Commit Graph

129 Commits

Author SHA1 Message Date
nbd 42cd4e3de9 base-files: add /etc/shadow to list of essential files to keep in sysupgrade (bug 18206)
Based on bug #18206 sysupgrade can lead to loss of password information in
certain situations. Most likely all users who will upgrade from versions
r43017-43040, will lose their current passwords. :-(
https://dev.openwrt.org/ticket/18206

Currently /etc/shadow is defined as a conffile in base-files:
https://dev.openwrt.org/browser/trunk/package/base-files/Makefile#L37

But it is not defined in the default list of essential files to keep in
sysupgrade:
https://dev.openwrt.org/browser/trunk/package/base-files/files/lib/upgrade/keep.d/base-files-essential

If exporting conffiles info fails, /etc/shadow can get lost.

Shadow passwords are now the default, so saying that preserving /etc/passwd
is essential while /etc/shadow is not, makes no sense.

The attached patch adds /etc/shadow to the list of essential files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Backport of r43061

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43062 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 17:23:14 +00:00
cyrus f34834fe36 odhcp6c: avoid some unnecessary big mallocs
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43057 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 10:39:31 +00:00
nbd e3da990876 ath9k: fix regulatory notifier calls with CONFIG_ATH_USER_REGD=y (#18211)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43055 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:31:04 +00:00
nbd fdbd75e036 mac80211: refresh patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43054 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:31:01 +00:00
nbd 66a76be5c1 ath9k: backport tx power reporting fix
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43053 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:30:59 +00:00
nbd 22808d019d openssl: add ABI_VERSION to fix package rebuild issues (fixes #18169)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42963

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42964 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-19 16:54:33 +00:00
nbd 31e8fdda0e polarssl: do not build the unused programs
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42960

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42961 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-19 09:43:49 +00:00
nbd 9a5b2585d3 polarssl: add missing version bump
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42949

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42950 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-18 09:20:57 +00:00
nbd e44e52157d polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42947

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42948 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-18 09:19:51 +00:00
cyrus 249857af0e hostapd: CVE-2014-3686 fixes
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42943 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-17 06:16:07 +00:00
jow fb6b39b78c BB: openssl: update to v1.0.1j (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)
Also refresh patches and bump copyright year in Makefile.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42929

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42930 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-16 08:34:38 +00:00
blogic 543ede0f1f lantiq: mac80211: add support for rf5362 (needed by vgv7519 wifi)
Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42903 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-14 11:03:30 +00:00
nbd 038578cac7 procd: fix initial nand sysupgrade
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42884

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42887 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 15:51:35 +00:00
nbd 0273133e34 procd: fix parsing of the has_env parameter
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42883

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42886 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 15:51:33 +00:00
nbd f2ee60ca8b mac80211: remove NO-IR from channel 36-48
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42882

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42885 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 15:51:31 +00:00
cyrus 60012ae40e odhcp6c: fix parse errors with some dhcpv6 servers
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42870 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 12:18:58 +00:00
cyrus 6f93bcd13b odhcp6c: fix typo in last commit
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42853 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 15:27:38 +00:00
cyrus 58b855cae6 odhcp6c: don't assign addresses or prefixes prematurely
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42851 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 15:16:41 +00:00
cyrus a292e3b8bc odhcp6c: ensure signal-safety of signal handlers
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42843 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 10:00:40 +00:00
cyrus 28c47a66d9 odhcp6c: add route-workaround for broken IPv6-ISPs
Some ISP seem to only do stateful DHCPv6 and not sending RAs.
This is technically broken because plain DHCPv6 doesn't carry routes.

We work around here by faking a default route to the DHCPv6 server
if we do not receive a useful RA from the ISP.

This workaround can be turned off with: option fakeroutes 0

Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42842 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 10:00:36 +00:00
nbd 059675c34f hostapd: merge an upstream patch for pmksa cache
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42762

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42763 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-05 10:39:52 +00:00
cyrus d26726dbc7 map: fix portsets starting with 0 and use regular NAT for 1:1 MAP
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42742 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-02 19:16:17 +00:00
florian b3f82943e9 brcm2708-gpu-fw: update to Sep. 27 2014 snapshot
Backport of r42676

Signed-off-by: Florian Fainelli <florian@openwrt.org>



git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42677 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-27 17:43:54 +00:00
cyrus a397aa16aa odhcp6c: work around weird ISP RS behaviour
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42675 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-27 16:58:15 +00:00
cyrus b03d43d551 odhcpd: fix segfault when parsing domain options in UCI
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42664 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-25 11:54:08 +00:00
jow 58c6e574c3 BB: firewall: allow '*' as synonym for any / all in family and proto options
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42620

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42623 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-19 18:23:20 +00:00
jow e12261d40a BB: firewall: fix heap corruption in fw3_bitlen2netmask() with IPv6 addresses
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42610

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42622 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-19 18:23:17 +00:00
jow a3f528c624 BB: firewall: fix invalid memory access when processing /128 IPv6 addresses from ubus, properly emit REDIRECT rules for local port forwards
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42604

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42621 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-19 18:23:15 +00:00
blogic 533282da86 cyassl: update to version 3.2.0
This fixes a security problem:
Security fix for RSA Padding check vulnerability

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Backport of r42526

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42614 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-18 15:24:45 +00:00
blogic f3c7b78225 ppp: update to version 2.4.7
This fixes: CVE-2014-3158 and some other bugs.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Backport of r42525

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42613 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-18 15:24:22 +00:00
blogic 42d19d4de6 curl: 7.36.0 -> 7.38.0
Main changes:
- URL parser: IPv6 zone identifiers are now supported
- cyassl: Use error-ssl.h when available (drop local patch)
- polarssl: support CURLOPT_CAPATH / --capath
- mkhelp: generate code for --disable-manual as well (drop local patch)

Full release notes: http://curl.haxx.se/changes.html

MIPS 34kc binary size:
- 7.36.0 before: 82,539 bytes
- 7.38.0 after: 83,321 bytes

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

Backport of r42517

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42612 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-18 15:24:07 +00:00
nbd 12854c65c3 ubus: update to latest version, adds various fixes and improvements
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42594

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42595 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-17 11:34:40 +00:00
blogic 445be98788 mdns: update to latest git HEAD
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42593 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-17 11:01:26 +00:00
blogic 5d7d895845 hostapd: do not remove foreign wpa_supplicant sockets
https://dev.openwrt.org/ticket/17886

Signed-off-by: John Crispin <blogic@openwrt.org>

Backport of r42586

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42591 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-17 11:01:23 +00:00
blogic 355a78db56 ubox: update to latest git HEAD
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42582 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-16 18:35:15 +00:00
blogic bfaaa74a45 procd: update to latest git HEAD
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42581 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-16 18:35:09 +00:00
blogic b1e0084f76 fs-tools: dont use mips16
this causes problems on 47xx/74k

Signed-off-by: John Crispin <blogic@openwrt.org>

Backport of r42570

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42579 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-16 18:35:03 +00:00
blogic 13237e2ea4 comgt: add directip proto
add a proto handler for sierra wireless directip modems

Signed-off-by: John Crispin <blogic@openwrt.org>

Backport of r42465

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42577 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-16 18:34:44 +00:00
nbd cebcd32fe8 hostapd: remove bogus default setting for wps_pin (#17873)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42553

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42554 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-15 16:09:36 +00:00
nbd f4de40a189 procd: allow adding empty strings to arrays
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42456

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42458 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-10 12:57:07 +00:00
nbd 9d90bc20d4 ath9k: fix pll clock initialization on newer soc devices (fixes #14916)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42453

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42454 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-09 08:03:34 +00:00
nbd 1dd5b6e82b ath9k: add some ani related stability / performance fixes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42443

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42444 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-08 16:45:58 +00:00
blogic 6ca648e9e3 mac80211: add mt7620a/n to the rt2x00 depends list
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42441 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-08 15:14:03 +00:00
cyrus dbbf0efa00 netifd: work-around kernel IPv6 on-link route issue
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42440 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-08 14:47:26 +00:00
nbd ec58844c4a uclient: update to the latest version, fixes some crash issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42419

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42420 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-04 17:46:39 +00:00
nbd 3d2eefd4cb mtd: disable trx_check() for ar71xx, fixes a regression introduced in r42403
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42405

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42406 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-02 21:06:59 +00:00
nbd 955146573b mtd: Fix trx check after partition rename ("linux" to "firmware")
On brcm47xx (Huawei E970), I noticed that sysupgrade now tries to flash trx images which don't fit into the flash, resulting in non-booting system.

I found that mtd does trx size checking only when flashing to a partition called "linux". This patch changes this to be "firmware".

This matches the following patch which changed partition name in bcm47xxpart.c driver to "firmware":

commit 86b4d5ef68ca77ff6724ebb9bddd6b93239c87fc
Author: hauke <hauke@3c298f89-4303-0410-b956-a3cf2f4a3e73>
Date:   Sun Dec 1 16:32:32 2013 +0000

    brcm47xx: use "firmware" partition name
    ...
    Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

    Backport of r38973

Signed-off-by: Mathias Adam <m.adam--openwrt@adamis.de>

Backport of r42403

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42404 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-02 17:14:24 +00:00
blogic 088b1cbba7 mac80211: rt2x00 correctly set ht20/ht40 filter
Simple patch to correct ht20/ht40 switching. Tested with rt3290/rt3352/rt5350

Signed-off-by: Serge Vasilugin <vasilugin@yandex.ru>

Backport of r42348

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42396 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:22:16 +00:00
blogic 67cfa7ee6e dnsmasq: Make the --dhcp-host logic easier to understand
Use an if/else statement to cover the two different syntaxes.  Add
comments explaining what the end results should look like.

This patch should not change the script's output.

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>

Backport of r42320

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42390 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:22:08 +00:00
blogic 41ed6f55fb dnsmasq: Fix hosts file format when MAC address is not specified
An entry like this in /etc/config/dhcp:

    config 'host'
        option 'name' 'pc2'
        option 'ip' '192.168.100.56'
        option 'dns' '1'

results in a /tmp/hosts/dhcp entry that looks like this:

    192.168.100.56 .lan

Obviously it should say "pc2.lan".

This happens because $name is set to "" in order to support the MAC-less
syntax: "--dhcp-host=lap,192.168.0.199".  Fix this by reordering the
operations.  Also, refuse to add a DNS entry if the hostname or IP is
missing.

Fixes #17683

Reported-by: Kostas Papadopoulos <kpapad75@travelguide.gr>
Signed-off-by: Kevin Cernekee <cernekee@gmail.com>

Backport of r42319

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42389 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:22:06 +00:00