Commit Graph

169 Commits

Author SHA1 Message Date
nbd 64ae631f20 kernel: remove the netfilter optimization that skips the filter table, it has caused too many issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r44873

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44874 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-17 17:15:15 +00:00
nbd 8737792072 ath9k: fix a beacon enable handling bug
Backport of r44696

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44697 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-12 16:32:07 +00:00
jow 878af3117f BB: ubox: fix segmentation fault in insmod
Fix segfault in kmodloader insmod mode due to uninitialized module
directory list.

Apply the required fix as patch for now since we don't have the
ulog infrastructure in BB (yet) required for the git head of ubox.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44550 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-26 21:29:57 +00:00
jow 11fa76da82 BB: fstools: fix build with enabled ubifs extroot support
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r44538

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44539 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-25 18:55:39 +00:00
jow 8d49c6d438 BB: fstools: cumulative backport
- Adds support for /dev/vd* virtual io
- Adds support for overlayfs v23
- Fixes overlayfs mount on 3.18
- Make the block tool ignore case when comparing uuid strings
- Fixes sysupgrade on linux 3.18
- Support extroot/ubi
- Allows using UBIFS volume as overlay and adds support for Btrfs
- Fix exit code of uci-defaults script
- Support external overlays on non-MTD systems again
- Account for new directory structure of overlayfs partitions (additional upper/ component)
- Support executing block from either overlay or rom
- Support loading fstab from either overlay or rom
- Log extroot failures to dmesg

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42812, r42890, r43090, r43368, r43480, r43485, r43717, r43868, r44180, r44535

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44537 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-25 17:43:00 +00:00
jow dfcbb3563e BB: ubox: kmodloader: support loading kmods from multiple directories
This is required during early boot in the extroot setup phase to support
loading kmods from the overlay that depend on kmods on the rom partition.

The subsequent mount_root updates will use the LD_LIBRARY_PATH env
variable to pass kmod directories to kmodloader.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42813, r44533

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44536 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-25 17:42:49 +00:00
nbd e0b8c83ec8 samba36: update to 3.6.25, fixes remote code execution bug (CVE-2015-0240)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r44515

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44516 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-24 07:24:29 +00:00
jow edefd1ad42 BB: build: improve feed handling for opkg.conf
- Consider not installed feeds as well
 - Add option to decide whether to comment disabled feeds

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42931

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44441 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-13 11:59:16 +00:00
cyrus e602c6df19 openssl: fix upstream regression for non-ec builds
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44365 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-09 15:28:09 +00:00
cyrus a31e28ae0c openssl: bump to 1.0.2
Fixes CVE-2014-3513, CVE-2014-3567, CVE-2014-3568, CVE-2014-3566

Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44347 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-09 12:13:06 +00:00
blogic 7d01d821b0 kernel: add support for NFSv4
To: openwrt-devel@lists.openwrt.org

This work is based on Daniel Colascione's submission to the OpenWrt
devel mailing list on January 15th, 2014. I modified his patch so that
it applied to the current OpenWrt Barrier Breaker tree.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44162 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-28 12:01:51 +00:00
blogic 43067a7e80 ca-certificates: update to 20141019
update to version 20141019 and
create symbolic link for certificate hashes during installation

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44161 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-28 12:01:44 +00:00
jow d393895c8a BB: fix subject in generated certificates
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r44149

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44152 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-25 23:56:05 +00:00
jow ccac7ce177 BB: px5g: generate unique serial numbers
Generate a random serial from /dev/urandom when creating selfsigned certs.
Fixes "sec_error_reused_issuer_and_serial" with Firefox.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43168

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44151 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-25 23:56:02 +00:00
jow 5a87b12359 BB: gmp: use http instead of ftp download (#18805)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r44082

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44095 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-24 13:08:49 +00:00
jow 179d925d85 BB: polarssl: update to v1.3.9 and patch CVE-2015-1182
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44061 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-20 13:02:38 +00:00
cyrus 3a2fa00474 map: backport fixes from trunk
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43962 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-13 19:02:32 +00:00
jow 0da41e430e BB: openssl: update to v1.0.1k (8 CVEs)
Fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572,
CVE-2015-0204, CVE-2015-0205, CVE-2014-8275 and CVE-2014-3570.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43889 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-09 00:10:55 +00:00
jow 4cbedb56ae BB: qos-scripts: bump PKG_REVISION and copyright year
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43860

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43862 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-06 12:43:49 +00:00
jow 4d84b8624b BB: openvpn: bump PKG_REVISION and copyright year
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43859

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43861 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-06 12:43:44 +00:00
nbd c2a8bebec3 openvpn: backport an upstream fix for a regression in using --cipher none (fixes #18676)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43823

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43824 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-04 12:03:51 +00:00
nbd 331ecb083c mac80211: fix HT mode selection for ad-hoc
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43769

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43770 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-22 21:46:52 +00:00
nbd e623b19d84 ubi-utils: add mirror md5sum
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43761

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43764 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-22 17:43:21 +00:00
nbd be76d04ca4 uclient: update to the latest version, fixes HTTP digest auth processing
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43600

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43601 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-10 16:04:08 +00:00
cyrus 66e21465bb odhcp6c: correctly handle renew-replies with short lease times
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43593 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-10 10:42:41 +00:00
nbd 938c6b4242 qos-scripts: fix insmod commands
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43562

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43566 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-08 12:06:02 +00:00
nbd 678b8b53a3 openvpn: update to 2.3.6, fixes CVE-2014-8104
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43482

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43483 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-01 19:50:45 +00:00
nbd 6ff5f0a977 ath9k: fix hardware tx queue allocation order
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43438

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43439 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-30 19:45:37 +00:00
cyrus cb902a80c8 odhcp6c: backport from trunk to fix busyloop
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43416 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-28 00:42:24 +00:00
nbd 3818debcd0 Revert "ath9k: fix crashes when using shared IRQs"
This backport seems to be incomplete and causing some IRQ related
issues.

This reverts commit r43240

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43276 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-15 21:17:21 +00:00
nbd fa74ff9964 ath9k: fix crashes when using shared IRQs
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43239

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43240 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-13 18:26:27 +00:00
cyrus 83a67bc701 netifd: fix default ORO for 6rd
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43215 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-08 12:27:41 +00:00
nbd 2a003f0bbb mac80211: merge a few pending upstream fixes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43208

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43209 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-07 11:17:41 +00:00
blogic 47b1ff965b BB: lantiq: vr9: - fix vmmc build
(required not-distributable firmware blob - dump it by yourself from original firmware)

Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43161 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 08:32:50 +00:00
blogic 73c3df0afe BB: lantiq: vr9: - fix tapi build
(required not-distributable firmware blob - dump it by yourself from original firmware)

Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43160 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 08:32:46 +00:00
blogic ea9e61b8eb BB: lantiq: ltq-vmmc add support for ar9-vr9
(required not-distributable firmware blob - dump it by yourself from original firmware)

Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43156 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 08:32:30 +00:00
jow f27e8004a0 BB: busybox: make high ASCII chars printable (#7993)
Currently busybox utils like "ls" fail to display filenames containing UTF-8
characters, replacing any special characters with "?".

Change libbb's printable_string() function to allow high ASCII characters so
that unicode filenames are displayed correctls.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43084

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43085 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:22:41 +00:00
jow c7ae6947ca BB: px5g-standalone: use /dev/urandom to initialize serial (#18232)
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43080

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43083 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:09:37 +00:00
jow 071e09e698 BB: uhttpd: fix HTTP incompatibilities in file handler
* Fixes sending an extraneous message body for 204 and 304 resoponses which
   breaks Chrome in keep-alive mode.

 * Adds mimetypes for JSON and JSONP.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43078

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43082 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:09:09 +00:00
nbd 5c953af45e mac80211: fix key flush handling in AP+STA
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43079

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43081 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:07:45 +00:00
nbd 42cd4e3de9 base-files: add /etc/shadow to list of essential files to keep in sysupgrade (bug 18206)
Based on bug #18206 sysupgrade can lead to loss of password information in
certain situations. Most likely all users who will upgrade from versions
r43017-43040, will lose their current passwords. :-(
https://dev.openwrt.org/ticket/18206

Currently /etc/shadow is defined as a conffile in base-files:
https://dev.openwrt.org/browser/trunk/package/base-files/Makefile#L37

But it is not defined in the default list of essential files to keep in
sysupgrade:
https://dev.openwrt.org/browser/trunk/package/base-files/files/lib/upgrade/keep.d/base-files-essential

If exporting conffiles info fails, /etc/shadow can get lost.

Shadow passwords are now the default, so saying that preserving /etc/passwd
is essential while /etc/shadow is not, makes no sense.

The attached patch adds /etc/shadow to the list of essential files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Backport of r43061

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43062 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 17:23:14 +00:00
cyrus f34834fe36 odhcp6c: avoid some unnecessary big mallocs
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43057 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 10:39:31 +00:00
nbd e3da990876 ath9k: fix regulatory notifier calls with CONFIG_ATH_USER_REGD=y (#18211)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43055 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:31:04 +00:00
nbd fdbd75e036 mac80211: refresh patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43054 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:31:01 +00:00
nbd 66a76be5c1 ath9k: backport tx power reporting fix
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43053 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:30:59 +00:00
nbd 22808d019d openssl: add ABI_VERSION to fix package rebuild issues (fixes #18169)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42963

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42964 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-19 16:54:33 +00:00
nbd 31e8fdda0e polarssl: do not build the unused programs
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42960

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42961 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-19 09:43:49 +00:00
nbd 9a5b2585d3 polarssl: add missing version bump
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42949

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42950 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-18 09:20:57 +00:00
nbd e44e52157d polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42947

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42948 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-18 09:19:51 +00:00
cyrus 249857af0e hostapd: CVE-2014-3686 fixes
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42943 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-17 06:16:07 +00:00