staging/stintel/toolchain, branch master

toolchain: gcc: update GCC 14 to 14.4

2026-06-29T09:40:20Z

Changelog: https://gcc.gnu.org/gcc-14/changes.html Remove upstreamed patches: - patches-14.x/004-libcody-Make-it-buildable-by-C-11-to-C-26.patch[1] - patches-14.x/005-include-memory.patch[2] - patches-14.x/240-libsanitizer-fix-termio-glibc-2.40.patch[3] All other patches are automatically refreshed. [1] https://gcc.gnu.org/cgit/gcc/commit/?h=releases/gcc-14.4.0&id=daa3e1ead791bc58208043cfc4595ba1a78cdd34 [2] https://gcc.gnu.org/cgit/gcc/commit/?h=releases/gcc-14.4.0&id=046776dac7cc74bdbab36f450af80644a045858a [3] https://gcc.gnu.org/cgit/gcc/commit/?h=releases/gcc-14.4.0&id=f0feb51ff40553643c582ec9c3ca7f293721ddc8 Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/23950 Signed-off-by: Robert Marko

toolchain: gcc: update GCC 15 to 15.3.0

2026-06-27T09:54:03Z

Release Notes: https://gcc.gnu.org/gcc-15/changes.html Removed upstreamed: toolchain/gcc/patches-15.x/004-libcody-Make-it-buildable-by-C-11-to-C-26.patch [1] [1] https://github.com/gcc-mirror/gcc/commit/1f0224e8ddb3d3d0bf4c7a11769b193a4df5cc37 Signed-off-by: Konstantin Demin Link: https://github.com/openwrt/openwrt/pull/23771 Signed-off-by: Hauke Mehrtens

toolchain: binutils: fix default version selection

2026-06-26T17:04:24Z

Fixes: 82f26df15c56 ("toolchain: binutils: change default to 2.46") Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/23952 Signed-off-by: Jonas Jelonek

toolchain: binutils: change default to 2.46

2026-06-26T12:51:16Z

Change default to latest upstream release. Link: https://github.com/openwrt/openwrt/pull/23907 Signed-off-by: Jonas Jelonek

toolchain: binutils: partially revert commit 525a1e94b343 "fix update to 2.45.1"

2026-06-17T06:52:03Z

Commit eac927fadf07 "toolchain: binutils: simplify patch management" being applied after commit 525a1e94b343 "toolchain: binutils: fix update to 2.45.1" effectively disables patching binutils 2.45.1 in OpenWrt. Fixes: 525a1e94b343 "toolchain: binutils: fix update to 2.45.1" Signed-off-by: Konstantin Demin Link: https://github.com/openwrt/openwrt/pull/23773 Signed-off-by: Jonas Jelonek

toolchain: binutils: update to 2.46.1

2026-06-17T06:52:03Z

Release Notes: https://sourceware.org/pipermail/binutils/2026-June/149568.html Signed-off-by: Konstantin Demin Link: https://github.com/openwrt/openwrt/pull/23773 Signed-off-by: Jonas Jelonek

toolchain/gcc: backport libsanitizer struct termio fix for glibc 2.43

2026-06-04T18:06:32Z

glibc 2.43 no longer exposes struct termio (the old UNIX System V terminal struct) through . This breaks the GCC 14 libsanitizer build which uses sizeof(struct termio) and registers ioctl interceptors for the legacy TCGETA/TCSETA/TCSETAF/TCSETAW ioctls that operated on struct termio. GCC 15 already dropped these references. Backport that removal to the GCC 14 patch series. Signed-off-by: Dustin Lundquist

toolchain: glibc: Update to HEAD from release/2.43/master

2026-05-31T21:48:19Z

% git log --oneline f762cc..4070d80 4070d808bea1 sdio-common: Fix buffer overflow in scanf %mc [BZ #34008] 2890b35cd361 libio: Fix ungetwc operating on byte stream [BZ #33998] e9517114acc7 abilist.awk: Handle weak unversioned defined symbols 1634cc11a5a5 Linux: Only define OPEN_TREE_* macros in if undefined (bug 33921) d1d8d27164e9 include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h 8362e8ce10b2 Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046) ce1013a197eb tests: fix tst-rseq with Linux 7.0 60cabd0464c6 riscv: Resolve calls to memcpy using memcpy-generic in early startup 02ffd413cf83 elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen 26953143787b elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso dd9945c0ba40 resolv: Check hostname for validity (CVE-2026-4438) 5c6fca0c62ce resolv: Count records correctly (CVE-2026-4437) 2be6cf2e75d0 posix: Run tst-wordexp-reuse-mem test 305ce0b58809 aarch64: Tests for locking GCS 2ee41ba6ecd3 aarch64: Lock GCS status at startup fa4a40c7d497 tests: aarch64: fix makefile dependencies for dlopen tests for BTI 9898ea58b538 malloc: Avoid accessing /sys/kernel/mm files c3ceb93dc4f6 Add BZ 33904 entry to NEWS 911bd469f80c debug: Fix build with --enable-fortify-source=1 (BZ 33904) 48f5a05a7a1e nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) d6cb7ce0e98b Linux: In getlogin_r, use utmp fallback only for specific errors 140c760d711d nss: Introduce dedicated struct nss_database_for_fork type 856c426a7534 Don't include directly (bug 33848) 144ba302089c po: Incorporate translatins (nl updated, ar new) 022abaeacbc8 Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling 45b58d6bd185 NEWS: add new section 2.43.1 f02515d8a696 Replace advisories directory with file ADVISORIES Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc Signed-off-by: John Audia Link: https://github.com/openwrt/openwrt/pull/23467 Signed-off-by: Jonas Jelonek

musl: update to 1.2.6

2026-05-25T21:37:21Z

Update musl C library to 1.2.6. Fixes CVE-2025-26519 * Patches refreshed. Unnecessary upstream patch removed. * Add a post-release patch for timezone handling in datetime string matching (affecting at least uhttpd): bug report: https://www.openwall.com/lists/musl/2026/03/22/3 fix: https://www.openwall.com/lists/musl/2026/03/30/6 1.2.6 release notes https://git.musl-libc.org/cgit/musl/tree/WHATSNEW?id=9fa28ece75d8a2191de7c5bb53bed224c5947417 new features: - posix_getdents interface (new in POSIX-2024) - renameat2 interface (linux extension) - iconv support for CP858 - vdso clock_gettime for riscv{32,64}, powerpc{,64}, and s390x - loongarch64 TLSDESC support - exposed __getauxval for compiler runtime use detecting cpu features compatibility: - initgroups no longer artificially limits number of supplementary groups - getusershell now skips blank lines and comments - exit is now explicitly thread-safe (possible future requirement) - atexit now fails rather than deadlocking if called from late dtor - strerror now has error strings for EUCLEAN and ENAVAIL - isatty no longer collapses errors to ENOTTY - sched.h namespace pollution with _GNU_SOURCE is reduced - hasmntopt now matches only whole options, not arbitrary substrings - shadow.h no longer declares an unimplemented sgetspent interface - vdso with missing sysv hash table (only gnu hash) is now supported conformance: - pwrite now handles O_APPEND correctly, reports error if it can't - mbnrtowcs now conforms to new POSIX-2024 requirement for partial character - iconv GBK now properly includes euro symbol - strptime now accepts conversion specifiers added in POSIX-2024 - inet_ntop IPv6 "zero compression" now conforms to RFC 5952 bugs fixed: - iconv euc-kr decoder could do oob writes on invalid inputs (CVE-2025-26519) - iconv shift_jis decoder could produce wrong outputs for some invalid inputs - printf did not honor hex float precision correctly in some cases - lost or delayed wakes in sem_post under race condition - termios input speed handling was wrong - strcasestr failed to match zero-length needle - fma handled corner case with negative zero wrongly - syslog LOG_MAKEPRI macro was incorrect - timer_create is no longer affected by known pthread_barrier bugs - sysconf(_SC_MINSIGSTKSZ) computed min size incorrectly - statx emulation left some fields uninitialized - mntent wrongly included final newline in parsed field output - SIGEV_THREAD timers could abort process if SIGTIMER became unblocked - bind_textdomain_codeset returned wrong value arch-specific bugs fixed: - early dynamic linker handled page size wrong on dynamic pagesize archs - arm and aarch64 crti/n files had wrong alignment - m68k POLLWRNORM and POLLWRBAND values were incorrect - x32 mq ABI was mismatched Signed-off-by: Hannu Nyman Link: https://github.com/openwrt/openwrt/pull/22547 Signed-off-by: Hauke Mehrtens

toolchain/gcc: use configure option to disable TM clone registry

2026-05-25T21:17:58Z

GCC 10 added the new configure option --disable-tm-clone-registry[1]. It is useful for reducing code size in embedded systems. Our local hack patch is no longer needed. [1] https://gcc.gnu.org/cgit/gcc/commit/?h=releases/gcc-10&id=5a4602805eb3ebddbc935b102481e63bffc7c5e6 Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/23494 Signed-off-by: Hauke Mehrtens