openwrt/staging/jow.git
5 years agokernel: don't export parse_mtd_partitions_by_type() in 4.9 and 4.14
Rafał Miłecki [Tue, 20 Nov 2018 12:42:19 +0000 (13:42 +0100)]
kernel: don't export parse_mtd_partitions_by_type() in 4.9 and 4.14

That function isn't used anywhere out of the mtdpart.c & can be static.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from 4d0431801d447ee8cffe96289ee531c67b795c1c)

5 years agokernel: drop mtd_pad_erasesize() helper from 4.9 and 4.14
Rafał Miłecki [Mon, 19 Nov 2018 12:33:05 +0000 (13:33 +0100)]
kernel: drop mtd_pad_erasesize() helper from 4.9 and 4.14

It has been last used in kernel 3.18 for uimage and squashfs splitters
embedded in the mtdpart.c.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from 9b8a955358fb55b4c3c70074fc8fee27d533ba81)

5 years agomt76: update to the latest version
Felix Fietkau [Fri, 16 Nov 2018 12:43:15 +0000 (13:43 +0100)]
mt76: update to the latest version

96b3b3d mt76x2u: main: fix typo setting sta_state mac80211 callback

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from 251c3507275a2b5feca4afc0e6f8837214a584ab)

5 years agomt76: update to the latest version
Felix Fietkau [Fri, 16 Nov 2018 11:43:45 +0000 (12:43 +0100)]
mt76: update to the latest version

009ab91 mt76: clean up more unused EXPORT_SYMBOLs
963768d mt76x02: fix regression in tx station race condition fix
d7788cc mt76: mt76x02: make group_wcid the first member in struct mt76x02_vif
e65ad4c mt7603: make group_wcid the first member in struct mt7603_vif
7b1373e mt76: mt76x02: remove mt76x02_txq_init
a97127b mt76: replace sta_add/remove ops with common sta_state function
13f1e82 mt7603: clear wtbl entry for removed stations
90e2c1b mt7603: add mt7603_wtbl_set_skip_tx, change mt7603_wtbl_set_ps users
41931e4 mt7603: toggle skip_tx on station add/remove
d0fdf01 mt7603: avoid unnecessary wtbl writes for ps-filter

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from 86fc443f8b7a5cbd99c409b518ca8a4149218853)

5 years agoutil-linux: Update to 2.33
Daniel Engberg [Fri, 9 Nov 2018 06:56:47 +0000 (07:56 +0100)]
util-linux: Update to 2.33

Update util-linux to 2.33
Refresh patch

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(backported from 59ff8687c73c5d981d9e17f8efb1a8ca02b171a7)

5 years agoar71xx: add support for Gainstrong MiniBox V3.2
Pau Escrich [Fri, 12 Jan 2018 15:36:25 +0000 (16:36 +0100)]
ar71xx: add support for Gainstrong MiniBox V3.2

Adds MiniBox V3.2 ar71xx target (QCA99531 + QCA9887)
Info: http://oolite.cn/minibox-v3-2-qca9531-qca9887-module-pin-specification.html
Reference patch: http://oolite.cn/wp-content/uploads/2017/09/minibox_v3_cc15.05_20160325.patch
Installation: Upload firmware to uboot via HTTP at 192.168.1.1 (press button for 5 seconds)

Signed-off-by: Pau Escrich <p4u@dabax.net>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(daniel@makrotopia.org: rebased and fixed conflicts, fixed LED name,
                        added ath10k eeprom)
(backported from 15f16bf05b8441aed0e0c6000740996b75724ac1)

5 years agobison: update to 3.2.1
Hans Dedecker [Thu, 15 Nov 2018 10:29:04 +0000 (11:29 +0100)]
bison: update to 3.2.1

Chnages since 3.2:

b590ad02 version 3.2.1
05e70adf build: fix issues in the generated tarball
7efe0b5d build: fix typo
351e3630 NEWS: update
4fd1fc70 examples: ship them
e02ce4c7 build: minor fixes in doc/
7cab285e CI: maximize chances of errors sooner
86efe282 c++: improve the generated documentation
cf1446dc tests: don't fail if the C++ compiler does not work
e93c40b3 tests: don't disable C++ warnings in C files
eff67391 c++: workaround portability issue
5a0d7802 tests: work around getopt portability issues
f1e0839c doc: -Wzero-as-null-pointer-constant was added to GCC 4.7
3bf429ae examples: #include <cstring> in calc++
f8cadc73 c: provide a definition of _Noreturn that works for C++
bd7aebb8 c: update the definition of _Noreturn
ca8039e6 tests: don't expect the shell to support 'local'
5d07f4f7 bitset: fix warning
e605ad96 build: fix use of gnulib Make variables
50fac71d maint: post-release administrivia

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 80526d2fed2351e7e2dbd8b7e0c296856624481f)

5 years agohostapd: add utf8_ssid flag & enable as default
Kevin Darbyshire-Bryant [Mon, 12 Nov 2018 22:46:13 +0000 (22:46 +0000)]
hostapd: add utf8_ssid flag & enable as default

SSIDs may contain UTF8 characters but ideally hostapd should be told
this is the case so it can advertise the fact. Default enable this
option.

add uci option utf8_ssid '0'/'1' for disable/enable e.g.

config wifi-iface
option utf8_ssid '0'

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(backported from 3a6bddd7f75f130ff7c6819073ee7f61f44696b6)

5 years agotools/pkg-config: Handle variable substitution of 'bindir' to redirect to STAGING_DIR/bin
Ted Hess [Tue, 13 Nov 2018 20:40:30 +0000 (15:40 -0500)]
tools/pkg-config: Handle variable substitution of 'bindir' to redirect to STAGING_DIR/bin

Signed-off-by: Ted Hess <thess@kitschensync.net>
(backported from 042d68a19593ac796098845366a235f5465816da)

5 years agomt76: update to the latest version
Felix Fietkau [Tue, 13 Nov 2018 20:21:51 +0000 (21:21 +0100)]
mt76: update to the latest version

6745830 mt76: fix race condition in station removal
7e5c819 mt76: add mt76_sta_remove helper
75aa36e mt7603: use wcid/wcid_mask from struct mt76_dev
fd85ff9 mt7603: use mt76_sta_remove helper
0848d2d mt7603: simplify mt7603_mcu_msg_send, remove skb_ret handling
83a80ca mt76: request tx status for powersave released EOSP packet
df5c797 mt76: fix uninitialized mutex access setting rts threshold
0bfa98e mt76: introduce mt76x02_config_mac_addr_list routine
4248446 mt76x0: pci: enable VHT rates in IBSS mode
f75efd8 mt76x2u: phy: add TX_SHAPING calibration
c1d67b4 mt76x2u: phy: run phy_channel_calibrate after channel switch
9fe0fe8 mt76x2u: main: use mt76x02_bss_info_changed utility routine
3fc95d7 mt76x2u: init: remove mt76x2u_init_beacon_offsets routine
88f6883 mt76: remove wait argument from mt76x02_mcu_calibrate

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from d965f41ac85f8ef2bcd8e357d9288ae5015b992f)

5 years agomac80211: fix spurious disconnections with powersave clients
Felix Fietkau [Tue, 13 Nov 2018 19:34:35 +0000 (20:34 +0100)]
mac80211: fix spurious disconnections with powersave clients

Affects all drivers using ieee80211_tx_status_noskb, e.g. ath9k and mt76

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from 3879fc2b1aadd36cfa94b10077827cd98705434f)

5 years agokernel: drop old bluetooth config symbols
Stijn Tintel [Sat, 10 Nov 2018 15:36:44 +0000 (17:36 +0200)]
kernel: drop old bluetooth config symbols

They do not exist in any of the supported kernel versions.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(backported from 43e1b38e4accd7e55755df66aac5800c077334f1)

5 years agobzip2: Replace main site with mirrors (FS#1913)
Daniel Engberg [Wed, 7 Nov 2018 21:36:03 +0000 (22:36 +0100)]
bzip2: Replace main site with mirrors (FS#1913)

Use Gentoo and FreeBSDs distfile caches as mirrors because
main site/domain is abandoned.
Source: https://lwn.net/Articles/762264/

Fixes FS#1913

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from a95bef05799850f468be2676417f1a944ef4e5e0)

5 years agotools/cmake: Update to 3.12.4
Daniel Engberg [Fri, 9 Nov 2018 06:38:30 +0000 (07:38 +0100)]
tools/cmake: Update to 3.12.4

Update cmake to 3.12.4

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(backported from 04f4dd6fa212ce39eff3c2026d95b1be16cdd34d)

5 years agokernel: deprecate support for the generic "linux,part-probe" DT binding
Rafał Miłecki [Fri, 9 Nov 2018 13:57:45 +0000 (14:57 +0100)]
kernel: deprecate support for the generic "linux,part-probe" DT binding

It has been rejected upstream and instead a nice/more generic solution
has been implemented. It's possible now to describe partitions format
using "compatible" DT string.

No OpenWrt target uses "linux,part-probe" anymore, leave it only in case
some forks need it. It will be dropped with support for new kernels.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from c7c4ae35d6e9b53e2c66da7d6eadc9d77d64ed60)

5 years agotools: firmware-utils: mksercommfw build on Darwin
Kevin Darbyshire-Bryant [Thu, 8 Nov 2018 21:35:17 +0000 (21:35 +0000)]
tools: firmware-utils: mksercommfw build on Darwin

asm/byteorder.h & hence __cpu_to_be32() doesn't exist on Darwin

Shamelessly copy some byte swap functions from oseama.c

Acked-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(backported from 1a73b2d0892465e999ddc4aa319895f196e8c8d3)

5 years agoramips: use separated mtd patch reverting write_page() removal
Rafał Miłecki [Fri, 9 Nov 2018 12:30:51 +0000 (13:30 +0100)]
ramips: use separated mtd patch reverting write_page() removal

This helps understanding mtd changes needed to get downstream NAND
driver working.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from 9a3c805584b6adf3fa4f0db5c127a056b0c6d667)

5 years agopopt: Add main site back to PKG_SOURCE_URL
Daniel Engberg [Wed, 7 Nov 2018 21:44:36 +0000 (22:44 +0100)]
popt: Add main site back to PKG_SOURCE_URL

Main site is back up after weeks of downtime.
Add it back as last resort

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(backported from dbba87aa6a03f7a85e9acc910df26364235220a9)

5 years agoprocd: update to latest git HEAD
Hans Dedecker [Thu, 8 Nov 2018 13:46:56 +0000 (14:46 +0100)]
procd: update to latest git HEAD

20192e4 watchdog: improve seting watchdog timeout and frequency

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from c97c672f9b21364a3ae801b6e542617231dd5223)

5 years agoramips: fix netgear r6120 factory image generation
Koen Vandeputte [Thu, 8 Nov 2018 11:46:37 +0000 (12:46 +0100)]
ramips: fix netgear r6120 factory image generation

as indicated in commit c5bf408ed6bd "(ramips: fix image generation for mt76x8")
more rework was needed to fix the other issues.

Building on another machine, but using the same arch, showed
the application failing again for different reasons.

Fix this by completely rewriting the application, fixing following found issues:

- buffer overflows, resulting in stack corruption
- flaws in memory requirement calculations (too small, too large)
- memory leaks
- missing bounds checking on string handling
- non-reproducable images, by using unitilized memory in checksum calculation
- missing error handling, resulting in succes on specific image errors
- endianness errors when building on BE machines
- various minor build warnings
- documentation did not match the code actions (header item locations)
- allowing input to be decimal, hex or octal now

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from b4e17a7440cd9885a678f2a28609a38eca6dd5dc)

5 years agoiproute2: update to 4.19.0
Hans Dedecker [Mon, 5 Nov 2018 14:32:48 +0000 (15:32 +0100)]
iproute2: update to 4.19.0

Update to the latest version of iproute2; see https://lwn.net/Articles/769354/
for a full overview of the changes in 4.19.
Remove 190-add-cake-to-tc patch as CAKE qdisc is now supported in 4.19.0

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 559635dbb6983b4e95f167d0ac2d3a75af6d3102)

5 years agomac80211: brcmfmac: backport the last accepted 4.21 changes
Rafał Miłecki [Wed, 7 Nov 2018 10:16:25 +0000 (11:16 +0100)]
mac80211: brcmfmac: backport the last accepted 4.21 changes

It's a typo fix & patch that helps debugging possible WARN-ings.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from 4d5b0efc099486e497cc95dda1c68166f83e9537)

5 years agomac80211: brcmfmac: backport NVRAM loading improvements
Rafał Miłecki [Wed, 7 Nov 2018 10:06:16 +0000 (11:06 +0100)]
mac80211: brcmfmac: backport NVRAM loading improvements

This adds support for storing board specific NVRAM files as firmware.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from 3eab6b8275b2b592d5f7694b871d53ecff8d65da)

5 years agomac80211: brcmfmac: backport firmware loading cleanup
Rafał Miłecki [Wed, 7 Nov 2018 08:43:14 +0000 (09:43 +0100)]
mac80211: brcmfmac: backport firmware loading cleanup

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from 5932eb690f24c25b11119a55242dac4718fe8324)
(rebased patches)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agomac80211: brcmfmac: backport the latest 4.20 changes
Rafał Miłecki [Wed, 7 Nov 2018 08:01:32 +0000 (09:01 +0100)]
mac80211: brcmfmac: backport the latest 4.20 changes

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from b50f162b3cce3d95874e4394f4765413f58765f1)

5 years agomac80211: brcmfmac: rename 4.20 backport patches
Rafał Miłecki [Wed, 7 Nov 2018 07:52:46 +0000 (08:52 +0100)]
mac80211: brcmfmac: rename 4.20 backport patches

Include kernel version to help tracking changes.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(backported from f7a3459ab9c4d8f5102c8ae0861ca481571703f7)

5 years agoramips: add missing DTS frequency limit for the 5 GHz radio on Archer C20i
Felix Fietkau [Tue, 6 Nov 2018 21:24:03 +0000 (22:24 +0100)]
ramips: add missing DTS frequency limit for the 5 GHz radio on Archer C20i

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from b318edb999dbc5fe0517e1b7143f037cb1d67894)

5 years agovalgrind: bump to 4.14.0
Koen Vandeputte [Tue, 6 Nov 2018 15:33:09 +0000 (16:33 +0100)]
valgrind: bump to 4.14.0

Release notes can be found here:

http://www.valgrind.org/docs/manual/dist.news.html

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 7e173b43314d064e7e8a6837b7767a731a092537)

5 years agoramips: fix image generation for mt76x8
Koen Vandeputte [Tue, 6 Nov 2018 14:10:17 +0000 (15:10 +0100)]
ramips: fix image generation for mt76x8

Buildbot fails to generate images for targets also generating a
Sercomm binary with following error:

Opening file: /mnt/ramdisk/koen/firmware/builds/owrt_mt76x8/build_dir/target-mipsel_24kc_musl/linux-ramips_mt76x8/tmp/openwrt-ramips-mt76x8-netgear_r6120-squashfs-factory.img.rootfs.zip
Filesize: 3648606 .
mksercommfw: malloc.c:2427: sysmalloc: Assertion `(old_top == initial_top (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE && prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) == 0)' failed.
Makefile:287: recipe for target '/mnt/ramdisk/koen/firmware/builds/owrt_mt76x8/build_dir/target-mipsel_24kc_musl/linux-ramips_mt76x8/tmp/openwrt-ramips-mt76x8-netgear_r6120-squashfs-factory.img' failed

Debugging using valgrind shows stack corruption due to a buffer overflow.
The author of the generator assumes the filename ends with "root",
while it should be "rootfs".

Fix this by accounting for the 2 missing characters which solves the build issues.

More work is required to cleanup this source, which will be done later on.

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from c5bf408ed6bddfcfbafaf8e69d26104d80a244e9)

5 years agoimx6: fix DMA transaction errors
Koen Vandeputte [Mon, 5 Nov 2018 16:41:00 +0000 (17:41 +0100)]
imx6: fix DMA transaction errors

Following errors were seen in the past on imx6 when using serial:

[ 22.617622] imx-uart 2020000.serial: DMA transaction error.
[ 22.623228] imx-uart 2020000.serial: DMA transaction error.
[ 22.628826] imx-uart 2020000.serial: DMA transaction error.
[ 22.648951] imx-uart 2020000.serial: DMA transaction error.
[ 22.654558] imx-uart 2020000.serial: DMA transaction error.
[ 22.660156] imx-uart 2020000.serial: DMA transaction error.

Which is the reason why DMA for the serial ports
got disabled in commits:

efb362cd93b0 ("imx6: disable dma on uart")
3b4241071dd4 ("imx6: disable UART dma")

As indicated on mailinglist discussion, the cause seems to be
the usage of very old SDMA firmware which is present in the soc:

[    0.624302] imx-sdma 20ec000.sdma: Direct firmware load for imx/sdma/sdma-imx6q.bin failed with error -2
[    0.624318] imx-sdma 20ec000.sdma: Falling back to user helper
[   64.531607] imx-sdma 20ec000.sdma: external firmware not found, using ROM firmware

This patch adds the new firmware binary. (2196 bytes)

It is required to embed the binary into the kernel image, as it
gets loaded very early in the boot process where the rootfs is not
available yet:

[    0.622966] imx-sdma 20ec000.sdma: loaded firmware 3.3

Extended testing shows that the DMA errors are not seen anymore
when using this newer firmware version.

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 74738c4b8057cbc155c3c67a1b372b1eec2e7ecc)

5 years agoath9k: fix dynack in IBSS mode
Koen Vandeputte [Mon, 5 Nov 2018 10:31:12 +0000 (11:31 +0100)]
ath9k: fix dynack in IBSS mode

Currently, dynack was only tested upstream using AP/STA mode.
Testing it on IBSS, showed that late-ack detection was broken.

This is caused due to dynack using Association Request/Response
frames for late-ack detection, which IBSS does not use.
Also allowing Authentication frames here solves this.

A second issue also got fixed, which was also seen AP/STA mode:

When a station was added, the estimated value would be exponentially averaged
using 0 as a starting point.

This means that on larger distances, the ack timeout was still not high
enough before synchronizing would run out of late-ack's for estimation.

Fix this by using the initial estimated value as a baseline
and only start averaging in the following estimation rounds.

Test setup:
- 2x identical devices:  RB912UAG-5HPnD + 19dB sector
- IBSS
- 2x2 802.11an (ar9340), HT20, long GI
- RSSI's  -70 / -71
- Real distance: 23910 meter

Results (60s iperf runs):

Fixed coverage class 54 (up to 24300m):
* 21.5 Mbits/sec

Dynack:
* 28.9 Mbits/sec

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 5ac34818f9c3ad46febc260f8ae348e05b9c8f00)

5 years agoar71xx: disable some tiny targets with kernel 4.14
Koen Vandeputte [Mon, 5 Nov 2018 11:53:55 +0000 (12:53 +0100)]
ar71xx: disable some tiny targets with kernel 4.14

The bump to kernel 4.14 caused a massive increase in kernel size.

For most targets, switching them to dynamic partitioning allowed
to cope with this.

On some targets, the kernel partition is located behind the rootfs,
which disallows switching to dynamic partitioning as the boot location
would be altered, requiring a u-boot change.

Also within the tiny section, which disables kernel symbols etc
to decrease the image size,  the partition size is still too small.

Disable these targets for now, fixing image generation:

- Buffalo BHR-4GRV2
- Zbtlink ZBT-WE1526

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 860de2e1aa9deac7dce76b7f85cb5fcfbba00468)

5 years agoglibc: update to latest 2.27 commit (BZ#23709,BZ#23822)
Hans Dedecker [Mon, 5 Nov 2018 13:19:33 +0000 (14:19 +0100)]
glibc: update to latest 2.27 commit (BZ#23709,BZ#23822)

d8eee5ef55 x86: Fix Haswell CPU string flags (BZ#23709)
5cd5309d91 i64: fix missing exp2f, log2f and powf symbols in libm.a [BZ #23822]
1759ea197b conform: XFAIL siginfo_t si_band test on sparc64

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 69734416d23d97c1e58c2cc1fcef535ce0c9ae13)

5 years agotools/bison: update to version 3.2
Hannu Nyman [Sun, 4 Nov 2018 15:42:09 +0000 (17:42 +0200)]
tools/bison: update to version 3.2

Update bison to version 3.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(backported from f1ed7747bbd660cee52b4de936823707eac08215)

5 years agoipq40xx: fix NBG6617 LED mapping
David Bauer [Sun, 4 Nov 2018 15:01:39 +0000 (16:01 +0100)]
ipq40xx: fix NBG6617 LED mapping

The NBG6617's LEDs are wrongly identified in the 01_leds boardinit
script (board instead of boardname), resulting in referencing
non-existent LEDs in UCI.

Signed-off-by: David Bauer <mail@david-bauer.net>
(backported from 5896b146a49968aa0a9889f57f75a8a918e384ae)

5 years agoiperf: allow non-ipv6 builds
Alexander Couzens [Sat, 3 Nov 2018 00:22:59 +0000 (01:22 +0100)]
iperf: allow non-ipv6 builds

Add configure argument --disable-ipv6 when ipv6 is deselected.
Add fix-non-ipv6-builds.patch as long there is no new upstream
release.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
(backported from 900005ee75754ba62972ed8da6eba2d6b47e1b7f)
(rebased patches)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agocurl: noop commit to refer CVEs fixed in 7.62.0
Hans Dedecker [Fri, 2 Nov 2018 12:05:13 +0000 (13:05 +0100)]
curl: noop commit to refer CVEs fixed in 7.62.0

When bumping Curl to 7.62.0 in commit 278e4eba09 I did not include the fixed
CVEs in the commit message; this commit fixes this.

The following CVEs were fixed in 7.62.0 :

CVE-2018-16839
CVE-2018-16840
CVE-2018-16842

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from c9f5934c71e73df707d97f8b2ff86e164bfbda12)

5 years agoipq-wifi: drop custom board-2.bins
Christian Lamparter [Mon, 22 Oct 2018 21:47:56 +0000 (23:47 +0200)]
ipq-wifi: drop custom board-2.bins

The BDFs for all boards were upstreamed to the ath10k-firmware
repository and linux-firmware.git.

We switched to the upstream board-2.bin, hence the files can be removed
here.

Keep the ipq-wifi package in case new boards are added. It might take
some time till board-2.bins send upstream are merged.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from dceee8cc09a54f96dee82a6e95e3e77a6dd7ac13)

5 years agoipq40xx: nbg6617: switch to upstream boardfile variant
Christian Lamparter [Mon, 22 Oct 2018 21:47:55 +0000 (23:47 +0200)]
ipq40xx: nbg6617: switch to upstream boardfile variant

The NBG6617's boardfile was merged and this device can
now switch to the upstream ath10k board-2.bin.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from 8b18fce3b800f4fec5b9fe3b324514071fae73eb)

5 years agoath10k-firmware: update board-2.bin for community firmwares
Christian Lamparter [Mon, 22 Oct 2018 21:47:54 +0000 (23:47 +0200)]
ath10k-firmware: update board-2.bin for community firmwares

This patch updates the board-2.bin for the default
IPQ4019, QCA9984 and QCA9888 ath10k-firmware-xyz-ct
and -ct-htt firmwares.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from 575d0240f9593145aeda60385110e3e1e1673888)

5 years agoipq40xx: rt-ac58u: replace ubi auto load hack
Christian Lamparter [Mon, 22 Oct 2018 21:47:53 +0000 (23:47 +0200)]
ipq40xx: rt-ac58u: replace ubi auto load hack

This patch replaces the custom autoload quirk of the
RT-AC58U with a bootargs-append overwrite.

The vendor's u-boot doesn't leave the bootargs / cmdline alone,
so the it can't be overwritten in any other way right now...
And of course, this will be a lot of fun to deal with once
the device switches to the new spi-nand subsystem.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from 6840f15a16607a2c08241ae3f8932b5c0431486b)

5 years agokernel: Remove dependencies on old kernels
Rosen Penev [Sun, 28 Oct 2018 01:53:52 +0000 (18:53 -0700)]
kernel: Remove dependencies on old kernels

Kernels 4.1 and 4.4 are not part of the tree anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from 8fc187a76ea00f89c26a489e5242bde4887fe529)

5 years agolibconfig: Fix tarball filename (and URL)
Daniel Engberg [Fri, 19 Oct 2018 21:05:44 +0000 (23:05 +0200)]
libconfig: Fix tarball filename (and URL)

v$(PKG_VERSION).tar.gz is a bad idea and will clash for obvious reasons.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(backported from f9a408b75e72d9ddbe4ddf9e54bad2b4b604235a)

5 years agouboot-mxs: bump to v2018.09
Michael Heimpold [Sun, 28 Oct 2018 14:26:08 +0000 (15:26 +0100)]
uboot-mxs: bump to v2018.09

Also update the U-Boot BSP patch for I2SE Duckbill devices
and remove upstreamed patch for LibreSSL support.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(backported from 79b766d07d56d22536120de2066e2e203ed01eb0)

5 years agokernel: add kmod-usb-serial-mos7840
Thomas Fuzeau [Tue, 30 Oct 2018 11:06:22 +0000 (12:06 +0100)]
kernel: add kmod-usb-serial-mos7840

Enable build of kernel module for mos7840 usb-serial devices.

Signed-off-by: Thomas Fuzeau <tfuzeau@loocla.com>
(backported from 87e1894d59bf2272e93ae26692eefc9826997709)

5 years agocurl: bump to 7.62.0
Hans Dedecker [Wed, 31 Oct 2018 21:58:54 +0000 (22:58 +0100)]
curl: bump to 7.62.0

Refresh patches, for changes in version 7.62.0 see https://curl.haxx.se/changes.html#7_62_0

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 278e4eba096238991d0d5965d5fab07a9b648796)
(rebased patches)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agoopenssl: enable OPENSSL_WITH_DEPRECATED when OpenSSL is built as a build dep
Matthias Schiffer [Tue, 30 Oct 2018 19:38:34 +0000 (20:38 +0100)]
openssl: enable OPENSSL_WITH_DEPRECATED when OpenSSL is built as a build dep

Some package (e.g. libunbound) depend on OPENSSL_WITH_DEPRECATED. In some
situations it may happen that libunbound and openssl are only pulled in as
build dependencies, but are not enabled in .config.

In such cases, the defaults of symbols like OPENSSL_WITH_DEPRECATED are
ignored (as the whole symbol depends on PACKAGE_libopenssl), and config
symbol dependencies of libunbound aren't effective either (as libunbound
is not actually enabled).

This commit works around the issue by introducing a hidden negated symbol
OPENSSL_NO_DEPRECATED, which is always disabled when PACKAGE_libopenssl is
disabled, and ensures that OpenSSL is built with deprecated APIs in this
case. A user can still manage to break the build by explicitly enabling
libopenssl and disabling OPENSSL_WITH_DEPRECATED; the interaction between
build dependencies and config symbols will require further discussion.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(backported from dd9da5146299b769fad874d32a8ae110312cb68f)

5 years agodnsmasq: tighten config file permissions
Kevin Darbyshire-Bryant [Thu, 11 Oct 2018 08:46:42 +0000 (09:46 +0100)]
dnsmasq: tighten config file permissions

Install following as config files (600) perms instead of as data (644)

/usr/share/dnsmasq/dhcpbogushostname.conf
/usr/share/dnsmasq/trust-anchors.conf
/usr/share/dnsmasq/rfc6761.conf
/etc/hotplug.d/ntp/25-dnsmasqsec
/etc/config/dhcp
/etc/dnsmasq.conf

dnsmasq reads relevant config files before dropping root privilege and
running as dnsmasq:dnsmasq

ntpd runs as root so the hotplug script is still accessible

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(backported from 3dba85254719215747e150301081477a47b38645)

5 years agoar71xx: expand kernel size for ubnt targets
Koen Vandeputte [Mon, 29 Oct 2018 14:48:10 +0000 (15:48 +0100)]
ar71xx: expand kernel size for ubnt targets

Kernel 4.14 is pretty large causing a build error as the partition is too small.
Expand the kernel partition a bit to make it fit.

* ubnt-uap-pro
* ubnt-unifi-outdoor-plus

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 162e016fed96eeea410e305b7edaf7008cf6ab77)

5 years agoar71xx: disable ap91-5g due to kernel size
Koen Vandeputte [Mon, 29 Oct 2018 14:44:54 +0000 (15:44 +0100)]
ar71xx: disable ap91-5g due to kernel size

This target causes a build failure as the kernel image does not fit
into the kernel partition.

As the kernel is located behind the rootfs, it cannot be enlarged
as the boot entry location would get altered.

Disable this target for now.

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from d6b63f16984b91b489713c772c49fb9982cdf68e)

5 years agoar71xx: fix sysupgrade generation for some targets
Koen Vandeputte [Wed, 24 Oct 2018 12:44:30 +0000 (14:44 +0200)]
ar71xx: fix sysupgrade generation for some targets

These targets are already defined as having a dynamic partition
but the safeloader was not adapted for them.

This causes a build warning for the sysupgrade image being too big.

Targets:
- c58-v1
- c60-v1
- c60-v2
- TL-WR1043 v5
- TL-WR902AC v1
- TL-WR942N V1

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from f3b80c36bb01fa7cf4181828d78da8a66f46c31d)

5 years agoar71xx: move OCEDO Koala to generic and use dynamic partitioning
David Bauer [Thu, 18 Oct 2018 18:43:42 +0000 (20:43 +0200)]
ar71xx: move OCEDO Koala to generic and use dynamic partitioning

This changes the OCEDO Koala flash-layout to a unified firmware
partition, thus making the ar71xx-generic kernel fit in flash.

Compile and runtested on OCEDO Koala.

Signed-off-by: David Bauer <mail@david-bauer.net>
[small title reword]
Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from f89fc43a50998a69bd401268020ab78b90ff7a34)

5 years agogrub2: fix regression caused by binutils-2.31.1
Philip Prindeville [Sun, 21 Oct 2018 02:23:12 +0000 (20:23 -0600)]
grub2: fix regression caused by binutils-2.31.1

grub-efi no longer works:

grub-mkimage: error: relocation 0x4 is not implemented yet.

See:

http://git.savannah.gnu.org/cgit/grub.git/commit/util?id=842c390469e2c2e10b5aa36700324cd3bde25875

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>i [PKG_RELEASE increase]
(backported from a6d02a757273439133eef70a658c49059c18018a)
(rebased patches)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agoglibc: update to latest 2.27 commit (BZ #23562, BZ #23275)
Hans Dedecker [Tue, 23 Oct 2018 13:55:09 +0000 (15:55 +0200)]
glibc: update to latest 2.27 commit (BZ #23562, BZ #23275)

77b4b8231e signal: Use correct type for si_band in siginfo_t [BZ #23562]
5bdb6897fc Fix race in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP [BZ #23275]

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 70315fe144035c3f741108df2ebdcd8912b2d576)

5 years agofstools: update to git HEAD
Hans Dedecker [Sun, 21 Oct 2018 18:43:46 +0000 (20:43 +0200)]
fstools: update to git HEAD

29e53af fstools: add ntfs support

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 59db98d0f216b2de1472bcde0d87ae871625052c)

5 years agomac80211: hermes-pcmcia: add missing dependency to kmod-pcmcia-core
Hauke Mehrtens [Sun, 21 Oct 2018 14:35:49 +0000 (16:35 +0200)]
mac80211: hermes-pcmcia: add missing dependency to kmod-pcmcia-core

This fixes a build problem on x86.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from 9fcfcd49f8b9c63758e1fd2d9a6ee20ef74b84d5)

5 years agolinux-firmware: intel: Add iwl 9000 and 9260 firmware
Hauke Mehrtens [Thu, 18 Oct 2018 19:03:16 +0000 (21:03 +0200)]
linux-firmware: intel: Add iwl 9000 and 9260 firmware

Add the most recent supported firmware file for the Intel 9000 and
9260 wireless chips. The API version 41 is not yet supported by the driver.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from e1db49310e9912f4076789e704180ab3b9ea0184)

5 years agolinux-firmware: intel: update firmware files for 7265D, 8000C and 8265
Hauke Mehrtens [Thu, 18 Oct 2018 19:02:20 +0000 (21:02 +0200)]
linux-firmware: intel: update firmware files for 7265D, 8000C and 8265

Use more recent versions for the Intel wireless chips 7265D, 8000C and 8265.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from 10dffe2fa34d300583da23843995b4126d0a59a5)

5 years agompc85xx: workaround 4.14 cross compile issue
Ryan Mounce [Fri, 12 Oct 2018 07:46:28 +0000 (18:16 +1030)]
mpc85xx: workaround 4.14 cross compile issue

Regression introduced with 4.10 by 43c9127d94d62a232ed33ed2eab8a08657ce5472

Build will fail if system 'ar' does not support deterministic builds.
e.g. macOS with Xcode toolchain

Appears to be fixed upstream in 4.18 by af3901cbbd3de182aafb8ee553c825c0074df6a2

Signed-off-by: Ryan Mounce <ryan@mounce.com.au>
(backported from 4d2613b01ac6d34c2de550472ad9167e28ebd11e)

5 years agotools/pkg-config: pass arguments at the end
Arthur Skowronek [Mon, 15 Oct 2018 12:55:57 +0000 (14:55 +0200)]
tools/pkg-config: pass arguments at the end

Go for openwrt passes pkg-config arguments in the format of

        pkg-config --cflags -- pkg-name

which in turn will be passed down to the real pkg-config as something
like

        pkg-config.real --cflags -- pkg-name --define...

and causes the real pkg-config implementation to missinterpret the given
argument list.

This also helps to fix https://github.com/golang/go/issues/27940

Signed-off-by: Arthur Skowronek <arthur.skowronek@tuta.io>
(backported from 5f2cb6d7dc9de24bec7b1139f8d785f0e7588eed)

5 years agokernel/modules: Aosong AM2315/AM2320 IIO kernel module support enabled.
Roman Bazalevskiy [Fri, 12 Oct 2018 12:16:42 +0000 (15:16 +0300)]
kernel/modules: Aosong AM2315/AM2320 IIO kernel module support enabled.

Signed-off-by: Roman Bazalevskiy <rvb@rvb.name>
(backported from 47e7a3904df6e0556fa9cd29206e9b8228e4d943)

5 years agokernel/modules: add kmod-fou6 package
Deng Qingfang [Tue, 16 Oct 2018 15:01:05 +0000 (23:01 +0800)]
kernel/modules: add kmod-fou6 package

IPv6 support for Foo-over-UDP tunnel

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
(backported from 858a8acf3ec786348f6d347cf9e7afcf4888fee1)

5 years agolinux-firmware: Update linux-firmware to 2018-10-18
Robert Marko [Fri, 19 Oct 2018 07:54:32 +0000 (09:54 +0200)]
linux-firmware: Update linux-firmware to 2018-10-18

Kalles ath10k PR was finally merged so update linux-firmware to
include those changes.

This is needed since disabling ath10k-firmware a lot of custom BDF-s
in board-2.bin-s are not available in previously outdated linux-firmware
board-2.bin-s.
This also includes support for boards currently using ipq-wifi and other
WIP ones.

Runtime tested on 8devices Jalapeno.

Signed-off-by: Robert Marko <robimarko@gmail.com>
(backported from f6a26f9a202474cf853b43191d119a1f6e65a5b7)

5 years agoapm821xx: add disk-activity triggers via DT.
Christian Lamparter [Mon, 15 Oct 2018 18:00:09 +0000 (20:00 +0200)]
apm821xx: add disk-activity triggers via DT.

The WNDR4700 and the MBL have a dedicated HDD activity LED.
This patch adds the default led triggers to the DTS and
removes the entries in 01_leds.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from fc70276e6cd330eddaafbc71f11acefbc84a25df)

5 years agoapm821xx: apm82181.dtsi overhaul
Christian Lamparter [Mon, 15 Oct 2018 18:00:08 +0000 (20:00 +0200)]
apm821xx: apm82181.dtsi overhaul

- order entries by mmio address where possible

 - switch to lower-case address values

 - comment on BSP u-boot behaviour in regards to
   what it edits and look for

 - annotate irq lines with the help of interrupt-names

 - remove deprecated "device_type" properties
   The pci and network device_type had to stay since
   they are required by the drivers and u-boot.
   the cpu and memory device_types will remain as well
   as they are still part of the DT Spec.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from 1d5d77612f0eb3aa435dc574aecd23b629b55b6d)

5 years agoapm821xx: force WNDR4700 console to 115200n8
Christian Lamparter [Mon, 15 Oct 2018 18:00:07 +0000 (20:00 +0200)]
apm821xx: force WNDR4700 console to 115200n8

With the upcoming 4.19 release, the serial console on the
Netgear WNDR4700 would no longer work as it is never really
set and always relied on the kernel's serial code not to
change the baud rate.

On the stock firmware, Netgear forced the console setting
through a custom CONFIG_CMDLINE in their kernel to 115200.
Normally, they should have done it in a different way and
just passed the baudrate through a "console=..." kernel
parameter via the bootargs in the "/chosen" dt node.
But in their default u-boot bootcmd setting, they somehow
forgot to add the "run addtty", so there's no easy way to
pass the baudrate from u-boot to the kernel. So it has
to be forced as otherwise it ends up as 9600 baud.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from 9ca82c2374e008f288c90066a7f2c2581c584c7e)

5 years agoapm821xx: set uart compatible to ns16750
Christian Lamparter [Mon, 15 Oct 2018 18:00:06 +0000 (20:00 +0200)]
apm821xx: set uart compatible to ns16750

The APM821XX/PPC460EX datasheet mentions:
"Register compatibility with 16750 register set"

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
(backported from 68bb91018df1c3d9474041a4d55e1cfd66022522)

5 years agogemini: Fix up image generation
Linus Walleij [Wed, 17 Oct 2018 18:46:19 +0000 (20:46 +0200)]
gemini: Fix up image generation

I noticed that the image generator for the Gemini generates
some 10+ MB files for the second (application) partition.
This is just wrong. The first 6144K partition named initramfs
easily fits OpenWRTs squashfs,jffs2 overlayed partitions
with nice headroom for storing configuration files.

Generate a blank partition for the hddapp.tgz file and delete
it after generating the firmware image - when performing
updates manually you just want the "rd.z" file around
anyways.

Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
(backported from f280bd7fa8423c04028757bbf28284574c7a5bc9)

5 years agogemini: Break out USB to packages
Linus Walleij [Thu, 18 Oct 2018 09:30:27 +0000 (11:30 +0200)]
gemini: Break out USB to packages

This creates a new kernel package for the fotg210 host
controller and uses that with the gemini to shrink the
kernel. The SQ201 needs the USB2 PCI package as well.

The build system required me to make kernel_oldconfig
beofore it would build without errors so some minor
unrelated Kconfig entries are changed.

Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
(backported from 10ec966f7ba7471a8af437c317cdcc5ef8865e8d)

5 years agotoolchain/musl: Don't override optimization set by upstream
Daniel Engberg [Thu, 22 Feb 2018 22:39:40 +0000 (23:39 +0100)]
toolchain/musl: Don't override optimization set by upstream

Don't override optimization set by upstream.
Provides a speed increase for internal (library), malloc and string
operations in musl.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
[add : to PKG_RELEASE release variable for consistency]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(backported from d27d87c9109e12485bc3a709c8dea1ce05f9f81c)

5 years agoiproute2: install ip-tiny and ip-full in /usr/libexec
Hans Dedecker [Tue, 16 Oct 2018 12:16:48 +0000 (14:16 +0200)]
iproute2: install ip-tiny and ip-full in /usr/libexec

Install the ip-tiny and ip-full variants in /usr/libexec as the suffixed
ip variants are not meant to be called directly

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 15a59e3e088c693cf7a654c31151149268b9a340)

5 years agoar71xx/ath79: fix mtd corruption
Fabio Bettoni [Wed, 17 Oct 2018 12:21:41 +0000 (14:21 +0200)]
ar71xx/ath79: fix mtd corruption

In commit fec8fe806963 ("kernel: bump 4.9 to 4.9.116") [1], the following patch for removed:
- 403-mtd_fix_cfi_cmdset_0002_status_check.patch

This patch contained fixes for both write and erase functions.

While the chip-detects for erase got fixed upstream [2],
some modifications are still required, even with the fixes applied.

While at it, also apply the same fix for target ath79,
which suffers the same issue.

Not doing so results in following errors seen:

Collected errors:
 * pkg_write_filelist: Failed to open //usr/lib/opkg/info/luci-lib-ip.list: I/O error.
 * opkg_install_pkg: Failed to extract data files for luci-lib-ip. Package debris may remain!
 * opkg_install_cmd: Cannot install package luci-ssl.
 * opkg_conf_write_status_files: Can't open status file //usr/lib/opkg/status: I/O error.

[    0.780920] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    8.406396] jffs2: notice: (415) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    8.423476] mount_root: switching to jffs2 overlay
[  270.902671] jffs2: Write of 1989 bytes at 0x005ce6f8 failed. returned -5, retlen 962
[  270.931965] jffs2: Write of 1989 bytes at 0x005ceec0 failed. returned -5, retlen 0
[  270.939631] jffs2: Not marking the space at 0x005ceec0 as dirty because the flash driver returned retlen zero
[  270.950397] jffs2: Write of 68 bytes at 0x005ceec0 failed. returned -5, retlen 0
[  270.957838] jffs2: Not marking the space at 0x005ceec0 as dirty because the flash driver returned retlen zero
[  270.968584] jffs2: Write of 68 bytes at 0x005ceec0 failed. returned -5, retlen 0
[  270.976027] jffs2: Not marking the space at 0x005ceec0 as dirty because the flash driver returned retlen zero
[  270.986735] jffs2: Write of 68 bytes at 0x005ceec0 failed. returned -5, retlen 0
[  270.994225] jffs2: Not marking the space at 0x005ceec0 as dirty because the flash driver returned retlen zero

[1] https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=fec8fe806963c96a6506c2aebc3572d3a11f285f
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v4.9.133&id=a0239d83e1cb60de5e78452d4708c083b9e3dcbe

Fixes: fec8fe806963 ("kernel: bump 4.9 to 4.9.116")
Signed-off-by: Fabio Bettoni <fbettoni@gmail.com>
Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from ddc11c3932c7b7b7df7d5fbd48f207e77619eaa7)
(rebased patches)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agoar71xx: Move some targets to tiny
Koen Vandeputte [Wed, 17 Oct 2018 15:16:51 +0000 (17:16 +0200)]
ar71xx: Move some targets to tiny

Recent changes on ar71xx (switch to 4.14, memory compaction, ...) cause
an increase in kernel size, making it too big for some devices.

Move these devices to the tiny target, where kernel symbols and
optimization for speed are disabled, reducing the kernel size.

Devices:
- EnGenius ENS202EXT
- OCEDO Koala

Compile-tested targets:

- ar71xx->generic->default
- ar71xx->smallFlash->Default

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 5f249333090741ecba190855b13c87fd93ca2520)

5 years agotreewide: use wpad-basic for not small flash targets
Mathias Kresin [Tue, 10 Jul 2018 17:22:41 +0000 (19:22 +0200)]
treewide: use wpad-basic for not small flash targets

Add out of the box support for 802.11r and 802.11w to all targets not
suffering from small flash.

Signed-off-by: Mathias Kresin <dev@kresin.me>
Mathias did all the heavy lifting on this, but I'm the one who should
get shouted at for committing.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(backported from 80c61c161ac5943137ade233d62cf89d746de5a2)

5 years agohostapd: add basic variant
Kevin Darbyshire-Bryant [Mon, 9 Jul 2018 12:16:42 +0000 (13:16 +0100)]
hostapd: add basic variant

Add a basic variant which provides WPA-PSK only, 802.11r and 802.11w and
is intended to support 11r & 11w (subject to driver support) out of the
box.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(backported from 1063d904b78297b3e21a352bed19bd312235ff65)

5 years agoppp: don't start ppp with IPv6 support if ipv6 is not supported
Rosy Song [Thu, 4 Oct 2018 06:46:40 +0000 (14:46 +0800)]
ppp: don't start ppp with IPv6 support if ipv6 is not supported

Signed-off-by: Rosy Song <rosysong@rosinson.com>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from fd09e251e9f5809bf4f323e4fa644f90e275146e)

5 years agotoolchain/glibc: update to 2.27+
Hans Dedecker [Mon, 15 Oct 2018 09:55:48 +0000 (11:55 +0200)]
toolchain/glibc: update to 2.27+

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 79982b26bb01bdbbb9f7c8543e0eb3a1d2437445)

5 years agoramips: refresh mt7621 kernel config
Felix Fietkau [Mon, 15 Oct 2018 08:49:55 +0000 (10:49 +0200)]
ramips: refresh mt7621 kernel config

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from d251a11f60fc8fd506eea8a3b552d66c9bf78e9b)

5 years agokernel: add CONFIG_CC_OPTIMIZE_FOR_* to the default config
Felix Fietkau [Mon, 15 Oct 2018 08:48:58 +0000 (10:48 +0200)]
kernel: add CONFIG_CC_OPTIMIZE_FOR_* to the default config

Avoid repeating them in the target config, they are overwritten by
top-level menuconfig anyway

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from e34ea1b4ff6db504718258cbcc40bdbd730e57a3)

5 years agohostapd: Add WPA-EAP-SUITE-B-192 (WPA3-Enterprise)
Hauke Mehrtens [Tue, 9 Oct 2018 20:50:50 +0000 (22:50 +0200)]
hostapd: Add WPA-EAP-SUITE-B-192 (WPA3-Enterprise)

This adds support for the WPA3-Enterprise mode authentication.

The settings for the WPA3-Enterpriese mode are defined in
WPA3_Specification_v1.0.pdf. This mode also requires ieee80211w and
guarantees at least 192 bit of security.

This does not increase the ipkg size by a significant size.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from 4c3fae4adcd41f43cf734e4d07a457b111a3d864)

5 years agohostapd: Activate Opportunistic Wireless Encryption (OWE)
Hauke Mehrtens [Thu, 4 Oct 2018 20:45:06 +0000 (22:45 +0200)]
hostapd: Activate Opportunistic Wireless Encryption (OWE)

OWE is defined in RFC 8110 and provides encryption and forward security
for open networks.

This is based on the requirements in the Wifi alliance document
Opportunistic_Wireless_Encryption_Specification_v1.0_0.pdf
The wifi alliance requires ieee80211w for the OWE mode.
This also makes it possible to configure the OWE transission mode which
allows it operate an open and an OWE BSSID in parallel and the client
should only show one network.

This increases the ipkg size by 5.800 Bytes.
Old: 402.541 Bytes
New: 408.341 Bytes

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from 18c6c93a3b83831a1e7d7d80c22c477412c56cb4)

5 years agohostapd: Activate Simultaneous Authentication of Equals (SAE)
Hauke Mehrtens [Wed, 3 Oct 2018 21:33:51 +0000 (23:33 +0200)]
hostapd: Activate Simultaneous Authentication of Equals (SAE)

This build the full openssl and wolfssl versions with SAE support which
is the main part of WPA3 PSK.

This needs elliptic curve cryptography which is only provided by these
two external cryptographic libraries and not by the internal
implementation.

The WPA3_Specification_v1.0.pdf file says that in SAE only mode
Protected Management Frames (PMF) is required, in mixed mode with
WPA2-PSK PMF should be required for clients using SAE, and optional for
clients using WPA2-PSK. The defaults are set now accordingly.

This increases the ipkg size by 8.515 Bytes.
Old: 394.026 Bytes
New: 402.541 Bytes

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from 4a009a16d2e87da3cd0b994934d3c3b76ca0455b)

5 years agohostapd: SAE: Do not ignore option sae_require_mfp
Hauke Mehrtens [Wed, 10 Oct 2018 21:36:15 +0000 (23:36 +0200)]
hostapd: SAE: Do not ignore option sae_require_mfp

This patch was send for integration into the hostapd project.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from a1ad1144b61680cfa0803b681a3b55ff8c557022)

5 years agohostapd: backport build fix when OWE is activated
Hauke Mehrtens [Wed, 3 Oct 2018 18:56:41 +0000 (20:56 +0200)]
hostapd: backport build fix when OWE is activated

This backports a compile fix form the hostapd project.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from 779773a0dee759d87c483de266e41164cd851af0)

5 years agohostapd: sync config with default configuration
Hauke Mehrtens [Tue, 2 Oct 2018 22:05:11 +0000 (00:05 +0200)]
hostapd: sync config with default configuration

This replaces the configuration files with the versions from the hostapd
project and the adaptions done by OpenWrt.

The resulting binaries should be the same.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(backported from 4b93b03577cefeed39fb6cadc7aa85706deeb074)

5 years agomac80211: fix A-MSDU packet handling with TCP retransmission
Felix Fietkau [Thu, 11 Oct 2018 13:16:28 +0000 (15:16 +0200)]
mac80211: fix A-MSDU packet handling with TCP retransmission

Improves local TCP throughput and fixes use-after-free bugs that could lead
to crashes.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(backported from e220ffb5338fc16a9f36662c1a7c32f6923e53ce)

5 years agoath10k-ct: Update to 29-09-2018
Robert Marko [Tue, 9 Oct 2018 13:05:56 +0000 (15:05 +0200)]
ath10k-ct: Update to 29-09-2018

Update ath10k-ct to be able to drop 210-ath10k-fix-recent-bandwidth-conversion-bug.patch
as its upstream.

b9989fbd5d6e ath10k-ct: Add upstream patch to fix peer rate reporting.
ac9224344dbf ath10k-ct: Support sending custom frames with no-ack flag.
bc938bc2021e ath10k-ct: Support sending pkts with specific rate on 10.4 firmware.

Runtime tested on:
- GL-iNet GL-B1300
- Mikrotik RB912 + QCA9882

Signed-off-by: Robert Marko <robimarko@gmail.com>
[Added list of all changes from previous version + add own test device]
Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from b1ab8fac5aad75e1396b7187b396dac0fc4623d0)

5 years agoprocd: update to latest git HEAD
John Crispin [Thu, 11 Oct 2018 06:42:24 +0000 (08:42 +0200)]
procd: update to latest git HEAD

94944ab procd: Add cpu string to board detection

Signed-off-by: John Crispin <john@phrozen.org>
(backported from d24bdaa794fec4173859e45ac3b7c773b199bd45)

5 years agopackage/: fix $(PROJECT_GIT) usage
John Crispin [Thu, 11 Oct 2018 06:37:59 +0000 (08:37 +0200)]
package/: fix $(PROJECT_GIT) usage

Signed-off-by: John Crispin <john@phrozen.org>
(backported from 3e8ef61c01799f477e2f6f6c227a0da79cf53f51)

5 years agoprocd: Install hotplug files as 600
Rosen Penev [Wed, 19 Sep 2018 19:03:32 +0000 (12:03 -0700)]
procd: Install hotplug files as 600

procd runs as root, so it only makes sense that its files are restricted.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from 82d272efed4c9907e8577fa541a2f2c2db713cce)

5 years agolinux-atm: Install hotplug file as 600
Rosen Penev [Wed, 19 Sep 2018 19:03:31 +0000 (12:03 -0700)]
linux-atm: Install hotplug file as 600

The hotplug files is only used by procd, which runs as root.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from 4572d996a42d86901783f9671026cee8aa4e15fc)

5 years agocomgt: Install hotplug and netifd files as 600
Rosen Penev [Wed, 19 Sep 2018 19:03:30 +0000 (12:03 -0700)]
comgt: Install hotplug and netifd files as 600

procd and netifd both run as root. These files are not used elsewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from c7144ec688192c83ec91c4a4ff4f5db06c11e469)

5 years agosamba36: Install several config files as 600
Rosen Penev [Wed, 19 Sep 2018 19:03:29 +0000 (12:03 -0700)]
samba36: Install several config files as 600

Hotplug is managed by procd, which runs as root. The other files are used
by root as well.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from f5ddbd695bcfb8ae8f8c681767beb6ee9770695d)

5 years agosoloscli: Install hotplug file as 600
Rosen Penev [Wed, 19 Sep 2018 19:03:28 +0000 (12:03 -0700)]
soloscli: Install hotplug file as 600

Hotplug is managed by procd, which runs as root.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from 745c3acd6476a89995b812c319abea9f3af08eb0)

5 years agofirewall: Install config files as 600
Rosen Penev [Wed, 19 Sep 2018 19:03:26 +0000 (12:03 -0700)]
firewall: Install config files as 600

None of the files in firewall are used by non-root.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from 49065d227a8ff2b4ceb758b501c5dfeba4dc1e67)

5 years agompc85xx: remove kernel 4.9 support
Magnus Kroken [Fri, 5 Oct 2018 23:46:24 +0000 (01:46 +0200)]
mpc85xx: remove kernel 4.9 support

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(backported from ba826ce4e7880d81f7c73821f2221e90493cb3f8)

5 years agompc85xx: switch to kernel 4.14
Magnus Kroken [Fri, 5 Oct 2018 23:46:23 +0000 (01:46 +0200)]
mpc85xx: switch to kernel 4.14

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(backported from 650806d83ab9b59772a3506d6ef9811665552151)

5 years agompc85xx: add kernel 4.14 support
Magnus Kroken [Fri, 5 Oct 2018 23:46:22 +0000 (01:46 +0200)]
mpc85xx: add kernel 4.14 support

Based on patches previously submitted by Achim Gottinger:
http://lists.infradead.org/pipermail/openwrt-devel/2018-June/012719.html

Tested on TP-Link TL-WDR4900 v1.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(backported from c83c1804891ac706f2e82f9d6c0aaf6ba290348a)
(rebased patches)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agoar71xx: remove linux 4.9 support
Koen Vandeputte [Wed, 10 Oct 2018 09:42:42 +0000 (11:42 +0200)]
ar71xx: remove linux 4.9 support

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 13f283198ef49dedd49c106176f80dfffa16c3a8)

5 years agoar71xx: switch to kernel 4.14
Koen Vandeputte [Thu, 30 Aug 2018 17:10:05 +0000 (19:10 +0200)]
ar71xx: switch to kernel 4.14

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from 77d004de6d09edc6d8a5cf77471d52d4865ae577)