[LEDE-DEV] [PATCH 0/4] sunxi: add support for NanoPi M1 Plus

2017-10-18 Thread Luis Araneda
This series add support for the NanoPi M1 Plus board.

Compile and tested using a real board.

NanoPi M1 Plus key features
- SoC: Allwinner H3, Quad-core Cortex-A7@1.2GHz
- RAM: 1GB DDR3
- eMMC: 8GB
- microSD slot
- Ethernet 10/100/1000M
- Wifi: AP6212

Luis Araneda (4):
  uboot-sunxi: add NanoPi M1 Plus board
  sunxi: base files: add AP6212 (brcm43430) NVRAM
  mac80211: enable brcmfmac's SDIO support on sunxi target
  sunxi: add support for NanoPi M1 Plus board

 package/boot/uboot-sunxi/Makefile  |   7 +
 package/kernel/mac80211/Makefile   |   1 +
 .../lib/firmware/brcm/brcmfmac43430-sdio.txt   |  53 +++
 target/linux/sunxi/image/cortex-a7.mk  |  12 ++
 ...un8i-add-common-dtsi-file-for-nanopi-SBCs.patch | 160 
 ...un8i-add-support-for-nanopi-m1-plus-board.patch | 168 +
 6 files changed, 401 insertions(+)
 create mode 100644 
target/linux/sunxi/base-files/lib/firmware/brcm/brcmfmac43430-sdio.txt
 create mode 100644 
target/linux/sunxi/patches-4.9/0045-arm-dts-sun8i-add-common-dtsi-file-for-nanopi-SBCs.patch
 create mode 100644 
target/linux/sunxi/patches-4.9/205-arm-dts-sun8i-add-support-for-nanopi-m1-plus-board.patch

-- 
2.14.1


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH 1/4] uboot-sunxi: add NanoPi M1 Plus board

2017-10-18 Thread Luis Araneda
Signed-off-by: Luis Araneda 
---
 package/boot/uboot-sunxi/Makefile | 7 +++
 1 file changed, 7 insertions(+)

diff --git a/package/boot/uboot-sunxi/Makefile 
b/package/boot/uboot-sunxi/Makefile
index 50c6b06a71..849d8ba353 100644
--- a/package/boot/uboot-sunxi/Makefile
+++ b/package/boot/uboot-sunxi/Makefile
@@ -126,6 +126,12 @@ define U-Boot/Lamobo_R1
   BUILD_DEVICES:=sun7i-a20-lamobo-r1
 endef
 
+define U-Boot/nanopi_m1_plus
+  BUILD_SUBTARGET:=cortexa7
+  NAME:=NanoPi M1 Plus (H3)
+  BUILD_DEVICES:=sun8i-h3-nanopi-m1-plus
+endef
+
 define U-Boot/nanopi_neo
   BUILD_SUBTARGET:=cortexa7
   NAME:=U-Boot for NanoPi NEO (H3)
@@ -176,6 +182,7 @@ UBOOT_TARGETS := \
Linksprite_pcDuino \
Linksprite_pcDuino3 \
Lamobo_R1 \
+   nanopi_m1_plus \
nanopi_neo \
orangepi_r1 \
orangepi_plus \
-- 
2.14.1


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH 4/4] sunxi: add support for NanoPi M1 Plus board

2017-10-18 Thread Luis Araneda
Backported devicetree from Kernel 4.13 with some additions
to enable Ethernet and WiFi module

The following features are working:
- Ethernet
- WiFi
- eMMC and microSD slot
- USB ports

The following features are not working:
* Bluetooth

NanoPi M1 Plus key features
- SoC: Allwinner H3, Quad-core Cortex-A7@1.2GHz
- RAM: 1GB DDR3
- eMMC: 8GB
- microSD slot
- Ethernet 10/100/1000M
- Wifi: AP6212

Signed-off-by: Luis Araneda 
---
 target/linux/sunxi/image/cortex-a7.mk  |  12 ++
 ...un8i-add-common-dtsi-file-for-nanopi-SBCs.patch | 160 
 ...un8i-add-support-for-nanopi-m1-plus-board.patch | 168 +
 3 files changed, 340 insertions(+)
 create mode 100644 
target/linux/sunxi/patches-4.9/0045-arm-dts-sun8i-add-common-dtsi-file-for-nanopi-SBCs.patch
 create mode 100644 
target/linux/sunxi/patches-4.9/205-arm-dts-sun8i-add-support-for-nanopi-m1-plus-board.patch

diff --git a/target/linux/sunxi/image/cortex-a7.mk 
b/target/linux/sunxi/image/cortex-a7.mk
index d0b7aa04b6..0f6f8d9d76 100644
--- a/target/linux/sunxi/image/cortex-a7.mk
+++ b/target/linux/sunxi/image/cortex-a7.mk
@@ -118,6 +118,18 @@ endef
 TARGET_DEVICES += sun8i-h2-plus-orangepi-r1
 
 
+define Device/sun8i-h3-nanopi-m1-plus
+  DEVICE_TITLE:=FriendlyArm NanoPi M1 Plus
+  DEVICE_PACKAGES:=kmod-rtc-sunxi \
+   kmod-leds-gpio kmod-ledtrig-heartbeat \
+   kmod-brcmfmac brcmfmac-firmware-43430-sdio wpad-mini
+  SUPPORTED_DEVICES:=friendlyarm,nanopi-m1-plus
+  SUNXI_DTS:=sun8i-h3-nanopi-m1-plus
+endef
+
+TARGET_DEVICES += sun8i-h3-nanopi-m1-plus
+
+
 define Device/sun8i-h3-nanopi-neo
   DEVICE_TITLE:=FriendlyARM NanoPi NEO
   SUPPORTED_DEVICES:=friendlyarm,nanopi-neo
diff --git 
a/target/linux/sunxi/patches-4.9/0045-arm-dts-sun8i-add-common-dtsi-file-for-nanopi-SBCs.patch
 
b/target/linux/sunxi/patches-4.9/0045-arm-dts-sun8i-add-common-dtsi-file-for-nanopi-SBCs.patch
new file mode 100644
index 00..c304f7937f
--- /dev/null
+++ 
b/target/linux/sunxi/patches-4.9/0045-arm-dts-sun8i-add-common-dtsi-file-for-nanopi-SBCs.patch
@@ -0,0 +1,160 @@
+From 49f01c9e14b3476cbdf9623c4812c43f6485830b Mon Sep 17 00:00:00 2001
+From: Milo Kim 
+Date: Fri, 28 Oct 2016 15:59:01 +0900
+Subject: ARM: dts: sun8i: Add common dtsi file for NanoPi SBCs
+
+(backported from kernel 4.13)
+
+This patch provides a common file for NanoPi M1 and Neo SBC.
+
+Those have common features below.
+  * UART0
+  * 2 LEDs
+  * USB host (EHCI3, OHCI3) and PHY
+  * MicroSD
+  * GPIO key switch
+
+Cc: James Pettigrew 
+Signed-off-by: Milo Kim 
+Signed-off-by: Maxime Ripard 
+
+--- /dev/null
 b/arch/arm/boot/dts/sun8i-h3-nanopi.dtsi
+@@ -0,0 +1,137 @@
++/*
++ * Copyright (C) 2016 James Pettigrew 
++ * Copyright (C) 2016 Milo Kim 
++ *
++ * This file is dual-licensed: you can use it either under the terms
++ * of the GPL or the X11 license, at your option. Note that this dual
++ * licensing only applies to this file, and not this project as a
++ * whole.
++ *
++ *  a) This file is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public License as
++ * published by the Free Software Foundation; either version 2 of the
++ * License, or (at your option) any later version.
++ *
++ * This file is distributed in the hope that it will be useful,
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
++ * GNU General Public License for more details.
++ *
++ * Or, alternatively,
++ *
++ *  b) Permission is hereby granted, free of charge, to any person
++ * obtaining a copy of this software and associated documentation
++ * files (the "Software"), to deal in the Software without
++ * restriction, including without limitation the rights to use,
++ * copy, modify, merge, publish, distribute, sublicense, and/or
++ * sell copies of the Software, and to permit persons to whom the
++ * Software is furnished to do so, subject to the following
++ * conditions:
++ *
++ * The above copyright notice and this permission notice shall be
++ * included in all copies or substantial portions of the Software.
++ *
++ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
++ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
++ * OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
++ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
++ * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
++ * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
++ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
++ * OTHER DEALINGS IN THE SOFTWARE.
++ */
++
++/dts-v1/;
++#include "sun8i-h3.dtsi"
++#include "sunxi-common-regulators.dtsi"
++
++#include 
++#include 
++
++/ {
++  aliases {
++  serial0 = &uart0;
++  };
++
++  chosen {
++  stdout-path = "serial

[LEDE-DEV] [PATCH 3/4] mac80211: enable brcmfmac's SDIO support on sunxi target

2017-10-18 Thread Luis Araneda
Needed to support some SDIO connected cards, like AMPAK modules

Signed-off-by: Luis Araneda 
---
 package/kernel/mac80211/Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/kernel/mac80211/Makefile b/package/kernel/mac80211/Makefile
index 7e9b5ad618..add713a014 100644
--- a/package/kernel/mac80211/Makefile
+++ b/package/kernel/mac80211/Makefile
@@ -742,6 +742,7 @@ define KernelPackage/brcmfmac/config
config BRCMFMAC_SDIO
bool "Enable SDIO bus interface support"
default y if TARGET_brcm2708
+   default y if TARGET_sunxi
default n
help
  Enable support for cards attached to an SDIO bus.
-- 
2.14.1


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH 2/4] sunxi: base files: add AP6212 (brcm43430) NVRAM

2017-10-18 Thread Luis Araneda
Used by the NanoPi M1 Plus board

Signed-off-by: Luis Araneda 
---
 .../lib/firmware/brcm/brcmfmac43430-sdio.txt   | 53 ++
 1 file changed, 53 insertions(+)
 create mode 100644 
target/linux/sunxi/base-files/lib/firmware/brcm/brcmfmac43430-sdio.txt

diff --git 
a/target/linux/sunxi/base-files/lib/firmware/brcm/brcmfmac43430-sdio.txt 
b/target/linux/sunxi/base-files/lib/firmware/brcm/brcmfmac43430-sdio.txt
new file mode 100644
index 00..9baa5c33bf
--- /dev/null
+++ b/target/linux/sunxi/base-files/lib/firmware/brcm/brcmfmac43430-sdio.txt
@@ -0,0 +1,53 @@
+#AP6212_NVRAM_V1.0_20140603
+# 2.4 GHz, 20 MHz BW mode
+
+# The following parameter values are just placeholders, need to be updated.
+manfid=0x2d0
+prodid=0x0726
+vendid=0x14e4
+devid=0x43e2
+boardtype=0x0726
+boardrev=0x1101
+boardnum=22
+macaddr=00:90:4c:c5:12:38
+sromrev=11
+boardflags=0x00404201
+xtalfreq=26000
+nocrc=1
+ag0=255
+aa2g=1
+ccode=ALL
+
+pa0itssit=0x20
+extpagain2g=0
+
+#PA parameters for 2.4GHz, measured at CHIP OUTPUT
+pa2ga0=-168,7161,-820
+AvVmid_c0=0x0,0xc8
+cckpwroffset0=5
+
+# PPR params
+maxp2ga0=90
+txpwrbckof=6
+cckbw202gpo=0x
+legofdmbw202gpo=0x
+mcsbw202gpo=0x
+
+# OFDM IIR :
+ofdmdigfilttype=7
+# PAPD mode:
+papdmode=2
+
+il0macaddr=00:90:4c:c5:12:38
+wl0id=0x431b
+
+#OOB parameters
+hostwake=0x40
+hostrdy=0x41
+usbrdy=0x03
+usbrdydelay=100
+deadman_to=0x
+# muxenab: 0x1 for UART enable, 0x10 for Host awake
+muxenab=0x10
+# CLDO PWM voltage settings - 0x4 - 1.1 volt
+#cldo_pwm=0x4
-- 
2.14.1


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] [PATCH] base-files: remove bridge firewalling defaults

2017-10-18 Thread Felix Fietkau
On 2017-10-18 22:21, Mathias Kresin wrote:
> Since Linux kernel 3.18-rc1, the settings are moved to br_netfilter. If
> the kmod is installed and loaded one would most like expect that
> {ip,ip6,arp}tables see bridged traffic.
Unfortunately that is pulled in by kmod-ebtables. Not sure the
dependency can be changed (and/or packages split up), or if we need to
keep these.
For ebtables, filtering via {ip,ip6,arp}tables is not necessary.

- Felix

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH] base-files: remove bridge firewalling defaults

2017-10-18 Thread Mathias Kresin
Since Linux kernel 3.18-rc1, the settings are moved to br_netfilter. If
the kmod is installed and loaded one would most like expect that
{ip,ip6,arp}tables see bridged traffic.

Fixes the following error messages reported in FS#1073 when
running sysctl -p:

 sysctl: error: 'net.bridge.bridge-nf-call-arptables' is an unknown key
 sysctl: error: 'net.bridge.bridge-nf-call-ip6tables' is an unknown key
 sysctl: error: 'net.bridge.bridge-nf-call-iptables' is an unknown key

Signed-off-by: Mathias Kresin 
---
 package/base-files/Makefile  | 2 +-
 package/base-files/files/etc/sysctl.conf | 5 -
 2 files changed, 1 insertion(+), 6 deletions(-)

diff --git a/package/base-files/Makefile b/package/base-files/Makefile
index 216e457..e6c53e9 100644
--- a/package/base-files/Makefile
+++ b/package/base-files/Makefile
@@ -11,7 +11,7 @@ include $(INCLUDE_DIR)/kernel.mk
 include $(INCLUDE_DIR)/version.mk
 
 PKG_NAME:=base-files
-PKG_RELEASE:=176
+PKG_RELEASE:=177
 PKG_FLAGS:=nonshared
 
 PKG_FILE_DEPENDS:=$(PLATFORM_DIR)/ $(GENERIC_PLATFORM_DIR)/base-files/
diff --git a/package/base-files/files/etc/sysctl.conf 
b/package/base-files/files/etc/sysctl.conf
index ddc7a9b..992385a 100644
--- a/package/base-files/files/etc/sysctl.conf
+++ b/package/base-files/files/etc/sysctl.conf
@@ -24,8 +24,3 @@ net.netfilter.nf_conntrack_max=16384
 net.netfilter.nf_conntrack_tcp_timeout_established=7440
 net.netfilter.nf_conntrack_udp_timeout=60
 net.netfilter.nf_conntrack_udp_timeout_stream=180
-
-# disable bridge firewalling by default
-net.bridge.bridge-nf-call-arptables=0
-net.bridge.bridge-nf-call-ip6tables=0
-net.bridge.bridge-nf-call-iptables=0
-- 
2.7.4


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] Need review of Perl bump to 5.26.1 (urgent)

2017-10-18 Thread Philip Prindeville

> On Oct 17, 2017, at 4:36 PM, Philip Prindeville 
>  wrote:
> 
> [snip]
> 
> Since there ARE known and remedied CVE’s, I’d like to move quickly on this.
> 


I should have qualified that.  I’m going to commit 48 hours after sending out 
that last email unless anyone objects.

-Philip


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] meetup for beer in Prague

2017-10-18 Thread Hauke Mehrtens
Hi,

We have ELCE and the OpenWrt summit next week in Prague and a lot of
people will be there.

I would like to have a meeting next Wednesday evening 25. October 2017
in Prague, like we did it last year at c-base:
http://lists.infradead.org/pipermail/lede-dev/2016-October/003229.html

I do not know any locations in Prague so it would be nice if someone
could help me with that. ;-)

Who is interested in this and would join?

Hauke

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] LEDE v17.01.4 service release

2017-10-18 Thread Stijn Tintel
The LEDE Community is proud to announce the fourth service release of
stable LEDE 17.01 series.

LEDE 17.01.4 “Reboot” incorporates a fair number of fixes back ported
from the development branch during the last two weeks.
---

Some selected highlights of the service release are:

    Linux kernel updated to version 4.4.92 (from 4.4.89 in v17.01.3)
    Security fixes to brcmfmac, hostapd, mac80211, toolchain/gdb and the
Linux kernel
    Assorted platform fixes for ar71xx, bcm53xx, ramips and x86

While this release includes fixes for the bugs in the WPA Protocol
disclosed earlier this week, these fixes do not fix the problem on the
client-side. You still need to update all your client devices. As some
client devices might never receive an update, an optional AP-side
workaround was introduced in hostapd to complicate these attacks,
slowing them down. Please note that this does not fully protect you from
them, especially when running older versions of wpa_supplicant
vulnerable to CVE-2017-13086, which the workaround does not address. As
this workaround can cause interoperability issues and reduced robustness
of key negotiation, this workaround is disabled by default.

Due to the version bump of toolchain/gdb to 8.0.1, at least GCC 4.8 is
now required to build LEDE.

For a detailed list of changes since 17.01.3 refer to
https://lede-project.org/releases/17.01/changelog-17.01.4

---

For latest information about the 17.01 series, refer to the wiki at:
https://lede-project.org/releases/17.01/

To download the v17.01.4 images, navigate to:
https://downloads.lede-project.org/releases/17.01.4/

---

As always, a big thank you goes to all our active package maintainers,
testers, documenters and supporters.

Have fun!

The LEDE Community



___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] [PATCH netifd 1/2] proto: add point-to-point IPv4 address config support (FS#1037)

2017-10-18 Thread Stijn Tintel
On 17-10-17 23:16, Hans Dedecker wrote:
> Add config support support for point-to-point IPv4 addresses by providing
> the uci parameter ptpaddr. This allows to support a gateway being in a
> different subnet than the assigned IP by modeling the local IP having a
> point-to-point address.
> This is similar to the point-to-point IPv4 address support already present
> for the protocol handlers.
Hey Hans, thanks a lot for this. I tested it on my LEDE VM running @
OVH, and this works fine with the following config:

config interface 'wan'
    option ifname 'eth1'
    option proto 'static'
    option ipaddr '52.36.x.x'
    option gateway '176.31.101.254'
    option ptpaddr '176.31.101.254'

Maybe we could automatically add the gateway as peer in case it is in a
different subnet than the ipaddr, so that we don't have to specify the
same address for two different options? Or is that too much assumption?

Either way:
Tested-by: Stijn Tintel 

Stijn

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH] kernel: bump 4.4 to 4.4.93 for 17.01

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches.
Compile-tested for ar71xx - Archer C7 v2
Runtime-tested on  ar71xx - Archer C7 v2

Fixes the following CVEs:

- CVE-2017-15265
- CVE-2017-0786

Signed-off-by: Kevin Darbyshire-Bryant 
---
 include/kernel-version.mk | 4 ++--
 .../0069-hid-Reduce-default-mouse-polling-interval-to-60Hz.patch  | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/include/kernel-version.mk b/include/kernel-version.mk
index 51e0dcf..6b4a224 100644
--- a/include/kernel-version.mk
+++ b/include/kernel-version.mk
@@ -3,10 +3,10 @@
 LINUX_RELEASE?=1
 
 LINUX_VERSION-3.18 = .43
-LINUX_VERSION-4.4 = .92
+LINUX_VERSION-4.4 = .93
 
 LINUX_KERNEL_HASH-3.18.43 = 
1236e8123a6ce537d5029232560966feed054ae31776fe8481dd7d18cdd5492c
-LINUX_KERNEL_HASH-4.4.92 = 
53f8cd8b02df0f242f8e6ab5147b0b009d7a30e8b2ed3854e8d17937460d
+LINUX_KERNEL_HASH-4.4.93 = 
ed349314f16e78a6571b5f8884f6452782aef6c26b81bcc7ccdac44ecd917c36
 
 ifdef KERNEL_PATCHVER
   LINUX_VERSION:=$(KERNEL_PATCHVER)$(strip $(LINUX_VERSION-$(KERNEL_PATCHVER)))
diff --git 
a/target/linux/brcm2708/patches-4.4/0069-hid-Reduce-default-mouse-polling-interval-to-60Hz.patch
 
b/target/linux/brcm2708/patches-4.4/0069-hid-Reduce-default-mouse-polling-interval-to-60Hz.patch
index 7914e06..2eb1a7b 100644
--- 
a/target/linux/brcm2708/patches-4.4/0069-hid-Reduce-default-mouse-polling-interval-to-60Hz.patch
+++ 
b/target/linux/brcm2708/patches-4.4/0069-hid-Reduce-default-mouse-polling-interval-to-60Hz.patch
@@ -19,7 +19,7 @@ Reduces overhead when using X
  module_param_named(mousepoll, hid_mousepoll_interval, uint, 0644);
  MODULE_PARM_DESC(mousepoll, "Polling interval of mice");
  
-@@ -1083,8 +1083,12 @@ static int usbhid_start(struct hid_devic
+@@ -1093,8 +1093,12 @@ static int usbhid_start(struct hid_devic
}
  
/* Change the polling interval of mice. */
-- 
2.7.4


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH v2] kernel: bump 4.4 to 4.4.93

2017-10-18 Thread Kevin Darbyshire-Bryant
No patch refresh required.

Compile-tested for ar71xx - Archer C7 v2
Runtime-tested on  ar71xx - Archer C7 v2

Fixes the following CVEs:

- CVE-2017-15265
- CVE-2017-0786

Signed-off-by: Kevin Darbyshire-Bryant 
---

v2 - resend as v1 accidentally deleted from patchwork. No content change.

 include/kernel-version.mk | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/kernel-version.mk b/include/kernel-version.mk
index 2d3e8e6..21e0c1f 100644
--- a/include/kernel-version.mk
+++ b/include/kernel-version.mk
@@ -3,11 +3,11 @@
 LINUX_RELEASE?=1
 
 LINUX_VERSION-3.18 = .71
-LINUX_VERSION-4.4 = .92
+LINUX_VERSION-4.4 = .93
 LINUX_VERSION-4.9 = .57
 
 LINUX_KERNEL_HASH-3.18.71 = 
5abc9778ad44ce02ed6c8ab52ece8a21c6d20d21f6ed8a19287b4a38a50c1240
-LINUX_KERNEL_HASH-4.4.92 = 
53f8cd8b02df0f242f8e6ab5147b0b009d7a30e8b2ed3854e8d17937460d
+LINUX_KERNEL_HASH-4.4.93 = 
ed349314f16e78a6571b5f8884f6452782aef6c26b81bcc7ccdac44ecd917c36
 LINUX_KERNEL_HASH-4.9.57 = 
09230554ec6a34a12e2d2a6b32733aed3c9bc90b1662cc1b06dd67bf726c96a6
 
 ifdef KERNEL_PATCHVER
-- 
2.7.4


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH] kernel: bump 4.4 to 4.4.93

2017-10-18 Thread Kevin Darbyshire-Bryant
No patch refresh required.

Compile-tested for ar71xx - Archer C7 v2
Runtime-tested on  ar71xx - Archer C7 v2

Fixes the following CVEs:

- CVE-2017-15265
- CVE-2017-0786

Signed-off-by: Kevin Darbyshire-Bryant 
---
 include/kernel-version.mk | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/kernel-version.mk b/include/kernel-version.mk
index 2d3e8e6..21e0c1f 100644
--- a/include/kernel-version.mk
+++ b/include/kernel-version.mk
@@ -3,11 +3,11 @@
 LINUX_RELEASE?=1
 
 LINUX_VERSION-3.18 = .71
-LINUX_VERSION-4.4 = .92
+LINUX_VERSION-4.4 = .93
 LINUX_VERSION-4.9 = .57
 
 LINUX_KERNEL_HASH-3.18.71 = 
5abc9778ad44ce02ed6c8ab52ece8a21c6d20d21f6ed8a19287b4a38a50c1240
-LINUX_KERNEL_HASH-4.4.92 = 
53f8cd8b02df0f242f8e6ab5147b0b009d7a30e8b2ed3854e8d17937460d
+LINUX_KERNEL_HASH-4.4.93 = 
ed349314f16e78a6571b5f8884f6452782aef6c26b81bcc7ccdac44ecd917c36
 LINUX_KERNEL_HASH-4.9.57 = 
09230554ec6a34a12e2d2a6b32733aed3c9bc90b1662cc1b06dd67bf726c96a6
 
 ifdef KERNEL_PATCHVER
-- 
2.7.4


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH v2] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches.
Compile-tested for ar71xx - Archer C7 v2
Runtime-tested on  ar71xx - Archer C7 v2

Fixes the following CVEs:

- CVE-2017-7518
- CVE-2017-0786
- CVE-2017-1000255
- CVE-2017-12188
- CVE-2017-15265

Signed-off-by: Kevin Darbyshire-Bryant 
---

v2 - reword commit message - no content change

 include/kernel-version.mk  |   4 +-
 ...d-firmware-loader-for-uPD720201-and-uPD72.patch |   6 +-
 .../802-usb-xhci-force-msi-renesas-xhci.patch  |   2 +-
 ...-add-support-for-performing-fake-doorbell.patch |   2 +-
 ...ce-default-mouse-polling-interval-to-60Hz.patch |   2 +-
 ...i-Update-for-rename-of-page_cache_release.patch |   2 +-
 .../patches-4.9/200-broadcom_phy_reinit.patch  |   2 +-
 ...-tcp-tsq-add-shortcut-in-tcp_tasklet_func.patch |   2 +-
 ...q-add-a-shortcut-in-tcp_small_queue_check.patch |   2 +-
 ...tcp-tcp_mtu_probe-is-likely-to-exit-early.patch |   2 +-
 ...tsq-move-tsq_flags-close-to-sk_wmem_alloc.patch |   6 +-
 .../hack-4.9/661-use_fq_codel_by_default.patch |   2 +-
 .../linux/generic/hack-4.9/902-debloat_proc.patch  |   2 +-
 .../pending-4.9/630-packet_socket_type.patch   |  16 +-
 .../666-Add-support-for-MAP-E-FMRs-mesh-mode.patch |  22 +-
 .../patches-4.9/601-net-support-layerscape.patch   |   2 +-
 .../patches-4.9/810-iommu-support-layerscape.patch |   6 +-
 .../mediatek/patches-4.9/0063-atomic-sleep.patch   |   6 +-
 .../0025-pinctrl-ralink-add-pinctrl-driver.patch   |   2 +-
 .../sunxi/patches-4.9/0052-stmmac-form-4-12.patch  | 386 +++--
 ...M-dts-sunxi-nanopi-neo-Enable-dwmac-sun8i.patch |   6 +-
 ...8i-nanopi-neo-enable-UART-USB-and-I2C-pin.patch |   6 +-
 22 files changed, 252 insertions(+), 236 deletions(-)

diff --git a/include/kernel-version.mk b/include/kernel-version.mk
index 405e5fd..2d3e8e6 100644
--- a/include/kernel-version.mk
+++ b/include/kernel-version.mk
@@ -4,11 +4,11 @@ LINUX_RELEASE?=1
 
 LINUX_VERSION-3.18 = .71
 LINUX_VERSION-4.4 = .92
-LINUX_VERSION-4.9 = .54
+LINUX_VERSION-4.9 = .57
 
 LINUX_KERNEL_HASH-3.18.71 = 
5abc9778ad44ce02ed6c8ab52ece8a21c6d20d21f6ed8a19287b4a38a50c1240
 LINUX_KERNEL_HASH-4.4.92 = 
53f8cd8b02df0f242f8e6ab5147b0b009d7a30e8b2ed3854e8d17937460d
-LINUX_KERNEL_HASH-4.9.54 = 
651005db6efbce4fcd607415ebd697dd8d2f5a2abc2c632b11ece03a1a210fc5
+LINUX_KERNEL_HASH-4.9.57 = 
09230554ec6a34a12e2d2a6b32733aed3c9bc90b1662cc1b06dd67bf726c96a6
 
 ifdef KERNEL_PATCHVER
   LINUX_VERSION:=$(KERNEL_PATCHVER)$(strip $(LINUX_VERSION-$(KERNEL_PATCHVER)))
diff --git 
a/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
 
b/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
index 2563441..96a5940 100644
--- 
a/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
+++ 
b/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
@@ -44,7 +44,7 @@ Signed-off-by: Christian Lamparter 
  
  #include "xhci.h"
  #include "xhci-trace.h"
-@@ -248,6 +250,458 @@ static void xhci_pme_acpi_rtd3_enable(st
+@@ -236,6 +238,458 @@ static void xhci_pme_acpi_rtd3_enable(st
  static void xhci_pme_acpi_rtd3_enable(struct pci_dev *dev) { }
  #endif /* CONFIG_ACPI */
  
@@ -503,7 +503,7 @@ Signed-off-by: Christian Lamparter 
  /* called during probe() after chip reset completes */
  static int xhci_pci_setup(struct usb_hcd *hcd)
  {
-@@ -287,6 +741,22 @@ static int xhci_pci_probe(struct pci_dev
+@@ -275,6 +729,22 @@ static int xhci_pci_probe(struct pci_dev
struct hc_driver *driver;
struct usb_hcd *hcd;
  
@@ -526,7 +526,7 @@ Signed-off-by: Christian Lamparter 
driver = (struct hc_driver *)id->driver_data;
  
/* Prevent runtime suspending between USB-2 and USB-3 initialization */
-@@ -344,6 +814,16 @@ static void xhci_pci_remove(struct pci_d
+@@ -332,6 +802,16 @@ static void xhci_pci_remove(struct pci_d
  {
struct xhci_hcd *xhci;
  
diff --git 
a/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch 
b/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
index 76141a0..4d7c686 100644
--- 
a/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
+++ 
b/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
@@ -13,7 +13,7 @@ produce a noisy warning.
 
 --- a/drivers/usb/host/xhci-pci.c
 +++ b/drivers/usb/host/xhci-pci.c
-@@ -205,7 +205,7 @@ static void xhci_pci_quirks(struct devic
+@@ -193,7 +193,7 @@ static void xhci_pci_quirks(struct devic
}
if (pdev->vendor == PCI_VENDOR_ID_RENESAS &&
pdev->device == 0x0015)
diff --git 
a/target/linux/bcm53xx/patches-4.9/180-usb-xhci-add-support-for-performing-fake-doorbell.patch
 
b/target/linux/bcm53xx/patches-4.9/180-usb-xhci-add-support-for-performing-fake-doorbell.patch
index a4163fc..f7b3494 100644
--- 
a/target/linux/bcm53xx/patches-4.9/180-usb-xhci

[LEDE-DEV] [PATCH] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches.
Compile-tested for ar71xx - Archer C7 v2
Runtime-tested on  ar71xx - Archer C7 v2

Fixes the following CVEs:

- CVE-2017-7518
- CVE-2017-0786
- CVE-2017-1000255
- CVE-2017-12188
- CVE-2017-15265

Signed-off-by: Kevin Darbyshire-Bryant 
---
v2 - reword commit message - no content change



 include/kernel-version.mk  |   4 +-
 ...d-firmware-loader-for-uPD720201-and-uPD72.patch |   6 +-
 .../802-usb-xhci-force-msi-renesas-xhci.patch  |   2 +-
 ...-add-support-for-performing-fake-doorbell.patch |   2 +-
 ...ce-default-mouse-polling-interval-to-60Hz.patch |   2 +-
 ...i-Update-for-rename-of-page_cache_release.patch |   2 +-
 .../patches-4.9/200-broadcom_phy_reinit.patch  |   2 +-
 ...-tcp-tsq-add-shortcut-in-tcp_tasklet_func.patch |   2 +-
 ...q-add-a-shortcut-in-tcp_small_queue_check.patch |   2 +-
 ...tcp-tcp_mtu_probe-is-likely-to-exit-early.patch |   2 +-
 ...tsq-move-tsq_flags-close-to-sk_wmem_alloc.patch |   6 +-
 .../hack-4.9/661-use_fq_codel_by_default.patch |   2 +-
 .../linux/generic/hack-4.9/902-debloat_proc.patch  |   2 +-
 .../pending-4.9/630-packet_socket_type.patch   |  16 +-
 .../666-Add-support-for-MAP-E-FMRs-mesh-mode.patch |  22 +-
 .../patches-4.9/601-net-support-layerscape.patch   |   2 +-
 .../patches-4.9/810-iommu-support-layerscape.patch |   6 +-
 .../mediatek/patches-4.9/0063-atomic-sleep.patch   |   6 +-
 .../0025-pinctrl-ralink-add-pinctrl-driver.patch   |   2 +-
 .../sunxi/patches-4.9/0052-stmmac-form-4-12.patch  | 386 +++--
 ...M-dts-sunxi-nanopi-neo-Enable-dwmac-sun8i.patch |   6 +-
 ...8i-nanopi-neo-enable-UART-USB-and-I2C-pin.patch |   6 +-
 22 files changed, 252 insertions(+), 236 deletions(-)

diff --git a/include/kernel-version.mk b/include/kernel-version.mk
index 405e5fd..2d3e8e6 100644
--- a/include/kernel-version.mk
+++ b/include/kernel-version.mk
@@ -4,11 +4,11 @@ LINUX_RELEASE?=1
 
 LINUX_VERSION-3.18 = .71
 LINUX_VERSION-4.4 = .92
-LINUX_VERSION-4.9 = .54
+LINUX_VERSION-4.9 = .57
 
 LINUX_KERNEL_HASH-3.18.71 = 
5abc9778ad44ce02ed6c8ab52ece8a21c6d20d21f6ed8a19287b4a38a50c1240
 LINUX_KERNEL_HASH-4.4.92 = 
53f8cd8b02df0f242f8e6ab5147b0b009d7a30e8b2ed3854e8d17937460d
-LINUX_KERNEL_HASH-4.9.54 = 
651005db6efbce4fcd607415ebd697dd8d2f5a2abc2c632b11ece03a1a210fc5
+LINUX_KERNEL_HASH-4.9.57 = 
09230554ec6a34a12e2d2a6b32733aed3c9bc90b1662cc1b06dd67bf726c96a6
 
 ifdef KERNEL_PATCHVER
   LINUX_VERSION:=$(KERNEL_PATCHVER)$(strip $(LINUX_VERSION-$(KERNEL_PATCHVER)))
diff --git 
a/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
 
b/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
index 2563441..96a5940 100644
--- 
a/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
+++ 
b/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
@@ -44,7 +44,7 @@ Signed-off-by: Christian Lamparter 
  
  #include "xhci.h"
  #include "xhci-trace.h"
-@@ -248,6 +250,458 @@ static void xhci_pme_acpi_rtd3_enable(st
+@@ -236,6 +238,458 @@ static void xhci_pme_acpi_rtd3_enable(st
  static void xhci_pme_acpi_rtd3_enable(struct pci_dev *dev) { }
  #endif /* CONFIG_ACPI */
  
@@ -503,7 +503,7 @@ Signed-off-by: Christian Lamparter 
  /* called during probe() after chip reset completes */
  static int xhci_pci_setup(struct usb_hcd *hcd)
  {
-@@ -287,6 +741,22 @@ static int xhci_pci_probe(struct pci_dev
+@@ -275,6 +729,22 @@ static int xhci_pci_probe(struct pci_dev
struct hc_driver *driver;
struct usb_hcd *hcd;
  
@@ -526,7 +526,7 @@ Signed-off-by: Christian Lamparter 
driver = (struct hc_driver *)id->driver_data;
  
/* Prevent runtime suspending between USB-2 and USB-3 initialization */
-@@ -344,6 +814,16 @@ static void xhci_pci_remove(struct pci_d
+@@ -332,6 +802,16 @@ static void xhci_pci_remove(struct pci_d
  {
struct xhci_hcd *xhci;
  
diff --git 
a/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch 
b/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
index 76141a0..4d7c686 100644
--- 
a/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
+++ 
b/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
@@ -13,7 +13,7 @@ produce a noisy warning.
 
 --- a/drivers/usb/host/xhci-pci.c
 +++ b/drivers/usb/host/xhci-pci.c
-@@ -205,7 +205,7 @@ static void xhci_pci_quirks(struct devic
+@@ -193,7 +193,7 @@ static void xhci_pci_quirks(struct devic
}
if (pdev->vendor == PCI_VENDOR_ID_RENESAS &&
pdev->device == 0x0015)
diff --git 
a/target/linux/bcm53xx/patches-4.9/180-usb-xhci-add-support-for-performing-fake-doorbell.patch
 
b/target/linux/bcm53xx/patches-4.9/180-usb-xhci-add-support-for-performing-fake-doorbell.patch
index a4163fc..f7b3494 100644
--- 
a/target/linux/bcm53xx/patches-4.9/180-usb-xhc

Re: [LEDE-DEV] [PATCH] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Koen Vandeputte

Tested-by: Koen Vandeputte 

Targets: cns3xxx, imx6


___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

2017-10-18 Thread Aaron Z
On Tue, Oct 17, 2017 at 10:28 PM, Stijn Tintel  wrote:
> On 18-10-17 01:40, Aaron Z wrote:
>> On Tue, Oct 17, 2017 at 3:24 AM, Felix Fietkau  wrote:
>>> On 2017-10-17 01:53, Jim Gettys wrote:
 Will this require a upgrade of the base image, or can we just upgrade
 packages?  If so,
 which ones?
   - Jim
>>> Updating wpad(-mini) should be enough.
>> Is the base image now updated, or would one still need to update wpad
>> after installing a freshly downloaded 17.01.3 image?
>> I ask because the packages have an edit date of today while the base
>> image is dated 4 Oct.
>> If the base image hasn't been updated, I would think that it should be
>> so that fresh installs are protected going forward.
> Updating release binaries is very bad practice and should never be done.
> Please wait for 17.01.4, which will include the fixes.
Is there a projected release date for 17.01.4? If not, IMO there
should be a banner for the LEDE Wiki (and the download page?) letting
people know that they need to update wpad ASAP after a new install.

Aaron Z

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

2017-10-18 Thread Stijn Tintel
On 18-10-17 14:20, Aaron Z wrote:
> On Tue, Oct 17, 2017 at 10:28 PM, Stijn Tintel  wrote:
>> On 18-10-17 01:40, Aaron Z wrote:
>>> On Tue, Oct 17, 2017 at 3:24 AM, Felix Fietkau  wrote:
 On 2017-10-17 01:53, Jim Gettys wrote:
> Will this require a upgrade of the base image, or can we just upgrade
> packages?  If so,
> which ones?
>   - Jim
 Updating wpad(-mini) should be enough.
>>> Is the base image now updated, or would one still need to update wpad
>>> after installing a freshly downloaded 17.01.3 image?
>>> I ask because the packages have an edit date of today while the base
>>> image is dated 4 Oct.
>>> If the base image hasn't been updated, I would think that it should be
>>> so that fresh installs are protected going forward.
>> Updating release binaries is very bad practice and should never be done.
>> Please wait for 17.01.4, which will include the fixes.
> Is there a projected release date for 17.01.4? If not, IMO there
> should be a banner for the LEDE Wiki (and the download page?) letting
> people know that they need to update wpad ASAP after a new install.
17.01.4 is building. I expect it to be ready in ~4h.

Stijn

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] Serial data getting lost - bug or a feature?

2017-10-18 Thread Valent Turkovic
I have just finished testing with Lede 17.01.3 but I couldn't use
default image but I build new one via Imagebuilder because we have
quite a few additional packages and we use wpad instead of wpad-mini.

These are the packages I added to image:

blkid block-mount kmod-fs-ext4 kmod-fs-vfat kmod-nls-base
kmod-usb-storage e2fsprogs chat comgt kmod-usb-serial
kmod-usb-serial-option kmod-usb-serial-wwan usb-modeswitch
kmod-crypto-hash kmod-crypto-manager kmod-crypto-pcompress
openvpn-openssl rsync coreutils coreutils-stat coreutils-timeout glib2
kmod-hid kmod-input-core kmod-lib-crc16 nano ntpclient zlib
wireless-tools tcpdump tmux coreutils-nohup diffutils tmux -6relayd
wpad coreutils-stty picocom python-light python-codecs python-pyserial
cfdisk e2fsprogs kmod-nls-base kmod-nls-cp437 kmod-nls-iso8859-1
vnstat kmod-fs-f2fs f2fs-tools ca-certificates wget snmpd netcat

And after that set log levels in /etc/config/system as follows:
option conloglevel '1'
option klogconloglevel '1'
option cronloglevel '9'

and then I comment out uart to be used as login terminal in /etc/inittab :
#::askconsole:/usr/libexec/login.sh

And after all of that I could reproduce issue 100%.

So if wifi is active, in sta mode but not associated to AP then serial
communication is having issues and is loosing characters when
receiving them.

Do you need some more info from my side that would help?

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


[LEDE-DEV] [PATCH] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches.

Upstream CVEs:

CVE-2017-7518
CVE-2017-0786
CVE-2017-1000255
CVE-2017-12188
CVE-2017-15265

Compile tested for: ar71xx
Run tested on: ar71xx Archer C7 v2

Signed-off-by: Kevin Darbyshire-Bryant 
---
 include/kernel-version.mk  |   4 +-
 ...d-firmware-loader-for-uPD720201-and-uPD72.patch |   6 +-
 .../802-usb-xhci-force-msi-renesas-xhci.patch  |   2 +-
 ...-add-support-for-performing-fake-doorbell.patch |   2 +-
 ...ce-default-mouse-polling-interval-to-60Hz.patch |   2 +-
 ...i-Update-for-rename-of-page_cache_release.patch |   2 +-
 .../patches-4.9/200-broadcom_phy_reinit.patch  |   2 +-
 ...-tcp-tsq-add-shortcut-in-tcp_tasklet_func.patch |   2 +-
 ...q-add-a-shortcut-in-tcp_small_queue_check.patch |   2 +-
 ...tcp-tcp_mtu_probe-is-likely-to-exit-early.patch |   2 +-
 ...tsq-move-tsq_flags-close-to-sk_wmem_alloc.patch |   6 +-
 .../hack-4.9/661-use_fq_codel_by_default.patch |   2 +-
 .../linux/generic/hack-4.9/902-debloat_proc.patch  |   2 +-
 .../pending-4.9/630-packet_socket_type.patch   |  16 +-
 .../666-Add-support-for-MAP-E-FMRs-mesh-mode.patch |  22 +-
 .../patches-4.9/601-net-support-layerscape.patch   |   2 +-
 .../patches-4.9/810-iommu-support-layerscape.patch |   6 +-
 .../mediatek/patches-4.9/0063-atomic-sleep.patch   |   6 +-
 .../0025-pinctrl-ralink-add-pinctrl-driver.patch   |   2 +-
 .../sunxi/patches-4.9/0052-stmmac-form-4-12.patch  | 386 +++--
 ...M-dts-sunxi-nanopi-neo-Enable-dwmac-sun8i.patch |   6 +-
 ...8i-nanopi-neo-enable-UART-USB-and-I2C-pin.patch |   6 +-
 22 files changed, 252 insertions(+), 236 deletions(-)

diff --git a/include/kernel-version.mk b/include/kernel-version.mk
index 405e5fd..2d3e8e6 100644
--- a/include/kernel-version.mk
+++ b/include/kernel-version.mk
@@ -4,11 +4,11 @@ LINUX_RELEASE?=1
 
 LINUX_VERSION-3.18 = .71
 LINUX_VERSION-4.4 = .92
-LINUX_VERSION-4.9 = .54
+LINUX_VERSION-4.9 = .57
 
 LINUX_KERNEL_HASH-3.18.71 = 
5abc9778ad44ce02ed6c8ab52ece8a21c6d20d21f6ed8a19287b4a38a50c1240
 LINUX_KERNEL_HASH-4.4.92 = 
53f8cd8b02df0f242f8e6ab5147b0b009d7a30e8b2ed3854e8d17937460d
-LINUX_KERNEL_HASH-4.9.54 = 
651005db6efbce4fcd607415ebd697dd8d2f5a2abc2c632b11ece03a1a210fc5
+LINUX_KERNEL_HASH-4.9.57 = 
09230554ec6a34a12e2d2a6b32733aed3c9bc90b1662cc1b06dd67bf726c96a6
 
 ifdef KERNEL_PATCHVER
   LINUX_VERSION:=$(KERNEL_PATCHVER)$(strip $(LINUX_VERSION-$(KERNEL_PATCHVER)))
diff --git 
a/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
 
b/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
index 2563441..96a5940 100644
--- 
a/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
+++ 
b/target/linux/apm821xx/patches-4.9/801-usb-xhci-add-firmware-loader-for-uPD720201-and-uPD72.patch
@@ -44,7 +44,7 @@ Signed-off-by: Christian Lamparter 
  
  #include "xhci.h"
  #include "xhci-trace.h"
-@@ -248,6 +250,458 @@ static void xhci_pme_acpi_rtd3_enable(st
+@@ -236,6 +238,458 @@ static void xhci_pme_acpi_rtd3_enable(st
  static void xhci_pme_acpi_rtd3_enable(struct pci_dev *dev) { }
  #endif /* CONFIG_ACPI */
  
@@ -503,7 +503,7 @@ Signed-off-by: Christian Lamparter 
  /* called during probe() after chip reset completes */
  static int xhci_pci_setup(struct usb_hcd *hcd)
  {
-@@ -287,6 +741,22 @@ static int xhci_pci_probe(struct pci_dev
+@@ -275,6 +729,22 @@ static int xhci_pci_probe(struct pci_dev
struct hc_driver *driver;
struct usb_hcd *hcd;
  
@@ -526,7 +526,7 @@ Signed-off-by: Christian Lamparter 
driver = (struct hc_driver *)id->driver_data;
  
/* Prevent runtime suspending between USB-2 and USB-3 initialization */
-@@ -344,6 +814,16 @@ static void xhci_pci_remove(struct pci_d
+@@ -332,6 +802,16 @@ static void xhci_pci_remove(struct pci_d
  {
struct xhci_hcd *xhci;
  
diff --git 
a/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch 
b/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
index 76141a0..4d7c686 100644
--- 
a/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
+++ 
b/target/linux/apm821xx/patches-4.9/802-usb-xhci-force-msi-renesas-xhci.patch
@@ -13,7 +13,7 @@ produce a noisy warning.
 
 --- a/drivers/usb/host/xhci-pci.c
 +++ b/drivers/usb/host/xhci-pci.c
-@@ -205,7 +205,7 @@ static void xhci_pci_quirks(struct devic
+@@ -193,7 +193,7 @@ static void xhci_pci_quirks(struct devic
}
if (pdev->vendor == PCI_VENDOR_ID_RENESAS &&
pdev->device == 0x0015)
diff --git 
a/target/linux/bcm53xx/patches-4.9/180-usb-xhci-add-support-for-performing-fake-doorbell.patch
 
b/target/linux/bcm53xx/patches-4.9/180-usb-xhci-add-support-for-performing-fake-doorbell.patch
index a4163fc..f7b3494 100644
--- 
a/target/linux/bcm53xx/patches-4.9/180-usb-xhci-add-support-for-performing-fake-doorbell.patch
+++ 
b/target/linux/bcm53xx/patches-4.9/1

Re: [LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

2017-10-18 Thread Jo-Philipp Wich
Hi,

> Why would that be? I don't see what the negative effects are if I update
> just the hostapd and wpad* packages, other than using up some space,
> instead of installing a new image with them included. Or am I missing
> something?

I think Stijn was referring to the idea of (silently) updating the
already released 17.01.3 images to contain updated packages.

~ Jo

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] [Feature Request]Discussion - Move everything to Namespaces?

2017-10-18 Thread Amir Sabbaghi
+1 from me. I am creating namespaces with a script and would like to
see this feature in UCI.

On Tue, Oct 17, 2017 at 5:33 PM Joel Wirāmu Pauling  wrote:
>
> Hi there;
>
> As a long time Openwrt -nee Lede user and sometimes bug reporter; I've been
> maintaining my own forks and builds for several different purposes for 10+
> years now. I've gotten a lot out of the project personally and
> professionally and would just like to thank everyone for their
> contributions.
>
> When ip net namespaces were first introduced they were a sometimes solution
> to a sometimes problem, manually coaxed into life on an adhoc basis.
> However in the last 3 years I have increasingly come to the conclusion that
> they are now the workhorse of linux routing for the most part.
>
> As I increasingly move to VNF (virtualised network functions) deploying
> Lede images to openstack or similar to provide complex routing
> functionality,  it's become apparent the lack of standardized namespace
> schema inside luci and uci  to be exposed and used by default has made lede
> a bit of a burden to handle from a support perspective.
>
> I would like to open a discussion with the wider community and main dev's
> about potentially moving towards standardized and across the board use of
> namespaces for most-part of core lede functionality.
>
> So before I start rattling off the use cases I want to know if there are
> any Yay or Nay sayers to moving things to namespaces and off the default
> routing table?
>
>
> Kind regards
>
> -Joel
> @aenertia on the tweeters
>
> ___
> Lede-dev mailing list
> Lede-dev@lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/lede-dev

___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev


Re: [LEDE-DEV] [PATCH][RFC] procd: service: add data within the service itself

2017-10-18 Thread John Crispin

Hi Pierre

sorry for the late reply, comments inline


On 04/10/17 12:50, pme.leb...@gmail.com wrote:

From: Pierre Lebleu 

It gives the ability to create firewall data within the
service itself rather than within an instance.

Signed-off-by: Pierre Lebleu 
---
  service/service.c | 45 +++--
  service/service.h |  2 ++
  2 files changed, 45 insertions(+), 2 deletions(-)

diff --git a/service/service.c b/service/service.c
index 9c798aa..595f6f7 100644
--- a/service/service.c
+++ b/service/service.c
@@ -84,6 +84,7 @@ service_alloc(const char *name)
s->name = new_name;
s->avl.key = s->name;
INIT_LIST_HEAD(&s->validators);
+   blobmsg_list_simple_init(&s->data);
  
  	return s;

  }
@@ -95,6 +96,7 @@ enum {
SERVICE_SET_TRIGGER,
SERVICE_SET_VALIDATE,
SERVICE_SET_AUTOSTART,
+   SERVICE_SET_DATA,
__SERVICE_SET_MAX
  };
  
@@ -105,8 +107,20 @@ static const struct blobmsg_policy service_set_attrs[__SERVICE_SET_MAX] = {

[SERVICE_SET_TRIGGER] = { "triggers", BLOBMSG_TYPE_ARRAY },
[SERVICE_SET_VALIDATE] = { "validate", BLOBMSG_TYPE_ARRAY },
[SERVICE_SET_AUTOSTART] = { "autostart", BLOBMSG_TYPE_BOOL },
+   [SERVICE_SET_DATA] = { "data", BLOBMSG_TYPE_TABLE },
  };
  
+static void

+service_fill_any(struct blobmsg_list *l, struct blob_attr *cur)
+{
+   if (!cur)
+   return;
+
+   DEBUG(2, "Add data for service\n");
+
+   blobmsg_list_fill(l, blobmsg_data(cur), blobmsg_data_len(cur), false);
+}
+
  static int
  service_update(struct service *s, struct blob_attr **tb, bool add)
  {
@@ -148,6 +162,8 @@ service_update(struct service *s, struct blob_attr **tb, 
bool add)
vlist_flush(&s->instances);
}
  
+	service_fill_any(&s->data, tb[SERVICE_SET_DATA]);

+
s->deleted = false;
  
  	rc(s->name, "running");

@@ -159,6 +175,7 @@ static void
  service_delete(struct service *s)
  {
vlist_flush_all(&s->instances);
+   blobmsg_list_free(&s->data);
s->deleted = true;
service_stopped(s);
  }
@@ -316,6 +333,13 @@ service_dump(struct service *s, bool verbose)
blobmsg_add_blob(&b, s->trigger);
if (verbose && !list_empty(&s->validators))
service_validate_dump(&b, s);
+   if (!avl_is_empty(&s->data.avl)) {
+   struct blobmsg_list_node *var;
+   void *e = blobmsg_open_table(&b, "data");
+   blobmsg_list_for_each(&s->data, var)
+   blobmsg_add_blob(&b, var->data);
+   blobmsg_close_table(&b, e);
+   }
blobmsg_close_table(&b, c);
  }
  
@@ -598,13 +622,30 @@ service_get_data(struct ubus_context *ctx, struct ubus_object *obj,

blob_buf_init(&b, 0);
avl_for_each_element(&services, s, avl) {
void *cs = NULL;
+   void *ci = NULL;
+   struct blobmsg_list_node *var;
  
  		if (name && strcmp(name, s->name))

continue;
  
+		blobmsg_list_for_each(&s->data, var) {

+   if (type && strcmp(blobmsg_name(var->data), type))
+   continue;
+
+   if (!cs)
+   cs = blobmsg_open_table(&b, s->name);
+
+   if (!ci)
+   ci = blobmsg_open_table(&b, "*");
+
+   blobmsg_add_blob(&b, var->data);
+   }
+
+   if (ci)
+   blobmsg_close_table(&b, ci), ci = NULL;
+


maybe i am reading the code wrong but it looks to me as if this would 
result int he service and instance data being intermingled. not sure if 
this is good or bad. could you possibly post a json dump of what the 
generated blob would looks like ?


    John


vlist_for_each_element(&s->instances, in, node) {
-   struct blobmsg_list_node *var;
-   void *ci = NULL;
+   ci = NULL;
  
  			if (instance && strcmp(instance, in->name))

continue;
diff --git a/service/service.h b/service/service.h
index a433c9f..15333c4 100644
--- a/service/service.h
+++ b/service/service.h
@@ -18,6 +18,7 @@
  #include 
  #include 
  #include 
+#include "../utils/utils.h"
  
  extern struct avl_tree services;
  
@@ -46,6 +47,7 @@ struct service {

struct blob_attr *trigger;
struct vlist_tree instances;
struct list_head validators;
+   struct blobmsg_list data;
  };
  
  void service_validate_add(struct service *s, struct blob_attr *attr);



___
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev