Mislav Novakovic [Fri, 25 Aug 2017 13:00:42 +0000 (15:00 +0200)]
sysrepo: update the sysrepo/netopeer2 stack
Patch includes updates to packages:
netopeer2: update to version 0.4.0
sysrepo: update to 0.7.0
libnetconf2: update to 0.9.15
libyang: update to 0.13.46
ede744a: depends on libcares now instead of libudns 1c64829: new cmdline option --no-delay for not turning off TCP_NODELAY 9201619: ss-local: check if client supports socks5 protocol and no-auth-required method f8283fc: Fix potential buffer overflow when parsing json config 380fddb: redir: fix conversion from DSCP to ToS
Marcin Jurkowski [Tue, 25 Jul 2017 21:37:57 +0000 (23:37 +0200)]
htpdate: modify init scripts to use procd and uci configuration
Modify init script to use standard uci configuration and procd for
process management. We benefit from:
- use of standard LEDE configuration with its ability to revert and
commit changes
- validation of configuration variables
- procd taking care of restarting daemon when config changes and user
wants to reload it
- automatic respawning of daemon process in case it dies
The source is patched to make it possible to run as a daemon in
foreground.
Hannu Nyman [Thu, 14 Sep 2017 21:09:42 +0000 (00:09 +0300)]
collectd: uptime plugin: apply fix from upstream
Uptime plugin fails to adjust for system time changes after boot.
As Openwrt/LEDE routers usually do not have a RTC, the system time
gets adjusted with NTP possibly after collectd has already started.
But collectd continues to use the initial time set by 'sysfixtime',
which can lead to incorrect uptime calculations.
Apply a proposed fix from upstream that uses /proc/uptime
Reference to https://github.com/collectd/collectd/pull/2034
python,python3: add host-flags/settings to host pip install rules
The host pip install should have the host's CFLAGS, LDFLAGS, etc
available.
And not the target's flags.
Otherwise, weird things can happen when installing
packages (host-side) that need to build C code.
mwan3: fix interface-bound traffic when interface is offline
This commit fixed what 6d99b602 was supposed to fix without affecting
interface-bound traffic.
Before 6d99b602 interface-bound traffic was working normally as long
as at least one interface was online. However when the last interface
went offline, it was impossible to ping and such state was
unrecoverable.
Commit 6d99b602 fixed unrecoverable offline state problem (it was
possible to ping -I iface) but messed inteface-bound traffic. Traffic
with interface source address was not working if the interface was in
"offline" state, even if another interface was online.
The problem was caused by an inconsistent "offline" interface state:
iptables-related rules were kept while routing table and policy were
deleted.
The idea behind this commit is to:
1. Keep all the rules for each interface (iptables, routing table,
policy) regardless of its state. This ensures consistency,
2. Make interface state hotplug events affect only iptables'
mwan3_policy_* rules. Interface-related iptables, routing table
and policy is removed only when mwan3 is manually stopped.
To make such changes possible, it's necessary to change the way
mwan3_policy_* rule generator keeps track of interface state hotplug
events.
Until now, it checked for the existence of custom interface-related
routing table (table id 1, 2, 3, ...). Clearly we can no longer rely
on that so each interface state is stored explicitly in file.
Colby Whitney [Wed, 30 Aug 2017 17:26:47 +0000 (11:26 -0600)]
squashfs-tools: fix segfault
Unsquashfs was segfaulting. When examining in gdb the stack was corrupt.
I found that converting the variable length arrays to malloc caused the
stack corruption to not happen and the segfault went away. This is due to
the musl pthread stack size being 80k by default. So the chance of a stack
overflow is high.
* add kresd & turris omnia support
* add dnscrypt-proxy support
* change start priority to 30, to fix possible trigger issues on slow
booting hardware
* simplify suspend/resume handling (no longer use a hideout directory)
* enhanced LuCI frontend
* many small changes & improvements
* default config change (please update your config!), adblock is now
disabled by default
* documentation update
net/mwan3: fix /var/state issue in 14-mwan3 hotplug
Use common function to toggle ip address in /var/state/mwan3.
Change also to use toggle function and not set function. If ip address
is often changed every change is saved to /var/state/mwan3.
boost: 1.65.0 Update + Fixes
This commit updates the boost libraries to version 1.65.0
This new version brings two new libraries:
- Boost.Stacktrace [1]
-> Gather, store, copy and print backtraces, from Antony Polukhin.
- Boost.PolyCollection [2]
-> Fast containers of polymorphic objects, from Joaquín M López Muñoz.
Fixes in this commit:
- Boost.Python for Python 3.6
-> The dynamic library was not being compiled, resulting in an empty package. Fixed.
- Boost.TypeErasure
-> The dynamic library was not available to install. Fixed.
- Boost.Serialization
-> The wserialization dynamic library was being compiled but not available to install. Fixed.
Extras:
- This commit also contains the post-release fixes, which did not make it into the final release [3].
As always, more information about this release, can be found in [4].
Yousong Zhou [Wed, 30 Aug 2017 02:07:06 +0000 (10:07 +0800)]
shadowsocks-libev: ss-rules: resolve server names before adding to ipset
ipset command line utility supports ranges of address: IP-IP, but the
dash character is also valid character in host names. If we have a
remote server ss-00.example.com, ipset may complain that