aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* apm821xx: fix typos in .dts filesChristian Lamparter2020-08-291-2/+2
| | | | | | | This patch fixes various typos or tab-vs-space issues in the APM821XX device targets Device-Tree source files. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: use SPDX-License-identifiersChristian Lamparter2020-08-298-50/+8
| | | | | | | Please note that the DTS are based on really old .DTS from vendors themselves. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: apm821xx.dtsi fix comment stylesChristian Lamparter2020-08-291-2/+4
| | | | Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: MX60W: enumerate PCIe in device-treeChristian Lamparter2020-08-291-0/+19
| | | | | | | This patch adds the pcie-switch and bridge configuration for the Meraki MX60W. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: WNDR4700: delete wndr4700 board fileChristian Lamparter2020-08-295-115/+1
| | | | | | | Thanks to the PCIE OF enumeration patch, this is technically no longer needed. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: MR24: enumerate PCIe in device-treeChristian Lamparter2020-08-291-0/+51
| | | | | | | This patch adds the pcie-switch and bridge configuration for the Meraki MR24. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: add missing cells-values for IIC1Christian Lamparter2020-08-291-0/+2
| | | | | | These are copied over from the IIC0. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: DTB: fix warnings related to sata-port warningsChristian Lamparter2020-08-291-0/+4
| | | | | | | | | This patch silences the following warnings: >netgear-wndr4700.dts:168.3-13:Warning (reg_format): /plb/sata@bffd1800/sata-port@0:reg:property has invalid length (4 bytes) (#address-cells == 2, #size-cells == 1) >netgear-wndr4700.dts:167.26-170.4: Warning (avoid_default_addr_size):/plb/sata@bffd1800/sata-port@0: Relying on default #address-cells value >netgear-wndr4700.dts:167.26-170.4: Warning (avoid_default_addr_size):/plb/sata@bffd1800/sata-port@0: Relying on default #size-cells value Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: WNDAP6x0: enumerate PCIe in device-treeChristian Lamparter2020-08-292-0/+75
| | | | | | | This patch adds the pcie-switch and bridge configuration of the WNDAP620 and WNDAP660. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* apm821xx: WNDR4700: enumerate PCIe in device-treeChristian Lamparter2020-08-294-34/+106
| | | | | | | | | | This patch adds the pcie-switch and bridge configuration of the WNDR4700. This allows to get rid of the legacy firmware monikers and drop the usbport LED declaration. Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* oxnas: kd20: revert accedintally commited changeDaniel Golle2020-08-291-0/+4
| | | | | | | | | Changing the factory image of KD20 was used during testing and wasn't intended to be included in the commit fixing a SATA bug on oxnas. Revert that part of the commit. Fixes: 5793112f75 ("oxnas: reduce size of ATA DMA descriptor space") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mvebu: LS421DE: add linkstation poweroff driverDaniel González Cabanelas2020-08-282-15/+2
| | | | | | | | | | | Compile the Linkstation poweroff module for the Buffalo LS421DE. Without this driver the device remains forever halted if a power off command is executed. The driver will also allow to use the WoL feature, which wasn't availabe in the stock firmware. Signed-off-by: Daniel González Cabanelas <dgcbueu@gmail.com>
* mvebu: backport linkstation-poweroff upstream driverDaniel González Cabanelas2020-08-282-0/+198
| | | | | | | | | | Backport the Linkstation poweroff driver from the kernel upstream (commit a7f79f99541ef) This driver is required by the Buffalo LinkStation LS421DE for a correct power off operation. It also allows to use the WoL feature. Signed-off-by: Daniel González Cabanelas <dgcbueu@gmail.com>
* ramips: rt3883: use lzma-loader for DIR-645Perry Melange2020-08-281-0/+1
| | | | | | | | | The DIR-645 fails to boot if the kernel is large. Enabling lzma-loader resolves the issue. Run-tested on D-Link DIR-645. Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
* ramips: add support for Wavlink WL-WN531A6Georgi Vlaev2020-08-283-0/+194
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds support for Wavlink WL-WN531A6 (Quantum D6). Specifications: -------------- * SoC: Mediatek MT7621AT 2C2T, 880MHz * RAM: 128MB DDR3, Nanya NT5CB64M16GP-EK * Flash: 16MB SPI NOR flash, GigaDevice GD25Q127CSIG * WiFi 5GHz: Mediatek MT7615N (4x4:4) on mini PCIE slot. * WiFi 2.4GHz: Mediatek MT7603EN (2x2:2) on mini PCIE slot. * Ethernet: MT7630, 5x 1000Base-T * LED: Power, WAN, LAN(x4), WiFi, WPS, dual color "WAVLINK" LED logo on the top cover. * Buttons: Reset, WPS, "Turbo", touch button on the top cover via RH6015C touch sensor. * UART: UART1: serial console (57600 8n1) on the J4 header located below the top heatsink. UART2: J12 header, located on the right side of the board. * USB: One USB3 port. * I2C: J9 header, located below the top heatsink. Backup the OEM Firmware: ----------------------- There isn't any firmware released for the WL-WN531A6 on the Wavlink web site. Reverting back to the OEM firmware is not possible unless we have a backup of the original OEM firmware. The OEM firmware is stored on /dev/mtd4 ("Kernel"). 1) Plug a FAT32 formatted USB flash drive into the USB port. 2) Navigate to "Setup->USB Storage". Under the "Available Network folder" you can see part of the mount point of the newly mounted flash drive filesystem - e.g "sda1". The full mount point is prefixed with "/media", so in this case the mount point becomes "/media/sda1". 3) Go to http://192.168.10.1/webcmd.shtml . 4) Type the following line in the "Command" input box: dd if=/dev/mtd4ro of=/media/sda1/firmware.bin 5) Click "Apply" 6) After few seconds, in the text area should appear this output: 30080+0 records in 30080+0 records out 7) Type "sync" in the "Command" input box and click "Apply". 8) At this point the OEM firmware is stored on the flash drive as "firmware.bin". The size of the file is 15040 KB. Installation: ------------ * Flashing instructions (OEM web interface): The OEM web interface accepts only files with names containing "WN531A6". It's also impossible to flash the *-sysupgrade.bin image, so we have to flash the *-initramfs-kernel.bin first and use the OpenWrt's upgrade interface to write the sysupgrade image. 1) Rename openwrt-ramips-mt7621-wavlink_wl-wn531a6-initramfs-kernel.bin to WN531A6.bin. 2) Connect your computer to the one of the LAN ports of the router with an Ethernet cable and open http://192.168.10.1 3) Browse to Setup -> Firmware Upgrade interface. 4) Upload the (renamed) OpenWrt image - WN531A6.bin. 5) Proceed with the firmware installation and give the device a few minutes to finish and reboot. 6) After reboot wait for the "WAVLINK" logo on the top cover to turn solid blue, and open http://192.168.1.1 7) Use the OpenWrt's "Flash Firmware" interface to write the OpenWrt sysupgrade image: openwrt-ramips-mt7621-wavlink_wl-wn531a6-squashfs-sysupgrade.bin * Flashing instructions (u-boot TFTP): 1) Configure a TFTP server on your computer and set its IP to 192.168.10.100 2) Rename the OpenWrt sysupgrade image to firmware.bin and place it in the root folder of the TFTP server. 3) Power off the device and connect an Ethernet cable from one of its LAN ports your computer. 4) Press the "Reset" button (and keep it pressed) 5) Power on the device. 6) After a few seconds, when the connected port LAN LED stops blinking fast, release the "Reset" button. 7) Flashing OpenWrt takes less than a minute, system will reboot automatically. 8) After reboot the WAVLINK logo on the top cover will indicate the current OpenWrt running status (wait until the logo tunrs solid blue). Revert to the OEM Firmware: -------------------------- * U-boot TFTP: Follow "Flashing instructions (u-boot TFTP)" and use the "firmware.bin" backup image. * OpenWrt "Flash Firmware" interface: Upload the "firmware.bin" backup image and select "Force update" before continuing. Notes: ----- * The MAC address shown on the label at the back of the device is assigned to the 2.4G WiFi adapter. MAC addresses assigned by the OEM firmware: 2.4G: *:XX (label): factory@0x0004 5G: *:XX + 1 : factory@0x8004 WAN: *:XX - 1 : factory@0xe006 LAN: *:XX - 2 : factory@0xe000 * The I2C bus and UART2 are fully functional. The headers are not populated. Signed-off-by: Georgi Vlaev <georgi.vlaev@konsulko.com>
* curl: move package to packages.gitPaul Spooren2020-08-274-402/+0
| | | | | | | | curl is replaced by uclient-fetch within the OpenWrt build system and we can therefore move curl to packages.git. This is based on the Hamburg 2019 decision that non essential packages should move outside base. Signed-off-by: Paul Spooren <mail@aparcar.org>
* tools/mpc: update to 1.2.0Hannu Nyman2020-08-271-2/+2
| | | | | | Update mpc to version 1.2.0. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* ramips: add support for TP-Link TL-WR850N v2Andrew Freeman2020-08-274-2/+85
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds support for the TP-Link TL-WR850N v2. This device is very similar to TP-Link TL-WR840 v4 and TP-Link TL-WR841 v13. Specifications: SOC: MediaTek MT7628NN Flash: 8 MiB SPI RAM: 64 MiB WLAN: MediaTek MT7628NN Ethernet: 5 ports (100M) Installation Using the integrated tftp capability of the router: 1. Turn off the router. 2. Connect pc to one of the router LAN ports. 3. Set your PC IPv4 address to 192.168.0.66/24. 4. Run any TFTP server on the PC. 5. Put the recovery firmware on the root directory of TFTP server and name the file tp_recovery.bin 6. Start the router by pressing power button while holding the WPS/Reset button (or both WPS/Reset and WIFI buttons) 7. Router connects to your PC with IPv4 address 192.168.0.2, downloads the firmware, installs it and reboots. LEDs are flashing. Now you have OpenWrt installed. 8. Change your IPv4 PC address to something in 192.168.1.0/24 network or use DHCP to get an address from your OpenWrt router. 9. Done! You can login to your router via ssh. Forum link: https://forum.openwrt.org/t/add-support-for-tp-link-tl-wr850n-v2/66899 Signed-off-by: Andrew Freeman <labz56@gmail.com> [squash an tidy up commits, sort nodes] Signed-off-by: Darsh Patel <darshkpatel@gmail.com> [minor commit message adjustments] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* at91: explicitly set CONFIG_USB_SUPPORT for sam9x subtargetAdrian Schmutzler2020-08-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The at91 target sets FEATURES:=usb usbgadget ... in the target Makefile, which sets CONFIG_USB_SUPPORT=y in the .config file for both subtargets. However, when building with all kmods, the build fails with the following error message: ERROR: module [...]/drivers/bluetooth/btusb.ko is missing. It appears that only a part of the bluetooth files are compiled. The package depends @USB_SUPPORT. This can be easily healed by adding CONFIG_USB_SUPPORT=y to the sam9x subtarget configuration. Before the 4.14->5.4 bump, the same was also set in the target's config-4.14 file along with several other USB config options that are not reimplemented. Still, it remains a mystery to me why setting the same symbol via target kernel config creates a different result than the feature setting the same symbol in target-metadata.pl. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* hostapd: Fix compile errors after wolfssl updateHauke Mehrtens2020-08-271-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes the following compile errors after the wolfssl 4.5.0 update: LD wpa_cli ../src/crypto/tls_wolfssl.c: In function 'tls_match_alt_subject': ../src/crypto/tls_wolfssl.c:610:11: error: 'GEN_EMAIL' undeclared (first use in this function); did you mean 'ENAVAIL'? type = GEN_EMAIL; ^~~~~~~~~ ENAVAIL ../src/crypto/tls_wolfssl.c:610:11: note: each undeclared identifier is reported only once for each function it appears in ../src/crypto/tls_wolfssl.c:613:11: error: 'GEN_DNS' undeclared (first use in this function) type = GEN_DNS; ^~~~~~~ ../src/crypto/tls_wolfssl.c:616:11: error: 'GEN_URI' undeclared (first use in this function) type = GEN_URI; ^~~~~~~ ../src/crypto/tls_wolfssl.c: In function 'wolfssl_tls_cert_event': ../src/crypto/tls_wolfssl.c:902:20: error: 'GEN_EMAIL' undeclared (first use in this function); did you mean 'ENAVAIL'? if (gen->type != GEN_EMAIL && ^~~~~~~~~ ENAVAIL ../src/crypto/tls_wolfssl.c:903:20: error: 'GEN_DNS' undeclared (first use in this function) gen->type != GEN_DNS && ^~~~~~~ ../src/crypto/tls_wolfssl.c:904:20: error: 'GEN_URI' undeclared (first use in this function) gen->type != GEN_URI) ^~~~~~~ Makefile:2029: recipe for target '../src/crypto/tls_wolfssl.o' failed Fixes: 00722a720c77 ("wolfssl: Update to version 4.5.0") Reported-by: Andre Heider <a.heider@gmail.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* pistachio: Use kernel 5.4 by defaultHauke Mehrtens2020-08-271-2/+1
| | | | | | Kernel 5.4 should be stable enough. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ramips: remove further mt7621 code from local ethernet driverAdrian Schmutzler2020-08-265-265/+2
| | | | | | | | | | | | | | | While commit 734a8c46e703 focussed on removing stuff directly selected by the NET_RALINK_* symbols, this patch removes additional unused mt7621-specific code from the ethernet driver. As with the previous patch, the main reason is to reduce the amount of code we have to maintain and care about. Note that this patch still keeps a few lines with IS_ENABLED(CONFIG_SOC_MT7621) in mtk_eth_soc.h/.c, as this file is still selected for the mt7621 subtarget. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* mtd-utils: Update to version 2.1.2Hauke Mehrtens2020-08-262-3/+3
| | | | | | | | | | | | | | | | The release notes says this: As already said, the changes since 2.1.1 are primarily bug fixes, addressing compiler warnings and issues reported by diagnostic tools, but also build failures for some configurations. https://lists.infradead.org/pipermail/linux-mtd/2020-July/081299.html The size of the ubi-utils ipk increases on mips BE by 0.2% old: ubi-utils_2.1.1-1_mips_24kc.ipk: 70992 new: ubi-utils_2.1.2-1_mips_24kc.ipk: 71109 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* tools: mtd-utils: Update to version 2.1.2Hauke Mehrtens2020-08-266-15/+16
| | | | | | | | | | The release notes says this: As already said, the changes since 2.1.1 are primarily bug fixes, addressing compiler warnings and issues reported by diagnostic tools, but also build failures for some configurations. https://lists.infradead.org/pipermail/linux-mtd/2020-July/081299.html Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* wolfssl: Update to version 4.5.0Hauke Mehrtens2020-08-263-4/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes the following security problems: * In earlier versions of wolfSSL there exists a potential man in the middle attack on TLS 1.3 clients. * Denial of service attack on TLS 1.3 servers from repetitively sending ChangeCipherSpecs messages. (CVE-2020-12457) * Potential cache timing attacks on public key operations in builds that are not using SP (single precision). (CVE-2020-15309) * When using SGX with EC scalar multiplication the possibility of side- channel attacks are present. * Leak of private key in the case that PEM format private keys are bundled in with PEM certificates into a single file. * During the handshake, clear application_data messages in epoch 0 are processed and returned to the application. Full changelog: https://www.wolfssl.com/docs/wolfssl-changelog/ Fix a build error on big endian systems by backporting a pull request: https://github.com/wolfSSL/wolfssl/pull/3255 The size of the ipk increases on mips BE by 1.4% old: libwolfssl24_4.4.0-stable-2_mips_24kc.ipk: 386246 new: libwolfssl24_4.5.0-stable-1_mips_24kc.ipk: 391528 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* curl: Use wolfssl by defaultHauke Mehrtens2020-08-261-1/+1
| | | | | | | | Instead of using mbedtls by default use wolfssl. We now integrate wolfssl in the default build so use it also as default ssl library for curl. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* curl: Fix build with wolfsslHauke Mehrtens2020-08-261-0/+31
| | | | | | | | | Backport a commit from upstream curl to fix a problem in configure with wolfssl. checking size of time_t... configure: error: cannot determine a size for time_t Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ath79: fix ethernet setup for some qca953x devicesAdrian Schmutzler2020-08-252-17/+0
| | | | | | | | | | | | | | | | On Comfast CF-E130N v2 and Mikrotik LHG HB board, the config found in DTS appears to be strange: - eth0 has "syscon","simple-mfd" set although it's not enabled - eth1 is enabled redundantly (already "okay" in qca953x.dtsi) - phy-handle is set for eth1 in DTS although it has a fixed-link in qca953x.dtsi This seems like a copy-paste gone wrong. Remove the named options. Run-tested on MikroTik LHG 2. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* uboot-at91: harmonize indent in MakefileAdrian Schmutzler2020-08-251-5/+5
| | | | | | The indent in Makefile is mixed, harmonize it where reasonable. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* at91bootstrap: harmonize indent in MakefilesAdrian Schmutzler2020-08-252-34/+34
| | | | | | The indent in Makefiles is mixed, harmonize it where reasonable. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* at91: introduce vendor_model scheme and drop board namesAdrian Schmutzler2020-08-259-229/+152
| | | | | | | | | | | | | | This introduces the vendor_model scheme to this target in order to harmonize device names within the target and with the rest of OpenWrt. In addition, custom board names are dropped in favor of the generic script which takes the compatible. Use the SUPPORTED_DEVICES variable to store the compatible where it deviates from the device name, so we can use it in build recipes. While at it, harmonize a few indents as well. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* at91: Refresh kernel configHauke Mehrtens2020-08-252-105/+206
| | | | | | | This was done by running: make kernel_oldconfig CONFIG_TARGET=subtarget Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* at91: change dtb file pathSandeep Sheriker M2020-08-251-5/+2
| | | | | | | | | Changing dtb file path since the dtb files are build in KDIR folder with image- prefix. Signed-off-by: Sandeep Sheriker M <sandeep.sheriker@microchip.com> [remove commented lines] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* uboot-at91: bump version to linux4sam-2020.04Sandeep Sheriker M2020-08-252-6/+32
| | | | | | | Bump version to linux4sam-2020.04 and add patch to fix Wformat-security warnings. Signed-off-by: Sandeep Sheriker M <sandeep.sheriker@microchip.com>
* at91bootstrap: bump version to v3.9.3Sandeep Sheriker M2020-08-251-2/+2
| | | | Signed-off-by: Sandeep Sheriker M <sandeep.sheriker@microchip.com>
* at91: bump linux version to 5.4Sandeep Sheriker M2020-08-2511-1012/+649
| | | | | | | | Move patches to 5.4, put config only in subtarget directories. Signed-off-by: Sandeep Sheriker M <sandeep.sheriker@microchip.com> [refresh patches, add commit message] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* layerscape: add flashing manual for LS1012FRDMPawel Dembicki2020-08-251-0/+11
| | | | | | | | | | | | LS1012FRDM is supported but there's no flashing instruction in README. This patch adds it. While at it, add a missing saveenv for MAC address setup. Signed-off-by: Pawel Dembicki <paweldembicki@gmail.com> [add comment about saveenv] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* mt76: update to the latest versionFelix Fietkau2020-08-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | f0beb7cbc443 mt76: mt7663u: fix memory leaks in mt7663u_probe 90c8422d3f56 mt76: mt7915: fix typo in function name 9cbbe4a30eaf mac80211: simplify TX aggregation start 974486ec2642 util: in worker setup, only overwrite function pointer if not NULL 519510277a8b mt76: initialize tx worker function earlier 3c361b1e3f4e mt76: mt7663u: fix dma header initialization e8d489647c7f mt76: usb: fix use of q->head and q->tail 8124daf53130 mt76: sdio: fix use of q->head and q->tail 3c2cd8580377 mt76: unify queue tx cleanup code 780cdabb8659 mt76: remove qid argument to drv->tx_complete_skb 05aa857861fc mt76: remove swq from struct mt76_sw_queue e861cb051833 mt76: rely on AQL for burst size limits on tx queueing 3218b914a2fb mt76: remove struct mt76_sw_queue 23529b5e93c1 mt76: mt7603: tune tx ring size f6ca436ebea4 mt76: mt76x02: tune tx ring size 97e65131440c mt76: mt7603: check for single-stream EEPROM configuration 957b6c5ac273 mt76: mt7615: fix MT_ANT_SWITCH_CON register definition 96a541eedda9 mt76: mt7615: fix antenna selection for testmode tx_frames b36d7ae096a3 mt76: mt7603: move number of streams detection to eeprom init Signed-off-by: Felix Fietkau <nbd@nbd.name>
* firewall: Fix PKG_MIRROR_HASHHauke Mehrtens2020-08-241-1/+1
| | | | | Fixes: 6c57fb7aa93d ("firewall: bump to version 2020-07-05") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mbedtls: update to 2.16.7Magnus Kroken2020-08-242-27/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Mbed TLS 2.16.7 is a maintenance release of the Mbed TLS 2.16 branch, and provides bug fixes and minor enhancements. This release includes fixes for security issues and the most severe one is described in more detail in a security advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-07 * Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave. * Fix side channel in mbedtls_ecp_check_pub_priv() and mbedtls_pk_parse_key() / mbedtls_pk_parse_keyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtls_ecp_mul() / mbedtls_ecp_mul_restartable() when called with a NULL f_rng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key. * Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLS_SHAxxx_ALT macros). Due to Mbed TLS moving from ARMmbed to the Trusted Firmware project, some changes to the download URLs are required. For the time being, the ARMmbed/mbedtls Github repository is the canonical source for Mbed TLS. Signed-off-by: Magnus Kroken <mkroken@gmail.com> [Use https://codeload.github.com and new tar.gz file] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* exfat: update to 5.8.7Rosen Penev2020-08-242-33/+2
| | | | | | | | | | | | 93e2334 exfat: fix build error on linux-5.4,5.5 kernel 01a7b8c exfat: fix name_hash computation on big endian systems 8f92bc0 exfat: fix wrong size update of stream entry by typo Removed commented material that was for testing compilation. Removed patch as the error was fixed upstream. First entry above. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* kernel: add ar5523 drivermohammad rasim2020-08-241-1/+10
| | | | | | | | | The driver currently only support managed and monitor mode Changes since v1: - drop the @DRIVER_11N_SUPPORT dependency Signed-off-by: mohammad rasim <mohammad.rasim96@gmail.com>
* kernel: backport RTL8366RB patchesLinus Walleij2020-08-243-0/+359
| | | | | | | | | | These upstream patches makes the RTL8366RB DSA switch work properly with OpenWrt, the D-Link DIR-685 gets network and can be used as a router, and the same should be applicable for any other device that want to enable the RTL8366RB through Device Tree. Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
* ipset: update to version 7.6Josef Schlehofer2020-08-241-2/+2
| | | | | | | Changelog: https://ipset.netfilter.org/changelog.html Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* uClibc-ng: refresh config and remove several legacy optionsRosen Penev2020-08-2422-159/+4
| | | | | | | | | | | | SUSV3_LEGACY_MACROS are completely unused since SUSV3_LEGACY is enabled HAS_OBSOLETE_BSD_SIGNAL is completely deprecated functionality. HAS_BSD_RES_CLOSE is completely deprecated functionality. HAS_FTW is deprecated SUSV4 functionality. Saves ~4.5kb. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* uClibc-ng: update package from 1.0.31 to 1.0.34Donald Hoskins2020-08-241-2/+2
| | | | | | | | | | Update package from 1.0.31 to 1.0.34 Tested mips64/octeonplus/octeon3 Build against: OpenWrt SNAPSHOT r13871-546e140382 / LuCI Master git-20.186.79919-0c47989 Build Kernel: 5.4.51 Signed-off-by: Donald Hoskins <grommish@gmail.com>
* cmake: Disable use of package registriesJeffery To2020-08-241-0/+12
| | | | | | | | | | | | | | | | | CMake provides a user package registry (stored in ~/.cmake/packages) and a system package registry (not available on non-Windows platforms). The "export(PACKAGE)" command may store information in the user package registry, and the "find_package()" command may search both user and system package registries for information. This sets various variables to disable the use of these package registries (both saving and retrieval of package information). This also sets deprecated variables that perform similar functions, in case external toolchains include older versions of CMake. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* linux-firmware: add support for Marvell SDIO 8997Josef Schlehofer2020-08-242-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For example, Turris MOX SDIO card is using Marvell (NXP) 88W8997 chip. Technical specs of 88W8997: - 28nm - 802.11 ac wave-2 It should support simultaneous dual-band 2.4 GHz and 5 GHz, but it requires to support multiSSID for one Wi-Fi card [1], which is not supported in OpenWrt, yet and if we tried to run two instances of hostapd, it didn't work well, so it's 2.4 GHz or 5 GHz. - 2x2 MU-MIMO - Bluetooth 5.1 with LE support - Unfortunately, there can be connected only 8 clients at the same time (limited by FW, however, there exists "enterprise" chip, its equal chip, it is just different that it uses different FW) Symlink is necessary as mwifiex_sdio tries to load sd8997_uapsta.bin [ 13.651182] mwifiex_sdio mmc0:0001:1: Direct firmware load for mrvl/sd8997_uapsta.bin failed with error -2 [ 13.661065] mwifiex_sdio mmc0:0001:1: Falling back to user helper [ 13.684880] firmware mrvl!sd8997_uapsta.bin: firmware_loading_store: map pages failed [ 13.695910] mwifiex_sdio mmc0:0001:1: Failed to get firmware mrvl/sd8997_uapsta.bin [ 13.703774] mwifiex_sdio mmc0:0001:1: info: _mwifiex_fw_dpc: unregister device Pali Rohár sent two patches [2] [3] into kernel to fix default firmware name for SD8997, so the symlink will not be required in the future versions of kernel, which was accepted and right now, according to my details it was backported to 5.8, 5.7 and 5.4 [1] https://bugs.openwrt.org/index.php?do=details&task_id=3243 [2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=00eb0cb36fad5 [3] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2e1fcac52a9ea Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* linux-firmware: update to version 20200817Josef Schlehofer2020-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | git log --pretty=oneline --abbrev-commit 20200619..20200817 7a30af1 (HEAD -> master, tag: 20200817, origin/master, origin/main, origin/HEAD) Merge branch 'i915-firmware-updates-08-2020' of git://anongit.freedesktop.org/drm/drm-firmware into main 923bfa6 brcm: Add brcmfmac43455-sdio.raspberrypi,3-model-a-plus.txt symlink 33e11ab rtl_bt: Update RTL8822C BT UART firmware to 0x0599_8A4F 1b81373 i915: Add DMC firmware 2.02 for RKL bdf8d7a i915: Add DMC firmware 2.08 for TGL 1bcdc9a i915: Add HuC firwmare v7.5.0 for TGL c331aa9 amdgpu: update vega20 firmware for 20.30 a434387 amdgpu: update vega12 firmware for 20.30 49e9ea8 amdgpu: update vega10 firmware for 20.30 d89e9b1 amdgpu: update renoir firmware for 20.30 373c08a amdgpu: update raven2 firmware for 20.30 69ca06e amdgpu: update raven firmware for 20.30 12042c2 amdgpu: update picasso firmware for 20.30 2c9d97a amdgpu: update navi14 firmware for 20.30 eaa3e55 amdgpu: update navi10 firmware for 20.30 9bc3789 linux-firmware: update NXP SDSD-8997 firmware image 6c79b68 Mellanox: Add new mlxsw_spectrum firmware xx.2008.1036 2b823fc (tag: 20200721) linux-firmware: Update AMD SEV firmware e33306f Merge branch 'qca_0714' of https://github.com/bgodavar/qca_bt_fw into main 1d1c80b Update to 20200629111339 version to aligh SDK. Mainly fix DFS false alarm. 69c7f0b rtl_nic: update firmware for RTL8125B f39b687 Update binary firmware for MT7663 based devices to include firmware offload feature and low power feature. 3882702 QCA: Add correct bin file for WCN3991 3d3a06f linux-firmware: Update firmware file for Intel Bluetooth AX201 b7849f7 linux-firmware: Update firmware file for Intel Bluetooth AX200 07b0375 linux-firmware: Update firmware file for Intel Bluetooth 9560 44bf1b1 linux-firmware: Update firmware file for Intel Bluetooth 9260 7169ab3 linux-firmware: wilc1000: add wilc1000 v15.4 FW b1497fc Merge https://github.com/rjliao-qca/qca-btfw into main c4e04b4 QCA: Update Bluetooth firmware for QCA6390 74ac3b5 Merge https://github.com/bgodavar/qca_wcn3991 into main 1a0c0c2 amdgpu: add UVD firmware for SI asics 24cc617 QCA: Update WCN3991 FW files Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* kernel: bump 5.4 to 5.4.60Adrian Schmutzler2020-08-2428-385/+134
| | | | | | | | | | | | | | | | | | | | Deleted upstream patches: generic: 041-genirq-affinity-Make-affinity-setting-if-activated-o.patch ipq806x: 093-5-v5.8-ipq806x-PCI-qcom-Define-some-PARF-params-needed-for-ipq8064-SoC.patch 093-6-v5.8-ipq806x-PCI-qcom-Add-support-for-tx-term-offset-for-rev-2_1_0.patch Merged manually: ipq806x: 093-4-v5.8-ipq806x-PCI-qcom-Use-bulk-clk-api-and-assert-on-error.patch layerscape: 804-crypto-0016-MLKU-114-1-crypto-caam-reduce-page-0-regs-access-to-.patch Build-tested: ath79/generic, ipq806x, layerscape/armv7, layerscape/armv8_64b Run-tested: ipq806x (R7800) Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>