freeswitch: bump to 1.10.11

See [1].

[1] https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.17

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #843 from guidosarducci/master-fix-network-device

siproxd: improve network device resolution

siproxd: improve network device resolution

Resolve network devices by first trying 'network_get_device' (L3) and
falling back to 'network_get_physdev' (L2) on failure, which allows using
Wireguard interfaces. Both are needed to avoid breaking existing usage
for some interfaces (e.g. 'wan').

Also add myself as a maintainer.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>

Merge pull request #840 from Ansuel/pcre-kamailio

kamailio: bump to release 5.7.2 + PCRE2

Merge pull request #839 from Ansuel/rtengine-pcre2

rtpengine: bump to 11.5.1.12 release and set PCRE2

Merge pull request #838 from Ansuel/sipgrep-pcre2

sipgrep: Move package to PCRE2

Merge pull request #834 from robho/yate_nftables_banbrutes

yate: Update yate script to use an nftables set

Merge pull request #836 from micmac1/dahli-6

dahdi-linux: bump to latest git head

rtpengine: bump to 11.5.1.12 release and set PCRE2

Bump rtpengine to release 11.5.1.12.

New 11.x release require libopus as a new library and also moved to
PCRE2 library.

Refresh patches and also introduce a new one to disable docs as they
changed doc generation tool and now would require a new prereq and docs
are not useful and would waste space on an embedded scenario.

For recording module libcurl is also now required.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

kamailio: backport and move to PCRE2

Backport merged patch and move package to PCRE2 as PCRE is EOL and won't
receive any security updates anymore.

Additional patch are backported to minimize changes to the backport
patches. Only patch 010 required adaptation due to a fix backported in
5.7 in the same place where the patch fixed some whitespace issue.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

kamailio: bump to release 5.7.2

Bump kamailio to release 5.7.2 to make it easier to backport PCRE2
patches.

Drop upstream patch related to time_t and python3 fixes.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

kamailio: add patch fixing fragile kamcmd

Add patch fixing fragile kamcmd where output bin can be renamed to
invalid names due to ENV variable clash.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

sipgrep: Move package to PCRE2

Add patch to convert the package to PCRE2 as PCRE is EOL and won't
receive any security updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

dahdi-linux: bump to latest git head

This compiles with newer kernels now.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

yate: Update yate script to use an nftables set

By using an nftables set in this script it's easier to install
and use this script now that OpenWrt uses nftables by default.

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

Merge pull request #831 from micmac1/fs-vpx-CVE-2023-5217

freeswitch: add patches for CVE-2023-5217 & CVE-2023-44488 in bundled libvpx

freeswitch: add patches for CVEs in bundled libvpx

CVE-2023-5217
CVE-2023-44488

Patches are for bundled libvpx, see [1].

[1] https://github.com/signalwire/freeswitch/issues/2258

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #829 from Rondom/rondom-add-cpe-ids

Add CPE ID for asterisk and pjproject

pjproject: Add PKG_CPE_ID

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

asterisk: Add PKG_CPE_ID

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

Merge pull request #826 from micmac1/fs-1.10.10

freeswitch: bump to 1.10.10

freeswitch: bump to 1.10.10

- bump to 1.10.10
- remove TARGET_CFLAGS workarounds
- remove BROKEN from modules av & python3
- remove 500-libshout-deprecated.patch
- refresh other patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

signalwire-client-c: bump to 2.0.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libks: bump to 2.0.2

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.16

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

spandsp3: bump to commit from June 16th

Same commit is used by freeswitch 1.10.10 for Windows.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #822 from micmac1/ast-iax2-crash

asterisk: add upstream patch against iax2 crash

asterisk: add upstream patch against iax2 crash

Reported by Sergio in issue #821. This adds upstream patch for the
crash. See upstream issue [1] for details.

[1] https://github.com/asterisk/asterisk/issues/180

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #820 from kuanyili/replace-autorelease

treewide: replace AUTORELEASE with real PKG_RELEASE

treewide: replace AUTORELEASE with real PKG_RELEASE

Based on Paul Fertser <fercerpav@gmail.com>'s guidance:
Change AUTORELEASE in rules.mk to:
```
AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))
```

then update all affected packages by:
```
for i in $(git grep -l PKG_RELEASE:=.*AUTORELEASE | sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
make package/$i/clean
done
```

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>

Merge pull request #817 from micmac1/pj2131

pjproject: bump to 2.13.1

pjproject: bump to 2.13.1

1. add "/refs/tags" to PKG_SOURCE_URL, otherwise the downloaded file is
   broken now
2. bump minor version, includes security related fixes, see [1], [2] and
   [3]

[1] https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w
[2] https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr
[3] https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #815 from micmac1/ast-20.3.0

asterisk: bump to 20.3.0

asterisk: bump to 20.3.0

- bump to 20.3.0
- new modules: app-broadcast, app-if, app-signal, func-export,
  res-pjsip-aoc and res-pjsip-rfc3329
- remove "--without-vpb", not available anymore
- add configuration file for res-http-media-cache
- drop libsrtp2 from res-pjproject dependencies, see changes in
  pjproject package
- refresh patches
- add upstream patch
  180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch to fix
  build [1]

[1] https://github.com/asterisk/asterisk/issues/149

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: bump to 2.13

- bump to 2.13
- new option "--disable-libsrtp" now available so we can get rid of
  dependency on libsrtp2 (asterisk's SRTP support doesn't depend on pjproject)
- new option "--disable-upnp"
- 0007-execinfo.patch not required anymore, pjproject now checks for
  __GLIBC__
- sync patches with asterisk 20.3.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #812 from micmac1/kam-py-3.11-patches

kamailio: add patches for app_python3

Merge pull request #811 from micmac1/fs-py-3.11-broken

freeswitch: mark mod-python3 BROKEN

kamailio: add patches for app_python3

Python was updated to 3.11 and app_python3 doesn't compile anymore.
This commit adds three upstream patches to resolve this.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

freeswitch: mark mod-python3 BROKEN

mod-python3 is not compatible with Python 3.11 currently, mark it
BROKEN.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #810 from micmac1/fs-musl-1.2.4

freeswitch: fix compile against musl-1.2.4

freeswitch: fix compile against musl-1.2.4

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

dahdi-linux: add multiple patch fixing compilation warning

Add multiple patch fixing compilation warning and obvius code bug.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

rtpengine: add patch fixing compilation warning for kernel module

Add patch fixing compilation warning for kernel module.
Always dynamically allocate buffer for proc_control_read_write.
Fix compilation warning:
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c: In function 'proc_control_read_write':
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c:3573:1: error: the frame size of 1272 bytes is larger than 1024 bytes [-Werror=frame-larger-than=]
 3573 | }
      | ^

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #807 from micmac1/ci-up

CI: sync up with changes in packages repo

CI: sync up with changes in packages repo

Catch up with the changes in the packages repository. All changes are
manual cherry picks from the packages repo and listed below.

ci: update github actions to v3

Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 52570d4242822e3db678f5484c2ca3e72f485d52)

CI: deprecate $(AUTORELEASE) via comments

Autorelease causes some issues like heavy bandwidth usage as well as
non-deterministic package releases whenever someone doesn't use the full
git log.

With this comment all modified packages are checked and if they use
the autorelease feature, kindly comment to the user to change that.

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>
[ move check to separate workflow to handle ci limitation ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 61d59fd54254b97218aa4e861b1f933d5c5e0bc4)

ci: only comment AUTORELEASE deprecation if exists

If it doesn't exists, don't confuse the contributors.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 75ff4ba358aa0357f0af62cb980568bdc8d390a1)

github-ci: error on any shell errors

Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)

CI: update build architectures

Removed arc_archs - archs38 was marked as source-only [1].
Renamed powerpc_8540 to powerpc_8548 [2].

1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351
2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 29041e8f8eb42dcd8eee03602348b39dbf9d0c70)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #806 from dhewg/buildflags

kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16

Merge pull request #802 from cotequeiroz/baresip

baresip: fix parallel build

Merge pull request #805 from micmac1/sccp-autoconf-2.70

asterisk-chan-sccp: autoconf fixes

kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16

See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>

asterisk-chan-sccp: autoconf fixes

Since OpenWrt updated autoconf to 2.71 configure fails, because
"$ac_dir" is now empty when configure attempts to run
"./tools/versioncheck". With previous autoconf "$ac_dir" contained
"autoconf" at this point in the script.

As a workaround "$ac_dir" is replaced with "$ac_aux_dir", which
incidentally contains "autoconf".

Also a build dependency is added for gettext-full, as it provides
iconv.m4. Previously this was provided by libiconv, but not anymore.
Without iconv.m4 autoreconf fails.

Some patches were refreshed to allow CI to pass.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #804 from micmac1/fs-1109

freeswitch: bump to 1.10.9

freeswitch: bump to 1.10.9

ZRTP support removed as it was dropped upstream.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

spandsp3: bump to latest commit

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.14

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libks: bump to 1.8.2

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #803 from cotequeiroz/OpenSSL3

freeswitch,coturn: Prepare for OpenSSL 3.0 upgrade

baresip: fix parallel build

Include an upstream patch to fix random parallel build failures, such
as:

  CC [M]  build-arm/modules/ctrl_dbus/ctrl_dbus.o
modules/ctrl_dbus/ctrl_dbus.c:69:10: fatal error: baresipbus.h: No such
file or directory
   69 | #include "baresipbus.h"
      |          ^~~~~~~~~~~~~~

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

coturn: update to 4.6.1

Added a patch from Gentoo that brings compatiblity with OpenSSL 3.0.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

freeswitch: allow building with OpenSSL 3.0

Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of
deprecated API.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #797 from micmac1/rtpe-lws-openssl

rtpengine: update libwebsockets dependency

rtpengine: update libwebsockets dependency

The rtpengine daemon requires lws_get_ssl(). This function is not
available in libwebsockets-mbedtls. This commit updates the dependency
to libwebsockets-openssl.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #795 from micmac1/sof-1.13.11

sofia-sip: bump to 1.13.11

sofia-sip: bump to 1.13.11

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #791 from micmac1/ast-20.0.1

asterisk: bump to 20.0.1

asterisk: bump to 20.0.1

Fixes

AST-2022-007
AST-2022-008
AST-2022-009

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: backport security fixes from 2.13

Backports two security fixes (c4d3498 and 450baca) from pjproject 2.13.
Source: asterisk 20.0.1.

Also drop AUTORELEASE as OpenWrt project wants to get rid of it.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #790 from micmac1/init-return

Treewide: Use return in init scripts instead of exit

rtpproxy: use return in init script

"check_ipaddr()" & "start_service()" are functions, hence "return"
should be used instead of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

kamailio: use return in init script

"check_listen()" & "start_service()" are functions, hence "return"
should be used instead of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

freeswitch: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

coturn: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

baresip: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

asterisk: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #789 from micmac1/fs-libshout-deprecated

freeswitch: workaround mod-shout compile failure

freeswitch: workaround mod-shout compile failure

The recent libshout update causes compile failures due to deprecation.
This works around it. Can be removed once issue is fixed upstream.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #785 from micmac1/ast20

asterisk: bump to 20.0.0 LTS

asterisk: bump to 20.0.0 LTS

No longer existing modules removed from OpenWrt Makefile. Same for
configure switches. Patches refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #784 from micmac1/kam562

kamailio: bump to 5.6.2

kamailio: bump to 5.6.2

- 4 new modules: misctest, posops, siprepo & slack
- 140-redis_use_pkg-config.patch refreshed
- 160-ldap-rename-private-function-ldap_connect.patch and
  170-core-add-support-for-time64-libcs.patch removed (applied
  upstream)
- 160-siputils-fix-time_t-warning-and-a-typo.patch added to fix time_t
  warning (sent upstream, see [1])

[1] https://github.com/kamailio/kamailio/pull/3266

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

kamailio: fix dep for keepalive module

Currently the dependency is in the wrong position.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

kamailio: add descriptions via BuildKamailioModule

The Makefile currently advertises that descriptions can be added by
specifying a string in argument 3 of BuildKamailioModule, but there's
actually no mechanism for this. This commit adds the missing pieces.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #783 from micmac1/fs-1.10.8

freeswitch: bump to 1.10.8

freeswitch: bump to 1.10.8

- minor version bump
- mod-dingaling, mod-unimrcp and apr-util got removed from source tar
  ball, prompting some cleanup
- patches refreshed

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libks: bump to 1.8.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #781 from micmac1/rtpengine-mqtt

rtpengine: add mqtt dep

rtpengine: add mqtt dep

rtpengine will use the lib if found, so add it.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #780 from micmac1/rtpengine-10.5.2.6

rtpengine: bump to 10.5.2.6

rtpengine: bump to 10.5.2.6

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #777 from micmac1/sof-1.13.9

sofia-sip: bump to 1.13.9

Merge pull request #778 from micmac1/sngrep-1.6.0

sngrep: bump to 1.6.0

sngrep: bump to 1.6.0

- use pcre2 instead of pcre
- add zlib support

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.9

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #776 from micmac1/ast-18.4

asterisk: bump to 18.14.0 (includes pjproject bump)

asterisk: bump to 18.14.0

- add new modules
- res-geolocation depends on asterisk being built with libxlt support,
  but to make libxslt a general dependency is probably not a good idea
  for small devices, so this adds a config option
  ASTERISK_LIBXSLT_SUPPORT that is off by default except on x86_64
  builds
- correct some module titles by removing the extraneous "support" string
- refresh patches
- 170-time-add-support-for-time64-libcs.patch,
  180_build-fix-bininstall-launchd-issue-on-cross-platfrom.patch and
  190-logger-workaround-woefully-small-BUFSIZ-in-MUSL.patch removed as
  included in upstream release
- added 170-menuselect-force-use-of-xml2-config.patch as upstream
  switched to use pkg-config for libxml2 detection, which would be fine,
  except OpenWrt's host libxml2 is static and Asterisk can't handle that

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: bump to 2.12.1

- add "--disable-android-mediacodec" to configure
- add EXCLUDE_APP=1 to "make" calls so some apps aren't built (speeds up
  the build a bit)
- drop "sed" call as no longer needed
- drop uclibc related patches
  (0002-uclibc-linker-unrecognized-options.patch and
  0003-non-gnu-pthreads.patch)
- update 0004-config_site.patch to sync up with Asterisk 18.14.0
- drop 0005-remove-hardcoded-lstdc++.patch as uclibcxx was removed from
  OpenWrt
- update 0006-fix-pkg_config-file.patch as there were some changes in
  this area upstream
- add 0007-execinfo.patch to prevent errors due to missing <execinfo.h>
- sync patches with 18.14.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #775 from micmac1/chan-dongle-iconv-update

asterisk-chan-dongle: adapt BUILD_NLS handling

asterisk-chan-dongle: adapt BUILD_NLS handling

openwrt recently stopped using libiconv-stub in the BUILD_NLS=n case.
Instead the libc's iconv has to be used.

This commit changes the iconv include path passed to
asterisk-chan-dongle for the BUILD_NLS=n case to
$(TOOLCHAIN_DIR)/include. That's where musl and glibc store iconv.h.

Also, the patch 200-fix-iconv-detection.patch gets replaced with a sed
script that only runs in the BUILD_NLS=y case.

And finally, $(AUTORELEASE) is added.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #773 from micmac1/fs-gcc-12

freeswitch: workaround for compile fail with gcc 12

freeswitch: workaround compile fail with gcc 12

An issue report already exists upstream [1].

[1] https://github.com/signalwire/freeswitch/issues/1670

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>