Signed-off-by: Florian Eckert <fe@dev.tdt.de>

net/vnstat: Update to 1.17

adblock: update 2.5.1

* re-order all regional lists in adblocklist/easylist format
    * add polish blocklist
    * add chinese blocklist
    * lists called now 'reg_<ch|pl|ro|ru>'
* changed interface trigger default in config to 'wan' only
* update / sync LuCI frontend (see luci repo for details)
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

Make sure we do pass TARGET_CPPFLAGS using CPPFLAGS (which is supported
by sslh's Makefile), fixing build issues with some external toolchains:

mipsel-linux-gnu-gcc -Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc
-fno-caller-saves -Wno-unused-result  -D_FORTIFY_SOURCE=1 -Wl,-z,now
-Wl,-z,relro -DENABLE_REGEX -DLIBCONFIG -c sslh-main.c
sslh-main.c:26:23: fatal error: libconfig.h: No such file or directory
 #include <libconfig.h>
                       ^
compilation terminated.
Makefile:63: recipe for target 'sslh-main.o' failed
make[4]: *** [sslh-main.o] Error 1

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

[RELEASE] Released version 1.7.5 due to bug in compression

 Released version 1.7.5 with the following main changes :
  - BUG/MEDIUM: peers: fix buffer overflow control in intdecode.
  - BUG/MEDIUM: buffers: Fix how input/output data are injected into buffers
  - BUG/MEDIUM: http: Fix blocked HTTP/1.0 responses when compression is enabled
  - BUG/MINOR: filters: Don't force the stream's wakeup when we wait in flt_end_analyze
  - DOC: fix parenthesis and add missing "Example" tags
  - DOC: update the contributing file
  - DOC: log-format/tcplog/httplog update
  - MINOR: config parsing: add warning when log-format/tcplog/httplog is overriden in "defaults" sections

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

webui-aria2: update to last commit

Several problems were found with building against an external toolchain:

* TARGET_CPPFLAGS was missing which would prevent finding the headers
* TARGET_LDFLAGS also was not passed correctly
* when building against glibc, since we use strlcpy() we need to link
  against libbsd

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

mdnsresponder: Also pass TARGET_CPPFLAGS

squeezelite: Specify all libraries to link against

haproxy's Makefile already happens include/ after specifying PCRE_DIR
which would result in the following build errors on an external
toolchain that does not automatically search for headers in
$(STAGING_DIR):

mipsel-linux-gnu-gcc -Iinclude -Iebtree -Wall  -O2 -g
-fno-strict-aliasing -Wdeclaration-after-statement  -DBUFSIZE=16384
-DMAXREWRITE=1030 -DSYSTEM_MAXCONN=165530      -DCONFIG_HAP_LINUX_SPLICE
-DTPROXY -DCONFIG_HAP_LINUX_TPROXY -DCONFIG_HAP_CRYPT -DUSE_ZLIB
-DENABLE_POLL -DENABLE_EPOLL -DUSE_CPU_AFFINITY -DASSUME_SPLICE_WORKS
-DUSE_ACCEPT4 -DNETFILTER -DUSE_GETSOCKNAME -DCONFIG_REGPARM=3
-DUSE_OPENSSL  -DUSE_SYSCALL_FUTEX -DUSE_LUA
-I/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/lua-5.3.3/include
-DUSE_PCRE
-I/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/include/include
-DUSE_PCRE_JIT  -DCONFIG_HAPROXY_VERSION=\"1.7.4-patch02\"
-DCONFIG_HAPROXY_DATE=\"2017/04/01\" \
      -DBUILD_TARGET='"linux2628"' \
      -DBUILD_ARCH='""' \
      -DBUILD_CPU='"generic"' \
      -DBUILD_CC='"mipsel-linux-gnu-gcc"' \
      -DBUILD_CFLAGS='"-O2 -g -fno-strict-aliasing
-Wdeclaration-after-statement -DBUFSIZE=16384 -DMAXREWRITE=1030
-DSYSTEM_MAXCONN=165530"' \
      -DBUILD_OPTIONS='"USE_LINUX_SPLICE=1 USE_LINUX_TPROXY=1
USE_ZLIB=yes USE_REGPARM=1 USE_OPENSSL=1 USE_LUA=1 USE_PCRE=1
USE_PCRE_JIT=1"' \
       -c -o src/haproxy.o src/haproxy.c
In file included from include/types/proxy.h:33:0,
                 from include/proto/log.h:32,
                 from include/common/cfgparse.h:29,
                 from src/haproxy.c:65:
include/common/regex.h:31:18: fatal error: pcre.h: No such file or
directory
 #include <pcre.h>

Fix this by stripping the additional include/ being added.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

Some external toolchaind don't automatically search for headers in
$(STAGING_DIR), make sure we do pass TARGET_CPPFLAGS as appropriate.
This fixes build errors such as:

mipsel-linux-gnu-gcc -O2 -Wall -Wextra -DLUA_COMPAT_5_2 -DLUA_USE_LINUX
-c -o lua.o lua.c
lua.c:80:31: fatal error: readline/readline.h: No such file or directory
 #include <readline/readline.h>
                               ^
compilation terminated.
<builtin>: recipe for target 'lua.o' failed
make[6]: *** [lua.o] Error 1

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

squeezelite needs to link against libvorbis and libogg, some external
toolchains may not be able to automatically pull these dependencies in,
resulting the such linking errors:

mipsel-linux-gnu-gcc main.o slimproto.o buffer.o stream.o utils.o
output.o output_alsa.o output_pa.o output_stdout.o output_pack.o
decode.o flac.o pcm.o mad.o vorbis.o faad.o
-L/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib
-L/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/lib
-L/home/florian/dev/toolchains/stbgcc-4.8-1.5/usr/lib
-L/home/florian/dev/toolchains/stbgcc-4.8-1.5/lib -znow -zrelro -lasound
-lpthread -lm -lrt  -lasound -lpthread -lm -lrt -lFLAC -lmad
-lvorbisfile -lfaad -o squeezelite
/home/florian/dev/toolchains/stbgcc-4.8-1.5/bin/../lib/gcc/mipsel-linux-gnu/4.8.5/../../../../mipsel-linux-gnu/bin/ld:
warning: libvorbis.so.0, needed by
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libvorbisfile.so,
not found (try using -rpath or -rpath-link)
/home/florian/dev/toolchains/stbgcc-4.8-1.5/bin/../lib/gcc/mipsel-linux-gnu/4.8.5/../../../../mipsel-linux-gnu/bin/ld:
warning: libogg.so.0, needed by
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libvorbisfile.so,
not found (try using -rpath or -rpath-link)
/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/lib/libvorbisfile.so:
undefined reference to `ogg_stream_reset'
collect2: error: ld returned 1 exit status

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

Fixes build errors with toolchains that don't automatically search for
headers in STAGING_DIR (such as external toolchains) resulting in the
following build failures:

mipsel-linux-gnu-gcc -Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc
-fno-caller-saves -Wno-unused-result  -D_FORTIFY_SOURCE=1 -Wl,-z,now
-Wl,-z,relro  -DUSE_SSL_CRYPTO -c options.c
In file included from options.c:62:0:
auth_algo.h:53:26: fatal error: openssl/hmac.h: No such file or
directory
 #include <openssl/hmac.h>
                          ^
compilation terminated.
Makefile:95: recipe for target 'options.o' failed
make[4]: *** [options.o] Error 1

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

unrar: Properly pass LDFLAGS

Fixes build errors with external toolchains that don't have STAGING_DIR
in their default search path for headers:

mipsel-linux-gnu-gcc -c ssl.c -Os -pipe -mno-branch-likely -mips32r2
-mtune=24kc -fno-caller-saves -Wno-unused-result  -D_FORTIFY_SOURCE=1
-Wl,-z,now -Wl,-z,relro -D_GNU_SOURCE -include fcntl.h -idirafter
dummyinc
ssl.c:28:25: fatal error: openssl/err.h: No such file or directory
 #include <openssl/err.h>
                         ^
compilation terminated.
Makefile:28: recipe for target 'ssl.o' failed
make[3]: *** [ssl.o] Error 1

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

External toolchains don't automatically have STAGING_DIR in their
default search path, so make sure we pass TARGET_LDFLAGS down. Since the
unrar makefile does not allow overriding, we also need to preserve the
original LDFLAGS which include lpthread.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

Update to last commit

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

dnscrypt-proxy: add optional plugins

libx264: Blacklist all MIPS CPUs for assembly optimizations

travelmate: update 0.6.0

net/stunnel: Update to 5.41

Update stunnel to 5.41
Add main site as last resort mirror

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

* rework automatic mode (active scan/re-connection handling):
   * much more procd & resource friendly
   * now enabled by default
* save runtime information in ubus service (data section)
* final backend preparation for new LuCI-GUI (still WIP!)
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>

Fixes the following build failures:

pth_mctx.c: In function '__pth_mctx_set':
pth_mctx.c:480:2: error: #error "Unsupported Linux (g)libc version
and/or platform"
 #error "Unsupported Linux (g)libc version and/or platform"
  ^
Makefile:991: recipe for target 'pth_mctx.lo' failed

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

Use stdlib.h for malloc(), getenv() and realloc(). Fixes the following
build failure:

unixos.c:42:14: error: conflicting types for 'malloc'
 extern char *malloc();
              ^
Makefile:168: recipe for target 'unixos.o' failed
make[3]: *** [unixos.o] Error 1

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

Fixes the following build error:
hiredis.h:101:24: error: lvalue required as left operand of assignment
             buf[(len)] = '\0';

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

None of the CPUs supported in OpenWrt/LEDE are MSA capable (requires
MIPS32r5/r6 for that) which would lead to this error during configure:

You specified a pre-MSA CPU in your CFLAGS.
If you really want to run on such a CPU, configure with --disable-asm.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

Use CFLAGS_DEBUG which is already used for TARGET_CFLAGS to also pass
TARGET_CPPFLAGS.

This fixes build issues with toolchains that don't automatically search
for header files (e.g: sys/capability.h), such as stbgcc-4.8-1.5

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>

dansguardian: Fix build error due to missing cstdlib include

moreutils: Fix build failure due to install stripping

Signed-off-by: Nikil Mehta nikil.mehta@gmail.com

Update libpng to 1.6.29
Add patch to allow older versions of libtool

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

This allows users to use an external config file if required (for
example matching packets based on SNI hostname or REGEX patterns).

Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com>
Signed-off-by: Mircea Horea IONICĂ <mionica@gmail.com>

simple-adblock: update hosts/domains filters, README

Instead of assigning various variables ourself, rely on the common logic
provided by "packaging framework". This brings this package in sync with
other ones which also use git repos as source, dates and commit ids as
version etc. This results also in using xz for tarballs. While at,
populate the PKG_MIRROR_HASH.

Thanks @diizzyy for suggesting these improvements.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

ulogd: use strncpy instead of memcpy

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

syslog-ng: fix openssl callbacks to not require backward compatibility

The functions for registering callbacks for threads has changed
in OpenSSL 1.0.0.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Signed-off-by: Ted Hess <thess@kitschensync.net>

libwebsockets: fix typos referencing package name

In commit f82287cf5c (treewide: use name in define and eval lines)
two typos were committed as result of replacing PKG_NAME macro with
actual package name.

Undo those typos here to make the affected variants installable.

Signed-off-by: Denis Osvald <denis.osvald@sartura.hr>

Correct Download Url to http://www.haproxy.org/download/1.7/src

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

[RELEASE] Released version 1.7.4

    Released version 1.7.4 with the following main changes :
        - MINOR: config: warn when some HTTP rules are used in a TCP proxy
        - BUG/MINOR: spoe: Fix soft stop handler using a specific id for spoe filters
        - BUG/MINOR: spoe: Fix parsing of arguments in spoe-message section
        - BUG/MEDIUM: ssl: Clear OpenSSL error stack after trying to parse OCSP file
        - BUG/MEDIUM: cli: Prevent double free in CLI ACL lookup
        - BUG/MINOR: Fix "get map <map> <value>" CLI command
        - BUG/MAJOR: connection: update CO_FL_CONNECTED before calling the data layer
        - BUG/MEDIUM: ssl: switchctx should not return SSL_TLSEXT_ERR_ALERT_WARNING
        - BUG/MINOR: checks: attempt clean shutw for SSL check
        - CONTRIB: tcploop: add limits.h to fix build issue with some compilers
        - CONTRIB: tcploop: make it build on FreeBSD
        - CONTRIB: tcploop: fix time format to silence build warnings
        - CONTRIB: tcploop: report action 'K' (kill) in usage message
        - CONTRIB: tcploop: fix connect's address length
        - CONTRIB: tcploop: use the trash instead of NULL for recv()
        - BUG/MEDIUM: listener: do not try to rebind another process' socket
        - BUG/MEDIUM: filters: Fix channels synchronization in flt_end_analyze
        - BUG/MAJOR: stream-int: do not depend on connection flags to detect connection
        - BUG/MEDIUM: connection: ensure to always report the end of handshakes
        - BUG: payload: fix payload not retrieving arbitrary lengths
        - BUG/MAJOR: http: fix typo in http_apply_redirect_rule
        - MINOR: doc: 2.4. Examples should be 2.5. Examples
        - BUG/MEDIUM: stream: fix client-fin/server-fin handling
        - MINOR: fd: add a new flag HAP_POLL_F_RDHUP to struct poller
        - BUG/MINOR: raw_sock: always perfom the last recv if RDHUP is not available
        - DOC/MINOR: Fix typos in proxy protocol doc
        - DOC: Protocol doc: add checksum, TLV type ranges
        - DOC: Protocol doc: add SSL TLVs, rename CHECKSUM
        - DOC: Protocol doc: add noop TLV
        - MEDIUM: global: add a 'hard-stop-after' option to cap the soft-stop time
        - BUG/MINOR: cfgparse: loop in tracked servers lists not detected by check_config_validity().
        - MINOR: server: irrelevant error message with 'default-server' config file keyword.
        - MINOR: doc: fix use-server example (imap vs mail)
        - BUG/MEDIUM: tcp: don't require privileges to bind to device
        - BUILD: make the release script use shortlog for the final changelog
        - BUILD: scripts: fix typo in announce-release error message

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

bump to version 1.4.36

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

ruby: change source to .xz