Rafał Miłecki [Thu, 29 Jun 2017 07:24:37 +0000 (09:24 +0200)]
lighttpd: backport more mod_cgi fixes queued for 1.4.46
The most important change is local redirects being disabled by default.
There is an option called cgi.local-redir that allows enabling this
optimization manually back if needed.
Local redirects were initially introduced in 1.4.40 but caused many
problems for *some* web services.
One of problems is breaking Post/Redirect/Get design pattern. With
redirects handled on server side there is no browser redirection making
it "lose" the POST data.
Another possible issue are HTML forms with action="". With CGI local
redirects browser may be sending form data to the wrong URL (the one
that was supposed to redirect the browser).
* main: annotate init/exit functions to save memory
* selftest: remove antique siphash self test
* haskell: re-add updated haskell example
* socket: use ip_rt_put instead of dst_release
* device: avoid double icmp send on routing loop
* compat: clean up cruft
* global: cleanup IP header checking
* compat: do not export symbols unnecessarily
Various cleanups and updates.
* device: netdevice destruction logic change for 4.12
When Linux 4.12 is released next week, we're good to go.
* device: only use one sleep notifier
Rather than have a separate sleep notification for every interface, we now
have a single notifier for every interface. This improves performance,
especially when creating many interfaces at once.
* device: remove icmp conntrack hacks
We're moving hacks upstream the proper way, and then backporting them to
compat.
* receive: extend rate limiting to 1 second after under load detection
After we determine that we're under load, we now wait 1 second before not
being under load again, a timer which is global across all interfaces on a
given system.
* curve25519: satisfy sparse and use short types
* curve25519: keep certain sandy2x functions in C
Certain functions have been made into C, which should improve stack frames and
reliability.
* ratelimiter: rewrite from scratch
This is a big change. We no longer rely on x_tables or xt_hashlimit, instead
using a super minimal and sleek token bucket ratelimiter. This works much
better than the old cruft and should allow us to run more places. It also has
the benefit of being global, so that it's possible to have thousands of
interfaces without killing the system with separate GCs and vmallocs, which is
what happened prior.
* socket: verify saddr belongs to interface
We now more quickly react to changes of the v4 routing table, by ensuring that
the sticky source address is actually still valid.
* wg-quick: properly match IPv6 endpoint
wg-quick now works better with IPv6.
* wg-quick: use printf -v instead of namerefs for bash 4.2
This adds support for old bash, which means wg-quick should be generically
"bash 4 and up". I'm not happy about this but EL7 uses old bash, so we're
stuck with it.
* compat: support EL7.3
Support for RHEL, CentOS, ScientificLinux, and so forth.
* compat: support Ubuntu 14.04
An old crufty Ubuntu is now supported, since it's LTS.
Dirk Brenken [Mon, 26 Jun 2017 18:58:29 +0000 (20:58 +0200)]
adblock: update 2.8.0
* add bind support (see readme)
* export all blocked domains in one central file (adb_list.overall)
* prerequisite for proper bind support
* much faster sort operation with less memory consumption
* backups are still handled per source separately,
to be more flexible in adding/removing block list sources
* add additional 'wan6' interface trigger in default configuration
* various small fixes & optimizations
Add the UNIX-based ACPI utilities. For now, only "acpidump" seems to
be useful on the target system. The others would only be of interest
on the host system, and only then if one were developing BIOS.
Michael Heimpold [Thu, 22 Jun 2017 21:49:24 +0000 (23:49 +0200)]
libiio: add new package
libiio is a library for interfacing with Linux's Industrial Input/Output (IIO)
subsystem. The Linux IIO subsystem is intended to provide support for devices
that in some sense are analog to digital or digital to analog converters.
Florian Eckert [Thu, 22 Jun 2017 09:48:01 +0000 (11:48 +0200)]
net/mwan3: add lock for mwan3 hotplug script
If more then one interface get up/down at once mwan3 could be in a
undefined state, because more then one mwan3 hotplug script are running
and editing the iptables.
Lock the critical section should solve this issue.
Daniel Golle [Mon, 19 Jun 2017 16:29:53 +0000 (18:29 +0200)]
eudev: remove package
It's pretty useless as udev cannot run in coexistence with procd.
It was added mostly to get packages compiled which depend on libudev,
knowing that the udev related functionality will be broken.
eudev has now been replaced by libudev-fbsd which does the job much
better and may serve as a drop-in replacement with even some working
features.
In future we may want our own libudev-procd library which can also be
a mostly-stub implementation but may query things from procd using
ubus in some situations...
Daniel Golle [Mon, 19 Jun 2017 16:39:18 +0000 (18:39 +0200)]
uvcdynctrl: get rid of udev
The udev rule installed was ineffective as udev cannot run in
coexistence with procd. If needed, it should be reimplemented as
rule under /etc/hotplug.d/
Dirk Brenken [Fri, 16 Jun 2017 19:29:34 +0000 (21:29 +0200)]
travelmate: update 0.8.0
* use iwinfo instead iw for wlan scanning,
scanning now works on radio-level
* enhance multiple radio support:
* support STA-only radio configurations,
e.g first radio with local AP, second radio
with a bunch of STAs (without APs)
Hans Dedecker [Tue, 18 Apr 2017 13:42:49 +0000 (15:42 +0200)]
net-snmp: add notification config options
Add config support which allow snmpd to take a more active role by sending
traps.
Following config options are supported which map directly on snmpd directives:
-trapcommunity
-trapsink
-trap2sink
-informsink
-authtrapenable
-v1trapaddress
-trapsess
Yousong Zhou [Mon, 8 May 2017 05:07:47 +0000 (13:07 +0800)]
openconnect: openconnect-wrapper: rewrite
- use exec directly to eliminate a level in the process tree
- use "$@" instead of "$*" to pass arguments to openconnect
According to openconnect(8), openconnect will call vpnc-script to
cleanup before quit when it received SIGINT(2) and will quit immediately
when it received SIGTERM (the default signal by kill command)
Before and after the change, openconnect process will be killed first
with SIGINT sent from netifd. This was decided by the
'proto_kill_command "$config" 2' notify call in the proto script.
SIGKILL is the only other signal that can be sent from netifd when the
process did not quit on SIGINT on time. There should be no need to trap
on signal 1 3 6 9 (HUP QUIT ABRT KILL)
Daniel Golle [Sun, 18 Jun 2017 21:07:03 +0000 (23:07 +0200)]
libudev-fbsd: add package
This package provides a small udev shim originally intended for
FreeBSD/devd, but it works well for our non-systemd-environment as
well. It has limited features, but it's enough to detect and
enumerate input devices.
Florian Fainelli [Sun, 18 Jun 2017 19:45:30 +0000 (12:45 -0700)]
cgi-io: Find and search for libubus.h
Fixes build errors with external toolchains:
[ 33%] Building C object CMakeFiles/cgi-io.dir/main.c.o
/home/florian/dev/openwrt/trunk/build_dir/target-mipsel-unknown-linux-gnu_glibc/cgi-io/main.c:30:21:
fatal error: libubus.h: No such file or directory
#include <libubus.h>
^
compilation terminated.
Yousong Zhou [Mon, 8 May 2017 05:06:10 +0000 (13:06 +0800)]
openconnect: drop stale config: interface
It was introduced with 41f8d5465 ("openconnect: fix a couple of minor
things and add an interface option") and not needed since 4083de9d7
("openconnect: use proto_add_host_dependency")
Florian Fainelli [Sat, 17 Jun 2017 03:06:20 +0000 (20:06 -0700)]
btrfs-progs: Fix build with external toolchains
TARGET_CPPFLAGS were not propagated correctly leading to these kinds of
build failure:
btrfstune.c:26:23: fatal error: uuid/uuid.h: No such file or directory
#include <uuid/uuid.h>
^
compilation terminated.
btrfs-find-root.c:24:18: fatal error: zlib.h: No such file or directory
#include <zlib.h>
^
compilation terminated.
mkfs/common.c:18:23: fatal error: uuid/uuid.h: No such file or directory
#include <uuid/uuid.h>
Fix that by passing TARGET_CPPFLAGS via EXTRA_CFLAGS
Florian Fainelli [Sat, 17 Jun 2017 02:36:32 +0000 (19:36 -0700)]
stoken: Explicitly link with zlib
Fixes build issues with external toolchains:
/home/florian/dev/toolchains/stbgcc-4.8-1.5/bin/../lib/gcc/mipsel-linux-gnu/4.8.5/../../../../mipsel-linux-gnu/bin/ld:
warning: libz.so.1, needed by
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libxml2.so,
not found (try using -rpath or -rpath-link)
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libxml2.so:
undefined reference to `gzopen64'
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libxml2.so:
undefined reference to `gzdirect'
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libxml2.so:
undefined reference to `gzclose'
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libxml2.so:
undefined reference to `gzwrite'
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libxml2.so:
undefined reference to `gzdopen'
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libxml2.so:
undefined reference to `gzread'
collect2: error: ld returned 1 exit status
Add native support for SNMP manager functions, so scripts don't
have to call system("snmpget -v2c ...") etc. Cuts down on fork/exec
pairs and simplifies issues with parsing intermediate output.
git.99rst.org / openwrt-packages.git / log