Commit Graph

3262 Commits

Author SHA1 Message Date
1054009064
d05fbef769
mac80211: backport security fixes (#10324)
* mac80211: backport security fixes

This mainly affects scanning and beacon parsing, especially with MBSSID enabled

Fixes: CVE-2022-41674
Fixes: CVE-2022-42719
Fixes: CVE-2022-42720
Fixes: CVE-2022-42721
Fixes: CVE-2022-42722
Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry-picked from commit 26f400210d6b3780fcc0deb89b9741837df9c8b8)

* mac80211: refresh patches

355-wifi-cfg80211-fix-BSS-refcounting-bugs.patch - 5a52384a51

Co-authored-by: Felix Fietkau <nbd@nbd.name>
Co-authored-by: 1054009064 <1054009064@users.noreply.github.com>
2022-10-28 15:17:13 +08:00
coolsnowwolf
a56ccddcb6 grub2: bump version 2022-10-28 11:25:34 +08:00
ty
063f51c242
autosamba: fixes compatible with samba4 (#10315)
Fix: coolsnowwolf/lede#10314
2022-10-25 12:40:31 +08:00
AmadeusGhost
613e76c9e0 Revert "autocore: ethinfo: rewritten in lua"
This reverts commit 4f056f8ef3.
Fixes: #10180, #10251
2022-10-25 12:38:39 +08:00
AmadeusGhost
51dccebbdc autocore-arm: update config for filogic 2022-10-25 11:42:00 +08:00
AmadeusGhost
3c294bd503 treewide: remove support of kernel 5.19 2022-10-25 10:55:54 +08:00
Andre Heider
bdd016c403 mac80211: fix masking nested A-MSDU support for mesh
CONFIG_MAC80211_MESH isn't defined for this package, rendering the patch
useless. Match protecting the access of sta_info.mesh with the very same
define declaring it.

Fixes 45109f69a6 "mac80211: fix compile error when mesh is disabled"
Signed-off-by: Andre Heider <a.heider@gmail.com>
2022-10-25 10:30:06 +08:00
Nick Hainke
c86da866ca ksmbd: update to 3.4.6
Release Announcement:
https://github.com/cifsd-team/ksmbd/releases/tag/3.4.6

Remove upstreamed:
- 10-fix-build-on-kernel-5.15.52-or-higher.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-24 11:40:22 +08:00
Nick Hainke
1778c590d5 linux-firmware: update to 20221012
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-24 11:36:34 +08:00
mk-qi
2a9196062b
iwlwifi: edit package/firmware/linux-firmware/intel.mk for support inter-ax201 (#10303) 2022-10-22 22:23:19 +08:00
lovehackintosh
e19b441cc0
libselinux: sync with upstream (#10300)
Fixes: #10294
2022-10-22 13:31:19 +00:00
Hugo Yuan
bc34ef9154
rockchip: Add Rongpin King3399 support (#10292) 2022-10-21 12:47:10 +08:00
coolsnowwolf
06fa03cb43 mt76: add MediaTek Filogic 630 (MT7916) support 2022-10-19 21:06:13 +08:00
coolsnowwolf
80b72c1cc6 wireless-regdb: unlock WIFI6E channel and txpower 2022-10-19 20:14:00 +08:00
coolsnowwolf
8130834aff rockchip: add rockchip-crypto support for rk3568/rk3588 2022-10-19 20:03:59 +08:00
Daniel Golle
acb79816cd uboot-envtools: mediatek_filogic: fix BPi-R3 when no OS is installed
Fix accessing the environment in case no OS is installed on the flash
media selected for boot as this is possible when booting initramfs.
In case of relying on the device specified to be mounted as rootfs to
be present, rather just use the kernel cmdline 'root' variable as a
hint to decide where to read/write the U-Boot environment.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-19 10:22:26 +08:00
Daniel Golle
67017451e4 uboot-mediatek: update to U-Boot 2022.10
Remove patches adding support for MT7621 which have been merged upsteam.
Patches for MT7981 and MT7986 have been merged too, but not in time to
be included in the 2022.10 release, so we have to keep carrying them
until the 2023.01 release.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-19 10:18:56 +08:00
coolsnowwolf
147061e637 ath11k: enable ethernet offload by default 2022-10-18 13:56:43 +08:00
coolsnowwolf
e2f7ac1e87 mtd: enable linksys bootcount support for ip60xx 2022-10-18 13:43:26 +08:00
coolsnowwolf
f270095939 uboot-envtools: add Linksys MR7350 uboot env support 2022-10-18 13:41:45 +08:00
coolsnowwolf
3eddaf9e60 ipq60xx: add Linksys MR7350 support 2022-10-18 13:38:14 +08:00
AmadeusGhost
b98efa18fd rockchip: fixes drm module dependencies 2022-10-18 11:19:09 +08:00
coolsnowwolf
9df30a2e36 kernel: fix linux 6.0 drm support 2022-10-14 14:10:12 +08:00
coolsnowwolf
677b831c3d kernel: add linux 6.0 stable release support 2022-10-14 12:33:52 +08:00
coolsnowwolf
b1b6cd41bb Version update to R22.10.10 2022-10-10 17:11:56 +08:00
coolsnowwolf
0dec08d9e2 x86: add amd Ryzen APU vage/rdna gpu support 2022-10-10 17:06:54 +08:00
coolsnowwolf
311c9aabf5 x86: add support for AMD Zen CPU temperature sensor 2022-10-10 15:10:15 +08:00
Daniel Cousens
b5bb491bc3 build: prefer HTTPS if available (for packages)
Changes PKG_SOURCE_URL's for arptables, bsdiff, dnsmasq,
fortify-headers, ipset, ipset-dns, libaudit, libpcap, libressl,
lua, lua5.3, tcpdump and valgrind, to HTTPS

Signed-off-by: Daniel Cousens <github@dcousens.com>
2022-10-07 12:33:08 +08:00
coolsnowwolf
46121523c9 iptables: add iptables-mod-socket 2022-10-06 16:01:36 +08:00
Koen Vandeputte
60dc2c9b7c mac80211: fix compile error when mesh is disabled
This fixes following compile error seen when
building mac80211 with mesh disabled:

.../backports-5.15.58-1/net/mac80211/agg-rx.c: In function 'ieee80211_send_addba_resp':
...backports-5.15.58-1/net/mac80211/agg-rx.c:255:17: error: 'struct sta_info' has no member named 'mesh'
  255 |         if (!sta->mesh)
      |                 ^~

sta_info.h shows this item as being optional based on flags:

	struct mesh_sta *mesh;

Guard the check to fix this.

Fixes: f96744ba6b ("mac80211: mask nested A-MSDU support for mesh")
Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com>
2022-10-05 11:38:10 +08:00
David Bauer
758af54df2 mac80211: mask nested A-MSDU support for mesh
mac80211 incorrectly processes A-MSDUs contained in A-MPDU frames. This
results in dropped packets and severely impacted throughput.

As a workaround, don't indicate support for A-MSDUs contained in
A-MPDUs. This improves throughput over mesh links by factor 10.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-10-04 11:37:15 +08:00
Daniel Golle
2a0953e837 rpcd: reload rpcd on installation of rpcd-mod-*
When installing additional rpcd modules, a restart of rpcd is required.
This often confuses users as even after installing rpcd-mod-rpcsys the
relevant ubus objects are still missing until rpcd has been reloaded
(or the system has been rebooted, obviously).
Let rpcd-mod-* reload rpcd as post-install action.

Fixes: #10220

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-04 11:27:07 +08:00
Christian 'Ansuel' Marangi
10f73c2bd0 uhttpd: update to latest Git HEAD
d59d732 client: fix compilation error with GCC 12
51283f9 fix compiler uninitialized variable

Signed-off-by: Christian 'Ansuel' Marangi <ansuelsmth@gmail.com>
2022-10-02 21:21:07 +08:00
Christian 'Ansuel' Marangi
eebc453ef4 rpcd: update to latest Git HEAD
1c48257 iwinfo: fix compilation error with GCC 12

[remove extra change in Makefile]
Signed-off-by: Christian 'Ansuel' Marangi <ansuelsmth@gmail.com>
2022-10-02 20:16:19 +08:00
Stijn Tintel
7e5bd6ff3d procd: bump to git HEAD
0ee8e73 trigger: use uloop_timeout_remaining64

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-10-02 20:15:21 +08:00
Stijn Tintel
6c46842920 libubox: bump to git HEAD
123e976 uloop: restore return type of uloop_timeout_remaining
 3344157 uloop: add uloop_timeout_remaining64
 c87d3e1 lua/uloop: use uloop_timeout_remaining64
 c86a894 uloop: deprecate uloop_timeout_remaining

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-10-02 19:56:34 +08:00
AmadeusGhost
1775dd181c libnl-tiny: update to the latest version
c42d890 build static library
28c44ca genl_family: explicitly null terminate
                     strncpy destination buffer
2022-10-02 16:32:58 +08:00
Felix Fietkau
784361332e mt76: update to the latest version
e4fa68a9b3b3 linux-firmware: update firmware for MT7921 WiFi device
60fcf08fe659 linux-firmware: update firmware for MT7921 WiFi device
9d601f4eee8f linux-firmware: update firmware for MT7922 WiFi device
e49b6063fb4b wifi: mt76: move mt76_rate_power from core to mt76x02 driver code
3f27f6adb1ab wifi: mt76: mt76x02: simplify struct mt76x02_rate_power
c07f3d2d5ede wifi: mt76: mt7921: fix antenna signal are way off in monitor mode
9059a5de3bd0 wifi: mt76: Remove unused inline function mt76_wcid_mask_test()
d75f15ddeb90 wifi: mt76: mt7915: fix bounds checking for tx-free-done command
06df7e689294 wifi: mt76: mt7915: reserve 8 bits for the index of rf registers
ad3d0f8db00b wifi: mt76: mt7915: rework eeprom tx paths and streams init
66065073177b wifi: mt76: mt7915: deal with special variant of mt7916
b0114a0abb57 wifi: mt76: mt7915: rework testmode tx antenna setting
6dee964e1f36 wifi: mt76: connac: introduce mt76_connac_spe_idx()
48c116d92939 wifi: mt76: mt7915: add spatial extension index support
db6db4ded0fd wifi: mt76: mt7915: set correct antenna for radar detection on MT7915D
2b8f56a72d76 wifi: mt76: mt7915: fix mt7915_mac_set_timing()
d554a02554db wifi: mt76: mt7915: move wed init routines in mmio.c
61ce40e65852 wifi: mt76: mt7915: enable wed for mt7986 chipset
584a96ec4a0f wifi: mt76: mt7915: enable wed for mt7986-wmac chipset
172d68b6253d mt76: mt76x02: fix vht rate power array overrun
72b87836d368 Revert "mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD"

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2022-10-02 11:53:30 +08:00
Felix Fietkau
dde7a41246 kernel: move ubnt ledbar driver to a separate package
Simplifies the tree by removing a non-upstream kernel patch
and related kconfig symbols.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2022-09-30 22:26:36 +08:00
Felix Fietkau
4b6fd08298 kernel: remove hack patch, move kirkwood specific kmods to target modules.mk
Tweaking the KCONFIG line of kmod-ata-marvell-sata makes the hack patch
unnecessary

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2022-09-30 21:35:47 +08:00
Petr Štetiar
ba39377afb wolfssl: refresh patches
So they're tidy and apply cleanly.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-09-30 11:30:48 +08:00
Petr Štetiar
89994968e9 wolfssl: fix TLSv1.3 RCE in uhttpd by using latest 5.5.1-stable release
Fixes denial of service attack and buffer overflow against TLS 1.3
servers using session ticket resumption. When built with
--enable-session-ticket and making use of TLS 1.3 server code in
wolfSSL, there is the possibility of a malicious client to craft a
malformed second ClientHello packet that causes the server to crash.

This issue is limited to when using both --enable-session-ticket and TLS
1.3 on the server side. Users with TLS 1.3 servers, and having
--enable-session-ticket, should update to the latest version of wolfSSL.

Thanks to Max at Trail of Bits for the report and "LORIA, INRIA, France"
for research on tlspuffin.

Complete release notes https://github.com/wolfSSL/wolfssl/releases/tag/v5.5.1-stable

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-09-30 11:30:27 +08:00
Beginner
936b8f9589
ppp: use modprobe in place of insmod (#10191)
This will prevent `module is already loaded` lines from
appearing in the logs when a PPP connection is reconnecting

Signed-off-by: Manas Sambhus <manas.sambhus+github@gmail.com>

Signed-off-by: Manas Sambhus <manas.sambhus+github@gmail.com>
Co-authored-by: Manas Sambhus <manas.sambhus+github@gmail.com>
2022-09-29 00:00:39 +08:00
Daniel Golle
6818018899 linux-firmware: package MediaTek MT792[12] Bluetooth firmware
btusb fails to start on MT792[12] hardware without the appropriate
firmware being loaded first:
[    9.750285] bluetooth hci0: Direct firmware load for mediatek/BT_RAM_CODE_MT7961_1_2_hdr.bin failed with error -2
[    9.765723] bluetooth hci0: Falling back to sysfs fallback for: mediatek/BT_RAM_CODE_MT7961_1_2_hdr.bin

Package firmware for MediaTek MT792[12] Bluetooth from linux-firmware.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-28 00:33:02 +08:00
Daniel Golle
8dfec81997 kernel: modules: bluetooth: include support for MediaTek USB
Enable MediaTek protocol in btusb module to support e.g. the Bluetooth
part of the MT7921K NGFF/M.2 module.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-28 00:32:11 +08:00
Daniel Golle
1969e2c390 mediatek: build USB XHCI support as module
Instead of always including the XHCI driver in the kernel on all
MediaTek boards, selectively include the kernel module only on boards
which actually make use of USB functionality.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-28 00:29:46 +08:00
Eneas U de Queiroz
d741ca1319 wolfssl: prefer regular libwolfssl over cpu-crypto
Rename libwolfssl-cpu-crypto to libwolfsslcpu-crypto so that the
regular libwolfssl version comes first when running:
opkg install libwolfssl

Normally, if the package name matches the opkg parameter, that package
is preferred.  However, for libraries, the ABI version string is
appended to the package official name, and the short name won't match.
Failing a name match, the candidate packages are sorted in alphabetical
order, and a dash will come before any number.  So in order to prefer
the original library, the dash should be removed from the alternative
library.

Fixes: c3e7d86d2b (wolfssl: add libwolfssl-cpu-crypto package)
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-09-28 00:27:11 +08:00
Eneas U de Queiroz
cc1e79df1c wolfssl: ABI version shouldn't depend on benchmark
Move CONFIG_PACKAGE_libwolfssl-benchmark from the top of
PKG_CONFIG_DEPENDS to after PKG_ABI_VERSION is set.

This avoids changing the ABI version hash whether the bnechmark package
package is selected or not.

Fixes: 05df135cac (wolfssl: Rebuild when libwolfssl-benchmark gets changes)
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-09-28 00:26:46 +08:00
lean
9ee64a9f38 e2guardian: fix gcc11 compile error 2022-09-22 13:41:34 +08:00
Sergey V. Lobanov
d0460e6b92 iucode-tool: fix host-compile on macos and non-x86 linux
iucode-tool/host is used by intel-microcode to manipulate with
microcode.bin file. iucode-tool requires cpuid.h at compile time
for autodection feature, but non-x86 build hosts does not have
this header file (e.g. ubuntu 20.04 aarch64) or this header
generates compile time error (#error macro) (e.g. macos arm64).

This patch provides compat cpuid.h to build iucode-tool/host on
non-x86 linux hosts and macos. CPU autodectection is not required
for intel-microcode package build so compat cpuid.h is ok for
OpenWrt purposes.

glibc and argp lib are not present in macos so iucode-tool/host
build fails. This patch adds argp-standalone/host as build
dependency if host os is macos.

Generated ucode (intel-microcode package) is exactly the same on
Linux x86_64 (Ubuntu 20.04), Linux aarch64 (Ubuntu 20.04) and
Darwin arm64 (MacOS 11.6) build hosts.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-09-22 13:37:04 +08:00