mtk-20170518/package/network, branch v17.01.1 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker odhcpd: update to version 2017-03-29 (FS#635) 2017-04-13T11:55:57+00:00 Hans Dedecker dedeckeh@gmail.com 2017-04-01T11:56:44+00:00 c2999ef592cd130a722c15c7d885ef3ca32a151b 3d9f406 rework IPv6 dns address selection (FS#635) bc6c3ac ndp: keep an exact copy of IPv6 interface addresses 6eb1e01 ndp: code cleanup eea7d03 rework IPv6 address dump logic 24d21c7 ndp: add syslog debug tracing Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> 
3d9f406 rework IPv6 dns address selection (FS#635)
bc6c3ac ndp: keep an exact copy of IPv6 interface addresses
6eb1e01 ndp: code cleanup
eea7d03 rework IPv6 address dump logic
24d21c7 ndp: add syslog debug tracing

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
odhcpd: update to version 2017-02-28 2017-04-13T11:55:57+00:00 Florian Fainelli f.fainelli@gmail.com 2017-03-04T21:22:50+00:00 a532aaa2aaea71e05487a4248ca948107e9abc5c Brings in the following change: 9eac2a896341 dhcpv6-ia: Check lockf return value Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> 
Brings in the following change:

9eac2a896341 dhcpv6-ia: Check lockf return value

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
odhcpd: update to version 2017-02-21 2017-04-13T11:55:57+00:00 Hans Dedecker dedeckeh@gmail.com 2017-02-23T20:56:15+00:00 425c6d0462ddbe66a93744e39972ff55464be160 1b630f8 router: don't announce prefixes with valid lifetime equal to 0 ba0cac0 router: fix arithmetic exception fault 3495f17 router: allow RA prefix lifetime being set to leasetime value (FS#397) e437ce9 treewide: simplify dhcp leasetime checking 942fb33 router: support ra_mininterval and ra_lifetime uci parameters (FS#397) f913337 router.h: fix alignment style 4dc7edb Revert "odhcpd.h: fix alignment style" 62ea54f odhcpd.h: fix alignment style a898ee5 config: make loglevel configurable via uci (FS#481) 51c756c odhcpd: display correct default log level in usage text 68ee0b5 treewide: define and use macro IN6_IS_ADDR_ULA fa57225 ndp: deregister netlink event socket for non recoverable errors ac70d28 odhcpd: fix white space errors Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> 
1b630f8 router: don't announce prefixes with valid lifetime equal to 0
ba0cac0 router: fix arithmetic exception fault
3495f17 router: allow RA prefix lifetime being set to leasetime value (FS#397)
e437ce9 treewide: simplify dhcp leasetime checking
942fb33 router: support ra_mininterval and ra_lifetime uci parameters (FS#397)
f913337 router.h: fix alignment style
4dc7edb Revert "odhcpd.h: fix alignment style"
62ea54f odhcpd.h: fix alignment style
a898ee5 config: make loglevel configurable via uci (FS#481)
51c756c odhcpd: display correct default log level in usage text
68ee0b5 treewide: define and use macro IN6_IS_ADDR_ULA
fa57225 ndp: deregister netlink event socket for non recoverable errors
ac70d28 odhcpd: fix white space errors

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
odhcpd: fix sha256 sum 2017-03-30T20:00:48+00:00 Hauke Mehrtens hauke.mehrtens@intel.com 2017-03-30T10:25:13+00:00 298c40fd34e9da78f6880e0c5f0b93bf14fd6418 The sha256sum added in commit b8567cb44e9e4f ("odhcpd: update to git HEAD version (FS#396)") does not match the sha256sum of the file on the mirror or when I clone it. Update the sha256 sum to the correct value. Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com> 
The sha256sum added in commit b8567cb44e9e4f ("odhcpd: update to git HEAD
version (FS#396)") does not match the sha256sum of the file on the mirror or
when I clone it. Update the sha256 sum to the correct value.

Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
firewall: document rules for IPSec ESP/ISAKMP with 'name' option 2017-03-28T09:46:30+00:00 Yousong Zhou yszhou4tech@gmail.com 2017-03-28T09:41:14+00:00 910a9430a0c0da2e60c1b84bbf640d310aba4bd7 These are recommended practices by REC-22 and REC-24 of RFC6092: "Recommended Simple Security Capabilities in Customer Premises Equipment (CPE) for Providing Residential IPv6 Internet Service" Fixes FS#640 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> 
These are recommended practices by REC-22 and REC-24 of RFC6092:
"Recommended Simple Security Capabilities in Customer Premises Equipment
(CPE) for Providing Residential IPv6 Internet Service"

Fixes FS#640

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
iw: enable MESH ID in scan output 2017-03-25T13:55:10+00:00 Matthias Schiffer mschiffer@universe-factory.net 2017-03-25T12:43:29+00:00 1b94737824bb046bd9796aa6ab01a56dacc49622 Make scan output useful for 802.11s meshes. The common print_ssid function is used, so this doesn't add any additional code. Based-on-patch-by: Jan-Tarek Butt <tarek@ring0.de> Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> 
Make scan output useful for 802.11s meshes. The common print_ssid function
is used, so this doesn't add any additional code.

Based-on-patch-by: Jan-Tarek Butt <tarek@ring0.de>
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
umdns: update to the version 2017-03-21 2017-03-24T05:51:45+00:00 Rafał Miłecki rafal@milecki.pl 2017-03-21T21:57:56+00:00 474c31a20d834d24646837738355d7ffc2483efa This includes following changes: 480d7bc Fix sending unicast questions on cache expire a0403cd Keep source sockaddr for every cached DNS record 1478293 Fix code freeing cached non-A(AAA) records too early 9f1cc22 Fix replying to "QU" questions received on unicast interface 943bedb Fix reading port of incoming packets c725494 Use MCAST_PORT define for port 5353 ce7e9e9 Use one define for DNS-Based Service Discovery service name e1bacef Drop entries cached for interface we're going to delete 496aeba Fix comment typo in cache_gc_timer f89986b Fix refreshing cached A(AAA) records that expire Previous updates made umdns work as expected on startup but there were still many bugs. They were mostly related to runtime - cache management and requests + responses. E.g. umdns was never able to send question on DNS record expire. It was also ignoring all incoming unicast questions. Since these issues are quite serious it makes sense to backport this update to the stable branch. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> 
This includes following changes:
480d7bc Fix sending unicast questions on cache expire
a0403cd Keep source sockaddr for every cached DNS record
1478293 Fix code freeing cached non-A(AAA) records too early
9f1cc22 Fix replying to "QU" questions received on unicast interface
943bedb Fix reading port of incoming packets
c725494 Use MCAST_PORT define for port 5353
ce7e9e9 Use one define for DNS-Based Service Discovery service name
e1bacef Drop entries cached for interface we're going to delete
496aeba Fix comment typo in cache_gc_timer
f89986b Fix refreshing cached A(AAA) records that expire

Previous updates made umdns work as expected on startup but there were
still many bugs. They were mostly related to runtime - cache management
and requests + responses. E.g. umdns was never able to send question on
DNS record expire. It was also ignoring all incoming unicast questions.

Since these issues are quite serious it makes sense to backport this
update to the stable branch.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
umdns: update to the version 2017-03-14 2017-03-24T05:51:44+00:00 Rafał Miłecki rafal@milecki.pl 2017-03-14T10:59:53+00:00 ba076ebbc595c527aed286e6055046d31b3204cb This includes 3 cleanups: fd5a160 Don't cache hosts as services 80dd246 Refresh DNS records A and AAAA directly 6515101 Access cached records (instead of services) to read list of hosts Signed-off-by: Rafał Miłecki <rafal@milecki.pl> 
This includes 3 cleanups:
fd5a160 Don't cache hosts as services
80dd246 Refresh DNS records A and AAAA directly
6515101 Access cached records (instead of services) to read list of hosts

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
iproute2: fix ip monitor can't work when NET_NS is not enabled 2017-03-19T04:42:16+00:00 Yousong Zhou yszhou4tech@gmail.com 2017-03-17T09:49:29+00:00 0f23e80c272be4eaaa3e898f9e427886203be720 The bug appeared in v4.1.0 and was fixed since v4.8.0 Fixes FS#620 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> 
The bug appeared in v4.1.0 and was fixed since v4.8.0

Fixes FS#620

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
curl: fix CVE-2017-2629 SSL_VERIFYSTATUS ignored 2017-03-13T21:51:20+00:00 Hauke Mehrtens hauke@hauke-m.de 2017-03-13T21:51:20+00:00 111cf1b9f37b902dbc4ac2934f38ee6418600f69 This fixes the following security problem: https://curl.haxx.se/docs/adv_20170222.html Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes the following security problem:
https://curl.haxx.se/docs/adv_20170222.html

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>