python3: Fix hashlib module not compiled for host Python

026-openssl-feature-flags.patch and
028-host-python-support-ssl-with-libressl.patch were removed in
4ecd9d67e90651a8e93760bf0b5771f7057c74a8 to fix the ssl module after
libressl was upgraded to 3.7.0[1].

However, the cause of the ssl module build failure was only
028-host-python-support-ssl-with-libressl.patch.

Removing 026-openssl-feature-flags.patch caused a build failure for the
hashlib module.

This restores 026-openssl-feature-flags.patch with an updated version of
the patch from OpenBSD[2].

[1]: https://github.com/openwrt/packages/issues/20107
[2]: https://github.com/openbsd/ports/blob/26a04435bf2a09dcbe22b718bfee08997617a906/lang/python/3.10/patches/patch-Modules__hashopenssl_c

Fixes: 4ecd9d67e906 ("python3: fix ssl support by removing libressl patches")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 02eb5c100c8462823ea19df6af637be97570ccdb)

python3: Fix uuid module not compiled for host Python

This adds $(STAGING_DIR_HOST)/include/e2fsprogs to HOST_CFLAGS and
HOST_CPPFLAGS so that configure can find uuid/uuid.h.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 44fb4927f11add18baa11617e67c8a697a3f528d)

python3: Fix multiarch/local paths added when building host Python

By default, the Python build process will add /usr/local/{lib,include},
and multiarch paths (e.g. /usr/{lib,include}/x86_64-linux-gnu) if
building on Debian/Ubuntu, to its library and includes paths.

006-remove-multi-arch-and-local-paths.patch was added in
84202f17e1aac6faf66b8d186f7c5c62b6f72ffb to stop the Python build
process from adding these paths.

006-remove-multi-arch-and-local-paths.patch was removed in
48277ec9158151763239461c6f60808e38a99c2f.

006-do-not-add-multiarch-paths-when-cross-compiling.patch was added in
0c8b0b0bf727a57b0138a1425d2f32786dddd146 to stop the Python build
process from adding these paths for target Python.

These paths are still added by the Python build process when building
host Python.

This replaces the cross-compiling-only patch with the original patch,
renamed slightly and adapted for Python 3.10.

Fixes: 48277ec91581 ("python3: bump to version 3.8")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f006d0ea23f76a1846c93d0ec3b1ea60ba36d093)

python3: Fix race condition when doing parallel builds

When doing parallel builds, host Python can install the python3 symlink
before the Python standard library is installed completely.

When this occurs, it is possible for other packages to detect the
python3 symlink and try to use host Python before it is fully installed.

This adds a patch to make commoninstall (where the standard library is
installed) a prerequisite of bininstall (where the python3 symlink is
installed), so that commoninstall is fully completed before bininstall
begins.

Patch has been submitted upstream:
https://github.com/python/cpython/pull/104693

Fixes: https://github.com/openwrt/packages/issues/19241
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 67e47f11962c4ea0b1b734913f64c32fbba9edf2)

python3: Fix readelf program name not replaced in _sysconfigdata.py

The Makefile lines to add READELF to TARGET_CONFIGURE_OPTS was removed
in 4e05541782edeb06b51d691dadf52648df24c940.

Without setting READELF, configure finds the symlink to
$(TARGET_CROSS)readelf (e.g. arm-openwrt-linux-readelf) instead of
$(TARGET_CROSS)readelf (e.g. arm-openwrt-linux-muslgnueabi-readelf).

This leads to the symlink name being saved to _sysconfigdata.py, and so
the readelf name is not replaced correctly (in
Py3Package/python3-base/install).

This restores the removed Makefile lines.

Fixes: 4e05541782ed ("python3: bump to version 3.10.0")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e1a95786358c64483fc16d52eac6746267f0abec)

python3: Fix __pycache__ files included in python3-light

003-do-not-run-distutils-tests.patch was removed in
4e05541782edeb06b51d691dadf52648df24c940. This patch stopped "make
install" from, among other things, running compileall.

When this patch was removed, "make install" ran compileall as normal and
created bytecode files in __pycache__ directories. These files were then
packaged in python3-light.

This adds a patch to stop compileall from being run during "make
install".

Fixes: 4e05541782ed ("python3: bump to version 3.10.0")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8a4da017902d21ac6cada21a3bb23caa5b39af0b)

python3: Remove --without-pymalloc

--without-pymalloc was added in 7bf1ae65a89e380ce20ef5ab13b1a7276d6f7047
because leaving it enabled added an "m" flag/suffix to file names.

This flag/suffix was removed in Python 3.8[1], so disabling pymalloc is
no longer necessary.

[1]: https://docs.python.org/3.8/whatsnew/3.8.html#build-and-c-api-changes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3032e7063f5a215a4a2b15f79be8d54aace6b614)

pciutils: update to 3.10.0

Manually refresh:
- 101-no-strip.patch

Remove upstreamed:
- 107-avoid-addng-multiple-version-tags.patch

ChangeLog:
https://github.com/pciutils/pciutils/blob/21407521fb62a65e39051561e16e4ce1a74362c1/ChangeLog

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 6c34bf90e38e55d7f2a809f375624f475d4d8d91)

ocserv: add otp config option

and also fix build error:
Package ocserv is missing dependencies for the following libraries:
liboath.so.0

Signed-off-by: Thlv Alivs <zgmzzzz18@gmail.com>

oath-toolkit: Add oath PAM authentication module

will install to /usr/lib/security/pam_oath.so

Signed-off-by: Thlv Alivs <zgmzzzz18@gmail.com>

oath-toolkit: splitting liboath from oath-toolkit

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

transmission: add missing nls.mk include

Fixes issue #21016.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

tailscale: update to 1.40.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

nginx: add configure flag --with-compat

Without it, nginx could complain about incompatible dynamic modules

Signed-off-by: Glen Huang <me@glenhuang.com>
[ fix conflict error on cherry-pick ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx: introduce migration for old uci conf template

Introduce support for migration of old uci conf template to new version.
Uci conf template are saved in config backup. This cause problem on config
restore as old config template might have compatibility problem with new
nginx implementation.

Add logic to migrate the template script at runtime to correctly align
to latest change from nginx and nginx-util.

Fixes: 65a676ed56fb ("nginx: introduce support for dynamic modules")
Fixes: #20904
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx-util: add version to UCI conf template

Add versioning to UCI conf template as a commented version.
This permits the introduction of migration script since the template is
saved and restored config restore. The migration script are handled by
nginx init.d script.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

vips: update to 8.14.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

zmq: fix gcc 13 errors

gcc 13 compatibility patch is from alpine linux.
https://git.alpinelinux.org/aports/tree/main/zeromq/gcc13.patch

fixes #20972

I also renamed one of patches, so patch filenames are more unified.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

openvpn: Add more hotplug events

OpenVPN supports more hooks than just 'up' and 'down'. Especially
reacting to 'route-up' and 'route-pre-down' events could be important.
When routing table changes, it can make sense to adapt firewall, run
some tests or change even more routes. This change passes those events
to hotplug, so it is easy to react to them without changing
configuration files provided by VPN provider.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>

ttyd: update to 1.7.3

also fixes linking issue that appeared after gcc 13
removed obsolete (merged) patch, ttyd now depends on
libcap, added that as a dependency.

remaining patch refreshed.

release notes: https://github.com/tsl0922/ttyd/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

scapy: update to 2.5.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

syslog-ng: update to 4.2.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

php8-pecl-mcrypt: update to 1.0.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

php8-pecl-krb5: update to 1.1.5

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.6.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

nfdump: update to 4.2.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

luasec: update to 1.3.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libsoup3: update to 2.6.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.47

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgcrypt: update to 1.10.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libpsl: update to 0.21.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

evtest: don't build man page

Just selecting this package resulted in a build error:

/home/mhei/openwrt.git/staging_dir/hostpkg/bin/python3: No module named asciidoc
make[4]: *** [Makefile:856: evtest.xml] Error 1

Since we usually do not need the man page, just prevent to
build it by pre-setting two environments variables. Then
the makefile warns about, but don't try to build.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #21103 from jefferyto/gensio-without-go

gensio: Fix build on build host with Go compiler

python3-libselinux: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

mariadb: fix gcc 13 building

fixes:
FAILED: tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o
/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/bin/x86_64-openwrt-linux-musl-g++ -DDBUG_TRACE -DHAVE_CONFIG_H -DHAVE_URING -D_FILE_OFFSET_BITS=64 -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/wsrep-lib/include -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/wsrep-lib/wsrep-API/v26 -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/include -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/include/providers -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool -Os -pipe -fno-caller-saves -fno-plt -fhonour-copts -fmacro-prefix-map=/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3=mariadb-10.9.3 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro   -I/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/usr/include -I/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/include/fortify -I/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/include -DNDEBUG -DDBUG_OFF -std=gnu++11 -DHAVE_IO_URING_MLOCK_SIZE -MD -MT tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o -MF tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o.d -o tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o -c /usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool/aio_liburing.cc
/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool/aio_liburing.cc: In constructor '{anonymous}::aio_uring::aio_uring(tpool::thread_pool*, int)':
/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool/aio_liburing.cc:64:18: error: 'runtime_error' is not a member of 'std'
   64 |       throw std::runtime_error("aio_uring()");

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gnutls: fix build with zabbix

Zabbix verifies the version of gnutls by search in the header gnutls.h.
This is done with 'cat' and 'egrep'. The problem here is now that the
preprocess definition did changed in gnutls.h, so the regex does not
match anymore.

The following error message acourse in the log:
> configure: error: GnuTLS library version requirement not met (>= 3.1.18)

To fix this backport an upstream patch to let the regex work again.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

efivar: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Backport an upstream fix to replace these old data types.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

perl: perlmod: append _LARGEFILE64_SOURCE flag for musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: support setting tunnel token

Allows user to provide a token for Cloudflare tunnel.
When provided along with credentials, this will take precedence.

Signed-off-by: Scott McKenzie <scott@noizyland.net>

Merge pull request #20981 from jefferyto/python3-packages-fix-build

python3-packages: Set PYTHON3_PKG_BUILD:=0

natmap: add myself to maintainers

Signed-off-by: Ray Wang <r@hev.cc>

natmap: update to 20230519

Signed-off-by: Ray Wang <r@hev.cc>

podman: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gensio: Fix build on build host with Go compiler

If the build host has the Go compiler installed, then configure will
detect this and will try to compile gensio's Go support, leading to a
build failure.

This disables Go support entirely to fix this build failure.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

transmission: add missing ftruncate64 syscall

Transmission 4.0.3 started using the ftruncate64 syscall.
Add it to the list of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

docker-compose: Update to version 2.18.1

Signed-off-by: Javier Marcet <javier@marcet.info>

php8: update to 8.2.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php8: fix compilation with musl 1.2.4

As noted in the release notes of musl 1.2.4, we can use
CFLAGS to pass -D_LARGEFILE64_SOURCE to allow to keep
using LFS64 definitions (as a short-term solution).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

mariadb: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

inotify-tools: fix compilation with musl 1.2.4

Fixes errors in the form of:
inotifytools.c: In function 'inotifytools_watch_recursively_with_exclude':
inotifytools.c:1335:30: error: storage size of 'my_stat' isn't known
 1335 |         static struct stat64 my_stat;
      |                              ^~~~~~~
inotifytools.c:1342:36: error: implicit declaration of function 'lstat64'; did you mean 'lstat'? [-Werror=implicit-function-declaration]
 1342 |                         if ( -1 == lstat64( next_file, &my_stat ) ) {
      |                                    ^~~~~~~
      |                                    lstat
inotifytools.c:1335:30: error: unused variable 'my_stat' [-Werror=unused-variable]
 1335 |         static struct stat64 my_stat;
      |                              ^~~~~~~
inotifytools.c: In function 'isdir':
inotifytools.c:1621:30: error: storage size of 'my_stat' isn't known
 1621 |         static struct stat64 my_stat;
      |                              ^~~~~~~
inotifytools.c:1621:30: error: unused variable 'my_stat' [-Werror=unused-variable]
inotifytools.c:1630:1: error: control reaches end of non-void function [-Werror=return-type]
 1630 | }
      | ^
cc1: all warnings being treated as errors

Signed-off-by: Nick Hainke <vincent@systemli.org>

arp-scan: fix missing libcap dependency

arp-scan complains about missing libcap dependency. Disable the
dependency.

Signed-off-by: Nick Hainke <vincent@systemli.org>

crowdsec: new upstream release version 1.5.1

Update crowdsec to latest upstream release version 1.5.1

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Description: update to latest version of upstream

tgt: Update to 1.0.86

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

pcre: move pcre from base repository to packages feed

pcre is no longer needed in the base repository. However, some packages
still rely on it in the packages and telephony feed.

Cross-reference to base repository:
e3e6652a550d ("pcre: move package to packages feed")

While working on it remove AUTORELEASE.

Signed-off-by: Nick Hainke <vincent@systemli.org>

pcre2: package moved to base feed

The package is needed by selinux, so it was moved to the base repository.
Remove it from openwrt packages feed.

Cross-reference:
c39b0646f3f2 ("pcre2: import pcre2 from packages feed")

Signed-off-by: Nick Hainke <vincent@systemli.org>

python-packaging: Update to 23.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-attrs: Update to 23.1.0

The package now uses pyproject.toml-based builds with additional build
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

libvorbisidec: Fix error in package description

libvorbisidec needs libogg since
https://gitlab.xiph.org/xiph/tremor/-/commit/8886a2805fc107489912f8c500db3373e04a316d

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

python-automat: Update to 22.10.0, refresh patches

This also removes the patch to avoid setuptools-scm and adds a build
dependency on python-setuptools-scm/host.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

gpgme: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libdeflate: Update to 1.18

Release note:
https://github.com/ebiggers/libdeflate/blob/master/NEWS.md#version-118

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libupm: Workaround for errors with GCC13

Workaround for errors with GCC13
 https://github.com/openwrt/packages/issues/20994

patch
 https://github.com/oskarirauta/local-overrides/blob/main/libs/libupm/patches/011-gcc-13-compatibility-fixes.patch

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

perl: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

_LARGEFILE64_SOURCE has to be defined in the source, or CFLAGS can be used
to pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Robert Marko <robimarko@gmail.com>

oath-toolkit: add InstallDev section

This package seems to be missing an InstallDev section. Had a compile
failure for an application that needs to compile against liboath

Signed-off-by: Thlv Alivs <zgmzzzz18@gmail.com>

Merge pull request #21007 from micmac1/gnutls-unistring-optional

gnutls: load libunistring-optional gnulib module

lttng-modules: Update to 2.13.9

* Added new dependency
* Enabled parallel build
* Switched to use KERNEL_MAKE

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

lttng-tools: Update to 2.13.9

Backported a upstream commit (with manually rebased) to fix build
with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

lttng-ust: Update to 2.13.5

Added a patch to disable building tests.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

transmission: add new syscall needed with musl 1.2.4

Apparently the "revcmsg" syscall is now needed, add it to the list
of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cryptsetup: fix compilation with musl 1.2.4

Similar to mdadm also cryptsetup now requires _LARGEFILE64_SOURCE.
Add -D_LARGEFILE64_SOURCE to TARGET_CFLAGS to fix compilation.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

xupnpd: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

crowdsec: fix compilation with musl 1.2.4

_LARGEFILE64_SOURCE has to be defined in the source, or CFLAGS can be used
to pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Fixes errors in the form of:

Building targets
github.com/mattn/go-sqlite3
sqlite3-binding.c:35901:42: error: 'pread64' undeclared here (not in a function); did you mean 'pread'?
35901 |   { "pread64",      (sqlite3_syscall_ptr)pread64,    0  },
      |                                          ^~~~~~~
      |                                          pread
sqlite3-binding.c:35919:42: error: 'pwrite64' undeclared here (not in a function); did you mean 'pwrite'?
35919 |   { "pwrite64",     (sqlite3_syscall_ptr)pwrite64,   0  },
      |                                          ^~~~~~~~
      |                                          pwrite
sqlite3-binding.c: In function 'seekAndRead':
sqlite3-binding.c:35905:49: error: unknown type name 'off64_t'; did you mean 'off_t'?
35905 | #define osPread64 ((ssize_t(*)(int,void*,size_t,off64_t))aSyscall[10].pCurrent)
      |                                                 ^~~~~~~
sqlite3-binding.c:38767:11: note: in expansion of macro 'osPread64'
38767 |     got = osPread64(id->h, pBuf, cnt, offset);
      |           ^~~~~~~~~
sqlite3-binding.c:35905:58: error: expected ')' before 'aSyscall'
35905 | #define osPread64 ((ssize_t(*)(int,void*,size_t,off64_t))aSyscall[10].pCurrent)
      |                   ~                                      ^~~~~~~~
sqlite3-binding.c:38767:11: note: in expansion of macro 'osPread64'
38767 |     got = osPread64(id->h, pBuf, cnt, offset);
      |           ^~~~~~~~~
sqlite3-binding.c: In function 'seekAndWriteFd':
sqlite3-binding.c:35923:57: error: unknown type name 'off64_t'; did you mean 'off_t'?
35923 | #define osPwrite64  ((ssize_t(*)(int,const void*,size_t,off64_t))\
      |                                                         ^~~~~~~
sqlite3-binding.c:38896:17: note: in expansion of macro 'osPwrite64'
38896 |   do{ rc = (int)osPwrite64(fd, pBuf, nBuf, iOff);}while( rc<0 && errno==EINTR);
      |                 ^~~~~~~~~~
sqlite3-binding.c:35924:21: error: expected ')' before 'aSyscall'
35924 |                     aSyscall[13].pCurrent)
      |                     ^~~~~~~~
sqlite3-binding.c:38896:17: note: in expansion of macro 'osPwrite64'
38896 |   do{ rc = (int)osPwrite64(fd, pBuf, nBuf, iOff);}while( rc<0 && errno==EINTR);
      |                 ^~~~~~~~~~
sqlite3-binding.c:35923:21: note: to match this '('
35923 | #define osPwrite64  ((ssize_t(*)(int,const void*,size_t,off64_t))\
      |                     ^
sqlite3-binding.c:38896:17: note: in expansion of macro 'osPwrite64'
38896 |   do{ rc = (int)osPwrite64(fd, pBuf, nBuf, iOff);}while( rc<0 && errno==EINTR);
      |                 ^~~~~~~~~~

make[2]: *** [Makefile:153: /home/nick/openwrt/build_dir/target-aarch64_cortex-a53_musl/crowdsec-1.4.6/.built] Error 1
make[2]: Leaving directory '/home/nick/openwrt/feeds/packages/net/crowdsec'

Signed-off-by: Nick Hainke <vincent@systemli.org>

btrfs-progs: Update to 6.3

Fixed build issue with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xfsprogs: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

mblaze: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Backport an upstream fix to replace these old data types.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #21066 from jefferyto/python-hatchling-1.17.0

python-hatchling: Update to 1.17.0

acpid: Update to 2.0.34

Backported an upstream commit to fix build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nfs-kernel-server: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libpciaccess: Update to 0.17

Backported an upstream commit to fix build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

openssh: sftp no longer needs crypto or zlib.

OpenSSH 9.1p1 removed remaining dependencies and stopped linking sftp,
sftp-server and scp against libcrypto or libz.  This change moves those
package dependencies from the default to those that still need them.
In particular, this will allow sftp-server to be installed for use with
Dropbear without needing to install zlib or openssl.

Signed-off-by: Darren Tucker <dtucker@dtucker.net>

openssh: Use CDN first for source downloads.

Also point to https for website.

Signed-off-by: Darren Tucker <dtucker@dtucker.net>

python-hatchling: Update to 1.17.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

apk: Update to 2.14.0

* Fixed build issue with musl 1.2.4.
* Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

acl: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Backport an upstream fix to replace these old functions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libreswan: update to 4.11

Fixes https://libreswan.org/security/CVE-2023-30570

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Revert "gptfdisk: fix some warnings treated as errors"

The bug was fixed in 1.0.9, so remove this hack.

This reverts commit 5899a16f4ba70689055f7276e84aa96adce14373.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gptfdisk: Update to 1.0.9

Backported an upstream commit to fix build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

alsa-utils: Update to 1.2.9

* updated source url (prefer https rather than http/ftp)
* fixed build with musl 1.2.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

alsa-ucm-conf: Update to 1.2.9

* updated source url (prefer https rather than http/ftp)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

alsa-lib: Update to 1.2.9

* updated source url (prefer https rather than http/ftp)
* refreshed patches

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

btop: fix compilation with musl 1.2.4

_LARGEFILE64_SOURCE has to be defined in the source, or CFLAGS can be used
to pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Fixes errors in the form of:
Compiling src/linux/btop_collect.cpp
src/linux/btop_collect.cpp: In function 'Mem::mem_info& Mem::collect(bool)':
src/linux/btop_collect.cpp:1082:58: error: aggregate 'Mem::collect(bool)::statvfs64 vfs' has incomplete type and cannot be defined
 1082 |                                         struct statvfs64 vfs;
      |                                                          ^~~
src/linux/btop_collect.cpp:1083:79: error: invalid use of incomplete type 'struct Mem::collect(bool)::statvfs64'
 1083 |                                         if (statvfs64(mountpoint.c_str(), &vfs) < 0) {
      |                                                                               ^
src/linux/btop_collect.cpp:1082:48: note: forward declaration of 'struct Mem::collect(bool)::statvfs64'
 1082 |                                         struct statvfs64 vfs;
      |                                                ^~~~~~~~~
make[3]: *** [Makefile:274: obj/linux/btop_collect.o] Error 1
make[3]: Leaving directory '/home/nick/openwrt/build_dir/target-aarch64_cortex-a53_musl/btop-1.2.13'
make[2]: *** [Makefile:53: /home/nick/openwrt/build_dir/target-aarch64_cortex-a53_musl/btop-1.2.13/.built] Error 2
make[2]: Leaving directory '/home/nick/openwrt/feeds/packages/admin/btop'
time: package/feeds/packages/btop/compile#2.57#0.17#3.02
    ERROR: package/feeds/packages/btop failed to build.

Signed-off-by: Nick Hainke <vincent@systemli.org>

openfortivpn: update to 1.20.3

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

crowdsec-firewall-bouncer: new upstream release version 0.0.27

Update crowdsec-firewall-bouncer to latest upstream release version 0.0.27

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

nspr: fix musl compile

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

nss: update to 3.89.1

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

libpng: update to 1.6.39

Changelog:
https://github.com/glennrp/libpng/blob/v1.6.39/CHANGES

Fixes CVE-2019-6129.

Signed-off-by: Nick Hainke <vincent@systemli.org>

tiff: update to 4.5.0

Release Notes:
http://www.simplesystems.org/libtiff/releases/v4.5.0.html

Remove upstreamed:
- 010-CVE-2022-2519.patch
- 020-CVE-2022-2520.patch

Fixes: CVE-2022-2056, CVE-2022-2057, CVE-2022-2058, CVE-2022-3570,
       CVE-2022-3598, CVE-2022-3627, CVE-2022-3597, CVE-2022-3626,
       CVE-2022-3599, CVE-2022-34526
Signed-off-by: Nick Hainke <vincent@systemli.org>

arp-scan: update to 1.10.0

ieee-iab is removed, see:
https://github.com/royhills/arp-scan/commit/2a56a066494cb67e1c932cc64e739b326ef9a272

Release Notes:
https://github.com/royhills/arp-scan/releases/tag/1.10.0

Signed-off-by: Nick Hainke <vincent@systemli.org>

frr: update to 8.5.1 branch

also fixes gcc 13 compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

gcc: update to 12.3.0

Release notes:
https://gcc.gnu.org/gcc-12/changes.html

Refresh patches:
- 230-musl_libssp.patch
- 910-mbsd_multi.patch
- 920-specs_nonfatal_getenv.patch
- 970-macos_arm64-building-fix.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>