Commit graph

1409 commits

Author SHA1 Message Date
Sebastian Kemper
64f5323a28 spandsp3: prevent host include search paths
Note the host include path for libxml2 below. This shouldn't cause an
issue because libxml2 is never used. But better safe than sorry as the
configure script probes other host include paths as well.

/bin/sh ../libtool  --tag=CC   --mode=compile ccache_cc -DHAVE_CONFIG_H -I.  -I.. -I/openwrt/staging_dir/target-mips_24kc_musl/usr/include -I/openwrt/staging_dir/toolchain-mips_24kc_gcc-10.2.0_musl/usr/include -I/openwrt/staging_dir/toolchain-mips_24kc_gcc-10.2.0_musl/include/fortify -I/openwrt/staging_dir/toolchain-mips_24kc_gcc-10.2.0_musl/include  -I/usr/include/libxml2 -DNDEBUG -Wunused-but-set-variable -std=gnu99 -ffast-math -Wall -Wunused-variable -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -fvisibility=hidden -DHAVE_VISIBILITY=1  -Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -mips16 -minterlink-mips16 -fmacro-prefix-map=/openwrt/build_dir/target-mips_24kc_musl/spandsp3-2020-08-14-6ec23e5a=spandsp3-2020-08-14-6ec23e5a -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro   -MT dds_float.lo -MD -MP -MF .deps/dds_float.Tpo -c -o dds_float.lo dds_float.c

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-20 13:46:01 +02:00
micmac1
10c68488ee
Merge pull request #570 from micmac1/1907fs10105
(19.07) freeswitch-stable: bump to 1.10.5
2020-09-17 19:15:38 +02:00
Sebastian Kemper
f7e7543393 freeswitch-stable: bump to 1.10.5
Includes some backports from master.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-11 14:01:37 +02:00
Sebastian Kemper
671b95efac spandsp3: backport from master
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-11 14:01:02 +02:00
Sebastian Kemper
be616aadf9 sofia-sip: backport from master
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-11 14:00:45 +02:00
micmac1
91b34e7eef
Merge pull request #539 from micmac1/fs-check-19
[19.07] freeswitch-stable: prevent libcheck use
2020-06-10 20:22:21 +02:00
Sebastian Kemper
377fd29660 freeswitch-stable: prevent libcheck use
Currently we disable some sofia tests to prevent build failure. An issue
was actually raised upstream ([1]) where this was discussed.

This cleared up some doubts. For instance it was established that
libcheck is used as a test framework, if the lib is detected. In OpenWrt
libcheck is available, so it may be in staging during the freeswitch
build.

Upstream also mentioned that libcheck is not always compatible with
freeswitch, which depends on the libcheck version.

This commit prevents libcheck detection. This is nicer than explicitly
disabling tests that fail.

[1] https://github.com/signalwire/freeswitch/issues/681

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-06-09 19:06:24 +02:00
micmac1
86a38f1cd4
Merge pull request #535 from micmac1/fs110319
[19.07] freeswitch-stable: bump to 1.10.3
2020-05-30 07:10:03 +02:00
Sebastian Kemper
e89be69988 freeswitch-stable: bump to 1.10.3
Minor version bump. Backport from master.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-26 21:38:43 +02:00
Jiri Slachta
036cd451c3
Merge pull request #513 from micmac1/ast-1907-keys
[openwrt-19.07] asterisk-16.x: update keys directory in init script
2020-04-04 10:15:59 +02:00
Sebastian Kemper
163faeff02 asterisk-16.x: update keys directory in init script
Currently the init script creates "/var/lib/asterisk/keys". But the
default keys directory is actually "/usr/share/asterisk/keys".

This commit amends the init script.

Resolves: #512

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-03 20:10:44 +02:00
Jiri Slachta
7d86caa898
Merge pull request #506 from BKPepe/fix-patch-for-aslr-pie
asterisk-16.x: 056-fix-check_expr2-build.patch - rebase
2020-03-08 13:17:00 +01:00
Josef Schlehofer
a92450d77b
asterisk-16.x: 056-fix-check_expr2-build.patch - rebase
Fixes: 1ea2095081 (asterisk-16.x: fix
compile with PKG_ASLR_PIE)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-07 23:48:31 +01:00
Jiri Slachta
2d2ade3b8e
Merge pull request #505 from BKPepe/fix-hardening-asterisk-19.07
[19.07] asterisk-16.x: fix compile with PKG_ASLR_PIE
2020-03-07 13:11:29 +01:00
Sebastian Kemper
1ea2095081
asterisk-16.x: fix compile with PKG_ASLR_PIE
CFLAGS aren't used when compiling objects for check_expr2. This commits
adds the flags, which fixes the compilation when PKG_ASLR_PIE is
enabled. Note: The STANDALONE define is removed because it is already
defined in _ASTCFLAGS.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 357949967f)
2020-03-07 11:58:39 +01:00
micmac1
6f95d6ab3f
Merge pull request #501 from micmac1/19.07-fs-1102
[19.07] freeswitch-stable: bump to 1.10.2
2020-01-01 15:24:49 +01:00
Sebastian Kemper
625b2c81a0 freeswitch-stable: bump to 1.10.2
Patches refreshed, two patches removed (included upstream), fixed one
typo (will send pull request to upstream if nobody did so yet).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 15:18:10 +01:00
micmac1
f920139fea
Merge pull request #498 from micmac1/1907-fix-weak-md
[19.07] freeswitch-stable: fix weak md in gentls_cert
2019-12-20 10:11:54 +01:00
Sebastian Kemper
549cad72b2 freeswitch-stable: fix weak md in gentls_cert
gentls_cert generates certificates that are deemed too weak by Debian's
OpenSSL (on Buster and up). This patch upgrades the message digest to
SHA256 to address this.

See patch for details. Sent upstream ([1]).

[1] https://github.com/signalwire/freeswitch/pull/126

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-20 10:01:26 +01:00
micmac1
483bbd79b9
Merge pull request #496 from micmac1/backport-sigwire
[19.07] freeswitch-stable: backport mod-signalwire + libs from master
2019-12-17 19:10:45 +01:00
Sebastian Kemper
801735a0da freeswitch-stable: add mod_signalwire
This plugin allows to make a connection to the SignalWire CLOUD.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-17 19:06:46 +01:00
Sebastian Kemper
ff2bcbede5 signalwire-client-c: new package
signalwire-client-c is a dependency of mod-signalwire.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-17 19:05:06 +01:00
Sebastian Kemper
86e5f18408 libks: new package
libks is a dependency of signalwire-client-c.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-17 19:04:53 +01:00
Jiri Slachta
505fb3846d
Merge pull request #488 from micmac1/19.07-AST-2019-006_007
[19.07] asterisk-16.x: add fixes for AST-2019-006 and 007
2019-12-01 22:21:05 +01:00
micmac1
44d82fa226
Merge pull request #493 from micmac1/fs-vpx-cve-1907
(19.07) freeswitch-stable: fix libvpx CVEs + T38 patch
2019-11-29 21:15:49 +01:00
Sebastian Kemper
7dddd23802 freeswitch-stable: patch CVEs in included libvpx
Patch taken from Debian Buster, fixes:

CVE-2019-9232
CVE-2019-9325
CVE-2019-9371
CVE-2019-9433

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-29 20:58:00 +01:00
Sebastian Kemper
a4478106ab freeswitch-stable: add T.38 reINVITE fix
Patch sent upstream. It's a one-liner with a big explanation within the
patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-29 20:38:56 +01:00
Sebastian Kemper
fddfcd6b9e freeswitch-stable: remove warning
The warning can be removed, as 19.07 is not affected.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-29 20:37:41 +01:00
Sebastian Kemper
90a0684e60 asterisk-16.x: add fixes for AST-2019-006 and 007
https://downloads.asterisk.org/pub/security/AST-2019-006.html
https://downloads.asterisk.org/pub/security/AST-2019-007.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-22 18:53:30 +01:00
Jiri Slachta
821bcb7c58
Merge pull request #456 from micmac1/AST-2019-004-19.07
[19.07] asterisk-16.x: add patch for AST-2019-004
2019-09-20 18:18:10 +02:00
Jiri Slachta
b2bbba4be1
Merge pull request #454 from micmac1/1907-baresip-recurs
[19.07] baresip: fix recursive dependency
2019-09-20 18:03:49 +02:00
Sebastian Kemper
5b25b7821d asterisk-16.x: add patch for AST-2019-004
Add patch for a remote crash vulnerability. Crash can occur when
negotiating for T.38 with a declined stream.

CVE-2019-15297

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-05 19:58:55 +02:00
Sebastian Kemper
b2e7db645e baresip: fix recursive dependency
Since OpenWrt commit e82a4d9cfb ("config: regenerate *_shipped sources")
a few recursive dependencies have been discovered that were not visible
before.

$ make menuconfig
tmp/.config-package.in:103098:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:103098: symbol PACKAGE_baresip-mod-pulse depends on PACKAGE_baresip-mod-pulse
tmp/.config-package.in:121863:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121863: symbol PACKAGE_pulseaudio-profiles depends on PACKAGE_pulseaudio-profiles
tmp/.config-package.in:121878:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121878: symbol PACKAGE_pulseaudio-tools depends on PACKAGE_pulseaudio-tools

The recursive dependencies were reported at [1] and [2].

This commit addresses the recursive dependency of baresip-mod-pulse. The
new dependency string may look a bit peculiar, but it works and when
specified like this pulseaudio (when selected) doesn't get compiled
automatically when the intention is only to build baresip with mod-pulse
disabled (which in general is why we have the "patsubst" in the module
builder - but this is only triggered when the dependency has a leading
"+").

[1] https://github.com/openwrt/packages/issues/9300
[2] https://forum.openwrt.org/t/make-menuconfig-errors-this-day/38673/5

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-04 22:37:49 +02:00
micmac1
26b6fe1356
Merge pull request #453 from micmac1/19.07fs1.10.1
freeswitch-stable: import 1.10.1 from master
2019-09-01 11:57:30 +02:00
Sebastian Kemper
b755b01c70 freeswitch-stable: import 1.10.1 from master
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-01 11:51:05 +02:00
Jiri Slachta
956289cb10
Merge pull request #440 from jslachta/asterisk-13-removal-1907
asterisk-13.x: move package to abandoned packages
2019-07-14 20:35:28 +02:00
Jiri Slachta
996dd2bd21 asterisk-13.x: move package to abandoned packages
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2019-07-14 20:31:06 +02:00
Jiri Slachta
cb61e5e368
Merge pull request #437 from micmac1/19-ast13-AST-2019-002-and-003
(for 19.07) asterisk-1{3,6}.x: fix AST-2019-002 & AST-2019-003
2019-07-12 22:14:22 +02:00
Sebastian Kemper
ecde326753 asterisk-16.x: fix AST-2019-002 & AST-2019-003
https://downloads.asterisk.org/pub/security/AST-2019-002.html
https://downloads.asterisk.org/pub/security/AST-2019-003.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-07-12 20:44:53 +02:00
Sebastian Kemper
f4eaf906cc asterisk-13.x: fix AST-2019-002 & AST-2019-003
https://downloads.asterisk.org/pub/security/AST-2019-002.html
https://downloads.asterisk.org/pub/security/AST-2019-003.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-07-12 20:43:16 +02:00
Jiri Slachta
a5b136487e freeswitch: move to packages-abandoned repository
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2019-06-16 13:22:44 +02:00
micmac1
fdd274e1df
Merge pull request #428 from micmac1/fs-186
freeswitch-stable: bump to 1.8.6
2019-06-10 15:18:12 +02:00
Sebastian Kemper
0d4bfdaf68 freeswitch-stable: bump to 1.8.6
- refresh patches
- drop RAND_bytes patch which was upstreamed
- fix ei_init detection
- add opusfile module

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-06-10 14:44:31 +02:00
micmac1
470eb8e532
Merge pull request #426 from micmac1/fs-init-awk
freeswitch-stable: init script update
2019-05-12 14:07:37 +02:00
Sebastian Kemper
1c2023bad2 freeswitch-stable: init script update
- added trailing '--' to logger to make it foolproof
- the script now checks if user and group exist
- directory creation is now done via awk script (more robust)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-12 13:57:56 +02:00
Jiri Slachta
3e73624f2c
Merge pull request #425 from micmac1/sccp-gcc8
asterisk-chan-sccp: fix gcc8 compiles
2019-05-08 20:55:03 +02:00
Sebastian Kemper
31ede68aac asterisk-chan-sccp: fix gcc8 compiles
Patch applied upstream. Fixes compiles for arc targets, which already
use new gcc8 toolchain.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-08 20:15:40 +02:00
Jiri Slachta
4d73f675bd
Merge pull request #422 from micmac1/ast16-mod-desc
asterisk-16.x: update module descriptions
2019-05-06 20:53:25 +02:00
Jiri Slachta
cf51b9b0ff asterisk-15.x: drop support for asterisk-15.x
This commit drops support for asterisk-15.x in favor
of asterisk-16.x.

Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2019-05-05 22:10:53 +02:00
Jiri Slachta
0dd32f9d51
Merge pull request #424 from micmac1/16lantiq
asterisk-16.x-chan-lantiq: add compile fix
2019-05-05 10:37:24 +02:00