aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* busybox: switch to sha256 for passwdPaul Spooren2024-01-20
| | | | | | | Right now sha256 is considered more secure than md5, use it to harden against password decryption. Signed-off-by: Paul Spooren <mail@aparcar.org>
* busybox: enable sha hash for /etc/shadowPaul Spooren2024-01-20
| | | | | | | | It appears `md5` is no longer state of the art. Let's switch it to something slightly newer to increase security. Suggested-by: abnoeh <abnoeh@mail.com> Signed-off-by: Paul Spooren <mail@aparcar.org>
* ubox: update to Git HEAD (2024-01-15)Christian Marangi2024-01-19
| | | | | | | | | | | 11cb29e15d68 kmodloader: remove unneeded uname() call 811ca6c2234a kmodloader: fix memory leak in scan_loaded_modules() 8c95fc7039cb kmodloader: support loadable module parameters in modinfo 4ffc29e4041c kmodloader: add basic support for builtin modules ba3908351232 kmodloader: add modinfo support for builtin modules c006dccecb6f kmodloader: cleanup duplicated mmap() code Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* mediatek: add support for JDCloud RE-CP-03Tianling Shen2024-01-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hardware specification: SoC: MediaTek MT7986A 4x A53 Flash: 128GB eMMC RAM: 1GB DDR4 Ethernet: 4x 1GbE, 1x 2.5GbE (RTL8221B) Switch: MediaTek MT7531AE WiFi: MediaTek MT7976C Button: Reset, Joylink Power: DC 12V 2A Flash instructions: 1. Download and flash the vendor migration firmware via webUI: https://firmware.download.immortalwrt.eu.org/cnsztl/mediatek/filogic/openwrt-mediatek-mt7986-jdcloud_re-cp-03-vendor-migration.bin (Default address is 192.168.68.1, user root, no password) 2. After device has booted up, write new GPT table: dd if=openwrt-mediatek-filogic-jdcloud_re-cp-03-gpt.bin of=/dev/mmcblk0 bs=512 seek=0 count=34 conv=fsync 3. Erase and write new BL2: echo 0 > /sys/block/mmcblk0boot0/force_ro dd if=/dev/zero of=/dev/mmcblk0boot0 bs=512 count=8192 conv=fsync dd if=openwrt-mediatek-filogic-jdcloud_re-cp-03-preloader.bin of=/dev/mmcblk0boot0 bs=512 conv=fsync 4. Erase and write new FIP: dd if=/dev/zero of=/dev/mmcblk0 bs=512 seek=13312 count=8192 conv=fsync dd if=openwrt-mediatek-filogic-jdcloud_re-cp-03-bl31-uboot.fip of=/dev/mmcblk0 bs=512 seek=13312 conv=fsync 5. Set static IP on your PC: IP 192.168.1.254/24, GW 192.168.1.1 6. Serve OpenWrt initramfs image using TFTP server. 7. Cut off the power and re-engage, wait for TFTP recovery to complete. 8. After OpenWrt has booted, perform sysupgrade. 9. Additionally, if you want to have eMMC recovery boot feature: (Don't worry! You will always have TFTP recovery boot feature.) dd if=openwrt-mediatek-filogic-jdcloud_re-cp-03-initramfs-recovery.itb of=/dev/mmcblk0p4 bs=512 conv=fsync Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* uboot-mediatek: add support for JDCloud RE-CP-03Tianling Shen2024-01-19
| | | | | | | The vendor U-Boot has enabled signature verification, so add a custom U-Boot build for OpenWrt. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* rockchip: fix boot from non-MMC devicesJustin Klaassen2024-01-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Booting from non-MMC devices on Rockchip targets without this change results in a boot failure: Model: FriendlyElec NanoPi R5S Net: eth0: ethernet@fe2a0000 Hit any key to stop autoboot: 0 ** Booting bootflow 'nvme#0.blk#1.bootdev.part_1' with script ** No partition table - mmc 0 ** ** No partition table - mmc 0 ** Couldn't find partition mmc 0:1 Can't set block device Wrong Image Type for bootm command ERROR -91: Protocol wrong type for socket: can't get kernel image! Boot failed (err=1) This change fixes the default boot script for Rockchip targets to support booting from non-MMC devices such as NVMe or USB drives. Some targets with only a boot rom (e.g. NanoPi R5S) may require u-boot to be installed on the eMMC or a MicroSD card in order to boot from non-MMC devices. Fixes: #14420 Reviewed-by: Tianling Shen <cnsztl@immortalwrt.org> Signed-off-by: Justin Klaassen <justin@tidylabs.app>
* toolchain: glibc: add --enable-stack-protector=all option for glibcCedric DOURLENT2024-01-19
| | | | | | Add missing configurition for glibc based on CONFIG_PKG_CC_STACKPROTECTOR_ALL Signed-off-by: Cedric DOURLENT <cedric.dourlent@softathome.com>
* build: add option for building with stack-protector-allCedric DOURLENT2024-01-19
| | | | | | | | | | | | | The GCC option -fstack-protector-all is a security feature used to protect against stack-smashing attacks. This option enhances the stack-smashing protection provided by -fstack-protector-strong. -fstack-protector-all option applies stack protection to all functions, regardless of their characteristics. While this offers the most comprehensive protection against stack-smashing attacks, it can significantly impact the performance of the program because every function call includes additional checks for stack integrity. This option can incur a performance penalty because of the extra checks added to every function call, but it significantly enhances security, making it harder for attackers to exploit buffer overflows to execute arbitrary code. It's particularly useful in scenarios where security is paramount and performance trade-offs are acceptable. Signed-off-by: Cedric DOURLENT <cedric.dourlent@softathome.com>
* kernel: bump 6.1 to 6.1.73John Audia2024-01-19
| | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.73 Patch automatically rebased. Build system: x86/64 Build-tested: x86/64/AMD Cezanne, filogic/xiaomi_redmi-router-ax6000-ubootmod Run-tested: x86/64/AMD Cezanne, filogic/xiaomi_redmi-router-ax6000-ubootmod Signed-off-by: John Audia <therealgraysky@proton.me>
* kernel: bump 6.1 to 6.1.72John Audia2024-01-19
| | | | | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.72 Manually rebased: generic/hack-6.1/650-netfilter-add-xt_FLOWOFFLOAD-target.patch All other patches automatically rebased. Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>
* mediatek: fix WED + wifi resetFelix Fietkau2024-01-19
| | | | | | | | | | The WLAN + WED reset sequence relies on being able to receive interrupts from the card, in order to synchronize individual steps with the firmware. When WED is stopped, leave interrupts running and rely on the driver turning off unwanted ones. WED DMA also needs to be disabled before resetting. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mt76: update to Git HEAD (2024-01-18)Felix Fietkau2024-01-19
| | | | | | | | | | | | | | 83e3947e2c52 linux-firmware: update firmware for MT7922 WiFi device ddaa8cb6e81a linux-firmware: update firmware for MT7921 WiFi device f83b1601cc10 linux-firmware: update firmware for MT7922 WiFi device 61d334ab0f33 linux-firmware: add firmware for MT7925 a7836e4c8a60 wifi: mt76: disable HW AMSDU when using fixed rate a8571ebbcd95 wifi: mt76: check txs format before getting skb by pid 3d5890e2cab3 wifi: mt76: mt7915: fix error recovery with WED enabled 703c26d01197 wifi: mt76: mt7915: add locking for accessing mapped registers f77188160441 wifi: mt76: mt7915: update mt798x_wmac_adie_patch_7976 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: ACS: Fix typo in bw_40 frequency arrayDavid Bauer2024-01-18
| | | | | | | | | | | [Upstream Backport] The range for the 5 GHz channel 118 was encoded with an incorrect channel number. Fixes: ed8e13decc71 (ACS: Extract bw40/80/160 freqs out of acs_usable_bwXXX_chan()) Signed-off-by: Michael Lee <michael-cy.lee@mediatek.com> Signed-off-by: David Bauer <mail@david-bauer.net>
* bcm27xx-utils: update to latest versionÁlvaro Fernández Rojas2024-01-18
| | | | | | | | | | Fixes build with GCC 13. Disable LTO to fix build with CONFIG_USE_LTO. Changelog: e65f5ec eeptools: eepdump: init type before calling eepio_atom_start Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bcm27xx: config: update documentation linksÁlvaro Fernández Rojas2024-01-18
| | | | | | The documentation links have changed and are no longer valid. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bcm27xx-utils: add new packageÁlvaro Fernández Rojas2024-01-18
| | | | | | | | The raspberypi/userland repository has been deprecated and the RPi tools have been moved to the raspberrypi/utils repository. https://github.com/raspberrypi/userland/commit/96a7334ae9d5fc9db7ac92e59852377df63f1848 Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bmips: dts: remove unneeded cferom aliasÁlvaro Fernández Rojas2024-01-18
| | | | | | | This is no longer needed after nvmem-layout changes. Same as 6f328dfe19 for NAND devices. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* kernel: bump 5.15 to 5.15.147John Audia2024-01-17
| | | | | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.147 Manually rebased: generic/backport-5.15/005-v5.17-01-Kbuild-use-Wdeclaration-after-statement.patch All other patches automatically rebased. Build system: x86_64 Build-tested: ramips/tplink_archer-a6-v3 Run-tested: ramips/tplink_archer-a6-v3 Signed-off-by: John Audia <therealgraysky@proton.me>
* kernel: ksmbd: only v2 leases handle the directoryChen Minqiang2024-01-17
| | | | | | | | This backport a fix for ksmbd. Refer: https://github.com/namjaejeon/ksmbd/issues/469 Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* mediatek: refresh patches-6.1Daniel Golle2024-01-17
| | | | | | | | Refresh patches for Linux 6.1 which no longer apply cleanly after adding patches to fix ethernet rx hang issue on MT7981/MT7986. Fixes: ede34465de ("mediatek: fix ethernet rx hang issue on MT7981/MT7986") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ramips: mt7621: convert Linksys devices EEPROM to NVMEM formatShiji Yang2024-01-17
| | | | | | | | | | | | | | -+-----------------------------+- | Model | NIC | -+-----------------------------+- | EA6350 v4 | MT7603 + MT7613 | -+-----------------------------+- | EA7300 v2 | MT7603 + MT7615 | -+-----------------------------+- | Others | MT7615 *2 | -+-----------------------------+- Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* ramips: mt7621: convert NETGEAR devices EEPROM to NVMEM formatShiji Yang2024-01-17
| | | | | | | | | | | | -+------------------------------+- | Model | NIC | -+------------------------------+- | chj series | MT7603 + MT7615 | -+------------------------------+- | bzv series | MT7615 *2 | -+------------------------------+- Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* ramips: mt7621: convert Wavlink devices EEPROM to NVMEM formatShiji Yang2024-01-17
| | | | | | | | | | | | -+------------------------------+- | Model | NIC | -+------------------------------+- | WL-WN531A6 | MT7603 + MT7615 | -+------------------------------+- | WL-WN533A8 | MT7615 *2 | -+------------------------------+- Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* ramips: mt7621: convert Ubiquiti devices EEPROM to NVMEM formatShiji Yang2024-01-17
| | | | | | | | | | -+-------------------------+- | Model | NIC | -+-------------------------+- | All | MT7603 + MT7615 | -+-------------------------+- Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* ramips: mt7621: convert I-O DATA devices EEPROM to NVMEM formatShiji Yang2024-01-17
| | | | | | | | | | | | -+-------------------------------------------+- | Model | NIC | -+-------------------------------------------+- | WN-DX1167R/WN-AX1167GR2 | MT7615D | -+-------------------------------------------+- | WN-AX2033GR/WN-DX2033GR | MT7603 + MT7615 | -+-------------------------------------------+- Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* ramips: mt7621: convert Xiaomi devices EEPROM to NVMEM formatShiji Yang2024-01-17
| | | | | | | | | | | | | | -+---------------------------+- | Model | NIC | -+---------------------------+- | AC2100 | MT7603 + MT7615 | -+---------------------------+- | MI4A V2 | MT7603 + MT7613 | -+---------------------------+- | Others | MT7603 + MT7612 | -+---------------------------+- Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* ramips: mt7621: convert MT7915 EEPROM to NVMEM formatShiji Yang2024-01-17
| | | | | | | | | | | | | Some MT7915 calibration data consists of two parts. The first part "eeprom" size is 0xe00. The second part "precal" size is 0x19c10. Though some devices may not have precal data, it's better to assume that precal data exists as no users/developers confirm it. On the other hand, some devices definitely do not contain precal data because the EEPROM partition size is smaller than the precal NVMEM cell size. Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* uqmi: update to git HEADDaniel Golle2024-01-16
| | | | | | | c3488b8 uqmi: cancel all requests on SYNC indication reception dfa612e uqmi: improve response detection Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mediatek: fix ethernet rx hang issue on MT7981/MT7986Felix Fietkau2024-01-16
| | | | | | Add patches by Lorenzo/Daniel to use QDMA instead of ADMAv2 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ipq806x: DTS format fixup for Fortinet FAP-421EChristian Marangi2024-01-16
| | | | | | Small clanup and fixup for DTS format for Fortinet FAP-421E. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* bcm27xx-gpu-fw: update to latest versionÁlvaro Fernández Rojas2024-01-16
| | | | | | | | | raspberrypi/firmware is about 40G, so getting the full history log isn't an option. There have been multiple improvements and also support for the RPi 5 has been added. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bcm27xx-userland: update to latest versionMarty Jones2024-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | This is the last update for bcm27xx-userland as it has been deprecated but funcional up to raspberry pi 5. 96a7334 README: Update to make it clear that most code in this repo is deprecated 3c97f76 userland: dtoverlay: /boot/firmware is a valid path 153a235 Assorted clang static analysis fixes eca070c bcm_host: Update kms/fkms check for pi5 06a7618 dtoverlay: Support bcm2712 as a platform 0489c07 dtoverlay: Add dtoverlay_first/next_subnode a1c7f81 dtoverlay: Support literal assignments of path strings 44a3953 raspivid: Also flush PTS file if flush is enabled cc1ca18 userland: dtoverlay: Use os_prefix if set 9d5250f libfdt: Add null-ptr check for prop-data to resolve clang --analyzer warning 50527c6 mmal: Only include Videocore components if not running on Videocore df245ea tvservice: Update unsupported message to recommend kmsprint de0cfe8 dtoverlay: Fix clang warnings 0182f05 dtoverlay: Fix various compiler warnings 2a6306b dtoverlay: Fix path rebasing and exports d1e92d7 dtoverlay: Add support for string escape sequences b1ee39e gencmd: Add a fallback to mailbox interface if vchiq is not available 54fd97a hello_pi: Fix some build issues Signed-off-by: Marty Jones <mj8263788@gmail.com>
* layerscape: refresh patches-6.1Daniel Golle2024-01-16
| | | | | | | | | Patches no longer cleanly apply after commit c2c741ccce ("generic: 6.1: initial backport of at803x PHY driver cleanup"). Refresh patches to address that. Fixes: c2c741ccce ("generic: 6.1: initial backport of at803x PHY driver cleanup") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* bmips: drop patches/config for kernel 5.15Álvaro Fernández Rojas2024-01-16
| | | | | | Drop patches/config for kernel 5.15 now that they are not used anymore. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bmips: move to kernel 6.1 by defaultÁlvaro Fernández Rojas2024-01-16
| | | | | | Move bmips to kernel 6.1 by default. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bmips: dts: remove unneeded cfe aliasÁlvaro Fernández Rojas2024-01-16
| | | | | | This is no longer needed after nvmem-layout changes. Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bmips: bcm6328: add Innacomm W3400V6Sieng-Piaw Liew2024-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Innacomm W3400V6 is an xDSL B/G wireless router based on Broadcom BCM6328 SoC. SoC: Broadcom BCM6328 CPU: BMIPS4350 V8.0, 320 MHz, 1 core Flash: SPI-NOR 8MB, MX25L6406E RAM: 64 MB Ethernet: 4x 10/100 Mbps Switch: Integrated Wireless: 802.11b/g, BCM4312 LEDs/Buttons: 9x / 2x Flash instruction, web UI: 1. Set a static IP on your computer compatible with 192.168.1.1, i.e 192.168.1.100. 2. Connect the ethernet cable from your computer to the router. 3. Make sure the router is powered off. 4. Press the reset button, don't release it yet! 5. While pressing reset, power on the router. 6. Wait 10 seconds or more. Note: The power LED is red at first then turns to solid green when ready. 7. Release the reset button. 8. Browse to 192.168.1.1 9. Select .bin file. 10. Upgrade the image. 11. Wait for it to reboot. Signed-off-by: Sieng-Piaw Liew <liew.s.piaw@gmail.com> [Fix cfe nvmem-layout and pinctrl_leds indentation] Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
* bcm27xx: 6.1: turn on cpu erratum for A72 and disable A53Yangyu Chen2024-01-16
| | | | | | | | The original configuration might be copied from bcm2710 which uses cortex A53 rather than A72 in BCM2711, without errata might be harmful to system stability and security. Signed-off-by: Yangyu Chen <cyy@cyyself.name>
* bcm27xx: Remove unneeded kernel patchHauke Mehrtens2024-01-16
| | | | | | | | | This problem was fixed upstream in a different way, see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=f434703fb893ddffcdbc1eec7646ce321e1190a8 Remove this now obsolete patch. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ipq40xx: drop PSGMII PHY patchChristian Marangi2024-01-16
| | | | | | | | Drop PSGMII PHY patch as it has been moved to generic in preparation for the PHY driver to be also used for ipq807x SoC as the same PHY is also used there. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* generic: 6.1: backport FIELD_PREP_CONST patchChristian Marangi2024-01-15
| | | | | | | | | | Backport FIELD_PREP_CONST patch needed for at803x backport patches to correctly compile and work. This MACRO is needed to treat values derived from FIELD_PREP usage as const to be used by switch case or other needed usage. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* ipq806x: Stabilize LAN 2 MAC address, interface orderingBryan Berg2024-01-15
| | | | | | | | | | | | | | | Part 1 of #13629 split. * Sets the LAN 2 MAC address in the DTS by deriving it from LAN 1's address. The factory OS derives this from the `eth1addr` u-boot env variable, but the nvmem_u-boot-env driver doesn't support parsing MAC addresses from fields other than `ethaddr`. But for all of the device samples I've checked (~10) it derives the correct MAC. * Updates 02_network to ensure that interfaces are assigned to roles correctly and consistently. Signed-off-by: Bryan Berg <bdb@north-eastham.org>
* generic: 6.1: initial backport of at803x PHY driver cleanupChristian Marangi2024-01-15
| | | | | | | | | | | Initial backport of at803x PHY driver cleanup. This is in preparation for split and addition of new PHY Family based on at803x needed for ipq807x and other IPQ Series SoC. Other affected patch are automatically refreshed with make target/linux/refresh Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* generic: 6.1: renumber MediaTek SGMII PCS patchChristian Marangi2024-01-15
| | | | | | | Renumber MediaTek SGMII PCS patch to make space for upcoming at803x backport patches. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* base-files: functions.sh: prepend() always adds separatorPhilip Prindeville2024-01-15
| | | | | | | | | | It shouldn't gate on the value, since the value will ostensibly always be set; instead it should depend on the variable being prepended to being non-empty. Fixes #14403 Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* rtl838x: debugfs use constants from mach-rtl83xx.hPeter Körner2024-01-15
| | | | | | | The register constants were duplicated in net/dsa/rtl83xx/debugfs.c and asm mach-rtl838x/mach-rtl83xx.h. This commit removes this duplication. Signed-off-by: Peter Körner <git@mazdermind.de>
* rtl838x: fix RTL838X_LED_SW_CTRL definitionPeter Körner2024-01-15
| | | | | | | | According to https://svanheule.net/realtek/maple/register/led_sw_ctrl and also drivers/net/dsa/rtl83xx/debugfs.c LED_SW_CTRL on the RTL838X should be 0xa00c not 0x0128. Please note, that is is 0x0128 on the RTL8390/cypress SOC family. Signed-off-by: Peter Körner <git@mazdermind.de>
* rtl931x: reformat broken indentationPeter Körner2024-01-15
| | | | | | | the given code-format did not correctly express the condition and made the code harder to read then necessary. Signed-off-by: Peter Körner <git@mazdermind.de>
* gettext-full: use autoreconf host fixupAlexander Egorenkov2024-01-15
| | | | | | | | | | To prevent use of host's library path on Void Linux: /usr/lib/libacl.so: file not recognized: file format not recognized collect2: error: ld returned 1 exit status libtool: error: error: relink 'libgettextlib.la' with the above command before installing it Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
* fstools: update to Git HEAD (2024-01-15)Christian Marangi2024-01-15
| | | | | | 325d63d67006 mount_root: fix compilation error for wrong condition Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Powered by cgit, Themed by Ted Yin.