Five commits from upstream were applied to v. 7.8-p1:
482d23bc upstream: hold our collective noses and use the openssl-1.1.x
API in
48f54b9d adapt -portable to OpenSSL 1.1x API
86e0a9f3 upstream: use only openssl-1.1.x API here too
a3fd8074 upstream: missed a bit of openssl-1.0.x API in this unittest
d64e7852 add compat header
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
gcc-7 with -Os makes inline functions disappeard. It are caused by
the new C11 inline semantics. pass option -fgnu89-inline to gcc let
it use gnu inline semantics.
see https://wiki.debian.org/GCC7#Porting_help
bandwidthd.o: In function `RCDF_Load':
bandwidthd.c:(.text+0xb33): undefined reference to `FindIp'
bandwidthd.o: In function `PacketCallback':
bandwidthd.c:(.text+0x11d0): undefined reference to `FindIp'
bandwidthd.c:(.text+0x11e2): undefined reference to `Credit'
bandwidthd.c:(.text+0x11ea): undefined reference to `FindIp'
bandwidthd.c:(.text+0x11fc): undefined reference to `Credit'
bandwidthd.c:(.text+0x1218): undefined reference to `FindIp'
bandwidthd.c:(.text+0x122a): undefined reference to `Credit'
bandwidthd.c:(.text+0x1232): undefined reference to `FindIp'
bandwidthd.c:(.text+0x1244): undefined reference to `Credit'
collect2: error: ld returned 1 exit status
Makefile:20: recipe for target 'bandwidthd' failed
make[4]: *** [bandwidthd] Error 1
Signed-off-by: Guo Li <uxgood.org@gmail.com>
* replace shell based urlencoder with an awk variant
* fix write_log function/syslog output in case of an error
* protect answer string with double quotes in update_route53
* remove bogus set/IFS options in update_route53
* clean-up update_route53 a little bit
This patchset finally fix#6977
Many thanks to @mark0n & @a-bali for testing & debugging
Signed-off-by: Dirk Brenken <dev@brenken.org>
This is a long overdue followup commit to openwrt/openwrt@5d9eeab
("build: remove obsolete references to cris and avr32")
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Full changelog at https://github.com/eclipse/mosquitto/blob/v1.5.3/ChangeLog.txt
Primary change:
CVE fix for CVE-2018-12543 - prevent crash on topics that begin with $
but are not $SYS
Selected other fixes relevant to OpenWrt since 1.5.1:
- Fix retained messages not sent by bridges on outgoing topics at the first
connection. Closes#701.
- Fix duplicate clients being added to by_id hash before the old client was
removed. Closes#645.
- Fix excessive CPU usage when the number of sockets exceeds the system limit.
Closes#948.
- Fix for bridge connections when using WITH_ADNS=yes.
- Fix round_robin false behaviour. Closes#481.
- Fix segfault on HUP when bridges and security options are configured.
Closes#965.
Signed-off-by: Karl Palsson <karlp@etactica.com>
Move setting global enabled flag from /etc/init.d/mwan3 to mwan3
command. So we could start mwan3 from the cmd mwan3 as well.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove the limit setting core="unlimited", since this shouldn't be needed
in production use (i.e. non-debug) and on an embedded platform, which is
why it's rarely used by any existing packages.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
Add an SPKI pin for Cloudflare to help prevent MITM and downgrade attacks,
as described in RFC7858 (DNS over TLS). The setup of SPKI and the specific
SHA256 certificate hash are taken from Cloudflare's DoT configuration guide
published at https://developers.cloudflare.com/1.1.1.1/dns-over-tls/.
Note that the certificate is valid to March 25th 2020, 13:00 CET, which
provides ample time for issuance of a backup pin to support future key
rollover.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
Retain the upstream value since privacy is usually the key user motivation
for using DNS-over-TLS, and simply note that those encountering sub-optimal
routing may consider disabling the setting.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
Eneas U de Queiroz
Daniel Golle
Ansuel Smith
W. Michael Petullo
Guo Li
Dirk Brenken
Deng Qingfang
Ted Hess
Nikos Mavrogiannopoulos
Rosen Penev
Andy Walsh
Jianhui Zhao
Yousong Zhou
Eric Luehrsen
Luiz Angelo Daros de Luca
Karl Palsson
Peter Wagner
Hannu Nyman
Othmar Truniger
Florian Eckert
Tony Ambardar