mirror of
https://github.com/coolsnowwolf/lede.git
synced 2025-04-16 04:13:31 +00:00

* mac80211: backport security fixes
This mainly affects scanning and beacon parsing, especially with MBSSID enabled
Fixes: CVE-2022-41674
Fixes: CVE-2022-42719
Fixes: CVE-2022-42720
Fixes: CVE-2022-42721
Fixes: CVE-2022-42722
Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry-picked from commit 26f400210d6b3780fcc0deb89b9741837df9c8b8)
* mac80211: refresh patches
355-wifi-cfg80211-fix-BSS-refcounting-bugs.patch - 5a52384a51
Co-authored-by: Felix Fietkau <nbd@nbd.name>
Co-authored-by: 1054009064 <1054009064@users.noreply.github.com>
199 lines
6.2 KiB
Diff
199 lines
6.2 KiB
Diff
--- a/drivers/net/wireless/realtek/rtw88/Kconfig
|
|
+++ b/drivers/net/wireless/realtek/rtw88/Kconfig
|
|
@@ -87,6 +87,18 @@ config RTW88_8821CE
|
|
|
|
802.11ac PCIe wireless network adapter
|
|
|
|
+config RTW88_8821CU
|
|
+ tristate "Realtek 8821CU USB wireless network adapter"
|
|
+ depends on m
|
|
+ depends on USB
|
|
+ select RTW88_CORE
|
|
+ select RTW88_USB
|
|
+ select RTW88_8821C
|
|
+ help
|
|
+ Select this option will enable support for 8821CU chipset
|
|
+
|
|
+ 802.11ac USB wireless network adapter
|
|
+
|
|
config RTW88_DEBUG
|
|
bool "Realtek rtw88 debug support"
|
|
depends on RTW88_CORE
|
|
--- a/drivers/net/wireless/realtek/rtw88/Makefile
|
|
+++ b/drivers/net/wireless/realtek/rtw88/Makefile
|
|
@@ -43,6 +43,9 @@ rtw88_8821c-objs := rtw8821c.o rtw8821c
|
|
obj-$(CPTCFG_RTW88_8821CE) += rtw88_8821ce.o
|
|
rtw88_8821ce-objs := rtw8821ce.o
|
|
|
|
+obj-$(CPTCFG_RTW88_8821CU) += rtw88_8821cu.o
|
|
+rtw88_8821cu-objs := rtw8821cu.o
|
|
+
|
|
obj-$(CPTCFG_RTW88_PCI) += rtw88_pci.o
|
|
rtw88_pci-objs := pci.o
|
|
|
|
--- a/drivers/net/wireless/realtek/rtw88/rtw8821c.c
|
|
+++ b/drivers/net/wireless/realtek/rtw88/rtw8821c.c
|
|
@@ -26,6 +26,12 @@ static void rtw8821ce_efuse_parsing(stru
|
|
ether_addr_copy(efuse->addr, map->e.mac_addr);
|
|
}
|
|
|
|
+static void rtw8821cu_efuse_parsing(struct rtw_efuse *efuse,
|
|
+ struct rtw8821c_efuse *map)
|
|
+{
|
|
+ ether_addr_copy(efuse->addr, map->u.mac_addr);
|
|
+}
|
|
+
|
|
enum rtw8821ce_rf_set {
|
|
SWITCH_TO_BTG,
|
|
SWITCH_TO_WLG,
|
|
@@ -65,6 +71,9 @@ static int rtw8821c_read_efuse(struct rt
|
|
case RTW_HCI_TYPE_PCIE:
|
|
rtw8821ce_efuse_parsing(efuse, map);
|
|
break;
|
|
+ case RTW_HCI_TYPE_USB:
|
|
+ rtw8821cu_efuse_parsing(efuse, map);
|
|
+ break;
|
|
default:
|
|
/* unsupported now */
|
|
return -ENOTSUPP;
|
|
@@ -1128,6 +1137,18 @@ static void rtw8821c_phy_cck_pd_set(stru
|
|
dm_info->cck_pd_default + new_lvl * 2);
|
|
}
|
|
|
|
+static void rtw8821c_fill_txdesc_checksum(struct rtw_dev *rtwdev,
|
|
+ struct rtw_tx_pkt_info *pkt_info,
|
|
+ u8 *txdesc)
|
|
+{
|
|
+ struct rtw_chip_info *chip = rtwdev->chip;
|
|
+ size_t words;
|
|
+
|
|
+ words = (pkt_info->pkt_offset * 8 + chip->tx_pkt_desc_sz) / 2;
|
|
+
|
|
+ fill_txdesc_checksum_common(txdesc, words);
|
|
+}
|
|
+
|
|
static struct rtw_pwr_seq_cmd trans_carddis_to_cardemu_8821c[] = {
|
|
{0x0086,
|
|
RTW_PWR_CUT_ALL_MSK,
|
|
@@ -1499,6 +1520,9 @@ static const struct rtw_intf_phy_para_ta
|
|
static const struct rtw_rfe_def rtw8821c_rfe_defs[] = {
|
|
[0] = RTW_DEF_RFE(8821c, 0, 0),
|
|
[2] = RTW_DEF_RFE_EXT(8821c, 0, 0, 2),
|
|
+ [4] = RTW_DEF_RFE_EXT(8821c, 0, 0, 2),
|
|
+ [6] = RTW_DEF_RFE(8821c, 0, 0),
|
|
+ [34] = RTW_DEF_RFE(8821c, 0, 0),
|
|
};
|
|
|
|
static struct rtw_hw_reg rtw8821c_dig[] = {
|
|
@@ -1573,6 +1597,7 @@ static struct rtw_chip_ops rtw8821c_ops
|
|
.config_bfee = rtw8821c_bf_config_bfee,
|
|
.set_gid_table = rtw_bf_set_gid_table,
|
|
.cfg_csi_rate = rtw_bf_cfg_csi_rate,
|
|
+ .fill_txdesc_checksum = rtw8821c_fill_txdesc_checksum,
|
|
|
|
.coex_set_init = rtw8821c_coex_cfg_init,
|
|
.coex_set_ant_switch = rtw8821c_coex_cfg_ant_switch,
|
|
--- a/drivers/net/wireless/realtek/rtw88/rtw8821c.h
|
|
+++ b/drivers/net/wireless/realtek/rtw88/rtw8821c.h
|
|
@@ -9,6 +9,26 @@
|
|
|
|
#define RCR_VHT_ACK BIT(26)
|
|
|
|
+struct rtw8821cu_efuse {
|
|
+ u8 res4[4]; /* 0xd0 */
|
|
+ u8 usb_optional_function;
|
|
+ u8 res5[0x1e];
|
|
+ u8 res6[2];
|
|
+ u8 serial[0x0b]; /* 0xf5 */
|
|
+ u8 vid; /* 0x100 */
|
|
+ u8 res7;
|
|
+ u8 pid;
|
|
+ u8 res8[4];
|
|
+ u8 mac_addr[ETH_ALEN]; /* 0x107 */
|
|
+ u8 res9[2];
|
|
+ u8 vendor_name[0x07];
|
|
+ u8 res10[2];
|
|
+ u8 device_name[0x14];
|
|
+ u8 res11[0xcf];
|
|
+ u8 package_type; /* 0x1fb */
|
|
+ u8 res12[0x4];
|
|
+};
|
|
+
|
|
struct rtw8821ce_efuse {
|
|
u8 mac_addr[ETH_ALEN]; /* 0xd0 */
|
|
u8 vender_id[2];
|
|
@@ -73,6 +93,7 @@ struct rtw8821c_efuse {
|
|
u8 res[3];
|
|
union {
|
|
struct rtw8821ce_efuse e;
|
|
+ struct rtw8821cu_efuse u;
|
|
};
|
|
};
|
|
|
|
--- /dev/null
|
|
+++ b/drivers/net/wireless/realtek/rtw88/rtw8821cu.c
|
|
@@ -0,0 +1,50 @@
|
|
+// SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
|
|
+/* Copyright(c) 2018-2019 Realtek Corporation
|
|
+ */
|
|
+
|
|
+#include <linux/module.h>
|
|
+#include <linux/usb.h>
|
|
+#include "main.h"
|
|
+#include "rtw8821cu.h"
|
|
+#include "usb.h"
|
|
+
|
|
+static const struct usb_device_id rtw_8821cu_id_table[] = {
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0xb82b, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8821CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0xb820, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8821CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0xc821, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8821CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0xc820, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8821CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0xc82a, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8821CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0xc82b, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8821CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0xc811, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8811CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0x8811, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* 8811CU */
|
|
+ { USB_DEVICE_AND_INTERFACE_INFO(RTW_USB_VENDOR_ID_REALTEK, 0x2006, 0xff, 0xff, 0xff),
|
|
+ .driver_info = (kernel_ulong_t)&(rtw8821c_hw_spec) }, /* TOTOLINK A650UA v3 */
|
|
+ {},
|
|
+};
|
|
+MODULE_DEVICE_TABLE(usb, rtw_8821cu_id_table);
|
|
+
|
|
+static int rtw_8821cu_probe(struct usb_interface *intf,
|
|
+ const struct usb_device_id *id)
|
|
+{
|
|
+ return rtw_usb_probe(intf, id);
|
|
+}
|
|
+
|
|
+static struct usb_driver rtw_8821cu_driver = {
|
|
+ .name = "rtw_8821cu",
|
|
+ .id_table = rtw_8821cu_id_table,
|
|
+ .probe = rtw_8821cu_probe,
|
|
+ .disconnect = rtw_usb_disconnect,
|
|
+};
|
|
+module_usb_driver(rtw_8821cu_driver);
|
|
+
|
|
+MODULE_AUTHOR("Hans Ulli Kroll <linux@ulli-kroll.de>");
|
|
+MODULE_DESCRIPTION("Realtek 802.11ac wireless 8821cu driver");
|
|
+MODULE_LICENSE("Dual BSD/GPL");
|
|
--- /dev/null
|
|
+++ b/drivers/net/wireless/realtek/rtw88/rtw8821cu.h
|
|
@@ -0,0 +1,10 @@
|
|
+/* SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause */
|
|
+/* Copyright(c) 2018-2019 Realtek Corporation
|
|
+ */
|
|
+
|
|
+#ifndef __RTW_8821CU_H_
|
|
+#define __RTW_8821CU_H_
|
|
+
|
|
+extern struct rtw_chip_info rtw8821c_hw_spec;
|
|
+
|
|
+#endif
|