:28 +0000 (19:11 +0200)]
busybox: enable find -newer needed for shorewall firewall, no size increase on binary

Signed-off-by: Lucian Cristian <>
4 years agofirmware-utils: mktplinkfw: fix JFFS2 EOF markers
Sergey Ryazanov [Tue, 10 Oct 2017 22:07:08 +0000 (01:07 +0300)]
firmware-utils: mktplinkfw: fix JFFS2 EOF markers

mktplinkfw/mktplinkfw2 utilities put JFFS2 EOF market only at 64KB
boundary, this could lead to current device configuration lost during
the sysupgrade on a device, which is equpped with flash with the 4KB
erase block size (e.g. TP-Link Archer C20).

This happens when 64KB and 4KB alignments do not match, so the JFFS2
data is written not exactly at the partition beginnig and startup
scripts can not find the JFFS2 during the first boot just after the

Fix this by placing additional JFFS2 EOF marker at a 4KB boundary. Also
keep the marker at 64KB intact, so the utilities will produce images
suitable for devices with both 4KB and 64KB erase blocks.

Fixes: 29a2c2ea80441895a2ffe100d854d2b26d5fa606 (add ability to put
jffs2 eof marker into the image)

Signed-off-by: Sergey Ryazanov <>
4 years agoar71xx: Fix switch port numbering on MIkrotik RB951Ui-2nD and RB493G
João Chaínho [Sat, 14 Oct 2017 19:34:05 +0000 (20:34 +0100)]
ar71xx: Fix switch port numbering on MIkrotik RB951Ui-2nD and RB493G

This patch fixes the switch port numbering on Mikrotik RB951Ui-2nD (hAP).
Also fixes the switch port numbering shown on LuCI for Mikrotik RB493G.

Signed-off-by: João Chaínho <>
4 years agobase-files: fix sysupgrade -b/-l when -c is used
Luiz Angelo Daros de Luca [Tue, 21 Nov 2017 03:45:05 +0000 (01:45 -0200)]
base-files: fix sysupgrade -b/-l when -c is used

Since /overlay/upper appeared, -b ignored -c silently (cause it was
still checking for /overlay/etc). Now, if /overlay/upper is absent,
sysupgrade -c will fail and exit verbosely.

Fix -l to consider -c (it never did).

Clean up to always use /overlay/upper/xxx instead of still checking
for /overlay/xxx.

Signed-off-by: Luiz Angelo Daros de Luca <>
4 years agoapm821xx: use x86's upgrade scripts for MyBook Live
Christian Lamparter [Fri, 1 Dec 2017 21:41:11 +0000 (22:41 +0100)]
apm821xx: use x86's upgrade scripts for MyBook Live

 - preserves existing partition layout. On the hard-drive.
   Only the boot and rootfs partition will be overwritten.

 - The upgrade process takes much longer to run.
   from 2-3 seconds to 15-25 seconds.

Please note that sysupgrade will refuse to upgrade, if the existing
installation has an incompatible partition layout. Future changes
to the bootfs and/or rootfs partition size will likely cause breakage
to the sysupgrade procedure. In these cases, the ext4-rootfs.img.gz
has to be written manually onto the disk. Please don't forget to backup
your configuration in this cases.

Note2: This patch requires
"base-files: upgrade: make get_partitions() endian agnostic"

Note3: If your current installation does not host the two
changes, sysupgrading will wipe the existing partition
layout. Don't forget to backup your data!

Signed-off-by: Christian Lamparter <>
4 years agoe2fsprogs: Update to 1.43.7
Rosen Penev [Sat, 2 Dec 2017 22:09:48 +0000 (14:09 -0800)]
e2fsprogs: Update to 1.43.7

Compiled and tested on ramips with no noticeable problems.

Signed-off-by: Rosen Penev <>
4 years agoapm821xx: MyBook Live convert to DT PHY
Christian Lamparter [Tue, 28 Nov 2017 21:51:09 +0000 (22:51 +0100)]
apm821xx: MyBook Live convert to DT PHY

Changes MyBook Live to use DT PHY probing and the broadcom phy driver.

Signed-off-by: Christian Lamparter <>
4 years agoapm821xx: convert to dt based diag LED script
Christian Lamparter [Tue, 28 Nov 2017 21:51:07 +0000 (22:51 +0100)]
apm821xx: convert to dt based diag LED script

Please note that users with a Netgear WNDR4700
will need to update the device-tree partition

For instructions, please refere to commit 49856a4bb581
("apm821xx: make it possible to update the dtb partition on the WNDR4700")

Signed-off-by: Christian Lamparter <>
4 years agobase-files: unify get_dt_led helper function
Christian Lamparter [Tue, 28 Nov 2017 21:51:06 +0000 (22:51 +0100)]
base-files: unify get_dt_led helper function

Lantiq and IPQ806X (which includes IPQ40XX) both define the
same custom function {ipq806x|lantiq}_get_dt_led.

This patch moves the function into the base-file package at
lib/functions/ to make it more accessible for other
targets as well.

Cc: Mathias Kresin <>
Cc: John Crispin <>
Cc: Hannu Nyman <>
Signed-off-by: Christian Lamparter <>
4 years agobrcm63xx: fix an OOPS when accessing the basemode register on 6368
Jonas Gorski [Wed, 13 Dec 2017 15:36:20 +0000 (16:36 +0100)]
brcm63xx: fix an OOPS when accessing the basemode register on 6368

The bcm6368 pinctrl driver passed the wrong variable to
devm_regmap_field_alloc, causing it to blow up when later trying to
access the field.

Fixes #1211.

Signed-off-by: Jonas Gorski <>
4 years agobase-files: make including distfeeds.conf optional
Jonas Gorski [Wed, 13 Dec 2017 13:41:28 +0000 (14:41 +0100)]
base-files: make including distfeeds.conf optional

To not clutter the system when building an opkg free image, generate the
distfeeds.conf only if CLEAN_IPKG is unset.

Since opkg is now a shared package, we can't rely on PACKAGE_opkg, but
since opkg is not reasonably usable without the status information, we
can tie the distfeeds.conf to it.

Signed-off-by: Jonas Gorski <>
4 years agobase-files: create /etc/opkg before generating distfeeds.conf
Jonas Gorski [Wed, 13 Dec 2017 13:30:30 +0000 (14:30 +0100)]
base-files: create /etc/opkg before generating distfeeds.conf

Ensure /etc/opkg exists before trying to write there. This fixes a build
failure if SIGNED_PACKAGES is disabled.

Reported-by: Matthias Schiffer <>
Signed-off-by: Jonas Gorski <>
4 years agopackage: move distfeeds.conf from opkg to base-files
Jonas Gorski [Tue, 12 Dec 2017 10:19:07 +0000 (11:19 +0100)]
package: move distfeeds.conf from opkg to base-files

All the relevant options used for distfeeds.conf are part of base-files,
so it makes more sense to move the file there as well.

This has the added benefit that the we can share the opkg package again,
reducing the amount of target specific packages.

Acked-by: Jo-Philipp Wich <>
Signed-off-by: Jonas Gorski <>
4 years agoar71xx: fix lzma-loader build with glibc
Jonas Gorski [Wed, 13 Dec 2017 10:12:11 +0000 (11:12 +0100)]
ar71xx: fix lzma-loader build with glibc

For an unknown reason gcc tries to link in crti.o when building with a
glibc toolchain (this does not happen with other targets). Prevent this
by telling gcc explicitly to not do that.

Fixes the following build error:

/home/jonas/git/lede/staging_dir/toolchain-mips_24kc_gcc-5.5.0_glibc/lib/gcc/mips-openwrt-linux-gnu/5.5.0/../../../../mips-openwrt-linux-gnu/lib/crti.o: In function `_init':
(.init+0x18): relocation truncated to fit: R_MIPS_GOT16 against `__gmon_start__'
/home/jonas/git/lede/staging_dir/toolchain-mips_24kc_gcc-5.5.0_glibc/lib/gcc/mips-openwrt-linux-gnu/5.5.0/../../../../mips-openwrt-linux-gnu/lib/crti.o: In function `_init':
(.init+0x28): relocation truncated to fit: R_MIPS_CALL16 against `__gmon_start__'
collect2: error: ld returned 1 exit status

Signed-off-by: Jonas Gorski <>
4 years agowireguard: bump to 20171211
Kevin Darbyshire-Bryant [Tue, 12 Dec 2017 19:34:17 +0000 (19:34 +0000)]
wireguard: bump to 20171211

Bump to latest WireGuard snapshot release:

44f8e4d version: bump snapshot
bbe2f94 chacha20poly1305: wire up avx512vl for skylake-x
679e53a chacha20: avx512vl implementation
10b1232 poly1305: fix avx512f alignment bug
5fce163 chacha20poly1305: cleaner generic code
63a0031 blake2s-x86_64: fix spacing
d2e13a8 global: add SPDX tags to all files
d94f3dc chacha20-arm: fix with clang -fno-integrated-as.
3004f6b poly1305: update x86-64 kernel to AVX512F only
d452d86 tools: no need to put this on the stack
0ff098f tools: remove undocumented unused syntax
b1aa43c contrib: keygen-html for generating keys in the browser
e35e45a kernel-tree: jury rig is the more common spelling
210845c netlink: rename symbol to avoid clashes
fcf568e device: clear last handshake timer on ifdown
d698467 compat: fix 3.10 backport
5342867 device: do not clear keys during sleep on Android
88624d4 curve25519: explictly depend on AS_AVX
c45ed55 compat: support RAP in assembly
7f29cf9 curve25519: modularize dispatch

Refresh patches.

Compile-test-for: ar71xx
Run-tested-on: ar71xx Archer C7 v2

Signed-off-by: Kevin Darbyshire-Bryant <>
4 years agodropbear: disable MD5 HMAC and switch to sha1 fingerprints
Martin Schiller [Wed, 22 Nov 2017 12:39:51 +0000 (13:39 +0100)]
dropbear: disable MD5 HMAC and switch to sha1 fingerprints

As MD5 is known weak for many years and more and more
penetration test tools complain about enabled MD5 HMAC
I think it's time to drop it.

By disabling the MD5 HMAC support dropbear  will also
automatically use SHA1 for fingerprints.
This shouldn't be a problem too.

Signed-off-by: Martin Schiller <>
4 years agotreewide: add only one device when appending to TARGET_DEVICES
Luis Araneda [Sun, 10 Dec 2017 22:45:20 +0000 (19:45 -0300)]
treewide: add only one device when appending to TARGET_DEVICES

This will avoid some conflicts when doing a git rebase or merge,
specially when adding support to a new device.

Signed-off-by: Luis Araneda <>
[drop brcm47xx changes which rename the images]
Signed-off-by: Mathias Kresin <>
4 years export TMPDIR
Jo-Philipp Wich [Tue, 12 Dec 2017 15:28:04 +0000 (16:28 +0100)] export TMPDIR

Set TMPDIR to the same value as the existing TMP_DIR variable in order to
let gcc and various other utilities use the local temporary directory
instead of the system-wide one.

Signed-off-by: Jo-Philipp Wich <>
4 years agowolfssl: update to 3.12.2 (1 CVE)
Jo-Philipp Wich [Tue, 12 Dec 2017 16:30:34 +0000 (17:30 +0100)]
wolfssl: update to 3.12.2 (1 CVE)

Update wolfssl to the latest release v3.12.2 and backport an upstream
pending fix for CVE-2017-13099 ("ROBOT vulnerability").


Signed-off-by: Jo-Philipp Wich <>
4 years agobuild: allow PKG_PREPARED_DEPENDS and PKG_CONFIG_DEPENDS to be changed after includin...
Felix Fietkau [Tue, 12 Dec 2017 11:20:56 +0000 (12:20 +0100)]
build: allow PKG_PREPARED_DEPENDS and PKG_CONFIG_DEPENDS to be changed after including

Reverts commit a9c96ef0ac7ac99e4928f5312f3d0d1252c98328 and replaces it
with a different approach

Signed-off-by: Felix Fietkau <>
4 years agomwlwifi: update to version / 2017-11-29
Kabuli Chana [Wed, 29 Nov 2017 02:46:32 +0000 (19:46 -0700)]
mwlwifi: update to version / 2017-11-29

Improves stability on WRT3200ACM

Signed-off-by: Kabuli Chana <>
4 years agoar71xx: fix board detection with newer RouterBOOT versions
Gabor Juhos [Fri, 8 Dec 2017 22:31:55 +0000 (23:31 +0100)]
ar71xx: fix board detection with newer RouterBOOT versions

Recent RouterBOOT version (at least version 3.41 on RB911G-5HPacD)
use "Board=" kernel parameter instead of "board=" to pass the board
name to the kernel. Due to this change the board detection code is
not working on the devices shipped with the new RouterBOOT version.
Because the kernel is unable to identify these boards they become
unusable despite that they are supported by the current code.

Update the prom_init code to convert the 'Board' kernel parameter to
'board'. After this change, the board detection works also with the
new RouterBOOT versions.

Signed-off-by: Gabor Juhos <>
4 years agobrcm47xx: remove versions from linksys-e1000 target
Moritz Warning [Sat, 9 Dec 2017 01:57:51 +0000 (02:57 +0100)]
brcm47xx: remove versions from linksys-e1000 target

The target name does not need to included a revision
if all revisions are supported.
This target supports all revisions (v1, v2, v2.1).

Signed-off-by: Moritz Warning <>
[Keep the version numbers in the device title, it doesn't harm]
Signed-off-by: Mathias Kresin <>
4 years agobrcm47xx: use proper region code in image name
Moritz Warning [Sat, 9 Dec 2017 01:44:43 +0000 (02:44 +0100)]
brcm47xx: use proper region code in image name

Replace 'north-america' by 'na' and remove 'other-regions' in image
files for Netgear WGR614 v10.

Signed-off-by: Moritz Warning <>
4 years agolantiq: dgn3500 drop worldwide suffix
Mathias Kresin [Mon, 11 Dec 2017 09:27:17 +0000 (10:27 +0100)]
lantiq: dgn3500 drop worldwide suffix

Remove the WW suffix, everything without a region suffix is world wide

While at it, normalise the image filenames by using only lower case

Signed-off-by: Mathias Kresin <>
4 years agokernel: fix spelling in CONFIG_DEVTMPFS help text
Sascha Paunovic [Wed, 29 Nov 2017 18:53:33 +0000 (19:53 +0100)]
kernel: fix spelling in CONFIG_DEVTMPFS help text

Change "ti" to "to", as that's the correct spelling.

Signed-off-by: Sascha Paunovic <>
4 years agolantiq: nand: drop ubifs images
Mathias Kresin [Thu, 19 Oct 2017 21:11:59 +0000 (23:11 +0200)]
lantiq: nand: drop ubifs images

Users are confused which image type they should use and there are more
drawbacks than adavantages in using a r/w ubifs rootfs in constrast to
a read-only squashfs rootfs like:

 - less available free flash space due to better compression of squashfs
 - no support for factory reset due to r/w filesystem
 - possibility to break failsafe due to r/w filesystem

Therefore, drop support for r/w ubifs rootfs images.

Signed-off-by: Mathias Kresin <>
4 years agodnsmasq: add DHCP build switch support in full variant
Hans Dedecker [Sun, 10 Dec 2017 15:25:18 +0000 (16:25 +0100)]
dnsmasq: add DHCP build switch support in full variant

Add config option which allows to enable/disable DHCP support at compile
time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support
implies having DHCP support.

Signed-off-by: Hans Dedecker <>
4 years agobusybox: fix glibc libresolv dependency for LEDE nslook applet
Jo-Philipp Wich [Sun, 10 Dec 2017 13:26:19 +0000 (14:26 +0100)]
busybox: fix glibc libresolv dependency for LEDE nslook applet

Fixes d1ba483472 merge: busybox: update CONFIG_NSLOOKUP in busybox config.
Fixes FS#1212.

Signed-off-by: Jo-Philipp Wich <>
4 years agobase-files: remove remaining uses of %N, and drop VERSION_NICK config symbol
Matthias Schiffer [Sat, 9 Dec 2017 22:25:21 +0000 (23:25 +0100)]
base-files: remove remaining uses of %N, and drop VERSION_NICK config symbol

Fixes d23e1e1e1a "merge: properly remove %n / %N references"

Signed-off-by: Matthias Schiffer <>
4 years agomerge: properly remove %n / %N references
Jo-Philipp Wich [Sat, 9 Dec 2017 15:01:14 +0000 (16:01 +0100)]
merge: properly remove %n / %N references

- use %d instead of %n for opkg feed identifiers
- remove %n / %N references from version files

Fixes bf5cef47b3 merge: release/banner: drop release name and update banner.
Fixes FS#1213.

Signed-off-by: Jo-Philipp Wich <>
4 years agoramips: fix a typo in 02_network
Pavel Kubelun [Fri, 8 Dec 2017 19:36:06 +0000 (22:36 +0300)]
ramips: fix a typo in 02_network

The typo in network defaults script in ramips target that prevents
defaults to initialize.

Signed-off-by: Pavel Kubelun <>
4 years agonetifd: always send DHCPv4 hostname
Mathias Kresin [Fri, 8 Dec 2017 08:35:26 +0000 (09:35 +0100)]
netifd: always send DHCPv4 hostname

udhcpc doesn't send a hostname by default. Use the system hostname if
nothing else is specified, to always send a hostname.

It syncs the behaviour to odhcpc, which always sends a hostname.

Signed-off-by: Mathias Kresin <>
Acked-by: Stijn Tintel <>
Acked-by: Hans Dedecker <>
4 years agoprocd: nand: remove nand_board_name platform override
Mathias Kresin [Fri, 7 Apr 2017 16:06:17 +0000 (18:06 +0200)]
procd: nand: remove nand_board_name platform override

It isn't uses anymore by any target.

Signed-off-by: Mathias Kresin <>
4 years agoar71xx: remove nand_board_name platform override
Mathias Kresin [Fri, 7 Apr 2017 16:03:50 +0000 (18:03 +0200)]
ar71xx: remove nand_board_name platform override

The boardname isn't used any longer to find the subdirectory in the
sysupgrade tar archive, which makes this override useless.

Signed-off-by: Mathias Kresin <>
4 years agoprocd: nand: dont rely on boardname in nand_upgrade_tar
Mathias Kresin [Fri, 7 Apr 2017 06:39:59 +0000 (08:39 +0200)]
procd: nand: dont rely on boardname in nand_upgrade_tar

Kernel and rootfs in a subdirectory matching the userspace boardname,
was intended to use a single sysupgrade-tar archive for multiple boards
with different kernel/rootfs images. This feature was never used.

Use the first found directory in the tar archive instead of relying on
a directory named according to the userspace boardname.

It allows to change the boardname without adding another compatibility
layer - using the nand_board_name() function - for (sub)targets using
the metadata based image validation in favour to

Signed-off-by: Mathias Kresin <>
4 years agokernel: MIPS compile out no-op DMA mapping ops where possible
Felix Fietkau [Tue, 5 Dec 2017 12:01:40 +0000 (13:01 +0100)]
kernel: MIPS compile out no-op DMA mapping ops where possible

Slightly improves networking throughput on some devices

Signed-off-by: Felix Fietkau <>
4 years agoag71xx: Reduce NAPI weight to 32.
Rosen Penev [Mon, 4 Dec 2017 19:40:22 +0000 (11:40 -0800)]
ag71xx: Reduce NAPI weight to 32.

Qualcomm claims this reduces cache misses. Original commit message below:

From: Ben Menchaca <>
Date: Tue, 11 Jun 2013 12:18:46 -0500
Subject: [ag71xx] reduce NAPI weight

In an attempt to increase our cache warmth, we are decreasing NAPI.
This increases the warmth of the reused SKBs.

Signed-off-by: Ben Menchaca <>
Signed-off-by: Rosen Penev <>
4 years agoRevert "ag71xx: Switch from driver to kernel macro for NAPI_WEIGHT."
Rosen Penev [Mon, 4 Dec 2017 19:40:21 +0000 (11:40 -0800)]
Revert "ag71xx: Switch from driver to kernel macro for NAPI_WEIGHT."

The motivation for this was misguided. It turns out tuning the NAPI weight could be useful for testing purposes. Therefore reverting.

Signed-off-by: Rosen Penev <>
4 years agotoolchain: musl: update to current HEAD
Christian Lamparter [Sun, 19 Nov 2017 16:19:23 +0000 (17:19 +0100)]
toolchain: musl: update to current HEAD


72656157 fix fgetwc when decoding a character that crosses buffer boundary
a223dbd2 add reverse iconv mappings for JIS-based encodings
105eff9d generalize iconv framework for 8-bit codepages
a71b46cf fix malloc state corruption when ldso rejects loading a second libc
d060edf6 reformat cjk iconv tables to be diff-friendly, match tool output
c21051e9 prevent fork's errno from being clobbered by atfork handlers
a39f20bf add iso-2022-jp support (decoding only) to iconv
5b546faa add iconv framework for decoding stateful encodings
0df5b39a simplify/optimize iconv utf-8 case
9eb6dd51 handle ascii range individually in each iconv case
bff59d13 move iconv_close to its own translation unit
79f49eff refactor iconv conversion descriptor encoding/decoding
30fdda6c fix getaddrinfo error code for non-numeric service with AI_NUMERICSERV
67b29947 fix mismatched type of __pthread_tsd_run_dtors weak definition
13935337 s390x: use generic ioctl.h
4dc44ce8 microblaze: add statx syscall from linux v4.13
ffd048a0 aarch64: add extra_context struct from linux v4.13
6651ef1f add new tcp.h socket options from linux v4.13
14ced228 add new fcntl.h macros from linux v4.13
754f66af ioctl TIOCGPTPEER from linux v4.13
c35a8bf4 add SO_ getsockopt options from linux v4.13
5daaed6a s390x: add syscall number for s390_guarded_storage from linux v4.12
2dc6760f i386: add arch_prctl syscall number from linux v4.12
840d45be aarch64: add new HWCAP_* flags from linux v4.12
4c811227 add ARPHDR_VSOCKMON from linux v4.12
54f04d99 add new SO_ socket options from linux v4.12
9864f60e add statx syscall numbers from linux v4.11
c519658c add TCP_NLA_* enums from linux v4.11
ee3ae782 add TCP_FASTOPEN_CONNECT tcp socket option from linux v4.11
3eb82f73 add ETH_P_IBOE from linux v4.11
bd1560f6 update aarch64 hwcap.h for linux v4.11
cee73f0c add kexec_file_load syscall number on powerpc from linux v4.10
8f569557 add microblaze syscall numbers from linux v4.10
d8004030 add TFD_TIMER_CANCEL_ON_SET that timerfd.h was missing
f5638c22 add ETH_MIN_MTU and ETH_MAX_MTU from linux v4.10
01369691 add IP_RECVFRAGSIZE and IPV6_RECVFRAGSIZE from linux v4.10
5c596ed8 add SCM_TIMESTAMPING_OPT_STATS and related TCP_ enums from linux v4.10
6fc6ca1a adjust posix_spawn dup2 action behavior to match future requirements

Cc: Syrone Wong <>
Signed-off-by: Christian Lamparter <>
4 years agobase-files: upgrade: make get_partitions() endian agnostic
Christian Lamparter [Sun, 19 Nov 2017 16:19:21 +0000 (17:19 +0100)]
base-files: upgrade: make get_partitions() endian agnostic

This patch fixes two issues with the current get_partitions()

First: "Invalid partition table on $disk" will pop up on
legitimate images on big endian system.

This is because the little-endian representation of "55 AA" is
assumed in the context of little-endian architectures. On these
comparing it to the 16-bit word 0xAA55 does work as intented.
Whereas on big-endian systems, this would have to be 0x55AA.

This patch fixes the issue by replacing the integer conversion
and value match check with just a string comparision.

Second: The extraction of the type, start LBA and LBA num from
the partition table has the same endianness issue. This has been
fixed by using the new hex_le32_to_cpu() function. This function
will translate the stored little-endian data to the correct
byte-order if necessary.

Signed-off-by: Christian Lamparter <>
4 years agofirmware: ath10k-firmware: update QCA4019 firmware to 10.4-3.2.1-00058
Christian Lamparter [Sun, 19 Nov 2017 16:19:20 +0000 (17:19 +0100)]
firmware: ath10k-firmware: update QCA4019 firmware to 10.4-3.2.1-00058

This patch updates ath10k-firmware to use the
firmware-5.bin_10.4-3.2.1-00058 firmware for the QCA4019.

Cc: Hauke Mehrtens <>
Signed-off-by: Christian Lamparter <>
4 years agomerge: etc: update remaining files
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:57 +0000 (09:45 +0100)]
merge: etc: update remaining files

Signed-off-by: Zoltan HERPAI <>
4 years agomerge: uhttpd: update cert generation to match system defaults
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:56 +0000 (09:45 +0100)]
merge: uhttpd: update cert generation to match system defaults

Signed-off-by: Zoltan HERPAI <>
4 years agomerge: busybox: update CONFIG_NSLOOKUP in busybox config and respective patch
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:55 +0000 (09:45 +0100)]
merge: busybox: update CONFIG_NSLOOKUP in busybox config and respective patch

Signed-off-by: Zoltan HERPAI <>
4 years agomerge: packages: update branding in core packages
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:54 +0000 (09:45 +0100)]
merge: packages: update branding in core packages

Signed-off-by: Zoltan HERPAI <>
4 years agomerge: ssid: update default ssid
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:53 +0000 (09:45 +0100)]
merge: ssid: update default ssid

Signed-off-by: Zoltan HERPAI <>
4 years agomerge: targets: update image generation and targets
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:52 +0000 (09:45 +0100)]
merge: targets: update image generation and targets

Signed-off-by: Zoltan HERPAI <>
4 years agomerge: release/banner: drop release name and update banner
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:51 +0000 (09:45 +0100)]
merge: release/banner: drop release name and update banner

Signed-off-by: Zoltan HERPAI <>
4 years agomerge: base: update base-files and basic config
Zoltan HERPAI [Tue, 7 Nov 2017 08:45:50 +0000 (09:45 +0100)]
merge: base: update base-files and basic config

Signed-off-by: Zoltan HERPAI <>
4 years agomt76: update to the latest version, fixes setting per-vif mac address
Felix Fietkau [Fri, 8 Dec 2017 16:57:24 +0000 (17:57 +0100)]
mt76: update to the latest version, fixes setting per-vif mac address

d02a05b mt7603: update firmware to version 20160107100755
4d4cd05 Partially revert "mt7603: use mcu command to set timing registers, fix OFDM timeout values"
170f334 mt76x2: remove MAC address limitation for multi-vif setups
3563b8f mt76x2: clean up MAC/BSSID address initialization
9de77e1 mt76x2: drop wiphy->addresses
a6a6e25 mt76x2: init: disable APCLI by default
c64633e mt76x2: configure rx filter based on monitor mode setting
ac815fa mt76x2: init: fix rx filter default value during init
e504656 mt7603: configure other-unicast drop based on monitor mode setting

Signed-off-by: Felix Fietkau <>
4 years agoar71xx: C58/C59 fix LAN1 working incorrectly
David Bauer [Mon, 27 Nov 2017 03:19:38 +0000 (04:19 +0100)]
ar71xx: C58/C59 fix LAN1 working incorrectly

This commit fixes LAN Port 1 not transferring data in case no
other LAN Port has active link-state on TP-Link Archer C58/C59.

Signed-off-by: David Bauer <>
4 years agoopenssl: update to 1.0.2n
Peter Wagner [Fri, 8 Dec 2017 05:23:26 +0000 (06:23 +0100)]
openssl: update to 1.0.2n

add no-ssl3-method again as 1.0.2n compiles without the ssl3-method(s)

Fixes CVEs: CVE-2017-3737, CVE-2017-3738

Signed-off-by: Peter Wagner <>
4 years agotools/sstrip: Fix compile under standard linux.
Rosen Penev [Thu, 23 Nov 2017 21:18:07 +0000 (13:18 -0800)]
tools/sstrip: Fix compile under standard linux.

bswap32 undefined is the issue. Added the proper header. Also fixed a few format/conversion warnings that clang complained about without -Wall or -Wextra.

Signed-off-by: Rosen Penev <>
4 years agoodhcpd: fix faulty PKG_SOURCE_DATE in 711a816
Hans Dedecker [Thu, 7 Dec 2017 17:29:08 +0000 (18:29 +0100)]
odhcpd: fix faulty PKG_SOURCE_DATE in 711a816

Signed-off-by: Hans Dedecker <>
4 years agoopkg: bump to version 2017-12-07
Rafał Miłecki [Thu, 7 Dec 2017 17:20:29 +0000 (18:20 +0100)]
opkg: bump to version 2017-12-07

3b417b9 opkg_download: decode file:/ URLs
71c27cb file_util: implement urldecode_path()
d1fe095 file_util: consolidate hex/unhex routines
ebdfc12 add opkg option http_timeout
9f003e3 opkg: encode archive filenames while constructing download URLs
73e6c81 file_util: implement urlencode_path() helper
468158f libopkg: fix SHA256 calculation for big endian system

Signed-off-by: Rafał Miłecki <>
4 years agorpcd: update to version from 2017-12-07
Daniel Golle [Thu, 7 Dec 2017 16:22:05 +0000 (17:22 +0100)]
rpcd: update to version from 2017-12-07

cfe1e75c91bc1 sys: packagelist: allow listing all packages
74a784f037867 sys: fix passwd path

Signed-off-by: Daniel Golle <>
4 years agodnsmasq: write atomic host file
Hans Dedecker [Thu, 7 Dec 2017 09:11:50 +0000 (10:11 +0100)]
dnsmasq: write atomic host file

Different invocations of the dnsmasq init script (e.g. at startup by procd)
will rewrite the dhcp host file which might result into dnsmasq reading an
empty dhcp host file as it is being rewritten by the dnsmasq init script.
Let the dnsmasq init script first write to a temp dhcp host file so it does
not overwrite the contents of the existing dhcp host file.

Reported-by: Hartmut Birr <>
Signed-off-by: Hans Dedecker <>
4 years agostrace: Update to 4.20
Rosen Penev [Wed, 6 Dec 2017 23:55:25 +0000 (15:55 -0800)]
strace: Update to 4.20

Compiled and tested on mvebu. Mainly a kernel 4.14 change. Also
reordered the Makefile a little bit.

Signed-off-by: Rosen Penev <>
4 years agohostapd: backport fix for wnm_sleep_mode=0
Timo Sigurdsson [Tue, 14 Nov 2017 20:41:30 +0000 (21:41 +0100)]
hostapd: backport fix for wnm_sleep_mode=0

wpa_disable_eapol_key_retries can't prevent attacks against the Wireless
Network Management (WNM) Sleep Mode handshake. Currently, hostapd
processes WNM Sleep Mode requests from clients regardless of the setting
wnm_sleep_mode. Backport Jouni Malinen's upstream patch 114f2830 in
order to ignore such requests by clients when wnm_sleep_mode is disabled
(which is the default).

Signed-off-by: Timo Sigurdsson <>
[rewrite commit subject (<= 50 characters), bump PKG_RELEASE]
Signed-off-by: Stijn Tintel <>
4 years agohostapd: Expose the tdls_prohibit option to UCI
Timo Sigurdsson [Tue, 14 Nov 2017 20:41:29 +0000 (21:41 +0100)]
hostapd: Expose the tdls_prohibit option to UCI

wpa_disable_eapol_key_retries can't prevent attacks against the
Tunneled Direct-Link Setup (TDLS) handshake. Jouni Malinen suggested
that the existing hostapd option tdls_prohibit can be used to further
complicate this possibility at the AP side. tdls_prohibit=1 makes
hostapd advertise that use of TDLS is not allowed in the BSS.

Note: If an attacker manages to lure both TDLS peers into a fake
AP, hiding the tdls_prohibit advertisement from them, it might be
possible to bypass this protection.

Make this option configurable via UCI, but disabled by default.

Signed-off-by: Timo Sigurdsson <>
4 years agokernel: bump 4.9 to 4.9.67
Stijn Tintel [Wed, 6 Dec 2017 22:51:31 +0000 (23:51 +0100)]
kernel: bump 4.9 to 4.9.67

Refresh patches.
Remove upstreamed patches:
- generic/190-1-5-e1000e-Fix-error-path-in-link-detection.patch
- generic/190-3-5-e1000e-Fix-return-value-test.patch
- generic/190-4-5-e1000e-Separate-signaling-for-link-check-link-up.patch
- generic/190-5-5-e1000e-Avoid-receiver-overrun-interrupt-bursts.patch
- ramips/0102-MIPS-ralink-Fix-MT7628-pinmux.patch
- ramips/0103-MIPS-ralink-Fix-typo-in-mt7628-pinmux-function
Update patches that no longer apply:
- layerscape/815-spi-support-layerscape.patch
- ramips/0099-pci-mt7620.patch

Compile-tested on ar71xx, brcm2708/bcm2708, octeon and x86/64.
Runtime-tested on ar71xx, brcm2708/bcm2708, octeon and x86/64.

Signed-off-by: Stijn Tintel <>
4 years agoiproute2: align ip help text for tiny variant
Hans Dedecker [Wed, 6 Dec 2017 21:14:09 +0000 (22:14 +0100)]
iproute2: align ip help text for tiny variant

Tiny variant supports a subset of the ip commands; align the ip help
text so it actually reflects which commands are supported in the
tiny variant.

Signed-off-by: Hans Dedecker <>
4 years agoiproute2: update to v4.14.1
Russell Senior [Tue, 28 Nov 2017 07:15:50 +0000 (23:15 -0800)]
iproute2: update to v4.14.1

Preserves optionality of libmnl by letting configuration
script follow the HAVE_MNL environment variable.

Signed-off-by: Russell Senior <>
4 years agoodhcpd: update to latest git HEAD
Hans Dedecker [Wed, 6 Dec 2017 18:14:38 +0000 (19:14 +0100)]
odhcpd: update to latest git HEAD

c516801 dhcpv4: notify DHCP ACK and RELEASE via ubus

Signed-off-by: Hans Dedecker <>
4 years agoramips: add support for Asus RT-N11P / RT-N12+ / RT-N12E b1
Zoltan HERPAI [Wed, 6 Dec 2017 14:43:55 +0000 (15:43 +0100)]
ramips: add support for Asus RT-N11P / RT-N12+ / RT-N12E b1

This is a variant of the MT7620N-based Asus routers.


- MT7620N (580 MHz)
- 32 MB RAM
- 8 MB Flash
- 5x 10/100Mbps Ethernet (built-in switch)
- 2.4 GHz WLAN
- 2x external, non-detachable antennas
- UART (J2) header on PCB (115200 8n1)

Flash instructions:

1. Configure PC with static IP
2. Connect PC with one of LAN ports, press the reset button, power up
   the router and keep button pressed for around 6-7 seconds. All 4 LEDs will
   start to blink, which is when the router will accept firmware files via TFTP.
   No known limitations on firmware filenames, just send it with a TFTP client
3. Router will download file from server, write it to flash and reboot.

Signed-off-by: Zoltan HERPAI <>
4 years agodnsmasq: backport infinite dns retries fix
Hans Dedecker [Wed, 6 Dec 2017 13:22:59 +0000 (14:22 +0100)]
dnsmasq: backport infinite dns retries fix

If all configured dns servers return refused in response to a query in
strict mode; dnsmasq will end up in an infinite loop retransmitting the
dns query resulting into high CPU load.
Problem is fixed by checking for the end of a dns server list iteration
in strict mode.

Signed-off-by: Hans Dedecker <>
4 years agosdk: restrict base feed repo to public git for CONFIG_BUILDBOT only
Rafał Miłecki [Mon, 4 Dec 2017 11:48:30 +0000 (12:48 +0100)]
sdk: restrict base feed repo to public git for CONFIG_BUILDBOT only

This allows people to build SDK from custom repository (git access using
ssh) and keep original URL in SDK's feeds.conf.default.

Signed-off-by: Rafał Miłecki <>
Acked-by: Jo-Philipp Wich <>
4 years agobuild: avoid failing in append-metadata if image could not be generated
Felix Fietkau [Mon, 4 Dec 2017 19:24:24 +0000 (20:24 +0100)]
build: avoid failing in append-metadata if image could not be generated

The image build might have failed due to a size check

Signed-off-by: Felix Fietkau <>
4 years agosamba36: backport an upstream fix for an information leak (CVE-2017-15275)
Felix Fietkau [Mon, 4 Dec 2017 08:56:32 +0000 (09:56 +0100)]
samba36: backport an upstream fix for an information leak (CVE-2017-15275)

Signed-off-by: Felix Fietkau <>
4 years agomt76: update to the latest version, adds stability fixes
Felix Fietkau [Sun, 3 Dec 2017 18:05:06 +0000 (19:05 +0100)]
mt76: update to the latest version, adds stability fixes

11f42a8 mt76x2: add channel argument to eeprom tx power functions
3bd7e76 mt76x2: initialize channel power limits
19fff41 mt76x2: convert between per-chain tx power and combined output
737cf2b mt7603: rename mt7603_mac_reset to mt7603_pse_reset
8026638 mt7603: rename MT_PSE_RESET register
c4dd32a mt7603: remove watchdog reset on interface stop
d99092b mt7603: remove WARN_ON_ONCE for workaround checks
c8807b4 mt7603: simplify PSE reset
d8a5990 mt7603: warn if PSE reset fails
c079960 mt7603: clean up dma debug reads
96817d6 mt7603: make mt7603_mac_watchdog_reset() static
e953c78 mt7603: clear wtbl PS bit for powersave responses
57a2e33 mt7603: set tx-skip flag for powersave clients
c8e5ab1 mt7603: initialize wtbl ps flag on station add
b4034cf mt76x2: remove some harmless WARN_ONs in tx status and rx path
8e17d36 mt7603: remove some harmless WARN_ONs in rx path

Signed-off-by: Felix Fietkau <>
4 years agolayerscape: rename firmware packages to avoid name collisions
Ted Hess [Fri, 1 Dec 2017 21:32:26 +0000 (16:32 -0500)]
layerscape: rename firmware packages to avoid name collisions

layerscape firmware package names collide with existing package contributions.
Ex: layerscape mc and midnight-commander(mc) are in conflict.

Firmware packages: mc, ppa, rcw and dpl are renamed to ls-mc, ls-ppa, ls-rcw
and ls-dpl respectively.

Signed-off-by: Ted Hess <>
4 years agopackages: dnsmasq: remove unused stamp file
Roman Yeryomin [Fri, 1 Dec 2017 22:05:48 +0000 (00:05 +0200)]
packages: dnsmasq: remove unused stamp file

Signed-off-by: Roman Yeryomin <>
Signed-off-by: Hans Dedecker <> [PKG_RELEASE increase]
4 years agocurl: bump to 7.57.0 (3 CVEs)
Hans Dedecker [Wed, 29 Nov 2017 21:56:41 +0000 (22:56 +0100)]
curl: bump to 7.57.0 (3 CVEs)

CVE-2017-8816: NTLM buffer overflow via integer overflow
CVE-2017-8817: FTP wildcard out of bounds read
CVE-2017-8818: SSL out of buffer access

For other bugfixes and changes in 7.57.0 see

Signed-off-by: Hans Dedecker <>
4 years agoltq-ifxos: fix compilation against glibc
Yousong Zhou [Thu, 30 Nov 2017 06:52:30 +0000 (14:52 +0800)]
ltq-ifxos: fix compilation against glibc

Fixes FS#1196

Signed-off-by: Yousong Zhou <>
4 years agotarget: replace odhcpd by odhcpd-ipv6only
Hans Dedecker [Wed, 29 Nov 2017 21:26:34 +0000 (22:26 +0100)]
target: replace odhcpd by odhcpd-ipv6only

Replace in router DEFAULT_PACKAGES odhcpd by odhcpd-ipv6only as
such there's no DHCPv4 server functionality overlap with dnsmasq

Signed-off-by: Hans Dedecker <>
4 years agodnsmasq: add interface to ubus notification
Borja Salazar [Wed, 29 Nov 2017 08:32:36 +0000 (09:32 +0100)]
dnsmasq: add interface to ubus notification

Signed-off-by: Borja Salazar <>
4 years agomt76: update to the latest version, fixes encrypted mesh support and HT20 issues
Felix Fietkau [Wed, 29 Nov 2017 16:50:02 +0000 (17:50 +0100)]
mt76: update to the latest version, fixes encrypted mesh support and HT20 issues

fc28872 mac80211: add missing include
a4c82ca mt7603: add missing include required on newer kernels
792859b mt76x2: fix transmission of encrypted management frames
a51358e mt76x2: increase OFDM SIFS time

Signed-off-by: Felix Fietkau <>
4 years agomac80211: tweak TSQ settings
Felix Fietkau [Thu, 16 Nov 2017 08:57:13 +0000 (09:57 +0100)]
mac80211: tweak TSQ settings

Latencies can be much higher on wifi devices, especially with
aggregation. Tune the network stack setting introduced in the previous
commit to account for that.
This commit reintroduces the previously reverted one with a fix for the
crash issues

Signed-off-by: Felix Fietkau <>
4 years agoramips: add missing reset button for Nexx WT1520
INAGAKI Hiroshi [Sat, 25 Nov 2017 16:42:50 +0000 (01:42 +0900)]
ramips: add missing reset button for Nexx WT1520

This commit adds missing the GPIO key used as reset button.
Nexx WT1520 has a GPIO key for factory reset, but it's not defined in
WT1520.dtsi and cannot use it.

Drop the UART (full) from the device tree source file, it was never
used for this board. Adjust the kernel bootargs accordingly.

Signed-off-by: INAGAKI Hiroshi <>
[add note about dropped UART (full) to the commit message]
Signed-off-by: Mathias Kresin <>
4 years agodnsmasq: fix dhcp-host entries with empty macs
Jo-Philipp Wich [Tue, 28 Nov 2017 11:38:40 +0000 (11:38 +0000)]
dnsmasq: fix dhcp-host entries with empty macs

Due to improper localization of helper variables, "config host" entries
without a given mac address may inherit the mac address of a preceeding,
leading to invalid generated netive configuration.

Fix the issue by marking the "macs" and "tags" helper variables in
dhcp_host_add() local, avoiding the need for explicitely resetting them
with each invocation.

Reported-by: Russell Senior <>
Tested-by: Kevin Darbyshire-Bryant <>
Signed-off-by: Jo-Philipp Wich <>
4 years agoRevert "mac80211: tweak TSQ settings"
Felix Fietkau [Tue, 28 Nov 2017 13:23:09 +0000 (14:23 +0100)]
Revert "mac80211: tweak TSQ settings"

This reverts commit 2dc485250d516f1535eeaf53f0f2f5742e5f9e0c.
This patch needs some additional checks in order to avoid overwriting
unrelated fields for request sockets.

Signed-off-by: Felix Fietkau <>
4 years agowireguard: bump to snapshot 20171127
Kevin Darbyshire-Bryant [Mon, 27 Nov 2017 10:14:54 +0000 (10:14 +0000)]
wireguard: bump to snapshot 20171127

== Changes ==

 * compat: support timespec64 on old kernels
 * compat: support AVX512BW+VL by lying
 * compat: fix typo and ranges
 * compat: support 4.15's netlink and barrier changes
 * poly1305-avx512: requires AVX512F+VL+BW

 Numerous compat fixes which should keep us supporting 3.10-4.15-rc1.

 * blake2s: AVX512F+VL implementation
 * blake2s: tweak avx512 code
 * blake2s: hmac space optimization

 Another terrific submission from Samuel Neves: we now have an implementation
 of Blake2s using AVX512, which is extremely fast.

 * allowedips: optimize
 * allowedips: simplify
 * chacha20: directly assign constant and initial state

 Small performance tweaks.

 * tools: fix removing preshared keys
 * qemu: use https site
 * qemu: take shared lock for untarring

 Small bug fixes.

Remove myself from the maintainers list: we have enough and I'm happy to
carry on doing package bumps on ad-hoc basis without the 'official'

Run-tested: ar71xx Archer C7 v2

Signed-off-by: Kevin Darbyshire-Bryant <>
4 years agolldpd: bump to 0.9.9
Stijn Tintel [Mon, 27 Nov 2017 08:43:23 +0000 (09:43 +0100)]
lldpd: bump to 0.9.9

Signed-off-by: Stijn Tintel <>
4 years agonghttp2: bump to 1.28.0
Hans Dedecker [Mon, 27 Nov 2017 08:53:37 +0000 (09:53 +0100)]
nghttp2: bump to 1.28.0

939ad5dd Update manual pages
24d92b97 Add deprecation warning when spdylay support is enabled
4c92ff18 Bump up version number to 1.28.0, LT revision to 29:0:15
280db5c6 Update neverbleed
7fbcb2d0 Merge pull request #1074 from nghttp2/fix-doc
53aeb2c3 Fix doc
ff200bfc clang-format-5.0
fee3151f Switch to clang-format-5.0
99a85159 Update manual pages
2a981a3f Merge pull request #1066 from nghttp2/nghttpx-add-affinity-cookie-secure
0028275d nghttpx: Add affinity-cookie-secure parameter to backend option
ee8bfddf Merge pull request #1063 from nghttp2/error_callback2
194acb1f src: Use nghttp2_error_callback2
43a2a70a Add nghttp2_error_callback2
73344ae9 nghttpx: Use plain hex string format for client serial
c479f612 Merge pull request #1060 from nghttp2/nghttpx-add-client-serial
eca0a302 nghttpx: Add $tls_client_serial log variable
4720c5cb nghttpx: Make client serial available in mruby script
cd55ab28 nghttpx: Add function to get serial number from certificate
d402cfdf Merge pull request #1057 from nghttp2/nghttpx-add-tls-client-issuer-name
22502182 Add tls_client_issuer_name log variable and expose it to mruby
05e1fd5e Update manual pages
943d7923 Add Session Affinity section to nghttpx howto
568ecbfb doc: Add missing port
f5ddd7f4 nghttpx: Make initial_addr_idx_ unsigned
88abbce7 nghttpx: Fix compile error with gcc
16e90365 nghttpx: Fix affinity retry
fa7945c6 nghttpx: Refactor
daca43f0 nghttpx: Fix stalled backend connection on retry
16bc11e6 nghttpx: Remove duplicated util::make_socket_nodelay
6f7e94cd Merge pull request #1047 from PiotrSikora/go_vet
61efa15a integration: Fix issues reported by the `go vet` tool.
8c0ea56b Merge pull request #1036 from nghttp2/nghttpx-affinity-cookie
54905371 nghttpx: Refactor
6010d393 integration: Add tests
be5c39a1 src: Add tests
b8fda680 nghttpx: Cookie based session affinity
e29b9c12 Merge pull request #1045 from nghttp2/nghttpx-sha1-fingerprint
539e2781 nghttpx: Add tls_client_fingerprint_sha1 to mruby and accesslog
7008afd4 nghttpx: Refactor get_x509_fingerprint to accept hash function
77a41756 Merge pull request #1041 from nghttp2/fix-examples-client-server
b15045d6 Merge pull request #1040 from nghttp2/nghttpx-mruby-add-more-tls-vars
03084f75 examples: Make client and server work with libevent-2.1.8
60baca27 nghttpx: Add more TLS related attributes to mruby Env object
86990db2 Merge pull request #1038 from nghttp2/nghttpx-add-more-logging-vars
cb376bcd nghttpx: Add client fingerprint and subject name to accesslog
f2b8edd1 nghttpx: Fix memory leak
c4f8afcf nghttpx: Get TLS info only when it is necessary when writing accesslog
1a1a216d Merge pull request #1037 from nghttp2/nghttpx-mruby-tls-client-vars
9f80a82c nghttpx: Add client fingerprint and subject name to mruby env
c573c80b nghttpx: Pass a pointer to SSL instead of TLSSessionInfo to LogSpec
3cd6817e Fix typos
d4a69658 Add another warning about mruby
8e06fe49 Fix typo
aaeeec8f Fix typos
66d5e246 Bump up version number to 1.28.0-DEV

Signed-off-by: Hans Dedecker <>
4 years agobuild: accept gcc/g++ without minor version
Justin Kilpatrick [Sat, 25 Nov 2017 21:14:59 +0000 (16:14 -0500)]
build: accept gcc/g++ without minor version

Build dependency: Please install the GNU C Compiler (gcc) 4.8 or later cc
  -dumpversion | grep -E '(4\.[8-9]|5\.[0-9]|6\.[0-9]|7\.[0-9])'
Build dependency: Please install the GNU C++ Compiler (g++) 4.8 or later
  g++ -dumpversion | grep -E '(4\.[8-9]|5\.[0-9]|6\.[0-9]|7\.[0-9])'

Prerequisite check failed. Use FORCE=1 to override.

On my Fedora 26 machine gcc and g++ -dumpversion returns a whole number
'7' failing the regex introduced in commit:


This change makes minor versions optional in the build dependency regex
for gcc and g++ whenever any minor version would be accepted and the
whole number version is sufficient as a dependency check. For versions
4.* a minor version is still required.

Signed-off-by: Justin Kilpatrick <>
4 years agotoolchain: Test for supported versions of GCC
Daniel Engberg [Fri, 20 Oct 2017 11:47:43 +0000 (13:47 +0200)]
toolchain: Test for supported versions of GCC

Only test for supported versions of GCC
The version bump requirement for GCC is because gdb doesn't build with older

Signed-off-by: Daniel Engberg <>
4 years agomwlwifi: Update to latest commit in upstream repo
Daniel Engberg [Wed, 1 Nov 2017 10:29:16 +0000 (11:29 +0100)]
mwlwifi: Update to latest commit in upstream repo

Update to latest commit in upstream repo
Bumps 88W8964 firmware to

Signed-off-by: Daniel Engberg <>
4 years agobuild: allow defining license information per binary package
Michael Heimpold [Tue, 31 Oct 2017 20:29:50 +0000 (21:29 +0100)]
build: allow defining license information per binary package

At the moment, license information can only be specified on a
"per source package" level while other metadata fields (e.g. maintainer)
can be given for each binary package. Apply the same logic for license
fields as well. This can be used e.g. in cases where a library is
distributed under some license while related tools are distributed
under a different one.

Signed-off-by: Michael Heimpold <>
4 years agokmod-sched-cake: update to latest git HEAD
Fushan Wen [Sat, 25 Nov 2017 02:19:17 +0000 (10:19 +0800)]
kmod-sched-cake: update to latest git HEAD

dfb2f6c pkt_sched: make compile again
5ab7026 sch_cake: make compile again
6f28803 codel5: make more checkpatch compliant
bd426aa Fix build error on 4.12
e4a3628 Whitespace tidy up

Signed-off-by: Fushan Wen <>
4 years agokernel: Update kernel 4.4 to 4.4.100
Rosen Penev [Thu, 23 Nov 2017 21:42:13 +0000 (13:42 -0800)]
kernel: Update kernel 4.4 to 4.4.100

Run-tested on ramips

Signed-off-by: Rosen Penev <>
4 years agoodhcpd: update to latest git HEAD
Hans Dedecker [Sat, 25 Nov 2017 17:13:41 +0000 (18:13 +0100)]
odhcpd: update to latest git HEAD

92e205d dhcpv6: fix compile issues when CER-ID extension is enabled

Signed-off-by: Hans Dedecker <>
4 years agoodhcpd: add a full and ipv6only variant (FS#1188)
Hans Dedecker [Sat, 25 Nov 2017 16:56:01 +0000 (17:56 +0100)]
odhcpd: add a full and ipv6only variant (FS#1188)

Add an ipv6only variant providing server services for RA, stateful and stateless
DHCPv6, prefix delegation and relay support for DHCPv6, NDP and RA.

The full variant called odhcpd supports DHCPv4 server as before.

Signed-off-by: Hans Dedecker <>
4 years agokernel: bump 4.9 to 4.9.65
Stijn Tintel [Fri, 24 Nov 2017 09:36:24 +0000 (10:36 +0100)]
kernel: bump 4.9 to 4.9.65

Refresh patches.
Compile-tested: ar71xx, octeon, x86/64.
Runtime-tested: ar71xx, octeon, x86/64.

Signed-off-by: Stijn Tintel <>
4 years agowireguard: bump to 20171122
Kevin Darbyshire-Bryant [Fri, 24 Nov 2017 10:28:13 +0000 (10:28 +0000)]
wireguard: bump to 20171122

Bump to latest WireGuard snapshot release:

ed479fa (tag: 0.0.20171122) version: bump snapshot
efd9db0 chacha20poly1305: poly cleans up its own state
5700b61 poly1305-x86_64: unclobber %rbp
314c172 global: switch from timeval to timespec
9e4aa7a poly1305: import MIPS64 primitive from OpenSSL
7a5ce4e chacha20poly1305: import ARM primitives from OpenSSL
abad6ee chacha20poly1305: import x86_64 primitives from OpenSSL
6507a03 chacha20poly1305: add more test vectors, some of which are weird
6f136a3 compat: new kernels have netlink fixes
e4b3875 compat: stable finally backported fix
cc07250 qemu: use unprefixed strip when not cross-compiling
64f1a6d tools: tighten up strtoul parsing
c3a04fe device: uninitialize socket first in destruction
82e6e3b socket: only free socket after successful creation of new
df318d1 compat: fix compilation with PaX
d911cd9 curve25519-neon: compile in thumb mode
d355e57 compat: 3.16.50 got proper rt6_get_cookie
666ee61 qemu: update kernel
2420e18 allowedips: do not write out of bounds
185c324 selftest: allowedips: randomized test mutex update
3f6ed7e wg-quick: document localhost exception and v6 rule

Compile-tested-for: ar71xx
Run-tested-on: ar71xx Archer C7 v2

Signed-off-by: Kevin Darbyshire-Bryant <>
4 years agouboot-sunxi: fix build of HAOYU Electronics Marsboard A10
Hauke Mehrtens [Thu, 23 Nov 2017 20:25:46 +0000 (21:25 +0100)]
uboot-sunxi: fix build of HAOYU Electronics Marsboard A10

The uboot target is named MarsBoard_A10 and it was not build at all.
This fixes a build problem seen by the build bot.

Fixes: 6a3565985fde ("sunxi: Added profile for HAOYU Electronics Marsboard A10")
Signed-off-by: Hauke Mehrtens <>
4 years agosunxi: remove support for kernel 4.4
Hauke Mehrtens [Thu, 23 Nov 2017 18:17:11 +0000 (19:17 +0100)]
sunxi: remove support for kernel 4.4

Kernel 4.9 is working good on this target, remove support for kernel 4.4

Signed-off-by: Hauke Mehrtens <>