staging/blocktrron/tools, branch master

build: read full blocks from pipes in image headers

2026-10-14T16:40:19Z

Many image recipes write header fields with printf or echo piped into dd bs=N count=1 conv=sync. Bash writes the output of both line buffered, so a field holding a 0x0a byte reaches the pipe in two writes. If dd reads between them, it gets a short block, pads it with zeros due to conv=sync and stops due to count=1, so the rest of the field is lost. This depends on the scheduling of the builder, and the rebuilder has caught it in a ZNET header of the Zyxel WSM20: -00000000: 5a4e 4554 80cd 7900 530a 4132 530a 0000 ZNET..y.S.A2S... +00000000: 5a4e 4554 80cd 7900 530a 4132 530a 4132 ZNET..y.S.A2S.A2 Fields holding sizes, CRCs or MD5 sums hit this at random, e.g. in elx-header, iodata-mstc-header2, seil-header or nec-fw. Text fields only hit it if they contain a newline, but they use the same pattern. dongwon-header had the same problem and no longer uses dd since commit f6ef30a35e ("ath79: dongwon-header: don't read the CRC from a pipe with dd"). Pass iflag=fullblock to every dd that reads such a pipe with count= or conv=sync, so dd reads until the block is full or the input ends. dd with bs=1 is left alone, as a read always returns a full block there. iflag=fullblock is supported by GNU and uutils dd, like oflag=seek_bytes already used in ramips. Build dd in tools/coreutils as well, so hosts other than Linux get GNU dd next to the GNU date and stat the images already need. Link: https://github.com/openwrt/openwrt/pull/25897 Signed-off-by: Paul Spooren

tools/libdeflate: update to 1.26

2026-10-14T16:10:01Z

Changelog: https://github.com/ebiggers/libdeflate/blob/v1.26/NEWS.md Signed-off-by: Yanase Yuki Link: https://github.com/openwrt/openwrt/pull/25894 Signed-off-by: Robert Marko

tools: firmware-utils: add mkrkboot and mkhsfls

2026-10-13T09:58:21Z

mkrkboot builds the Android boot image, with the Rockchip resource image holding the device tree, that the U-Boot of the Rockchip RV11xx camera SoCs boots. mkhsfls packs the .FLS container accepted by the web interface of Herospeed cameras. Both are used by the image recipes of the rockchip/armv7 subtarget. Signed-off-by: Daniel Golle

tools/expat: update to 2.9.0

2026-10-11T07:45:53Z

Includes fixes for: - CVE-2026-93990 - CVE-2026-102633 - CVE-2026-77214 Full changelog: https://github.com/libexpat/libexpat/blob/R_2_9_0/expat/Changes Signed-off-by: Yanase Yuki Link: https://github.com/openwrt/openwrt/pull/25752 Signed-off-by: Nick Hainke

tools/mkimage: update to version 2026.10

2026-10-11T07:40:27Z

Update to the latest release. Adjust the `HOST_BUILD_DIR` directory pattern to align with upstream changes. Out-of-sync server URLs have also been removed[1]. [1] https://lore.kernel.org/u-boot/20261010142922.GI769217@bill-the-cat/ Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/25783 Signed-off-by: Nick Hainke

tools/elfutils: fix the build on macOS

2026-10-08T07:50:39Z

The DEFAULT_INCLUDES override adds -I. to the src directory. There, upstream deliberately clears DEFAULT_INCLUDES: with libc++, includes , which then resolves to the stack binary in src. Leave out -I. for the src directory. Signed-off-by: Felix Fietkau

u-boot: add project's new download source

2026-10-07T12:29:03Z

Das U-Boot project is transitioning their infrastructure [1],[2] and now publishes releases on their GitLab [3]. Add it as the first download source and keep the existing sources which are currently still available for historical releases. Also update the U-Boot project web page [1] for the package URL and bump PKG_RELEASE for uboot-tools [1]: https://lore.kernel.org/u-boot/20260511174116.GJ1858239@bill-the-cat/ [2]: https://lore.kernel.org/u-boot/20260727224922.GB1188@bill-the-cat/ [3]: https://git.u-boot-project.org/u-boot/u-boot/-/releases/ Signed-off-by: Ryan Leung Link: https://github.com/openwrt/openwrt/pull/25343 Signed-off-by: Robert Marko

tools/7z: update to 26.03

2026-10-04T22:45:33Z

This version contains fixes for following CVEs: - CVE-2026-48092 - CVE-2026-48095 - CVE-2026-48101 - CVE-2026-48102 - CVE-2026-48103 - CVE-2026-48104 - CVE-2026-48111 - CVE-2026-48112 - CVE-2026-14266 - CVE-2026-58052 Changelog: https://www.7-zip.org/history.txt Signed-off-by: Tianling Shen Link: https://github.com/openwrt/openwrt/pull/25597 Signed-off-by: Hauke Mehrtens

tools/mtd-utils: make mkfs.ubifs images reproducible

2026-10-03T20:45:10Z

UBIFS root file systems differ between builds, e.g. the one of the Microchip SAMA7G5-EK: the superblock gets a random UUID, the inodes get the ctime of the build host, which can't be reset with touch, and the entries of each directory are added in readdir() order, which depends on the host file system and decides inode numbers and layout. Add a patch that, when SOURCE_DATE_EPOCH is set, uses a time-based (version 1) UUID with that time and clamps all inode times to it. The node ID of the UUID is taken from the new --uuid-node option, which the image build sets from IMG_PART_DISKGUID, itself derived from SOURCE_DATE_EPOCH and the kernel vermagic. Directory entries are added sorted by name. Two trees with the same contents but different ctimes and readdir() order now give identical images; without SOURCE_DATE_EPOCH the UUID stays random. Link: https://github.com/openwrt/openwrt/pull/25430 Signed-off-by: Paul Spooren

tools: firmware-utils: update to Git HEAD (2026-09-30)

2026-10-01T18:29:41Z

fac587ee67d5 mkzynfw: add board profiles for Zyxel XGS2220 series a0177f9b3bba mkzynfw: align RTL_OTTO_BOARD definitions ceaf0f9c1e22 mksenaofw: warn instead of erroring on plain type-0 images 71f8d9a9a22a asusuimage: fix fs_offset extraction in show_info 9cf0f6e00e39 zyimage: make output byte order explicit a1d9589f1ea1 dlink-sge-image: initialize the signature length Link: https://github.com/openwrt/openwrt/pull/25517 Signed-off-by: Paul Spooren