Felix Fietkau [Fri, 8 Dec 2017 16:57:24 +0000 (17:57 +0100)]
mt76: update to the latest version, fixes setting per-vif mac address
d02a05b mt7603: update firmware to version 20160107100755 4d4cd05 Partially revert "mt7603: use mcu command to set timing registers, fix OFDM timeout values" 170f334 mt76x2: remove MAC address limitation for multi-vif setups 3563b8f mt76x2: clean up MAC/BSSID address initialization 9de77e1 mt76x2: drop wiphy->addresses a6a6e25 mt76x2: init: disable APCLI by default c64633e mt76x2: configure rx filter based on monitor mode setting ac815fa mt76x2: init: fix rx filter default value during init e504656 mt7603: configure other-unicast drop based on monitor mode setting
Rosen Penev [Thu, 23 Nov 2017 21:18:07 +0000 (13:18 -0800)]
tools/sstrip: Fix compile under standard linux.
bswap32 undefined is the issue. Added the proper header. Also fixed a few format/conversion warnings that clang complained about without -Wall or -Wextra.
Hans Dedecker [Thu, 7 Dec 2017 09:11:50 +0000 (10:11 +0100)]
dnsmasq: write atomic host file
Different invocations of the dnsmasq init script (e.g. at startup by procd)
will rewrite the dhcp host file which might result into dnsmasq reading an
empty dhcp host file as it is being rewritten by the dnsmasq init script.
Let the dnsmasq init script first write to a temp dhcp host file so it does
not overwrite the contents of the existing dhcp host file.
Reported-by: Hartmut Birr <e9hack@gmail.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
Timo Sigurdsson [Tue, 14 Nov 2017 20:41:30 +0000 (21:41 +0100)]
hostapd: backport fix for wnm_sleep_mode=0
wpa_disable_eapol_key_retries can't prevent attacks against the Wireless
Network Management (WNM) Sleep Mode handshake. Currently, hostapd
processes WNM Sleep Mode requests from clients regardless of the setting
wnm_sleep_mode. Backport Jouni Malinen's upstream patch 114f2830 in
order to ignore such requests by clients when wnm_sleep_mode is disabled
(which is the default).
Timo Sigurdsson [Tue, 14 Nov 2017 20:41:29 +0000 (21:41 +0100)]
hostapd: Expose the tdls_prohibit option to UCI
wpa_disable_eapol_key_retries can't prevent attacks against the
Tunneled Direct-Link Setup (TDLS) handshake. Jouni Malinen suggested
that the existing hostapd option tdls_prohibit can be used to further
complicate this possibility at the AP side. tdls_prohibit=1 makes
hostapd advertise that use of TDLS is not allowed in the BSS.
Note: If an attacker manages to lure both TDLS peers into a fake
AP, hiding the tdls_prohibit advertisement from them, it might be
possible to bypass this protection.
Make this option configurable via UCI, but disabled by default.
Signed-off-by: Timo Sigurdsson <public_timo.s@silentcreek.de>
1. Configure PC with static IP 192.168.1.75/24
2. Connect PC with one of LAN ports, press the reset button, power up
the router and keep button pressed for around 6-7 seconds. All 4 LEDs will
start to blink, which is when the router will accept firmware files via TFTP.
No known limitations on firmware filenames, just send it with a TFTP client
to 192.168.1.1.
3. Router will download file from server, write it to flash and reboot.
Hans Dedecker [Wed, 6 Dec 2017 13:22:59 +0000 (14:22 +0100)]
dnsmasq: backport infinite dns retries fix
If all configured dns servers return refused in response to a query in
strict mode; dnsmasq will end up in an infinite loop retransmitting the
dns query resulting into high CPU load.
Problem is fixed by checking for the end of a dns server list iteration
in strict mode.
Felix Fietkau [Sun, 3 Dec 2017 18:05:06 +0000 (19:05 +0100)]
mt76: update to the latest version, adds stability fixes
11f42a8 mt76x2: add channel argument to eeprom tx power functions 3bd7e76 mt76x2: initialize channel power limits 19fff41 mt76x2: convert between per-chain tx power and combined output 737cf2b mt7603: rename mt7603_mac_reset to mt7603_pse_reset 8026638 mt7603: rename MT_PSE_RESET register c4dd32a mt7603: remove watchdog reset on interface stop d99092b mt7603: remove WARN_ON_ONCE for workaround checks c8807b4 mt7603: simplify PSE reset d8a5990 mt7603: warn if PSE reset fails c079960 mt7603: clean up dma debug reads 96817d6 mt7603: make mt7603_mac_watchdog_reset() static e953c78 mt7603: clear wtbl PS bit for powersave responses 57a2e33 mt7603: set tx-skip flag for powersave clients c8e5ab1 mt7603: initialize wtbl ps flag on station add b4034cf mt76x2: remove some harmless WARN_ONs in tx status and rx path 8e17d36 mt7603: remove some harmless WARN_ONs in rx path
Felix Fietkau [Thu, 16 Nov 2017 08:57:13 +0000 (09:57 +0100)]
mac80211: tweak TSQ settings
Latencies can be much higher on wifi devices, especially with
aggregation. Tune the network stack setting introduced in the previous
commit to account for that.
This commit reintroduces the previously reverted one with a fix for the
crash issues
INAGAKI Hiroshi [Sat, 25 Nov 2017 16:42:50 +0000 (01:42 +0900)]
ramips: add missing reset button for Nexx WT1520
This commit adds missing the GPIO key used as reset button.
Nexx WT1520 has a GPIO key for factory reset, but it's not defined in
WT1520.dtsi and cannot use it.
Drop the UART (full) from the device tree source file, it was never
used for this board. Adjust the kernel bootargs accordingly.
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com>
[add note about dropped UART (full) to the commit message] Signed-off-by: Mathias Kresin <dev@kresin.me>
Jo-Philipp Wich [Tue, 28 Nov 2017 11:38:40 +0000 (11:38 +0000)]
dnsmasq: fix dhcp-host entries with empty macs
Due to improper localization of helper variables, "config host" entries
without a given mac address may inherit the mac address of a preceeding,
leading to invalid generated netive configuration.
Fix the issue by marking the "macs" and "tags" helper variables in
dhcp_host_add() local, avoiding the need for explicitely resetting them
with each invocation.
Reported-by: Russell Senior <russell@personaltelco.net> Tested-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Felix Fietkau [Tue, 28 Nov 2017 13:23:09 +0000 (14:23 +0100)]
Revert "mac80211: tweak TSQ settings"
This reverts commit 2dc485250d516f1535eeaf53f0f2f5742e5f9e0c.
This patch needs some additional checks in order to avoid overwriting
unrelated fields for request sockets.
* compat: support timespec64 on old kernels
* compat: support AVX512BW+VL by lying
* compat: fix typo and ranges
* compat: support 4.15's netlink and barrier changes
* poly1305-avx512: requires AVX512F+VL+BW
Numerous compat fixes which should keep us supporting 3.10-4.15-rc1.
Hans Dedecker [Mon, 27 Nov 2017 08:53:37 +0000 (09:53 +0100)]
nghttp2: bump to 1.28.0
939ad5dd Update manual pages 24d92b97 Add deprecation warning when spdylay support is enabled 4c92ff18 Bump up version number to 1.28.0, LT revision to 29:0:15 280db5c6 Update neverbleed 7fbcb2d0 Merge pull request #1074 from nghttp2/fix-doc 53aeb2c3 Fix doc ff200bfc clang-format-5.0 fee3151f Switch to clang-format-5.0 99a85159 Update manual pages 2a981a3f Merge pull request #1066 from nghttp2/nghttpx-add-affinity-cookie-secure 0028275d nghttpx: Add affinity-cookie-secure parameter to backend option ee8bfddf Merge pull request #1063 from nghttp2/error_callback2 194acb1f src: Use nghttp2_error_callback2 43a2a70a Add nghttp2_error_callback2 73344ae9 nghttpx: Use plain hex string format for client serial c479f612 Merge pull request #1060 from nghttp2/nghttpx-add-client-serial eca0a302 nghttpx: Add $tls_client_serial log variable 4720c5cb nghttpx: Make client serial available in mruby script cd55ab28 nghttpx: Add function to get serial number from certificate d402cfdf Merge pull request #1057 from nghttp2/nghttpx-add-tls-client-issuer-name 22502182 Add tls_client_issuer_name log variable and expose it to mruby 05e1fd5e Update manual pages 943d7923 Add Session Affinity section to nghttpx howto 568ecbfb doc: Add missing port f5ddd7f4 nghttpx: Make initial_addr_idx_ unsigned 88abbce7 nghttpx: Fix compile error with gcc 16e90365 nghttpx: Fix affinity retry fa7945c6 nghttpx: Refactor daca43f0 nghttpx: Fix stalled backend connection on retry 16bc11e6 nghttpx: Remove duplicated util::make_socket_nodelay 6f7e94cd Merge pull request #1047 from PiotrSikora/go_vet 61efa15a integration: Fix issues reported by the `go vet` tool. 8c0ea56b Merge pull request #1036 from nghttp2/nghttpx-affinity-cookie 54905371 nghttpx: Refactor 6010d393 integration: Add tests be5c39a1 src: Add tests b8fda680 nghttpx: Cookie based session affinity e29b9c12 Merge pull request #1045 from nghttp2/nghttpx-sha1-fingerprint 539e2781 nghttpx: Add tls_client_fingerprint_sha1 to mruby and accesslog 7008afd4 nghttpx: Refactor get_x509_fingerprint to accept hash function 77a41756 Merge pull request #1041 from nghttp2/fix-examples-client-server b15045d6 Merge pull request #1040 from nghttp2/nghttpx-mruby-add-more-tls-vars 03084f75 examples: Make client and server work with libevent-2.1.8 60baca27 nghttpx: Add more TLS related attributes to mruby Env object 86990db2 Merge pull request #1038 from nghttp2/nghttpx-add-more-logging-vars cb376bcd nghttpx: Add client fingerprint and subject name to accesslog f2b8edd1 nghttpx: Fix memory leak c4f8afcf nghttpx: Get TLS info only when it is necessary when writing accesslog 1a1a216d Merge pull request #1037 from nghttp2/nghttpx-mruby-tls-client-vars 9f80a82c nghttpx: Add client fingerprint and subject name to mruby env c573c80b nghttpx: Pass a pointer to SSL instead of TLSSessionInfo to LogSpec 3cd6817e Fix typos d4a69658 Add another warning about mruby 8e06fe49 Fix typo aaeeec8f Fix typos 66d5e246 Bump up version number to 1.28.0-DEV
Build dependency: Please install the GNU C Compiler (gcc) 4.8 or later cc
-dumpversion | grep -E '(4\.[8-9]|5\.[0-9]|6\.[0-9]|7\.[0-9])'
Build dependency: Please install the GNU C++ Compiler (g++) 4.8 or later
g++ -dumpversion | grep -E '(4\.[8-9]|5\.[0-9]|6\.[0-9]|7\.[0-9])'
Prerequisite check failed. Use FORCE=1 to override.
On my Fedora 26 machine gcc and g++ -dumpversion returns a whole number
'7' failing the regex introduced in commit:
This change makes minor versions optional in the build dependency regex
for gcc and g++ whenever any minor version would be accepted and the
whole number version is sufficient as a dependency check. For versions
4.* a minor version is still required.
Michael Heimpold [Tue, 31 Oct 2017 20:29:50 +0000 (21:29 +0100)]
build: allow defining license information per binary package
At the moment, license information can only be specified on a
"per source package" level while other metadata fields (e.g. maintainer)
can be given for each binary package. Apply the same logic for license
fields as well. This can be used e.g. in cases where a library is
distributed under some license while related tools are distributed
under a different one.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Fushan Wen [Sat, 25 Nov 2017 02:19:17 +0000 (10:19 +0800)]
kmod-sched-cake: update to latest git HEAD
dfb2f6c pkt_sched: make compile again 5ab7026 sch_cake: make compile again 6f28803 codel5: make more checkpatch compliant bd426aa Fix build error on 4.12 e4a3628 Whitespace tidy up
ed479fa (tag: 0.0.20171122) version: bump snapshot efd9db0 chacha20poly1305: poly cleans up its own state 5700b61 poly1305-x86_64: unclobber %rbp 314c172 global: switch from timeval to timespec 9e4aa7a poly1305: import MIPS64 primitive from OpenSSL 7a5ce4e chacha20poly1305: import ARM primitives from OpenSSL abad6ee chacha20poly1305: import x86_64 primitives from OpenSSL 6507a03 chacha20poly1305: add more test vectors, some of which are weird 6f136a3 compat: new kernels have netlink fixes e4b3875 compat: stable finally backported fix cc07250 qemu: use unprefixed strip when not cross-compiling 64f1a6d tools: tighten up strtoul parsing c3a04fe device: uninitialize socket first in destruction 82e6e3b socket: only free socket after successful creation of new df318d1 compat: fix compilation with PaX d911cd9 curve25519-neon: compile in thumb mode d355e57 compat: 3.16.50 got proper rt6_get_cookie 666ee61 qemu: update kernel 2420e18 allowedips: do not write out of bounds 185c324 selftest: allowedips: randomized test mutex update 3f6ed7e wg-quick: document localhost exception and v6 rule
Hauke Mehrtens [Sun, 12 Nov 2017 13:52:29 +0000 (14:52 +0100)]
kernel: e100: take e100 firmware from linux-firmware repository
The firmware directory in the Linux kernel was removed in kernel 4.14,
take the e100 firmware files now from the linux-firmware repository
instead. To do so create the new package e100-firmware. This will also
work with older kernel versions.
Marcin Jurkowski [Thu, 26 Oct 2017 22:46:22 +0000 (00:46 +0200)]
kernel: add NFS4 client support
Adds NFS4 client support:
1. Package kmod-fs-nfs is split into kmod-fs-nfs (nfs.ko) and
kmod-fs-nfs-v3 (nfsv3.ko).
2. A new package kmod-fs-nfs-v4 (nfsv4.ko) is created.
3. Package kmod-fs-nfs-common-v4 is renamed to kmod-fs-nfs-rpcsec
and includes additional module rpcsec_gss_krb5.ko.
CONFIG_NFS_V4 goes into kmod-fs-nfs-v4, CONFIG_NFSD_V4 (NFS4
server) is removed. Missing kernel module oid_registry.ko
needed by auth_rpcgss.ko is added to the package.
A new package kmod-crypto-cts needed by rpcsec_gss_krb5.ko is
also created.
Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
[add dependency to kmod-crypto-ecb in fs-nfs-common-rpcsec] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Martin Schiller [Wed, 22 Nov 2017 13:28:41 +0000 (14:28 +0100)]
kernel: add it87-wdt watchdog timer module
The module parameters "nogameport=1" and "nocir=1" are needed,
because this is not supported on recent chips and doesn't
really tell if the system is stable.
As this features will already be removed in linux-4.13 or newer,
this module parameters can be removed in the future.
Mathias Kresin [Sun, 19 Nov 2017 09:43:08 +0000 (10:43 +0100)]
acx-mac80211: fix build on kernel 4.9
The DEFINE_PCI_DEVICE_TABLE macro was removed with upstream commit 7e9321599011 ("treewide: remove references to the now unnecessary
DEFINE_PCI_DEVICE_TABLE").
Use the pci_device_id struct to fix the acx-mac80211 build failure on
ramips.
Mathias Kresin [Sat, 18 Nov 2017 10:59:22 +0000 (11:59 +0100)]
ramips: fix DCH-M225 support
Setting the pins of the UARTF group to GPIO+I2S at the time the I2C
driver loads is to late for the wps GPIO button.
The gpio-keys driver fails to load since the pin used by the wps button
is not yet set to GPIO. The wps button with the rfkill keycode is
essential for this wireless only board.
Add the missing sound and I2C kernel modules corresponding to the
device nodes.
Rafał Miłecki [Fri, 17 Nov 2017 10:43:33 +0000 (11:43 +0100)]
bcm53xx: use otrx for creating TRX images
The advantage is that we don't have to specify max TRX size anymore and
otrx doesn't allocate a buffer of that size. It saves us allocating
32 MiB for every image we generate.
Rafał Miłecki [Fri, 17 Nov 2017 10:42:59 +0000 (11:42 +0100)]
firmware-utils: add otrx tool for handling TRX images
It can be a replacement for the trx tool. The advantage is that otrx
doesn't alloc buffer for the whole TRX which can be a nice optimization
when creating big images.
Rafał Miłecki [Thu, 16 Nov 2017 09:15:57 +0000 (10:15 +0100)]
otrx: bump buffer size in otrx_create_append_file
Usually this function is called for appending some small files only
(like fs marks) but let's just make it more generic and capable of
handling bigger files easily. Increasing buffer to 1 KiB shouldn't hurt.
Rafał Miłecki [Thu, 16 Nov 2017 09:15:56 +0000 (10:15 +0100)]
otrx: drop unused otrx_create_parse_options function
It was there in case of adding some "create" command options that should
be parsed before actually creating the output image. It seems we don't
need any at this point so let's drop this function for now.
My compilation failed because of missing uint.* definitions:
In file included from mtd.h:33:0,
from bootstream.c:35:
BootControlBlocks.h:58:2: error: unknown type name 'uint8_t'
uint8_t m_u8DataSetup;
^
BootControlBlocks.h:59:2: error: unknown type name 'uint8_t'
uint8_t m_u8DataHold;
^
BootControlBlocks.h:60:2: error: unknown type name 'uint8_t'
uint8_t m_u8AddressSetup;
^
BootControlBlocks.h:61:2: error: unknown type name 'uint8_t'
uint8_t m_u8DSAMPLE_TIME;
Adding the header file fixes the problem.
Signed-off-by: Simon Wunderlich <sw@simonwunderlich.de>
[fold changes into 001-compile.patch] Signed-off-by: Mathias Kresin <dev@kresin.me>
Antony Black [Thu, 2 Nov 2017 10:53:26 +0000 (13:53 +0300)]
brcm47xx: fix switch port mapping on D-Link DIR-330
D-Link DIR-330 is clone of ASUS WL500GP2, by default conf the WAN port is
eth1, it's not working cus eth1 not soldered and wan port function
performs 5th port of the switch.
Felix Fietkau [Thu, 16 Nov 2017 19:32:48 +0000 (20:32 +0100)]
mt76: update to the latest version
Significantly improves throughput on MT76x2, fixes some stability
issues, adds LED support.
Changes:
266ef38 mt76x2: mcu: remove unused parameter in mt76x2_mcu_msg_alloc signature 758376d mt7603: mcu: remove unused parameter in mt7603_mcu_msg_alloc() signature e764787 Fix errors found by cppcheck a6fce8a mt7603: add LED definition registers f658dd2 mt76x2: add LED register definitions f6a021d mt76x2: Support using PCI ID as chip ID c9bdcd8 mt76: add led support using mac80211 led framework 58e9138 mt76x2: init: add ma80211 led callbacks 8ea8da3 mt7603: init: add ma80211 led callbacks ded88cd mt76x2: Add PCI identifier for MT7602 51a6764 mt7603: remove unnecessary mcu register read function fbdbf65 debugfs: add support for changing the LED pin cc02e49 mac80211: move DT led configuration to the "led" child node e4e7734 mt76x2: limit client WCID entries to 0-127 60172cc mt76x2: clear drop flag for all WCIDs on init d8140b6 mt76x2: clear per-WCID tx rate lookup register 0ce7923 mt76x2: add helper function for setting drop mask ccc4baf mt76x2: clear drop mask when sending a PS response ff60d14 mt76: increase rx ring size for mt76x2 b57ada5 mt76x2: add rx statistics registers af425de mt76x2: fix LNA gain register annotation efd7724 mt76x2: sync channel gain value with latest reference driver 4af37bd mt76x2: implement dynamic AGC tuning based on false packet detection count 70f2002 mt76x2: add more gain tuning based on the latest reference driver 8f1c8ab mt76x2: sync tx power related values with reference driver
Felix Fietkau [Thu, 16 Nov 2017 08:57:13 +0000 (09:57 +0100)]
mac80211: tweak TSQ settings
Latencies can be much higher on wifi devices, especially with
aggregation. Tune the network stack setting introduced in the previous
commit to account for that