aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Merge pull request #20 from wigyori/masterZoltan Herpai2016-07-0490-311/+6047
|\| | | | | bump mvebu to 4.4, swconfig / mt76 updates, other small fixes
| * kernel: require admin permissions for swconfig set operationsFelix Fietkau2016-07-041-0/+3
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * kernel: deny swconfig set requests for unprivileged usersJo-Philipp Wich2016-07-041-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The swconfig kernel infrastructure fails to do any permissions checks when changing settings. As such an ordinary user account on a device with a switch can change switch settings without any special permissions. Routers generally have few non-admin users so this isn't a big hole, but it is a security hole. Likely the greatest danger is for multifunction devices which have a lot of extra daemons, compromising a low-security daemon would allow one to modify switch settings and cause the router/switch to appear to lock-up (or cause other sorts of troublesome nyetwork behavior). Implement a check for CAP_NET_ADMIN in swconfig_set_attr() and deny any requests originating from user contexts lacking this capability. Reported-by: Elliott Mitchell <ehem+openwrt@m5p.com> Signed-off-by: Jo-Philipp Wich <jo@mein.io>
| * swconfig: improve failure reportingJo-Philipp Wich2016-07-042-7/+7
| | | | | | | | | | | | Report the translated error to the user if a get/set netlink operation failed. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
| * polarssl: enable AES-GCM and CAMELLIA-GCM ciphersuitesJo-Philipp Wich2016-07-042-11/+1
| | | | | | | | | | | | | | | | | | | | | | Recent versions of Chrome require this ciphers to successfully handshake with a TLS enabled uhttpd server using the ustream-polarssl backend. If `CONFIG_GCM` is disabled, `ssl_ciphersuite_from_id()` will return `NULL` when cipher `0x9d` is looked up, causing the calling `ssl_ciphersuite_match()` to fail with `POLARSSL_ERR_SSL_INTERNAL_ERROR`. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
| * sparse: update to support llvm 3.5.0Stefan Sydow2016-07-041-3/+6
| | | | | | | | | | | | | | | | sparse-0.5.0 won't link against lvm 3.5.0 as "llvm-config --libs" does not include system libs like pthreads. This problem got fixed but not released yet, so we need to fetch from their git repo. Signed-off-by: Stefan Sydow <stefan.sydow@tu-berlin.de>
| * strace: add option for enabling stack trace supportYousong Zhou2016-07-041-1/+10
| | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
| * tools/mkfwimage2: remove 256 length limit for partition imagesAlexander Couzens2016-07-041-1/+5
| | | | | | | | Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
| * kernel: replace SMP cacheflush fix with some patches from linux-mti.gitFelix Fietkau2016-07-043-17/+354
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * kernel: fix mips MT_SMP kernel crash on cache flushFelix Fietkau2016-07-041-0/+17
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * kernel: add support for uncompressed zImage on ARMFelix Fietkau2016-07-044-2/+137
| | | | | | | | | | | | | | This can be used to prevent double compression for platforms where the boot loader already expects compressed images. Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * kernel: add common config symbolsFelix Fietkau2016-07-041-0/+6
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: Configure status LED for WRT1900ACSRujun Wang2016-07-041-0/+3
| | | | | | | | Signed-off-by: Rujun Wang <chinawrj@gmail.com>
| * mvebu: add a patch to deal with excessive latencies/delays during flash PIO ↵Felix Fietkau2016-07-041-0/+36
| | | | | | | | | | | | command processing Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: configure switch on WRT1200AC and WRT1900ACv2/SClaudio Leite2016-07-041-6/+4
| | | | | | | | | | | | Also collapses the three identical configurations into one block. Signed-off-by: Claudio Leite <leitec@staticky.com>
| * mvebu: backport upstream ethernet driver improvements and enable buffer ↵Felix Fietkau2016-07-0429-6/+4334
| | | | | | | | | | | | manager support Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: fix device I/O coherency issuesFelix Fietkau2016-07-041-0/+47
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: correct patch name of the crypto sram fixFelix Fietkau2016-07-041-0/+0
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: fix bus ranges for the crypto processor sramFelix Fietkau2016-07-041-0/+13
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: tune kernel config for performanceFelix Fietkau2016-07-041-1/+1
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: enable core drivers in the kernel config instead of packaging themFelix Fietkau2016-07-0413-165/+72
| | | | | | | | | | | | Simplify profile package selection Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: add some more flash driver fixesFelix Fietkau2016-07-043-0/+156
| | | | | | | | | | | | | | Disable marvell,nand-keep-config property on WRT1900AC to allow the flash driver to properly probe the chip Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: rename recently added flash driver fixFelix Fietkau2016-07-041-0/+0
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: prevent crash in the flash driver in case of a spurious interruptFelix Fietkau2016-07-041-0/+13
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: update to linux 4.4Felix Fietkau2016-07-042-24/+15
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: fix portability issues in the image makefile codeFelix Fietkau2016-07-041-5/+5
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mvebu: backport an upstream NAND flash driver fixFelix Fietkau2016-07-041-0/+428
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * linux-firmware: fix md5sumHauke Mehrtens2016-07-041-1/+1
| | | | | | | | | | | | | | | | The copy on the mirror has a different md5sum as specified in this package Makefile. The content of the file on the mirror is the same as in the checkout so just update our md5sum. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
| * rtl8192su-firmware: move firmware to own packageHauke Mehrtens2016-07-042-17/+8
| | | | | | | | | | | | | | Instead of downloading the firmware from some website take it from linux-firmware package and do not download it separately any more. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
| * rtl8192se-firmware: fix package buildHauke Mehrtens2016-07-041-1/+1
| | | | | | | | | | | | | | The package did not pack the firmware because of a problem which looks like a copy and past error. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
| * mt76: update to the latest version, fixes a SMPS handling issueFelix Fietkau2016-07-041-2/+2
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mt76: update to latest version, adds survey support for mt76x2Felix Fietkau2016-07-041-1/+1
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * mt76: update to the latest version, fixes a monitor mode injection crashFelix Fietkau2016-07-041-2/+2
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
| * kernel: rename B53 symbols to avoid upstream kernel conflictRafał Miłecki2016-07-0413-52/+52
| | | | | | | | | | | | | | | | | | In kernel 4.7 there is upstreamed b53 driver using (mostly?) the same symbols as our b53 does. Change our symbols so both drivers can coexist in kernel tree. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> Acked-by: Jonas Gorski <jonas.gorski@gmail.com>
| * kernel: backport bgmac changes from net-nextRafał Miłecki2016-07-049-11/+329
| | | | | | | | Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
| * kernel: rename bgmac patches that went into the same kernelRafał Miłecki2016-07-044-0/+0
| | | | | | | | Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
* | Merge pull request #19 from wigyori/masterZoltan Herpai2016-07-0469-1784/+1913
|\| | | | | update to 4.4.14, ramips updates ,fix 9pnet compilation
| * packages: fix bmp085-spi typoZoltan HERPAI2016-07-041-1/+1
| | | | | | | | Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
| * kernel: add missing symbols for 4.4Zoltan HERPAI2016-07-041-0/+6
| | | | | | | | Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
| * packages: add virtio-pci and virtio-mmio packages, fix 9pnet dependenciesZoltan HERPAI2016-07-042-1/+37
| | | | | | | | Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
| * kernel: update to version 4.4.14Hauke Mehrtens2016-07-0447-1054/+561
| | | | | | | | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.14 Some manual changes to target/linux/generic/patches-4.4/610- netfilter_match_bypass_default_checks.patch were needed. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
| * mediatek: convert the NAND target to UBIJohn Crispin2016-07-047-193/+63
| | | | | | | | Signed-off-by: John Crispin <john@phrozen.org>
| * mediatek: remove modules from Kernel configDirk Neukirchen2016-07-041-85/+0
| | | | | | | | | | | | | | | | | | | | | | | | most symbols should be in Kernel packages depending on HW the removal of CONFIG_REALTEK_PHY and USB symbols might be wrong compile tested only Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
| * ramips: fix up switch settings for Sitecom WL-351 v1 002Tobias Diedrich2016-07-044-2/+93
| | | | | | | | | | | | | | | | | | Pinmux for rgmii needs to be set to rgmii, not gpio. Hide the ESW switch on boot (using new rgmii esw devicetree attribute). Also add a Sitecom-specific profile, since the image needs to include the rtl8366 kernel driver. Signed-off-by: Tobias Diedrich <ranma+openwrt@tdiedrich.de>
| * ramips: disable the WP pin on the SDK mmc driverJohn Crispin2016-07-041-0/+21
| | | | | | | | Signed-off-by: John Crispin <john@phrozen.org>
| * ramips: fix pinmux typoJohn Crispin2016-07-041-0/+77
| | | | | | | | | | Reported-by: Joy Kicer <joykicer@gmail.com> Signed-off-by: John Crispin <john@phrozen.org>
| * ramips: set correct LAN/WAN MAC addresses on DIR-860L B1Matthias Schiffer2016-07-041-0/+4
| | | | | | | | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Reviewed-by: Jo-Philipp Wich <jo@mein.io>
| * ramips: fix fixseama call on first bootMatthias Schiffer2016-07-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | Commit "kernel: mtdsplit: calculate kernel partition precisely for Seama" changed the kernel partition to only contain the kernel itself and not the Seama header. Adjust the fixseama call to match what is used on brcm53xx. This fixes failing to boot a second time after flashing the factory image on the affected devices. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Reviewed-by: Jo-Philipp Wich <jo@mein.io>
| * ramips: add i2s clocksMichael Lee2016-07-041-3/+30
| | | | | | | | Signed-off-by: Michael Lee <igvtee@gmail.com>
| * ramips: update i2s dtsi filesMichael Lee2016-07-047-5/+111
| | | | | | | | Signed-off-by: Michael Lee <igvtee@gmail.com>