1. 26 Nov, 2018 3 commits
  2. 25 Nov, 2018 8 commits
  3. 24 Nov, 2018 1 commit
    • Sven Eckelmann's avatar
      kernel: collect module symvers for external modules (#1580) · 8647b782
      Sven Eckelmann authored
      Collect module symvers for all external modules to make them available
      for modpost. This fixes dependencies for most external modules.
      
        root@ffv-525400123456:/# modinfo batman-adv
        module:         /lib/modules/4.4.153/batman-adv.ko
        alias:          net-pf-16-proto-16-family-batadv
        alias:          rtnl-link-batadv
        version:        openwrt-2018.1-5
        description:    B.A.T.M.A.N. advanced
        author:         Marek Lindner <mareklindner@neomailbox.ch>, Simon Wunderlich <sw@simonwunderlich.de>
        license:        GPL
        depends:
      
      After:
      
        root@ffv-525400123456:/# modinfo batman-adv
        module:         /lib/modules/4.4.153/batman-adv.ko
        alias:          net-pf-16-proto-16-family-batadv
        alias:          rtnl-link-batadv
        version:        openwrt-2018.1-5
        description:    B.A.T.M.A.N. advanced
        author:         Marek Lindner <mareklindner@neomailbox.ch>, Simon Wunderlich <sw@simonwunderlich.de>
        license:        GPL
        depends:        libcrc32c,cfg80211
      8647b782
  4. 20 Nov, 2018 2 commits
  5. 14 Nov, 2018 2 commits
    • Martin Weinelt's avatar
      modules: update routing packages · 0bb3742f
      Martin Weinelt authored
      bc6e7f6 Merge pull request #425 from ecsv/batadv-18.06
      c00a1bf alfred: Merge bugfixes from 2018.4
      7bf62cc batman-adv: Merge bugfixes from 2018.4
      d1cf6d1 Merge pull request #422 from ecsv/batadv-18.06
      121c92d batctl: Don't overwrite default PKG_BUILD_DIR
      95e56cf alfred: Add openwrt revision to internal version
      93cce26 batctl: Add openwrt revision to internal version
      1a83b56 batman-adv: Add openwrt revision to internal version
      1ba424a batman-adv: Load module with AutoProbe
      b9656fb batman-adv: Fix search for cfg80211 module symbols
      059d726 batman-adv: Remove unused option "interfaces" in config
      3d5c2d0 batman-adv: Add DEBUG_LOG -> DEBUGFS dependency
      a9a4b04 batman-adv: Rebuild automatically on mac80211 changes
      0bb3742f
    • Ruben Barkow's avatar
  6. 10 Nov, 2018 1 commit
  7. 12 Oct, 2018 3 commits
    • Martin Weinelt's avatar
      modules: update routing packages (#1554) · e1074159
      Martin Weinelt authored
      8b76007 nodogsplash: fix download hash
      ebc5874 Merge pull request #417 from bluewavenet/openwrt-18.06
      f68a998 nodogsplash: Backport v3.2.1 to OpenWrt 18.06
      2e21588 Merge pull request #414 from ecsv/batadv-18.06
      3785b55 Merge pull request #411 from bluewavenet/openwrt-18.06
      ddef390 batman-adv: Merge bugfixes from 2018.3
      ed5d97c nodogsplash: add missing config options
      b0e37f2 Merge pull request #409 from wfleurant/backport-fix-luci-cjdns
      85775e9 luci-app-cjdns: luci admin support for cjdns-v20.2 (#394)
      59e8158 Merge pull request #407 from bluewavenet/openwrt-18.06
      883dec4 nodogsplash: Backport v3.2.0
      021153d nodogsplash: Remove nodogsplash and nodogsplash2 in preparation for backport of v3.2.0
      9d9c0d0 Merge pull request #403 from dangowrt/bmx7-for-openwrt-18.06
      ab3529a bmx7: Avoid namespace collision with libubox.
      f0b852b bmx7: add config trigger
      e1074159
    • Andreas Ziegler's avatar
      ff38b5ad
    • Andreas Ziegler's avatar
  8. 01 Oct, 2018 1 commit
    • David Bauer's avatar
      ar71xx: flag FritzBox 4020 buttons as active low (#1544) · faddb3d1
      David Bauer authored
      Buttons of AVM FritzBox 4020 are incorrectly flagged as active high.
      
      This was an oversight as RFKill button was working as expected even
      with incorrectly flagged GPIO.
      
      Config mode is still accessable but will start on any button press, not
      only for the ones >= 10 seconds.
      
      This commit corrects this behavior to the expected one (10 second long
      press necessary to enter config mode).
      faddb3d1
  9. 04 Sep, 2018 2 commits
    • Matthias Schiffer's avatar
      modules: update OpenWrt packages · 51b7928a
      Matthias Schiffer authored
      40da7ecf21ff socat: Fix CRDLY, TABDLY and CSIZE shifts for PowerPC
      a5bbf27e3532 libxml2: add Debian patches to address CVEs
      1e77dfa7b084 tiff: fix remaining CVEs
      cad5ceed6a87 unbound: drop odhcpd leases with wrong field count
      eb5ac25380e7 postgresql: security bump to 9.5.14
      43f14b81120a unbound: limit outside script source to init funciton scope
      51b7928a
    • Matthias Schiffer's avatar
      modules: update LEDE · 4644f85b
      Matthias Schiffer authored
      184fe11483b9 LEDE v17.01.6: revert to branch defaults
      9a96ec08a953 LEDE v17.01.6: adjust config defaults
      2252731af43d grub2: rebase patches
      d3e325dfeffd bzip2: Fix CVE-2016-3189
      6aae528cc3b7 grub2: Fix CVE-2015-8370
      9d3825a0279a scripts: bundle-libraries: fix logic flaw
      6e8f1c387892 scripts: bundle-libraries: prevent loading host locales (FS#1803)
      f712db9df632 kernel: bump kernel 4.4 to version 4.4.153
      55840040dfcc mt76: Fix mirror hash
      bb7c4cff2086 dropbear: backport upstream fix for CVE-2018-15599
      8a72a868fd80 kernel: bump kernel 4.4 to version 4.4.151
      9c0bab0059f7 kernel: bump kernel 4.4 to version 4.4.150
      4644f85b
  10. 03 Sep, 2018 1 commit
  11. 01 Sep, 2018 1 commit
  12. 28 Aug, 2018 1 commit
  13. 26 Aug, 2018 2 commits
  14. 21 Aug, 2018 1 commit
    • Matthias Schiffer's avatar
      modules: update LEDE · b4e87400
      Matthias Schiffer authored
      8f5c55f63ece tools/e2fsprogs: update to 1.44.1
      d35a7bf4b462 e2fsprogs: bump to 1.44.0
      79ac69d9c926 tools/e2fsprogs: Update to 1.43.7
      5d9114c9cb3b tools/e2fsprogs: Update to 1.43.6
      7955fab22ac4 tools/e2fsprogs: Update to 1.43.5
      866e5b495677 tools/e2fsprogs: Update to 1.43.4
      a964738a5c88 Revert "tools/e2fsprogs: fix building on a glibc 2.27 host"
      1e09cbf11844 tools/bison: Update to 3.0.5
      9e864bfccea5 mac80211: brcmfmac: fix compilation with SDIO support
      13f219569d4c mac80211: brcmfmac: backport patch setting WIPHY_FLAG_HAVE_AP_SME
      0c76265d0819 mac80211: brcmfmac: backport important changes from the 4.19
      9d8940c5b92f mac80211: brcmfmac: backport important changes from the 4.18
      84ef414bd422 mac80211: brcmfmac: backport important changes from the 4.16
      57102f6c0633 mac80211: brcmfmac: backport important changes from the 4.15
      6805e44004b7 mac80211: brcmfmac: backport important changes from the 4.14
      e3bc2e488d03 mac80211: brcmfmac: backport important changes from the 4.13
      00b4e6567726 mac80211: brcmfmac: backport important changes from the 4.12
      f8c364b72042 mac80211: brcmfmac: backport use-after-free fix from 4.11
      85e6ac468efc mac80211: brcmfmac: group 4.11 backport patches
      d3b8b5be3455 openssl: update to version 1.0.2p
      f3865bd4efa8 kernel: bump kernel 4.4 to version 4.4.148
      5886a5060a4c mbedtls: update to version 2.7.5
      9bc43f3e65bc curl: fix some security problems
      b3983323a1f2 wpa_supplicant: fix CVE-2018-14526
      6449ed155301 tools: findutils: fix compilation with glibc 2.28
      6e78c5502c94 tools: m4: fix compilation with glibc 2.28
      583fd4b229b0 brcm47xx: revert upstream commit breaking BCM4718A1
      
      Fixes build with glibc 2.28.
      b4e87400
  15. 09 Aug, 2018 1 commit
    • Matthias Schiffer's avatar
      modules: update LEDE · 6a3d5554
      Matthias Schiffer authored
      0a2c984222d0 kernel: ext4: fix check to prevent initializing reserved inodes
      91d209362b97 kernel: bump kernel 4.4 to version 4.4.147
      b5d9776cd24b firmware: amd64-microcode: update to 20180524
      55ab8649e72b firmware: intel-microcode: bump to 20180703
      
      Fixes #1504
      6a3d5554
  16. 05 Aug, 2018 2 commits
    • Andreas Ziegler's avatar
      modules: update LEDE · 0cb98882
      Andreas Ziegler authored
      309414ee8d uclient: update to latest git HEAD
      bcf91e578c downloads.mk: introduce name-agnostic PROJECT_GIT variable
      b7e3f10e80 sdk: include arch/arm/ Linux includes along with arch/arm64/ ones
      d93ef3c8c8 sdk: bundle usbip userspace sources
      e5b7404f25 kmod-sched-cake: bump to 20180716
      2725ad8de4 iproute2: merge upstream CAKE support
      28d4e55432 WDR4900v1 remove dt node for absent hw crypto.
      21c317a892 build: fix compile error when a package includes itself in PROVIDES
      aee5c53a8d apm821xx: fix sata access freezes
      54b91c85e7 Revert "iproute2: tc: bump to support kmod-sched-cake"
      90eac8984a Revert "kmod-sched-cake: bump to 20180716"
      91c9400816 scripts: bundle-libraries: fix build on OS X (FS#1493)
      54c0ef6ff5 build: bundle-libraries.sh: patch bundled ld.so
      79c8f2f50b mtd: improve check for TRX header being already fixed
      828eaeee25 mtd: support bad blocks within the mtd_fixtrx()
      8d4da3c589 iproute2: tc: bump to support kmod-sched-cake
      0e1606ba3d kmod-sched-cake: bump to 20180716
      c6a46c6e1d LEDE v17.01.5: revert to branch defaults
      248b358903 LEDE v17.01.5: adjust config defaults
      38e704be71 kernel: bump kernel 4.4 to version 4.4.140
      0cb98882
    • Andreas Ziegler's avatar
  17. 29 Jul, 2018 1 commit
  18. 22 Jul, 2018 2 commits
    • Sven Eckelmann's avatar
      gluon-client-bridge: Revert "move IPv4 local subnet route to br-client (#1312)" · ea9a69f7
      Sven Eckelmann authored
      The commit b3762fc6 ("gluon-client-bridge: move IPv4 local subnet route
      to br-client (#1312)") moves the IPv4 prefix from the local-port interface
      to br-client. A client requesting an IPv4 connection to the IPv4 anycast
      address of the node (the device running gluon) will create following
      packets:
      
      1. ARP packet from client to get the MAC of the mac address of the anycast
         IPv4 address
      2. ARP reply from node to client with the anycast MAC address for the IPv4
         anycast address
      3. IPv4 packet from client which requires reply (for example ICMP echo
         request)
      4. ARP request for the client MAC address for its IPv4 address in prefix4
         (done with the mac address of br-client and transmitted over br-client)
      5. IPv4 packet from node (transmitted over br-client with br-client MAC
         address) as reply for the client IPv4 packet (for example ICMP echo
         reply)
      
      The step 4 and 5 are problematic here because packets use the node specific
      MAC addresses from br-client instead of the anycast MAC address. The client
      will receive the ARP packet with the node specific MAC address and change
      their own neighbor IP (translation) table. This will for example break the
      access to the status page to the connected device or the anycast DNS
      forwarder implementation when the client roams to a different node.
      
      This reverts commit b3762fc6 and adds an
      upgrade code to remove local_node_route on on existing installations.
      ea9a69f7
    • Sven Eckelmann's avatar
      gluon-mesh-batman-adv: Drop IPv4 anycast related packets from/to bat0 · a7a5db9f
      Sven Eckelmann authored
      The commit b3762fc6 ("gluon-client-bridge: move IPv4 local subnet route
      to br-client (#1312)") moves the IPv4 prefix from the local-port interface
      to br-client. A client requesting an IPv4 connection to the IPv4 anycast
      address of the node (the device running gluon) will create following
      packets:
      
      1. ARP packet from client to get the MAC of the mac address of the anycast
         IPv4 address
      2. ARP reply from node to client with the anycast MAC address for the IPv4
         anycast address
      3. IPv4 packet from client which requires reply (for example ICMP echo
         request)
      4. ARP request for the client MAC address for its IPv4 address in prefix4
         (done with the mac address of br-client and transmitted over br-client)
      5. IPv4 packet from node (transmitted over br-client with br-client MAC
         address) as reply for the client IPv4 packet (for example ICMP echo
         reply)
      
      The step 4 is extremely problematic here. ARP replies with the anycast IPv4
      address must not be submitted or received via bat0 - expecially not when it
      contains an node specific MAC address as source. When it is still done then
      the wrong MAC address is stored in the batadv DAT cache and ARP packet is
      maybe even forwarded to clients. This latter is especially true for ARP
      requests which are broadcast and will be flooded to the complete mesh.
      
      Clients will see these ARP packets and change their own neighbor IP
      (translation) table. They will then try to submit the packets for IPv4
      anycast addresses to the complete wrong device in the mesh. This will for
      example break the access to the status page to the connected device or the
      anycast DNS forwarder implementation. Especially the latter causes extreme
      latency when clients try to connect to server using a domain name or even
      breaks the connection setup process completely. Both are caused by the
      unanswered DNS requests which at first glance look like packet loss.
      
      An node must therefore take care of:
      
      * not transmitting ARP packets related to the anycast IPv4 address over
        bat0
      * drop ARP packets related to the anycast IPv4 when they are received on
        bat0 from a still broken node
      * don't accept ARP packets related to the anycast IPv4 replies on local
        node when it comes from bat0
      
      Fixes: b3762fc6 ("gluon-client-bridge: move IPv4 local subnet route to br-client (#1312)")
      a7a5db9f
  19. 19 Jul, 2018 1 commit
  20. 14 Jul, 2018 2 commits
  21. 12 Jul, 2018 1 commit
    • Christoph Krapp's avatar
      modules: update LEDE · c28b797c
      Christoph Krapp authored
      aaecfecdcd kernel: bump kernel 4.4 to version 4.4.139
      b08003223a base-files: fix links in banner.failsafe
      71019a7605 ar71xx: fix 5 GHz Wi-Fi on NBG6716
      ba5c0a1dea Revert "base-files: fix UCI config parsing and callback handling"
      5c6a8a9cdb kernel: bump kernel 4.4 to version 4.4.138
      cf4a37a581 uci: add missing 'option' support to uci_rename()
      7fc94b2a25 mac80211: rt2x00: no longer use TXOP_BACKOFF for probe frames
      b03826d8aa kernel: bump kernel 4.4 to version 4.4.137
      21f44e3389 map: add ealen as configurable uci parameter
      Signed-off-by: default avatarChristoph Krapp <achterin@googlemail.com>
      c28b797c
  22. 11 Jul, 2018 1 commit