Commit Graph

2744 Commits

Author SHA1 Message Date
David Bauer
faddb3d193 ar71xx: flag FritzBox 4020 buttons as active low (#1544)
Buttons of AVM FritzBox 4020 are incorrectly flagged as active high.

This was an oversight as RFKill button was working as expected even
with incorrectly flagged GPIO.

Config mode is still accessable but will start on any button press, not
only for the ones >= 10 seconds.

This commit corrects this behavior to the expected one (10 second long
press necessary to enter config mode).
2018-10-02 00:58:17 +02:00
Matthias Schiffer
51b7928a55
modules: update OpenWrt packages
40da7ecf21ff socat: Fix CRDLY, TABDLY and CSIZE shifts for PowerPC
a5bbf27e3532 libxml2: add Debian patches to address CVEs
1e77dfa7b084 tiff: fix remaining CVEs
cad5ceed6a87 unbound: drop odhcpd leases with wrong field count
eb5ac25380e7 postgresql: security bump to 9.5.14
43f14b81120a unbound: limit outside script source to init funciton scope
2018-09-04 19:15:23 +02:00
Matthias Schiffer
4644f85bfc
modules: update LEDE
184fe11483b9 LEDE v17.01.6: revert to branch defaults
9a96ec08a953 LEDE v17.01.6: adjust config defaults
2252731af43d grub2: rebase patches
d3e325dfeffd bzip2: Fix CVE-2016-3189
6aae528cc3b7 grub2: Fix CVE-2015-8370
9d3825a0279a scripts: bundle-libraries: fix logic flaw
6e8f1c387892 scripts: bundle-libraries: prevent loading host locales (FS#1803)
f712db9df632 kernel: bump kernel 4.4 to version 4.4.153
55840040dfcc mt76: Fix mirror hash
bb7c4cff2086 dropbear: backport upstream fix for CVE-2018-15599
8a72a868fd80 kernel: bump kernel 4.4 to version 4.4.151
9c0bab0059f7 kernel: bump kernel 4.4 to version 4.4.150
2018-09-04 19:15:22 +02:00
Martin Weinelt
dddd2cd011 ipq806x: mark as broken because of unstable wifi drivers 2018-09-04 01:06:03 +02:00
Matthias Schiffer
7408f04605
gluon-mesh-batman-adv: respondd: remove incorrect field width limits
At least the ifindex and the flags fields can be larger than 0xff.

Fixes #1523
2018-09-01 11:13:58 +02:00
Matthias Schiffer
469e0107e2
docs, README: Gluon v2018.1.1 2018-08-28 20:54:53 +02:00
Matthias Schiffer
ed3cb1f541
docs: add v2018.1.1 release notes 2018-08-26 15:08:39 +02:00
Matthias Schiffer
bc0d240d75
docs: releases/v2018.1: add regressions to known issues
Fixes #1519
2018-08-26 15:08:39 +02:00
Matthias Schiffer
b4e87400ca
modules: update LEDE
8f5c55f63ece tools/e2fsprogs: update to 1.44.1
d35a7bf4b462 e2fsprogs: bump to 1.44.0
79ac69d9c926 tools/e2fsprogs: Update to 1.43.7
5d9114c9cb3b tools/e2fsprogs: Update to 1.43.6
7955fab22ac4 tools/e2fsprogs: Update to 1.43.5
866e5b495677 tools/e2fsprogs: Update to 1.43.4
a964738a5c88 Revert "tools/e2fsprogs: fix building on a glibc 2.27 host"
1e09cbf11844 tools/bison: Update to 3.0.5
9e864bfccea5 mac80211: brcmfmac: fix compilation with SDIO support
13f219569d4c mac80211: brcmfmac: backport patch setting WIPHY_FLAG_HAVE_AP_SME
0c76265d0819 mac80211: brcmfmac: backport important changes from the 4.19
9d8940c5b92f mac80211: brcmfmac: backport important changes from the 4.18
84ef414bd422 mac80211: brcmfmac: backport important changes from the 4.16
57102f6c0633 mac80211: brcmfmac: backport important changes from the 4.15
6805e44004b7 mac80211: brcmfmac: backport important changes from the 4.14
e3bc2e488d03 mac80211: brcmfmac: backport important changes from the 4.13
00b4e6567726 mac80211: brcmfmac: backport important changes from the 4.12
f8c364b72042 mac80211: brcmfmac: backport use-after-free fix from 4.11
85e6ac468efc mac80211: brcmfmac: group 4.11 backport patches
d3b8b5be3455 openssl: update to version 1.0.2p
f3865bd4efa8 kernel: bump kernel 4.4 to version 4.4.148
5886a5060a4c mbedtls: update to version 2.7.5
9bc43f3e65bc curl: fix some security problems
b3983323a1f2 wpa_supplicant: fix CVE-2018-14526
6449ed155301 tools: findutils: fix compilation with glibc 2.28
6e78c5502c94 tools: m4: fix compilation with glibc 2.28
583fd4b229b0 brcm47xx: revert upstream commit breaking BCM4718A1

Fixes build with glibc 2.28.
2018-08-21 21:25:03 +02:00
Matthias Schiffer
6a3d5554c1
modules: update LEDE
0a2c984222d0 kernel: ext4: fix check to prevent initializing reserved inodes
91d209362b97 kernel: bump kernel 4.4 to version 4.4.147
b5d9776cd24b firmware: amd64-microcode: update to 20180524
55ab8649e72b firmware: intel-microcode: bump to 20180703

Fixes #1504
2018-08-09 23:23:57 +02:00
Andreas Ziegler
0cb98882d0 modules: update LEDE
309414ee8d uclient: update to latest git HEAD
bcf91e578c downloads.mk: introduce name-agnostic PROJECT_GIT variable
b7e3f10e80 sdk: include arch/arm/ Linux includes along with arch/arm64/ ones
d93ef3c8c8 sdk: bundle usbip userspace sources
e5b7404f25 kmod-sched-cake: bump to 20180716
2725ad8de4 iproute2: merge upstream CAKE support
28d4e55432 WDR4900v1 remove dt node for absent hw crypto.
21c317a892 build: fix compile error when a package includes itself in PROVIDES
aee5c53a8d apm821xx: fix sata access freezes
54b91c85e7 Revert "iproute2: tc: bump to support kmod-sched-cake"
90eac8984a Revert "kmod-sched-cake: bump to 20180716"
91c9400816 scripts: bundle-libraries: fix build on OS X (FS#1493)
54c0ef6ff5 build: bundle-libraries.sh: patch bundled ld.so
79c8f2f50b mtd: improve check for TRX header being already fixed
828eaeee25 mtd: support bad blocks within the mtd_fixtrx()
8d4da3c589 iproute2: tc: bump to support kmod-sched-cake
0e1606ba3d kmod-sched-cake: bump to 20180716
c6a46c6e1d LEDE v17.01.5: revert to branch defaults
248b358903 LEDE v17.01.5: adjust config defaults
38e704be71 kernel: bump kernel 4.4 to version 4.4.140
2018-08-06 01:32:08 +02:00
Andreas Ziegler
a0286d5641 docs: vpn: fastd's unencrypted method is 'null', not 'none' 2018-08-05 22:31:33 +02:00
mokkin
aaef6163ff docs: site: fix typo (#1498) 2018-07-29 20:14:19 +02:00
Sven Eckelmann
ea9a69f7da gluon-client-bridge: Revert "move IPv4 local subnet route to br-client (#1312)"
The commit b3762fc61c ("gluon-client-bridge: move IPv4 local subnet route
to br-client (#1312)") moves the IPv4 prefix from the local-port interface
to br-client. A client requesting an IPv4 connection to the IPv4 anycast
address of the node (the device running gluon) will create following
packets:

1. ARP packet from client to get the MAC of the mac address of the anycast
   IPv4 address
2. ARP reply from node to client with the anycast MAC address for the IPv4
   anycast address
3. IPv4 packet from client which requires reply (for example ICMP echo
   request)
4. ARP request for the client MAC address for its IPv4 address in prefix4
   (done with the mac address of br-client and transmitted over br-client)
5. IPv4 packet from node (transmitted over br-client with br-client MAC
   address) as reply for the client IPv4 packet (for example ICMP echo
   reply)

The step 4 and 5 are problematic here because packets use the node specific
MAC addresses from br-client instead of the anycast MAC address. The client
will receive the ARP packet with the node specific MAC address and change
their own neighbor IP (translation) table. This will for example break the
access to the status page to the connected device or the anycast DNS
forwarder implementation when the client roams to a different node.

This reverts commit b3762fc61c and adds an
upgrade code to remove local_node_route on on existing installations.
2018-07-22 16:43:00 +02:00
Sven Eckelmann
a7a5db9f54 gluon-mesh-batman-adv: Drop IPv4 anycast related packets from/to bat0
The commit b3762fc61c ("gluon-client-bridge: move IPv4 local subnet route
to br-client (#1312)") moves the IPv4 prefix from the local-port interface
to br-client. A client requesting an IPv4 connection to the IPv4 anycast
address of the node (the device running gluon) will create following
packets:

1. ARP packet from client to get the MAC of the mac address of the anycast
   IPv4 address
2. ARP reply from node to client with the anycast MAC address for the IPv4
   anycast address
3. IPv4 packet from client which requires reply (for example ICMP echo
   request)
4. ARP request for the client MAC address for its IPv4 address in prefix4
   (done with the mac address of br-client and transmitted over br-client)
5. IPv4 packet from node (transmitted over br-client with br-client MAC
   address) as reply for the client IPv4 packet (for example ICMP echo
   reply)

The step 4 is extremely problematic here. ARP replies with the anycast IPv4
address must not be submitted or received via bat0 - expecially not when it
contains an node specific MAC address as source. When it is still done then
the wrong MAC address is stored in the batadv DAT cache and ARP packet is
maybe even forwarded to clients. This latter is especially true for ARP
requests which are broadcast and will be flooded to the complete mesh.

Clients will see these ARP packets and change their own neighbor IP
(translation) table. They will then try to submit the packets for IPv4
anycast addresses to the complete wrong device in the mesh. This will for
example break the access to the status page to the connected device or the
anycast DNS forwarder implementation. Especially the latter causes extreme
latency when clients try to connect to server using a domain name or even
breaks the connection setup process completely. Both are caused by the
unanswered DNS requests which at first glance look like packet loss.

An node must therefore take care of:

* not transmitting ARP packets related to the anycast IPv4 address over
  bat0
* drop ARP packets related to the anycast IPv4 when they are received on
  bat0 from a still broken node
* don't accept ARP packets related to the anycast IPv4 replies on local
  node when it comes from bat0

Fixes: b3762fc61c ("gluon-client-bridge: move IPv4 local subnet route to br-client (#1312)")
2018-07-22 16:43:00 +02:00
Adorfer
658f1ea402
gluon-config-mode-mesh-vpn: i18n/de: fix missing comma
(cherry picked from commit 65d172f835)
2018-07-19 19:30:34 +02:00
Matthias Schiffer
04c002a7c2
docs: releases/v2018.1: extend explanation of status page rewrite 2018-07-14 21:19:44 +02:00
Matthias Schiffer
18aab98cf8
docs: releases/v2018.1: add note regarding next_node.name change
Fixes: #1463
2018-07-14 21:19:42 +02:00
Christoph Krapp
c28b797c91
modules: update LEDE
aaecfecdcd kernel: bump kernel 4.4 to version 4.4.139
b08003223a base-files: fix links in banner.failsafe
71019a7605 ar71xx: fix 5 GHz Wi-Fi on NBG6716
ba5c0a1dea Revert "base-files: fix UCI config parsing and callback handling"
5c6a8a9cdb kernel: bump kernel 4.4 to version 4.4.138
cf4a37a581 uci: add missing 'option' support to uci_rename()
7fc94b2a25 mac80211: rt2x00: no longer use TXOP_BACKOFF for probe frames
b03826d8aa kernel: bump kernel 4.4 to version 4.4.137
21f44e3389 map: add ealen as configurable uci parameter

Signed-off-by: Christoph Krapp <achterin@googlemail.com>
2018-07-12 19:09:54 +02:00
Julian
098ca81df9
docs: fix wrong Banana Pi model in v2018.1 release notes (#1466) 2018-07-11 21:43:15 +02:00
Matthias Schiffer
f01037384d
docs, README: Gluon v2018.1 2018-07-08 20:59:57 +02:00
Matthias Schiffer
473818e905
docs: add v2018.1 release notes 2018-07-08 20:55:30 +02:00
Matthias Schiffer
0036ed5ddf
docs: examples: improve domain_seed comments 2018-07-08 20:55:30 +02:00
Matthias Schiffer
3540eb96ed
docs: user/site: improve feature flag explanation 2018-07-08 20:55:29 +02:00
Matthias Schiffer
655da23520
docs: features/wired-mesh: add section about VXLAN encapsulation 2018-07-08 20:55:29 +02:00
Matthias Schiffer
446ae60d94
modules: update Gluon packages
be2c35785994 respondd-module-airtime: Fix reported noise result (#190)
2018-07-08 20:11:21 +02:00
Matthias Schiffer
6a5e67b383
docs: add documentation for site library 2018-07-07 11:43:37 +02:00
Vincent Wiemann
68af719e24 docs: private-wlan: add uci command to set MAC (#1454)
add a missing command to set the special Gluon MAC address of the private WLAN interface to the documentation.
2018-07-04 00:06:23 +02:00
Vincent Wiemann
dc13668b9d docs: increase recommended disk space for builds (#1450)
With all the packages being built 10GB are not enough anymore.
2018-07-03 00:06:05 +02:00
Matthias Schiffer
baebf9b852
docs: add ebtables-limit-arp feature to site.mk example
Closes: #1436
2018-07-01 16:34:00 +02:00
David Bauer
2fda1a1f86 ar71xx: use Power-LED as Diag-LED on FRITZBox 4020 (#1453)
This commit makes use of the Power-LED as Diag-LED, allowing the LED to
work as a status indicator for config-mode.

Signed-off-by: David Bauer <mail@david-bauer.net>
2018-06-30 19:23:12 +02:00
Matthias Schiffer
da058c5ef9
gluon-status-page: move neighbours-batadv wrapper to batadv-specific package 2018-06-30 16:03:13 +02:00
Matthias Schiffer
df22d41593
docs: site-example: remove duplication of contact-info texts in example
Let sites leave these texts empty by default, just add a comment where to
find the default labels.
2018-06-29 21:03:45 +02:00
Andreas Ziegler
5cf7c53e69
gluon-config-mode-geo-location: allow overriding geo location description text 2018-06-29 21:01:24 +02:00
Andreas Ziegler
533ea986ad
gluon-config-mode-hostname: allow overriding hostname description text 2018-06-29 20:55:32 +02:00
Matthias Schiffer
a49cf395bd
cripts/check_site.lua: print paths separated by '.' rather than '/'
Using slashs instead of dots is a bit unexpected, and as long as we're not
going for full-blown JSONPath, neither is more correct than the other.
2018-06-29 20:47:59 +02:00
Sven Eckelmann
3d18ae02d8 ar71xx: Add support for TP-Link CPE210 v2 (#1445) 2018-06-26 01:19:55 +02:00
Ralf Jung
1649635be4
gluon-config-mode-contact-info: allow overriding contact field help and note in site 2018-06-24 19:47:52 +02:00
Sven Eckelmann
384c2772c9 ar71xx: add ath10k packages for OpenMesh A40/A60 (#1444)
The dependency line was lost during the rebase of the current master
version.

Fixes: 9d719a2e57 ("ar71xx: add support for OpenMesh A40/A60 (#1424)")
2018-06-24 13:32:56 +02:00
Matthias Schiffer
b2436f674b
docs: add new doc page about package development
Explain the magic of gluon.mk. The feature flag documention is moved into
this new page.
2018-06-23 19:44:43 +02:00
Christoph Krapp
1a065fbe24 ar71xx: add support for ZyXEL NBG6716 (#1443) 2018-06-22 20:21:11 +02:00
J0WI
ee97fe8b9e gluon-web-admin: show sha256sum to verify upgrade (#1441) 2018-06-19 19:24:27 +02:00
Matthias Schiffer
4919f5443d
docs, README: Gluon v2017.1.8 2018-06-17 17:38:34 +02:00
Matthias Schiffer
c36d3286a1
modules: switch routing feed to openwrt-18.06 branch
By using the release branch, we will be able to get future bugfixes without
local patches.
2018-06-17 17:31:02 +02:00
lemoer
c0e7b96d1d docs: add documentation about multidomain support (#1365) 2018-06-14 00:01:56 +02:00
Matthias Schiffer
046103e5a2
modules: update routing packages
87cba7f8996a batman-adv: add patches from 2018.1-maint 2018-06-12
2018-06-13 22:52:37 +02:00
heini66
c0df74876f docs: add link to site config of Freifunk Nordheide (#1428) 2018-06-09 15:55:29 +02:00
J0WI
27e460f8ca docs: add link to site config of Freifunk Dreiländereck (#1425) 2018-06-09 14:23:50 +02:00
J0WI
6a68d6fba8 docs: update link to site config of Freifunk Kiel to HTTPS (#1427) 2018-06-09 14:23:01 +02:00
Sven Eckelmann
ef819cc196 ar71xx: add support for OpenMesh OM2P(-HS)v4 (#1426) 2018-06-09 13:55:38 +02:00