aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
* mt76: update to the latest versionFelix Fietkau2020-04-272-33/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bef8f8a5966d mt76: mt7615: remove a stray if statement 89bd7199487f mt76: remove variable 'val' set but not used ee8ac234b84e mt76: mt7615: introduce mt7615_mcu_fill_msg 4999db4668f0 mt76: mt7615: introduce mt7615_mcu_wait_response 8ce6e40eba03 mt76: mt7615: cleanup fw queue just for mmio devices 9d1d2ee9add3 mt76: mt7615: introduce mt7615_init_device routine 7fbd2a57cea4 mt76: always init to 0 mcu messages 3b277cf18d95 mt76: mt7615: introduce mt7615_mcu_send_message routine 2a4132a55a4f mt76: mt7615: add mt7615_mcu_ops data structure 9ba71749a122 mt76: mt7615: move mt7615_mcu_set_bmc to mt7615_mcu_ops 2e991f3e8cdd mt76: mt7615: move mt7615_mcu_set_sta in mt7615_mcu_ops 56852057cb90 mt76: mt7615: rely on skb API for mt7615_mcu_set_eeprom 642ecd978887 mt76: mt7615: rework mt7615_mcu_set_bss_info using skb APIs 2b0810af4a52 mt76: mt7615: move more mcu commands in mt7615_mcu_ops data structure 7a6285e63d88 mt76: mt7615: introduce MCU_FW_PREFIX for fw mcu commands e536b42ebc7d mt76: mt7615: introduce mt7615_register_map fccbdb628ffd mt76: mt7615: add mt7663e support to mt7615_reg_map d42244e9255c mt76: mt7615: add mt7663e support to mt7615_{driver,firmware}_own aebbe088127f mt76: mt7615: add mt7663e support to mt7615_mcu_set_eeprom 28e22d07f892 mt76: mt7615: introduce mt7615_eeprom_parse_hw_band_cap routine 167428592647 mt76: mt7615: introduce mt7615_init_mac_chain routine 23ca7acfc856 mt76: mt7615: introduce uni cmd command types c4171728cf70 mt76: mt7615: introduce set_bmc and st_sta for uni commands 9e5c76d2310a mt76: mt7615: add more uni mcu commands 779b2cebc147 mt76: mt7615: introduce set_ba uni command 21ee7da00f0a mt76: mt7615: get rid of sta_rec_wtbl data structure 2097f74f664c mt76: mt7615: introduce mt7663e support 8e9cd01228d0 mt7615: sync Kconfig with upstream 3b4f93840950 mt76: add memory barrier to DMA queue kick 8d301ace8ed7 mt76: mt7615: fix mt7663e firmware struct endianness 9bc1850ce711 mt76: mt7615: fix endianness in unified command a1b9b7d94aa0 mt76: mt7615: add missing declaration in mt7615.h 6e4b2a709fe7 mt76: sync Makefile with upstream 258dfb6afb30 mt76: mt76x02u: Add support for newer versions of the XBox One wifi adapter 9c3d84b62cc0 mt76: mt76x2u: introduce Mercury UD13 support ea8ea71933ca mt76: mt76x0: pci: add mt7610 PCI ID 9d555f82d329 mt76: mt7615: modify mt7615_ampdu_stat_read for each phy 8bd26d6c3172 mt76: mt7615: enable aggr_stats for both phy 1315afa511e0 mt76: mt7615: cleanup mib related defines and structs 072b50c61e0e mt76: mt7615: add more useful Tx mib counters b23ff3e9343a mt76: mt7663: fix mt7615_mac_cca_stats_reset routine 294abe47c9b2 mt76: mt7663: enable nf estimation d2d7bf2243f6 mt76: mt7615: make scs configurable per phy 908a2cfab88f mt76: mt7663: disable RDD commands eaef0a268b95 mt76: mt7615: add ethool support to mt7663 driver 96e07ef1113d mt76: mt7615: introduce mt7615_mcu_set_channel_domain mcu command 67182f36e3be mt76: mt7663: keep Rx filters as the default e6a3f3ffe53a mt76: mt7615: introduce hw scan support 12ecd5ba2146 mt76: mt7615: introduce scheduled scan support f6ab0bee3172 mt76: mt7615: introduce BSS absence event f208a9430044 mt76: mt7615: introduce rlm tlv in bss_info mcu command ea4f4d216dbe mt76: mt7615: remove unnecessary register operations 72c9380e70f9 mt76: add headroom and tailroom to mt76_mcu_ops data structure 63e14669e09d mt76: mt7615: introduce mt7663u support to mt7615_write_txwi 29d359ac7626 mt76: mt7615: introduce mt7615_mac_update_rate_desc routine 1f1dd2cb5b49 mt76: mt7615: introduce __mt7663_load_firmware routine cb6dcfd3cf13 mt76: mt7615: move mt7615_mac_wtbl_addr in mac.h d28e8e7ef912 mt76: mt76u: rely on mt7622 queue scheme for mt7663u f78cf8957aba mt76: mt7615: rework wtbl key configuration 2829497aaaf5 mt76: mt7615: introduce mt7615_wtbl_desc data structure 02c9ec4a15e7 mt76: mt7615: add address parameter to mt7615_eeprom_init e9c640c0a79e mt76: mt7663: correct the name of the rom patch 1e8b2fe5ab03 mt76: mt7615: do not always reset the dfs state setting the channel ec0ea46dacf9 mt76: mt7615: Delete an error message in mt7622_wmac_probe() d16a4698f1ac mt76: mt7615: disable merge of OTP ROM data by default 2b58998bb594 mt76: mt7615: add support for applying DC offset calibration from EEPROM 55198aafb756 mt76: mt7615: add support for applying tx DPD calibration from EEPROM 5a1eaa38d380 mt76: mt7603: disable merge of OTP ROM data by default bf60f43b12fb mt76: mt76x2: disable merge of OTP ROM data by default 9406eb1d110f mt76: mt7615: fix endian issues in applying flash calibration data 66d00b8c9dac mt76: mt7615: fix possible division by 0 in mt7615_mac_update_mib_stats 25d812dddcf8 mt76: mt7663: fix aggr range entry in debugfs 08b8bd2bc915 mt76: mt7615: disable hw/sched scan ops for non-offload firmware 8fb1cd20a776 mt76: mt7615: set hw scan limits only for firmware with offload support 05b23d7478fe mt76: mt7615: rework IRQ handling to prepare for MSI support b92c0d576769 mt76: mt7622: fix DMA unmap length 03daa60ca69c mt76: mt7663: fix DMA unmap length 5f2f676b1f01 mt76: mt7615: enable MSI by default 5822911f8026 mt76: remove unnecessary annotations a7035bce8517 mt76: mt7615: fix possible deadlock in mt7615_stop d4e6e225bc06 mt76: mt7615: move core shared code in mt7615-common module 94827d2033c7 mt76: mt7615: introduce mt7663u support 36591dd35f91 mt76: mt7615: enable scs for mt7663 driver bd80144cb5be mt76: mt7615: disable aspm by default 9dcb60b78ede mt76: mt7615: provide aid info to the mcu 6e443e89cce2 mt76: remove PS_NULLFUNC_STACK capability ea133325faa6 mt76: mt7663: introduce 802.11 PS support in sta mode ff3869b38cf2 mt76: mt7615: make Kconfig entry obvious for MT7663E 01fd34f3a6c5 mt76: mt7615: fix sta ampdu factor for VHT e5adbb2077e2 mt76: fix A-MPDU density handling d73e3a23a54e mt76: mt7615: use larger rx buffers if VHT is supported 257319e9b07d mt76: mt7615: never use an 802.11b CF-End rate on 5GHz 29a92c5606d6 mt76: mt7603: never use an 802.11b CF-End rate on 5GHz c0b19ac97c07 mt76: mt7615: adjust timing in mt7615_mac_set_timing to match fw/hw values 1656882f2723 mt76: mt7615: do not adjust MAC timings if the device is not running 4e7ce907faf3 mt76: mt7615: fix tx status rate index calculation 8304b3866100 mt76: mt7603: fix tx status rate index calculation 722d1f47d8ba mt76: add rx queues info to mt76 debugfs da329ef776b0 mt76: mt7615: parse mcu return code for unified commands facf74fd506f mt76: mt7615: fix mt7615_firmware_own for mt7663e e910787a9888 mt76: mt7615: fix max wtbl size for 7663 c9821f7d6a8c mt76: mt7615: fix mt7615_driver_own routine e35cc532c3d2 mt76: mt7615: fix aid configuration in mt7615_mcu_wtbl_generic_tlv b6cb91a71fe1 mt76: mt7615: rework mt7615_mac_sta_poll for usb code b193dd8100f8 mt76: mt7663u: enable AirTimeFairness 31cffa98920f mt76: mt7615: move mcu bss upload before creating the sta cde3716aa47e mt76: enable TDLS support 1846da5dd417 mt76: mt7615: set spatial extension index 6aaf0299730f mt76: mt7615: fix endian issues in dcoc/txdpd calibration 5de75b745cf9 mt76: mt7663: fix up BMC entry indicated to unicmd firmware a5f394c5ca48 mt76: mt7615: add sta pointer to mt7615_mcu_add_bss_info signature 1f2f3dda76b9 mt76: mt7615: fix event report in mt7615_mcu_bss_event c2a3cced36de mt76: mt76x0: enable MCS 8 and MCS9 1afabe78cfc5 mt76: mt7663: add the possibility to load firmware v2 5f3ccc722627 mt76: mt7663: remove check in mt7663_load_n9 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mvebu: tidy up support for GL.iNet GL-MV1000Adrian Schmutzler2020-04-271-3/+3
| | | | | | | | | | | | | | | | | This fixes a bunch of cosmetic issues with GL.iNet GL-MV1000: - apply alphabetic sorting in multiple files - use armada-3720 prefix for DTS like for other devices - fix vendor capitalization for model in DTSes - remove trivial comment in DTS files - use DEVICE_VENDOR/DEVICE_MODEL - remove redundant SUPPORTED_DEVICES - use SOC instead of DEVICE_DTS - remove empty line at EOF Fixes: 050c24f05c85 ("mvebu: add support for GL.iNet GL-MV1000") Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* mvebu: add support for GL.iNet GL-MV1000Li Zhang2020-04-261-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | This patch adds supports for GL-MV1000. Specification: - SOC: Marvell Armada 88F3720 (1GHz) - Flash: 16MB (W25Q128FWSIG) - RAM: 1GB DDR4 - Ethernet: 3x GE (1 WAN + 2 LAN) - EMMC: 8GB EMMC (KLM8G1GETF-B041) - MicroSD: 1x microSD slot - USB: 1x USB 2.0 port(TypeA),1x USB 3.0 port(TypeC) - Button: 1x reset button,1x slide switch - LED: 3x greed LED - UART: 1x UART on PCB (JP1: 3.3V, RX, TX, GND) Update firmware instructions ============================ In the compiled,please gzip -d xxx.img.gz,then update firmware on uboot web. Signed-off-by: Li Zhang <li.zhang@gl-inet.com> [Copied dts file to files-5.4] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: support intel X7xx 10/40GbE adaptersXiaobo Tian2020-04-261-0/+42
| | | | | | Signed-off-by: Xiaobo Tian <peterwillcn@gmail.com> [Add i40evf/i40evf.ko and setect CONFIG_IAVF] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* uboot-envtools: fix domywifi_dw33d Bad CRC errorweidong jia2020-04-261-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | The current dw33d partition index has changed, this patch solves this problem. old partition layout dev: size erasesize name mtd0: 00040000 00010000 "u-boot" mtd1: 00010000 00010000 "u-boot-env" mtd2: 00fa0000 00010000 "oem-firmware" mtd3: 00010000 00010000 "art" mtd4: 00500000 00020000 "kernel" mtd5: 05b00000 00020000 "ubi" mtd6: 02000000 00020000 "oem-backup" new partition layout dev: size erasesize name mtd0: 00500000 00020000 "kernel" mtd1: 05b00000 00020000 "ubi" mtd2: 02000000 00020000 "oem-backup" mtd3: 00040000 00010000 "u-boot" mtd4: 00010000 00010000 "u-boot-env" mtd5: 00fa0000 00010000 "oem-firmware" mtd6: 00010000 00010000 "art" Signed-off-by: weidong jia <jwdsccd@gmail.com>
* uboot-envtools: update to 2020.04Lucian Cristian2020-04-261-7/+8
| | | | | | also revert to directly download the archive from https Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* mac80211: ath10k: increase rx buffer size to 2048Linus Lüssing2020-04-262-1/+38
| | | | | | | | | | | | | | | | | | | | | | | Before, only frames with a maximum size of 1528 bytes could be transmitted between two 802.11s nodes. For batman-adv for instance, which adds its own header to each frame, we typically need an MTU of at least 1532 bytes to be able to transmit without fragmentation. This patch now increases the maxmimum frame size from 1528 to 1656 bytes. Tested with two ath10k devices in 802.11s mode, as well as with batman-adv on top of 802.11s with forwarding disabled. Fix originally found and developed by Ben Greear. Link: https://github.com/greearb/ath10k-ct/issues/89 Link: https://github.com/greearb/ath10k-ct/commit/9e5ab25027e0971fa24ccf93373324c08c4e992d Cc: Ben Greear <greearb@candelatech.com> Signed-off-by: Linus Lüssing <ll@simonwunderlich.de> Signed-off-by: Sven Eckelmann <sven@narfation.org>
* perf: build with NO_LIBCAP=1Yangbo Lu2020-04-261-0/+1
| | | | | | | | | Build with NO_LIBCAP=1. This is to resolve build issue. Package perf is missing dependencies for the following libraries: libcap.so.2 Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
* gdb: disable gdbserver for arcLuiz Angelo Daros de Luca2020-04-261-0/+1
| | | | | | | | | | Although gdb is supported, gdbserver is still not. checking whether gdbserver is supported on this host... no Build breaks as gdbserver executable is not found during packaging. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* kernel: netdev: fix kmod-sfp symbolsDavid Bauer2020-04-261-2/+2
| | | | | | Fixes: ec2f7a47d379 ("kernel: add module to support SFP cages") Signed-off-by: David Bauer <mail@david-bauer.net>
* relayd: bump to version 2020-04-25Kevin Darbyshire-Bryant2020-04-261-3/+3
| | | | | | | | f4d759b dhcp.c: further improve validation Further improve input validation for CVE-2020-11752 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* umdns: update to version 2020-04-25Kevin Darbyshire-Bryant2020-04-261-3/+3
| | | | | | | | | | | cdac046 dns.c: fix input validation fix Due to a slight foobar typo, failing to de-reference a pointer, previous fix not quite as complete as it should have been. Improve CVE-2020-11750 fix Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* kernel: netdev: fix kmod-sfp description capitalizationDavid Bauer2020-04-261-1/+1
| | | | Signed-off-by: David Bauer <mail@david-bauer.net>
* kernel: netdev: add phylink dependency for sfpDavid Bauer2020-04-261-1/+1
| | | | | | Fixes: ec2f7a47d379 ("kernel: add module to support SFP cages") Signed-off-by: David Bauer <mail@david-bauer.net>
* kernel: netdev: add kmod-phylinkDavid Bauer2020-04-261-0/+16
| | | | Signed-off-by: David Bauer <mail@david-bauer.net>
* kernel: add module to support SFP cagesRené van Dorst2020-04-251-0/+20
| | | | | | Enables kernel SFP case support. Signed-off-by: René van Dorst <opensource@vdorst.com>
* procd: extend requirejail attribute handlingDaniel Golle2020-04-251-3/+3
| | | | | | | | e2ed964 jail: don't fail unless requirejail is set 17e7ae7 jail: don't load libpreload-seccomp.so if it doesn't exist Fixes openwrt/packages#11913 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ltq-adsl(-fw): Makefile clean-up and fixesAdrian Schmutzler2020-04-243-10/+10
| | | | | | | | | | | | | | | This fixes a few minor issues (partially cosmetic) in ltq-adsl and ltq-adsl-fw Makefiles: - fix PKG_SOURCE_URL and switch to https - remove non-existant FW_NAME variable - fix package name for config inclusion - fix config symbol for debugging Fixes: 1d0a9d0c0470 ("move ltq-adsl") Cc: John Crispin <john@phrozen.org> Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* kernel: replace "+@" IPV6 dependency by "+"Adrian Schmutzler2020-04-241-1/+1
| | | | | | | | | | The combination +@IPV6:kmod-ipsec6 is not valid, the +a:b syntax implies the @. Fix it. Fixes: 2e6b6f9fcaae ("kernel: add @IPv6 dependency to ipv6 modules") Reported-by: Oldřich Jedlička (@oldium) Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* fstools: update to the latest versionFelix Fietkau2020-04-221-3/+3
| | | | | | | | | | 84965b92f635 blockd: print symlink error code and string message 62c578c22f9d blockd: report "target" path as "mount" for autofs available mounts d1f1f2b38fa1 block: remove mount target file if it's a link 830441d790d6 blockd: remove symlink linkpath file if it's a dir or link c80f7002114f libfstools/mtd: attempt to read from OOB data if empty space is found Signed-off-by: Felix Fietkau <nbd@nbd.name>
* openssl: bump to 1.1.1gPetr Štetiar2020-04-211-2/+2
| | | | | | | | Fixes NULL dereference in SSL_check_chain() for TLS 1.3, marked with high severity, assigned CVE-2020-1967. Ref: https://www.openssl.org/news/secadv/20200421.txt Signed-off-by: Petr Štetiar <ynezz@true.cz>
* base-files: ensure VERBOSE is setAlexander Couzens2020-04-211-1/+1
| | | | | | | If not set, it shows the following error sh: out of range Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
* ubus: update to latest git HEADHans Dedecker2020-04-201-3/+3
| | | | | | 171469e lua: avoid truncation of large numeric values Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* uboot-rockchip: fix ident stringPetr Štetiar2020-04-201-1/+1
| | | | | | | | Commit 797506011695 ("uboot-rockchip: add new package") has added `OpenWRT` ident string, fix it to proper `OpenWrt`. Fixes: 797506011695 ("uboot-rockchip: add new package") Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uboot-rockchip: add new packageTobias Mädel2020-04-201-0/+57
| | | | | | | This package is needed for the rockchip target. Signed-off-by: Tobias Mädel <t.maedel@alfeld.de> Tested-by: Tobias Schramm <t.schramm@manjaro.org>
* arm-trusted-firmware-rockchip: add new packageTobias Mädel2020-04-201-0/+49
| | | | | | | | | This is needed to build the uboot-rockchip, needed for the rockchip target Signed-off-by: Tobias Mädel <t.maedel@alfeld.de> Tested-by: Tobias Schramm <t.schramm@manjaro.org> [replaced `mkdir -p` with INSTALL_DIR variable] Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uboot-kirkwood: update to 2020.04Pawel Dembicki2020-04-2010-118/+101
| | | | | | | | | | | | | Update U-Boot to current 2020.04 release for kirkwood platform. Catch up with upstream and move some configuration options from the header files to the corresponding defconfig files. Compile tested: all devices Run tested: nsa310, pogoplugv4 Tested-by: Cezary Jackiewicz <cezary@eko.one.pl> [nsa310] Signed-off-by: Pawel Dembicki <paweldembicki@gmail.com>
* relayd: bump to version 2020-04-20Kevin Darbyshire-Bryant2020-04-201-3/+3
| | | | | | | | 796da66 dhcp.c: improve input validation & length checks Addresses CVE-2020-11752 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* umdns: update to version 2020-04-20Kevin Darbyshire-Bryant2020-04-201-4/+4
| | | | | | | | e74a3f9 dns.c: improve input validation Addresses CVE-2020-11750 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* procd: fix jail when running on glibcDaniel Golle2020-04-191-3/+3
| | | | | | d200b70 jail: include /etc/nsswitch.conf in jail for glibc. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* dante: Fix compile with glibcHauke Mehrtens2020-04-182-1/+54
| | | | | | | | | | | | | | | | | | | When compiled with glibc the config_scan.c wants to use the cpupolicy2numeric() function which is only available when HAVE_SCHED_SETSCHEDULER is set. It looks like the wrong define was used here. This fixes a build problem with glibc in combination with the force ac_cv_func_sched_setscheduler=no in the OpenWrt CONFIGURE_VARS. This fixes the following compile error with glibc: ---------------------------------------------------------------------- /bin/ld: config_scan.o: in function `socks_yylex': dante-1.4.1/sockd/config_scan.l:461: undefined reference to `cpupolicy2numeric' collect2: error: ld returned 1 exit status make[5]: *** [Makefile:522: sockd] Error 1 Fixes: aaf46a8fe23e ("dante: disable sched_getscheduler() - not implemented in musl") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* rbcfg: Add missing mode to open callHauke Mehrtens2020-04-182-2/+2
| | | | | | | | | | | | | | | | | | | When open() is called with O_CREAT a 3. parameter has to be given with the file system permissions of the new file. Not giving this is an error, which results in a compile error with glibc. This fixes the following compile error with glibc: ---------------------------------------------------------------------- In file included from /include/fcntl.h:329, from main.c:18: In function 'open', inlined from 'rbcfg_update' at main.c:501:7: /include/bits/fcntl2.h:50:4: error: call to '__open_missing_mode' declared with attribute error: open with O_CREAT or O_TMPFILE in second argument needs 3 arguments __open_missing_mode (); ^~~~~~~~~~~~~~~~~~~~~~ Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* upgs: Remove extra _DEFAULT_SOURCE definitionHauke Mehrtens2020-04-181-4/+0
| | | | | | | | | | | | | | | This extra _DEFAULT_SOURCE definition results in a double definition which is a compile error. This fixes the following compile error with glibc: ---------------------------------------------------------------------- ugps-2019-06-25-cd7eabcd/nmea.c:19: error: "_DEFAULT_SOURCE" redefined [-Werror] #define _DEFAULT_SOURCE <command-line>: note: this is the location of the previous definition cc1: all warnings being treated as errors Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* busybox: backport Remove stime() function callsHauke Mehrtens2020-04-181-0/+84
| | | | | | | glibc 2.31 does not provide stime() any more, backport a fix from current busybox master to avoid using this function. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* openvpn: update to 2.4.9Magnus Kroken2020-04-183-4/+4
| | | | | | | | | | | | | | | This is primarily a maintenance release with bugfixes and improvements. This release also fixes a security issue (CVE-2020-11810) which allows disrupting service of a freshly connected client that has not yet negotiated session keys. The vulnerability cannot be used to inject or steal VPN traffic. Release announcement: https://openvpn.net/community-downloads/#heading-13812 Full list of changes: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.9 Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* binutils: add ALTERNATIVES for strings (FS#3001)Hans Dedecker2020-04-181-1/+2
| | | | | | | | Don't move strings anymore to /bin/strings to avoid clash with busybox /usr/bin/strings but move it to /usr/bin/binutils-strings. Use ALTERNATIVES support to install it as /usr/bin/strings Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* mbedtls: update to 2.16.6Magnus Kroken2020-04-171-2/+2
| | | | | | | | | | | | Security fixes for: * CVE-2020-10932 * a potentially remotely exploitable buffer overread in a DTLS client * bug in DTLS handling of new associations with the same parameters Full release announement: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* mac80211: make sure existing iface belongs to correct (fullmac) phyDaniel Golle2020-04-172-9/+19
| | | | | | | | | | | | | | Some FullMAC cfg80211 wireless devices do not support virtual interfaces, hence there is script logic to keep the existing network device. Improve this to support renaming the interface if needed and make sure the existing interface actually belongs to the right phy. Change calls to 'iw' to avoid outputing warnings and errors to not confuse users of such devices. Also bump PKG_RELEASE which has been forgotten in the previous two mac80211 changes. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* elfutils: aarch64 fix build on muslLucian Cristian2020-04-171-0/+59
| | | | | | | | | aarch64_initreg.c: In function 'aarch64_set_initial_registers_tid': aarch64_initreg.c:85:37: error: invalid operands to binary & (have 'long double' and 'unsigned int') dwarf_fregs[r] = fregs.vregs[r] & 0xFFFFFFFF; ~~~~~~~~~~~~~~ ^ Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* uboot-sunxi: bump to 2020.04 relasePetr Štetiar2020-04-179-43/+14
| | | | | | | | | | | Refreshed patches, removed upstreamed patch: 260-configs-a64-olinuxino-emmc-add-eMMC-boot-part-config.patch Boot tested on a64-olinuxino-emmc. Cc: Zoltan HERPAI <wigyori@uid0.hu> Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uboot-imx6: bump to 2020.04 releasePetr Štetiar2020-04-174-13/+11
| | | | | | | | | Refreshed all patches, run tested on apalis. Cc: Vladimir Vid <vladimir.vid@sartura.hr> Cc: Tim Harvey <tharvey@gateworks.com> Cc: Koen Vandeputte <koen.vandeputte@ncentric.com> Signed-off-by: Petr Štetiar <ynezz@true.cz>
* mac80211: drop data frames without key on encrypted linksDavid Bauer2020-04-171-0/+148
| | | | | | | | | | | | | | | | | | | | | | | | | If we know that we have an encrypted link (based on having had a key configured for TX in the past) then drop all data frames in the key selection handler if there's no key anymore. This fixes an issue with mac80211 internal TXQs - there we can buffer frames for an encrypted link, but then if the key is no longer there when they're dequeued, the frames are sent without encryption. This happens if a station is disconnected while the frames are still on the TXQ. Detecting that a link should be encrypted based on a first key having been configured for TX is fine as there are no use cases for a connection going from with encryption to no encryption. With extended key IDs, however, there is a case of having a key configured for only decryption, so we can't just trigger this behaviour on a key being configured. Cc: stable@vger.kernel.org Reported-by: Jouni Malinen <j@w1.fi> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: David Bauer <mail@david-bauer.net>
* mac80211: fix detecting existing interfaceDaniel Golle2020-04-171-1/+1
| | | | | | | | | Instead of using the actual interface name, a hard-coded 'wlan0' has slipped into the script. Replace it. Fixes: ccf2aa9d4b ("mac80211: detect existing interface before adding") Reported-by: John Crispin <john@phrozen.org> Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* procd: jail fixes and improvementsDaniel Golle2020-04-141-3/+3
| | | | | | | | | | | 32c717e jail: only mess with rootfs if CLONE_NEWNS was set b275a62 instance: harmonize instance API 511fd97 jail: make /proc more secure 4953b7c jail: mount /sys read-only a4d6442 jail: replace /etc/resolv.conf with symlink in extroot+overlay a4cc165 jail: always mount /dev as additional tmpfs Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* netifd: clean up netns functionalityDaniel Golle2020-04-141-3/+3
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* Revert "kmod-sched: add act_police"Kevin Darbyshire-Bryant2020-04-141-10/+0
| | | | | | | | | | | This reverts commit 1b973b54ea4d5d20dec5e71c48bff6a3e0bcb4ac. It turns out act_police is included in the kmod-sched package so this package turns out to be superfluous and causes file provision conflicts. Ooooops! Best revert it then. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* netifd: fix jail ifdown and jails without jail_ifnameDaniel Golle2020-04-141-3/+3
| | | | | | | | The previous commit introduced a regression for netns jails without jail_ifname set. Fix that. Fixes: 4e4f7c6d2d ("netifd: network namespace jail improvements") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* netifd: network namespace jail improvementsDaniel Golle2020-04-141-3/+3
| | | | | | | aaaca2e interface: allocate and free memory for jail name d93126d interface: allow renaming interface when moving to jail netns Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mac80211: adapt for single-instance wpadDaniel Golle2020-04-142-8/+8
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* hostapd: reduce to a single instance per serviceDaniel Golle2020-04-148-174/+62
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>