Some security issues were fixed. Upstream labelled them as follows:
GHSA-79jq-hh82-cv9g: Fix Out-of-bound read in sip_method_d
GHSA-g3x6-p824-x6hm: Fix Out-of-bound read in url_canonize2 and
url_canonize3
GHSA-8w5j-6g2j-pxcp: Fix Heap-buffer-overflow in parse_descs and
parse_message
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 1efc4f3f98)
Since upstream commit b40c4d59b1dd803cad79060fb5b5a48d249ba578
"--disable-xmldoc" does no longer prevent the linking to libxslt, if
available. If that's the case one is greeted with the following error:
Package asterisk is missing dependencies for the following libraries:
libxslt.so.1
This commit explicitly disables the use of libxslt, to avoid the
dependency.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 64a1d2faef)
Add a patch from Philip that got upstreamed. This is in reference to
issue #737.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 23925c22f8)
This replaces the current patch with the one upstreamed by Philip.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit c1cb4fd1a4)
FS is not yet ready for FFMPEG 5.0. Upstream has a related issue already
([1]).
Also move to AUTORELEASE.
[1] https://github.com/signalwire/freeswitch/issues/1560
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
utils/const_str_hash is called by rtpengine build system. The Perl
script uses shebang "#!/usr/bin/perl" and depends on perl-IPC-Cmd. If
this is missing the build will fail:
../utils/const_str_hash < "control_ng.c" > "control_ng.strhash.c"
Can't locate IPC/Cmd.pm in @INC (you may need to install the IPC::Cmd module) (@INC contains: /usr/local/lib64/perl5/5.34 /usr/local/share/perl5/5.34 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at ../utils/const_str_hash line 6.
BEGIN failed--compilation aborted at ../utils/const_str_hash line 6.
make[4]: *** [../lib/common.Makefile:46: control_ng.strhash.c] Error 2
OpenWrt does not depend on perl-IPC-Cmd being available, so this commit
makes rtpengine build depend on perl/host, which provides this Perl
module.
Closes#748
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
This includes time64 fixes plus allows reproducible builds.
Also switch to $(AUTORELEASE)
Closes#613Closes#742
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
kamailio macos build fails due to kamailio Makefile checks OS
(`uname -s`) and OSREL (`uname -r`). If build host is not Linux,
then these checks will provide different results, but OpenWrt is
always Linux so target OS should be always Linux.
This patch explicitly specifies OS=linux and OSREL=$(LINUX_UNAME_VERSION)
to avoid using build host values for target build.
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
Most gstreamer packages aren't build when the target does not have
AUDIO_SUPPORT. This can be seen with realtek target (4kec).
This commit makes the gst plugins depend on AUDIO_SUPPORT, because
otherwise the build dies with this error:
Package baresip-mod-gst-video is missing dependencies for the following libraries:
libgstapp-1.0.so.0
Note: compiling baresip on a target without AUDIO_SUPPORT may be
questionable anyway.
Close#730
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
yate configure script uses `uname -s` to determine OS and changes
build logic regarding to build host OS. OpenWrt is always Linux so
it should be built as for Linux.
This patch uses fakeuname tool to pass `uname -s` checks as Linux
on macos build host.
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
coturn build fails on macos due using `ar -r` by default, but macos
system `ar` is not compatible with the objects generated by OpenWrt
GCC toolchain.
This patch redefines ARCHIVERCMD="$(TARGET_AR) -r" to make it possible
to build coturn on macos build host.
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
coturn package is reproducible unless the build OS is Ubuntu
coturn configure script detects Ubuntu build host([1]) and changes
compilation flags so produced OpenWrt binaries are different on
Ubuntu and any other build OS (e.g. Debian). It might be necessary
for native build but this check is not valid for cross-compiling.
This patch set LIBEV_OK=1 to generate the same binaries on Ubuntu
and other build OS
Refs:
[1] https://github.com/coturn/coturn/blob/upstream/4.5.2/configure#L426-L435
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
libpri can not be built on macos for OpenWrt Linux target due to:
1. Makefile uses `ar` and `ranlib` (without using make variables).
MacOS system ar and ranlib are not compatible with the objects
generated by OpenWrt GCC toolchain. This commit adds patch to
add an ability to redefine `ar` and `ranlib` tools.
Upstream issue: https://issues.asterisk.org/jira/browse/PRI-188
2. Makefile detects Darwin using `uname -s` and changes build logic
but it is not need for cross-platfrom build. This commit
redefines OSARCH=Linux in OpenWrt Makefile
3. After redefining OSARCH=Linux, libpri Makefile uses /sbin/ldconfig
that does not exist on MacOS. This commit redefines LDCONFIG=ldconfig
in OpenWrt Makefile to use ldconfig provided by OpenWrt.
Patch '001-fix-include-signal-h-warning.patch' was refreshed to pass
CI checks. The payload of this patch was not changed.
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
The upstream commit 6073c91fcf0a46a1525d500c274fa5ab96af7dda broke
non-quectel devices due to the channel driver unable to complete
initialization.
This is fixed in the latest upstream commit.
Signed-off-by: Shaleen Jain <shaleen@jain.sh>
If there is enabled CONFIG_BUILD_NLS, coturn can not be compiled.
It fails with the following error:
Package coturn is missing dependencies for the following libraries:
libintl.so.8
But thanks to @micmac1, it was realized that libintl
is not used anywhere in coturn, that's why there was sent PR to upstream.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
This was upstreamed recently. All twelve commits were squashed into a
single patch.
Also the Makefile is switched to AUTORELEASE.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
With the recently updated openldap, kamailio fails to build. This adds
an upstreamed patch to resolve this.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
