Add patch to allow the blog accelerator to work correctly when using PPPoE/PPPoA.

rpcd randomly crashes on waiting for output on out/err streams
This fix insures an output from the fwbank script

For getting various software versions, if platform-specific
'platform_get_iopsys_version()' function exists - call it
unconditionally for all types of requested versions.

regression dnsmasq-2.90.

Truncated response should be forwarded as is instead of setting
answers to 0.

note: regression caught by CDR, test pass post this fix.

Also clean up code.

Benjamin Larsson authored 3 years ago and Markus Gothe committed 6 months ago

Change-Id: Ida4947919e725457c91bb2d146ed9e00830a6f54

Fix the keep alive defaults to align with
LuCI.

Add 'debug' as a default parameter in order
to make debugging devices a bit more easy.

Change-Id: I25e83d0d7e1c2b75c18a678ea15a5f0ab3a7c599

Piotr Kubik authored 6 months ago and Andreas Gnau committed 6 months ago

Corresponding to the following merge-commit in main-repo:
    92c8cf778a65c7 (Merge OpenWrt tag 'v23.05.4' into devel, 2024-08-20)

Merge only the following folders of the branch in the OpenWrt repo, see
the second parent of this merge for details on the how and why.

 * package/base-files
 * package/boot/arm-trusted-firmware-mediatek
 * package/boot/uboot-mediatek
 * package/network/config/firewall
 * package/network/config/netifd
 * package/network/services/dnsmasq
 * package/network/services/ppp
 * package/network/services/umdns
 * package/network/utils/ebtables
 * package/network/utils/iptables
 * package/network/utils/iw
 * package/network/utils/iwinfo
 * package/system/rpcd
 * package/utils/busybox

Following paths were fully checkout'ed to Openwrt v23.05.4 versions:
 * package/kernel/mac80211
 * package/kernel/mt76
 * package/network/services/hostapd

This (synthetic) commit has been generated by the merge-openwrt-subset
script.

IOWRT maintains modifications to upstream OpenWrt packages in a
separate feed "openwrt_core". Only the packages modified by IOWRT
are kept in openwrt_core. To aid in merging OpenWrt changes, see diffs
etc., an automated script, `merge-openwrt-subset`, merges a subset of
the OpenWrt repository into the IOWRT openwrt_core feed repository.
The sole purpose of this commit is to simplify and enable the merge to
openwrt_core in the next commit.

Delete all files except:

 * package/base-files
 * package/boot/arm-trusted-firmware-mediatek
 * package/boot/uboot-mediatek
 * package/kernel/mac80211
 * package/kernel/mt76
 * package/network/config/firewall
 * package/network/config/netifd
 * package/network/services/dnsmasq
 * package/network/services/hostapd
 * package/network/services/ppp
 * package/network/services/umdns
 * package/network/utils/ebtables
 * package/network/utils/iptables
 * package/network/utils/iw
 * package/network/utils/iwinfo
 * package/system/rpcd
 * package/utils/busybox

Set the default hostname using the non-vendor part of board-name and the
"label" / "base" MAC address.

For example with a board_name (1st string in /compatible in dtb) of
foo,model-1234 and MAC address de:ad:be:ef:12:34 will get a hostname of
model-1234-deadbeef1234.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

Set label MAC address from iopsys-environment.sh which in most cases
equates to U-Boot env ethaddr. For platforms that already have a MAC
address populated by U-Boot, do not do anything, because in those cases
it is possible to  rely on OpenWrt's built-in solution of having the
label-mac-device alias point to the device-tree node having the MAC
address.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

For an international company with a products used all around the globe,
it is arbitrary to set a default timezone that is not UTC on the
gateway. Remove this default.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

These functions are not private, remove underscore naming convention.

iopsys_is_bootloader_update_needed() returns error code instead of
echoing. Thus previous way of checking its output could not work.

For some platforms, in FIT upgrade file, component image names in
/images section differ from those in /configuration section.
We should always use a reference from configurations section as
a correct loader image name.

For some platforms, the best matching configuration section
does not contain required image references.
If image reference is not found in this configuration
try to use default one.

Shipping a UCI file in the file system creates issues, where OpenWrt
built-in scripts processing board.json do not run. Move the majority
(but not all configuration settings) to dedicated uci-defaults-scripts.

The remaining settings will be removed completely in subsequent commits.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

It is unclear, why system.cronloglevel has been changed from the default
5 to 9, remove it.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

Setting to 7 is not necessary, CONFIG_CONSOLE_LOGLEVEL_DEFAULT=7 takes
care of this.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

With commit 878934e0 ("iopsys.sh: sysupgrade: Unify logging")
calling 'log' from sysupgrade does not require 'sysupgrade' info.
This resulted in log messages like:
`sysupgrade: sysupgrade Finished upgrade to bank...`

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Testing OpenWrt is important, and there is a test suite in the making.
For maximum convenience and minimal CI over-usage, make it simple to run
tests locally. The main Makefile now attempts to include
`tests/Makefile` and silently fails if it doesn't.

While the test suite[1] is still young, it provides good examples of how
to test things around OpenWrt: starting with shell scripts using
`bats`[2], followed by QEMU tests, and finally real device tests using
LabGrid[3]. This could lead to the creation of the best OpenWrt version
yet.

Please consult the `openwrt-tests.git` README.md for details on the
setup. Once installed you may run commands like the following:

* make tests/shell  # run shell tests
* make tests/x86-64 # run  and test x86/64 in QEMU

[1]: http://github.com/aparcar/openwrt-tests/
[2]: https://bats-core.readthedocs.io
[3]: https://labgrid.readthedocs.io



Signed-off-by: Paul Spooren <mail@aparcar.org>
Link: https://github.com/openwrt/openwrt/pull/15647


Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a8ff0c1b7e5aefb8bcd31e0eeb82d2c11399223f)

This fixes multiple security problems:
 * [Medium] CVE-2024-1544
   Potential ECDSA nonce side channel attack in versions of wolfSSL before 5.6.6 with wc_ecc_sign_hash calls.

 * [Medium] CVE-2024-5288
   A private key blinding operation, enabled by defining the macro WOLFSSL_BLIND_PRIVATE_KEY, was added to mitigate a potential row hammer attack on ECC operations.

 * [Low] When parsing a provided maliciously crafted certificate directly using wolfSSL API, outside of a TLS connection, a certificate with an excessively large number of extensions could lead to a potential DoS.

 * [Low] CVE-2024-5991
   In the function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked.

 * [Medium] CVE-2024-5814
   A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection.

 * [Medium] OCSP stapling version 2 response verification bypass issue when a crafted response of length 0 is received.

 * [Medium] OCSP stapling version 2 revocation bypass with a retry of a TLS connection attempt.

Unset DISABLE_NLS to prevent setting the unsupported configuration
option --disable-nls which breaks the build now.

Link: https://github.com/openwrt/openwrt/pull/15948


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 3a0232ffd33f2dc894c671d90de6b2766399f4dc)

The vendor U-Boot on the Cudy M3000 and the Yuncore AX835 assign random
mac addresses on boot and set the 'local-mac-address' property which
prevents Openwrt from assigning the correct address from evmem.

This patch removes the alias for ethernet0 so that U-Boot doesn't add the
property, removes the workaround from 02_network, and adds back the nvmem
definition for the M3000.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
(cherry picked from commit a55ab9e1343e85021253e9c55f67adf33ad68f09)

Hardware:
  SoC:     MT7981b
  RAM:     256 MB
  Flash:   128 MB SPI NAND
  Ethernet:
    1x 2.5Gbps (rtl8221b)
    1x 1Gbps (integrated phy)
  WiFi:    2x2 MT7981
  Buttons: Reset, WPS
  LED:     1x multicolor

Solder on UART:
  - remove rubber ring on the bottom
  - remove screws
  - pull up the cylinder, maybe help by push on an ethernet socket with a screwdriver
  - remove the (3) screws holding the board in the frame
  - remove the board from the frame to get to the screws for the silver, flat heat shield
  - remove the (3) screws holding the heat shield
  - solder UART pins to the back of the board
    - make sure to have the pins point out on side with the black, finned heat spread
    - the markings for the pins are going to be below the silver heat shield
    - Vcc is not needed

If you don't intend on using the UART outside of the installation process, you might not
want to solder:

  - carefully scrape off the thin layer of epoxy on the holes (not the copper)
  - place your pin header with the UART attached in the holes
  - the pins, starting with the one closest to the socket:
    - Vcc (not required)
    - GND
    - RX
    - TX
  - either wedge the header or hold it with your fingers so that the pins stay in contact with the board

Installation (UART):
  - attach an Ethernet cable to the 1Gbps port (black) on the router
  - hold the reset button while powering the router
  - press CTRL-C or wait for the timeout to get to the U-Boot prompt
  - prepare a TFTP server on the network to supply ..-initramfs-kernel.bin
  - use 'tftpboot' in the U-Boot shell to pull the image
  - boot the image using 'bootm'
  - push the ..-sysupgrade to the router using your preferred method
  - perform the upgrade with 'sysupgrade -n'

There is a recovery mechanism that involves fetching a file called 'recovery.bin' but that is not understood yet.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
(cherry picked from commit 20e4a18feb3f766b0f6ebec1afc154b345398a7a)

Sometimes the mmc deivce may come up later than kernel attempts to
mount rootfs, resulting kernel panic. Enable rootwait to fix it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Make sure patch sequence number is unique by moving patch
440-add-jdcloud_re-cp-03.patch -> 441-add-jdcloud_re-cp-03.patch

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 2302a7c5ad9c894d0530b7700409b2f4ea4bcc91)

The MAC address assigned to lan/wan was reversed.

Fixes: 6e51ff88 ("mediatek: add support for JDCloud RE-CP-03")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

With upstream accepted "mac-base" binding there is no need for a
downstream "mac-address-ascii" workaround anymore.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit daaa0c1b250498acbf91697dfc75c9d3fbac3596)
Link: https://github.com/openwrt/openwrt/pull/15917

96f74b5be829 ubus: make ubus_context first in uc_ubus_connection_t
7e5830edfb38 nl80211: fix datatype of NL80211_BAND_IFTYPE_ATTR_HE_CAP_{MAC,PHY} attrs
5c8fd34bac42 nl80211: fix parsing of NL80211_BAND_ATTR_VHT_MCS_SET attribute
e8d4e4fe967d nl80211: fix decoding of NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET attribute
30a3f7ad0433 rtnl: store callback in listener registry only on success
9cbe8294909f rtnl: optimize reception of rtnl events
534417132e18 rtnl: increase event socket rx buffer size limit to 1 MiB
3f9811d2f7b7 compiler: close upvalues on loop control statements
ee4af9b55cb4 vm: rework object iteration
a275399dd8e2 uci: refactor uci.changes() to match documentation
1220992631d5 ubus: automatically clear error information
d6fd94014eea uci: automatically clear error information
99837f280b61 uloop: automatically clear error information
ba3855ae3775 lib: fix documentation typo for `pop()` function
be767ae197ba vm: rework `in` operator semantics
4ade84e8fb81 ubus: add explicit support for deferring incoming requests
cfe137be068a uci: remove incorrectly documentated reorder() parameter
e8d78a26da0c lib: introduce socket library
a0ad1d127ae6 build: fix symbol and library detection
674f65ee551d jsdoc: disable default module titles
a33d16a86493 socket: rework error handling
e2b81d869222 uloop: add documentation
953f36c96e8a socket: make socket.send() accept non-string data
f211d5ac666f ubus: fix uc_ubus_have_uloop for eloop+uloop combination
0662de64bd1f socket: add AF_PACKET socket type support
b594ff8a2841 socket: remove leftover debug code
0d823e702bfe socket: fix addrinfo() with omitted service argument
8cf816d615fd socket: fix potential memory leak in connect()
8f5f231d66cd socket: optimize poll() argument handling
36f106056069 socket: remove wrong documentation fragment
525fca224012 socket: uv_to_sockaddr(): fix length calculation for AF_UNIX addresses
3938645ad9e3 socket: support IPv6 addresses in struct conversion routines
3a586dc7ddbe socket: improve uc_socket_connect() behavior
7b269f1cd3d2 socket: improve uc_socket_listen() behavior
fc6f2b89febf socket: handle further socket option value types
d6f25797dad1 socket: add IPv6 socket options
7611487b9a05 socket: implement recvmsg(), sendmsg() and cmsg support
d2e44bfa8b54 core-lib: improved documentation
e0bab40c8578 fs: add truncate() file method
5d305cfb2ab7 fs: add lock() file method
8b0318f7fabe lib: introduce zlib library
73644a036f5a nl80211: move access to tb array out of uc_nl_convert_attr and below
6e3cf83a77a7 nl80211: add support for multi-attribute arrays
6ff24d5488a9 nl80211: update nl80211.h to latest wireless-next
abc2aef28641 nl80211: add wiphy multi-radio support

Fixes: https://github.com/jow-/ucode/issues/186
Fixes: https://github.com/jow-/ucode/issues/187
Fixes: https://github.com/jow-/ucode/issues/188
Fixes: https://github.com/jow-/ucode/issues/193


Signed-off-by: Jo-Philipp Wich <jo@mein.io>

This avoids code duplication for the other targets once they need
to get correct configuration from FIT.

Changes:
  2a768c4 wireless-regdb: Update regulatory rules for Mongolia (MN) on 6GHz
  04875d9 wireless-regdb: Update regulatory rules for Saudi Arabia (SA) on 6GHz
  b7bced8 wireless-regdb: Update regulatory rules for South Africa (ZA) on 6GHz
  7bc8615 wireless-regdb: Update regulatory info for Thailand (TH) on 6GHz
  f901fa9 wireless-regdb: Update regulatory info for Malaysia (MY) for 2022
  d72d288 wireless-regdb: Update regulatory info for Morocco (MA) on 6GHz
  414face wireless-regdb: Update regulatory info for Chile (CL) on 6GHz
  1156a08 wireless-regdb: Update regulatory info for Mexico (MX) on 6GHz
  cc6cf7c wireless-regdb: Update regulatory info for Iceland (IS) on 6GHz
  ce03cc0 wireless-regdb: Update regulatory info for Mauritius(MU) on 6GHz
  7e37778 wireless-regdb: Update regulatory info for Argentina (AR) on 6GHz
  56f3a43 wireless-regdb: Update regulatory info for United Arab Emirates (AE) on 6GHz
  3cb8b91 wireless-regdb: Update regulatory info for Colombia (CO) on 6GHz
  3682ce5 wireless-regdb: Update regulatory info for Costa Rica (CR) for 2021
  dd4ffe7 wireless-regdb: Update regulatory info for Dominican Republic (DO) on 6GHz
  f8ef7da wireless-regdb: Update regulatory info for Liechtenstein (LI) on 6GHz
  a9ecabe wireless-regdb: Update regulatory info for Jordan (JO) for 2022
  5a9fdad wireless-regdb: Update regulatory info for Kenya (KE) for 2022
  19326c3 wireless-regdb: Update regulatory info for Macao (MO) for 2024
  4838054 wireless-regdb: update regulatory database based on preceding changes

Link: https://github.com/openwrt/openwrt/pull/15921


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 0a24fd91556e7bd4751676b5ce6324193b7a4aca)

In the past few years, we have received several reports about SPI
Flash not working properly. This is caused by excessively fast
clock frequency. It's really annoying to fix them one by one. Let's
reduce these aggressive frequencies to 50 MHz. This is a safe and
suggested value in the vendor SDK.

Signed-off-by: Shiji Yang <yangshiji66@qq.com>
(cherry picked from commit 73eeac49be566d389df728b5335f7146d03d2f90)
Link: https://github.com/openwrt/openwrt/pull/15919


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

increase size of ifmsh->mbss_changed

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 20bd3502d3a841457cc06b3aa45646258fdcba9e)
Link: https://github.com/openwrt/openwrt/pull/15836


[Moved the patch to the end of the patch queue]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Where it is clear which lincense the firmware package has, the missing
information are added.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [backport]
(cherry picked from commit 535d487c41fa09b02c215799449fcd571d1dacac)
Link: https://github.com/openwrt/openwrt/pull/15918


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

The firmware blobs have all different licenses from the different
manufacturers of the binary blobs. This information is contained in the
upstream 'linux-firmware' repositroy.

This commit extends the package handling so that this information can be
added as an additional argument during packages generation.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5c14de1d7e715ef882f34925ee6702b847efcbbd)
Link: https://github.com/openwrt/openwrt/pull/15918


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Update the deprecated license information from GPL-2.0 to GPL-2.0-only
as written in the COPYING file of the linux source tree.

Also add the 'COPYING' file to the PKG_LICENSE_FILES variable.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 879826154fd3e5ec353117a9c00cecf5e38c4a16)
Link: https://github.com/openwrt/openwrt/pull/15918


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

The lincense information for the packages mac80211 are missing.
This commit adds the missing information.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [backport]
(cherry picked from commit 3128157ec71c7be5c2e26a04b1f4b5080ebf870a)
Link: https://github.com/openwrt/openwrt/pull/15918


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

The package has no licence information. So let's fix it.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0da116f25b1a80ac9429fd7d13ee30130494f19e)
Link: https://github.com/openwrt/openwrt/pull/15918


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Add the missing license information PKG_LICENSE and PKG_LICENSE_FILES.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 7a3deadf91a356b6b0ac25771854f8fa1c3e6980)
Link: https://github.com/openwrt/openwrt/pull/15918


Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

The last patches broke this patch, refresh it again.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>