openwrt/staging/jogo.git
7 years agoramips: add MT7603E driver to AFoundry EW1200
Mathias Kresin [Fri, 23 Jun 2017 05:57:32 +0000 (07:57 +0200)]
ramips: add MT7603E driver to AFoundry EW1200

Add the MT7603E driver for the 2.4GHz wireless.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agoar71xx: add AVM FRITZ!WLAN Repeater 300E support
Mathias Kresin [Fri, 30 Dec 2016 10:53:21 +0000 (11:53 +0100)]
ar71xx: add AVM FRITZ!WLAN Repeater 300E support

Specifications:
* SoC: AR7242 (Virian 400MHz)
* RAM: 64 MB DDR (W9751G6JB-25)
* Flash: 16MB SPI flash (S25FL129PIF)
* WiFi: AR9382 (2.4/5GHz) + 2x SE2595L
* LAN: 1x1000M (PEF7071V)

To install LEDE via EVA bootloader, a FTP connection need to be
established to 192.168.178.1 within the first seconds after power on:

  ftp> quote USER adam2
  ftp> quote PASS adam2
  ftp> binary
  ftp> debug
  ftp> passive
  ftp> quote MEDIA FLSH
  ftp> put lede-ar71xx-generic-fritz300e-squashfs-sysupgrade.bin mtd1

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agoar71xx: add AR724x PCIe init fixes
Mathias Kresin [Thu, 30 Mar 2017 20:01:09 +0000 (22:01 +0200)]
ar71xx: add AR724x PCIe init fixes

Add upstream send AR724x PCIe patches to get the PCIe controller out of
reset during driver init.

The AVM Fritz 300E bootloader doesn't take care of releasing the
different PCIe controller related resets which causes an endless hang
as soon as either the PCIE Reset register (0x180f0018) or the PCI
Application Control register (0x180f0000) is read from.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agobuild: move lzma2eva build step to image-commands.mk
Mathias Kresin [Sat, 25 Mar 2017 18:18:37 +0000 (19:18 +0100)]
build: move lzma2eva build step to image-commands.mk

Move it to image-commands.mk so that it can used by other targets with
eva based boards as well.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agokernel: move Lantiq PEF7061/7071/7072 phy driver to generic
Mathias Kresin [Fri, 30 Dec 2016 07:35:21 +0000 (08:35 +0100)]
kernel: move Lantiq PEF7061/7071/7072 phy driver to generic

The driver is used for boards outside the lantiq target as well. Move
it to generic to make it available for more targets.

The phy driver is included in kernel 4.8 as INTEL_XWAY_PHY.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agofritz_tffs_read: get tffs size from input file
Mathias Kresin [Sun, 18 Jun 2017 08:28:18 +0000 (10:28 +0200)]
fritz_tffs_read: get tffs size from input file

Use the size of the input file as maximum tffs size instead of a fixed
value. The tffs on a AVM Fritz 300E can be up to 512KByte for example.

Fixes a read error for the AVM Fritz 3370 where the tffs partition size
is 64Kbyte and smaller than the former default value of 256KByte.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agolibreadline: add host-build
Daniel Golle [Sat, 24 Jun 2017 11:58:56 +0000 (13:58 +0200)]
libreadline: add host-build

Also make sure that the PKG_NAME and folder name are equal.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
7 years agovalgrind: bump to 3.13.0
Luiz Angelo Daros de Luca [Sat, 17 Jun 2017 03:54:45 +0000 (00:54 -0300)]
valgrind: bump to 3.13.0

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
7 years agoca-certificates: Update to version 20161130+nmu1
Christian Schoenebeck [Mon, 19 Jun 2017 18:56:17 +0000 (20:56 +0200)]
ca-certificates: Update to version 20161130+nmu1

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
7 years agobusybox: ash/hush fix for read-builtin command
Bastian Bittorf [Wed, 31 May 2017 10:50:08 +0000 (12:50 +0200)]
busybox: ash/hush fix for read-builtin command

this is a cherrypick from busybox-git HEAD:
f5470419404d643070db99d058405b714695b817

and can be removed when upgrading to
next busybox release. discussion here:
http://lists.busybox.net/pipermail/busybox/2017-May/085439.html

Signed-off-by: Bastian Bittorf <bb@npl.de>
7 years agogcc: gcc 6.3.0 fix comparison between pointer and integer
Kevin Darbyshire-Bryant [Fri, 9 Jun 2017 12:29:48 +0000 (13:29 +0100)]
gcc: gcc 6.3.0 fix comparison between pointer and integer

Fix FS#832

/source/build_dir/toolchain-mips_74kc_gcc-6.3.0_musl/gcc-6.3.0/gcc/ubsan.c:
In function 'bool ubsan_use_new_style_p(location_t)':
/source/build_dir/toolchain-mips_74kc_gcc-6.3.0_musl/gcc-6.3.0/gcc/ubsan.c:1474:23:
error: ISO C++ forbids comparison between pointer and integer
[-fpermissive]
       || xloc.file == '\0' || xloc.file[0] == '\xff'
                       ^~~~
make[5]: *** [Makefile:1085: ubsan.o] Error 1

https://www.viva64.com/en/b/0425/#ID0EMGCI

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
7 years agohostapd: add support for acs_chan_bias option
Kevin Darbyshire-Bryant [Thu, 15 Jun 2017 11:48:56 +0000 (12:48 +0100)]
hostapd: add support for acs_chan_bias option

During auto channel selection we may wish to prefer certain channels
over others.

e.g. we can just squeeze 4 channels into europe so '1:0.8 5:0.8 9:0.8
13:0.8' does that.

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
7 years agobusybox: backport 'ip rule suppress_{prefixlength, ifgroup}'
Stefan Tomanek [Mon, 19 Jun 2017 10:41:11 +0000 (12:41 +0200)]
busybox: backport 'ip rule suppress_{prefixlength, ifgroup}'

This is a backport from the busybox repository
(192dce4b84fb32346ebc5194de7daa5da3b8d1b4); it enables the use of the
suppress_{prefixlength,ifgroup} flags for policy routing rules.

Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de>
7 years agoprocd: update to latest version
Hans Dedecker [Fri, 23 Jun 2017 20:30:06 +0000 (22:30 +0200)]
procd: update to latest version

e5e99c4 watchdog: add support for starting/stopping kernel watchdog

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
7 years agokernel: backport MTD patch extracing TRX code to separated parser
Rafał Miłecki [Fri, 23 Jun 2017 08:58:16 +0000 (10:58 +0200)]
kernel: backport MTD patch extracing TRX code to separated parser

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
7 years agokernel: backport upstream mtd support for partition parsers
Rafał Miłecki [Fri, 23 Jun 2017 08:47:18 +0000 (10:47 +0200)]
kernel: backport upstream mtd support for partition parsers

In a log term it should replace our implementation. For now both can
coexist.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
7 years agokernel: backport upstream mtdpart.c cleanups
Rafał Miłecki [Fri, 23 Jun 2017 08:27:20 +0000 (10:27 +0200)]
kernel: backport upstream mtdpart.c cleanups

Except for renames and line changes the only conflict was in
allocate_partition in handling MTD_WRITEABLE. Hopefully it was handled
correctly.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
7 years agokernel: don't switch allocate_partition to use mtd_roundup_to_eb
Rafał Miłecki [Fri, 23 Jun 2017 06:59:46 +0000 (08:59 +0200)]
kernel: don't switch allocate_partition to use mtd_roundup_to_eb

This mtd_roundup_to_eb helper was introduced years ago in the commit
daec7ad768841 ("kernel/3.10: add separate rootfs partition parser") and
it was probably supposed to simplify code a bit.

With the recent upstream commit 1eeef2d7483a7 ("mtd: handle partitioning
on devices with 0 erasesize") the logic in allocate_partition got
slightly more complex and we can't use this simple helper anymore as it
doesn't support MTD_NO_ERASE properly.

There also isn't any real gain from this helper, so it's probably easier
to just don't use it *or* work on upstreaming it to avoid maintenance
cost.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
7 years agobase-files: fix PKG_CONFIG_DEPENDS to include version.mk entries
Rafał Miłecki [Fri, 16 Jun 2017 11:23:22 +0000 (13:23 +0200)]
base-files: fix PKG_CONFIG_DEPENDS to include version.mk entries

Including version.mk sets PKG_CONFIG_DEPENDS to config entries used for
VERSION_SED command. We should keep these configs to make sure package
gets refreshed when needed.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
7 years agodnsmasq: add dhcp-range tags configuration
Grégoire Delattre [Tue, 20 Jun 2017 09:45:49 +0000 (11:45 +0200)]
dnsmasq: add dhcp-range tags configuration

dnsmasq can match tags in its dhcp-range configuration, this commit adds
the option to configure it in the dhcp section

uci configuration:
config dhcp 'lan'
        option interface 'lan'
        list tag 'blue'
        list tag '!red'
        option start '10'
        option limit '150'
        option leasetime '12h'

generated dnsmasq configuration:
dhcp-range=tag:blue,tag:!red,set:lan,192.168.1.10,192.168.1.159,255.255.255.0,12h

Signed-off-by: Grégoire Delattre <gregoire.delattre@gmail.com>
7 years agoprocd: update to latest git HEAD
Daniel Golle [Mon, 19 Jun 2017 14:14:42 +0000 (16:14 +0200)]
procd: update to latest git HEAD

453116e system: introduce new attribute board_name
e5b963a preinit: define _GNU_SOURCE
e5ff8ca upgraded: cmake: Find and include uloop.h
f367ec6 hotplug: fix a memory leak in handle_button_complete()
796ba3b service/service_stopped(): fix a use-after-free
79bbe6d system: return legacy board name

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
7 years agobuild: Fix not altering KERNELRELEASE for external kernel
Hauke Mehrtens [Sun, 18 Jun 2017 21:27:51 +0000 (23:27 +0200)]
build: Fix not altering KERNELRELEASE for external kernel

When an external kernel tree is used the version should not get
modified by the LEDE build scripts. This was added by Florian some time
ago.
The commit 0aed054becb21439 ("build: add KERNEL_MAKE and
KERNEL_MAKE_FLAGS variables and move to kernel.mk") breaks this feature
introduced in b6746a6ffb73 ("include: Do not alter KERNELRELEASE for
external/git kernels").

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
7 years agomtd-utils/mkfs.jffs2: honor env SOURCE_DATE_EPOCH
Alexander Couzens [Sun, 18 Jun 2017 19:28:59 +0000 (21:28 +0200)]
mtd-utils/mkfs.jffs2: honor env SOURCE_DATE_EPOCH

Use the timestamp from the enviroment SOURCE_DATE_EPOCH
if set instead of the build time.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agofirmware-utils: honor env SOURCE_DATE_EPOCH
Alexander Couzens [Sun, 18 Jun 2017 00:21:21 +0000 (02:21 +0200)]
firmware-utils: honor env SOURCE_DATE_EPOCH

Use the timestamp from the enviroment SOURCE_DATE_EPOCH
if set instead of the build time.
Fixes reproducible builds for certain firmware images.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agolibunwind: update to version 1.2.1
Yousong Zhou [Mon, 19 Jun 2017 06:41:47 +0000 (14:41 +0800)]
libunwind: update to version 1.2.1

Changes since 1.2

    a77b0cd Bump version to v1.2.1
    5f354cb mips/tilegx: Add missing unwind_i.h header file
    620d1c3 Add aarch64 getcontext functionality.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
7 years agonetifd: update to the latest version
Hans Dedecker [Sun, 18 Jun 2017 20:11:54 +0000 (22:11 +0200)]
netifd: update to the latest version

ef5f7a0 ubus: remove superfluous error check in netifd_add_dynamic
5a68693 iprule: coding style line up
90e2e2c iprule: Add option to suppress unspecific routing lookups

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
7 years agoscripts/package-metadata.pl: parse and validate field Require-User
Yousong Zhou [Tue, 13 Jun 2017 09:03:38 +0000 (17:03 +0800)]
scripts/package-metadata.pl: parse and validate field Require-User

The script will now detect uid/gid collision and can generate a table of
current allocation

    ./scripts/package-metadata.pl usergroup tmp/.packageinfo \
| sort -k 1,1r -k 3,3n \
| column -t

This should ensure that no collision will happen for each single build

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
7 years agobase-files: allocate uid/gid starting from 65536
Yousong Zhou [Thu, 15 Jun 2017 10:07:32 +0000 (18:07 +0800)]
base-files: allocate uid/gid starting from 65536

There already exist static assignment of uid/gid 65533 in packages feed
and we have nobody/nogroup taking 65534 as their ids.  Let's change the
pid of dynamic assignment to start from 65536 so that the two assignment
scheme will not collide with each other

While at it, fix the scan command checking existence of uid/gid

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
7 years agoramips: remove optional ucidef_set_led_rssi parameters
Mathias Kresin [Fri, 16 Jun 2017 22:39:25 +0000 (00:39 +0200)]
ramips: remove optional ucidef_set_led_rssi parameters

The same values are set if the parameters are not specified.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agobase-files: make ucidef_set_led_rssi offset and factor optional
Mathias Kresin [Fri, 16 Jun 2017 22:17:18 +0000 (00:17 +0200)]
base-files: make ucidef_set_led_rssi offset and factor optional

The offset and factor are only related for LEDs which can have
different brightness values. But binary LEDs are more common and don't
require any further configuation than setting the factor to 1.

Use offset = 0 and factor = 1 in case nothing else is specified.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agoramips: add support for TRENDnet TEW-638APB V2
Pavlo Samko [Fri, 9 Jun 2017 11:02:56 +0000 (14:02 +0300)]
ramips: add support for TRENDnet TEW-638APB V2

This patch add support for the TRENDnet TEW-638APB V2.

Specification:
- SoC: Ralink SoC RT3052F
- Flash: 4MB
- RAM: 32MB
- Ethernet: 1x LAN (100 Mbps)
- Wireless: 2.4GHz b/g/n, 2x external antenna
- Buttons: 1x Reset, 1x WPS
- LEDs: Power (green), Ethernet (green), WPS (green and orange),
  Wireless (green)
- UART: 1x UART on PCB (3.3V, GND, RX, TX) - 57600 8N1

Installation

via vendor firmware:
- upload sysupgrade.bin image

via TFTP:
- stop uboot into tftp-load into option "2"
- upload sysupgrade.bin image

Signed-off-by: Pavlo Samko <bulldozerbsg@gmail.com>
7 years agolantiq: show xdsl line init status on shared dsl/internet led
Mathias Kresin [Wed, 14 Jun 2017 18:17:16 +0000 (20:17 +0200)]
lantiq: show xdsl line init status on shared dsl/internet led

On boards which don't have a distinct internet and dsl led, use the
shared LED to indicate the xdsl line state and any traffic that is
send/received via the netdev. This traffic doesn't necessarily need to
be internet traffic.

Rename the shared LED of existing configs to "dsl", to match the new
defaults. The configuration of the to be renamed LED is identical with
the new defaults.

Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agolantiq: restore netdev trigger of dsl led on line up
Martin Schiller [Wed, 7 Jun 2017 07:03:54 +0000 (09:03 +0200)]
lantiq: restore netdev trigger of dsl led on line up

Allows to use a single LED for line init status indication and to show
any rx/tx activity on a synchronized dsl line.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agobuild: move definition of KBUILD_BUILD_TIMESTAMP to include/kernel.mk
Alexander Couzens [Tue, 13 Jun 2017 11:04:35 +0000 (13:04 +0200)]
build: move definition of KBUILD_BUILD_TIMESTAMP to include/kernel.mk

Fixes: 0aed054bec (build: add KERNEL_MAKE and KERNEL_MAKE_FLAGS
variables and move to kernel.mk)

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agomt76: update to the latest version, fixes rate control issues
Felix Fietkau [Sat, 17 Jun 2017 10:17:27 +0000 (12:17 +0200)]
mt76: update to the latest version, fixes rate control issues

Should improve performance considerably in many cases

Signed-off-by: Felix Fietkau <nbd@nbd.name>
7 years agolibubox: update to the latest version, fixes a runqueue use-after-free bug
Felix Fietkau [Wed, 14 Jun 2017 10:14:50 +0000 (12:14 +0200)]
libubox: update to the latest version, fixes a runqueue use-after-free bug

7237302 md5: add "const" qualifier to the "file" argument
fa9937c json_script: enable custom expr handler callback
368fd26 uloop: allow specifying a timeout for uloop_run()
6a7fb7d runqueue: fix use-after-free bug
4bc3dec uloop: fix a regression in timeout handling
fd57eea uloop: allow passing 0 as timeout to uloop_run

Signed-off-by: Felix Fietkau <nbd@nbd.name>
7 years agomac80211: refresh patches
Felix Fietkau [Sat, 10 Jun 2017 13:30:31 +0000 (15:30 +0200)]
mac80211: refresh patches

Signed-off-by: Felix Fietkau <nbd@nbd.name>
7 years agoipq806x: qca99xx: fix wifi calibration
Pavel Kubelun [Thu, 8 Jun 2017 06:06:27 +0000 (09:06 +0300)]
ipq806x: qca99xx: fix wifi calibration

As of now OTP is being correctly parsed and the driver requires to parse pre-caldata to follow corresponding routine.

Rename cal file into pre-calfile so the board initialized correctly with API 2 board data (board-2.bin).

Also remove the now unneeded for qca9984 board.bin symlink to 5GHz calfile.

Signed-off-by: Pavel Kubelun <be.dissent@gmail.com>
7 years agoath10k: increase bmi timeout to fix OTP on qca99xx boards and add bmi identification...
Pavel Kubelun [Thu, 1 Jun 2017 14:13:04 +0000 (17:13 +0300)]
ath10k: increase bmi timeout to fix OTP on qca99xx boards and add bmi identification through pre-cal file

Backporting upstream patches.

Signed-off-by: Pavel Kubelun <be.dissent@gmail.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name> [refresh, rename patches]
7 years agoimagebuilder: don't rewrite package list output
Daniel Golle [Fri, 16 Jun 2017 23:24:43 +0000 (01:24 +0200)]
imagebuilder: don't rewrite package list output

No longer rewrite opkg list output in package_list function, remove
the awk call in the pipe (which was intended for a single specific
use-case).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
7 years agoimagebuilder: clean package_list
Daniel Golle [Fri, 16 Jun 2017 22:54:46 +0000 (00:54 +0200)]
imagebuilder: clean package_list

commit 19ac879954 (imagebuilder: add package_list function) introduced
a new function 'package_list' to the imagebuilder Makefile.
Unfortunately the package list was poluted by stdout noise of the
Makefile itself as well as opkg. Redirect those outputs to stderr to
make sure that the package_list returned doesn't contain progress
info output but really only packages.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
7 years agobuild: remove old kernel-headers build directories
Felix Fietkau [Fri, 16 Jun 2017 13:15:37 +0000 (15:15 +0200)]
build: remove old kernel-headers build directories

Saves space after updating kernel versions

Signed-off-by: Felix Fietkau <nbd@nbd.name>
7 years agodropbear: fix service trigger syntax error
Kevin Darbyshire-Bryant [Thu, 15 Jun 2017 11:58:25 +0000 (12:58 +0100)]
dropbear: fix service trigger syntax error

The classic single '&' when double '&&' conditional was meant.

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
7 years agoimagebuilder: add package_list function
Paul Spooren [Tue, 13 Jun 2017 19:59:14 +0000 (21:59 +0200)]
imagebuilder: add package_list function

The imagebuilder can now list all available packages by using make
package_list. This is usefull for scripts to retrieve a list of all
packages with versions (and size)

Signed-off-by: Paul Spooren <paul@spooren.de>
[daniel@makrotopia.org: fixed commit message]

7 years agoRevert "dnsmasq: manage resolv.conf if when listening on 127.0.0.1#53"
Hans Dedecker [Wed, 14 Jun 2017 20:50:48 +0000 (22:50 +0200)]
Revert "dnsmasq: manage resolv.conf if when listening on 127.0.0.1#53"

This reverts commit a53f8ba6771de64c9c82a2e6867791226f3003cb.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
7 years agoramips: fix Phicomm K1S(PSG1208) pinmux
小桥 [Sun, 5 Mar 2017 07:53:40 +0000 (15:53 +0800)]
ramips: fix Phicomm K1S(PSG1208) pinmux

Use gpio function for pins with LEDs.

Signed-off-by: 小桥 <29551030@qq.com>
7 years agokirkwood: add support for Cisco ON100
Makoto Takeuchi [Wed, 24 May 2017 15:37:24 +0000 (16:37 +0100)]
kirkwood: add support for Cisco ON100

The Cisco ON100 device is a Kirkwood based router:

    SoC: Marvell 88F6282 1600Mhz
    SDRAM memory: 512MB DDR3 1333Mhz
    Gigabit ethernet: 2x Marvell 88E1310 (over RGMII)
    Flash memory: 512MB
    2 bi-colour status LEDs (green/red)
    1 Reset button
    1 USB 2.0 port (on back)
    1 SDIO slot (on back)

This commit adds a target profile of "Cisco Systems ON100" under the target
system "Marvell Kirkwood".

Flashing can be performed over tftp, once "dhcp" has been issued:
 tftpboot ${loadaddr} lede-kirkwood-on100-squashfs-factory.bin
 nand erase 0x0c0000 ${filesize}
 nand write ${loadaddr} 0x0c0000 ${filesize}

Once flashed, set environment variables to boot:
 setenv bootcmd nand read \${loadaddr} 0x0c0000 0x540000\; setenv bootargs
  \; bootm
 saveenv

Signed-off-by: Makoto Takeuchi <mak0@lxsys.co.uk>
7 years agoat91: convert boards to generic build target
Ben Whitten [Wed, 3 May 2017 21:15:20 +0000 (22:15 +0100)]
at91: convert boards to generic build target

Evaluation boards are left in component form to ease flashing
using vendor tooling and instructions. These boards also do
not include the EOF marker in the UBIFS as the bootloaders
are recent and easily upgradeable.

The end product boards use factory.bin images based on the
dts layout and include EOF markers as bootloader UBI support
is not determined.

Signed-off-by: Ben Whitten <ben.whitten@gmail.com>
Signed-off-by: Mathias Kresin <dev@kresin.me>
7 years agodnsmasq: manage resolv.conf if when listening on 127.0.0.1#53
Paul Oranje [Fri, 9 Jun 2017 09:30:23 +0000 (11:30 +0200)]
dnsmasq: manage resolv.conf if when listening on 127.0.0.1#53

With this patch the dnsmasq init script manages resolv.conf if and only if
when dnsmasq will listen on 127.0.0.1#53 (is main resolver instance).
Also, resolvfile is now set irrespective of the value of noresolv.

Fixes (partially) FS#785

Signed-off-by: Paul Oranje <por@xs4all.nl>
7 years agoar71xx: image: simplify TP-Link devices definitions
Piotr Dymacz [Sat, 10 Jun 2017 17:31:54 +0000 (19:31 +0200)]
ar71xx: image: simplify TP-Link devices definitions

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: fix TP-Link TL-WR710N v2/v2.1 BOARDNAME
Piotr Dymacz [Sun, 11 Jun 2017 17:41:23 +0000 (19:41 +0200)]
ar71xx: image: fix TP-Link TL-WR710N v2/v2.1 BOARDNAME

All TP-Link TL-WR710N versions share the same machine code.

This has been working since the beginning as we don't use double-quotes
to protect spaces inside command line values. Thus, kernel interprets
'board=TL-WR710N v2' as 'board=TL-WR710N' and separate parameter 'v2'.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: tp-link.mk: keep devices in alphabetical order
Piotr Dymacz [Sun, 11 Jun 2017 13:30:27 +0000 (15:30 +0200)]
ar71xx: image: tp-link.mk: keep devices in alphabetical order

Keep TP-Link devices definitions in alphabetical order whenever it's
possible. Also group together similar devices or devices from the same
series.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: base-files: cleanups in 10-ar922x-led-fix
Piotr Dymacz [Wed, 7 Jun 2017 20:23:54 +0000 (22:23 +0200)]
ar71xx: base-files: cleanups in 10-ar922x-led-fix

Fix code style, indentation and leading/trailing whitespaces in:
/etc/hotplug.d/net/10-ar922x-led-fix

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: base-files: cleanups in 11-ath10k-caldata
Piotr Dymacz [Wed, 7 Jun 2017 19:19:48 +0000 (21:19 +0200)]
ar71xx: base-files: cleanups in 11-ath10k-caldata

Fix code style and boards alphabetical order in:
/etc/hotplug.d/firmware/11-ath10k-caldata

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agofirmware-utils: tplink-safeloader: add TP-Link Archer C25 v1
Ludwig Thomeczek [Sat, 13 May 2017 09:40:48 +0000 (11:40 +0200)]
firmware-utils: tplink-safeloader: add TP-Link Archer C25 v1

This adds the necessary firmware layout definitions for the Archer C25.
It has an addtional partition containing some static data ("extra-para")
without which no factory flash is possible, therefore put_data() has been
added.

Signed-off-by: Ludwig Thomeczek <ledesrc@wxorx.net>
7 years agoar71xx: add support for TP-Link Archer C25 v1
Ludwig Thomeczek [Sat, 22 Apr 2017 16:21:47 +0000 (18:21 +0200)]
ar71xx: add support for TP-Link Archer C25 v1

The TP-Link Archer C25 is a low-cost dual-band router.

Specification:

- CPU: Atheros QCA9561 775 MHz
- RAM: 64 MB
- Flash: 8 MB
- Wifi: 3x3 2.4 GHz (integrated), 1x1 5 GHz QCA9887
- NET: 5x 10/100 Mbps Ethernet

Some LEDs are controlled by an additional 74HC595 chip.

Signed-off-by: Ludwig Thomeczek <ledesrc@wxorx.net>
[minor code style fixes, boards alphabetical order fixes,
reworked commit message]
Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: add support for TP-Link TL-WR942N v1
Serg Studzinskii [Wed, 8 Mar 2017 20:10:05 +0000 (22:10 +0200)]
ar71xx: add support for TP-Link TL-WR942N v1

TP-Link TL-WR942N v1 is a 2.4 GHz single-band N450 router, based on
Qualcomm/Atheros QCA9561.

Specification:

- 775/650/258 MHz (CPU/DDR/AHB)
- 128 MB of RAM (DDR2)
- 16 MB of FLASH (SPI NOR)
- 3T3R 2.4 GHz
- 5x 10/100 Mbps Ethernet
- 2x USB 2.0
- 11x LED (most are controlled by 74HC595)
- 2x button
- UART header on PCB*

* Serial console is disabled in OEM non-beta firmwares and corresponding
  GPIO pins 14 and 15 are assigned to control USB1 and USB2 LEDs by
  production (non-beta) U-Boot and firmware.

Currently not working:

1. USB1 and USB2 LEDs if UART RX and TX pins are assigned to their GPIOs
   by some U-Boot versions.

Flash instruction under vendor GUI:

1. Download "lede-ar71xx-generic-tl-wr942n-v1-squashfs-factory.bin".
2. Go to WEB interface and perform usual firmware upgrade.

FLash instruction under U-Boot recovery mode (doesn't work in beta
firmware):

1. Setup PC with static IP "192.168.0.66/24" and tftp server.
2. Change "*-factory" image filename to "WR942v1_recovery.bin" and make
   it available to download from your tftp server.
3. Press "reset" button and power up the router, wait till "WPS" LED
   turns on.

Flash instruction under U-Boot, using UART (can be done only with
preinstalled UART-enabled U-Boot version!):

1. Use "tpl" to stop autobooting and obtain U-Boot CLI access.
2. Setup ip addresses for U-Boot and your tftp server.
3. Issue below commands:
   tftp 0x81000000 lede-ar71xx-generic-tl-wr942n-v1-sysupgrade.bin
   erase 0x9f020000 +$filesize
   cp.b 0x81000000 0x9f020000 $filesize
   reset

Signed-off-by: Serg Studzinskii <serguzhg@gmail.com>
[minor code style fixes, extended commit message]
Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: move WRTnode2Q to generic build target
Piotr Dymacz [Fri, 9 Jun 2017 17:56:09 +0000 (19:56 +0200)]
ar71xx: move WRTnode2Q to generic build target

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: simplify Ubiquiti devices definitions
Piotr Dymacz [Sat, 10 Jun 2017 16:57:56 +0000 (18:57 +0200)]
ar71xx: image: simplify Ubiquiti devices definitions

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: mikrotik: shorten DEVICE_TITLE
Piotr Dymacz [Sat, 10 Jun 2017 11:48:34 +0000 (13:48 +0200)]
ar71xx: image: mikrotik: shorten DEVICE_TITLE

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: use simply expanded variables
Piotr Dymacz [Thu, 8 Jun 2017 13:18:34 +0000 (15:18 +0200)]
ar71xx: image: use simply expanded variables

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: update GL.iNet boards DEVICE_TITLE
Piotr Dymacz [Wed, 31 May 2017 20:12:51 +0000 (22:12 +0200)]
ar71xx: image: update GL.iNet boards DEVICE_TITLE

Use "GL.iNet" as vendor name (based on information from the vendor, this
is registered name of the company) and align model names with official
website.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: fix 8devices boards DEVICE_TITLE
Piotr Dymacz [Wed, 31 May 2017 19:56:10 +0000 (21:56 +0200)]
ar71xx: image: fix 8devices boards DEVICE_TITLE

Be consistent with DEVICE_TITLE syntax and use vendor + board names.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: drop unused mtdlayouts from legacy.mk
Piotr Dymacz [Wed, 7 Jun 2017 20:37:30 +0000 (22:37 +0200)]
ar71xx: image: drop unused mtdlayouts from legacy.mk

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: cosmetic: drop redundant empty lines
Piotr Dymacz [Wed, 31 May 2017 19:23:53 +0000 (21:23 +0200)]
ar71xx: image: cosmetic: drop redundant empty lines

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: add ROOTFS_SIZE to DEVICE_VARS
Piotr Dymacz [Wed, 31 May 2017 18:02:36 +0000 (20:02 +0200)]
ar71xx: image: add ROOTFS_SIZE to DEVICE_VARS

Also use ROOTFS_SIZE variable in place of static values.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: keep custom Build/* functions in separate files
Piotr Dymacz [Wed, 31 May 2017 14:31:44 +0000 (16:31 +0200)]
ar71xx: image: keep custom Build/* functions in separate files

Most of the custom Build/* functions in ar71xx target are rarely used by
image building code for devices from more than one subtarget. As they
don't need to be always included, move them to corresponding *.mk files.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: keep DEVICE_VARS and Build/* at the beginning
Piotr Dymacz [Wed, 31 May 2017 09:16:22 +0000 (11:16 +0200)]
ar71xx: image: keep DEVICE_VARS and Build/* at the beginning

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: simplify Compex devices definitions
Piotr Dymacz [Tue, 30 May 2017 21:20:16 +0000 (23:20 +0200)]
ar71xx: image: simplify Compex devices definitions

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: drop redundant kmod-usb-ohci from DEVICE_PACKAGES
Piotr Dymacz [Tue, 30 May 2017 20:55:29 +0000 (22:55 +0200)]
ar71xx: image: drop redundant kmod-usb-ohci from DEVICE_PACKAGES

kmod-usb-ohci is needed only on devices with AR71xx and AR7240 SoCs.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agoar71xx: image: drop redundant uboot-envtools from DEVICE_PACKAGES
Piotr Dymacz [Tue, 30 May 2017 20:25:02 +0000 (22:25 +0200)]
ar71xx: image: drop redundant uboot-envtools from DEVICE_PACKAGES

uboot-envtools is already included in DEFAULT_PACKAGES for ar71xx.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
7 years agofirmware-utils: tplink-safeloader: support strings as soft_version
Jan Niehusmann [Fri, 19 May 2017 07:42:24 +0000 (09:42 +0200)]
firmware-utils: tplink-safeloader: support strings as soft_version

Some TP-Link routers (C25, C59, C60) contain a version string instead
of a binary structure in the soft_version partition.

Flashing LEDE from the original firmware's GUI, this version string
taken from the soft_ver partition of the firmware image is written to
the router's config partition.

When using tftp recovery to go back to the original Archer C25 firmware,
a version check compares that version to the version of the firmware to
be flashed.

Without proper contents in the config partition, reverting to the
original firmware fails.

Therefore, write the string "soft_ver:1.0.0\n" to that soft_ver
partition.

Signed-off-by: Jan Niehusmann <jan@gondor.com>
7 years agoar71xx: fixup ar71xx/ar933x_wmac_reset: remove indefinite wait for wmac reset
Kevin Darbyshire-Bryant [Sun, 11 Jun 2017 13:36:17 +0000 (14:36 +0100)]
ar71xx: fixup ar71xx/ar933x_wmac_reset: remove indefinite wait for wmac reset

Fix malformed patch introduced by 296312fca13a4cab1d157e0474e1f0bcca6adf5c

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
7 years agodnsmasq: make bind-dynamic 'non-wildcard' interfaces default
Kevin Darbyshire-Bryant [Fri, 24 Feb 2017 10:08:30 +0000 (10:08 +0000)]
dnsmasq: make bind-dynamic 'non-wildcard' interfaces default

'non-wildcard' interfaces enables dnsmasq's '--bind-dynamic' mode.  This
binds to interfaces rather than wildcard addresses *and* keeps track of
interface comings/goings via a unique Linux api.

Quoting dnsmasq's author "bind-dynamic (bind individual addresses, keep
up with changes in interface config) ... On linux, there's actually no
sane reason not to use --bind-dynamic, and it's only not the default for
historical reasons."

Let's change history, well on LEDE at least, and change the default!

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
7 years agoar71xx/ar93xx_wmac_otp_read_word: fix wrongly used sizeof(*u)
Alexander Couzens [Sun, 11 Jun 2017 11:43:55 +0000 (13:43 +0200)]
ar71xx/ar93xx_wmac_otp_read_word: fix wrongly used sizeof(*u)

Found-by: Coverity Scan #1330474
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agolinux/swconfig_get_attr: fix leak of msg in case of error
Alexander Couzens [Sun, 11 Jun 2017 11:33:18 +0000 (13:33 +0200)]
linux/swconfig_get_attr: fix leak of msg in case of error

Found-by: Coverity Scan #1330102
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agolinux/ledtrig-netdev: remove `unsigned < 0` check
Alexander Couzens [Sun, 11 Jun 2017 11:30:21 +0000 (13:30 +0200)]
linux/ledtrig-netdev: remove `unsigned < 0` check

Found-by: Coverity Scan
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agoar71xx/ar933x_wmac_reset: remove indefinite wait for wmac reset
Alexander Couzens [Sun, 11 Jun 2017 11:27:20 +0000 (13:27 +0200)]
ar71xx/ar933x_wmac_reset: remove indefinite wait for wmac reset

Found-by: Coverity Scan #1329327
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agoar71xx/ag71xx_ethtool: don't return uninitialized return value on success
Alexander Couzens [Sun, 11 Jun 2017 10:51:58 +0000 (12:51 +0200)]
ar71xx/ag71xx_ethtool: don't return uninitialized return value on success

ag71xx_ethtool_set_ringparam() will return an uninitialized value on
success.

Found-by: Coverity Scan #1330877
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agoar71xx/ag71xx_mdio_probe: fix a memory leak when probe fails
Alexander Couzens [Sun, 11 Jun 2017 10:49:19 +0000 (12:49 +0200)]
ar71xx/ag71xx_mdio_probe: fix a memory leak when probe fails

Found-by: Coverity Scan #1330233
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agoar71xx/ag71xx_ar7240_get_port_link: fix off-by-one check on argument `port`
Alexander Couzens [Sun, 11 Jun 2017 10:43:24 +0000 (12:43 +0200)]
ar71xx/ag71xx_ar7240_get_port_link: fix off-by-one check on argument `port`

Found-by: Coverity Scan #1329901
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agobase-files: board.json's switch reset means existence, not argument
Jonas Gorski [Sun, 11 Jun 2017 10:50:14 +0000 (12:50 +0200)]
base-files: board.json's switch reset means existence, not argument

Don't pass the value unconditionally to swconfig as a parameter but
instead only call reset if it is 1.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agobrcm63xx: probe SPI connected switches through DT
Jonas Gorski [Thu, 9 Feb 2017 20:58:36 +0000 (21:58 +0100)]
brcm63xx: probe SPI connected switches through DT

Now that we can configure the switches through DT, do so.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agob53: allow configuration through device tree
Jonas Gorski [Thu, 9 Feb 2017 20:20:41 +0000 (21:20 +0100)]
b53: allow configuration through device tree

Add support for the same binding as upstream b53 to allow an
easy switch.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agobrcm63xx: switch to hardware led controllers
Jonas Gorski [Thu, 11 May 2017 11:50:18 +0000 (13:50 +0200)]
brcm63xx: switch to hardware led controllers

Instead of bit banging SPI to talk to the GPIO chip, use the hardware
led controllers intended for controlling the LEDs.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agobrcm63xx: leds-bcm6328: fix signal assignments for leds 4~7
Jonas Gorski [Sun, 14 May 2017 21:45:31 +0000 (23:45 +0200)]
brcm63xx: leds-bcm6328: fix signal assignments for leds 4~7

Properly use modulus for bit calculation for LEDs 4 to 7.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agobrcm63xx: dsl-275xb-d: configure switch leds
Jonas Gorski [Sun, 14 May 2017 20:21:08 +0000 (22:21 +0200)]
brcm63xx: dsl-275xb-d: configure switch leds

Add pinctrl configuration to configure the switch leds on DSL-275XB.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agobrcm63xx: add pinctrl support
Jonas Gorski [Fri, 1 Jul 2016 09:23:06 +0000 (11:23 +0200)]
brcm63xx: add pinctrl support

Add and enable pincontrol drivers, and update dts(i) files with
appropriate hogs.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agokernel: make regmap LZO cache optional
Jonas Gorski [Thu, 8 Jun 2017 08:40:50 +0000 (10:40 +0200)]
kernel: make regmap LZO cache optional

There are no users, so hide it and let future users select it. Saves
about ~17 kB on MIPS.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agobrcm63xx: backport upstream generic gpio changes
Jonas Gorski [Fri, 1 Jul 2016 09:22:08 +0000 (11:22 +0200)]
brcm63xx: backport upstream generic gpio changes

Backport patches that add a data pointer to gpio_chip.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
7 years agokexec-tools: bump version and add support for crashdump kernel
Daniel Golle [Tue, 21 Mar 2017 21:58:13 +0000 (15:58 -0600)]
kexec-tools: bump version and add support for crashdump kernel

split kexec-tools into two packages, kexec and kdump.
* kexec to simply execute a new kernel
* kdump is for loading and collecting debris of a crashed kernel with
  support for kdump forensics.

In order to properly support booting into a crashkernel, an init script
as well as UCI configuration has been added.
As modifying the kernel cmdline is required for this to work in x86
platforms use an uci-defaults script to modify /boot/grub/grub.cfg.

To test collecting crash information, use the 'c' sysrq-trigger, ie.
echo c > /proc/sysrq-trigger

This should result in the crash kernel being executed and (depending
on the configution) dmesg and/or vmcore getting saved.

To check if the crash kernel was loaded properly, use the 'status'
command of the kdump init script.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
7 years agodnsmasq: add dhcp-script hook conditionally
Hans Dedecker [Fri, 9 Jun 2017 14:24:12 +0000 (16:24 +0200)]
dnsmasq: add dhcp-script hook conditionally

Commit b32689afd6a661339861086c669e15c936293cf8 added support for dhcp-script hook.
Adding dhcp-script config option results into two instances of dnsmasq being run
which triggered oom issues on platforms having low memory.

The dnsmasq dhcp-script config option will now only be added if at least one of the
dhcp, tftp, neigh hotplug dirs has a regular hotplug file or if the dhcpscript uci
config option is specified.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
7 years agobcm53xx: include wpad-mini only on devices with (supported) wireless
Rafał Miłecki [Mon, 22 May 2017 10:50:53 +0000 (12:50 +0200)]
bcm53xx: include wpad-mini only on devices with (supported) wireless

Don't include wpad-mini when it's useless just like we don't include
useless wireless drivers.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
7 years agobase-files: network.sh: fix a number of IPv6 logic flaws
Jo-Philipp Wich [Thu, 8 Jun 2017 17:27:46 +0000 (19:27 +0200)]
base-files: network.sh: fix a number of IPv6 logic flaws

* Change network_get_subnet6() to sensibly guess a suitable prefix

  Attempt to return the first non-linklocal, non-ula range, then attempt
  to return the first non-linklocal range and finally fall back to the
  previous behaviour of simply returning the first found item.

* Fix network_get_ipaddrs_all()

  Instead of replicating the flawed logic appending a fixed ":1" suffix
  to IPv6 addresses, rely on network_get_ipaddrs() and network_get_ipaddrs6()
  to build a single list of all interface addresses.

* Fix network_get_subnets6()

  Instead of replicating the flawed logic appending a fixed ":1" suffix
  to IPv6 addresses, rely on the ipv6-prefix-assignment.local-address
  field to figure out the proper network address.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
7 years agomwlwifi: update to version 10.3.4.0 / 2017-06-06
Jo-Philipp Wich [Thu, 8 Jun 2017 17:54:53 +0000 (19:54 +0200)]
mwlwifi: update to version 10.3.4.0 / 2017-06-06

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
7 years agoinclude/toplevel: set env GIT_ASKPASS=/bin/true
Alexander Couzens [Wed, 7 Jun 2017 21:56:19 +0000 (23:56 +0200)]
include/toplevel: set env GIT_ASKPASS=/bin/true

When git-https request a service (e.g. github) which ask for credentials
git will pass this request to the user resulting download.pl to wait for
user input. Set GIT_ASKPASS to stop asking.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agobase-files: network.sh: properly report local IPv6 addresses
Jo-Philipp Wich [Thu, 8 Jun 2017 10:02:36 +0000 (12:02 +0200)]
base-files: network.sh: properly report local IPv6 addresses

Rework the network_get_ipaddr6() and network_get_ipaddrs6() functions to
fetch the effective local IPv6 address of delegated prefix from the
"local-address" field instead of naively hardcoding ":1" as static suffix.

Fixes FS#829.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
7 years agobuild: ensure that flock is available for make download
Felix Fietkau [Thu, 8 Jun 2017 09:05:05 +0000 (11:05 +0200)]
build: ensure that flock is available for make download

It ensures that make download can parallelize downloads, even when some
packages download the same files (e.g. gcc/initial, gcc/final)

Signed-off-by: Felix Fietkau <nbd@nbd.name>
7 years agokernel: update kernel 4.9 to 4.9.31
Jo-Philipp Wich [Wed, 7 Jun 2017 22:24:27 +0000 (00:24 +0200)]
kernel: update kernel 4.9 to 4.9.31

Fixes the following security vulnerabilities:

CVE-2017-8890
The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the
Linux kernel through 4.10.15 allows attackers to cause a denial of service
(double free) or possibly have unspecified other impact by leveraging use
of the accept system call.

CVE-2017-9074
The IPv6 fragmentation implementation in the Linux kernel through 4.11.1
does not consider that the nexthdr field may be associated with an invalid
option, which allows local users to cause a denial of service (out-of-bounds
read and BUG) or possibly have unspecified other impact via crafted socket
and send system calls.

CVE-2017-9075
The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel
through 4.11.1 mishandles inheritance, which allows local users to cause a
denial of service or possibly have unspecified other impact via crafted
system calls, a related issue to CVE-2017-8890.

CVE-2017-9076
The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux
kernel through 4.11.1 mishandles inheritance, which allows local users to
cause a denial of service or possibly have unspecified other impact via
crafted system calls, a related issue to CVE-2017-8890.

CVE-2017-9077
The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel
through 4.11.1 mishandles inheritance, which allows local users to cause a
denial of service or possibly have unspecified other impact via crafted
system calls, a related issue to CVE-2017-8890.

CVE-2017-9242
The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel
through 4.11.3 is too late in checking whether an overwrite of an skb data
structure may occur, which allows local users to cause a denial of service
(system crash) via crafted system calls.

Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8890
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9074
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9075
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9076
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9077
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9242
Ref: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.31

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
7 years agokernel: really select kernel 4.4.71
Hauke Mehrtens [Wed, 7 Jun 2017 20:57:41 +0000 (22:57 +0200)]
kernel: really select kernel 4.4.71

The previous commit f4a4f324cb76ad ("kernel: update kernel 4.4 to
4.4.71") missed the line which changes the kernel version, add it now.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>