Merge pull request #4828 from ianchi/zip

zip: add host compile

Merge pull request #4774 from lucize/doveup

dovecot: update to 2.2.32

Merge pull request #4775 from lucize/pigeonup

pigeonhole: update to 0.4.20

Merge pull request #4478 from valdi74/add_package_python-curl

python-curl: add new package

Merge pull request #4823 from ianchi/youtube-dl

youtube-dl: update version

Merge pull request #4830 from commodo/python-updates1

python,python3: build updates

python,python3: install mk files in both host build and InstallDev part

Not sure how it can happen that the files are not
installed via the host build.

Maybe some SDK-like build.

Let's make sure they are installed via InstallDev rule too.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python,python3: add host-flags/settings to host pip install rules

The host pip install should have the host's CFLAGS, LDFLAGS, etc
available.
And not the target's flags.
Otherwise, weird things can happen when installing
packages (host-side) that need to build C code.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

zip: add host compile

make it available as a tool for building other packages

Signed-off-by: Adrian Panella <ianchi74@outlook.com>

shadowsocks-libev: minor tweak without functional change

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

youtube-dl: add zip host dependency

zip is not included in default Tools, so add it as Host dependency in case is not present in building environment

Signed-off-by: Adrian Panella <ianchi74@outlook.com>

youtube-dl: update version

Signed-off-by: Adrian Panella <ianchi74@outlook.com>

Merge pull request #4787 from cwluxul/unsquashfs-fix-segfault-arm

squashfs-tools: fix segfault

Merge pull request #4811 from marcin1j/pr/20170902-mwan3-fix-interface-bound-network-traffic

mwan3: fix interface-bound traffic when interface is offline

Merge pull request #4820 from dibdot/adblock

adblock: bugfix 3.0.1

adblock: bugfix 3.0.1

* fix startup issues with backends like dnscrypt-proxy or kresd
  which does not come up without an existing block list
* fix a small 'chown' issue

Signed-off-by: Dirk Brenken <dev@brenken.org>

mwan3: fix interface-bound traffic when interface is offline

This commit fixed what 6d99b602 was supposed to fix without affecting
interface-bound traffic.

Before 6d99b602 interface-bound traffic was working normally as long
as at least one interface was online. However when the last interface
went offline, it was impossible to ping and such state was
unrecoverable.

Commit 6d99b602 fixed unrecoverable offline state problem (it was
possible to ping -I iface) but messed inteface-bound traffic. Traffic
with interface source address was not working if the interface was in
"offline" state, even if another interface was online.
The problem was caused by an inconsistent "offline" interface state:
iptables-related rules were kept while routing table and policy were
deleted.

The idea behind this commit is to:
 1. Keep all the rules for each interface (iptables, routing table,
    policy) regardless of its state. This ensures consistency,
 2. Make interface state hotplug events affect only iptables'
    mwan3_policy_* rules. Interface-related iptables, routing table
    and policy is removed only when mwan3 is manually stopped.

To make such changes possible, it's necessary to change the way
mwan3_policy_* rule generator keeps track of interface state hotplug
events.
Until now, it checked for the existence of custom interface-related
routing table (table id 1, 2, 3, ...). Clearly we can no longer rely
on that so each interface state is stored explicitly in file.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

glib2: update to 2.53.7

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Merge pull request #4817 from nxhack/omit_unexpected_space

node: delete unnecessary TAB characters at the end of a line

net/nut: Fix typo is serial config option

Fixes: 5503dac80676 "Add back serial support"
Reported-by: Znevna on irc
Signed-off-by: Karl Palsson <karlp@tweak.net.au>

squashfs-tools: fix segfault

Unsquashfs was segfaulting.  When examining in gdb the stack was corrupt.
I found that converting the variable length arrays to malloc caused the
stack corruption to not happen and the segfault went away.  This is due to
the musl pthread stack size being 80k by default.  So the chance of a stack
overflow is high.

Signed-off-by: Colby Whitney <colby.whitney@luxul.com>

pusleaudio: update to 11.0

Signed-off-by: Peter Wagner <tripolar@gmx.at>

node: delete unnecessary TAB characters at the end of a line

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #4816 from dibdot/adblock

adblock: release 3.0

adblock: release 3.0

* add kresd & turris omnia support
* add dnscrypt-proxy support
* change start priority to 30, to fix possible trigger issues on slow
booting hardware
* simplify suspend/resume handling (no longer use a hideout directory)
* enhanced LuCI frontend
* many small changes & improvements
* default config change (please update your config!), adblock is now
disabled by default
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #4805 from pprindeville/acpica-bump-20170831

acpica-unix: update to 20170831

Merge pull request #4813 from diizzyy/patch-87

libs/confuse: Update to 3.2.1

libs/confuse: Update to 3.2.1

Update (lib)confuse to 3.2.1

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #4809 from nxhack/node_fix_typo

node: fix typo

Merge pull request #4812 from ldir-EDB0/bumpwireguard

wireguard: bump to release 0.0.20170907

wireguard: bump to release 0.0.20170907

Compile & run tested: ar71xx: archer c7 v2

Add myself as another co-maintainer of the package.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

node: fix typo

https://github.com/openwrt/packages/issues/4742

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #4808 from diizzyy/patch-86

lib/expat: Update to 2.2.4

lib/expat: Update to 2.2.4

Update (lib)expat to 2.2.4

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

acpica-unix: update to 20170831

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #4804 from rmounce/tinc-stable

tinc: version bump 1.0.32

tinc: version bump 1.0.32

Signed-off-by: Ryan Mounce <ryan@mounce.com.au>

Merge pull request #4801 from diizzyy/patch-85

libs/pcre: Switch to Sourceforge mirrors

php7: upgrade to 7.1.9

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libxml2: upgrade to 2.9.5

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #4800 from pfzim/tdb-1.3.15

tdb: version update to 1.3.15

libs/pcre: Switch to Sourceforge mirrors

Switch to Sourceforge for better availability and HTTP

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

tdb: version update to 1.3.15

Signed-off-by: Dmitry V. Zimin <pfzim@mail.ru>

Merge pull request #4761 from diizzyy/patch-84

sound/mpg123: Update to 1.25.6

memcached: bump to version 1.5.1

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

pcre: Added fix for CVE-2017-11164 by adding stack recursion limit

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

Merge pull request #4792 from TDT-GmbH/mwan3-fixes

ne/mwan3: feature and fixes

libwebsockets: rename cyassl variant to wolfssl

libwolfssl doesn't exist yet, but at least get all the names right as
much as we can.

Signed-off-by: Karl Palsson <karlp@etactica.com>

libwebsockets: fix build for cyassl variant

Looks like the cyassl redirect to wolfssl does not work flawlessly in libwebsockets.

Tested with libwolfssl 3.12.0 & 3.10.0 from LEDE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

net/mwan3: update version

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

net/mwan3: fix /var/state issue in 14-mwan3 hotplug

Use common function to toggle ip address in /var/state/mwan3.
Change also to use toggle function and not set function. If ip address
is often changed every change is saved to /var/state/mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

net/mwan3: if initial_state is offline set status to unknown

To show that the status of the interface is neither offline nor online
set the status to unknown.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

net/mwan3: mwan3track skip track ips if realibility is accomplished

If enough tracking ip are pinged skip the reset. They are not needed
anymore to mark the interface as up.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #4791 from micmac1/master

libedit: install pkgconfig file

libedit: install pkgconfig file

Some configure scripts rely on pkgconfig to detect libedit, for instance
asterisk-13. Install the file so libedit can be used there as well.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #4785 from thess/ffmpeg-testing

ffmpeg: Add mpeg layer 2 audio support to libffmpeg-mini

knxd: fixup PKG_MIRROR_HASH

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Merge pull request #4779 from tru7/master

knxd: adopt structure and versioning from new upstream stable release

ffmpeg: Add mpeg layer 2 audio support and mpeg2 demuxer to libffmpeg-mini

Signed-off-by: Ted Hess <thess@kitschensync.net>

psqlodbc: require unixodbc host build

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

unixodbc: fix host build

Fixed #4705

Reported-by: Michael Braun <michael-dev@fami-braun.de>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #4786 from ClaymorePT/boost_1.65.0_r1

boost: 1.65.0 Update + Fixes

Merge pull request #4781 from pfzim/master

fdm: bump to latest version

fdm: bump to latest version

Signed-off-by: Dmitry V. Zimin <pfzim@mail.ru>

boost: 1.65.0 Update + Fixes
This commit updates the boost libraries to version 1.65.0

This new version brings two new libraries:
 - Boost.Stacktrace [1]
   -> Gather, store, copy and print backtraces, from Antony Polukhin.
 - Boost.PolyCollection [2]
   -> Fast containers of polymorphic objects, from Joaquín M López Muñoz.

Fixes in this commit:
 - Boost.Python for Python 3.6
   -> The dynamic library was not being compiled, resulting in an empty package. Fixed.
 - Boost.TypeErasure
   -> The dynamic library was not available to install. Fixed.
 - Boost.Serialization
   -> The wserialization dynamic library was being compiled but not available to install. Fixed.

Extras:
 - This commit also contains the post-release fixes, which did not make it into the final release [3].

As always, more information about this release, can be found in [4].

[1]: http://www.boost.org/doc/libs/1_65_0/doc/html/stacktrace.html
[2]: http://www.boost.org/doc/libs/1_65_0/doc/html/poly_collection.html
[3]: http://www.boost.org/patches/
[4]: http://www.boost.org/users/history/version_1_65_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

shadowsocks-libev: more common default config

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

shadowsocks-libev: ss-rules: query resolveip only for ipv4 addresses

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

treewide: run "make check FIXUP=1"

fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

shadowsocks-libev: ss-rules: fix multiple continous \x20 in $o_ifnames

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

shadowsocks-libev: shorten init script by 2 lines

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

shadowsocks-libev: ss-rules: resolve server names before adding to ipset

ipset command line utility supports ranges of address: IP-IP, but the
dash character is also valid character in host names.  If we have a
remote server ss-00.example.com, ipset may complain that

    ipset v6.32: Syntax error: cannot parse ss: resolving to IPv4 address failed

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

shadowsocks-libev: fix validation of list option

ubox 'list' type is for validating multiple elements separated by
tabs/whitespaces in a single value.  E.g. The following should not be
accepted

    list src_ip_bypass '1.2.3.4 4.3.2.1'

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #4783 from thess/mpd-update

mpd: Remove glib2 dependency

libmms: Remove glib-2 from pkgconfig (un-needed)

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #4782 from thess/libmms-update

libmms: Remove glib2 dependency

libmms: Remove glib2 dependency

Signed-off-by: Ted Hess <thess@kitschensync.net>

mpd: Remove glib2 dependency

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #4703 from hbl0307106015/tdb

tdb: bump to latest version

Merge pull request #4765 from thess/pianod-update

pianod: Update to 174.07. Replace libmad with libmpg123

Merge pull request #4766 from thess/squeezelite-update

squeezelite: Replace libmad with libmpg123

Merge pull request #4767 from thess/mjpg-streamer-update

mjpg-streamer: Add PKG_MIRROR_HASH for buildbots w/o svn

knxd: adopt structure and versioning from new upstream stable release

Signed-off-by: Othmar Truniger <github@truniger.ch>

strongswan: bump to 5.6.0

Fixes CVE-2017-11185.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

pigeonhole: update to 0.4.20

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

dovecot: update to 2.2.32

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Merge pull request #4768 from pprindeville/isc-dhcp-update-4.3.6

isc-dhcp: update to 4.3.6

mjpg-streamer: Use tar.xz. Add PKG_MIRROR_HASH for buildbots w/o svn
        Remove unnecessary copyright, add myself as maintainer.

Signed-off-by: Ted Hess <thess@kitschensync.net>

squeezelite: Replace libmad with libmpg123

Signed-off-by: Ted Hess <thess@kitschensync.net>

isc-dhcp: update to 4.3.6

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

pianod: Update to 174.07. Replace libmad with libmpg123

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #4763 from ejurgensen/forked-daapd_builderr4

forked-daapd: Backport upstream patch to prevent gperf build error

kplex: copy config file to /etc/

Signed-off-by: Caesar Schinas <caesar@caesarschinas.com>

kplex: update to v1.3.4

Use stable release instead of git commit hash.

Signed-off-by: Caesar Schinas <caesar@caesarschinas.com>

forked-daapd: Backport upstream patch to prevent gperf build error

This adds a patch which is a backport of https://github.com/ejurgensen/forked-daapd/commit/1b8adc11edec48a9b8fcb75b9efdaf618a6744bd

This should prevent the gperf build errors on some platforms.

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

sound/mpg123: Update to 1.25.6

Update mpg123 to 1.25.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #4760 from ejurgensen/forked-daapd_builderr3

forked-daapd: Fix build error due to misdetected pulseaudio

forked-daapd: Fix build error due to misdetected pulseaudio

configure finds libpulse and then tries to include the header, but fails,
because pulseaudio isn't a dependency in the Makefile. This change disables
pulseaudio support so configure won't do this.

It wasn't the intention with version update 25.0 of forked-daapd to extend
with pulseaudio support, but maybe do that later.

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

aria2: Add missing 'or' in section validate function

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>

aria2: Enable Bittorrent support by default

Most user need this Bittorrent download support, and this fature can only depends on libssl.

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>

aria2: Add some build config options

======================== ========================================
features                  dependency
======================== ========================================
HTTPS                    OSX or GnuTLS or OpenSSL or Windows
SFTP                     libssh2
BitTorrent               None. Optional: libnettle+libgmp or
                         libgcrypt or OpenSSL
Metalink                 libxml2 or Expat.
Checksum                 None. Optional: OSX or libnettle or
                         libgcrypt or OpenSSL or Windows
gzip, deflate in HTTP    zlib
Async DNS                C-Ares
Firefox3/Chromium cookie libsqlite3
XML-RPC                  libxml2 or Expat.
JSON-RPC over WebSocket  libnettle or libgcrypt or OpenSSL
======================== ========================================

Add 'CONFIG_' to 'PKG_CONFIG_DEPENDS'.

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>