John Crispin [Tue, 1 Mar 2016 08:14:49 +0000 (08:14 +0000)]
kernel: disable software protection bits for macronix flash chips at init
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport r47626
SVN-Revision: 48849
John Crispin [Tue, 1 Mar 2016 08:14:48 +0000 (08:14 +0000)]
firmware-utils: mkfwimage: fix firmware_max_length for XM layout
The new u-boot version bundled with the 5.6.x firmwares from Ubiquiti gets
confused by the smaller rootfs partition size; this can lead to various
issues:
1. We've gotten reports that flashing from the 5.6.x stock firmware to
OpenWrt will brick devices; I wasn't able to reproduce this myself
2. Flashing from 5.5.x stock firmware to OpenWrt and back to stock (via
TFTP recovery), following by an update to 5.6.x via web interface can
yield a bricked device with the following properties:
- It can't be booted without entering commands over a serial console, as
u-boot supplies the wrong MTD layout
- The web interface won't accept any image with the original flash
layout, so stock firmware upgrades are impossible
- As the TFTP recovery doesn't update u-boot, returning to the old
u-boot from firmware 5.5.x is impossible
To recover from 2., creating an OpenWrt image which doesn't set u-boot as
read-only and flashing a backup of the old u-boot from there is the only
way known to me. (Fixing the mtdparts variable in u-boot-env from OpenWrt
might also work; settings this from u-boot over serial didn't have
any permanent effect.)
Fix all of this by setting the correct flash layout also used by the stock
firmware. Flashing has been tested from both firmware 5.5.x and 5.6.x. The
fixed layout also matches the mtdparts defined by OpenWrt.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r48829
SVN-Revision: 48848
John Crispin [Tue, 1 Mar 2016 08:14:47 +0000 (08:14 +0000)]
ar71xx, firmware-utils: split ubdev01 flash layout from XM
The ubdev01 profile defines its own MTDPARTS with smaller firmware
partition, so give it its own UBNT_BOARD in mkfwimage.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r48828
SVN-Revision: 48847
John Crispin [Tue, 1 Mar 2016 08:14:47 +0000 (08:14 +0000)]
firmware-utils: mkfwimage: add -Wall, fix obvious bugs causing compile warnings
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r48827
SVN-Revision: 48846
John Crispin [Tue, 1 Mar 2016 08:14:46 +0000 (08:14 +0000)]
OpenSSL: Added source/old to PKG_SOURCE_URL
OpenSSL moves old versions of the library from
http://www.openssl.org/source/ to
http://www.openssl.org/source/old/$version/ breaking the old links.
That behavior breaks the OpenWRT-build every time OpenSSL releases
a new version.
This patch adds http://www.openssl.org/source/old/$version/ to the
PKG_SOURCE_URL of OpenSSL to avoid breaking the build whenever
OpenSSL releases a new version.
Signed-off-by: Kevin Kirsch <ranlvor@starletp9.de>
Reviewed-by: Alexander Dahl <post@lespocky.de>
Backport of r47860
SVN-Revision: 48845
John Crispin [Tue, 1 Mar 2016 08:14:45 +0000 (08:14 +0000)]
ar71xx: fix AR71XX_MODEL on TP-Link TL-WR703N
The hwid check was wrong, causing the AR71XX_MODEL value to end with a
space (as $hwver was unset).
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r47553
SVN-Revision: 48844
John Crispin [Tue, 1 Mar 2016 08:14:44 +0000 (08:14 +0000)]
ar71xx: add support for the TP-LINK TL-WR1043ND v3
The hardware of the v3 is identical to the v2.
Based-on-patch-by: Andreas Ziegler <github@andreas-ziegler.de>
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r47406
SVN-Revision: 48843
John Crispin [Tue, 1 Mar 2016 08:14:43 +0000 (08:14 +0000)]
tools/firmware-utils: tplink-safeloader: add version 1.1 support to CPE210/220/510/520
The hardware is identical to version 1.0, add the new models to the support
list.
Also remove the empty line at the end of the support list, the current
stock images don't have it either.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r47212
SVN-Revision: 48842
John Crispin [Tue, 1 Mar 2016 08:14:43 +0000 (08:14 +0000)]
tools/firmware-utils: tplink-safeloader: fix support-list format, clean up vendor information
The first 4 bytes of the support list and the vendor information are
supposed to contain the length of these fields.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r47211
SVN-Revision: 48841
John Crispin [Tue, 1 Mar 2016 08:14:42 +0000 (08:14 +0000)]
tools/firmware-utils: tplink-safeloader: clean up code
There is no reason for the internal functions not to be static.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r47210
SVN-Revision: 48840
John Crispin [Tue, 1 Mar 2016 08:14:41 +0000 (08:14 +0000)]
odhcp6c: minor fixes
Better synchronize RA & DHCPv6 events
Accumulate some events to avoid flooding
Restart softwires for address and prefix changes
Signed-off-by: Steven Barth <steven@midlink.org>
Backport of r46518
SVN-Revision: 48839
John Crispin [Tue, 1 Mar 2016 08:14:40 +0000 (08:14 +0000)]
base-files: default_postinst: propagate the real postinst return code
Using the postinst script for sanity checks and expecting opkg to fail
if the postinst didn't return 0 was possible in Barrier Breaker, propagate
the real postinst return code through default_postinst to restore this
behaviour.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r46653
SVN-Revision: 48838
John Crispin [Tue, 1 Mar 2016 08:14:39 +0000 (08:14 +0000)]
odhcp6c: add option "sourcefilter" to disable source filter
Signed-off-by: Steven Barth <steven@midlink.org>
Backport of r46408
SVN-Revision: 48837
John Crispin [Tue, 1 Mar 2016 08:14:38 +0000 (08:14 +0000)]
sunxi: respect CONFIG_TARGET_IMAGES_GZIP
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r46608
SVN-Revision: 48836
John Crispin [Tue, 1 Mar 2016 08:14:37 +0000 (08:14 +0000)]
sunxi: fix uboot install location
Install uboot files to KERNEL_BUILD_DIR instead of BIN_DIR to fix
ImageBuilder. Similar fixes are necessary for many (all?) other uboot
targets.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r46605
SVN-Revision: 48835
John Crispin [Tue, 1 Mar 2016 08:14:36 +0000 (08:14 +0000)]
sunxi: don't copy DTS files to BIN_DIR
The DTS files aren't useful (other targets don't copy them either) and
clutter BIN_DIR with files unrelated to the chosen profile.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r46604
SVN-Revision: 48834
John Crispin [Tue, 1 Mar 2016 08:14:35 +0000 (08:14 +0000)]
ar71xx: add support for TL-WR741ND v5
This device is identical to the TL-WR740N v5, it even uses the same HWID (which
wasn't the case for older TL-WR741ND revisions).
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r46238
SVN-Revision: 48833
John Crispin [Tue, 1 Mar 2016 08:14:35 +0000 (08:14 +0000)]
ar71xx: add support for tp-link wr740n v5.0 (EU)
TP-Link ships wr740n v5.0 to Romania (so probably everywhere except
China) with 4 MB flash and 32 MB memory (confirmed by their local
support). This patch adds support for the v5.0 clone of v4, i just
tested it on my own v5.0 router and it works.
Signed-off-by: Daniel Petre <daniel.petre@posteo.net>
Backport of r46115
SVN-Revision: 48832
John Crispin [Tue, 1 Mar 2016 08:14:34 +0000 (08:14 +0000)]
kernel: take bcm47xx_nvram.h from kernel and not backports
compat-wireless/backports now contains a bcm47xx_nvram.h file to
backport some of the functions in it which are used by the bcmfmac
driver. This file just checks for the kernel versions and provide an
empty implementations on older kernel versions. This is OK on most
systems, but on bcm47xx / bcm53xx systems we want to call the real
functions here. This commit removes the file from backports in our
build process like we do it with the bcma and ssb header files. Instead
we add a recent version into our kernel so all code uses only one
header file. On bcm47xx / bcm53xx the real implementations of this code
will be used.
Reported-by: Hante Meuleman <meuleman@broadcom.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
[Backport of r47467. The recent mac80211 backport was missing this patch,
breaking the build of the brcmfmac module]
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
SVN-Revision: 48831
Felix Fietkau [Mon, 29 Feb 2016 20:02:36 +0000 (20:02 +0000)]
ar71xx: backport ath10k firmware loading from trunk (as of r48711)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48825
Felix Fietkau [Mon, 29 Feb 2016 20:02:35 +0000 (20:02 +0000)]
build: download.mk: bugfix download.pl argument call order
Change wrong download.pl argument call order.
See download.pl argument list.
Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com>
Backport of r48427
SVN-Revision: 48824
Felix Fietkau [Mon, 29 Feb 2016 20:02:34 +0000 (20:02 +0000)]
build: add support for choosing a different url filename part than the output file
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r47591
SVN-Revision: 48823
Felix Fietkau [Mon, 29 Feb 2016 17:19:04 +0000 (17:19 +0000)]
mac80211: backport from trunk r48782 + required kernel patches and mt76, mwlwifi
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48822
Felix Fietkau [Mon, 29 Feb 2016 17:18:57 +0000 (17:18 +0000)]
ath10k-firmware: remove dependency on kmod-ath10k so that it can be selected instead
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48821
Felix Fietkau [Mon, 29 Feb 2016 17:18:56 +0000 (17:18 +0000)]
b43legacy-firmware: add from r48184
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48820
Felix Fietkau [Mon, 29 Feb 2016 17:18:55 +0000 (17:18 +0000)]
ath10k-firmware: add from trunk r47984
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48819
Felix Fietkau [Mon, 29 Feb 2016 17:18:54 +0000 (17:18 +0000)]
linux-firmware: sync with trunk r48750
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48818
Felix Fietkau [Mon, 29 Feb 2016 16:06:20 +0000 (16:06 +0000)]
build: do not deselect CONFIG_USE_SSTRIP if CONFIG_DEBUG is enabled
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48504
SVN-Revision: 48817
Felix Fietkau [Mon, 29 Feb 2016 16:06:19 +0000 (16:06 +0000)]
scripts/config: fix handling of CONFDEFAULT on oldconfig
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r47372
SVN-Revision: 48816
Felix Fietkau [Mon, 29 Feb 2016 15:53:25 +0000 (15:53 +0000)]
ar71xx: reset ethernet tx ring on fast reset to prevent packet loss / irq issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48753
SVN-Revision: 48815
John Crispin [Fri, 26 Feb 2016 07:46:18 +0000 (07:46 +0000)]
ramips: Backport support for Netgear EX2700
This patch adds support for the Netgear EX2700 in Chaos Calmer and
builds approriate -sysupgrade and -factory images.
Signed-off-by: Joseph C. Lehner <joseph.c.lehner@gmail.com>
SVN-Revision: 48792
John Crispin [Fri, 26 Feb 2016 07:46:14 +0000 (07:46 +0000)]
brcm2708: Fix sysupgrade support for Raspberry Pi
Backport patch for implementing sysupgrade support on brcm2708 target was
incomplete, since it was missing the default packages (r47604).
Add those packages in order to fully support sysupgrade.
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
SVN-Revision: 48791
Rafał Miłecki [Fri, 26 Feb 2016 07:10:16 +0000 (07:10 +0000)]
kernel: support bgmac on BCM47094
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48564 and r48756
SVN-Revision: 48790
Rafał Miłecki [Fri, 26 Feb 2016 07:10:09 +0000 (07:10 +0000)]
kernel: backport trivial bcma patches from 4.6 for BCM47094
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 48789
Rafał Miłecki [Fri, 26 Feb 2016 07:09:57 +0000 (07:09 +0000)]
kernel: backport bcma init patch from 4.5
This simply replaces init fix with a final version and puts it in a
generic dir. This will allow backporting some trivial changes from 4.6.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 48788
John Crispin [Fri, 19 Feb 2016 16:39:12 +0000 (16:39 +0000)]
ralink: fix mt7628 ehci support
the u2_phy init was missing
Backport of r48747
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 48749
John Crispin [Fri, 19 Feb 2016 16:39:06 +0000 (16:39 +0000)]
ralink: fix alsa mic in support
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 48748
Luka Perkov [Wed, 17 Feb 2016 17:51:46 +0000 (17:51 +0000)]
mvebu: add SolidRun ClearFog A1 support
Signed-off-by: Andrej Vlasic <andrej.vlasic@sartura.hr>
SVN-Revision: 48737
John Crispin [Mon, 8 Feb 2016 09:22:12 +0000 (09:22 +0000)]
malta: add harddisk support
Is it possible to backport commit r46269 (
3c298f89-4303-0410-b956-
a3cf2f4a3e73) to CC 15.05 in order to provide harddisk support.
Backporting tested (info available at: https://forum.openwrt.org/viewtopic.php?id=62389).
Thnx in advance!
Here is the original patch from trunk:
>From
76bfcd46bd55263947461e40bd02047922755c72 Mon Sep 17 00:00:00 2001
From: blogic <blogic@
3c298f89-4303-0410-b956-
a3cf2f4a3e73>
Date: Wed, 8 Jul 2015 14:25:36 +0000
Subject: [PATCH] malta: add harddisk support
works with:
qemu-system-mipsel -M malta \
-hda openwrt-malta-le-root.ext4 \
-kernel openwrt-malta-le-vmlinux.elf \
-nographic -append "root=/dev/sda console=ttyS0"
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
SVN-Revision: 48666
Rafał Miłecki [Fri, 5 Feb 2016 13:41:24 +0000 (13:41 +0000)]
bcm53xx: add Netgear R8500 GPIOs
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48633
SVN-Revision: 48634
Rafał Miłecki [Thu, 4 Feb 2016 09:23:48 +0000 (09:23 +0000)]
bcm53xx: start working on Netgear R8500
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48625
SVN-Revision: 48629
Rafał Miłecki [Thu, 4 Feb 2016 09:23:18 +0000 (09:23 +0000)]
bcm53xx: support Netgear R8500 in sysupgrade
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48572
SVN-Revision: 48628
Rafał Miłecki [Thu, 4 Feb 2016 09:23:05 +0000 (09:23 +0000)]
bcm53xx: use proper CPU port in b53 for Netgear R8500
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48571
SVN-Revision: 48627
Felix Fietkau [Thu, 28 Jan 2016 18:26:18 +0000 (18:26 +0000)]
openssl: update to 1.0.2f (fixes CVE-2016-0701, CVE-2015-3197)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48531
SVN-Revision: 48532
John Crispin [Thu, 21 Jan 2016 14:17:54 +0000 (14:17 +0000)]
ramips: HiLink HLK-RM04 image name typo (RM02 -> RM04)
The image name for the HiLink HLK-RM04 module has a typo and should read "RM04" rather than "RM02"
Backport of r48355
Signed-off-by: John Clark <inindev@gmail.com>
SVN-Revision: 48430
Felix Fietkau [Wed, 20 Jan 2016 20:27:08 +0000 (20:27 +0000)]
kernel: fix module load issue in the dma-buf debloat patch
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48409
SVN-Revision: 48411
Rafał Miłecki [Wed, 20 Jan 2016 19:32:04 +0000 (19:32 +0000)]
mac80211: fix brcmfmac picking wrong channel when using 80 MHz
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 48404
Felix Fietkau [Wed, 20 Jan 2016 10:32:18 +0000 (10:32 +0000)]
kernel: modularize dma shared buffer code to eliminate kernel bloat
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48371
SVN-Revision: 48392
Felix Fietkau [Tue, 19 Jan 2016 21:09:59 +0000 (21:09 +0000)]
kernel: fix keyring reference leak (CVE-2016-0728)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48372
SVN-Revision: 48373
Felix Fietkau [Tue, 19 Jan 2016 15:15:11 +0000 (15:15 +0000)]
kernel: disable AFS support by default
This pulls in CONFIG_KEYS, which bloats up the kernel size and is thus
very undesirable. It also currently exposes the kernel to a local root
vulnerability
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48364
SVN-Revision: 48365
Felix Fietkau [Fri, 15 Jan 2016 12:59:30 +0000 (12:59 +0000)]
ar71xx: fix ethernet MAC reset on DMA hang
Fully reset the chip like on a full up/down, but without the PHY
statemachine restart.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48228
SVN-Revision: 48246
Felix Fietkau [Fri, 15 Jan 2016 12:59:26 +0000 (12:59 +0000)]
ar71xx: extend ethernet DMA stuck check to all ar724x (and newer) chips
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48227
SVN-Revision: 48245
Jo-Philipp Wich [Thu, 14 Jan 2016 14:27:23 +0000 (14:27 +0000)]
CC: base-files: use the correct path in case of modified preinit options
If the user sets any preinit options in .config, the wrong path may get
applied due to wrong default value in image-config.in and due to Makefile
writing also the unchanged options into 00_preinit.conf
Modify the default path in image-config.in to match the current default
path set by r47080. Also modify the fall-back default in Makefile.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Backport of r47590
SVN-Revision: 48238
Jo-Philipp Wich [Thu, 14 Jan 2016 14:27:20 +0000 (14:27 +0000)]
CC: base-files: sanitize and unify $PATH
Previously init and hotplug paths were different from console.
Signed-off-by: Steven Barth <steven@midlink.org>
Backport of r47080
SVN-Revision: 48237
Jo-Philipp Wich [Thu, 14 Jan 2016 13:06:36 +0000 (13:06 +0000)]
CC: procd: align early init PATH with rest of OpenWrt
Backport upstream Git commit
45cb04fd85d788a37367a5385e5e90dd98a0a991 to CC.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 48236
Imre Kaloz [Tue, 12 Jan 2016 14:29:19 +0000 (14:29 +0000)]
mac80211: resync regulatory db with master-2015-12-14
backport of [48219]
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
SVN-Revision: 48220
Jo-Philipp Wich [Tue, 12 Jan 2016 09:27:30 +0000 (09:27 +0000)]
CC: sdk: add base repository fallback
When the build system cannot infer its own repository url then let it fall
back to http://git.openwrt.org/ for the base feed.
The path to openwrt.git is guessed from the VERSION_NUMBER variable:
"unknown" or "r12345" -> http://git.openwrt.org/openwrt.git
"15.05.1" -> http://git.openwrt.org/15.05/openwrt.git
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
Backport of r48212
SVN-Revision: 48213
Jo-Philipp Wich [Tue, 12 Jan 2016 07:54:25 +0000 (07:54 +0000)]
CC: gettext-full: make autopoint and gettextize reloctable
The autopoint and gettextize host utilities contain hardcoded staging dir
paths which need to be overridden for the SDK environment.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
Backport of r48208
SVN-Revision: 48211
Jo-Philipp Wich [Tue, 12 Jan 2016 07:54:22 +0000 (07:54 +0000)]
CC: gettext-full: activate format-security checks
This patch was taken from upstream libcroco
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Backport of r47585
SVN-Revision: 48210
Jo-Philipp Wich [Tue, 12 Jan 2016 07:54:18 +0000 (07:54 +0000)]
CC: gettext-full: update to version 0.19.6
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Backport of r47584
SVN-Revision: 48209
Rafał Miłecki [Mon, 11 Jan 2016 22:08:35 +0000 (22:08 +0000)]
hostapd: fix disassociation with FullMAC drivers and multi-BSS
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48202
SVN-Revision: 48205
Jo-Philipp Wich [Mon, 11 Jan 2016 08:43:50 +0000 (08:43 +0000)]
CC: build: add a variable pointing to the main openwrt git repositories (useful if we want to support using a mirror later)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48117
SVN-Revision: 48197
Felix Fietkau [Sun, 10 Jan 2016 18:04:56 +0000 (18:04 +0000)]
fstools: fix off-by-one error in the version number
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48193
SVN-Revision: 48194
Felix Fietkau [Sun, 10 Jan 2016 17:37:20 +0000 (17:37 +0000)]
fstools: sync with trunk r48191
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48192
Felix Fietkau [Sun, 10 Jan 2016 17:04:09 +0000 (17:04 +0000)]
hostapd: fix post v2.4 security issues
- WPS: Fix HTTP chunked transfer encoding parser (CVE-2015-4141)
- EAP-pwd peer: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd server: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd peer: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd server: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd peer: Fix asymmetric fragmentation behavior (CVE-2015-4146)
- NFC: Fix payload length validation in NDEF record parser (CVE-2015-8041)
- WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use
(CVE-2015-5310)
- EAP-pwd peer: Fix last fragment length validation (CVE-2015-5315)
- EAP-pwd server: Fix last fragment length validation (CVE-2015-5314)
- EAP-pwd peer: Fix error path for unexpected Confirm message (CVE-2015-5316)
Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>
Backport of r48185
SVN-Revision: 48186
Rafał Miłecki [Sun, 10 Jan 2016 01:30:13 +0000 (01:30 +0000)]
mac80211: brcmfmac: add beamforming support
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 48168
Rafał Miłecki [Sun, 10 Jan 2016 00:19:16 +0000 (00:19 +0000)]
mac80211: brcmfmac: support dumping stations
It allows user-space fetch associated STAs and e.g. iwinfo/luci display
them.
SVN-Revision: 48167
Rafał Miłecki [Sun, 10 Jan 2016 00:19:09 +0000 (00:19 +0000)]
mac80211: brcmfmac: fix getting/setting TX power
This patches also adds BCM4366 support which may be found on some new
routers based on BCM47094 or BCM4709C0. Unfortunately firmware is still
missing for this chipset.
SVN-Revision: 48166
Rafał Miłecki [Sun, 10 Jan 2016 00:18:39 +0000 (00:18 +0000)]
kernel: backport some bcma header file definitions from wireless-testing
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r47284
SVN-Revision: 48165
Rafał Miłecki [Sat, 9 Jan 2016 18:38:01 +0000 (18:38 +0000)]
mac80211: rename patches to use all prefixes
After last commit we got few unuset slots (prefixes). Use all available
numbers one by one to allow more backports.
This doesn't change a single patch (or order), only renames files.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 48164
Rafał Miłecki [Sat, 9 Jan 2016 18:37:55 +0000 (18:37 +0000)]
mac80211: group brcmfmac patches into sets as they were sent
It doesn't change any single patch (or order), it only renames files.
This creates some place for more backports, as we were already using
398 prefix which left only 1 slot.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 48163
Imre Kaloz [Fri, 8 Jan 2016 19:24:58 +0000 (19:24 +0000)]
mwlwifi: update to 10.3.0.16-
20160105 (adds DFS support)
backport of [48152]
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
SVN-Revision: 48153
Rafał Miłecki [Wed, 6 Jan 2016 16:10:40 +0000 (16:10 +0000)]
kernel: make bcm47xxpart work with TRX flashed at bad block(s)
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48061
SVN-Revision: 48140
Rafał Miłecki [Wed, 6 Jan 2016 16:10:13 +0000 (16:10 +0000)]
kernel: drop bcm47xxpart patch for Xiaomi
It was never tested, most likely not working (because of le32_to_cpu)
and not upstreamed.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48060
SVN-Revision: 48139
Felix Fietkau [Tue, 5 Jan 2016 12:20:34 +0000 (12:20 +0000)]
ramips: override features to disable mips16 support for rt288x
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48137
Felix Fietkau [Tue, 5 Jan 2016 12:15:59 +0000 (12:15 +0000)]
bzip2: only build the static library for the host, fixes build errors on mac os x
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48135
SVN-Revision: 48136
Felix Fietkau [Tue, 5 Jan 2016 11:01:00 +0000 (11:01 +0000)]
samba36: add three CVE patches from 2015-12-16
This is a patch for CVE-2015-5252, CVE-2015-5296 and CVE-2015-5299. A
patchset for these vulnerabilities was published on 16th December 2015.
Signed-off-by: Jan Čermák <jan.cermak@nic.cz>
Backport of r48133
SVN-Revision: 48134
John Crispin [Sun, 3 Jan 2016 18:03:27 +0000 (18:03 +0000)]
ramips: Disable all ethernet ports except port 4 on HT-TM02.
Port 4 is the only ethernet port on this router, so disable all other PHYs
in order to save power.
Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>
SVN-Revision: 48097
John Crispin [Sun, 3 Jan 2016 18:03:17 +0000 (18:03 +0000)]
ramips: Get rt3052 ethernet ports to be disabled from the device tree.
This patch allows configuring ports to be disabled in the device tree; this
saves power, since disabling ports here actually disables power to ethernet
PHYs.
Line 461 enables all ethernet ports, so line 508 is getting zero ports to be
disabled, except for port 5 in SoCs where this is not implemented as it will
be sticky disabled in register POC0. Because of this, the code will still read
the switch configuration and OR it to the device tree setting.
Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>
SVN-Revision: 48096
John Crispin [Sun, 3 Jan 2016 18:03:07 +0000 (18:03 +0000)]
ramips: Fix comment in rt3052 ethernet switch driver.
Line 461 is actually enabling all switch ports by setting the disable bits
to 0. This needs to be done because the bootloader sets all ports to disabled
by default (which is the case for at least one router based on RT5350).
So, this patch fixes the comment in line 460.
Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>
SVN-Revision: 48095
John Crispin [Sun, 3 Jan 2016 18:02:51 +0000 (18:02 +0000)]
ramips: Fix whitespace in the rt3052 switch driver.
Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>
SVN-Revision: 48094
Felix Fietkau [Sun, 3 Jan 2016 15:12:07 +0000 (15:12 +0000)]
ar71xx: fix sysupgrade for wnr2200
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48005
SVN-Revision: 48093
Felix Fietkau [Sun, 3 Jan 2016 14:48:34 +0000 (14:48 +0000)]
ar71xx: fix factory images for WNR2200 (#19807)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48085
SVN-Revision: 48092
Felix Fietkau [Sun, 3 Jan 2016 14:48:28 +0000 (14:48 +0000)]
ar71xx: on wnr2200, revert the mac0/mac1, the ethernet interfaces are swapped. use MAC1 for wlan
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r47873
SVN-Revision: 48091
Felix Fietkau [Sun, 3 Jan 2016 14:48:20 +0000 (14:48 +0000)]
ar71xx: fix MAC address swapping on WNR2200 and fix the WLAN MAC address
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r47871
SVN-Revision: 48090
Felix Fietkau [Sun, 3 Jan 2016 14:48:17 +0000 (14:48 +0000)]
ar71xx: another fix to wndr3700_board_detect
My last bugfix (r47538) introduced a new bug in wndr3700_board_detect
(again...).
Assigning the result of ar71xx_get_mtd_offset_size_format to the model
variable before stripping of garbage using awk will cause all NUL bytes to
be removed before awk is applied, leading to model strings like
"NETGEAR WNDRMACv2NETGEAR", where a NUL byte after the v2 is supposed to
terminate the string.
Fix by calling ar71xx_get_mtd_offset_size_format twice, once piping to awk
directly.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r48075
SVN-Revision: 48089
Felix Fietkau [Sun, 3 Jan 2016 14:48:13 +0000 (14:48 +0000)]
ar71xx: fix wndr3700_board_detect for some NETGEAR WNDR3700v2 (again)
When fixing the model string for WNDR3700v2 which contain a model string
followed by 0xff in r46455, the match for other versions of the WNDR3700v2
which just contain lots of 0xff broke (as the 0xff $model is checked for
is stripped off).
Fix by stripping off non-printable characters only for the actual output
string, but not for the internal matching.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r47538
SVN-Revision: 48088
Felix Fietkau [Sun, 3 Jan 2016 14:48:06 +0000 (14:48 +0000)]
ar71xx: fix wndr3700_board_detect for some NETGEAR WNDR3700v2
There are a few NETGEAR devices which don't terminate the model name in the
ART with a NUL byte, at least some NETGEAR WNDR3700v2. The current awk
expression doesn't match 0xFF bytes, so AR71XX_MODEL contains lots of
trailing 0xFF garbage in this case.
Fix this by matching for the first non-printable character and explicitly
setting LC_CTYPE=C (probably not strictly necessary on OpenWrt, but will
definitely work like this, even when awk supports locales and LANG is set).
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Backport of r46455
SVN-Revision: 48087
John Crispin [Sun, 3 Jan 2016 14:47:47 +0000 (14:47 +0000)]
lantiq: disable SW_PORTMAP usage in the ethernet driver
using the special tag in this way lead to port mirroring for certain types of traffic.
fallback to using th PMAC_EWAN register for the wan portmap.
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 48086
Rafał Miłecki [Sat, 2 Jan 2016 22:15:40 +0000 (22:15 +0000)]
ledtrig-netdev: don't stop timer on events for different interfaces
This fixes regression introduced in my recent ledtrig-netdev commit.
Events triggered by different interfaces were stopping timer so it
wasn't working for tx/rx mode.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48072
SVN-Revision: 48074
Rafał Miłecki [Sat, 2 Jan 2016 22:15:31 +0000 (22:15 +0000)]
ledtrig-netdev: add support for renamed devices
The ppp0 interface is renamed after the connection is established. Due
to a missing NETDEV_REGISTER event, the ledtrig-netdev isn't aware of
the renamed interface and literally ignores the device
(no tx/rx indication, led isn't switched off with 'ifdown wan').
Signed-off-by: Mathias Kresin <openwrt@kresin.me>
Backport of r48048
SVN-Revision: 48073
Rafał Miłecki [Sat, 2 Jan 2016 11:15:28 +0000 (11:15 +0000)]
bcm53xx: switch to simpler devm_gpiod_get in USB driver
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r48062
SVN-Revision: 48063
Felix Fietkau [Fri, 1 Jan 2016 12:29:29 +0000 (12:29 +0000)]
kernel: fix duplication of sch_netem in multiple packages (#21479)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r48018
SVN-Revision: 48023
Felix Fietkau [Tue, 29 Dec 2015 13:06:37 +0000 (13:06 +0000)]
netifd: update to the latest version (trunk r47897), fixes route table handling issues (among other things)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 48015
Rafał Miłecki [Wed, 23 Dec 2015 17:13:04 +0000 (17:13 +0000)]
ledtrig-netdev: reset link status & stats after changing device_name
Previously switching to non-existing device (interface) could result in
leaving LED on.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r47990
SVN-Revision: 47992
Rafał Miłecki [Wed, 23 Dec 2015 17:12:56 +0000 (17:12 +0000)]
ledtrig-netdev: drop locking from timer callback function
We may just delete timer on every trigger update and then start it again
if needed. This will let us avoid both: races and locking in frequently
called timer callback.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r47987
SVN-Revision: 47991
Rafał Miłecki [Wed, 23 Dec 2015 15:47:41 +0000 (15:47 +0000)]
ledtrig-netdev: switch rwlock to spinlock
Read/write lock was adding useless complexity, there wasn't any real
gain in case of this driver.
Also switch to _bh variants to avoid deadlocks.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r47986
SVN-Revision: 47989
Rafał Miłecki [Wed, 23 Dec 2015 15:47:29 +0000 (15:47 +0000)]
ledtrig-netdev: update base driver instead of patching it for every kernel
All supported kernels require patching ledtrig-netdev in the same way,
so it's safe to just move these changes to the base version of this
driver. We needed these patches for some old kernels 2.6.36 and 3.11.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Backport of r47962
SVN-Revision: 47988
Felix Fietkau [Wed, 23 Dec 2015 11:41:51 +0000 (11:41 +0000)]
kernel: add remaining kernel patch accidentally left out of r47963
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r47966
SVN-Revision: 47967
Felix Fietkau [Wed, 23 Dec 2015 11:15:22 +0000 (11:15 +0000)]
kernel: backport all current pppoe kernel fixes to 3.18
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Backport of r47963
SVN-Revision: 47964