Permalink
Commits on Apr 17, 2018
  1. base-files: /lib/functions.sh: ignore errors in insert_modules

    NeoRaider committed Apr 17, 2018
    Package postinst will pass even names of builtin modules to insert_modules,
    leading to postinst failing with error 255. This has been fixed in master
    in r5279, but for lede-17.01 this minimal change is preferable.
    
    Fixes FS#645, FS#893.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Commits on Apr 16, 2018
  1. fstools: update to latest lede-17.01 branch

    Rafał Miłecki
    Rafał Miłecki committed Apr 16, 2018
    6609e98 libfstools: add "const" to char pointer arguments in mount_move()
    95c07d5 libfstools: fix foreachdir() to pass dir with a trailing slash
    
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Apr 14, 2018
  1. kernel: bump kernel 4.4 to 4.4.126 for 17.01

    Stijn Segers authored and hauke committed Apr 3, 2018
    * Refreshed patches
    
    Compile-tested: ar71xx, ramips/mt7621, x86/64
    Run-tested: ar71xx
    
    Signed-off-by: Stijn Segers <foss@volatilesystems.org>
  2. mbedtls: change libmbedcrypto.so soversion back to 0

    hauke committed Apr 14, 2018
    mbedtls changed in version 2.7.0 and 2.7.2 the soversion of the
    libmbedcrypto.so library, use the old version again to be able to use
    the new library with binaries compiled against the old mbedtls library.
    
    Some binaries got rebuild to for the 2.7.0 release and are now using
    libmbedcrypto.so.1, the older ones are still using libmbedcrypto.so.0.
    Go back to libmbedcrypto.so.0 and make the system rebuild the binaries
    which were rebuild for 2.7.0 again.
    
    This should make the libmbedcrypto.so library be compatible with the old
    version shipped with 17.01.
    
    Fixes: 3ca1438 ("mbedtls: update to version 2.7.2")
    Fixes: f609913 ("mbedtls: update to version 2.7.0")
    Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Commits on Apr 12, 2018
  1. kernel: mtd: bcm47xxpart: improve handling TRX partition size

    Rafał Miłecki
    Rafał Miłecki committed Apr 12, 2018
    This is important fix for flash parsing in some corner cases. In case
    of TRX subpartition with rootfs being aligned to the flash block size it
    was incorrectly registered twice. Detecting & registering it as a
    standalone partition was resulting in an incorrect "firmware" partition
    size and possibly broken sysupgrade.
    
    It wasn't noticed before because "rootfs" alignment depends on a kernel
    size. It can happen though - depending on the configuration and the
    kernel size.
    
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
    
    (cherry picked from commit f5195e7)
Commits on Apr 10, 2018
  1. ar71xx: sysupgrade: improve CPE/WBS 210/510 validation, add new metad…

    NeoRaider committed Apr 10, 2018
    …ata offset
    
    Previously, tplink_pharos_check_image() would accept any image with ELF
    magic and only non-printable data in the support-list, as in this case the
    while-read loop would not run at all. Add the new support-list offset and
    ensure an image is only accepted when the model string is actually found.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Commits on Apr 5, 2018
  1. kernel: backport commit reverting genirq patch causing regressions

    Rafał Miłecki
    Rafał Miłecki committed Apr 5, 2018
    Switching from kernel 4.4.120 to 4.4.124 introduced a regression in
    the genirq code. It was caused by a commit 9d0273bb1c4b6 ("genirq: Use
    irqd_get_trigger_type to compare the trigger type for shared IRQs").
    
    On bcm53xx it breaks serial console and results in a flood of:
    [   22.078829] genirq: Flags mismatch irq 18. 00000080 (serial) vs. 00000080 (gpio)
    [   22.086432] genirq: Flags mismatch irq 18. 00000080 (serial) vs. 00000080 (gpio)
    [   22.601150] genirq: Flags mismatch irq 18. 00000080 (serial) vs. 00000080 (gpio)
    [   22.608845] genirq: Flags mismatch irq 18. 00000080 (serial) vs. 00000080 (gpio)
    
    Later in the upstream "linux-4.4.y" branch that commit was reverted and
    it was followed by a 4.4.126 release. Until we switch from 4.4.124 to
    4.4.126 (or newer), let's backport that reverting commit.
    
    Fixes: bed0ee7 ("Kernel: bump 4.4 to 4.4.124 for 17.01")
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Apr 4, 2018
  1. intel-microcode: update to 20180312

    wigyori committed Mar 20, 2018
    - Update microcode for 24 CPU types
    - Implements IBRS/IBPB/STIPB support, Spectre-v2 mitigation for:
      Sandybridge, Ivy Bridge, Haswell, Broadwell, Skylake, Kaby Lake,
      Coffee Lake
    - Missing production updates:
       - Broadwell-E/EX Xeons (sig 0x406f1)
       - Anniedale/Morefield, Apollo Lake, Avoton, Cherry Trail, Braswell,
         Gemini Lake, Denverton
    - New Microcodes:
       - sig 0x00050653, pf_mask 0x97, 2018-01-29, rev 0x1000140
       - sig 0x00050665, pf_mask 0x10, 2018-01-22, rev 0xe000009
    
    Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
    (cherry picked from commit 3db9d6e)
Commits on Apr 3, 2018
  1. brcm47xx: add Luxul XAP-1500 and XWR-1750 WiFi LEDs

    Rafał Miłecki
    Rafał Miłecki committed Apr 3, 2018
    (cherry picked from commit 16efb0c)
    
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
  2. mac80211: brcmfmac: add support for BCM4366E chipset

    Rafał Miłecki
    Rafał Miłecki committed Apr 3, 2018
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Apr 1, 2018
  1. mbedtls: update to version 2.7.2

    hauke committed Apr 1, 2018
    This fixes some minor security problems.
    
    Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
  2. openssl: update to 1.0.2o

    p-wassi authored and hauke committed Mar 30, 2018
    Fixes CVE-2018-0739
    
    Signed-off-by: Paul Wassi <p.wassi@gmx.at>
  3. Kernel: bump 4.4 to 4.4.124 for 17.01

    Stijn Segers authored and hauke committed Mar 28, 2018
    * Refreshed patches
     * Removed 087-Revert-led-core-Fix-brightness-setting-when-setting-.patch (applied upstream)
    
     Compile-tested on ar71xx, ramips/mt7621, x86/64
     Run-tested on ar71xx
    
    Signed-off-by: Stijn Segers <foss@volatilesystems.org>
Commits on Mar 21, 2018
  1. mac80211: brcmfmac: backport commit dropping IAPP packets by default

    Rafał Miłecki
    Rafał Miłecki committed Mar 21, 2018
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Mar 11, 2018
  1. kernel: merge a pending fix for HFSC warnings/slowdowns (fixes FS#1136)

    nbd168 committed Mar 10, 2018
    Signed-off-by: Felix Fietkau <nbd@nbd.name>
Commits on Mar 10, 2018
  1. mbedtls: update to version 2.7.0

    hauke committed Mar 4, 2018
    This fixes the following security problems:
    * CVE-2018-0488: Risk of remote code execution when truncated HMAC is enabled
    * CVE-2018-0487: Risk of remote code execution when verifying RSASSA-PSS signatures
    
    This release is also ABI incompatible with the previous one, but it is
    API compatible.
    
    Some functions used by a lot of other software was renamed and the old
    function names are provided as a static inline now, but they are only
    active when deprecated functions are allowed, deactivate the removal of
    deprecated functions for now.
    
    Also increase the PKG_RELEASE version to force a rebuild and update of
    packages depending on mbedtls to handle the changed ABI.
    
    Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
  2. tools/e2fsprogs: fix building on a glibc 2.27 host

    pkgadd authored and hauke committed Mar 4, 2018
    The e2fsprogs host build fails on a glibc 2.27 host with
    
    make[6]: Entering directory 'build_dir/host/e2fsprogs-1.43.7/debugfs'
            CC create_inode.o
    ./../misc/create_inode.c:399:18: error: conflicting types for 'copy_file_range'
     static errcode_t copy_file_range(ext2_filsys fs, int fd, ext2_file_t e2_file,
                      ^~~~~~~~~~~~~~~
    In file included from ./../misc/create_inode.c:19:0:
    /usr/include/unistd.h:1110:9: note: previous declaration of 'copy_file_range' was here
     ssize_t copy_file_range (int __infd, __off64_t *__pinoff,
             ^~~~~~~~~~~~~~~
    
    Backport upstream commit "misc: rename copy_file_range to
    copy_file_chunk" 01551bdba16ab16512a01affe02ade32c41ede8a in order to
    fix this.
    
    Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>
Commits on Mar 8, 2018
  1. generic: revert broken LED core patch

    NeoRaider committed Mar 8, 2018
    At least on some devices, LEDs don't work anymore since kernel 4.4.120.
    Revert the broken change.
    
    See also: https://www.spinics.net/lists/stable/msg223656.html
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Commits on Mar 7, 2018
  1. base-files: tune fragment queue thresholds for available system memory

    NeoRaider committed Mar 5, 2018
    The default fragment low/high thresholds are 3 and 4 MB. On devices with
    only 32MB RAM, these settings may lead to OOM when many fragments that
    cannot be reassembled are received. Decrease fragment low/high thresholds
    to 384 and 512 kB on devices with less than 64 MB RAM.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
  2. include/package-defaults.mk: fix default Build/Prepare with empty ./src

    NeoRaider committed Mar 6, 2018
    Copying ./src/* would fail when src exists, but is empty or only contains
    hidden files.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
  3. include/rootfs.mk: retain list of conffiles with CONFIG_CLEAN_IPKG

    NeoRaider committed Mar 6, 2018
    /usr/lib/opkg/status must not be removed completely, otherwise the
    packages' conffile lists will be missing. Replace it with a reduced version
    only containing the conffile entries.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
  4. include/rootfs.mk: do not remove opkg prerm scripts during rootfs pre…

    NeoRaider committed Mar 6, 2018
    …paration
    
    When a user removes a preinstalled opkg package, the package's prerm script
    (and in particular our default_prerm) should run.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
  5. base-files: sysupgrade: do not rely on opkg to list changed conffiles

    NeoRaider committed Mar 6, 2018
    Many packages use the opkg conffiles field to list configuration files that
    are to be retained on upgrades. Make this work on systems without opkg.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Commits on Mar 4, 2018
  1. kernel: bump 4.4 to 4.4.120 for 17.01

    Stijn Segers authored and hauke committed Mar 4, 2018
    Bump the 4.4 kernel for the 17.01 release to 4.4.120. Refresh patches.
    
    Compile-tested: ar71xx, ramips/mt7621, x86/64
    Run-tested: ar71xx, x86/64
    
    Signed-off-by: Stijn Segers <foss@volatilesystems.org>
  2. x86: add preinit hook to reload microcode

    wigyori committed Feb 10, 2018
    Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
  3. firmware: add microcode package for Intel

    wigyori committed Feb 10, 2018
    Compiling the Intel microcode package results in a
    microcode.bin and a microcode-64.bin. As we can
    decide based on the subtarget which should be used,
    we'll only split the required .bin file with
    iucode-tool.
    
    x64 will get the intel-microcode-64.bin
    All other variants will get intel-microcode.bin
    
    The microcodes will be updated from preinit via a common
    script - that's the earliest place where we can do it.
    
    Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
  4. firmware: add microcode package for AMD

    wigyori committed Feb 10, 2018
    Use the Debian repository for sourcing the ucode files.
    
    Current (20171205) includes support for fam17h CPUs already.
    
    The microcodes will be updated from preinit via a common
    script - that's the earliest place where we can do it.
    
    Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
  5. tools: add iucode-tool

    wigyori committed Feb 11, 2018
    Add tool to "compile" Intel microcode files. The tool will be
    compiled for host (to split the microcode.dat) and for target
    (to forcibly reload the microcode if required).
    
    Instead of using the large microcode.bin/microcode-64.bin, the
    splitted ucode files (separate for CPU families) will be
    installed.
    
    Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
  6. x86: enable microcode loading for Intel and AMD

    wigyori committed Feb 25, 2018
    Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
Commits on Mar 2, 2018
  1. odhcpd: fix interop with wide DHCPv6 client (FS#1377)

    dedeckeh committed Mar 2, 2018
    aedc154 dhcpv6-ia: don't always send reconf accept option (FS#1377)
    
    Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
Commits on Mar 1, 2018
  1. base-files: fix off-by-one in counting seconds for factory reset

    Rafał Miłecki
    Rafał Miłecki committed Feb 27, 2018
    There was a mismatch between indicating factory reset and code actually
    starting it. After 5 seconds status LED started blinking rapidly letting
    user know it's ready to release reset button. In practice button had to
    stay pressed for another second in order to relly start the process.
    
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Feb 27, 2018
  1. sunxi: disable LPAE to allow kernel to run on A13

    matteoscordino authored and hauke committed Feb 22, 2018
    Fixes issue FS#1355.
    LPAE extensions are enabled, but the A13 does not support them.
    The result is the boot process stopping at "Starting kernel ..."
    
    Fixes: 468735c ("target: sunxi: enable kvm support")
    Signed-off-by: Matteo Scordino <matteo.scordino@gmail.com>
  2. bcm53xx: fix fallback code for picking status LED

    Rafał Miłecki
    Rafał Miłecki committed Feb 27, 2018
    Looking for a wrong LED file name was stopping this code from find any
    LED. This affects devices with only a red/amber power LED.
    
    Fixes: 3aaee1b ("bcm53xx: failsafe support")
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Feb 26, 2018
  1. mountd: update to the latest version from 2018-02-26

    Rafał Miłecki
    Rafał Miłecki committed Feb 26, 2018
    This significantly improves mountd stability & reliability by:
    1) Sending hotplug.d event when appropriate
    2) Properly unmounting
    3) Handling corner cases when unmounting fails
    4) Improving log messages
    
    5f2c419 mount: drop duplicated includes
    aaf2743 mount: call hotplug-call with ACTION=remove before trying to unmount
    97da4ed mount: try lazy unmount if normal one fails
    1b62489 mount: create not working symlink when unmounting fails
    e77dc6d mount: reorder deleting code in the mount_enum_drives()
    76766ae mount: rename tmp variables in the mount_add_list()
    04b897f mount: drop duplicated rmdir() call from the mount_enum_drives()
    a27ea3f mount: drop duplicated unlink() call from the mount_dev_del()
    bf7cc33 mount: fix/improve unmounting log messages
    36f9197 mount: fix removing mount point if it's expired
    ed4270f mount: struct mount: replace "mounted" and "ignore" fileds with a "status"
    1af9ca2 mount: change mount_dev_del() argument to struct mount *
    7c8fea8 mount: rename /proc/mount parser to mount_update_mount_list()
    7aadd1c mount: improve handling mounts table size
    
    Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
Commits on Feb 25, 2018
  1. perf: restrict libunwind dependency to archs that actually support li…

    NeoRaider committed Feb 23, 2018
    …bunwind
    
    Allow building perf on uncommon targets again.
    
    Depending on the kernel version, not all of these archs will actually use
    libunwind in perf. Still, it seems simpler and less error-prone to use the
    same list that is defined in the libunwind package.
    
    Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>