asterisk: update to version 20.8.1

Update to most recent LTS release addressing multiple security and
stability issues.

Complete changelog:
https://github.com/asterisk/asterisk/compare/20.5.2...20.8.1

Note that res-stir-shaken switched to use libjwt instead of providing
a built-in JWT implementation.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

pjproject: bump to 2.14.1

Pick patch from @dhewg so we keep pjproject in sync with the version
bundled with Asterisk.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #871 from dangowrt/asterisk-chan-lantiq-rotary-patches

asterisk-chan-lantiq: import patches to improve pulse-dial phones

asterisk-chan-lantiq: import patches to improve pulse-dial phones

Import two patches which improve behavior with rotary pulse-dial phones.
Both are pending upstream:
https://github.com/kochstefan/asterisk_channel_lantiq/pull/5
https://github.com/kochstefan/asterisk_channel_lantiq/pull/6

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #868 from neheb/4

libosip2: update to 5.3.1

Merge pull request #863 from neheb/1

sipgrep: update to 2.2.0

Merge pull request #866 from neheb/2

coturn: update to 4.6.2

Merge pull request #867 from neheb/3

libsrtp: update to 2.6.0

libosip2: update to 5.3.1

Fixes CVE-2022-41550. Added PKG_CPE_ID.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libsrtp: update to 2.6.0

Switch to local tarballs. Smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

coturn: update to 4.6.2

Remove upstreamed patch.

Switch to local tarballs. Smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sipgrep: update to 2.2.0

Patch was upstreamed.

Reordered variables for consistency between packages.

Slight modification to configure argument.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #864 from neheb/2

baresip: add glib2/host build dependency

baresip: add glib2/host build dependency

ctrl_dbus relies on gdbus-codegen , which is provided by glib2/host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #861 from aduskett/dahdi-linux

libs/dahdi-linux: bump to latest git head

libs/dahdi-linux: bump to latest git head

Add a new patch: 207-opvxa1200-unused-variable.patch which fixes
unused variable {pos,x,y} errors in the drivers/dahdi/opvxa1200/base.c
file.

Fixes compiling against linux >= 6.6

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>

treewide: refresh hashes after move to use ZSTD as default

With the recent move to using ZSTD as the default compression format for
packaging git repo clones we must refresh all of the hashes for the
packages feed as well.

Signed-off-by: Robert Marko <robimarko@gmail.com>

dahdi-linux: fix compilation for mips_24k arch

Fix compilation for mips_24k arch due to a define conflicts with ABS.

Patch has been proposed upstream and should be accepted.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #857 from dangowrt/lantiq-vmmc-group

asterisk-chan-lantiq: add user 'asterisk' to 'vmmc' group

asterisk-chan-lantiq: add user 'asterisk' to 'vmmc' group

Make sure asterisk has permission to access /dev/vmmc* devices as it
will segfault if started without.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #856 from micmac1/sipp-372

sipp: bump to 3.7.2

Merge pull request #788 from guijan/pcapsipdump-libobsd

pcapsipdump: fix linking against libobsd

sipp: bump to 3.7.2

02-Fix_compatibility_with_older_C++_in_3.6.x_branch.patch removed as
included upstream.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #849 from micmac1/ast-20.5.2

asterisk: bump to 20.5.2

Merge pull request #848 from micmac1/dongle-2022

asterisk-chan-dongle: bump to latest git

asterisk: bump to 20.5.2

- Resolves GHSA-98rc-4j27-74hh, GHSA-hxj9-xwr8-w8pq, GHSA-5743-x3p5-3rg7
  and GHSA-8857-hfmw-vg8f
- patches refreshed
- patch 180-app_queue_time_t.patch added to fix new warnings, sent
  upstream (see [1])
- 180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch and
  190-chan_iax2.c-Avoid-crash-with-IAX2-switch-support.patch removed as
  they're included in upstream release tar ball.

[1] https://github.com/asterisk/asterisk/pull/516

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: sync patches with asterisk 20.5.2

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

asterisk-chan-dongle: bump to latest git

Closes: #837
The extra patch was submitted upstream for inclusion, see [1].

[1] https://github.com/wdoekes/asterisk-chan-dongle/pull/173

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #847 from micmac1/rtpe-11.5.1.18

rtpengine: bump to 11.5.1.18

rtpengine: bump to 11.5.1.18

Add missing xmlrpc-c dependency.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #844 from micmac1/fs-1.10.11

freeswitch: bump to 1.10.11

freeswitch: bump to 1.10.11

See [1].

[1] https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.17

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #843 from guidosarducci/master-fix-network-device

siproxd: improve network device resolution

siproxd: improve network device resolution

Resolve network devices by first trying 'network_get_device' (L3) and
falling back to 'network_get_physdev' (L2) on failure, which allows using
Wireguard interfaces. Both are needed to avoid breaking existing usage
for some interfaces (e.g. 'wan').

Also add myself as a maintainer.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>

Merge pull request #840 from Ansuel/pcre-kamailio

kamailio: bump to release 5.7.2 + PCRE2

Merge pull request #839 from Ansuel/rtengine-pcre2

rtpengine: bump to 11.5.1.12 release and set PCRE2

Merge pull request #838 from Ansuel/sipgrep-pcre2

sipgrep: Move package to PCRE2

Merge pull request #834 from robho/yate_nftables_banbrutes

yate: Update yate script to use an nftables set

Merge pull request #836 from micmac1/dahli-6

dahdi-linux: bump to latest git head

rtpengine: bump to 11.5.1.12 release and set PCRE2

Bump rtpengine to release 11.5.1.12.

New 11.x release require libopus as a new library and also moved to
PCRE2 library.

Refresh patches and also introduce a new one to disable docs as they
changed doc generation tool and now would require a new prereq and docs
are not useful and would waste space on an embedded scenario.

For recording module libcurl is also now required.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

kamailio: backport and move to PCRE2

Backport merged patch and move package to PCRE2 as PCRE is EOL and won't
receive any security updates anymore.

Additional patch are backported to minimize changes to the backport
patches. Only patch 010 required adaptation due to a fix backported in
5.7 in the same place where the patch fixed some whitespace issue.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

kamailio: bump to release 5.7.2

Bump kamailio to release 5.7.2 to make it easier to backport PCRE2
patches.

Drop upstream patch related to time_t and python3 fixes.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

kamailio: add patch fixing fragile kamcmd

Add patch fixing fragile kamcmd where output bin can be renamed to
invalid names due to ENV variable clash.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

sipgrep: Move package to PCRE2

Add patch to convert the package to PCRE2 as PCRE is EOL and won't
receive any security updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

dahdi-linux: bump to latest git head

This compiles with newer kernels now.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

yate: Update yate script to use an nftables set

By using an nftables set in this script it's easier to install
and use this script now that OpenWrt uses nftables by default.

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

Merge pull request #831 from micmac1/fs-vpx-CVE-2023-5217

freeswitch: add patches for CVE-2023-5217 & CVE-2023-44488 in bundled libvpx

freeswitch: add patches for CVEs in bundled libvpx

CVE-2023-5217
CVE-2023-44488

Patches are for bundled libvpx, see [1].

[1] https://github.com/signalwire/freeswitch/issues/2258

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #829 from Rondom/rondom-add-cpe-ids

Add CPE ID for asterisk and pjproject

pjproject: Add PKG_CPE_ID

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

asterisk: Add PKG_CPE_ID

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

Merge pull request #826 from micmac1/fs-1.10.10

freeswitch: bump to 1.10.10

freeswitch: bump to 1.10.10

- bump to 1.10.10
- remove TARGET_CFLAGS workarounds
- remove BROKEN from modules av & python3
- remove 500-libshout-deprecated.patch
- refresh other patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

signalwire-client-c: bump to 2.0.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libks: bump to 2.0.2

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.16

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

spandsp3: bump to commit from June 16th

Same commit is used by freeswitch 1.10.10 for Windows.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #822 from micmac1/ast-iax2-crash

asterisk: add upstream patch against iax2 crash

asterisk: add upstream patch against iax2 crash

Reported by Sergio in issue #821. This adds upstream patch for the
crash. See upstream issue [1] for details.

[1] https://github.com/asterisk/asterisk/issues/180

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #820 from kuanyili/replace-autorelease

treewide: replace AUTORELEASE with real PKG_RELEASE

treewide: replace AUTORELEASE with real PKG_RELEASE

Based on Paul Fertser <fercerpav@gmail.com>'s guidance:
Change AUTORELEASE in rules.mk to:
```
AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))
```

then update all affected packages by:
```
for i in $(git grep -l PKG_RELEASE:=.*AUTORELEASE | sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
make package/$i/clean
done
```

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>

Merge pull request #817 from micmac1/pj2131

pjproject: bump to 2.13.1

pjproject: bump to 2.13.1

1. add "/refs/tags" to PKG_SOURCE_URL, otherwise the downloaded file is
   broken now
2. bump minor version, includes security related fixes, see [1], [2] and
   [3]

[1] https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w
[2] https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr
[3] https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #815 from micmac1/ast-20.3.0

asterisk: bump to 20.3.0

asterisk: bump to 20.3.0

- bump to 20.3.0
- new modules: app-broadcast, app-if, app-signal, func-export,
  res-pjsip-aoc and res-pjsip-rfc3329
- remove "--without-vpb", not available anymore
- add configuration file for res-http-media-cache
- drop libsrtp2 from res-pjproject dependencies, see changes in
  pjproject package
- refresh patches
- add upstream patch
  180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch to fix
  build [1]

[1] https://github.com/asterisk/asterisk/issues/149

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: bump to 2.13

- bump to 2.13
- new option "--disable-libsrtp" now available so we can get rid of
  dependency on libsrtp2 (asterisk's SRTP support doesn't depend on pjproject)
- new option "--disable-upnp"
- 0007-execinfo.patch not required anymore, pjproject now checks for
  __GLIBC__
- sync patches with asterisk 20.3.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #812 from micmac1/kam-py-3.11-patches

kamailio: add patches for app_python3

Merge pull request #811 from micmac1/fs-py-3.11-broken

freeswitch: mark mod-python3 BROKEN

kamailio: add patches for app_python3

Python was updated to 3.11 and app_python3 doesn't compile anymore.
This commit adds three upstream patches to resolve this.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

freeswitch: mark mod-python3 BROKEN

mod-python3 is not compatible with Python 3.11 currently, mark it
BROKEN.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #810 from micmac1/fs-musl-1.2.4

freeswitch: fix compile against musl-1.2.4

freeswitch: fix compile against musl-1.2.4

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

dahdi-linux: add multiple patch fixing compilation warning

Add multiple patch fixing compilation warning and obvius code bug.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

rtpengine: add patch fixing compilation warning for kernel module

Add patch fixing compilation warning for kernel module.
Always dynamically allocate buffer for proc_control_read_write.
Fix compilation warning:
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c: In function 'proc_control_read_write':
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c:3573:1: error: the frame size of 1272 bytes is larger than 1024 bytes [-Werror=frame-larger-than=]
 3573 | }
      | ^

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #807 from micmac1/ci-up

CI: sync up with changes in packages repo

CI: sync up with changes in packages repo

Catch up with the changes in the packages repository. All changes are
manual cherry picks from the packages repo and listed below.

ci: update github actions to v3

Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 52570d4242822e3db678f5484c2ca3e72f485d52)

CI: deprecate $(AUTORELEASE) via comments

Autorelease causes some issues like heavy bandwidth usage as well as
non-deterministic package releases whenever someone doesn't use the full
git log.

With this comment all modified packages are checked and if they use
the autorelease feature, kindly comment to the user to change that.

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>
[ move check to separate workflow to handle ci limitation ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 61d59fd54254b97218aa4e861b1f933d5c5e0bc4)

ci: only comment AUTORELEASE deprecation if exists

If it doesn't exists, don't confuse the contributors.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 75ff4ba358aa0357f0af62cb980568bdc8d390a1)

github-ci: error on any shell errors

Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)

CI: update build architectures

Removed arc_archs - archs38 was marked as source-only [1].
Renamed powerpc_8540 to powerpc_8548 [2].

1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351
2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 29041e8f8eb42dcd8eee03602348b39dbf9d0c70)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #806 from dhewg/buildflags

kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16

Merge pull request #802 from cotequeiroz/baresip

baresip: fix parallel build

Merge pull request #805 from micmac1/sccp-autoconf-2.70

asterisk-chan-sccp: autoconf fixes

kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16

See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>

asterisk-chan-sccp: autoconf fixes

Since OpenWrt updated autoconf to 2.71 configure fails, because
"$ac_dir" is now empty when configure attempts to run
"./tools/versioncheck". With previous autoconf "$ac_dir" contained
"autoconf" at this point in the script.

As a workaround "$ac_dir" is replaced with "$ac_aux_dir", which
incidentally contains "autoconf".

Also a build dependency is added for gettext-full, as it provides
iconv.m4. Previously this was provided by libiconv, but not anymore.
Without iconv.m4 autoreconf fails.

Some patches were refreshed to allow CI to pass.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #804 from micmac1/fs-1109

freeswitch: bump to 1.10.9

freeswitch: bump to 1.10.9

ZRTP support removed as it was dropped upstream.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

spandsp3: bump to latest commit

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.14

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libks: bump to 1.8.2

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #803 from cotequeiroz/OpenSSL3

freeswitch,coturn: Prepare for OpenSSL 3.0 upgrade

baresip: fix parallel build

Include an upstream patch to fix random parallel build failures, such
as:

  CC [M]  build-arm/modules/ctrl_dbus/ctrl_dbus.o
modules/ctrl_dbus/ctrl_dbus.c:69:10: fatal error: baresipbus.h: No such
file or directory
   69 | #include "baresipbus.h"
      |          ^~~~~~~~~~~~~~

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

coturn: update to 4.6.1

Added a patch from Gentoo that brings compatiblity with OpenSSL 3.0.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

freeswitch: allow building with OpenSSL 3.0

Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of
deprecated API.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #797 from micmac1/rtpe-lws-openssl

rtpengine: update libwebsockets dependency

rtpengine: update libwebsockets dependency

The rtpengine daemon requires lws_get_ssl(). This function is not
available in libwebsockets-mbedtls. This commit updates the dependency
to libwebsockets-openssl.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #795 from micmac1/sof-1.13.11

sofia-sip: bump to 1.13.11

sofia-sip: bump to 1.13.11

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #791 from micmac1/ast-20.0.1

asterisk: bump to 20.0.1

asterisk: bump to 20.0.1

Fixes

AST-2022-007
AST-2022-008
AST-2022-009

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: backport security fixes from 2.13

Backports two security fixes (c4d3498 and 450baca) from pjproject 2.13.
Source: asterisk 20.0.1.

Also drop AUTORELEASE as OpenWrt project wants to get rid of it.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #790 from micmac1/init-return

Treewide: Use return in init scripts instead of exit

rtpproxy: use return in init script

"check_ipaddr()" & "start_service()" are functions, hence "return"
should be used instead of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>