summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #490 from micmac1/17.01-AST-2019-006_007_008lede-17.01Jiri Slachta2019-12-014-1/+155
|\ | | | | [17.01] asterisk-13.x: add fixes for AST-2019-006, 007 & 008
| * asterisk-13.x: add fixes for AST-2019-006, 007 & 008Sebastian Kemper2019-11-224-1/+155
|/ | | | | | | | https://downloads.asterisk.org/pub/security/AST-2019-006.html https://downloads.asterisk.org/pub/security/AST-2019-007.html https://downloads.asterisk.org/pub/security/AST-2019-008.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #435 from micmac1/17-ast13-AST-2019-003Jiri Slachta2019-07-122-1/+40
|\ | | | | (for 17.01) asterisk-13.x: fix AST-2019-003
| * asterisk-13.x: fix AST-2019-003Sebastian Kemper2019-07-122-1/+40
|/ | | | | | https://downloads.asterisk.org/pub/security/AST-2019-003.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #375 from micmac1/AST-2018-009-17.01Jiri Slachta2018-09-212-1/+90
|\ | | | | (17.01) Fix for AST-2018-009
| * asterisk-13.x: fix for AST-2018-009Sebastian Kemper2018-09-202-1/+90
| | | | | | | | | | | | | | | | | | Add upstream fix for AST-2018-009: Remote crash vulnerability in HTTP websocket upgrade The vulnerability affects the res_http_websocket.so module. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #372 from micmac1/kama-led-cveJiri Slachta2018-09-212-1/+47
|\ \ | |/ |/| (LEDE 17.01) kamailio-4.x: add fix for CVE-2018-16657
| * kamailio-4.x: add fix for CVE-2018-16657Sebastian Kemper2018-09-122-1/+47
|/ | | | | | | | | | | | | | In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code. Patch from upstream. File paths amended for 4.x release. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #362 from micmac1/kam-cve-17.01-IIJiri Slachta2018-08-112-1/+29
|\ | | | | kamailio-4.x: add fix for CVE-2018-14767
| * kamailio-4.x: add fix for CVE-2018-14767Sebastian Kemper2018-08-072-1/+29
|/ | | | | | | | | | | | | CVE-2018-14767: "In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code." Patch from upstream. Path to msg_translator.c amended. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #341 from micmac1/AST-1701Jiri Slachta2018-06-282-1/+102
|\ | | | | (for lede-17.01) asterisk-13.x: patch AST-2018-008
| * asterisk-13.x: patch AST-2018-008Sebastian Kemper2018-06-252-1/+102
|/ | | | | | Patch from upstream for AST-2018-008. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #335 from guidosarducci/backport-lede-17.01Jiri Slachta2018-06-052-94/+89
|\ | | | | siproxd: backport procd switch and cleanup to lede 17.01
| * siproxd: restructure code and use procd for initguidosarducci2018-06-042-84/+89
| | | | | | | | | | | | | | | | | | | | Switch to use procd for init, with support for jails. Clean up code and restructure callback processing to be more robust and understandable. This also fixes a bug processing multiple siproxd config sections, as reported by Michael Kuron. Signed-off-by: Tony Ambardar <itugrok@yahoo.com> (cherry picked from master commit b65b20f6)
| * siproxd: don't apply default values already built-inguidosarducci2018-06-041-10/+0
|/ | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com> (cherry picked from master commit a3f6f176)
* Merge pull request #333 from micmac1/17.01-disable-ast-sounds-cacheJiri Slachta2018-05-271-2/+1
|\ | | | | asterisk-13.x: remove sounds cache
| * asterisk-13.x: remove sounds cacheSebastian Kemper2018-05-241-2/+1
|/ | | | | | | | | | | | | | | When there is no sounds cache declared the build system will not attempt to download any sound packs or their SHA1 checksums. This is to be preferred because: a) the build may occur offline, causing it to fail b) plain http is used by the build system for downloading There is no drawback here because the standard sound packs are included in the Asterisk source tarball already. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #327 from micmac1/backport-chan-lantiqJiri Slachta2018-05-092-0/+85
|\ | | | | asterisk13-chan-lantiq: backport to 17.01
| * asterisk13-chan-lantiq: backport to 17.01Sebastian Kemper2018-05-052-0/+85
| | | | | | | | | | | | Backports chan-lantiq to LEDE 17.01. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #307 from micmac1/kam-upJiri Slachta2018-03-213-21/+13
|\ \ | |/ |/| kamailio-4.x: bump to version 4.4.7
| * kamailio-4.x: bump to version 4.4.7Sebastian Kemper2018-03-213-21/+13
|/ | | | | | | | | | | | | - changed source URL to https - refreshed patches - removed upstreamed patch - upstream says that between 4.4.0 and 4.4.7 the "configuration file and database schema compatibility is preserved" - includes bug fixes, also for security issues in tmx (CVE-2018-8828) and lcr, details: https://www.kamailio.org/w/2018/03/kamailio-security-announcement-tmx-lcr/ Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #306 from guidosarducci/lede-17.01-siproxd-updateJiri Slachta2018-03-197-268/+201
|\ | | | | siproxd backport from master
| * siproxd: improve syslog messagesguidosarducci2018-03-181-0/+20
| | | | | | | | | | | | | | | | | | | | Use explicit ident string ("siproxd") instead of NULL, as the latter is not guaranteed to prepend the program name (e.g. unspecified in POSIX), and may result in syslog messages identified only by PID. Use consistent facility (LOG_DAEMON) across openlog() and syslog() calls. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: add usage comments, examples to default UCI configguidosarducci2018-03-181-0/+22
| | | | | | | | | | | | | | Explain default configuration options and potential firewall settings. Provide examples of using documented siproxd configuration directives. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: use UCI callback processing, reduce code sizeguidosarducci2018-03-181-171/+118
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switch to using callback functions for UCI config processing, and remove the unnecessary scan_interfaces() call together with related code. Instead of explicitly handling every possible siproxd config option, use callbacks to deal with those defined in the UCI config file, and directly handle only selected options with desired default values. This shrinks the init code by ~3.5 KB and simplifies updating to future siproxd versions with new options. (Note: this change exposed some long-standing, broken aspects of UCI callback handling, fixed in https://github.com/openwrt/openwrt/pull/805.) Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: update module install defineSebastian Kemper2018-03-181-2/+2
| | | | | | | | | | | | | | Use $(INSTALL_BIN) as the modules are installed by siproxd as executables. Remove the wildcards from this line as they're not needed. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * siproxd: update libltdl handlingSebastian Kemper2018-03-182-29/+3
| | | | | | | | | | | | | | | | | | Remove LIBLTDL from the Makefile as well as a patch related to LTDL. Both have in common that they accomplish absolutely nothing. Also explicitly disable the use of the internal libltdl. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * siproxd: use PKG_HASH and update copyright dateguidosarducci2018-03-181-2/+2
| | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: fix support for domain-specific proxiesguidosarducci2018-03-181-6/+3
| | | | | | | | | | | | | | | | | | Use lists for the config entries outbound_domain_{name,host,port}. This permits multiple outbound proxies and fixes: https://github.com/openwrt/telephony/issues/127 Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: update to version 0.8.2guidosarducci2018-03-185-39/+35
| | | | | | | | | | | | | | | | An upstream siproxd update was released after ~5 years, with bugfixes and new features. This package supports the new plugins and their config options, and updates required patches. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: use clearer runtime file and directory namesguidosarducci2018-03-181-8/+9
| | | | | | | | | | | | | | Use more conventional, clearer naming for config and registration files. This includes having distinct directories and specific file suffixes. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: add shell helper function to build config fileguidosarducci2018-03-181-102/+60
| | | | | | | | | | | | | | | | Using the append_conf_if_set() function removes much repetitive and error-prone code, reduces the source size by ~30%, and fixes a typo previously uncaught. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: clean up directory permissions, ownershipguidosarducci2018-03-181-7/+10
| | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: use reasonable logging level by defaultguidosarducci2018-03-181-1/+1
| | | | | | | | | | | | | | | | The previous default logging level is completely silent, making normal monitoring or troubleshooting impossible. Use the sane upstream default for logging which captures basic startup, shutdown and error messages. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * siproxd: use standard interface names by defaultguidosarducci2018-03-182-4/+19
|/ | | | | | | | Support using standard interface names and make "lan"/"wan" the defaults for inbound/outbound SIP traffic. This change makes siproxd more portable but preserves backwards compatibility for upgrades. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* Merge pull request #287 from micmac1/ast-up-for-17.01Jiri Slachta2018-02-277-29/+15
|\ | | | | Asterisk/pjproject updates for 17.01
| * asterisk-13.x: bump to 13.19.2Sebastian Kemper2018-02-266-26/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | No new features in this release. This is a bugfix release. - Fixes: AST-2018-004 AST-2018-005 - Remove res_pjsip_transport_management.so as it got moved into res_pjsip's core as per AST-2018-003. - Change to PKG_HASH. - Remove 003-disable-ast-xml-docs.patch, it doesn't apply anymore. Instead change --enable-xmldoc into --disable-xmldoc in the Makefile. - Refreshed patches. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * pjproject: bump 2.7.2Sebastian Kemper2018-02-261-3/+3
|/ | | | | | | | | | | Includes security fixes: 2094: Crash when receiving SDP with invalid fmtp attribute 2095: Crash when parsing SDP with an invalid media format description No further changes. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #268 from micmac1/kam4-for-1701Jiri Slachta2018-02-121-1/+0
|\ | | | | New PR: kamailio-4 on lede-17.01 buildfix
| * kamailio-4.x: remove non-existent moduleSebastian Kemper2018-02-111-1/+0
|/ | | | | | | dialog-ng does not exist. Remove the module line to stop the build failures. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #251 from micmac1/fix-dahdi-depJiri Slachta2018-01-241-0/+1
|\ | | | | dahdi-tools: Fix dahdi dependency on lede-17.01
| * dahdi-tools: fix dahdi-tools-libtonezone dependency on uClibcSebastian Kemper2018-01-231-0/+1
|/ | | | | | | | | | | | | Currently the package fails to build with this error: Package dahdi-tools-libtonezone is missing dependencies for the following libraries: libpthread.so.1 Makefile:97: recipe for target '/build/lede-17.01/slaves/phase2/arc_arc700/build/sdk/bin/packages/arc_arc700/telephony/dahdi-tools-libtonezone_2.11.1-2_arc_arc700.ipk' failed make[3]: *** [/build/lede-17.01/slaves/phase2/arc_arc700/build/sdk/bin/packages/arc_arc700/telephony/dahdi-tools-libtonezone_2.11.1-2_arc_arc700.ipk] Error 1 Add the dependecy accordingly. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #245 from micmac1/asterisk_II-for-17.01Jiri Slachta2018-01-2210-262/+200
|\ | | | | Asterisk part 2 for 17.01
| * chan-sccp-b: fix variant buildSebastian Kemper2018-01-162-10/+54
| | | | | | | | | | | | | | | | | | | | | | The variant builing is not working properly because PKG_BUILD_DIR is unset. This fixes that. Also the Makefile is cleaned up. LOW_MEMORY is not explicitly defined anymore because chan-sccp-b is getting the define from the Asterisk headers. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-g72x: fix variant buildSebastian Kemper2018-01-161-25/+11
| | | | | | | | | | | | | | | | | | | | Currently variant building isn't working properly because PKG_BUILD_DIR is not set. This commit fixes that. It also cleans up the Makefile, making it much simpler. The cleanups are already in master. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-chan-dongle: version bump, add variant for Asterisk 13Sebastian Kemper2018-01-166-178/+86
| | | | | | | | | | | | | | | | | | | | | | This commit adds VARIANT support. This is so that the module will also be available for Asterisk 13. The current version does not support Asterisk 13. So this commit also updates the package to use the (more recent) source from wdoekes on github, which is also used in master. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-11.x-chan-dongle: folder renameSebastian Kemper2018-01-165-0/+0
| | | | | | | | | | | | Rename the folder to asterisk-chan-dongle to prepare for VARIANT build. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #244 from micmac1/asterisk_I-for-17.01Jiri Slachta2018-01-2218-212/+1785
|\ \ | |/ |/| Asterisk part 1 for 17.01
| * asterisk-13.x: module updatesSebastian Kemper2018-01-161-21/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | This commit: - adds some missing descriptions - updates some module files (e.g. new sub modules) - adds/updates some module dependencies - adds some missing CONFIGURE_ARGS that are depending on module selections - enables fax support (spandsp) - adds res-xmpp (which seems it was just missed as CONFIGURE_ARGS for it exist) Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-13.x: change LOW_MEMORY and -march=native treatmentSebastian Kemper2018-01-162-0/+28
| | | | | | | | | | | | | | - LOW_MEMORY is known to cause sporadic crashes, disable it by default. - Prevent Asterisk from adding -march=native to CFLAGS. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
generated by cgit (git 2.46.0) at 2026-10-12 00:26:25 +0000