Currently a buffer with a fixed size of 8192 bytes is used. However the
result can potentially be larger, which leads to a truncated JSON
output on stdout. UDP packets, without compression and with IP
fragmentation, can be up to 64KiB large.

Instead of using a fixed size buffer on the stack ask the kernel first
about the size of the UDP data and allocate a buffer of appropriate size
on the heap before receiving the UDP data.

The issue was observed with a custom respondd provider.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
(cherry picked from commit 531937cf)

Prevents spurious build failures.

(cherry picked from commit 545d1cbb)

The stdout output of gluon-web scripts is directly sent to uhttpd,
becoming a part of the HTML output or even replacing HTTP status or
headers. The output of gluon-reconfigure is not supposed to end up
there.

While we're at it, also add an exec to avoid an unnecessary shell
process.

(cherry picked from commit eea49a28)

(cherry picked from commit bbc00017)

The OpenLayers JS/CSS download URL is dead. Update it to make the map
work again:

- Update from OpenLayers 5.2.0 to 5.3.0
- Switch from the obsolete rawgit.com URL to jsdelivr.net (rawgit.com
  was only redirecting to jsdelivr.net for the last few years anyways)
- Set a fixed commit in the URL, so the URL doesn't become outdated again

(cherry picked from commit 62b24ed7)

As gluon-web uses standard multipart/form-data requests, browsers don't
enforce any cross-origin restrictions. To prevent malicious injection of
POST requests into the config mode, match the Origin header against the
Host header of the request.

(cherry picked from commit a83466be)

Actually raise an error and turn it into an HTTP 400 return code when
something goes wrong, rather than ignoring the error.

We also improve the conditions under which errors are thrown before
pump() is called: We don't need to check for the multipart/form-data
content-type twice, and a POST without this content-type is now always
an error.

(cherry picked from commit f3960eeb)

Having a trailing newline is nice when viewing the returned data in a
terminal.

(cherry picked from commit de43b306)

This was a remnant of LuCI that was never used in gluon-web.

(cherry picked from commit 94519cfc)

Using apt in scripts is discouraged. Also add an update to hopefully fix
the lua-check installation failure in CI.

(cherry picked from commit c75d90d9)

Fixes: 1cb0fc84 ("gluon-status-page: swap bandwidth limits (#2304)")
Resolves #2370

(cherry picked from commit 7427ba22)

The network.wireless status ubus call only returns the configured
channel from UCI, breaking the status page in outdoor mode, where the
configuration contains 'auto' instead of a number.

Fixes: 0d3fa6b5 ("gluon-status-page: use ubus to get radio channels")
Closes #2336

(cherry picked from commit 201e1597)

(cherry picked from commit 1944ea0e)

In js `return` does behave like `continue` in a forEach() iteration.
The fixed function was intended to return nothing on error and does so
now, instead of a shorter (useless) array like before.

(cherry picked from commit 8c85be21)

(cherry picked from commit 1cb0fc84)

Fixes the display of client counts, which are numbers and not strings
in the respondd data.

Fixes: 3a885a1b ("gluon-status-page: make "gateway nexthop" a link (#2278)")
(cherry picked from commit a3572784)

Do not depend on the respondd-airtime module just to get the configured
channels. This removes the display of the frequency in addition to the
channel, as it is not readily available.

In addition, the translation string is improved to allow for text after
the channel number.

(cherry picked from commit 0d3fa6b5)

This code is usually running on an embedded CPU without FPU. In
addtition to its inefficience, the algorithm is also much harder to
understand.

Replace the logarithm formula with a simple loop.

(cherry picked from commit f2e0f7e3)

(cherry picked from commit dcb8738a)

With this commit, the gateway nexthop is now a clickable link, that leads
to the status page of the nexthop.

(cherry picked from commit 3a885a1b)

It was found that a one second timeout for nodeinfo data may be too low,
so that when a node is otherwise occupied that timeout may be reached
too often.

The nodeinfo query response is also vital to the status-page base
template, so that when it times out, the site will be turned in a broken
state, that it cannot recover from.

Fixes: #2256
(cherry picked from commit 76185e3a)

The site.mk target was only evaluated after the whole makefile was
parsed. This caused the GLUON_DEPRECATED error to be emitted first
(hiding the more helpful message that no site config was found) on Gluon
2021.1.x, where GLUON_DEPRECATED is used in a toplevel if in targets.mk.

By moving the check from recipe context to the toplevel, we ensure that
it is evaluated during parsing.

(cherry picked from commit 286d07b3)

81d0b4a9f4 kernel: bump 4.14 to 4.14.259
1d94f72439 kernel: bump 4.14 to 4.14.258
cc8c1be438 mac80211: Update to version 4.19.221
554f1b89aa iproute2: m_xt.so depends on dynsyms.list
f14bc5cf56 uboot-lantiq: danube: fix hanging lzma kernel uncompression #2
8fb714edd6 uboot-lantiq: danube: fix hanging lzma kernel uncompression
b5b526285a wireless-regdb: update to version 2021.08.28
a5c479a200 wireless-regdb: update to version 2021.04.21
b9f866825f tools/m4: update to 1.4.19
662fe6a6ee kernel: bump 4.14 to 4.14.254
5e8b9624f1 ar71xx: mikrotik: rb91x: fix 10M ethernet link speed
c72ea2a6c7 uboot-lantiq: fix sha1.h header clash when system libmd installed
93a48cb1a0 kernel: bump 4.14 to 4.14.248
123d12eada mac80211: Update to backports-4.19.207-1
31a2d41d64 sdk: fix missing include directories
556d165dda uboot-zynq: fix dtc compilation on host gcc 10
f33dc315cb uboot-tegra: Fix build with GCC-10 as host compiler
f31bb35b63 uboot-mvebu: Fix build with GCC-10 as host compiler
e8cf46ebba uboot-layerscape: fix dtc compilation on host gcc 10
d059ce28f5 uboot-kirkwood: Fix build with GCC-10 as host compiler
af5c8856f8 uboot-sunxi: Fix build with GCC-10 as host compiler

Signed-off-by: David Bauer <mail@david-bauer.net>

* modules: use v2021.1.x Gluon package branch

* modules: update Gluon packages

015408e respondd-module-airtime: move const specifier to the right location
d068e7d respondd-module-airtime: remove incorrect fprintf argument
97981c2 respondd-module-airtime: remove PHY ID again
8dbd089 respondd-module-airtime: improve error handling

Signed-off-by: David Bauer <mail@david-bauer.net>

It was noticed that various devices had not the correct board-2.bin
installed. This was caused by a typo in the package name. The ath10k driver
(unfortunately) is then loading a completely unrelated BDF from the
ath10k-board-qca4019 board-2.bin. It is usually a rather bad idea to use
calibration data from a different board - but the effects depend on the
actual device.

For the PA1200, it was mostly noticed by the bad 2.4GHz performance.

Signed-off-by: Sven Eckelmann <sven@narfation.org>

9882a54c48 kernel: bump 4.14 to 4.14.245
fdea0036a2 openssl: bump to 1.1.1l
40c03b101c openssl: use --cross-compile-prefix in Configure

Signed-off-by: David Bauer <mail@david-bauer.net>

9d082556fe kernel: bump to 4.14.244

Signed-off-by: David Bauer <mail@david-bauer.net>

7378c94927 kernel: bump to 4.14.243
cfc1602a1e OpenWrt v19.07.8: revert to branch defaults
31f2f76cd5 OpenWrt v19.07.8: adjust config defaults
ef56c85848 ubus: update to version 2021-07-01
796bf50e8e ubus: update to version 2021-06-03
92e341d632 ubus: backport SOVERSION support
e902d11de9 kernel: bump 4.14 to 4.14.241
ceb8821a3d ath10k-ct: add security fixes
71fa524e1b base-files: fix /tmp/TZ when zoneinfo not installed
c88bdb8294 base-files: fix zoneinfo support
15612706c9 mac80211: distance config: allow "auto" as a value
ec76c365c1 gitignore: add .ccache folder
bdd7faca8d kernel: bump 4.14 to 4.14.236

Signed-off-by: David Bauer <mail@david-bauer.net>

docs: add Gluon v2021.1.1 release notes

Signed-off-by: David Bauer <mail@david-bauer.net>

825aa0c respondd-module-airtime: fix null pointer deref

(cherry picked from commit 19381a23)

64148a9baf14 lua-jsonc: add host build support
c2623391bf42 lua-jsonc: do not link against liblua

(cherry picked from commit 8a41d8d7)

The OpenWrt routing feed was moved to the OpenWrt GitHub org.

Update the URL, as the old one might not work in the future.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 3f8d12f5)

(cherry picked from commit 0b00ed91)

read_stdout can return NULL and thus the return value need to be checked
prior to accessing it.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 344f8a47)

In case the limit_ingress or limit_egress options are not present in
gluon's mesh_vpn section the respondd provider compares a string literal
with a NULL pointer, crashing respondd.

Check both pointers prior to comparing them in order to mitigate this
issue.

Suggested-by: Matthias Schiffer <mschiffer@universe-factory.net>
Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 7e1e9fe2)

(cherry picked from commit f7e473ed)