Permalink
Commits on Sep 14, 2017
  1. ipq806x: Archer C2600: fix switch ports numbering

    Baptiste Jonglez authored and mkresin committed Aug 23, 2017
    The order of LAN ports shown in Luci is reversed compared to what is
    written on the case of the device.  Fix the order so that they match.
    
    Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
Commits on Sep 13, 2017
  1. treewide: fix shellscript syntax errors/typos

    BigNerd95 authored and mkresin committed Sep 11, 2017
    Fix multiple syntax errors in shelscripts (of packages only)
    These errors were causing many conditions to not working properly
    
    Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it>
    [increase PKG_RELEASE, drop command substitution from directip.sh]
    Signed-off-by: Mathias Kresin <dev@kresin.em>
  2. ramips: fix hg255d LED status support

    yangfl authored and mkresin committed Sep 9, 2017
    Use the green power LED for boot status indication.
    
    Source: https://my.oschina.net/osbin/blog/278782 Para 3
    
    Signed-off-by: David Yang <mmyangfl@gmail.com>
Commits on Sep 11, 2017
  1. ar71xx: fix MAC addresses on TP-Link TL-WR1043ND v4

    NeoRaider committed Sep 11, 2017
    The addresses were read from the 'config' partition, which would not always
    contain the addresses at the same offsets, depending on the stock firmware
    version used before flashing LEDE. Change this to get the addresses from
    the 'product-info' partition, which is read-only.
    
    Reported-and-tested-by: Andreas Ziegler <ml@andreas-ziegler.de>
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Commits on Sep 10, 2017
  1. hostapd: fix iapp_interface option

    BigNerd95 authored and mkresin committed Sep 9, 2017
    ifname variable were not assigned due to syntax error
    causing the hostapd config file to have an empty iapp_interface= option
    
    Signed-off-by: Lorenzo Santina <lorenzo.santina.dev@gmail.com>
Commits on Sep 8, 2017
  1. kernel: update 4.4 to 4.4.87

    Kevin Darbyshire-Bryant authored and mkresin committed Sep 7, 2017
    Fixes CVE-2017-11600
    
    No patch refresh required
    
    Compile & run tested: ar71xx - Archer C7 v2
    
    Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
  2. dnsmasq: backport arcount edns0 fix

    Kevin Darbyshire-Bryant authored and dedeckeh committed Sep 8, 2017
    Don't return arcount=1 if EDNS0 RR won't fit in the packet.
    
    Omitting the EDNS0 RR but setting arcount gives a malformed packet.
    Also, don't accept UDP packet size less than 512 in received EDNS0.
    
    Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
Commits on Sep 7, 2017
  1. dnsmasq: backport official fix for CVE-2017-13704

    Kevin Darbyshire-Bryant authored and dedeckeh committed Sep 7, 2017
    Remove LEDE partial fix for CVE-2017-13704.
    
    Backport official fix from upstream.
    
    Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
    Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> (PKG_RELEASE increase)
Commits on Sep 6, 2017
  1. uclient: update to 2017-09-06

    NeoRaider committed Sep 6, 2017
    24d6eded73de uclient-http: fix Host: header for literal IPv6 addresses
    83ce236dab86 uclient-fetch: read_data_cb: fix a potential buffer overflow
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Commits on Sep 4, 2017
  1. kernel: update 4.4 to 4.4.86

    Kevin Darbyshire-Bryant authored and mkresin committed Sep 4, 2017
    Refresh patches
    
    Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
  2. brcm47xx: refresh Linux 4.4 config

    Rafał Miłecki
    Rafał Miłecki committed Sep 4, 2017
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Sep 3, 2017
  1. f2fs-tools: fix mkfs.f2fs on big-endian systems

    stintel committed Aug 24, 2017
    Fixes: FS#749
    
    Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
    (cherry picked from commit cdb494f)
  2. f2fs-tools: drop musl compat patch

    stintel committed Aug 24, 2017
    It is no longer needed since version 1.4.1.
    
    Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
    (cherry picked from commit 252c8dd)
  3. f2fs-tools: drop patch in favour of CONFIGURE_VARS

    stintel committed Aug 24, 2017
    Override the failing check in configure with CONFIGURE_VARS instead of
    carrying a patch that's unlikely to be accepted by upstream.
    
    Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
    Acked-by: John Crispin <john@phrozen.org>
    (cherry picked from commit d87f27a)
  4. f2fs-tools: Switch to gz tarball

    diizzyy authored and stintel committed May 10, 2017
    At some point kernel.org decided to drop xz generated tarballs, switch to gz which they still provide.
    
    Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
Commits on Aug 30, 2017
  1. dnsmasq: forward.c: fix CVE-2017-13704

    ldir-EDB0 authored and dedeckeh committed Aug 29, 2017
    Fix SIGSEGV in rfc1035.c answer_request() line 1228 where memset()
    is called with header & limit pointing at the same address and thus
    tries to clear memory from before the buffer begins.
    
    answer_request() is called with an invalid edns packet size provided by
    the client.  Ensure the udp_size provided by the client is bounded by
    512 and configured maximum as per RFC 6891 6.2.3 "Values lower than 512
    MUST be treated as equal to 512"
    
    The client that exposed the problem provided a payload udp size of 0.
    
    Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
    Acked-by: Hans Dedecker <dedeckeh@gmail.com>
Commits on Aug 21, 2017
  1. kernel: backport usbport LED trigger driver support for DT

    Rafał Miłecki
    Rafał Miłecki committed Jun 28, 2017
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
  2. kernel: fix of_node handling in LEDs core code

    Rafał Miłecki
    Rafał Miłecki committed Mar 8, 2017
    This backports fixes for setting of_node and making it possible to read
    extra info from DT. This was partially fixed by:
    [PATCH] leds: leds-gpio: Set of_node for created LED devices
    but it didn't work during initialization.
    
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Aug 17, 2017
  1. kernel: update 4.4 to 4.4.83

    ldir-EDB0 authored and stintel committed Aug 17, 2017
    Refresh patches.
    Minor update 704-phy-no-genphy-soft-reset.patch which was partially
    accepted upstream.
    Compile-tested on ar71xx.
    Runtime-tested on ar71xx.
    
    Fixes the following vulnerabilities:
    - CVE-2017-7533 (4.4.80)
    - CVE-2017-1000111 (4.4.82)
    - CVE-2017-1000112 (4.4.82)
    
    Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
  2. bcm53xx: backport DTS commits that setup USB LEDs

    Rafał Miłecki
    Rafał Miłecki committed Aug 17, 2017
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Aug 15, 2017
  1. tcpdump: Update to 4.9.1

    diizzyy authored and hauke committed Jul 24, 2017
    Fixes:
     * CVE-2017-11108: Fix bounds checking for STP.
    
    Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
Commits on Aug 11, 2017
  1. mbedtls: Re-allow SHA1-signed certificates

    Baptiste Jonglez authored and hauke committed Jul 30, 2017
    Since mbedtls 2.5.1, SHA1 has been disallowed in TLS certificates.
    This breaks openvpn clients that try to connect to servers that
    present a TLS certificate signed with SHA1, which is fairly common.
    
    Run-tested with openvpn-mbedtls 2.4.3, LEDE 17.01.2, on ar71xx.
    
    Fixes: FS#942
    
    Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
  2. ramips: fix WHR-1166D WAN port

    mkresin committed Aug 9, 2017
    By adding the ICPlus IP1001 phy driver an already set RGMII delay mode
    is reset during driver load.
    
    Set the rgmii rx delay to fix corrupt/no packages in case the WAN port
    negotiates to 1000MBit.
    
    Fixes: FS#670
    
    Signed-off-by: Mathias Kresin <dev@kresin.me>
Commits on Aug 9, 2017
  1. base-files: don't setup network in preinit if failsafe is disabled

    Rafał Miłecki
    Rafał Miłecki committed Aug 7, 2017
    With failsafe disabled there is no point in early network setup. We
    don't send announcement over UDP and there is no way to ssh to the
    device.
    
    A side effect of this is avoiding a possibly incorrect network config
    (only with failsafe disabled). This problem is related to possible
    changes made by user in /etc/config/network.
    
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Aug 8, 2017
  1. dnsmasq: backport remove ping check of configured dhcp address

    dedeckeh committed Jul 18, 2017
    Remove ping check in DHCPDISCOVER case as too many buggy clients leave
    an interface in configured state causing the ping check to fail.
    
    Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
  2. procd: update to the latest git HEAD

    dedeckeh committed Aug 8, 2017
    66be6a2 watchdog: fix inline watchdog_get_magicclose function prototype
    
    Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
Commits on Aug 6, 2017
  1. ramips: ArcherC50v1: fix wlan2g MAC address

    f00b4r0 authored and mkresin committed Aug 4, 2017
    By default the wlan eprom contains the generic ralink MAC which is not
    the vendor (TP-Link) one. Based on OFW bootlog, it appears that addresses
    are decremented from the ethernet MAC.
    
    This patch fixes the MAC address for wlan2g in line with OFW.
    
    Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
Commits on Aug 2, 2017
  1. ramips: fix Omnima MiniEMBWiFi image

    mkresin committed Jul 31, 2017
    Reference the Omnima MiniEMBWiFi device tree source file in the image
    build code. Otherwise the dts of the image processed before is used.
    
    Signed-off-by: Mathias Kresin <dev@kresin.me>
  2. ramips: build HuaWei HG255D image

    mkresin committed Jul 31, 2017
    The code to build an image was disabled some time ago for unknown
    reasons albeit the image looks fine.
    
    Signed-off-by: Mathias Kresin <dev@kresin.me>
  3. ramips: add missing partitions

    mkresin committed Jul 31, 2017
    The partitions were lost during migration to device tree.
    
    Signed-off-by: Mathias Kresin <dev@kresin.me>
Commits on Aug 1, 2017
  1. procd: update to latest git HEAD

    blogic committed Aug 1, 2017
    3e68cdf procd: Do not leak pipe file descriptors to children
    
    Signed-off-by: John Crispin <john@phrozen.org>
  2. ralink: fix rcu_sched stalls on mt7621

    blogic committed Aug 1, 2017
    there were 2 bugs
    *) core1 came up with a bad bogo mips, looks like the clock needed time to stabilize
    *) HPT frequency was not set making r4k timers not come up properly
    
    Backport of 9551d91 "ralink: fix rcu_sched stalls on mt7621".
    
    Signed-off-by: John Crispin <john@phrozen.org>
Commits on Jul 29, 2017
  1. ramips: Archer C50v1: fix power led

    f00b4r0 authored and mkresin committed Jul 29, 2017
    01_leds had a workaround for the power led to compensate for the
    inverted GPIO state. This patch was missing from my previous commit.
    
    Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
    [add the power led default-state which was omitted in the last commit
    by me]
    Signed-off-by: Mathias Kresin <dev@kresin.me>
  2. ramips: Archer C50v1: fix switch port numbering

    f00b4r0 authored and mkresin committed Jul 28, 2017
    Luci shows switch ports in wrong order on that device.
    This patch fixes switch port numbering and matches them to the device
    silkscreen.
    
    Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>
  3. ramips: Archer C50v1: fix LEDs active levels

    f00b4r0 authored and mkresin committed Jul 28, 2017
    All LEDs GPIOs are active low on this device.
    
    WAN and POWER states were inverted. Add default state for power.
    
    Tested on Archer C50v1.
    
    Signed-off-by: Thibaut VARENE <hacks@slashdirt.org>