aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* OpenWrt v23.05.2: adjust config defaultsv23.05.2Hauke Mehrtens2023-11-151-2/+2
| | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* netifd: fix IPv4 route target maskingJo-Philipp Wich2023-11-142-1/+33
| | | | | | | | | A previous commit supposed to mask out excess host bits in route targets failed to correctly calculate the mask value, causing it to produce improper results for certain mask lengths. Fixes: https://github.com/openwrt/netifd/issues/17 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* uboot-envtools: add environment config for MeiG SLT866Daniel Golle2023-11-131-0/+1
| | | | | | | Add configuration to access U-Boot environment on MeiG SLT866. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit f8414f1a6fa0b784117353a93d821fa923da1aaf)
* OpenWrt v23.05.1: revert to branch defaultsHauke Mehrtens2023-11-121-2/+2
| | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* OpenWrt v23.05.1: adjust config defaultsv23.05.1Hauke Mehrtens2023-11-121-2/+2
| | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* iptables: backport patch fixing bug with string moduleChristian Marangi2023-11-122-1/+41
| | | | | | | | Backport patch fixing critical bug with string module merged upstream. Fixes: #13812 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 3d6b89c5140acb9228ec89bde09b53dafdead070)
* wolfssl: update to 5.6.4Nick Hainke2023-11-112-27/+2
| | | | | | | | | | | Releae Notes: https://github.com/wolfSSL/wolfssl/releases/tag/v5.6.4-stable Remove upstreamed patch: - 001-fix-detection-of-cut-tool-in-configure.ac.patch Signed-off-by: Nick Hainke <vincent@systemli.org> (cherry picked from commit d83231603c60a1df7d0530c8766f0b71c6553b44)
* netifd: update to the latest versionFelix Fietkau2023-11-111-3/+3
| | | | | | | | | eee02ccca8c8 device: add support to configure eee bb28f6a291d9 wireless: fix sign comparison warning 35facc8306f5 wireless: fix premature removal of hotplug devices due to down state Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit d45d72a6da004a557a2b39793c84174b33f0500c)
* netifd: update to Git HEAD (2023-11-09)Christian Marangi2023-11-111-3/+3
| | | | | | | | | | 841b05fbb91e system-linux: fix compilation error if IFLA_DSA_MASTER is not supported 5c9ecc1ff74f system-linux: make system_if_get_master_ifindex static 2dc7f450f3a2 system-linux: add option to configure DSA conduit device 838f815db5ef system-linux: add support for configurable GRO option Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 1714087442bb61591fe60a375f39b39abd657e25)
* ipq-wifi: update to Git HEAD (2023-11-10)Christian Marangi2023-11-101-4/+4
| | | | | | | | | | | | | | | | | | | c9db9d0b3027 ipq8074: add Asus RT-AX89X BDF 33154283e54a ipq8074: update RegDB in new submitted BDF 2b034415ac3d ipq40xx: add YYeTs LE1 BDF a9c253ebe926 ipq8074: add Netgear WAX620 Board file for Netgear WAX620, extracted from stock (bdwlan.b290) firmware and repacked. ec0960967999 qca-wireless: ipq40xx: add BDFs for ZTE MF287 57aa1b1562ac ipq8174: Add Linksys MX4200 52a1c2940605 ipq8074: add Netgear WAX630 Board file for Netgear WAX630. Extracted from stock (WAX630_BDF.bin) firmware and repacked. e7701b85d46d ipq8074: update RegDB in new submitted BDF cd04ab7f984f qcn9074: update RegDB in new submitted BDF f70fdf9438ae ipq8074: add Arcadyan AW1000 BDF 21c4d976b1e6 ipq8074: add CMCC RM2-6 BDF f92fa0a2bdcf ipq8074: add ZTE MF269 BDF 371d4dce9b9a ipq8074: add Yuncore AX880 BDF 0c2e810e71ed qcn9074: fix prpl Foundation Haze BDF for old mac80211 version Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* ucode: update to Git HEAD (2023-11-07)Jo-Philipp Wich2023-11-091-3/+3
| | | | | | | | 0352a33 uloop: support new interval and signal APIs 1468cc4 syntax: don't treat `as` and `from` as reserved keywords Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 551963662b3c2d4a740a447855da410c0f217152)
* hostapd: refresh patchesChristian Marangi2023-11-094-10/+10
| | | | | | | Refresh patches for hostapd using make package/hostapd/refresh. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 05e516b12d4463e40df6d97a03bc6aa621c245f5)
* hostapd: permit 40MHz in 802.1s only also for 2.4GHz g/n with noscanChristian Marangi2023-11-091-0/+9
| | | | | | | | | | | | | | Currently for 802.1s only, for wifi 2.4GHz in g/n mode, 40MHz is never permitted. This is probably due to the complexity of setting periodic check for the intolerant bit. When noscan option is set, we ignore the presence of the intoleran bit in near AP, so we can enable 40MHz and ignore any complex logic for checking. Fixes: #13112 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 6c9ac57d58ab0d2c71fb51120a2166b7e0bd7183)
* hostapd: permit also channel 7 for 2.5GHz to be set to HT40PLUSChristian Marangi2023-11-091-1/+1
| | | | | | | | Also channel 7 for 2.4GHz can be set to HT40PLUS. Permit this and add it to the list of the channels. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit b1c7b1bd67ca40289dfb7acd03e12ce43618d548)
* hostapd: fix broke noscan option for meshChristian Marangi2023-11-092-3/+3
| | | | | | | | | | noscan option for mesh was broken and actually never applied. This is caused by a typo where ssid->noscan value is check instead of conf->noscan resulting in the logic swapped and broken. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 1b5ea2e199fcf391f88afd0322de449459399be4)
* mac80211: fix not set noscan option for wpa_supplicantChristian Marangi2023-11-091-1/+1
| | | | | | | | | noscan option was changed to hostapd_noscan but the entry in wpa_supplicant was never updated resulting in the noscan option actually never set. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 1070fbce6e496da2dacf17c6e842a4369c4be71b)
* px5g-wolfssl: Fix permission of private keyHauke Mehrtens2023-11-082-17/+30
| | | | | | | | | | | | | | | | | | Store the private key with read and write permission for the user only and not with read permissions for everyone. This converts the write_file() function from fopen() to open() because open allows to specify the permission mask of the newly created file. It also adds and fixes some existing error handling. OpenSSL does this in the same way already. With this change it looks like this: root@OpenWrt:/# ls -al /etc/uhttpd.* -rw-r--r-- 1 root root 749 Nov 6 23:14 /etc/uhttpd.crt -rw------- 1 root root 121 Nov 6 23:14 /etc/uhttpd.key Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 6aad5ab0992fefd88ce612bc0484e0115a004572)
* px5g-mbedtls: Fix permission of private keyHauke Mehrtens2023-11-082-10/+27
| | | | | | | | | | | | | | | | | | Store the private key with read and write permission for the user only and not with read permissions for everyone. This converts the write_file() function from fopen() to open() because open allows to specify the permission mask of the newly created file. It also adds and fixes some existing error handling. OpenSSL does this in the same way already. With this change it looks like this: root@OpenWrt:/# ls -al /etc/uhttpd.crt /etc/uhttpd.key -rw-r--r-- 1 root root 519 Nov 6 22:58 /etc/uhttpd.crt -rw------- 1 root root 121 Nov 6 22:58 /etc/uhttpd.key Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 929c9a58c9a17a3ca8d2a3be0c5dc4ac98e848e2)
* hostapd: use rtnl to set up interfacesFelix Fietkau2023-11-083-5/+11
| | | | | | | In wpa_supplicant, set up wlan interfaces before adding them Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit c2a30b6e01aa756cd7d50c578ab4344c725ecc59)
* wifi: fix applying mesh parameters when wpa_supplicant is in useFelix Fietkau2023-11-083-26/+71
| | | | | | | | Apply them directly using nl80211 after setting up the interface. Use the same method in wdev.uc as well Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 531314260d2e50e984e1671f88662b469dffb16e)
* netifd: update to the latest versionFelix Fietkau2023-11-081-3/+3
| | | | | | | | | | | | 383753dd65ae device/bridge: support passing extra vlans in the device_set_state call b6e75eafc1af device: send notifications for device events via ubus cab415c7aefd bridge: add auth-required bridge members with auth_status=0 if vlan is enabled 827a02f0343c bridge: add support for configuring vlans for auth=1,auth_status=false 40ed7363caf2 device: fix build error on 32 bit systems 516ab774cc16 system-linux: fix race condition on bringing up wireless devices Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 41d7439af5a40a71a0deb2075fa133b61b0e478a)
* mediatek: add CMCC RAX3000M supportTianling Shen2023-11-071-0/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hardware specification: SoC: MediaTek MT7981B 2x A53 Flash: 64GB eMMC or 128 MB SPI-NAND RAM: 512MB Ethernet: 4x 10/100/1000 Mbps Switch: MediaTek MT7531AE WiFi: MediaTek MT7976C Button: Reset, Mesh Power: DC 12V 1A - UART: 3.3v, 115200n8 -------------------------- | Layout | | ----------------- | | 4 | GND TX VCC RX | <= | | ----------------- | -------------------------- Gain SSH access: 1. Login into web interface, and download the configuration. 2. Enter fakeroot, decompress the configuration: tar -zxf cfg_export_config_file.conf 3. Edit 'etc/config/dropbear', set 'enable' to '1'. 4. Edit 'etc/shadow', update (remove) root password: 'root::19523:0:99999:7:::' 5. Repack 'etc' directory: tar -zcf cfg_export_config_file.conf etc/ * If you find an error about 'etc/wireless/mediatek/DBDC_card0.dat', just ignore it. 6. Upload new configuration via web interface, now you can SSH to RAX3000M. Check stroage type: Check the label on the back of the device: "CH EC CMIIT ID: xxxx" is eMMC version "CH CMIIT ID: xxxx" is NAND version eMMC Flash instructions: 1. SSH to RAX3000M, and backup everything, especially 'factory' part. ('data' partition can be ignored, it's useless.) 2. Write new GPT table: dd if=openwrt-mediatek-filogic-cmcc_rax3000m-emmc-gpt.bin of=/dev/mmcblk0 bs=512 seek=0 count=34 conv=fsync 3. Erase and write new BL2: echo 0 > /sys/block/mmcblk0boot0/force_ro dd if=/dev/zero of=/dev/mmcblk0boot0 bs=512 count=8192 conv=fsync dd if=openwrt-mediatek-filogic-cmcc_rax3000m-emmc-preloader.bin of=/dev/mmcblk0boot0 bs=512 conv=fsync 4. Erase and write new FIP: dd if=/dev/zero of=/dev/mmcblk0 bs=512 seek=13312 count=8192 conv=fsync dd if=openwrt-mediatek-filogic-cmcc_rax3000m-emmc-bl31-uboot.fip of=/dev/mmcblk0 bs=512 seek=13312 conv=fsync 5. Set static IP on your PC: IP 192.168.1.254, GW 192.168.1.1 6. Serve OpenWrt initramfs image using TFTP server. 7. Cut off the power and re-engage, wait for TFTP recovery to complete. 8. After OpenWrt has booted, perform sysupgrade. 9. Additionally, if you want to have eMMC recovery boot feature: (Don't worry! You will always have TFTP recovery boot feature.) dd if=openwrt-mediatek-filogic-cmcc_rax3000m-initramfs-recovery.itb of=/dev/mmcblk0p4 bs=512 conv=fsync NAND Flash instructions: 1. SSH to RAX3000M, and backup everything, especially 'Factory' part. 2. Erase and write new BL2: mtd erase BL2 mtd write openwrt-mediatek-filogic-cmcc_rax3000m-nand-preloader.bin BL2 3. Erase and write new FIP: mtd erase FIP mtd write openwrt-mediatek-filogic-cmcc_rax3000m-nand-bl31-uboot.fip FIP 4. Set static IP on your PC: IP 192.168.1.254, GW 192.168.1.1 5. Serve OpenWrt initramfs image using TFTP server. 6. Cut off the power and re-engage, wait for TFTP recovery to complete. 7. After OpenWrt has booted, erase UBI volumes: ubidetach -p /dev/mtd0 ubiformat -y /dev/mtd0 ubiattach -p /dev/mtd0 8. Create new ubootenv volumes: ubimkvol /dev/ubi0 -n 0 -N ubootenv -s 128KiB ubimkvol /dev/ubi0 -n 1 -N ubootenv2 -s 128KiB 9. Additionally, if you want to have NAND recovery boot feature: (Don't worry! You will always have TFTP recovery boot feature.) ubimkvol /dev/ubi0 -n 2 -N recovery -s 20MiB ubiupdatevol /dev/ubi0_2 openwrt-mediatek-filogic-cmcc_rax3000m-initramfs-recovery.itb 10. Perform sysupgrade. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 423186d7d8b4f23aee91fca4f1774a195eba00d8) [rebased to 23.05] Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* uboot-mediatek: add support for CMCC RAX3000MTianling Shen2023-11-072-0/+723
| | | | | | | | The OEM U-Boot uses dual boot and signature verification which does not support by OpenWrt. So add a custom U-Boot build for OpenWrt. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit fddd735dd54ded7d26df156eaa8d1cc53e668efb)
* arm-trusted-firmware-mediatek: add emmc/spim-nand ddr4 build for mt7981Tianling Shen2023-11-071-0/+18
| | | | | | | They will be used on CMCC RAX3000M. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 7d8ffe941dd06a5625f6608516a86938260b01fc)
* mbedtls: Activate secp521r1 curve by defaultHauke Mehrtens2023-11-072-2/+2
| | | | | | | | | | | | | | | | | | Activate the secp521r1 ecliptic curve by default. This curve is allowed by the CA/Browser forum, see https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-v2.0.1-redlined.pdf#page=110 This increases the size of libmbedtls12_2.28.5-1_aarch64_generic.ipk by about 400 bytes: Without: 252,696 libmbedtls12_2.28.5-1_aarch64_generic.ipk With: 253,088 libmbedtls12_2.28.5-2_aarch64_generic.ipk Fixes: #13774 Acked-by: Koen Vandeputte <koen.vandeputte@citymesh.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 3c17cdbc369d89ff6a7911c3acff2e493778f6c1)
* libnl: add support for cliKoen Vandeputte2023-11-051-1/+18
| | | | | | | | | | | Some packages (like wavemon >= 0.9.4) depend on libnl-cli. Add support for this part of the lib. libnl-cli itself depends on libnl-genl and libnl-nf. On MIPS, this component adds 81kB. Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com> (punctuation correction and reorganisation of commit message) Signed-off-by: Nick Hainke <vincent@systemli.org> (cherry picked from commit 4bdd1c1a135b5c816a01055f3cc9fc158bbc840a)
* odhcpd: Bump to latest commitsKevin Darbyshire-Bryant2023-11-031-3/+3
| | | | | | | | d8118f6 config: make sure timer is not on the timeouts list before freeing 4bbc6e7 add hostsfile output in addition to statefile Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> (cherry picked from commit 0221b860321ca2dd2bdc6339c01aa9adb3ddb34e)
* uboot-mediatek: fix global pll clock override on mtk_spimNicolò Veronese2023-11-031-0/+47
| | | | | | | | | | | | | With patch 101-03-spi-mtk_spim-get-spi-clk-rate-only-once.patch a new system to calculate the SPI clocks has been added. Unfortunately, the do_div macro overrides the global priv->pll_clk_rate field. This will cause to have a reduced clock rate on each subsequent SPI call. Signed-off-by: Valerio 'ftp21' Mancini <ftp21@ftp21.eu> Signed-off-by: Nicolò Veronese <nicveronese@gmail.com> (cherry picked from commit 8849ccb9957e69d85c93ad4b58400573a181ad18)
* hostapd: fix broken WPS on broadcom-wl and ath11kPetr Štetiar2023-11-021-0/+62
| | | | | | | | | | | | | | | | | | | | | Upgrading wpa_supplicant from 2.9 to 2.10 breaks broadcom-wl/ath11k based adapters. The reason for it is hostapd tries to install additional IEs for scanning while the driver does not support this. The kernel indicates the maximum number of bytes for additional scan IEs using the NL80211_ATTR_MAX_SCAN_IE_LEN attribute. Save this value and only add additional scan IEs in case the driver can accommodate these additional IEs. Bug: http://lists.infradead.org/pipermail/hostap/2022-January/040178.html Bug-Debian: https://bugs.debian.org/1004524 Bug-ArchLinux: https://bugs.archlinux.org/task/73495 Upstream-Status: Changes Requested [https://patchwork.ozlabs.org/project/hostap/patch/20220130192200.10883-1-mail@david-bauer.net] Reported-by: Étienne Morice <neon.emorice@mail.com> Tested-by: Étienne Morice <neon.emorice@mail.com> Signed-off-by: David Bauer <mail@david-bauer.net> Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 6dca88aa4acd60229147628cb920d05a1136666d)
* build: add CycloneDX SBOM JSON supportPetr Štetiar2023-11-021-0/+8
| | | | | | | | | | | | | | CycloneDX is an open source standard developed by the OWASP foundation. It supports a wide range of development ecosystems, a comprehensive set of use cases, and focuses on automation, ease of adoption, and progressive enhancement of SBOMs (Software Bill Of Materials) throughout build pipelines. So lets add support for CycloneDX SBOM for packages and images manifests. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit d604a07225c5c82b942cd3374cc113ad676a2519)
* firewall4: update to the latest versionFelix Fietkau2023-11-021-3/+3
| | | | | | | | | | 23a434d0d15d tests: fix expected test output 840ccdeeabce fw4: avoid emitting invalid rule jump targets 20da9933fd7e fw4: fix another instance of invalid rule jump targets 598d9fbb5179 fw4: remove special cases around hw flow offloading Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 7049ea9e95b0aec461f585523b773e68db3ae304)
* ucode: update to latest Git HEADJo-Philipp Wich2023-11-021-3/+3
| | | | | | | | | | | cfb24ea build: avoid redefining _FORTIFY_SOURCE 448c763 lib: enforce consistent `index()` behavior with empty needle argument cdc0203 nl80211: fix maybe uninitialized variable a69b5c8 vm: fix unused result warning ea046bd build: enable source fortification by default Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 262554f12cbcc4e3bea2440ce1e696ce8791e732)
* ucode: fix build on macosFelix Fietkau2023-11-021-1/+11
| | | | | | | | Remove ABI version, since its format is not accepted by the linker. Enable rpath to avoid clash with system libraries Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 5eb8a21ba5fe5e87c03f0361d1db989189be9c6d)
* ucode: update to latest Git HEADJo-Philipp Wich2023-11-021-145/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Introduces signal handling facilities - Fixes potentially incorrect object equality tests - Introduces debug library - Introduces log library - ABI version bump due to changed VM structure layout - Revised packaging Changelog: 07c0317 jsdoc: switch to own custom theme 6ca08b0 jsdoc: properly handle indented documentation blocks 2a67f22 lib: add/improve documentation for require(), loadfile(), loadstring() 9993ccb uci: fix potential memory leaks in `configs()` f56394f ci: re-trigger workflows on pull request pushes 1c18993 lib: various documentation fixes d25dcb1 uci: add module documentation 4a8ece2 docs: use CSS and local JavaScript fixups to improve formatting 8f21cfa lib: introduce log library 8a3aefe build: auto-enable module depending on present libraries 6a01adc build: convert CMakeLists.txt into lowercase 8700665 ci: don't skip pull request workflows for `master` branch 0184d23 include: fix execvpe compat function on macOS 8b23884 uloop: rename environ variable to avoid clashing with system macro on macOS 7c209d7 types: ensure double serializatiion with decimal places d150425 rtnl: update the link attr TODOs d394174 rtnl: add IFLA_TARGET_NETNSID for operating in other namespaces 1227733 lib: fix documented return value for `splice()` c9982de docs: add struct module documentation 7dde493 docs: add missing headline to debug module documentation 8f852ea types: improve comparison reliability of binary strings 6940c28 lib: introduce debug library be07107 treewide: consolidate platform specific code in platform.c 2593270 uloop: interrupt on VM signals 97a5292 lib: add `signal()` stdlib function 1dbbb6a main: enable signal dispatching in the standalone cli interpreter 1623245 types: treat signal handler array as GC root 29b1c0d vm: introduce basic signal handling infrastructure 093684d fs: explicitly compare isatty() result 4f4f38f types: don't rely on implicit type conversion in ucv_compare() 4bee0ef docs: disable GitHub Jekyll post processing 5efb7a0 docs: further rework 33bc7bf docs: fix markup quirks 9d5e420 docs: add information about memory management and operator precedence f1190ef docs: various improvements f0cc841 fs: use `fseeko()` and `ftello()` cba0c3c fs: complete function documentation coverage f9260f7 github: drop superfluous CNAME file c85bc74 Create CNAME 5309294 lib: add JSDoc documentation b0f2f90 fs: add JSDoc documentation fe086da math: add JSDoc documentation 70f9348 docs: add initial JSDoc infrastructure 24f1a56 source: fix source offset accounting 9df9160 lexer: don't count EOF token as newline b9d8f06 ci: switch to official openwrt/gh-action-sdk Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit eacc885816fb46bf4054b0c3dd2cd1513322ad09)
* urngd: update to version 2023-11-01Hauke Mehrtens2023-11-011-3/+3
| | | | | | | | | Fix compilation with glibc 44365eb Deactivate _FORTIFY_SOURCE in jitterentropy-base.c Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit d62726b1e44f785d543e4625b19ca1f628adda6c)
* uboot-mediatek: fix determine the size of an uImage.FIT using 'imsz' or 'imszb'.Jianhui Zhao2023-10-311-7/+5
| | | | | | | | It must read the entire image for previous code of 'imsz' or 'imszb'. Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com> Suggested-by: Chuanhong Guo <gch981213@gmail.com> (cherry picked from commit 3bbc1d5fba1d700917138334a48c16bafdf48de9)
* uboot-mediatek: add build for mt7981 rfbDaniel Golle2023-10-314-0/+808
| | | | | | | | Improve and package builds for various boot media configurations of the MediaTek MT7981 reference board. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 8428bed15d9b5a71a634c7f5639de31a09795bec)
* arm-trusted-firmware-mediatek: fix copy&paste error in MakefileDaniel Golle2023-10-311-2/+2
| | | | | | | | | | When adding builds for MT7981 the related Makefile sections for MT7986 have apparently been copied, but in one instance the rename from 7986 to 7981 has been omitted. Fix that now. Fixes: 602cb4f325 ("arm-trusted-firmware-mediatek: add build for MT7981 DDR3") Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit be6e257fe6a248425fd390e9a2037a8432e644ea)
* hostapd: fix OWE association with mbedtlsDavid Bauer2023-10-312-1/+92
| | | | | | | | | | | | | | | | | The code for hostapd-mbedtls did not work when used for OWE association. When handling association requests, the buffer offsets and length assumptions were incorrect, leading to never calculating the y point, thus denying association. Also when crafting the association response, the buffer contained the trailing key-type. Fix up both issues to adhere to the specification and make hostapd-mbedtls work with the OWE security type. Signed-off-by: David Bauer <mail@david-bauer.net> (cherry picked from commit 39341f422f895a37b405b753c3630b1bdc9b8c6e)
* hostapd: do not trim trailing whitespace, except for newlineFelix Fietkau2023-10-311-2/+2
| | | | | | | Fixes adding SSID or key with trailing whitespace Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit a2d8226c4f45555f49542d6f047b70d44f23f7ec)
* iptables: opt-out of lto usageAnari Jalakas2023-10-311-1/+1
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0xc22): relocation R_MIPS16_26 against `libxt_DNAT_init' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol printf ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 5dbdf3bb3af27993977aaaa72dca07d9251c1919)
* lua: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0xcc8): relocation R_MIPS16_26 against `luaL_argerror' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol strcpy ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 246b97b607e316d6acae66a23fcdf6d12c02a786)
* libsepol: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0x4194): relocation R_MIPS16_26 against `cil_printf.lto_priv.0' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol memcmp ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 1925a183a3f25d2db1f10addc85ed894df14c210)
* libselinux: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled: <artificial>:(.text.exit+0x6e): relocation R_MIPS16_26 against `pthread_key_delete' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol stpcpy ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 2a33d26d2110a9332e343a1deb32c9eee486c0db)
* iwinfo: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0x400c): relocation R_MIPS16_26 against `iwinfo_close' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol strcpy ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit fbacc5ae52ec8fbe89b3a47850b4d6f62d4c4bf5)
* build: hide kmod-zram config unless enabledRani Hod2023-10-311-9/+11
| | | | | | | | | | Currently the zram default compressor choice is displayed whether or not zram is activated. Since the default choice is lzo-rle, this adds a false dependency on kmod-lib-lzo. With this patch, the choice options appear only when activating zram. Signed-off-by: Rani Hod <rani.hod@gmail.com> (cherry picked from commit 62ada26de28e6c43a957b8f186ead1f45e6a5623)
* uboot-mediatek: Sync phy-mode for Xiaomi Redmi Router AX6000Furong Xu2023-10-311-2/+2
| | | | | | | | | | | | Commit 572ea6807053 ("uboot-mediatek: add patches for MT7988 and builds for RFB") renamed HSGMII to 2500basex, but forgot to update the dts of Redmi Router AX6000, makes the network unusable. This patch makes the network usable again. Fixes: #13724 Fixes: 572ea6807053 ("uboot-mediatek: add patches for MT7988 and builds for RFB") Signed-off-by: Furong Xu <xfr@outlook.com> (cherry picked from commit 03987d2d11c4954e3e8afa3d44ba6213e774c742)
* umdns: update to the latest versionFelix Fietkau2023-10-281-3/+3
| | | | | | | | | | | | | 479c7f8676d9 cache: make record/hostname lookup case-insensitive 26c97a5a50bf ubus: add a browse flag for suppressing cached ip addresses c286c51a9bd9 Fix AVL tree traversal in cache_record_find and cache_host_is_known 4035fe42df58 interface: use a global socket instead of per-interface ones c63d465698c7 cache: dump hostname target from srv records b42b22152d73 use hostname from SRV record to look up IP addresses d45c443aa1e6 ubus: add array flag support for the hosts method Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 3e1ac00ccbdaa0c396b36429ddbe83d2e3f6276f)
* uqmi: update to latest HEADDavid Bauer2023-10-271-4/+4
| | | | | | | | | | c8c9f10 uim: fix help formatting aac0776 uqmi: add APN profile commands ffc5eea uim: support SIM card power-up/down d6c963d uim: add application state to SIM status Signed-off-by: David Bauer <mail@david-bauer.net> (cherry picked from commit 0da74dbb453d739ee37bbdca75cac5e294b2cb56)
* openssl: update to 3.0.12Hauke Mehrtens2023-10-262-3/+3
| | | | | | | | Major changes between OpenSSL 3.0.11 and OpenSSL 3.0.12 [24 Oct 2023] * Mitigate incorrect resize handling for symmetric cipher keys and IVs. (CVE-2023-5363) Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit e4ebc7b5662d6436fcc84b8e1583204b96fb0503)