From a8f4e6414e18c979dbe4be48410b0198848e151f Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Sat, 9 May 2009 21:28:33 +0000 Subject: [PATCH] merge fixes from trunk SVN-Revision: 15745 --- include/download.mk | 8 +- include/host.mk | 4 +- include/image.mk | 8 +- include/prereq-build.mk | 6 +- package/base-files/files/etc/diag.sh | 4 +- .../files/etc/hotplug.d/iface/00-netstate | 1 + .../files/etc/hotplug2-common.rules | 5 + package/base-files/files/etc/init.d/boot | 7 +- package/base-files/files/etc/init.d/fstab | 1 + package/base-files/files/etc/init.d/rcS | 15 +- package/base-files/files/etc/preinit | 1 + package/base-files/files/etc/sysctl.conf | 4 + .../base-files/files/lib/network/config.sh | 3 + package/base-files/files/sbin/ifup | 18 +- package/base-files/files/sbin/sysupgrade | 8 +- package/base-files/files/sbin/wifi | 35 ++ package/broadcom-diag/src/diag.c | 18 +- package/broadcom-diag/src/gpio.h | 4 +- .../broadcom-wl/files/lib/wifi/broadcom.sh | 2 + package/comgt/files/3g.sh | 2 + package/dnsmasq/Makefile | 11 +- package/dnsmasq/files/dhcp.conf | 3 + package/dnsmasq/files/dnsmasq.init | 18 +- package/dnsmasq/patches/101-ipv6.patch | 8 +- package/dnsmasq/patches/102-rtnetlink.patch | 6 +- package/ebtables/Makefile | 2 + package/openssl/Makefile | 23 +- .../patches/001-upstream_dtls_cisco.patch | 139 +++++ .../openssl/patches/100-parallel-build.patch | 24 + package/openssl/patches/120-makedepend.patch | 9 +- package/openssl/patches/121-ocf-config.patch | 24 + .../openssl/patches/140-makefile-dirs.patch | 18 +- .../patches/160-disable_doc_tests.patch | 36 +- .../169-makefile-ccache_needs_quotes.patch | 40 ++ .../patches/180-fix_link_segfault.patch | 18 + .../{200-ocf.patch => 200-ocf-20080917.patch} | 521 ++++++++++++------ .../patches/205-use_local_cryptodev_h.patch | 494 ----------------- .../openssl/patches/400-cve_2008_5077.patch | 151 ----- .../openssl/patches/401_cve_2009_0590.patch | 75 --- package/ppp/files/etc/ppp/ip-up | 3 + package/robocfg/src/robocfg.c | 118 ++-- scripts/feeds | 20 +- scripts/ipkg | 4 +- scripts/ipkg-make-index.sh | 2 +- scripts/metadata.pl | 91 ++- scripts/metadata.pm | 7 +- scripts/rstrip.sh | 5 +- scripts/timestamp.pl | 7 +- 48 files changed, 985 insertions(+), 1046 deletions(-) create mode 100644 package/openssl/patches/001-upstream_dtls_cisco.patch create mode 100644 package/openssl/patches/100-parallel-build.patch create mode 100644 package/openssl/patches/121-ocf-config.patch create mode 100644 package/openssl/patches/169-makefile-ccache_needs_quotes.patch create mode 100644 package/openssl/patches/180-fix_link_segfault.patch rename package/openssl/patches/{200-ocf.patch => 200-ocf-20080917.patch} (77%) delete mode 100644 package/openssl/patches/205-use_local_cryptodev_h.patch delete mode 100644 package/openssl/patches/400-cve_2008_5077.patch delete mode 100644 package/openssl/patches/401_cve_2009_0590.patch diff --git a/include/download.mk b/include/download.mk index 7a4d90da98..1c926748d9 100644 --- a/include/download.mk +++ b/include/download.mk @@ -5,7 +5,7 @@ # See /LICENSE for more information. # -DOWNLOAD_RDEP:=$(STAMP_PREPARED) +DOWNLOAD_RDEP=$(STAMP_PREPARED) # Try to guess the download method from the URL define dl_method @@ -53,7 +53,7 @@ define DownloadMethod/cvs cd $(TMP_DIR)/dl && \ rm -rf $(SUBDIR) && \ [ \! -d $(SUBDIR) ] && \ - cvs -d $(URL) co -r $(VERSION) $(SUBDIR) && \ + cvs -d $(URL) co $(VERSION) $(SUBDIR) && \ find $(SUBDIR) -name CVS | xargs rm -rf && \ echo "Packing checkout..." && \ $(call dl_pack,$(TMP_DIR)/dl/$(FILE),$(SUBDIR)) && \ @@ -132,7 +132,9 @@ define Download endif ) - $(if $(DOWNLOAD_RDEP),$(DOWNLOAD_RDEP): $(DL_DIR)/$(FILE)) + $(foreach dep,$(DOWNLOAD_RDEP), + $(dep): $(DL_DIR)/$(FILE) + ) download: $(DL_DIR)/$(FILE) $(DL_DIR)/$(FILE): diff --git a/include/host.mk b/include/host.mk index b6a58248fd..9d0c64372a 100644 --- a/include/host.mk +++ b/include/host.mk @@ -6,7 +6,9 @@ # TMP_DIR ?= $(TOPDIR)/tmp --include $(TMP_DIR)/.host.mk +ifeq ($(if $(TARGET_BUILD),,$(DUMP)),) + -include $(TMP_DIR)/.host.mk +endif export TAR FIND diff --git a/include/image.mk b/include/image.mk index 6ac177d2e4..5ea13589d6 100644 --- a/include/image.mk +++ b/include/image.mk @@ -62,7 +62,7 @@ ifneq ($(CONFIG_TARGET_ROOTFS_INITRAMFS),y) ifeq ($(CONFIG_TARGET_ROOTFS_TGZ),y) define Image/mkfs/tgz - $(TAR) -zcf $(BIN_DIR)/openwrt-$(BOARD)-rootfs.tgz --owner=root --group=root -C $(TARGET_DIR)/ . + $(TAR) -zcf $(BIN_DIR)/openwrt-$(BOARD)-rootfs.tgz --numeric-owner --owner=0 --group=0 -C $(TARGET_DIR)/ . endef endif @@ -103,9 +103,9 @@ endif define Image/mkfs/prepare/default - find $(TARGET_DIR) -type f -not -perm +0100 -not -name 'ssh_host*' | $(XARGS) chmod 0644 - find $(TARGET_DIR) -type f -perm +0100 | $(XARGS) chmod 0755 - find $(TARGET_DIR) -type d | $(XARGS) chmod 0755 + - find $(TARGET_DIR) -type f -not -perm +0100 -not -name 'ssh_host*' | $(XARGS) chmod 0644 + - find $(TARGET_DIR) -type f -perm +0100 | $(XARGS) chmod 0755 + - find $(TARGET_DIR) -type d | $(XARGS) chmod 0755 $(INSTALL_DIR) $(TARGET_DIR)/tmp chmod 0777 $(TARGET_DIR)/tmp endef diff --git a/include/prereq-build.mk b/include/prereq-build.mk index 0b396c83dd..4d1ae891fb 100644 --- a/include/prereq-build.mk +++ b/include/prereq-build.mk @@ -62,7 +62,7 @@ $(eval $(call Require,working-gcc, \ define Require/working-g++ echo 'int main(int argc, char **argv) { return 0; }' | \ - g++ -x c++ -o $(TMP_DIR)/a.out -lstdc++ - && \ + g++ -x c++ -o $(TMP_DIR)/a.out - -lstdc++ && \ $(TMP_DIR)/a.out endef @@ -72,7 +72,7 @@ $(eval $(call Require,working-g++, \ define Require/ncurses echo 'int main(int argc, char **argv) { initscr(); return 0; }' | \ - gcc -include ncurses.h -x c -o $(TMP_DIR)/a.out -lncurses - + gcc -include ncurses.h -x c -o $(TMP_DIR)/a.out - -lncurses endef $(eval $(call Require,ncurses, \ @@ -82,7 +82,7 @@ $(eval $(call Require,ncurses, \ define Require/zlib echo 'int main(int argc, char **argv) { gzdopen(0, "rb"); return 0; }' | \ - gcc -include zlib.h -x c -o $(TMP_DIR)/a.out -lz - + gcc -include zlib.h -x c -o $(TMP_DIR)/a.out - -lz endef $(eval $(call Require,zlib, \ diff --git a/package/base-files/files/etc/diag.sh b/package/base-files/files/etc/diag.sh index c0fd9a4cae..8726a4398b 100644 --- a/package/base-files/files/etc/diag.sh +++ b/package/base-files/files/etc/diag.sh @@ -1,4 +1,4 @@ #!/bin/sh -# Copyright (C) 2006 OpenWrt.org +# Copyright (C) 2006-2009 OpenWrt.org -set_state() : +set_state() { :; } diff --git a/package/base-files/files/etc/hotplug.d/iface/00-netstate b/package/base-files/files/etc/hotplug.d/iface/00-netstate index f215d29b53..03285de18f 100644 --- a/package/base-files/files/etc/hotplug.d/iface/00-netstate +++ b/package/base-files/files/etc/hotplug.d/iface/00-netstate @@ -1,3 +1,4 @@ [ ifup = "$ACTION" ] && { uci_set_state network "$INTERFACE" up 1 + [ -n "$DEVICE" ] && uci_set_state network "$INTERFACE" ifname "$DEVICE" } diff --git a/package/base-files/files/etc/hotplug2-common.rules b/package/base-files/files/etc/hotplug2-common.rules index 875fa12eea..45b4f44a53 100644 --- a/package/base-files/files/etc/hotplug2-common.rules +++ b/package/base-files/files/etc/hotplug2-common.rules @@ -23,6 +23,11 @@ DEVICENAME ~~ (controlC[0-9]|pcmC0D0*|timer) { next } +DEVPATH is set, SUBSYSTEM ~~ (input) { + nothrottle + makedev /dev/input/%DEVICENAME% 0644 +} + DEVPATH is set { nothrottle makedev /dev/%DEVICENAME% 0644 diff --git a/package/base-files/files/etc/init.d/boot b/package/base-files/files/etc/init.d/boot index f9f6c2d9e6..12226be788 100755 --- a/package/base-files/files/etc/init.d/boot +++ b/package/base-files/files/etc/init.d/boot @@ -19,8 +19,9 @@ system_config() { config_get log_ip "$cfg" log_ip config_get log_size "$cfg" log_size - syslogd -C${log_size:-16} ${log_ip:+-L -R $log_ip} - klogd + config_get log_port "$cfg" log_port + [ -x /sbin/syslogd ] && syslogd -C${log_size:-16} ${log_ip:+-L -R $log_ip${log_port:+:$log_port}} + [ -x /sbin/klogd ] && klogd } apply_uci_config() {( @@ -51,7 +52,7 @@ start() { killall -q hotplug2 [ -x /sbin/hotplug2 ] && /sbin/hotplug2 --override --persistent \ - --max-children 1 --no-coldplug & + --max-children 1 --no-coldplug >/dev/null 2>&1 & # the coldplugging of network interfaces needs to happen later, so we do it manually here for iface in $(awk -F: '/:/ {print $1}' /proc/net/dev); do diff --git a/package/base-files/files/etc/init.d/fstab b/package/base-files/files/etc/init.d/fstab index b7cc209d13..840350ce19 100755 --- a/package/base-files/files/etc/init.d/fstab +++ b/package/base-files/files/etc/init.d/fstab @@ -62,5 +62,6 @@ stop() { config_load fstab config_foreach do_unmount mount config_foreach do_swapoff swap + [ -x /sbin/swapoff ] && swapoff -a } diff --git a/package/base-files/files/etc/init.d/rcS b/package/base-files/files/etc/init.d/rcS index 4983db7d73..c135024bea 100755 --- a/package/base-files/files/etc/init.d/rcS +++ b/package/base-files/files/etc/init.d/rcS @@ -1,8 +1,17 @@ #!/bin/sh # Copyright (C) 2006 OpenWrt.org -{ +run_scripts() { for i in /etc/rc.d/$1*; do [ -x $i ] && $i $2 2>&1 - done -} | logger -s -p 6 -t sysinit & + done | $LOGGER +} + +LOGGER="cat" +[ -x /usr/bin/logger ] && LOGGER="logger -s -p 6 -t sysinit" + +if [ "$1" = "S" ]; then + run_scripts "$1" "$2" & +else + run_scripts "$1" "$2" +fi diff --git a/package/base-files/files/etc/preinit b/package/base-files/files/etc/preinit index 11b9100383..89dc3bcfdf 100755 --- a/package/base-files/files/etc/preinit +++ b/package/base-files/files/etc/preinit @@ -68,6 +68,7 @@ trap 'FAILSAFE=true' USR1 [ -e /etc/preinit.arch ] && . /etc/preinit.arch set_state preinit echo "$HOTPLUG" > /proc/sys/kernel/hotplug +export FAILSAFE eval ${FAILSAFE:+failsafe} lock -w /tmp/.failsafe diff --git a/package/base-files/files/etc/sysctl.conf b/package/base-files/files/etc/sysctl.conf index 9ff9aca92f..7c5396cde8 100644 --- a/package/base-files/files/etc/sysctl.conf +++ b/package/base-files/files/etc/sysctl.conf @@ -9,6 +9,10 @@ net.ipv4.tcp_fin_timeout=30 net.ipv4.tcp_keepalive_time=120 net.ipv4.tcp_syncookies=1 net.ipv4.tcp_timestamps=0 +net.core.netdev_max_backlog=30 +net.netfilter.nf_conntrack_checksum=0 +net.ipv4.netfilter.ip_conntrack_checksum=0 +net.ipv4.netfilter.ip_conntrack_max=16384 net.ipv4.netfilter.ip_conntrack_tcp_timeout_established=3600 net.ipv4.netfilter.ip_conntrack_udp_timeout=60 net.ipv4.netfilter.ip_conntrack_udp_timeout_stream=180 diff --git a/package/base-files/files/lib/network/config.sh b/package/base-files/files/lib/network/config.sh index eb1479b7de..c797b0614b 100755 --- a/package/base-files/files/lib/network/config.sh +++ b/package/base-files/files/lib/network/config.sh @@ -179,6 +179,9 @@ setup_interface_static() { done } + config_get type "$config" TYPE + [ "$type" = "alias" ] && return 0 + env -i ACTION="ifup" INTERFACE="$config" DEVICE="$iface" PROTO=static /sbin/hotplug-call "iface" & } diff --git a/package/base-files/files/sbin/ifup b/package/base-files/files/sbin/ifup index 81ec2c0890..96f7bea357 100755 --- a/package/base-files/files/sbin/ifup +++ b/package/base-files/files/sbin/ifup @@ -1,11 +1,23 @@ #!/bin/sh # Copyright (C) 2006 OpenWrt.org -. /sbin/ifdown "$@" +/sbin/ifdown "$@" -config_get iftype "$1" type -config_get ifname "$1" device +. /etc/functions.sh +[ $# = 0 ] && { echo " $0 "; exit; } +[ "x$1" = "x-a" ] && { + [ -e "/tmp/resolv.conf.auto" ] && rm /tmp/resolv.conf.auto + config_cb() { + [ interface != "$1" -o -z "$2" ] || eval "$0 $2" + } + config_load network + exit +} + +include /lib/network +scan_interfaces +config_get ifname "$1" device for dev in $ifname; do setup_interface "$dev" "$1" done diff --git a/package/base-files/files/sbin/sysupgrade b/package/base-files/files/sbin/sysupgrade index 83cc95682f..139135e8f7 100755 --- a/package/base-files/files/sbin/sysupgrade +++ b/package/base-files/files/sbin/sysupgrade @@ -109,5 +109,9 @@ else fi run_hooks "" $sysupgrade_pre_upgrade -v "Switching to ramdisk..." -run_ramfs '. /etc/functions.sh; include /lib/upgrade; do_upgrade' +if [ -n "$(rootfs_type)" ]; then + v "Switching to ramdisk..." + run_ramfs '. /etc/functions.sh; include /lib/upgrade; do_upgrade' +else + do_upgrade +fi \ No newline at end of file diff --git a/package/base-files/files/sbin/wifi b/package/base-files/files/sbin/wifi index e0aca63155..90aeef725d 100755 --- a/package/base-files/files/sbin/wifi +++ b/package/base-files/files/sbin/wifi @@ -34,6 +34,41 @@ bridge_interface() {( [ "$iftype" = bridge ] && config_get "$cfg" ifname )} +wifi_fixup_hwmode() { + local device="$1" + local default="$2" + local hwmode hwmode_11n + + config_get channel "$device" channel + config_get hwmode "$device" hwmode + case "$hwmode" in + 11bg) hwmode=bg;; + 11a) hwmode=a;; + 11b) hwmode=b;; + 11g) hwmode=g;; + 11n*) + hwmode_11n="${hwmode##11n}" + case "$hwmode" in + a|g) ;; + default) hwmode_11n="$default" + esac + config_set "$device" hwmode_11n "$hwmode_11n" + ;; + *) + hwmode= + if [ "${channel:-0}" -gt 0 ]; then + if [ "${channel:-0}" -gt 14 ]; then + hwmode=a + else + hwmode=g + fi + else + hwmode="$default" + fi + ;; + esac + config_set "$device" hwmode "$hwmode" +} wifi_updown() { [ enable = "$1" ] && wifi_updown disable "$2" diff --git a/package/broadcom-diag/src/diag.c b/package/broadcom-diag/src/diag.c index 5ffa68f997..341880a70e 100644 --- a/package/broadcom-diag/src/diag.c +++ b/package/broadcom-diag/src/diag.c @@ -68,6 +68,7 @@ enum { WLHDD, WL300G, WL320GE, + WL330GE, WL500G, WL500GD, WL500GP, @@ -307,6 +308,15 @@ static struct platform_t __initdata platforms[] = { { .name = "link", .gpio = 1 << 11, .polarity = REVERSE }, }, }, + [WL330GE] = { + .name = "ASUS WL-330gE", + .buttons = { + { .name = "reset", .gpio = 1 << 2 }, + }, + .leds = { + { .name = "power", .gpio = 1 << 0, .polarity = REVERSE }, + }, + }, [WL500G] = { .name = "ASUS WL-500g", .buttons = { @@ -764,6 +774,8 @@ static struct platform_t __init *platform_detect(void) return &platforms[WL520GC]; if (startswith(buf,"WL520GU-")) /* WL520GU-* */ return &platforms[WL520GU]; + if (startswith(buf,"WL330GE-")) /* WL330GE-* */ + return &platforms[WL330GE]; } /* Based on "ModelId" */ @@ -919,14 +931,14 @@ static void register_buttons(struct button_t *b) gpio_control(platform.button_mask, 0); platform.button_polarity = gpio_in() & platform.button_mask; gpio_intpolarity(platform.button_mask, platform.button_polarity); - gpio_intmask(platform.button_mask, platform.button_mask); + gpio_setintmask(platform.button_mask, platform.button_mask); gpio_set_irqenable(1, button_handler); } static void unregister_buttons(struct button_t *b) { - gpio_intmask(platform.button_mask, 0); + gpio_setintmask(platform.button_mask, 0); gpio_set_irqenable(0, button_handler); } @@ -1101,7 +1113,7 @@ static void register_leds(struct led_t *l) gpio_outen(mask, oe_mask); gpio_control(mask, 0); gpio_out(mask, val); - gpio_intmask(mask, 0); + gpio_setintmask(mask, 0); } static void unregister_leds(struct led_t *l) diff --git a/package/broadcom-diag/src/gpio.h b/package/broadcom-diag/src/gpio.h index 6b1b2ada4a..cd48637b20 100644 --- a/package/broadcom-diag/src/gpio.h +++ b/package/broadcom-diag/src/gpio.h @@ -32,7 +32,7 @@ static inline u32 gpio_control(u32 mask, u32 value) return ssb_gpio_control(&ssb, mask, value); } -static inline u32 gpio_intmask(u32 mask, u32 value) +static inline u32 gpio_setintmask(u32 mask, u32 value) { return ssb_gpio_intmask(&ssb, mask, value); } @@ -103,7 +103,7 @@ extern spinlock_t sbh_lock; #define gpio_out(mask, value) sb_gpioout(sbh, mask, ((value) & (mask)), GPIO_DRV_PRIORITY) #define gpio_outen(mask, value) sb_gpioouten(sbh, mask, value, GPIO_DRV_PRIORITY) #define gpio_control(mask, value) sb_gpiocontrol(sbh, mask, value, GPIO_DRV_PRIORITY) -#define gpio_intmask(mask, value) sb_gpiointmask(sbh, mask, value, GPIO_DRV_PRIORITY) +#define gpio_setintmask(mask, value) sb_gpiointmask(sbh, mask, value, GPIO_DRV_PRIORITY) #define gpio_intpolarity(mask, value) sb_gpiointpolarity(sbh, mask, value, GPIO_DRV_PRIORITY) static void gpio_set_irqenable(int enabled, irqreturn_t (*handler)(int, void *, struct pt_regs *)) diff --git a/package/broadcom-wl/files/lib/wifi/broadcom.sh b/package/broadcom-wl/files/lib/wifi/broadcom.sh index 87ce9680bb..998a2f58ff 100644 --- a/package/broadcom-wl/files/lib/wifi/broadcom.sh +++ b/package/broadcom-wl/files/lib/wifi/broadcom.sh @@ -122,6 +122,7 @@ enable_broadcom() { config_get_bool frameburst "$device" frameburst config_get macfilter "$device" macfilter config_get maclist "$device" maclist + config_get macaddr "$device" macaddr config_get txpower "$device" txpower local vif_pre_up vif_post_up vif_do_up vif_txpower @@ -245,6 +246,7 @@ enable_broadcom() { config_get ifname "$vif" ifname #append if_up "ifconfig $ifname up" ";$N" + local net_cfg bridge net_cfg="$(find_net_config "$vif")" [ -z "$net_cfg" ] || { diff --git a/package/comgt/files/3g.sh b/package/comgt/files/3g.sh index b27e90e505..8fcac0936a 100644 --- a/package/comgt/files/3g.sh +++ b/package/comgt/files/3g.sh @@ -1,4 +1,6 @@ set_3g_led() { + # set on WRT54G3G only + [ -d /proc/diag ] || return 0 grep WRT54G3G /proc/diag/model >/dev/null || return 0 echo "$1" > /proc/diag/led/3g_green echo "$2" > /proc/diag/led/3g_blue diff --git a/package/dnsmasq/Makefile b/package/dnsmasq/Makefile index 15a36849e4..1b030d1ad0 100644 --- a/package/dnsmasq/Makefile +++ b/package/dnsmasq/Makefile @@ -4,17 +4,16 @@ # This is free software, licensed under the GNU General Public License v2. # See /LICENSE for more information. # -# $Id$ include $(TOPDIR)/rules.mk PKG_NAME:=dnsmasq -PKG_VERSION:=2.46 -PKG_RELEASE:=1.1 +PKG_VERSION:=2.47 +PKG_RELEASE:=3 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=http://thekelleys.org.uk/dnsmasq -PKG_MD5SUM:=79ec740d1a10ee75f13efa4ff36d0250 +PKG_MD5SUM:=4524081e56d0b935717d493e8e8d3e11 include $(INCLUDE_DIR)/package.mk @@ -29,6 +28,10 @@ define Package/dnsmasq/description It is intended to provide coupled DNS and DHCP service to a LAN. endef +define Package/dnsmasq/conffiles +/etc/config/dhcp +endef + define Build/Compile $(MAKE) -C $(PKG_BUILD_DIR) \ $(TARGET_CONFIGURE_OPTS) \ diff --git a/package/dnsmasq/files/dhcp.conf b/package/dnsmasq/files/dhcp.conf index 72d51661a9..85228974a1 100644 --- a/package/dnsmasq/files/dhcp.conf +++ b/package/dnsmasq/files/dhcp.conf @@ -11,6 +11,9 @@ config dnsmasq option readethers 1 option leasefile '/tmp/dhcp.leases' option resolvfile '/tmp/resolv.conf.auto' + #list server '/mycompany.local/1.2.3.4' + #option nonwildcard 0 + #list interface br-lan config dhcp lan option interface lan diff --git a/package/dnsmasq/files/dnsmasq.init b/package/dnsmasq/files/dnsmasq.init index 7d32be077e..3f8dca959c 100644 --- a/package/dnsmasq/files/dnsmasq.init +++ b/package/dnsmasq/files/dnsmasq.init @@ -36,6 +36,14 @@ append_parm() { append args "$switch $_loctmp" } +append_server() { + append args "-S $1" +} + +append_interface() { + append args "-i $1" +} + dnsmasq() { local cfg="$1" append_bool "$cfg" authoritative "-K" @@ -53,6 +61,7 @@ dnsmasq() { append_bool "$cfg" boguspriv "-b" append_bool "$cfg" expandhosts "-E" append_bool "$cfg" enable_tftp "--enable-tftp" + append_bool "$cfg" nonwildcard "-z" append_parm "$cfg" dnsforwardmax "-0" append_parm "$cfg" port "-p" @@ -62,6 +71,8 @@ dnsmasq() { append_parm "$cfg" "queryport" "-Q" append_parm "$cfg" "domain" "-s" append_parm "$cfg" "local" "-S" + config_list_foreach "$cfg" "server" append_server + config_list_foreach "$cfg" "interface" append_interface append_parm "$cfg" "leasefile" "-l" append_parm "$cfg" "resolvfile" "-r" append_parm "$cfg" "tftp_root" "--tftp-root" @@ -177,7 +188,6 @@ dhcp_boot_add() { local cfg="$1" config_get name "$cfg" name - [ -n "$name" ] || return 0 config_get filename "$cfg" filename [ -n "$filename" ] || return 0 @@ -188,7 +198,7 @@ dhcp_boot_add() { config_get serveraddress "$cfg" serveraddress [ -n "$serveraddress" ] || return 0 - append args "--dhcp-boot=net:$name,$filename,$servername,$serveraddress" + append args "--dhcp-boot=${name:+net:$name,}$filename,$servername,$serveraddress" dhcp_option_add "$cfg" "$name" } @@ -210,7 +220,7 @@ dhcp_add() { DNS_SERVERS="$DNS_SERVERS $dnsserver" } - append_bool "$cfg" ignore "-2 $ifname" + append_bool "$cfg" ignore "-2 $ifname" && return 0 config_get proto "$net" proto [ static = "$proto" ] || return 0 @@ -222,7 +232,7 @@ dhcp_add() { #check for an already active dhcp server on the interface, unless 'force' is set config_get_bool force "$cfg" force 0 [ "$force" -gt 0 ] || { - udhcpc -n -q -R -s /bin/true -t 1 -i $ifname >&- && return 0 + udhcpc -n -q -s /bin/true -t 1 -i $ifname >&- && return 0 } config_get start "$cfg" start diff --git a/package/dnsmasq/patches/101-ipv6.patch b/package/dnsmasq/patches/101-ipv6.patch index 320709f613..682447c8d4 100644 --- a/package/dnsmasq/patches/101-ipv6.patch +++ b/package/dnsmasq/patches/101-ipv6.patch @@ -1,8 +1,8 @@ -Index: dnsmasq-2.44/src/config.h +Index: dnsmasq-2.47/src/config.h =================================================================== ---- dnsmasq-2.44.orig/src/config.h 2008-07-20 17:17:39.000000000 +0200 -+++ dnsmasq-2.44/src/config.h 2008-07-20 17:20:08.000000000 +0200 -@@ -286,8 +286,9 @@ +--- dnsmasq-2.47.orig/src/config.h 2009-02-15 19:05:25.000000000 +0200 ++++ dnsmasq-2.47/src/config.h 2009-02-15 19:05:25.000000000 +0200 +@@ -282,8 +282,9 @@ /* We assume that systems which don't have IPv6 headers don't have ntop and pton either */ diff --git a/package/dnsmasq/patches/102-rtnetlink.patch b/package/dnsmasq/patches/102-rtnetlink.patch index 613b6b81fe..932c7e66bf 100644 --- a/package/dnsmasq/patches/102-rtnetlink.patch +++ b/package/dnsmasq/patches/102-rtnetlink.patch @@ -1,6 +1,6 @@ -diff -ur dnsmasq-2.42.orig/src/netlink.c dnsmasq-2.42/src/netlink.c ---- dnsmasq-2.42.orig/src/netlink.c 2008-06-03 16:38:25.000000000 +0200 -+++ dnsmasq-2.42/src/netlink.c 2008-06-03 16:41:06.000000000 +0200 +diff -ur dnsmasq-2.47.orig/src/netlink.c dnsmasq-2.47/src/netlink.c +--- dnsmasq-2.47.orig/src/netlink.c 2009-02-15 19:05:25.000000000 +0200 ++++ dnsmasq-2.47/src/netlink.c 2008-02-15 19:05:25.000000000 +0200 @@ -21,6 +21,10 @@ #include #include diff --git a/package/ebtables/Makefile b/package/ebtables/Makefile index d84b5bf41c..170e7366dd 100644 --- a/package/ebtables/Makefile +++ b/package/ebtables/Makefile @@ -44,6 +44,8 @@ define Package/ebtables-utils/description $(call Package/ebtables/description) endef +MAKE_VARS += EXT_LIBSI="$(LIBGCC_S)" + MAKE_FLAGS += \ CFLAGS="$(TARGET_CFLAGS)" \ LIBDIR="/usr/lib/ebtables" diff --git a/package/openssl/Makefile b/package/openssl/Makefile index ff968c4594..11a9ef2e28 100644 --- a/package/openssl/Makefile +++ b/package/openssl/Makefile @@ -1,23 +1,24 @@ -# +# # Copyright (C) 2006-2009 OpenWrt.org # # This is free software, licensed under the GNU General Public License v2. # See /LICENSE for more information. # -# $Id$ include $(TOPDIR)/rules.mk PKG_NAME:=openssl -PKG_VERSION:=0.9.8i -PKG_RELEASE:=3.1 +PKG_VERSION:=0.9.8k +PKG_RELEASE:=2 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=http://www.openssl.org/source/ \ ftp://ftp.funet.fi/pub/crypt/cryptography/libs/openssl/source/ \ ftp://ftp.webmonster.de/pub/openssl/source/ \ ftp://ftp.sunet.se/pub/security/tools/net/openssl/source/ -PKG_MD5SUM:=561e00f18821c74b2b86c8c7786f9d8b +PKG_MD5SUM:=e555c6d58d276aec7fdc53363e338ab3 + +PKG_BUILD_DEPENDS:=ocf-crypto-headers include $(INCLUDE_DIR)/package.mk @@ -27,9 +28,9 @@ define Package/openssl/Default endef define Package/openssl/Default/description - The OpenSSL Project is a collaborative effort to develop a robust, - commercial-grade, full-featured, and Open Source toolkit implementing the - Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) + The OpenSSL Project is a collaborative effort to develop a robust, + commercial-grade, full-featured, and Open Source toolkit implementing the + Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. endef @@ -43,7 +44,7 @@ endef define Package/libopenssl/description $(call Package/openssl/Default/description) - This package contains the OpenSSL shared libraries, needed by other + This package contains the OpenSSL shared libraries, needed by other programs. endef @@ -68,10 +69,10 @@ endef OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-smime \ no-rmd160 no-aes192 no-ripemd no-camellia no-ans1 no-krb5 ifeq ($(BOARD),ixp4xx) -OPENSSL_OPTIONS:= shared no-ec no-err no-fips no-hw no-threads zlib-dynamic \ +OPENSSL_OPTIONS:= shared no-ec no-err no-hw no-threads zlib-dynamic \ no-sse2 no-perlasm --with-cryptodev else -OPENSSL_OPTIONS:= shared no-ec no-err no-fips no-hw no-threads zlib-dynamic \ +OPENSSL_OPTIONS:= shared no-ec no-err no-hw no-threads zlib-dynamic \ no-engines no-sse2 no-perlasm endif diff --git a/package/openssl/patches/001-upstream_dtls_cisco.patch b/package/openssl/patches/001-upstream_dtls_cisco.patch new file mode 100644 index 0000000000..46f4bb2233 --- /dev/null +++ b/package/openssl/patches/001-upstream_dtls_cisco.patch @@ -0,0 +1,139 @@ +--- a/ssl/d1_clnt.c ++++ b/ssl/d1_clnt.c +@@ -130,7 +130,7 @@ static int dtls1_get_hello_verify(SSL *s + + static SSL_METHOD *dtls1_get_client_method(int ver) + { +- if (ver == DTLS1_VERSION) ++ if (ver == DTLS1_VERSION || ver == DTLS1_BAD_VER) + return(DTLSv1_client_method()); + else + return(NULL); +@@ -181,7 +181,8 @@ int dtls1_connect(SSL *s) + s->server=0; + if (cb != NULL) cb(s,SSL_CB_HANDSHAKE_START,1); + +- if ((s->version & 0xff00 ) != (DTLS1_VERSION & 0xff00)) ++ if ((s->version & 0xff00 ) != (DTLS1_VERSION & 0xff00) && ++ (s->version & 0xff00 ) != (DTLS1_BAD_VER & 0xff00)) + { + SSLerr(SSL_F_DTLS1_CONNECT, ERR_R_INTERNAL_ERROR); + ret = -1; +--- a/ssl/d1_lib.c ++++ b/ssl/d1_lib.c +@@ -187,7 +187,10 @@ void dtls1_free(SSL *s) + void dtls1_clear(SSL *s) + { + ssl3_clear(s); +- s->version=DTLS1_VERSION; ++ if (s->options & SSL_OP_CISCO_ANYCONNECT) ++ s->version=DTLS1_BAD_VER; ++ else ++ s->version=DTLS1_VERSION; + } + + /* +--- a/ssl/d1_pkt.c ++++ b/ssl/d1_pkt.c +@@ -987,15 +987,17 @@ start: + if (rr->type == SSL3_RT_CHANGE_CIPHER_SPEC) + { + struct ccs_header_st ccs_hdr; ++ int ccs_hdr_len = DTLS1_CCS_HEADER_LENGTH; + + dtls1_get_ccs_header(rr->data, &ccs_hdr); + + /* 'Change Cipher Spec' is just a single byte, so we know + * exactly what the record payload has to look like */ + /* XDTLS: check that epoch is consistent */ +- if ( (s->client_version == DTLS1_BAD_VER && rr->length != 3) || +- (s->client_version != DTLS1_BAD_VER && rr->length != DTLS1_CCS_HEADER_LENGTH) || +- (rr->off != 0) || (rr->data[0] != SSL3_MT_CCS)) ++ if (s->client_version == DTLS1_BAD_VER || s->version == DTLS1_BAD_VER) ++ ccs_hdr_len = 3; ++ ++ if ((rr->length != ccs_hdr_len) || (rr->off != 0) || (rr->data[0] != SSL3_MT_CCS)) + { + i=SSL_AD_ILLEGAL_PARAMETER; + SSLerr(SSL_F_DTLS1_READ_BYTES,SSL_R_BAD_CHANGE_CIPHER_SPEC); +@@ -1311,7 +1313,7 @@ int do_dtls1_write(SSL *s, int type, con + #if 0 + /* 'create_empty_fragment' is true only when this function calls itself */ + if (!clear && !create_empty_fragment && !s->s3->empty_fragment_done +- && SSL_version(s) != DTLS1_VERSION) ++ && SSL_version(s) != DTLS1_VERSION && SSL_version(s) != DTLS1_BAD_VER) + { + /* countermeasure against known-IV weakness in CBC ciphersuites + * (see http://www.openssl.org/~bodo/tls-cbc.txt) +--- a/ssl/s3_clnt.c ++++ b/ssl/s3_clnt.c +@@ -708,7 +708,7 @@ int ssl3_get_server_hello(SSL *s) + + if (!ok) return((int)n); + +- if ( SSL_version(s) == DTLS1_VERSION) ++ if ( SSL_version(s) == DTLS1_VERSION || SSL_version(s) == DTLS1_BAD_VER) + { + if ( s->s3->tmp.message_type == DTLS1_MT_HELLO_VERIFY_REQUEST) + { +--- a/ssl/ssl.h ++++ b/ssl/ssl.h +@@ -510,6 +510,8 @@ typedef struct ssl_session_st + #define SSL_OP_COOKIE_EXCHANGE 0x00002000L + /* Don't use RFC4507 ticket extension */ + #define SSL_OP_NO_TICKET 0x00004000L ++/* Use Cisco's "speshul" version of DTLS_BAD_VER (as client) */ ++#define SSL_OP_CISCO_ANYCONNECT 0x00008000L + + /* As server, disallow session resumption on renegotiation */ + #define SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION 0x00010000L +--- a/ssl/ssl_lib.c ++++ b/ssl/ssl_lib.c +@@ -995,7 +995,8 @@ long SSL_ctrl(SSL *s,int cmd,long larg,v + s->max_cert_list=larg; + return(l); + case SSL_CTRL_SET_MTU: +- if (SSL_version(s) == DTLS1_VERSION) ++ if (SSL_version(s) == DTLS1_VERSION || ++ SSL_version(s) == DTLS1_BAD_VER) + { + s->d1->mtu = larg; + return larg; +--- a/ssl/ssl_sess.c ++++ b/ssl/ssl_sess.c +@@ -211,6 +211,11 @@ int ssl_get_new_session(SSL *s, int sess + ss->ssl_version=TLS1_VERSION; + ss->session_id_length=SSL3_SSL_SESSION_ID_LENGTH; + } ++ else if (s->version == DTLS1_BAD_VER) ++ { ++ ss->ssl_version=DTLS1_BAD_VER; ++ ss->session_id_length=SSL3_SSL_SESSION_ID_LENGTH; ++ } + else if (s->version == DTLS1_VERSION) + { + ss->ssl_version=DTLS1_VERSION; +--- a/ssl/t1_enc.c ++++ b/ssl/t1_enc.c +@@ -765,10 +765,10 @@ int tls1_mac(SSL *ssl, unsigned char *md + HMAC_CTX_init(&hmac); + HMAC_Init_ex(&hmac,mac_sec,EVP_MD_size(hash),hash,NULL); + +- if (ssl->version == DTLS1_VERSION && ssl->client_version != DTLS1_BAD_VER) ++ if (ssl->version == DTLS1_BAD_VER || ++ (ssl->version == DTLS1_VERSION && ssl->client_version != DTLS1_BAD_VER)) + { + unsigned char dtlsseq[8],*p=dtlsseq; +- + s2n(send?ssl->d1->w_epoch:ssl->d1->r_epoch, p); + memcpy (p,&seq[2],6); + +@@ -793,7 +793,7 @@ printf("rec="); + {unsigned int z; for (z=0; zlength; z++) printf("%02X ",buf[z]); printf("\n"); } + #endif + +- if ( SSL_version(ssl) != DTLS1_VERSION) ++ if ( SSL_version(ssl) != DTLS1_VERSION && SSL_version(ssl) != DTLS1_BAD_VER) + { + for (i=7; i>=0; i--) + { diff --git a/package/openssl/patches/100-parallel-build.patch b/package/openssl/patches/100-parallel-build.patch new file mode 100644 index 0000000000..eace0f491b --- /dev/null +++ b/package/openssl/patches/100-parallel-build.patch @@ -0,0 +1,24 @@ +diff -uNr openssl-0.9.8j.ORIG/Makefile.org openssl-0.9.8j/Makefile.org +--- openssl-0.9.8j.ORIG/Makefile.org 2009-01-07 18:06:31.000000000 +0000 ++++ openssl-0.9.8j/Makefile.org 2009-01-07 18:08:38.000000000 +0000 +@@ -333,15 +333,15 @@ + dir=crypto; target=all; $(BUILD_ONE_CMD) + build_fips: + @dir=fips; target=all; [ -z "$(FIPSCANLIB)" ] || $(BUILD_ONE_CMD) +-build_ssl: ++build_ssl: build_crypto + @dir=ssl; target=all; $(BUILD_ONE_CMD) +-build_engines: ++build_engines: build_crypto + @dir=engines; target=all; $(BUILD_ONE_CMD) +-build_apps: ++build_apps: build_libs + @dir=apps; target=all; $(BUILD_ONE_CMD) +-build_tests: ++build_tests: build_libs + @dir=test; target=all; $(BUILD_ONE_CMD) +-build_tools: ++build_tools: build_libs + @dir=tools; target=all; $(BUILD_ONE_CMD) + + all_testapps: build_libs build_testapps diff --git a/package/openssl/patches/120-makedepend.patch b/package/openssl/patches/120-makedepend.patch index 232ffb761a..01af569fea 100644 --- a/package/openssl/patches/120-makedepend.patch +++ b/package/openssl/patches/120-makedepend.patch @@ -1,7 +1,6 @@ -Index: openssl-0.9.8e/util/domd -=================================================================== ---- openssl-0.9.8e.orig/util/domd 2007-06-04 13:23:32.130849264 +0200 -+++ openssl-0.9.8e/util/domd 2007-06-04 13:23:32.408807008 +0200 +diff -burN openssl-0.9.8k/util/domd openssl-0.9.8k.patched/util/domd +--- openssl-0.9.8k/util/domd 2009-01-21 22:44:52.000000000 +0100 ++++ openssl-0.9.8k.patched/util/domd 2009-03-26 15:46:28.600347986 +0100 @@ -14,7 +14,8 @@ cp Makefile Makefile.save # fake the presence of Kerberos @@ -16,7 +15,7 @@ Index: openssl-0.9.8e/util/domd done sed -e '/^# DO NOT DELETE.*/,$d' < Makefile > Makefile.tmp echo '# DO NOT DELETE THIS LINE -- make depend depends on it.' >> Makefile.tmp -- gcc -D OPENSSL_DOING_MAKEDEPEND -M $args >> Makefile.tmp +- ${CC:-gcc} -D OPENSSL_DOING_MAKEDEPEND -M $args >> Makefile.tmp + ${MAKEDEPEND} -D OPENSSL_DOING_MAKEDEPEND -M $args >> Makefile.tmp ${PERL} $TOP/util/clean-depend.pl < Makefile.tmp > Makefile.new rm -f Makefile.tmp diff --git a/package/openssl/patches/121-ocf-config.patch b/package/openssl/patches/121-ocf-config.patch new file mode 100644 index 0000000000..1656be872c --- /dev/null +++ b/package/openssl/patches/121-ocf-config.patch @@ -0,0 +1,24 @@ +diff -burN openssl-0.9.8k/config openssl-0.9.8k.patched/config +--- openssl-0.9.8k/config 2009-02-16 09:43:41.000000000 +0100 ++++ openssl-0.9.8k.patched/config 2009-03-27 19:38:37.262255825 +0100 +@@ -399,8 +399,11 @@ + # this is where the translation occurs into SSLeay terms + # --------------------------------------------------------------------------- + ++# figure out if gcc is available and if so we use it otherwise ++# we fallback to whatever cc does on the system + GCCVER=`(gcc -dumpversion) 2>/dev/null` + if [ "$GCCVER" != "" ]; then ++ CC=gcc + # then strip off whatever prefix egcs prepends the number with... + # Hopefully, this will work for any future prefixes as well. + GCCVER=`echo $GCCVER | LC_ALL=C sed 's/^[a-zA-Z]*\-//'` +@@ -409,6 +412,8 @@ + # major and minor version numbers. + # peak single digit before and after first dot, e.g. 2.95.1 gives 29 + GCCVER=`echo $GCCVER | sed 's/\([0-9]\)\.\([0-9]\).*/\1\2/'` ++else ++ CC=cc + fi + + # Only set CC if not supplied already diff --git a/package/openssl/patches/140-makefile-dirs.patch b/package/openssl/patches/140-makefile-dirs.patch index b35c8de0e0..d0eaec9128 100644 --- a/package/openssl/patches/140-makefile-dirs.patch +++ b/package/openssl/patches/140-makefile-dirs.patch @@ -1,13 +1,11 @@ -Index: openssl-0.9.8e/Makefile.org -=================================================================== ---- openssl-0.9.8e.orig/Makefile.org 2007-06-04 13:23:32.048861728 +0200 -+++ openssl-0.9.8e/Makefile.org 2007-06-04 13:23:32.857738760 +0200 -@@ -104,7 +104,7 @@ - ZLIB_INCLUDE= - LIBZLIB= +--- openssl-0.9.8j/Makefile.org 2008-12-30 14:26:26.000000000 +0100 ++++ openssl-0.9.8j.patched/Makefile.org 2009-01-17 13:41:52.610868317 +0100 +@@ -131,7 +131,7 @@ --DIRS= crypto ssl engines apps test tools -+DIRS= crypto ssl apps - SHLIBDIRS= crypto ssl + BASEADDR= + +-DIRS= crypto fips ssl engines apps test tools ++DIRS= crypto fips ssl apps + SHLIBDIRS= crypto ssl fips # dirs in crypto to build diff --git a/package/openssl/patches/160-disable_doc_tests.patch b/package/openssl/patches/160-disable_doc_tests.patch index 9706a0b2a8..e64a9193b3 100644 --- a/package/openssl/patches/160-disable_doc_tests.patch +++ b/package/openssl/patches/160-disable_doc_tests.patch @@ -1,26 +1,25 @@ -Index: openssl-0.9.8e/Makefile -=================================================================== ---- openssl-0.9.8e.orig/Makefile 2007-06-04 13:23:31.995869784 +0200 -+++ openssl-0.9.8e/Makefile 2007-06-04 13:23:33.246679632 +0200 -@@ -106,7 +106,7 @@ - ZLIB_INCLUDE= - LIBZLIB= +diff -burN openssl-0.9.8k/Makefile openssl-0.9.8k.patched/Makefile +--- openssl-0.9.8k/Makefile 2009-03-25 14:11:43.000000000 +0100 ++++ openssl-0.9.8k.patched/Makefile 2009-03-26 15:28:35.483566078 +0100 +@@ -133,7 +133,7 @@ + + BASEADDR=0xFB00000 -DIRS= crypto ssl engines apps test tools +DIRS= crypto ssl engines apps tools SHLIBDIRS= crypto ssl # dirs in crypto to build -@@ -123,7 +123,7 @@ +@@ -150,7 +150,7 @@ # tests to perform. "alltests" is a special word indicating that all tests # should be performed. -TESTS = alltests -+TESTS = ++TESTS = MAKEFILE= Makefile -@@ -135,7 +135,7 @@ +@@ -162,7 +162,7 @@ TOP= . ONEDIRS=out tmp @@ -29,16 +28,16 @@ Index: openssl-0.9.8e/Makefile WDIRS= windows LIBS= libcrypto.a libssl.a SHARED_CRYPTO=libcrypto$(SHLIB_EXT) -@@ -225,7 +225,7 @@ - @[ -n "$(THIS)" ] && $(CLEARENV) && $(MAKE) $(THIS) -e $(BUILDENV) +@@ -321,7 +321,7 @@ + ../crypto/uid.o sub_all: build_all -build_all: build_libs build_apps build_tests build_tools +build_all: build_libs build_apps build_tools - build_libs: build_crypto build_ssl build_engines + build_libs: build_crypto build_fips build_ssl build_shared build_engines -@@ -475,7 +475,7 @@ +@@ -613,7 +613,7 @@ dist_pem_h: (cd crypto/pem; $(MAKE) -e $(BUILDENV) pem.h; $(MAKE) clean) @@ -47,11 +46,10 @@ Index: openssl-0.9.8e/Makefile install_sw: @$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/bin \ -Index: openssl-0.9.8e/Makefile.org -=================================================================== ---- openssl-0.9.8e.orig/Makefile.org 2007-06-04 13:23:32.857738760 +0200 -+++ openssl-0.9.8e/Makefile.org 2007-06-04 13:23:33.246679632 +0200 -@@ -473,7 +473,7 @@ +diff -burN openssl-0.9.8k/Makefile.org openssl-0.9.8k.patched/Makefile.org +--- openssl-0.9.8k/Makefile.org 2009-03-03 23:40:29.000000000 +0100 ++++ openssl-0.9.8k.patched/Makefile.org 2009-03-26 15:29:05.243750064 +0100 +@@ -611,7 +611,7 @@ dist_pem_h: (cd crypto/pem; $(MAKE) -e $(BUILDENV) pem.h; $(MAKE) clean) diff --git a/package/openssl/patches/169-makefile-ccache_needs_quotes.patch b/package/openssl/patches/169-makefile-ccache_needs_quotes.patch new file mode 100644 index 0000000000..70a0eec3cd --- /dev/null +++ b/package/openssl/patches/169-makefile-ccache_needs_quotes.patch @@ -0,0 +1,40 @@ +--- openssl-0.9.8k/Makefile.org 2009-04-06 13:52:21.000000000 +0200 ++++ openssl-0.9.8k.patched/Makefile.org 2009-04-06 13:54:04.000000000 +0200 +@@ -357,7 +357,7 @@ + $(AR) libcrypto.a fips/fipscanister.o ; \ + else \ + if [ "$(FIPSCANLIB)" = "libcrypto" ]; then \ +- FIPSLD_CC=$(CC); CC=fips/fipsld; \ ++ FIPSLD_CC="$(CC)"; CC=fips/fipsld; \ + export CC FIPSLD_CC; \ + fi; \ + $(MAKE) -e SHLIBDIRS='crypto' build-shared; \ +@@ -380,7 +380,7 @@ + fips/fipscanister.o: build_fips + libfips$(SHLIB_EXT): fips/fipscanister.o + @if [ "$(SHLIB_TARGET)" != "" ]; then \ +- FIPSLD_CC=$(CC); CC=fips/fipsld; export CC FIPSLD_CC; \ ++ FIPSLD_CC="$(CC)"; CC=fips/fipsld; export CC FIPSLD_CC; \ + $(MAKE) -f Makefile.shared -e $(BUILDENV) \ + CC=$${CC} LIBNAME=fips THIS=$@ \ + LIBEXTRAS=fips/fipscanister.o \ +--- openssl-0.9.8k/apps/Makefile 2009-04-06 22:07:06.000000000 +0200 ++++ openssl-0.9.8k.patched/apps/Makefile 2009-04-06 22:12:39.000000000 +0200 +@@ -153,7 +153,7 @@ + shlib_target=; if [ -n "$(SHARED_LIBS)" ]; then \ + shlib_target="$(SHLIB_TARGET)"; \ + elif [ -n "$(FIPSCANLIB)" ]; then \ +- FIPSLD_CC=$(CC); CC=$(TOP)/fips/fipsld; export CC FIPSLD_CC; \ ++ FIPSLD_CC="$(CC)"; CC=$(TOP)/fips/fipsld; export CC FIPSLD_CC; \ + fi; \ + LIBRARIES="$(LIBSSL) $(LIBKRB5) $(LIBCRYPTO)" ; \ + [ "x$(FIPSCANLIB)" = "xlibfips" ] && LIBRARIES="$$LIBRARIES -lfips"; \ +@@ -158,7 +158,7 @@ + LIBRARIES="$(LIBSSL) $(LIBKRB5) $(LIBCRYPTO)" ; \ + [ "x$(FIPSCANLIB)" = "xlibfips" ] && LIBRARIES="$$LIBRARIES -lfips"; \ + $(MAKE) -f $(TOP)/Makefile.shared -e \ +- CC=$${CC} APPNAME=$(EXE) OBJECTS="$(PROGRAM).o $(E_OBJ)" \ ++ CC="$${CC}" APPNAME=$(EXE) OBJECTS="$(PROGRAM).o $(E_OBJ)" \ + LIBDEPS="$(PEX_LIBS) $$LIBRARIES $(EX_LIBS)" \ + link_app.$${shlib_target} + -(cd ..; \ diff --git a/package/openssl/patches/180-fix_link_segfault.patch b/package/openssl/patches/180-fix_link_segfault.patch new file mode 100644 index 0000000000..66d37cbe80 --- /dev/null +++ b/package/openssl/patches/180-fix_link_segfault.patch @@ -0,0 +1,18 @@ +--- a/Makefile.shared ++++ b/Makefile.shared +@@ -93,7 +93,6 @@ LINK_APP= \ + LDCMD="$${LDCMD:-$(CC)}"; LDFLAGS="$${LDFLAGS:-$(CFLAGS)}"; \ + LIBPATH=`for x in $$LIBDEPS; do if echo $$x | grep '^ *-L' > /dev/null 2>&1; then echo $$x | sed -e 's/^ *-L//'; fi; done | uniq`; \ + LIBPATH=`echo $$LIBPATH | sed -e 's/ /:/g'`; \ +- LD_LIBRARY_PATH=$$LIBPATH:$$LD_LIBRARY_PATH \ + $${LDCMD} $${LDFLAGS} -o $${APPNAME:=$(APPNAME)} $(OBJECTS) $${LIBDEPS} ) + + LINK_SO= \ +@@ -103,7 +102,6 @@ LINK_SO= \ + SHAREDFLAGS="$${SHAREDFLAGS:-$(CFLAGS) $(SHARED_LDFLAGS)}"; \ + LIBPATH=`for x in $$LIBDEPS; do if echo $$x | grep '^ *-L' > /dev/null 2>&1; then echo $$x | sed -e 's/^ *-L//'; fi; done | uniq`; \ + LIBPATH=`echo $$LIBPATH | sed -e 's/ /:/g'`; \ +- LD_LIBRARY_PATH=$$LIBPATH:$$LD_LIBRARY_PATH \ + $${SHAREDCMD} $${SHAREDFLAGS} \ + -o $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX \ + $$ALLSYMSFLAGS $$SHOBJECTS $$NOALLSYMSFLAGS $$LIBDEPS \ diff --git a/package/openssl/patches/200-ocf.patch b/package/openssl/patches/200-ocf-20080917.patch similarity index 77% rename from package/openssl/patches/200-ocf.patch rename to package/openssl/patches/200-ocf-20080917.patch index b80f342979..bf72d8abb2 100644 --- a/package/openssl/patches/200-ocf.patch +++ b/package/openssl/patches/200-ocf-20080917.patch @@ -1,7 +1,6 @@ -diff -Naur openssl-0.9.8i.orig/Configure openssl-0.9.8i/Configure ---- openssl-0.9.8i.orig/Configure 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/Configure 2008-10-01 04:16:12.000000000 +0200 -@@ -34,6 +34,8 @@ +--- a/Configure ++++ b/Configure +@@ -34,6 +34,8 @@ my $usage="Usage: Configure [no- # (Default: KRB5_DIR/include) # --with-krb5-flavor Declare what flavor of Kerberos 5 is used. Currently # supported values are "MIT" and "Heimdal". A value is required. @@ -10,7 +9,7 @@ diff -Naur openssl-0.9.8i.orig/Configure openssl-0.9.8i/Configure # # --test-sanity Make a number of sanity checks on the data in this file. # This is a debugging tool for OpenSSL developers. -@@ -540,6 +542,9 @@ +@@ -540,6 +542,9 @@ my %table=( ##### Compaq Non-Stop Kernel (Tandem) "tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::", @@ -20,7 +19,7 @@ diff -Naur openssl-0.9.8i.orig/Configure openssl-0.9.8i/Configure ); my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A -@@ -589,6 +594,8 @@ +@@ -589,6 +594,8 @@ my $montasm=1; # but "no-montasm" is d my $no_asm=0; my $no_dso=0; my $no_gmp=0; @@ -29,7 +28,7 @@ diff -Naur openssl-0.9.8i.orig/Configure openssl-0.9.8i/Configure my @skip=(); my $Makefile="Makefile"; my $des_locl="crypto/des/des_locl.h"; -@@ -716,6 +723,14 @@ +@@ -716,6 +723,14 @@ PROCESS_ARGS: { exit(&test_sanity()); } @@ -44,7 +43,7 @@ diff -Naur openssl-0.9.8i.orig/Configure openssl-0.9.8i/Configure elsif (/^reconfigure/ || /^reconf/) { if (open(IN,"<$Makefile")) -@@ -924,6 +939,7 @@ +@@ -924,6 +939,7 @@ foreach (sort (keys %disabled)) print " OPENSSL_NO_$ALGO"; if (/^err$/) { $flags .= "-DOPENSSL_NO_ERR "; } @@ -52,7 +51,7 @@ diff -Naur openssl-0.9.8i.orig/Configure openssl-0.9.8i/Configure elsif (/^asm$/) { $no_asm = 1; } } else -@@ -1064,6 +1080,16 @@ +@@ -1064,6 +1080,16 @@ if (!$no_krb5) $withargs{"krb5-dir"} ne ""; } @@ -69,9 +68,8 @@ diff -Naur openssl-0.9.8i.orig/Configure openssl-0.9.8i/Configure # The DSO code currently always implements all functions so that no # applications will have to worry about that from a compilation point # of view. However, the "method"s may return zero unless that platform -diff -Naur openssl-0.9.8i.orig/INSTALL openssl-0.9.8i/INSTALL ---- openssl-0.9.8i.orig/INSTALL 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/INSTALL 2008-10-01 04:16:12.000000000 +0200 +--- a/INSTALL ++++ b/INSTALL @@ -103,6 +103,12 @@ define preprocessor symbols, specify additional libraries, library directories or other compiler options. @@ -85,10 +83,9 @@ diff -Naur openssl-0.9.8i.orig/INSTALL openssl-0.9.8i/INSTALL Installation in Detail ---------------------- -diff -Naur openssl-0.9.8i.orig/Makefile.org openssl-0.9.8i/Makefile.org ---- openssl-0.9.8i.orig/Makefile.org 2008-10-01 04:16:02.000000000 +0200 -+++ openssl-0.9.8i/Makefile.org 2008-10-01 04:16:12.000000000 +0200 -@@ -367,7 +367,7 @@ +--- a/Makefile.org ++++ b/Makefile.org +@@ -367,7 +367,7 @@ files: links: @$(PERL) $(TOP)/util/mkdir-p.pl include/openssl @@ -97,9 +94,8 @@ diff -Naur openssl-0.9.8i.orig/Makefile.org openssl-0.9.8i/Makefile.org @set -e; target=links; $(RECURSIVE_BUILD_CMD) gentests: -diff -Naur openssl-0.9.8i.orig/Makefile.shared openssl-0.9.8i/Makefile.shared ---- openssl-0.9.8i.orig/Makefile.shared 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/Makefile.shared 2008-10-01 04:16:12.000000000 +0200 +--- a/Makefile.shared ++++ b/Makefile.shared @@ -6,13 +6,13 @@ # properly @@ -118,9 +114,206 @@ diff -Naur openssl-0.9.8i.orig/Makefile.shared openssl-0.9.8i/Makefile.shared # LIBNAME contains just the name of the library, without prefix ("lib" # on Unix, "cyg" for certain forms under Cygwin...) or suffix (.a, .so, -diff -Naur openssl-0.9.8i.orig/apps/apps.h openssl-0.9.8i/apps/apps.h ---- openssl-0.9.8i.orig/apps/apps.h 2008-10-01 04:16:02.000000000 +0200 -+++ openssl-0.9.8i/apps/apps.h 2008-10-01 04:16:12.000000000 +0200 +--- a/config ++++ b/config +@@ -48,10 +48,10 @@ done + + # First get uname entries that we use below + +-MACHINE=`(uname -m) 2>/dev/null` || MACHINE="unknown" +-RELEASE=`(uname -r) 2>/dev/null` || RELEASE="unknown" +-SYSTEM=`(uname -s) 2>/dev/null` || SYSTEM="unknown" +-VERSION=`(uname -v) 2>/dev/null` || VERSION="unknown" ++[ "$MACHINE" ] || MACHINE=`(uname -m) 2>/dev/null` || MACHINE="unknown" ++[ "$RELEASE" ] || RELEASE=`(uname -r) 2>/dev/null` || RELEASE="unknown" ++[ "$SYSTEM" ] || SYSTEM=`(uname -s) 2>/dev/null` || SYSTEM="unknown" ++[ "$VERSION" ] || VERSION=`(uname -v) 2>/dev/null` || VERSION="unknown" + + + # Now test for ISC and SCO, since it is has a braindamaged uname. +@@ -270,7 +270,7 @@ case "${SYSTEM}:${RELEASE}:${VERSION}:${ + echo "ppc-apple-darwin${VERSION}" + ;; + *) +- echo "i386-apple-darwin${VERSION}" ++ echo "${MACHINE}-apple-darwin${VERSION}" + ;; + esac + exit 0 +@@ -401,9 +401,9 @@ exit 0 + + # figure out if gcc is available and if so we use it otherwise + # we fallback to whatever cc does on the system +-GCCVER=`(gcc -dumpversion) 2>/dev/null` ++CC="${CC:-gcc}" ++GCCVER=`(${CC} -dumpversion) 2>/dev/null` + if [ "$GCCVER" != "" ]; then +- CC=gcc + # then strip off whatever prefix egcs prepends the number with... + # Hopefully, this will work for any future prefixes as well. + GCCVER=`echo $GCCVER | LC_ALL=C sed 's/^[a-zA-Z]*\-//'` +@@ -413,7 +413,7 @@ if [ "$GCCVER" != "" ]; then + # peak single digit before and after first dot, e.g. 2.95.1 gives 29 + GCCVER=`echo $GCCVER | sed 's/\([0-9]\)\.\([0-9]\).*/\1\2/'` + else +- CC=cc ++ CC="${CC:-cc}" + fi + GCCVER=${GCCVER:-0} + if [ "$SYSTEM" = "HP-UX" ];then +@@ -482,6 +482,9 @@ echo Operating system: $GUESSOS + # script above so we end up with values in vars but that would take + # more time that I want to waste at the moment + case "$GUESSOS" in ++ uClinux*) ++ OUT=uClinux-dist ++ ;; + mips2-sgi-irix) + CPU=`(hinv -t cpu) 2>/dev/null | head -1 | sed 's/^CPU:[^R]*R\([0-9]*\).*/\1/'` + CPU=${CPU:-0} +--- /dev/null ++++ b/makefile-uclinuxdist +@@ -0,0 +1,138 @@ ++# ++# this makefile gets recursed through by various bits of the build ++# so we need to only setup some things when invoked from outside ++# this directory. ++# ++# davidm@snapgear.com ++# ++ ++IN_LIBSSL := true ++export IN_LIBSSL ++ ++CONFIG_OPTS := --prefix=// --install_prefix=$(shell pwd)/build/install ++ ++ifdef CONFIG_USER_FLATFSD_FLATFSD ++CONFIG_OPTS += --openssldir=/etc/config ++else ++CONFIG_OPTS += --openssldir=/etc ++endif ++ifdef DISABLE_SHARED_SSL ++CONFIG_OPTS += no-shared ++else ++CONFIG_OPTS += shared ++endif ++ ++CONFIG_OPTS += no-rc2 ++CONFIG_OPTS += no-krb5 ++CONFIG_OPTS += no-rc5 ++CONFIG_OPTS += no-md2 ++CONFIG_OPTS += no-idea ++#CONFIG_OPTS += no-pem ++#CONFIG_OPTS += no-md5 ++#CONFIG_OPTS += no-sha ++#CONFIG_OPTS += no-hmac ++#CONFIG_OPTS += no-des ++#CONFIG_OPTS += no-aes ++#CONFIG_OPTS += no-bn ++CONFIG_OPTS += no-ec ++#CONFIG_OPTS += no-rsa ++#CONFIG_OPTS += no-dsa ++CONFIG_OPTS += no-ecdsa ++#CONFIG_OPTS += no-dh ++CONFIG_OPTS += no-ecdh ++CONFIG_OPTS += no-dso ++#CONFIG_OPTS += no-engine ++#CONFIG_OPTS += no-buffer ++#CONFIG_OPTS += no-bio ++#CONFIG_OPTS += no-stack ++#CONFIG_OPTS += no-lhash ++#CONFIG_OPTS += no-rand ++CONFIG_OPTS += no-err ++#CONFIG_OPTS += no-evp ++#CONFIG_OPTS += no-asn1 ++#CONFIG_OPTS += no-x509 ++#CONFIG_OPTS += no-x509v3 ++#CONFIG_OPTS += no-txt_db ++#CONFIG_OPTS += no-pkcs7 ++#CONFIG_OPTS += no-pkcs12 ++#CONFIG_OPTS += no-comp ++#CONFIG_OPTS += no-ocsp ++#CONFIG_OPTS += no-ui ++#CONFIG_OPTS += no-store ++CONFIG_OPTS += no-pqueue ++ ++# REVISIT: It would be better to have OPENSSL config options ++# which turn on this support as needed ++ifeq ($(CONFIG_USER_NESSUS_NASL)$(CONFIG_USER_SSH_SSH),) ++CONFIG_OPTS += no-ripemd ++CONFIG_OPTS += no-cast ++CONFIG_OPTS += no-rc4 ++endif ++ ++ifeq ($(CONFIG_USER_NESSUS_NASL)$(CONFIG_USER_SSH_SSH)$(CONFIG_PROP_SSCEP_SSCEP),) ++CONFIG_OPTS += no-bf ++endif ++ ++ifeq ($(CONFIG_USER_OPENVPN_OPENVPN)$(CONFIG_USER_WGET),) ++CONFIG_OPTS += no-md4 ++endif ++ ++ifdef CONFIG_OCF_OCF ++CONFIG_OPTS += --with-cryptodev ++#CONFIG_OPTS += --with-cryptodev-digests ++endif ++ ++# ++# if you want engines (they are dl loaded), a few things ++# need to be setup, you will also need to mod everything ++# to link against -ldl if it uses libcrypto. By default we ++# disable it (cryptodev suport is still included). ++# ++ifdef YOU_WANT_DYNAMIC_HW_ENGINES_ENABLED ++LIBSSL_dlfcn = dlfcn ++else ++CONFIG_OPTS += no-hw ++LIBSSL_dlfcn = ++endif ++ ++# ++# our libs aren't in the default location yet ++# ++LDFLAGS += -L$(ROOTDIR)/lib/libssl/build ++export LDFLAGS ++ ++all: build/configured ++ $(MAKE) -C build ++ $(MAKE) -C build install_sw ++ ++build/configured: makefile config Configure ++ rm -rf build ++ find . -type d > .dirs ++ find . ! -type d | grep -v ./makefile > .files ++ while read t; do mkdir -p build/$$t; done < .dirs ++ while read t; do ln -s `pwd`/$$t build/$$t; done < .files ++ rm -f .dirs .files ++ chmod +x build/config ++ cd build; MACHINE=uClinux-dist ./config $(CONFIG_OPTS) ++ $(MAKE) -C build depend ++ $(MAKE) -C build links ++ touch build/configured ++ ++clean: ++ -rm -rf build ++ ++romfs: ++ cd build/install/lib; \ ++ for i in *.so*; do \ ++ if [ -L $$i ]; then \ ++ $(ROMFSINST) -s `find $$i -printf %l` /lib/$$i; \ ++ elif [ -f $$i ]; then \ ++ $(ROMFSINST) /lib/$$i; \ ++ fi; \ ++ done ++ ++romfs_user: ++ $(ROMFSINST) -e CONFIG_USER_OPENSSL_APPS build/install/bin/openssl /bin/openssl ++ # $(ROMFSINST) -e CONFIG_USER_OPENSSL_APPS build/install/bin/c_rehash /bin/c_rehash ++ ++ +--- a/apps/apps.h ++++ b/apps/apps.h @@ -112,7 +112,7 @@ #ifndef HEADER_APPS_H #define HEADER_APPS_H @@ -130,10 +323,9 @@ diff -Naur openssl-0.9.8i.orig/apps/apps.h openssl-0.9.8i/apps/apps.h #include #include -diff -Naur openssl-0.9.8i.orig/apps/progs.h openssl-0.9.8i/apps/progs.h ---- openssl-0.9.8i.orig/apps/progs.h 2008-10-01 04:16:02.000000000 +0200 -+++ openssl-0.9.8i/apps/progs.h 2008-10-01 04:16:12.000000000 +0200 -@@ -129,7 +129,9 @@ +--- a/apps/progs.h ++++ b/apps/progs.h +@@ -129,7 +129,9 @@ FUNCTION functions[] = { #ifndef OPENSSL_NO_ENGINE {FUNC_TYPE_GENERAL,"engine",engine_main}, #endif @@ -143,10 +335,9 @@ diff -Naur openssl-0.9.8i.orig/apps/progs.h openssl-0.9.8i/apps/progs.h {FUNC_TYPE_GENERAL,"prime",prime_main}, #ifndef OPENSSL_NO_MD2 {FUNC_TYPE_MD,"md2",dgst_main}, -diff -Naur openssl-0.9.8i.orig/apps/speed.c openssl-0.9.8i/apps/speed.c ---- openssl-0.9.8i.orig/apps/speed.c 2008-10-01 04:16:02.000000000 +0200 -+++ openssl-0.9.8i/apps/speed.c 2008-10-01 04:16:12.000000000 +0200 -@@ -292,7 +292,7 @@ +--- a/apps/speed.c ++++ b/apps/speed.c +@@ -292,7 +292,7 @@ static const char *names[ALGOR_NUM]={ "evp","sha256","sha512", "aes-128 ige","aes-192 ige","aes-256 ige"}; static double results[ALGOR_NUM][SIZE_NUM]; @@ -155,7 +346,7 @@ diff -Naur openssl-0.9.8i.orig/apps/speed.c openssl-0.9.8i/apps/speed.c static double rsa_results[RSA_NUM][2]; static double dsa_results[DSA_NUM][2]; #ifndef OPENSSL_NO_ECDSA -@@ -328,6 +328,79 @@ +@@ -328,6 +328,79 @@ static SIGRETTYPE sig_done(int sig) #define START 0 #define STOP 1 @@ -235,7 +426,7 @@ diff -Naur openssl-0.9.8i.orig/apps/speed.c openssl-0.9.8i/apps/speed.c #if defined(OPENSSL_SYS_NETWARE) /* for NetWare the best we can do is use clock() which returns the -@@ -358,6 +431,11 @@ +@@ -358,6 +431,11 @@ static double Time_F(int s) { double ret; @@ -247,7 +438,7 @@ diff -Naur openssl-0.9.8i.orig/apps/speed.c openssl-0.9.8i/apps/speed.c #ifdef USE_TOD if(usertime) { -@@ -832,6 +910,14 @@ +@@ -832,6 +910,14 @@ int MAIN(int argc, char **argv) j--; /* Otherwise, -elapsed gets confused with an algorithm. */ } @@ -262,7 +453,7 @@ diff -Naur openssl-0.9.8i.orig/apps/speed.c openssl-0.9.8i/apps/speed.c else if ((argc > 0) && (strcmp(*argv,"-evp") == 0)) { argc--; -@@ -1260,6 +1346,9 @@ +@@ -1260,6 +1346,9 @@ int MAIN(int argc, char **argv) #ifdef HAVE_FORK BIO_printf(bio_err,"-multi n run n benchmarks in parallel.\n"); #endif @@ -272,7 +463,7 @@ diff -Naur openssl-0.9.8i.orig/apps/speed.c openssl-0.9.8i/apps/speed.c goto end; } argc--; -@@ -1267,11 +1356,6 @@ +@@ -1267,11 +1356,6 @@ int MAIN(int argc, char **argv) j++; } @@ -284,7 +475,7 @@ diff -Naur openssl-0.9.8i.orig/apps/speed.c openssl-0.9.8i/apps/speed.c if (j == 0) { for (i=0; i/dev/null` || MACHINE="unknown" --RELEASE=`(uname -r) 2>/dev/null` || RELEASE="unknown" --SYSTEM=`(uname -s) 2>/dev/null` || SYSTEM="unknown" --VERSION=`(uname -v) 2>/dev/null` || VERSION="unknown" -+[ "$MACHINE" ] || MACHINE=`(uname -m) 2>/dev/null` || MACHINE="unknown" -+[ "$RELEASE" ] || RELEASE=`(uname -r) 2>/dev/null` || RELEASE="unknown" -+[ "$SYSTEM" ] || SYSTEM=`(uname -s) 2>/dev/null` || SYSTEM="unknown" -+[ "$VERSION" ] || VERSION=`(uname -v) 2>/dev/null` || VERSION="unknown" - - - # Now test for ISC and SCO, since it is has a braindamaged uname. -@@ -270,7 +270,7 @@ - echo "ppc-apple-darwin${VERSION}" - ;; - *) -- echo "i386-apple-darwin${VERSION}" -+ echo "${MACHINE}-apple-darwin${VERSION}" - ;; - esac - exit 0 -@@ -401,9 +401,9 @@ - - # figure out if gcc is available and if so we use it otherwise - # we fallback to whatever cc does on the system --GCCVER=`(gcc -dumpversion) 2>/dev/null` -+CC="${CC:-gcc}" -+GCCVER=`(${CC} -dumpversion) 2>/dev/null` - if [ "$GCCVER" != "" ]; then -- CC=gcc - # then strip off whatever prefix egcs prepends the number with... - # Hopefully, this will work for any future prefixes as well. - GCCVER=`echo $GCCVER | LC_ALL=C sed 's/^[a-zA-Z]*\-//'` -@@ -413,7 +413,7 @@ - # peak single digit before and after first dot, e.g. 2.95.1 gives 29 - GCCVER=`echo $GCCVER | sed 's/\([0-9]\)\.\([0-9]\).*/\1\2/'` - else -- CC=cc -+ CC="${CC:-cc}" - fi - GCCVER=${GCCVER:-0} - if [ "$SYSTEM" = "HP-UX" ];then -@@ -482,6 +482,9 @@ - # script above so we end up with values in vars but that would take - # more time that I want to waste at the moment - case "$GUESSOS" in -+ uClinux*) -+ OUT=uClinux-dist -+ ;; - mips2-sgi-irix) - CPU=`(hinv -t cpu) 2>/dev/null | head -1 | sed 's/^CPU:[^R]*R\([0-9]*\).*/\1/'` - CPU=${CPU:-0} -diff -Naur openssl-0.9.8i.orig/crypto/cryptlib.h openssl-0.9.8i/crypto/cryptlib.h ---- openssl-0.9.8i.orig/crypto/cryptlib.h 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/crypto/cryptlib.h 2008-10-01 04:16:12.000000000 +0200 +--- a/crypto/cryptlib.h ++++ b/crypto/cryptlib.h @@ -62,7 +62,7 @@ #include #include @@ -589,10 +721,9 @@ diff -Naur openssl-0.9.8i.orig/crypto/cryptlib.h openssl-0.9.8i/crypto/cryptlib. #ifdef OPENSSL_USE_APPLINK #define BIO_FLAGS_UPLINK 0x8000 -diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_all.c openssl-0.9.8i/crypto/engine/eng_all.c ---- openssl-0.9.8i.orig/crypto/engine/eng_all.c 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/crypto/engine/eng_all.c 2008-10-01 04:17:20.000000000 +0200 -@@ -104,7 +104,7 @@ +--- a/crypto/engine/eng_all.c ++++ b/crypto/engine/eng_all.c +@@ -104,7 +104,7 @@ void ENGINE_load_builtin_engines(void) #endif #endif #ifndef OPENSSL_NO_HW @@ -601,7 +732,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_all.c openssl-0.9.8i/crypto/eng ENGINE_load_cryptodev(); #endif #if defined(OPENSSL_SYS_WIN32) && !defined(OPENSSL_NO_CAPIENG) -@@ -113,7 +113,7 @@ +@@ -113,7 +113,7 @@ void ENGINE_load_builtin_engines(void) #endif } @@ -610,10 +741,9 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_all.c openssl-0.9.8i/crypto/eng void ENGINE_setup_bsd_cryptodev(void) { static int bsd_cryptodev_default_loaded = 0; if (!bsd_cryptodev_default_loaded) { -diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/crypto/engine/eng_cryptodev.c ---- openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/crypto/engine/eng_cryptodev.c 2008-10-01 04:16:12.000000000 +0200 -@@ -68,6 +68,16 @@ +--- a/crypto/engine/eng_cryptodev.c ++++ b/crypto/engine/eng_cryptodev.c +@@ -68,6 +68,16 @@ ENGINE_load_cryptodev(void) struct dev_crypto_state { struct session_op d_sess; int d_fd; @@ -630,7 +760,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp }; static u_int32_t cryptodev_asymfeat = 0; -@@ -75,9 +85,11 @@ +@@ -75,9 +85,11 @@ static u_int32_t cryptodev_asymfeat = 0; static int get_asym_dev_crypto(void); static int open_dev_crypto(void); static int get_dev_crypto(void); @@ -642,7 +772,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp static int get_cryptodev_ciphers(const int **cnids); static int get_cryptodev_digests(const int **cnids); static int cryptodev_usable_ciphers(const int **nids); -@@ -100,7 +112,7 @@ +@@ -100,7 +112,7 @@ static int cryptodev_asym(struct crypt_k static int cryptodev_bn_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx); static int cryptodev_rsa_nocrt_mod_exp(BIGNUM *r0, const BIGNUM *I, @@ -651,15 +781,20 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp static int cryptodev_rsa_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa, BN_CTX *ctx); static int cryptodev_dsa_bn_mod_exp(DSA *dsa, BIGNUM *r, BIGNUM *a, const BIGNUM *p, const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx); -@@ -133,6 +145,7 @@ +@@ -130,9 +142,12 @@ static struct { + int ivmax; + int keylen; + } ciphers[] = { ++ { CRYPTO_ARC4, NID_rc4, 0, 16, }, { CRYPTO_DES_CBC, NID_des_cbc, 8, 8, }, { CRYPTO_3DES_CBC, NID_des_ede3_cbc, 8, 24, }, { CRYPTO_AES_CBC, NID_aes_128_cbc, 16, 16, }, ++ { CRYPTO_AES_CBC, NID_aes_192_cbc, 16, 24, }, + { CRYPTO_AES_CBC, NID_aes_256_cbc, 16, 32, }, { CRYPTO_BLF_CBC, NID_bf_cbc, 8, 16, }, { CRYPTO_CAST_CBC, NID_cast5_cbc, 8, 16, }, { CRYPTO_SKIPJACK_CBC, NID_undef, 0, 0, }, -@@ -142,14 +155,15 @@ +@@ -142,14 +157,15 @@ static struct { static struct { int id; int nid; @@ -682,7 +817,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp }; /* -@@ -176,10 +190,17 @@ +@@ -176,10 +192,17 @@ open_dev_crypto(void) static int get_dev_crypto(void) { @@ -703,7 +838,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp if (ioctl(fd, CRIOGET, &retfd) == -1) return (-1); -@@ -202,6 +223,7 @@ +@@ -202,6 +225,7 @@ get_asym_dev_crypto(void) return fd; } @@ -711,7 +846,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp /* * XXXX this needs to be set for each alg - and determined from * a running card. -@@ -245,6 +267,7 @@ +@@ -245,6 +269,7 @@ cipher_nid_to_cryptodev(int nid) return (ciphers[i].id); return (0); } @@ -719,7 +854,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp /* * Find out what ciphers /dev/crypto will let us have a session for. -@@ -264,7 +287,7 @@ +@@ -264,7 +289,7 @@ get_cryptodev_ciphers(const int **cnids) return (0); } memset(&sess, 0, sizeof(sess)); @@ -728,7 +863,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp for (i = 0; ciphers[i].id && count < CRYPTO_ALGORITHM_MAX; i++) { if (ciphers[i].nid == NID_undef) -@@ -303,10 +326,12 @@ +@@ -303,10 +328,12 @@ get_cryptodev_digests(const int **cnids) return (0); } memset(&sess, 0, sizeof(sess)); @@ -741,7 +876,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp sess.cipher = 0; if (ioctl(fd, CIOCGSESSION, &sess) != -1 && ioctl(fd, CIOCFSESSION, &sess.ses) != -1) -@@ -351,6 +376,9 @@ +@@ -351,6 +378,9 @@ cryptodev_usable_ciphers(const int **nid static int cryptodev_usable_digests(const int **nids) { @@ -751,7 +886,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp /* * XXXX just disable all digests for now, because it sucks. * we need a better way to decide this - i.e. I may not -@@ -365,6 +393,7 @@ +@@ -365,6 +395,7 @@ cryptodev_usable_digests(const int **nid */ *nids = NULL; return (0); @@ -759,16 +894,16 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp } static int -@@ -427,16 +456,20 @@ +@@ -427,16 +458,20 @@ cryptodev_init_key(EVP_CIPHER_CTX *ctx, { struct dev_crypto_state *state = ctx->cipher_data; struct session_op *sess = &state->d_sess; - int cipher; -- -- if ((cipher = cipher_nid_to_cryptodev(ctx->cipher->nid)) == NID_undef) -- return (0); + int cipher, i; +- if ((cipher = cipher_nid_to_cryptodev(ctx->cipher->nid)) == NID_undef) +- return (0); +- - if (ctx->cipher->iv_len > cryptodev_max_iv(cipher)) - return (0); + for (i = 0; ciphers[i].id; i++) @@ -787,10 +922,44 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp memset(sess, 0, sizeof(struct session_op)); -@@ -563,6 +596,19 @@ +@@ -496,6 +531,20 @@ cryptodev_cleanup(EVP_CIPHER_CTX *ctx) + * gets called when libcrypto requests a cipher NID. + */ + ++/* RC4 */ ++const EVP_CIPHER cryptodev_rc4 = { ++ NID_rc4, ++ 1, 16, 0, ++ EVP_CIPH_VARIABLE_LENGTH, ++ cryptodev_init_key, ++ cryptodev_cipher, ++ cryptodev_cleanup, ++ sizeof(struct dev_crypto_state), ++ NULL, ++ NULL, ++ NULL ++}; ++ + /* DES CBC EVP */ + const EVP_CIPHER cryptodev_des_cbc = { + NID_des_cbc, +@@ -563,6 +612,32 @@ const EVP_CIPHER cryptodev_aes_cbc = { NULL }; ++const EVP_CIPHER cryptodev_aes_192_cbc = { ++ NID_aes_192_cbc, ++ 16, 24, 16, ++ EVP_CIPH_CBC_MODE, ++ cryptodev_init_key, ++ cryptodev_cipher, ++ cryptodev_cleanup, ++ sizeof(struct dev_crypto_state), ++ EVP_CIPHER_set_asn1_iv, ++ EVP_CIPHER_get_asn1_iv, ++ NULL ++}; ++ +const EVP_CIPHER cryptodev_aes_256_cbc = { + NID_aes_256_cbc, + 16, 32, 16, @@ -807,17 +976,30 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp /* * Registered by the ENGINE when used to find out how to deal with * a particular NID in the ENGINE. this says what we'll do at the -@@ -591,6 +637,9 @@ +@@ -576,6 +651,9 @@ cryptodev_engine_ciphers(ENGINE *e, cons + return (cryptodev_usable_ciphers(nids)); + + switch (nid) { ++ case NID_rc4: ++ *cipher = &cryptodev_rc4; ++ break; + case NID_des_ede3_cbc: + *cipher = &cryptodev_3des_cbc; + break; +@@ -591,6 +669,12 @@ cryptodev_engine_ciphers(ENGINE *e, cons case NID_aes_128_cbc: *cipher = &cryptodev_aes_cbc; break; ++ case NID_aes_192_cbc: ++ *cipher = &cryptodev_aes_192_cbc; ++ break; + case NID_aes_256_cbc: + *cipher = &cryptodev_aes_256_cbc; + break; default: *cipher = NULL; break; -@@ -598,6 +647,234 @@ +@@ -598,6 +682,234 @@ cryptodev_engine_ciphers(ENGINE *e, cons return (*cipher != NULL); } @@ -1052,7 +1234,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp static int cryptodev_engine_digests(ENGINE *e, const EVP_MD **digest, const int **nids, int nid) -@@ -606,10 +883,15 @@ +@@ -606,10 +918,15 @@ cryptodev_engine_digests(ENGINE *e, cons return (cryptodev_usable_digests(nids)); switch (nid) { @@ -1069,7 +1251,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp *digest = NULL; break; } -@@ -625,7 +907,7 @@ +@@ -625,7 +942,7 @@ static int bn2crparam(const BIGNUM *a, struct crparam *crp) { int i, j, k; @@ -1078,7 +1260,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp u_char *b; crp->crp_p = NULL; -@@ -637,6 +919,7 @@ +@@ -637,6 +954,7 @@ bn2crparam(const BIGNUM *a, struct crpar b = malloc(bytes); if (b == NULL) return (1); @@ -1086,7 +1268,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp crp->crp_p = b; crp->crp_nbits = bits; -@@ -681,7 +964,7 @@ +@@ -681,7 +999,7 @@ zapparams(struct crypt_kop *kop) { int i; @@ -1095,7 +1277,7 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp if (kop->crk_param[i].crp_p) free(kop->crk_param[i].crp_p); kop->crk_param[i].crp_p = NULL; -@@ -756,12 +1039,10 @@ +@@ -756,12 +1074,10 @@ err: } static int @@ -1110,22 +1292,9 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_cryptodev.c openssl-0.9.8i/cryp r = cryptodev_bn_mod_exp(r0, I, rsa->d, rsa->n, ctx, NULL); BN_CTX_free(ctx); return (r); -diff -Naur openssl-0.9.8i.orig/crypto/engine/eng_table.c openssl-0.9.8i/crypto/engine/eng_table.c ---- openssl-0.9.8i.orig/crypto/engine/eng_table.c 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/crypto/engine/eng_table.c 2008-10-01 04:16:12.000000000 +0200 -@@ -186,6 +186,8 @@ - { - engine_unlocked_finish(e, 0); - pile->funct = NULL; -+ /* "touch" this ENGINE_CIPHER */ -+ pile->uptodate = 0; - } - } - static IMPLEMENT_LHASH_DOALL_ARG_FN(int_unregister_cb,ENGINE_PILE *,ENGINE *) -diff -Naur openssl-0.9.8i.orig/crypto/engine/engine.h openssl-0.9.8i/crypto/engine/engine.h ---- openssl-0.9.8i.orig/crypto/engine/engine.h 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/crypto/engine/engine.h 2008-10-01 04:16:12.000000000 +0200 -@@ -703,7 +703,7 @@ +--- a/crypto/engine/engine.h ++++ b/crypto/engine/engine.h +@@ -703,7 +703,7 @@ typedef int (*dynamic_bind_engine)(ENGIN * values. */ void *ENGINE_get_static_state(void); @@ -1134,10 +1303,9 @@ diff -Naur openssl-0.9.8i.orig/crypto/engine/engine.h openssl-0.9.8i/crypto/engi void ENGINE_setup_bsd_cryptodev(void); #endif -diff -Naur openssl-0.9.8i.orig/crypto/evp/c_all.c openssl-0.9.8i/crypto/evp/c_all.c ---- openssl-0.9.8i.orig/crypto/evp/c_all.c 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/crypto/evp/c_all.c 2008-10-01 04:16:12.000000000 +0200 -@@ -83,7 +83,7 @@ +--- a/crypto/evp/c_all.c ++++ b/crypto/evp/c_all.c +@@ -83,7 +83,7 @@ void OPENSSL_add_all_algorithms_noconf(v OpenSSL_add_all_ciphers(); OpenSSL_add_all_digests(); #ifndef OPENSSL_NO_ENGINE @@ -1146,10 +1314,9 @@ diff -Naur openssl-0.9.8i.orig/crypto/evp/c_all.c openssl-0.9.8i/crypto/evp/c_al ENGINE_setup_bsd_cryptodev(); # endif #endif -diff -Naur openssl-0.9.8i.orig/crypto/evp/c_alld.c openssl-0.9.8i/crypto/evp/c_alld.c ---- openssl-0.9.8i.orig/crypto/evp/c_alld.c 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/crypto/evp/c_alld.c 2008-10-01 04:16:12.000000000 +0200 -@@ -81,7 +81,7 @@ +--- a/crypto/evp/c_alld.c ++++ b/crypto/evp/c_alld.c +@@ -81,7 +81,7 @@ void OpenSSL_add_all_digests(void) EVP_add_digest(EVP_dss()); #endif #endif @@ -1158,10 +1325,9 @@ diff -Naur openssl-0.9.8i.orig/crypto/evp/c_alld.c openssl-0.9.8i/crypto/evp/c_a EVP_add_digest(EVP_sha1()); EVP_add_digest_alias(SN_sha1,"ssl3-sha1"); EVP_add_digest_alias(SN_sha1WithRSAEncryption,SN_sha1WithRSA); -diff -Naur openssl-0.9.8i.orig/engines/Makefile openssl-0.9.8i/engines/Makefile ---- openssl-0.9.8i.orig/engines/Makefile 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/engines/Makefile 2008-10-01 04:16:12.000000000 +0200 -@@ -96,6 +96,7 @@ +--- a/engines/Makefile ++++ b/engines/Makefile +@@ -96,6 +96,7 @@ install: ( echo installing $$l; \ if [ "$(PLATFORM)" != "Cygwin" ]; then \ case "$(CFLAGS)" in \ @@ -1169,23 +1335,22 @@ diff -Naur openssl-0.9.8i.orig/engines/Makefile openssl-0.9.8i/engines/Makefile *DSO_DLFCN*) sfx="so";; \ *DSO_DL*) sfx="sl";; \ *) sfx="bad";; \ -diff -Naur openssl-0.9.8i.orig/util/domd openssl-0.9.8i/util/domd ---- openssl-0.9.8i.orig/util/domd 2008-10-01 04:16:01.000000000 +0200 -+++ openssl-0.9.8i/util/domd 2008-10-01 04:16:13.000000000 +0200 -@@ -23,13 +23,17 @@ +--- a/util/domd ++++ b/util/domd +@@ -23,13 +23,17 @@ if [ "$D" = "gcc" ]; then done sed -e '/^# DO NOT DELETE.*/,$d' < Makefile > Makefile.tmp echo '# DO NOT DELETE THIS LINE -- make depend depends on it.' >> Makefile.tmp - ${MAKEDEPEND} -D OPENSSL_DOING_MAKEDEPEND -M $args >> Makefile.tmp -+ ${MAKEDEPEND} -D OPENSSL_DOING_MAKEDEPEND -M $args >> Makefile.tmp && ++ ${MAKEDEPEND} -D OPENSSL_DOING_MAKEDEPEND -M $args >> Makefile.tmp && \ ${PERL} $TOP/util/clean-depend.pl < Makefile.tmp > Makefile.new -+ RC=$? ++ RC=$? rm -f Makefile.tmp else - ${MAKEDEPEND} -D OPENSSL_DOING_MAKEDEPEND $@ + ${MAKEDEPEND} -D OPENSSL_DOING_MAKEDEPEND $@ && \ ${PERL} $TOP/util/clean-depend.pl < Makefile > Makefile.new -+ RC=$? ++ RC=$? fi mv Makefile.new Makefile # unfake the presence of Kerberos diff --git a/package/openssl/patches/205-use_local_cryptodev_h.patch b/package/openssl/patches/205-use_local_cryptodev_h.patch deleted file mode 100644 index a28320393c..0000000000 --- a/package/openssl/patches/205-use_local_cryptodev_h.patch +++ /dev/null @@ -1,494 +0,0 @@ -diff -Nur openssl-0.9.8h/crypto/engine/cryptodev.h openssl-0.9.8h-ocf/crypto/engine/cryptodev.h ---- openssl-0.9.8h/crypto/engine/cryptodev.h 1970-01-01 01:00:00.000000000 +0100 -+++ openssl-0.9.8h-ocf/crypto/engine/cryptodev.h 2008-07-13 15:32:53.000000000 +0200 -@@ -0,0 +1,478 @@ -+/* $FreeBSD: src/sys/opencrypto/cryptodev.h,v 1.25 2007/05/09 19:37:02 gnn Exp $ */ -+/* $OpenBSD: cryptodev.h,v 1.31 2002/06/11 11:14:29 beck Exp $ */ -+ -+/*- -+ * Linux port done by David McCullough -+ * Copyright (C) 2006-2007 David McCullough -+ * Copyright (C) 2004-2005 Intel Corporation. -+ * The license and original author are listed below. -+ * -+ * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu) -+ * Copyright (c) 2002-2006 Sam Leffler, Errno Consulting -+ * -+ * This code was written by Angelos D. Keromytis in Athens, Greece, in -+ * February 2000. Network Security Technologies Inc. (NSTI) kindly -+ * supported the development of this code. -+ * -+ * Copyright (c) 2000 Angelos D. Keromytis -+ * -+ * Permission to use, copy, and modify this software with or without fee -+ * is hereby granted, provided that this entire notice is included in -+ * all source code copies of any software which is or includes a copy or -+ * modification of this software. -+ * -+ * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR -+ * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY -+ * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE -+ * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR -+ * PURPOSE. -+ * -+ * Copyright (c) 2001 Theo de Raadt -+ * -+ * Redistribution and use in source and binary forms, with or without -+ * modification, are permitted provided that the following conditions -+ * are met: -+ * -+ * 1. Redistributions of source code must retain the above copyright -+ * notice, this list of conditions and the following disclaimer. -+ * 2. Redistributions in binary form must reproduce the above copyright -+ * notice, this list of conditions and the following disclaimer in the -+ * documentation and/or other materials provided with the distribution. -+ * 3. The name of the author may not be used to endorse or promote products -+ * derived from this software without specific prior written permission. -+ * -+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR -+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES -+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. -+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, -+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT -+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, -+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY -+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT -+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF -+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. -+ * -+ * Effort sponsored in part by the Defense Advanced Research Projects -+ * Agency (DARPA) and Air Force Research Laboratory, Air Force -+ * Materiel Command, USAF, under agreement number F30602-01-2-0537. -+ * -+ */ -+ -+#ifndef _CRYPTO_CRYPTO_H_ -+#define _CRYPTO_CRYPTO_H_ -+ -+/* Some initial values */ -+#define CRYPTO_DRIVERS_INITIAL 4 -+#define CRYPTO_SW_SESSIONS 32 -+ -+/* Hash values */ -+#define NULL_HASH_LEN 0 -+#define MD5_HASH_LEN 16 -+#define SHA1_HASH_LEN 20 -+#define RIPEMD160_HASH_LEN 20 -+#define SHA2_256_HASH_LEN 32 -+#define SHA2_384_HASH_LEN 48 -+#define SHA2_512_HASH_LEN 64 -+#define MD5_KPDK_HASH_LEN 16 -+#define SHA1_KPDK_HASH_LEN 20 -+/* Maximum hash algorithm result length */ -+#define HASH_MAX_LEN SHA2_512_HASH_LEN /* Keep this updated */ -+ -+/* HMAC values */ -+#define NULL_HMAC_BLOCK_LEN 1 -+#define MD5_HMAC_BLOCK_LEN 64 -+#define SHA1_HMAC_BLOCK_LEN 64 -+#define RIPEMD160_HMAC_BLOCK_LEN 64 -+#define SHA2_256_HMAC_BLOCK_LEN 64 -+#define SHA2_384_HMAC_BLOCK_LEN 128 -+#define SHA2_512_HMAC_BLOCK_LEN 128 -+/* Maximum HMAC block length */ -+#define HMAC_MAX_BLOCK_LEN SHA2_512_HMAC_BLOCK_LEN /* Keep this updated */ -+#define HMAC_IPAD_VAL 0x36 -+#define HMAC_OPAD_VAL 0x5C -+ -+/* Encryption algorithm block sizes */ -+#define NULL_BLOCK_LEN 1 -+#define DES_BLOCK_LEN 8 -+#define DES3_BLOCK_LEN 8 -+#define BLOWFISH_BLOCK_LEN 8 -+#define SKIPJACK_BLOCK_LEN 8 -+#define CAST128_BLOCK_LEN 8 -+#define RIJNDAEL128_BLOCK_LEN 16 -+#define AES_BLOCK_LEN RIJNDAEL128_BLOCK_LEN -+#define CAMELLIA_BLOCK_LEN 16 -+#define ARC4_BLOCK_LEN 1 -+#define EALG_MAX_BLOCK_LEN AES_BLOCK_LEN /* Keep this updated */ -+ -+/* Encryption algorithm min and max key sizes */ -+#define NULL_MIN_KEY_LEN 0 -+#define NULL_MAX_KEY_LEN 0 -+#define DES_MIN_KEY_LEN 8 -+#define DES_MAX_KEY_LEN 8 -+#define DES3_MIN_KEY_LEN 24 -+#define DES3_MAX_KEY_LEN 24 -+#define BLOWFISH_MIN_KEY_LEN 4 -+#define BLOWFISH_MAX_KEY_LEN 56 -+#define SKIPJACK_MIN_KEY_LEN 10 -+#define SKIPJACK_MAX_KEY_LEN 10 -+#define CAST128_MIN_KEY_LEN 5 -+#define CAST128_MAX_KEY_LEN 16 -+#define RIJNDAEL128_MIN_KEY_LEN 16 -+#define RIJNDAEL128_MAX_KEY_LEN 32 -+#define AES_MIN_KEY_LEN RIJNDAEL128_MIN_KEY_LEN -+#define AES_MAX_KEY_LEN RIJNDAEL128_MAX_KEY_LEN -+#define CAMELLIA_MIN_KEY_LEN 16 -+#define CAMELLIA_MAX_KEY_LEN 32 -+#define ARC4_MIN_KEY_LEN 1 -+#define ARC4_MAX_KEY_LEN 256 -+ -+/* Max size of data that can be processed */ -+#define CRYPTO_MAX_DATA_LEN 64*1024 - 1 -+ -+#define CRYPTO_ALGORITHM_MIN 1 -+#define CRYPTO_DES_CBC 1 -+#define CRYPTO_3DES_CBC 2 -+#define CRYPTO_BLF_CBC 3 -+#define CRYPTO_CAST_CBC 4 -+#define CRYPTO_SKIPJACK_CBC 5 -+#define CRYPTO_MD5_HMAC 6 -+#define CRYPTO_SHA1_HMAC 7 -+#define CRYPTO_RIPEMD160_HMAC 8 -+#define CRYPTO_MD5_KPDK 9 -+#define CRYPTO_SHA1_KPDK 10 -+#define CRYPTO_RIJNDAEL128_CBC 11 /* 128 bit blocksize */ -+#define CRYPTO_AES_CBC 11 /* 128 bit blocksize -- the same as above */ -+#define CRYPTO_ARC4 12 -+#define CRYPTO_MD5 13 -+#define CRYPTO_SHA1 14 -+#define CRYPTO_NULL_HMAC 15 -+#define CRYPTO_NULL_CBC 16 -+#define CRYPTO_DEFLATE_COMP 17 /* Deflate compression algorithm */ -+#define CRYPTO_SHA2_256_HMAC 18 -+#define CRYPTO_SHA2_384_HMAC 19 -+#define CRYPTO_SHA2_512_HMAC 20 -+#define CRYPTO_CAMELLIA_CBC 21 -+#define CRYPTO_SHA2_256 22 -+#define CRYPTO_SHA2_384 23 -+#define CRYPTO_SHA2_512 24 -+#define CRYPTO_RIPEMD160 25 -+#define CRYPTO_ALGORITHM_MAX 25 /* Keep updated - see below */ -+ -+/* Algorithm flags */ -+#define CRYPTO_ALG_FLAG_SUPPORTED 0x01 /* Algorithm is supported */ -+#define CRYPTO_ALG_FLAG_RNG_ENABLE 0x02 /* Has HW RNG for DH/DSA */ -+#define CRYPTO_ALG_FLAG_DSA_SHA 0x04 /* Can do SHA on msg */ -+ -+/* -+ * Crypto driver/device flags. They can set in the crid -+ * parameter when creating a session or submitting a key -+ * op to affect the device/driver assigned. If neither -+ * of these are specified then the crid is assumed to hold -+ * the driver id of an existing (and suitable) device that -+ * must be used to satisfy the request. -+ */ -+#define CRYPTO_FLAG_HARDWARE 0x01000000 /* hardware accelerated */ -+#define CRYPTO_FLAG_SOFTWARE 0x02000000 /* software implementation */ -+ -+/* NB: deprecated */ -+struct session_op { -+ u_int32_t cipher; /* ie. CRYPTO_DES_CBC */ -+ u_int32_t mac; /* ie. CRYPTO_MD5_HMAC */ -+ -+ u_int32_t keylen; /* cipher key */ -+ caddr_t key; -+ int mackeylen; /* mac key */ -+ caddr_t mackey; -+ -+ u_int32_t ses; /* returns: session # */ -+}; -+ -+struct session2_op { -+ u_int32_t cipher; /* ie. CRYPTO_DES_CBC */ -+ u_int32_t mac; /* ie. CRYPTO_MD5_HMAC */ -+ -+ u_int32_t keylen; /* cipher key */ -+ caddr_t key; -+ int mackeylen; /* mac key */ -+ caddr_t mackey; -+ -+ u_int32_t ses; /* returns: session # */ -+ int crid; /* driver id + flags (rw) */ -+ int pad[4]; /* for future expansion */ -+}; -+ -+struct crypt_op { -+ u_int32_t ses; -+ u_int16_t op; /* i.e. COP_ENCRYPT */ -+#define COP_NONE 0 -+#define COP_ENCRYPT 1 -+#define COP_DECRYPT 2 -+ u_int16_t flags; -+#define COP_F_BATCH 0x0008 /* Batch op if possible */ -+ u_int len; -+ caddr_t src, dst; /* become iov[] inside kernel */ -+ caddr_t mac; /* must be big enough for chosen MAC */ -+ caddr_t iv; -+}; -+ -+/* -+ * Parameters for looking up a crypto driver/device by -+ * device name or by id. The latter are returned for -+ * created sessions (crid) and completed key operations. -+ */ -+struct crypt_find_op { -+ int crid; /* driver id + flags */ -+ char name[32]; /* device/driver name */ -+}; -+ -+/* bignum parameter, in packed bytes, ... */ -+struct crparam { -+ caddr_t crp_p; -+ u_int crp_nbits; -+}; -+ -+#define CRK_MAXPARAM 8 -+ -+struct crypt_kop { -+ u_int crk_op; /* ie. CRK_MOD_EXP or other */ -+ u_int crk_status; /* return status */ -+ u_short crk_iparams; /* # of input parameters */ -+ u_short crk_oparams; /* # of output parameters */ -+ u_int crk_crid; /* NB: only used by CIOCKEY2 (rw) */ -+ struct crparam crk_param[CRK_MAXPARAM]; -+}; -+#define CRK_ALGORITM_MIN 0 -+#define CRK_MOD_EXP 0 -+#define CRK_MOD_EXP_CRT 1 -+#define CRK_DSA_SIGN 2 -+#define CRK_DSA_VERIFY 3 -+#define CRK_DH_COMPUTE_KEY 4 -+#define CRK_ALGORITHM_MAX 4 /* Keep updated - see below */ -+ -+#define CRF_MOD_EXP (1 << CRK_MOD_EXP) -+#define CRF_MOD_EXP_CRT (1 << CRK_MOD_EXP_CRT) -+#define CRF_DSA_SIGN (1 << CRK_DSA_SIGN) -+#define CRF_DSA_VERIFY (1 << CRK_DSA_VERIFY) -+#define CRF_DH_COMPUTE_KEY (1 << CRK_DH_COMPUTE_KEY) -+ -+/* -+ * done against open of /dev/crypto, to get a cloned descriptor. -+ * Please use F_SETFD against the cloned descriptor. -+ */ -+#define CRIOGET _IOWR('c', 100, u_int32_t) -+#define CRIOASYMFEAT CIOCASYMFEAT -+#define CRIOFINDDEV CIOCFINDDEV -+ -+/* the following are done against the cloned descriptor */ -+#define CIOCGSESSION _IOWR('c', 101, struct session_op) -+#define CIOCFSESSION _IOW('c', 102, u_int32_t) -+#define CIOCCRYPT _IOWR('c', 103, struct crypt_op) -+#define CIOCKEY _IOWR('c', 104, struct crypt_kop) -+#define CIOCASYMFEAT _IOR('c', 105, u_int32_t) -+#define CIOCGSESSION2 _IOWR('c', 106, struct session2_op) -+#define CIOCKEY2 _IOWR('c', 107, struct crypt_kop) -+#define CIOCFINDDEV _IOWR('c', 108, struct crypt_find_op) -+ -+struct cryptotstat { -+ struct timespec acc; /* total accumulated time */ -+ struct timespec min; /* min time */ -+ struct timespec max; /* max time */ -+ u_int32_t count; /* number of observations */ -+}; -+ -+struct cryptostats { -+ u_int32_t cs_ops; /* symmetric crypto ops submitted */ -+ u_int32_t cs_errs; /* symmetric crypto ops that failed */ -+ u_int32_t cs_kops; /* asymetric/key ops submitted */ -+ u_int32_t cs_kerrs; /* asymetric/key ops that failed */ -+ u_int32_t cs_intrs; /* crypto swi thread activations */ -+ u_int32_t cs_rets; /* crypto return thread activations */ -+ u_int32_t cs_blocks; /* symmetric op driver block */ -+ u_int32_t cs_kblocks; /* symmetric op driver block */ -+ /* -+ * When CRYPTO_TIMING is defined at compile time and the -+ * sysctl debug.crypto is set to 1, the crypto system will -+ * accumulate statistics about how long it takes to process -+ * crypto requests at various points during processing. -+ */ -+ struct cryptotstat cs_invoke; /* crypto_dipsatch -> crypto_invoke */ -+ struct cryptotstat cs_done; /* crypto_invoke -> crypto_done */ -+ struct cryptotstat cs_cb; /* crypto_done -> callback */ -+ struct cryptotstat cs_finis; /* callback -> callback return */ -+ -+ u_int32_t cs_drops; /* crypto ops dropped due to congestion */ -+}; -+ -+#ifdef __KERNEL__ -+ -+/* Standard initialization structure beginning */ -+struct cryptoini { -+ int cri_alg; /* Algorithm to use */ -+ int cri_klen; /* Key length, in bits */ -+ int cri_mlen; /* Number of bytes we want from the -+ entire hash. 0 means all. */ -+ caddr_t cri_key; /* key to use */ -+ u_int8_t cri_iv[EALG_MAX_BLOCK_LEN]; /* IV to use */ -+ struct cryptoini *cri_next; -+}; -+ -+/* Describe boundaries of a single crypto operation */ -+struct cryptodesc { -+ int crd_skip; /* How many bytes to ignore from start */ -+ int crd_len; /* How many bytes to process */ -+ int crd_inject; /* Where to inject results, if applicable */ -+ int crd_flags; -+ -+#define CRD_F_ENCRYPT 0x01 /* Set when doing encryption */ -+#define CRD_F_IV_PRESENT 0x02 /* When encrypting, IV is already in -+ place, so don't copy. */ -+#define CRD_F_IV_EXPLICIT 0x04 /* IV explicitly provided */ -+#define CRD_F_DSA_SHA_NEEDED 0x08 /* Compute SHA-1 of buffer for DSA */ -+#define CRD_F_KEY_EXPLICIT 0x10 /* Key explicitly provided */ -+#define CRD_F_COMP 0x0f /* Set when doing compression */ -+ -+ struct cryptoini CRD_INI; /* Initialization/context data */ -+#define crd_iv CRD_INI.cri_iv -+#define crd_key CRD_INI.cri_key -+#define crd_alg CRD_INI.cri_alg -+#define crd_klen CRD_INI.cri_klen -+ -+ struct cryptodesc *crd_next; -+}; -+ -+/* Structure describing complete operation */ -+struct cryptop { -+ struct list_head crp_next; -+ wait_queue_head_t crp_waitq; -+ -+ u_int64_t crp_sid; /* Session ID */ -+ int crp_ilen; /* Input data total length */ -+ int crp_olen; /* Result total length */ -+ -+ int crp_etype; /* -+ * Error type (zero means no error). -+ * All error codes except EAGAIN -+ * indicate possible data corruption (as in, -+ * the data have been touched). On all -+ * errors, the crp_sid may have changed -+ * (reset to a new one), so the caller -+ * should always check and use the new -+ * value on future requests. -+ */ -+ int crp_flags; -+ -+#define CRYPTO_F_SKBUF 0x0001 /* Input/output are skbuf chains */ -+#define CRYPTO_F_IOV 0x0002 /* Input/output are uio */ -+#define CRYPTO_F_REL 0x0004 /* Must return data in same place */ -+#define CRYPTO_F_BATCH 0x0008 /* Batch op if possible */ -+#define CRYPTO_F_CBIMM 0x0010 /* Do callback immediately */ -+#define CRYPTO_F_DONE 0x0020 /* Operation completed */ -+#define CRYPTO_F_CBIFSYNC 0x0040 /* Do CBIMM if op is synchronous */ -+ -+ caddr_t crp_buf; /* Data to be processed */ -+ caddr_t crp_opaque; /* Opaque pointer, passed along */ -+ struct cryptodesc *crp_desc; /* Linked list of processing descriptors */ -+ -+ int (*crp_callback)(struct cryptop *); /* Callback function */ -+}; -+ -+#define CRYPTO_BUF_CONTIG 0x0 -+#define CRYPTO_BUF_IOV 0x1 -+#define CRYPTO_BUF_SKBUF 0x2 -+ -+#define CRYPTO_OP_DECRYPT 0x0 -+#define CRYPTO_OP_ENCRYPT 0x1 -+ -+/* -+ * Hints passed to process methods. -+ */ -+#define CRYPTO_HINT_MORE 0x1 /* more ops coming shortly */ -+ -+struct cryptkop { -+ struct list_head krp_next; -+ wait_queue_head_t krp_waitq; -+ -+ int krp_flags; -+#define CRYPTO_KF_DONE 0x0001 /* Operation completed */ -+#define CRYPTO_KF_CBIMM 0x0002 /* Do callback immediately */ -+ -+ u_int krp_op; /* ie. CRK_MOD_EXP or other */ -+ u_int krp_status; /* return status */ -+ u_short krp_iparams; /* # of input parameters */ -+ u_short krp_oparams; /* # of output parameters */ -+ u_int krp_crid; /* desired device, etc. */ -+ u_int32_t krp_hid; -+ struct crparam krp_param[CRK_MAXPARAM]; /* kvm */ -+ int (*krp_callback)(struct cryptkop *); -+}; -+ -+#include -+ -+/* -+ * Session ids are 64 bits. The lower 32 bits contain a "local id" which -+ * is a driver-private session identifier. The upper 32 bits contain a -+ * "hardware id" used by the core crypto code to identify the driver and -+ * a copy of the driver's capabilities that can be used by client code to -+ * optimize operation. -+ */ -+#define CRYPTO_SESID2HID(_sid) (((_sid) >> 32) & 0x00ffffff) -+#define CRYPTO_SESID2CAPS(_sid) (((_sid) >> 32) & 0xff000000) -+#define CRYPTO_SESID2LID(_sid) (((u_int32_t) (_sid)) & 0xffffffff) -+ -+extern int crypto_newsession(u_int64_t *sid, struct cryptoini *cri, int hard); -+extern int crypto_freesession(u_int64_t sid); -+#define CRYPTOCAP_F_HARDWARE CRYPTO_FLAG_HARDWARE -+#define CRYPTOCAP_F_SOFTWARE CRYPTO_FLAG_SOFTWARE -+#define CRYPTOCAP_F_SYNC 0x04000000 /* operates synchronously */ -+extern int32_t crypto_get_driverid(device_t dev, int flags); -+extern int crypto_find_driver(const char *); -+extern device_t crypto_find_device_byhid(int hid); -+extern int crypto_getcaps(int hid); -+extern int crypto_register(u_int32_t driverid, int alg, u_int16_t maxoplen, -+ u_int32_t flags); -+extern int crypto_kregister(u_int32_t, int, u_int32_t); -+extern int crypto_unregister(u_int32_t driverid, int alg); -+extern int crypto_unregister_all(u_int32_t driverid); -+extern int crypto_dispatch(struct cryptop *crp); -+extern int crypto_kdispatch(struct cryptkop *); -+#define CRYPTO_SYMQ 0x1 -+#define CRYPTO_ASYMQ 0x2 -+extern int crypto_unblock(u_int32_t, int); -+extern void crypto_done(struct cryptop *crp); -+extern void crypto_kdone(struct cryptkop *); -+extern int crypto_getfeat(int *); -+ -+extern void crypto_freereq(struct cryptop *crp); -+extern struct cryptop *crypto_getreq(int num); -+ -+extern int crypto_usercrypto; /* userland may do crypto requests */ -+extern int crypto_userasymcrypto; /* userland may do asym crypto reqs */ -+extern int crypto_devallowsoft; /* only use hardware crypto */ -+ -+/* -+ * random number support, crypto_unregister_all will unregister -+ */ -+extern int crypto_rregister(u_int32_t driverid, -+ int (*read_random)(void *arg, u_int32_t *buf, int len), void *arg); -+extern int crypto_runregister_all(u_int32_t driverid); -+ -+/* -+ * Crypto-related utility routines used mainly by drivers. -+ * -+ * XXX these don't really belong here; but for now they're -+ * kept apart from the rest of the system. -+ */ -+struct uio; -+extern void cuio_copydata(struct uio* uio, int off, int len, caddr_t cp); -+extern void cuio_copyback(struct uio* uio, int off, int len, caddr_t cp); -+extern struct iovec *cuio_getptr(struct uio *uio, int loc, int *off); -+ -+extern void crypto_copyback(int flags, caddr_t buf, int off, int size, -+ caddr_t in); -+extern void crypto_copydata(int flags, caddr_t buf, int off, int size, -+ caddr_t out); -+extern int crypto_apply(int flags, caddr_t buf, int off, int len, -+ int (*f)(void *, void *, u_int), void *arg); -+ -+#endif /* __KERNEL__ */ -+#endif /* _CRYPTO_CRYPTO_H_ */ -diff -Nur openssl-0.9.8h/crypto/engine/eng_cryptodev.c openssl-0.9.8h-ocf/crypto/engine/eng_cryptodev.c ---- openssl-0.9.8h/crypto/engine/eng_cryptodev.c 2008-07-13 15:32:53.000000000 +0200 -+++ openssl-0.9.8h-ocf/crypto/engine/eng_cryptodev.c 2008-07-13 15:34:19.000000000 +0200 -@@ -54,7 +54,7 @@ - #else - - #include --#include -+#include "cryptodev.h" - #include - #include - #include diff --git a/package/openssl/patches/400-cve_2008_5077.patch b/package/openssl/patches/400-cve_2008_5077.patch deleted file mode 100644 index bc16ffd1ea..0000000000 --- a/package/openssl/patches/400-cve_2008_5077.patch +++ /dev/null @@ -1,151 +0,0 @@ -diff -ur openssl-0.9.8i-ORIG/apps/speed.c openssl-0.9.8i/apps/speed.c ---- openssl-0.9.8i/apps/speed.c 2007-11-15 13:33:47.000000000 +0000 -+++ openssl-0.9.8i/apps/speed-new.c 2008-12-04 00:00:00.000000000 +0000 -@@ -2132,7 +2132,7 @@ - { - ret=RSA_verify(NID_md5_sha1, buf,36, buf2, - rsa_num, rsa_key[j]); -- if (ret == 0) -+ if (ret <= 0) - { - BIO_printf(bio_err, - "RSA verify failure\n"); -diff -ur openssl-0.9.8i-ORIG/apps/spkac.c openssl-0.9.8i/apps/spkac.c ---- openssl-0.9.8i-ORIG/apps/spkac.c 2005-04-05 19:11:18.000000000 +0000 -+++ openssl-0.9.8i/apps/spkac.c 2008-12-04 00:00:00.000000000 +0000 -@@ -285,7 +285,7 @@ - pkey = NETSCAPE_SPKI_get_pubkey(spki); - if(verify) { - i = NETSCAPE_SPKI_verify(spki, pkey); -- if(i) BIO_printf(bio_err, "Signature OK\n"); -+ if (i > 0) BIO_printf(bio_err, "Signature OK\n"); - else { - BIO_printf(bio_err, "Signature Failure\n"); - ERR_print_errors(bio_err); -diff -ur openssl-0.9.8i-ORIG/apps/verify.c openssl-0.9.8i/apps/verify.c ---- openssl-0.9.8i-ORIG/apps/verify.c 2004-11-29 11:28:07.000000000 +0000 -+++ openssl-0.9.8i/apps/verify.c 2008-12-04 00:00:00.600000000 +0000 -@@ -266,7 +266,7 @@ - - ret=0; - end: -- if (i) -+ if (i > 0) - { - fprintf(stdout,"OK\n"); - ret=1; -@@ -367,4 +367,3 @@ - ERR_clear_error(); - return(ok); - } -- -diff -ur openssl-0.9.8i-ORIG/apps/x509.c openssl-0.9.8i/apps/x509.c ---- openssl-0.9.8i-ORIG/apps/x509.c 2007-10-12 00:00:10.000000000 +0000 -+++ openssl-0.9.8i/apps/x509.c 2008-12-04 00:00:00.400000000 +0000 -@@ -1151,7 +1151,7 @@ - /* NOTE: this certificate can/should be self signed, unless it was - * a certificate request in which case it is not. */ - X509_STORE_CTX_set_cert(&xsc,x); -- if (!reqfile && !X509_verify_cert(&xsc)) -+ if (!reqfile && X509_verify_cert(&xsc) <= 0) - goto end; - - if (!X509_check_private_key(xca,pkey)) -diff -ur openssl-0.9.8i-ORIG/crypto/cms/cms_sd.c openssl-0.9.8i/crypto/cms/cms_sd.c ---- openssl-0.9.8i-ORIG/crypto/cms/cms_sd.c 2008-04-06 16:30:38.000000000 +0000 -+++ openssl-0.9.8i/crypto/cms/cms_sd.c 2008-12-04 00:00:00.400000000 +0000 -@@ -830,7 +830,7 @@ - cms_fixup_mctx(&mctx, si->pkey); - r = EVP_VerifyFinal(&mctx, - si->signature->data, si->signature->length, si->pkey); -- if (!r) -+ if (r <= 0) - CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY, CMS_R_VERIFICATION_FAILURE); - err: - EVP_MD_CTX_cleanup(&mctx); -diff -ur openssl-0.9.8i-ORIG/ssl/s2_clnt.c openssl-0.9.8i/ssl/s2_clnt.c ---- openssl-0.9.8i-ORIG/ssl/s2_clnt.c 2007-09-06 12:43:53.000000000 +0000 -+++ openssl-0.9.8i/ssl/s2_clnt.c 2008-12-04 00:00:00.100000000 +0000 -@@ -1044,7 +1044,7 @@ - - i=ssl_verify_cert_chain(s,sk); - -- if ((s->verify_mode != SSL_VERIFY_NONE) && (!i)) -+ if ((s->verify_mode != SSL_VERIFY_NONE) && (i <= 0)) - { - SSLerr(SSL_F_SSL2_SET_CERTIFICATE,SSL_R_CERTIFICATE_VERIFY_FAILED); - goto err; -diff -ur openssl-0.9.8i-ORIG/ssl/s2_srvr.c openssl-0.9.8i/ssl/s2_srvr.c ---- openssl-0.9.8i-ORIG/ssl/s2_srvr.c 2007-09-06 12:43:53.000000000 +0000 -+++ openssl-0.9.8i/ssl/s2_srvr.c 2008-12-04 00:00:00.900000000 +0000 -@@ -1054,7 +1054,7 @@ - - i=ssl_verify_cert_chain(s,sk); - -- if (i) /* we like the packet, now check the chksum */ -+ if (i > 0) /* we like the packet, now check the chksum */ - { - EVP_MD_CTX ctx; - EVP_PKEY *pkey=NULL; -@@ -1083,7 +1083,7 @@ - EVP_PKEY_free(pkey); - EVP_MD_CTX_cleanup(&ctx); - -- if (i) -+ if (i > 0) - { - if (s->session->peer != NULL) - X509_free(s->session->peer); -diff -ur openssl-0.9.8i-ORIG/ssl/s3_clnt.c openssl-0.9.8i/ssl/s3_clnt.c ---- openssl-0.9.8i-ORIG/ssl/s3_clnt.c 2008-06-16 16:56:41.000000000 +0000 -+++ openssl-0.9.8i/ssl/s3_clnt.c 2008-12-04 00:00:00.100000000 +0000 -@@ -972,7 +972,7 @@ - } - - i=ssl_verify_cert_chain(s,sk); -- if ((s->verify_mode != SSL_VERIFY_NONE) && (!i) -+ if ((s->verify_mode != SSL_VERIFY_NONE) && (i <= 0) - #ifndef OPENSSL_NO_KRB5 - && (s->s3->tmp.new_cipher->algorithms & (SSL_MKEY_MASK|SSL_AUTH_MASK)) - != (SSL_aKRB5|SSL_kKRB5) -@@ -1459,7 +1459,7 @@ - EVP_VerifyUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE); - EVP_VerifyUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE); - EVP_VerifyUpdate(&md_ctx,param,param_len); -- if (!EVP_VerifyFinal(&md_ctx,p,(int)n,pkey)) -+ if (EVP_VerifyFinal(&md_ctx,p,(int)n,pkey) <= 0) - { - /* bad signature */ - al=SSL_AD_DECRYPT_ERROR; -@@ -1477,7 +1477,7 @@ - EVP_VerifyUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE); - EVP_VerifyUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE); - EVP_VerifyUpdate(&md_ctx,param,param_len); -- if (!EVP_VerifyFinal(&md_ctx,p,(int)n,pkey)) -+ if (EVP_VerifyFinal(&md_ctx,p,(int)n,pkey) <= 0) - { - /* bad signature */ - al=SSL_AD_DECRYPT_ERROR; -diff -ur openssl-0.9.8i-ORIG/ssl/s3_srvr.c openssl-0.9.8i/ssl/s3_srvr.c ---- openssl-0.9.8i-ORIG/ssl/s3_srvr.c 2008-09-14 18:16:09.000000000 +0000 -+++ openssl-0.9.8i/ssl/s3_srvr.c 2008-12-04 00:00:00.100000000 +0000 -@@ -2560,7 +2560,7 @@ - else - { - i=ssl_verify_cert_chain(s,sk); -- if (!i) -+ if (i <= 0) - { - al=ssl_verify_alarm_type(s->verify_result); - SSLerr(SSL_F_SSL3_GET_CLIENT_CERTIFICATE,SSL_R_NO_CERTIFICATE_RETURNED); -diff -ur openssl-0.9.8i-ORIG/ssl/ssltest.c openssl-0.9.8i/ssl/ssltest.c ---- openssl-0.9.8i-ORIG/ssl/ssltest.c 2008-06-16 16:56:42.000000000 +0000 -+++ openssl-0.9.8i/ssl/ssltest.c 2008-12-04 00:00:00.900000000 +0000 -@@ -2093,7 +2093,7 @@ - - if (cb_arg->proxy_auth) - { -- if (ok) -+ if (ok > 0) - { - const char *cond_end = NULL; diff --git a/package/openssl/patches/401_cve_2009_0590.patch b/package/openssl/patches/401_cve_2009_0590.patch deleted file mode 100644 index c6e22befb5..0000000000 --- a/package/openssl/patches/401_cve_2009_0590.patch +++ /dev/null @@ -1,75 +0,0 @@ -http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590 - ---- a/crypto/asn1/asn1.h -+++ b/crypto/asn1/asn1.h -@@ -1217,6 +1217,7 @@ void ERR_load_ASN1_strings(void); - #define ASN1_R_BAD_OBJECT_HEADER 102 - #define ASN1_R_BAD_PASSWORD_READ 103 - #define ASN1_R_BAD_TAG 104 -+#define ASN1_R_BMPSTRING_IS_WRONG_LENGTH 210 - #define ASN1_R_BN_LIB 105 - #define ASN1_R_BOOLEAN_IS_WRONG_LENGTH 106 - #define ASN1_R_BUFFER_TOO_SMALL 107 -@@ -1306,6 +1307,7 @@ void ERR_load_ASN1_strings(void); - #define ASN1_R_UNABLE_TO_DECODE_RSA_KEY 157 - #define ASN1_R_UNABLE_TO_DECODE_RSA_PRIVATE_KEY 158 - #define ASN1_R_UNEXPECTED_EOC 159 -+#define ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH 211 - #define ASN1_R_UNKNOWN_FORMAT 160 - #define ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM 161 - #define ASN1_R_UNKNOWN_OBJECT_TYPE 162 ---- a/crypto/asn1/asn1_err.c -+++ b/crypto/asn1/asn1_err.c -@@ -195,6 +195,7 @@ static ERR_STRING_DATA ASN1_str_reasons[ - {ERR_REASON(ASN1_R_BAD_OBJECT_HEADER) ,"bad object header"}, - {ERR_REASON(ASN1_R_BAD_PASSWORD_READ) ,"bad password read"}, - {ERR_REASON(ASN1_R_BAD_TAG) ,"bad tag"}, -+{ERR_REASON(ASN1_R_BMPSTRING_IS_WRONG_LENGTH),"bmpstring is wrong length"}, - {ERR_REASON(ASN1_R_BN_LIB) ,"bn lib"}, - {ERR_REASON(ASN1_R_BOOLEAN_IS_WRONG_LENGTH),"boolean is wrong length"}, - {ERR_REASON(ASN1_R_BUFFER_TOO_SMALL) ,"buffer too small"}, -@@ -284,6 +285,7 @@ static ERR_STRING_DATA ASN1_str_reasons[ - {ERR_REASON(ASN1_R_UNABLE_TO_DECODE_RSA_KEY),"unable to decode rsa key"}, - {ERR_REASON(ASN1_R_UNABLE_TO_DECODE_RSA_PRIVATE_KEY),"unable to decode rsa private key"}, - {ERR_REASON(ASN1_R_UNEXPECTED_EOC) ,"unexpected eoc"}, -+{ERR_REASON(ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH),"universalstring is wrong length"}, - {ERR_REASON(ASN1_R_UNKNOWN_FORMAT) ,"unknown format"}, - {ERR_REASON(ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM),"unknown message digest algorithm"}, - {ERR_REASON(ASN1_R_UNKNOWN_OBJECT_TYPE) ,"unknown object type"}, ---- a/crypto/asn1/tasn_dec.c -+++ b/crypto/asn1/tasn_dec.c -@@ -611,7 +611,6 @@ static int asn1_template_ex_d2i(ASN1_VAL - - err: - ASN1_template_free(val, tt); -- *val = NULL; - return 0; - } - -@@ -758,7 +757,6 @@ static int asn1_template_noexp_d2i(ASN1_ - - err: - ASN1_template_free(val, tt); -- *val = NULL; - return 0; - } - -@@ -1012,6 +1010,18 @@ int asn1_ex_c2i(ASN1_VALUE **pval, const - case V_ASN1_SET: - case V_ASN1_SEQUENCE: - default: -+ if (utype == V_ASN1_BMPSTRING && (len & 1)) -+ { -+ ASN1err(ASN1_F_ASN1_EX_C2I, -+ ASN1_R_BMPSTRING_IS_WRONG_LENGTH); -+ goto err; -+ } -+ if (utype == V_ASN1_UNIVERSALSTRING && (len & 3)) -+ { -+ ASN1err(ASN1_F_ASN1_EX_C2I, -+ ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH); -+ goto err; -+ } - /* All based on ASN1_STRING and handled the same */ - if (!*pval) - { diff --git a/package/ppp/files/etc/ppp/ip-up b/package/ppp/files/etc/ppp/ip-up index 086efed958..fded600dff 100755 --- a/package/ppp/files/etc/ppp/ip-up +++ b/package/ppp/files/etc/ppp/ip-up @@ -6,8 +6,11 @@ PPP_SPEED="$3" PPP_LOCAL="$4" PPP_REMOTE="$5" PPP_IPPARAM="$6" +PPP_UNIT="${PPP_IFACE##ppp}" + export PPP_IFACE PPP_TTY PPP_SPEED PPP_LOCAL PPP_REMOTE PPP_IPPARAM [ -z "$PPP_IPPARAM" -o -z "$PPP_LOCAL" ] || { + uci_set_state network "$PPP_IPPARAM" unit "$PPP_UNIT" uci_set_state network "$PPP_IPPARAM" ipaddr "$PPP_LOCAL" uci_set_state network "$PPP_IPPARAM" gateway "$PPP_REMOTE" } diff --git a/package/robocfg/src/robocfg.c b/package/robocfg/src/robocfg.c index b8fc49f499..7a4094dd41 100644 --- a/package/robocfg/src/robocfg.c +++ b/package/robocfg/src/robocfg.c @@ -19,6 +19,7 @@ * 02110-1301, USA. */ +#include #include #include #include @@ -247,59 +248,106 @@ void usage() mdix[0].name, mdix[1].name, mdix[2].name); } -int -main(int argc, char *argv[]) +static robo_t robo; +int bcm53xx_probe(const char *dev) { - u16 val16; - u16 mac[3]; - int i = 0, j; - int robo5350 = 0; - u32 phyid; - - static robo_t robo; struct ethtool_drvinfo info; - - if ((robo.fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) { - perror("socket"); - exit(1); - } + unsigned int phyid; + int ret; - /* the only interface for now */ - strcpy(robo.ifr.ifr_name, "eth0"); + fprintf(stderr, "probing %s\n", dev); + strcpy(robo.ifr.ifr_name, dev); memset(&info, 0, sizeof(info)); info.cmd = ETHTOOL_GDRVINFO; robo.ifr.ifr_data = (caddr_t)&info; - if (ioctl(robo.fd, SIOCETHTOOL, (caddr_t)&robo.ifr) < 0) { - perror("SIOCETHTOOL: your ethernet module is either unsupported or outdated"); -// exit(1); - } else - if (strcmp(info.driver, "et0") && strcmp(info.driver, "b44")) { - fprintf(stderr, "No suitable module found for %s (managed by %s)\n", - robo.ifr.ifr_name, info.driver); - exit(1); + ret = ioctl(robo.fd, SIOCETHTOOL, (caddr_t)&robo.ifr); + if (ret < 0) { + perror("SIOCETHTOOL"); + return ret; } - + + if ( strcmp(info.driver, "et0") && + strcmp(info.driver, "b44") && + strcmp(info.driver, "bcm63xx_enet") ) { + fprintf(stderr, "driver not supported %s\n", info.driver); + return -ENOSYS; + } + /* try access using MII ioctls - get phy address */ - if (ioctl(robo.fd, SIOCGMIIPHY, &robo.ifr) < 0) { + robo.et = 0; + if (ioctl(robo.fd, SIOCGMIIPHY, &robo.ifr) < 0) robo.et = 1; + + if (robo.et) { + unsigned int args[2] = { 2 }; + + robo.ifr.ifr_data = (caddr_t) args; + ret = ioctl(robo.fd, SIOCGETCPHYRD, (caddr_t)&robo.ifr); + if (ret < 0) { + perror("SIOCGETCPHYRD"); + return ret; + } + phyid = args[1] & 0xffff; + + args[0] = 3; + robo.ifr.ifr_data = (caddr_t) args; + ret = ioctl(robo.fd, SIOCGETCPHYRD, (caddr_t)&robo.ifr); + if (ret < 0) { + perror("SIOCGETCPHYRD"); + return ret; + } + phyid |= args[1] << 16; } else { - /* got phy address check for robo address */ struct mii_ioctl_data *mii = (struct mii_ioctl_data *)&robo.ifr.ifr_data; - if (mii->phy_id != ROBO_PHY_ADDR) { - fprintf(stderr, "Invalid phy address (%d)\n", mii->phy_id); - exit(1); + mii->phy_id = ROBO_PHY_ADDR; + mii->reg_num = 2; + ret = ioctl(robo.fd, SIOCGMIIREG, &robo.ifr); + if (ret < 0) { + perror("SIOCGMIIREG"); + return ret; } + phyid = mii->val_out & 0xffff; + + mii->phy_id = ROBO_PHY_ADDR; + mii->reg_num = 3; + ret = ioctl(robo.fd, SIOCGMIIREG, &robo.ifr); + if (ret < 0) { + perror("SIOCGMIIREG"); + return ret; + } + phyid |= mii->val_out << 16; } - phyid = mdio_read(&robo, ROBO_PHY_ADDR, 0x2) | - (mdio_read(&robo, ROBO_PHY_ADDR, 0x3) << 16); - if (phyid == 0xffffffff || phyid == 0x55210022) { - fprintf(stderr, "No Robo switch in managed mode found\n"); - exit(1); + perror("phyid"); + return -EIO; } + return 0; +} + +int +main(int argc, char *argv[]) +{ + u16 val16; + u16 mac[3]; + int i = 0, j; + int robo5350 = 0; + u32 phyid; + + if ((robo.fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) { + perror("socket"); + exit(1); + } + + if (bcm53xx_probe("eth1")) { + if (bcm53xx_probe("eth0")) { + perror("bcm53xx_probe"); + exit(1); + } + } + robo5350 = robo_vlan5350(&robo); for (i = 1; i < argc;) { diff --git a/scripts/feeds b/scripts/feeds index dd0a6c2fcd..d6a6355183 100755 --- a/scripts/feeds +++ b/scripts/feeds @@ -15,6 +15,14 @@ my $mk=`which gmake`; # select the right 'make' program chomp($mk); # trim trailing newline $mk or $mk = "make"; # default to 'make' +# check version of make +my @mkver = split /\s+/, `$mk -v`, 4; +my $valid_mk = 1; +$mkver[0] =~ /^GNU/ or $valid_mk = 0; +$mkver[1] =~ /^Make/ or $valid_mk = 0; +$mkver[2] >= "3.81" or $valid_mk = 0; +$valid_mk or die "Unsupported version of make found: $mk\n"; + my @feeds; my %build_packages; my %installed; @@ -72,7 +80,7 @@ sub update_location($$) return $old_url ? 1 : 0; } - return 0; + return 0; } sub update_index($) @@ -171,9 +179,10 @@ sub search_feed { my $substr; my $pkgmatch = 1; + next if $pkg->{vdepends}; foreach my $substr (@substr) { my $match; - foreach my $key (qw(name title description)) { + foreach my $key (qw(name title description src)) { $pkg->{$key} and $substr and $pkg->{$key} =~ m/$substr/i and $match = 1; } $match or undef $pkgmatch; @@ -204,6 +213,7 @@ sub list_feed { get_feed($feed); foreach my $name (sort { lc($a) cmp lc($b) } keys %package) { my $pkg = $package{$name}; + next if $pkg->{vdepends}; if($pkg->{name}) { printf "\%-32s\t\%s\n", $pkg->{name}, $pkg->{title}; } @@ -319,10 +329,11 @@ sub install_package { # install all dependencies foreach my $vpkg (@{$srcpackage{$src}}, $pkg) { - foreach my $dep (@{$vpkg->{depends}}, @{$vpkg->{builddepends}}) { + foreach my $dep (@{$vpkg->{depends}}, @{$vpkg->{builddepends}}, @{$vpkg->{"builddepends/host"}}) { next if $dep =~ /@/; $dep =~ s/^\+//; $dep =~ s/^.+://; + $dep =~ s/\/.+$//; next unless $dep; install_package($feed, $dep) == 0 or $ret = 1; } @@ -338,7 +349,7 @@ sub refresh_config { system("rm -f tmp/.packageinfo"); # refresh the config - if ($default) { + if ($default) { system("$mk oldconfig CONFDEFAULT=\"$default\" Config.in >/dev/null 2>/dev/null"); } else { system("$mk defconfig Config.in >/dev/null 2>/dev/null"); @@ -375,6 +386,7 @@ sub install { get_feed($f->[1]); foreach my $name (sort { lc($a) cmp lc($b) } keys %package) { my $p = $package{$name}; + next if $p->{vdepends}; if( $p->{name} ) { install_package($feed, $p->{name}) == 0 or $ret = 1; } diff --git a/scripts/ipkg b/scripts/ipkg index d798bcac72..18090be3e6 100755 --- a/scripts/ipkg +++ b/scripts/ipkg @@ -595,8 +595,8 @@ ipkg_depends() { all_deps="$all_deps $new_pkgs" local new_deps= for pkg in $new_pkgs; do - if echo $pkg | grep -q '[^a-z0-9.+-]'; then - echo "ipkg_depends: ERROR: Package name $pkg contains illegal characters (should be [a-z0-9.+-])" >&2 + if echo $pkg | grep -q '[^A-Za-z0-9.+-]'; then + echo "ipkg_depends: ERROR: Package name $pkg contains illegal characters (should be [A-Za-z0-9.+-])" >&2 return 1 fi # TODO: Fix this. For now I am ignoring versions and alternations in dependencies. diff --git a/scripts/ipkg-make-index.sh b/scripts/ipkg-make-index.sh index 46051045ae..c4c46f8882 100755 --- a/scripts/ipkg-make-index.sh +++ b/scripts/ipkg-make-index.sh @@ -15,7 +15,7 @@ for pkg in `find $pkg_dir -name '*.ipk' | sort`; do file_size=$(ls -l $pkg | awk '{print $5}') md5sum=$(md5sum $pkg | awk '{print $1}') # Take pains to make variable value sed-safe - sed_safe_pkg=`echo $pkg | sed -e 's/\\//\\\\\\//g'` + sed_safe_pkg=`echo $pkg | sed -e 's/^\.\///g' -e 's/\\//\\\\\\//g'` tar -xzOf $pkg ./control.tar.gz | tar xzOf - ./control | sed -e "s/^Description:/Filename: $sed_safe_pkg\\ Size: $file_size\\ MD5Sum: $md5sum\\ diff --git a/scripts/metadata.pl b/scripts/metadata.pl index da29fdd895..fdf5886ec0 100755 --- a/scripts/metadata.pl +++ b/scripts/metadata.pl @@ -375,7 +375,7 @@ sub mconf_depends { my $res; my $dep = shift; my $seen = shift; - my $condition = shift; + my $parent_condition = shift; $dep or $dep = {}; $seen or $seen = {}; @@ -386,6 +386,7 @@ sub mconf_depends { $depend =~ s/^([@\+]+)//; my $flags = $1; my $vdep; + my $condition = $parent_condition; if ($depend =~ /^(.+):(.+)$/) { if ($1 ne "PACKAGE_$pkgname") { @@ -522,6 +523,20 @@ EOF } } +sub get_conditional_dep($$) { + my $condition = shift; + my $depstr = shift; + if ($condition) { + if ($condition =~ /^!(.+)/) { + return "\$(if \$(CONFIG_$1),,$depstr)"; + } else { + return "\$(if \$(CONFIG_$condition),$depstr)"; + } + } else { + return $depstr; + } +} + sub gen_package_mk() { my %conf; my %dep; @@ -553,6 +568,10 @@ sub gen_package_mk() { next if $done{$pkg->{src}}; $done{$pkg->{src}} = 1; + if (@{$pkg->{buildtypes}} > 0) { + print "buildtypes-$pkg->{subdir}$pkg->{src} = ".join(' ', @{$pkg->{buildtypes}})."\n"; + } + foreach my $spkg (@{$srcpackage{$pkg->{src}}}) { foreach my $dep (@{$spkg->{depends}}, @{$spkg->{builddepends}}) { $dep =~ /@/ or do { @@ -561,17 +580,60 @@ sub gen_package_mk() { }; } } + foreach my $type (@{$pkg->{buildtypes}}) { + my @extra_deps; + my %deplines; + + next unless $pkg->{"builddepends/$type"}; + foreach my $dep (@{$pkg->{"builddepends/$type"}}) { + my $suffix = ""; + my $condition; + + if ($dep =~ /^(.+):(.+)/) { + $condition = $1; + $dep = $2; + } + if ($dep =~ /^(.+)(\/.+)/) { + $dep = $1; + $suffix = $2; + } + my $pkg_dep = $package{$dep}; + next unless $pkg_dep; + + my $idx = ""; + if (defined $pkg_dep->{src}) { + $idx = $pkg_dep->{subdir}.$pkg_dep->{src}; + } elsif (defined($srcpackage{$dep})) { + $idx = $subdir{$dep}.$dep; + } + my $depstr = "\$(curdir)/$idx$suffix/compile"; + my $depline = get_conditional_dep($condition, $depstr); + if ($depline) { + $deplines{$dep} = $depline; + } + } + my $depline = join(" ", values %deplines); + if ($depline) { + $line .= "\$(curdir)/".$pkg->{subdir}."$pkg->{src}/$type/compile += $depline\n"; + } + } my $hasdeps = 0; my %deplines; foreach my $deps (@srcdeps) { my $idx; my $condition; + my $prefix = ""; + my $suffix = ""; if ($deps =~ /^(.+):(.+)/) { $condition = $1; $deps = $2; } + if ($deps =~ /^(.+)(\/.+)/) { + $deps = $1; + $suffix = $2; + } my $pkg_dep = $package{$deps}; my @deps; @@ -585,14 +647,15 @@ sub gen_package_mk() { foreach my $dep (@deps) { $pkg_dep = $package{$deps}; if (defined $pkg_dep->{src}) { - ($pkg->{src} ne $pkg_dep->{src}) and $idx = $pkg_dep->{subdir}.$pkg_dep->{src}; + ($pkg->{src} ne $pkg_dep->{src}.$suffix) and $idx = $pkg_dep->{subdir}.$pkg_dep->{src}; } elsif (defined($srcpackage{$dep})) { $idx = $subdir{$dep}.$dep; } + $idx .= $suffix; undef $idx if $idx =~ /^(kernel)|(base-files)$/; if ($idx) { my $depline; - next if $pkg->{src} eq $pkg_dep->{src}; + next if $pkg->{src} eq $pkg_dep->{src}.$suffix; next if $dep{$pkg->{src}."->".$idx}; next if $dep{$pkg->{src}."->($dep)".$idx} and $pkg_dep->{vdepends}; my $depstr; @@ -604,15 +667,7 @@ sub gen_package_mk() { $depstr = "\$(curdir)/$idx/compile"; $dep{$pkg->{src}."->".$idx} = 1; } - if ($condition) { - if ($condition =~ /^!(.+)/) { - $depline = "\$(if \$(CONFIG_$1),,$depstr)"; - } else { - $depline = "\$(if \$(CONFIG_$condition),$depstr)"; - } - } else { - $depline = $depstr; - } + $depline = get_conditional_dep($condition, $depstr); if ($depline) { $deplines{$idx.$dep} = $depline; } @@ -650,6 +705,16 @@ EOF } } +sub gen_package_source() { + parse_package_metadata($ARGV[0]) or exit 1; + foreach my $name (sort {uc($a) cmp uc($b)} keys %package) { + my $pkg = $package{$name}; + if ($pkg->{name} && $pkg->{source}) { + print "$pkg->{name}: "; + print "$pkg->{source}\n"; + } + } +} sub parse_command() { my $cmd = shift @ARGV; @@ -658,6 +723,7 @@ sub parse_command() { /^package_mk$/ and return gen_package_mk(); /^package_config$/ and return gen_package_config(); /^kconfig/ and return gen_kconfig_overrides(); + /^package_source$/ and return gen_package_source(); } print <{src} = $src; $pkg->{makefile} = $makefile; $pkg->{name} = $1; + $pkg->{title} = ""; $pkg->{default} = "m if ALL"; $pkg->{depends} = []; $pkg->{builddepends} = []; + $pkg->{buildtypes} = []; $pkg->{subdir} = $subdir; $pkg->{tristate} = 1; $package{$1} = $pkg; @@ -73,6 +75,7 @@ sub parse_package_metadata($) { /^Menu: \s*(.+)\s*$/ and $pkg->{menu} = $1; /^Submenu: \s*(.+)\s*$/ and $pkg->{submenu} = $1; /^Submenu-Depends: \s*(.+)\s*$/ and $pkg->{submenudep} = $1; + /^Source: \s*(.+)\s*$/ and $pkg->{source} = $1; /^Default: \s*(.+)\s*$/ and $pkg->{default} = $1; /^Provides: \s*(.+)\s*$/ and do { my @vpkg = split /\s+/, $1; @@ -90,6 +93,8 @@ sub parse_package_metadata($) { /^Depends: \s*(.+)\s*$/ and $pkg->{depends} = [ split /\s+/, $1 ]; /^Build-Only: \s*(.+)\s*$/ and $pkg->{buildonly} = 1; /^Build-Depends: \s*(.+)\s*$/ and $pkg->{builddepends} = [ split /\s+/, $1 ]; + /^Build-Depends\/(\w+): \s*(.+)\s*$/ and $pkg->{"builddepends/$1"} = [ split /\s+/, $2 ]; + /^Build-Types:\s*(.+)\s*$/ and $pkg->{buildtypes} = [ split /\s+/, $1 ]; /^Category: \s*(.+)\s*$/ and do { $pkg->{category} = $1; defined $category{$1} or $category{$1} = {}; @@ -104,7 +109,7 @@ sub parse_package_metadata($) { $type =~ /ipkg/ and $pkg->{tristate} = 1; } }; - /^Config: \s*(.*)\s*$/ and $pkg->{config} = "$1\n".get_multiline(*FILE, "\t"); + /^Config:\s*(.*)\s*$/ and $pkg->{config} = "$1\n".get_multiline(*FILE, "\t"); /^Prereq-Check:/ and $pkg->{prereq} = 1; /^Preconfig:\s*(.+)\s*$/ and do { my $pkgname = $pkg->{name}; diff --git a/scripts/rstrip.sh b/scripts/rstrip.sh index 6dd44f2ed2..e42caa53a2 100755 --- a/scripts/rstrip.sh +++ b/scripts/rstrip.sh @@ -45,10 +45,13 @@ find $TARGETS -type f -a -exec file {} \; | \ IFS=":" while read F S; do echo "$SELF: $F:$S" - [ "${F##*\.}" = "o" -o "${F##*\.}" = "ko" ] && { + [ "${S}" = "relocatable" ] && { eval "$STRIP_KMOD -w -K '__param*' -K '__mod*' $(find_modparams "$F")$F" } || { + b=$(stat -c '%a' $F) eval "$STRIP $F" + a=$(stat -c '%a' $F) + [ "$a" = "$b" ] || chmod $b $F } done true diff --git a/scripts/timestamp.pl b/scripts/timestamp.pl index b2d68a1bb1..3bf057151f 100755 --- a/scripts/timestamp.pl +++ b/scripts/timestamp.pl @@ -13,14 +13,15 @@ sub get_ts($$) { my $options = shift; my $ts = 0; my $fn = ""; + $path .= "/" if( -d $path); open FIND, "find $path -type f -and -not -path \\*.svn\\* -and -not -path \\*CVS\\* $options 2>/dev/null |"; while () { chomp; my $file = $_; next if -l $file; - my @stat = stat $file; - if ($stat[9] > $ts) { - $ts = $stat[9]; + my $mt = (stat $file)[9]; + if ($mt > $ts) { + $ts = $mt; $fn = $file; } } -- 2.30.2