2014-01-30 Jonas Gorski <[email protected]>: > On Thu, Jan 30, 2014 at 1:59 PM, Rafał Miłecki <[email protected]> wrote: >> * CONCLUSION * >> >> b53_switch_reset_gpio resets switch into a vulnerable state, where >> machine behind the WAN can "access" LAN machines. >> We need to put switch in some safe state before we call >> b53_switch_reset_gpio. >> Example of configuring ports into a safe state is b53_enable_ports. >> >> Any idea what exactly we should do before calling b53_switch_reset_gpio? > > Can you see what happens if you clear SM_SW_FWD_EN before calling > reset_gpio? Especially if it is set after reset? I would expect it to > be reset to default state, and if SM_SW_FWD_EN set is the default > state then we have a board problem we need to work around. If not then > we can just disable forwarding before reset and re-enable it > afterwards.
Unfortunately you're right :( [ 3.580000] b53_common: [b53_switch_reset:488] B53_SWITCH_MODE: 0x06 [ 3.590000] b53_common: [b53_switch_reset:491] Unsetting SM_SW_FWD_EN (0x02) [ 3.590000] b53_common: [b53_switch_reset:494] B53_SWITCH_MODE: 0x04 [ 3.670000] b53_common: [b53_switch_reset_gpio:480] GPIO reset done [ 3.680000] b53_common: [b53_switch_reset:500] B53_SWITCH_MODE: 0x06 -- Rafał _______________________________________________ openwrt-devel mailing list [email protected] https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
