staging/hauke/package, branch v19.07.7

OpenWrt v19.07.7: adjust config defaults

2021-02-16T22:30:28Z

Signed-off-by: Hauke Mehrtens

mt76: update to the latest version

2021-02-15T00:21:54Z

5c768de mt76: mt76x0: disable GTK offloading Signed-off-by: David Bauer

mac80211: Remove 357-mac80211-optimize-skb-resizing.patch

2021-02-14T19:27:50Z

This patch was adapted to apply on top of some stable changes, but we are not sure if this is working correctly. Felix suggested to remove this patch for now. Fixes: 0a59e2a76e6d ("mac80211: Update to version 4.19.161-1") Signed-off-by: Hauke Mehrtens

wolfssl: Backport fix for CVE-2021-3336

2021-02-09T23:23:45Z

This should fix CVE-2021-3336: DoTls13CertificateVerify in tls13.c in wolfSSL through 4.6.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without the corresponding certificate). The patch is backported from the upstream wolfssl development branch. Signed-off-by: Hauke Mehrtens (cherry picked from commit 1f559cafe5cc1193a5962d40a2d938c66c783171)

hostapd: fix P2P group information processing vulnerability

2021-02-04T08:19:29Z

A vulnerability was discovered in how wpa_supplicant processing P2P (Wi-Fi Direct) group information from active group owners. This issue was discovered by fuzz testing of wpa_supplicant by Google's OSS-Fuzz. https://w1.fi/security/2020-2/wpa_supplicant-p2p-group-info-processing-vulnerability.txt Signed-off-by: Daniel Golle [added the missing patch] Signed-off-by: Petr Štetiar (cherry-picked from commit 7c8c4f1be648aff9f1072ee27a2cc8f6a4a788ef)

opkg: update to latest git HEAD of branch openwrt-19.07

2021-02-03T21:37:31Z

c5dccea libopkg: fix md5sum calculation 7cad0c0 opkg_verify_integrity: better logging and error conditions 14d6480 download: purge cached packages that have incorrect checksum 456efac download: factor out the logic for building cache filenames b145030 libopkg: factor out checksum and size verification 74bac7a download: remove compatibility with old cache naming scheme Fixes: FS#2690 Signed-off-by: Baptiste Jonglez

wolfssl: enable HAVE_SECRET_CALLBACK

2021-02-02T09:09:37Z

Fixes wpad-wolfssl build Signed-off-by: Felix Fietkau (cherry picked from commit 55e23f2c02ae95e84613ed7d1cbf8aba557b8682)

wolfssl: Fix hostapd build with wolfssl 4.6.0

2021-02-02T09:09:19Z

This fixes the following build problem in hostapd: mipsel-openwrt-linux-musl/bin/ld: /builder/shared-workdir/build/tmp/ccN4Wwer.ltrans7.ltrans.o: in function `crypto_ec_point_add': :(.text.crypto_ec_point_add+0x170): undefined reference to `ecc_projective_add_point' mipsel-openwrt-linux-musl/bin/ld: :(.text.crypto_ec_point_add+0x18c): undefined reference to `ecc_map' mipsel-openwrt-linux-musl/bin/ld: /builder/shared-workdir/build/tmp/ccN4Wwer.ltrans7.ltrans.o: in function `crypto_ec_point_to_bin': :(.text.crypto_ec_point_to_bin+0x40): undefined reference to `ecc_map' Fixes: ba40da9045f7 ("wolfssl: Update to v4.6.0-stable") Signed-off-by: Hauke Mehrtens (cherry picked from commit e7d0d2e9dcaa0ff1197fb7beee139b6a5bd35c79)

wolfssl: Update to v4.6.0-stable

2021-02-02T09:08:11Z

This version fixes a large number of bugs and fixes CVE-2020-36177. Full changelog at: https://www.wolfssl.com/docs/wolfssl-changelog/ or, as part of the version's README.md: https://github.com/wolfSSL/wolfssl/blob/v4.6.0-stable/README.md Due a number of API additions, size increases from 374.7K to 408.8K for arm_cortex_a9_vfpv3-d16. The ABI does not change from previous version. Backported patches were removed; remaining patch was refreshed. Signed-off-by: Eneas U de Queiroz [added reference to CVE] Signed-off-by: Petr Štetiar (cherry picked from commit ba40da9045f77feb04abe63eb8a92f13f9efe471)

mt76: update to the latest version

2021-02-01T12:09:37Z

4ba1709 mt76: mt7603: add additional EEPROM chip ID Signed-off-by: David Bauer