[no subject]

2020-08-24 Thread Raylynn Knight via openwrt-devel
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- Result from using sysupgrade: ---

RE: [PATCH 0/6] rb532: update to kernel 5.4

2020-08-24 Thread Adrian Schmutzler
Hi, > -Original Message- > From: Raylynn Knight [mailto:raykni...@me.com] > Sent: Montag, 24. August 2020 10:00 > To: Adrian Schmutzler > Cc: OpenWrt Development List ; > ro...@advem.lv > Subject: Re: [PATCH 0/6] rb532: update to kernel 5.4 > > Result from using sysupgrade: > >

RE: [PATCH 0/6] rb532: update to kernel 5.4

2020-08-24 Thread Adrian Schmutzler
Hi, > -Original Message- > From: Raylynn Knight [mailto:raykni...@me.com] > Sent: Montag, 24. August 2020 10:00 > To: Adrian Schmutzler > Cc: OpenWrt Development List ; > ro...@advem.lv > Subject: Re: [PATCH 0/6] rb532: update to kernel 5.4 > > Result from using sysupgrade: > >

[PATCH opkg] libopkg: move file size check after checksum verification

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez The file size check was added in cb6640381808dd ("libopkg: check for file size mismatches"). Its purpose is to provide an additional line of defense against hash collisions. It is more user-friendly to tell the user that the checksum is wrong, so move the file size check

Re: [PATCH] tools: always create $STAGING_DIR/usr/{include,lib}

2020-08-24 Thread Jo-Philipp Wich
Hi, > rules.mk always passes these as -I/-L to the toolchain. > > Fixes rare errors like: > cc1: error: staging_dir/target-aarch64_cortex-a53_musl/usr/include: No such > file or directory [-Werror=missing-include-dirs] > > Signed-off-by: Andre Heider NAK - I'd prefer if we remove the faulty/r

[no subject]

2020-08-24 Thread Alexandre GRIVEAUX via openwrt-devel
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- Hello, I've tried OpenWrt 19.07.

Re: [PATCH opkg] libopkg: move file size check after checksum verification

2020-08-24 Thread Henrique de Moraes Holschuh
On 24/08/2020 07:53, Baptiste Jonglez wrote: The file size check was added in cb6640381808dd ("libopkg: check for file size mismatches"). Its purpose is to provide an additional line of defense against hash collisions. It is more user-friendly to tell the user that the checksum is wrong, so mov

[PATCH opkg] libopkg: harden checksum verification in error cases

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez This should make it harder to exploit bugs such as CVE-2020-7982. If we can't compute the checksum of a package, we should abort. Similarly, if we can't find any checksum in the package index, this should yield an error. As an exception, installing a package directly fro

Re: [PATCH opkg] libopkg: move file size check after checksum verification

2020-08-24 Thread Baptiste Jonglez
On 24-08-20, Henrique de Moraes Holschuh wrote: > On 24/08/2020 07:53, Baptiste Jonglez wrote: > > The file size check was added in cb6640381808dd ("libopkg: check for file > > size mismatches"). Its purpose is to provide an additional line of > > defense against hash collisions. > > > > It is mo

Re: [PATCH opkg] libopkg: move file size check after checksum verification

2020-08-24 Thread Henrique de Moraes Holschuh
On 24/08/2020 09:01, Baptiste Jonglez wrote: On 24-08-20, Henrique de Moraes Holschuh wrote: On 24/08/2020 07:53, Baptiste Jonglez wrote: It is more user-friendly to tell the user that the checksum is wrong, so move the file size check at the end. It is also far more expensive in the failure

Re: [PATCH opkg] libopkg: move file size check after checksum verification

2020-08-24 Thread Baptiste Jonglez
On 24-08-20, Henrique de Moraes Holschuh wrote: > On 24/08/2020 09:01, Baptiste Jonglez wrote: > > On 24-08-20, Henrique de Moraes Holschuh wrote: > > > On 24/08/2020 07:53, Baptiste Jonglez wrote: > > > > It is more user-friendly to tell the user that the checksum is wrong, so > > > > move the fil

[PATCH opkg v2] libopkg: harden checksum verification in error cases

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez This should make it harder to exploit bugs such as CVE-2020-7982. If we can't compute the checksum of a package, we should abort. Similarly, if we can't find any checksum in the package index, this should yield an error. As an exception, installing a package directly fro

[PATCH] generic: platform/mikrotik: implement multi caldata

2020-08-24 Thread Thibaut VARÈNE
MikroTik recently changed again the way they store wlan calibration data on devices. Prior to this change, ERD calibration data for all available radios was stored within a single identifier node ("tag" in RouterBoot parlance). Recent devices have been seen with calibration (and BDF) data stored i

[PATCH opkg] man: remove obsolete manual pages

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez The man pages have not been updated since 2010. Options are documented in the usage message obtained when running "opkg" without arguments. In addition, the man page are no longer used anywhere in the build system since 2017: the autoconf-based build system was removed in

[PATCH opkg] opkg: allow to configure the path to the signature verification script

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez Currently, package index signatures are only checked when opkg runs on the OpenWrt device. The verification script is hard-coded to a path in /usr/sbin/. Making this path configurable is a first step to implement signature verification in host builds of opkg (e.g. in the

Re: [PATCH opkg v2] libopkg: harden checksum verification in error cases

2020-08-24 Thread Baptiste Jonglez
On 24-08-20, Baptiste Jonglez wrote: > From: Baptiste Jonglez > > This should make it harder to exploit bugs such as CVE-2020-7982. > > If we can't compute the checksum of a package, we should abort. > > Similarly, if we can't find any checksum in the package index, this should > yield an error

Re: [PATCH] tools: always create $STAGING_DIR/usr/{include,lib}

2020-08-24 Thread Paul Spooren
On 24.08.20 00:55, Jo-Philipp Wich wrote: Hi, rules.mk always passes these as -I/-L to the toolchain. Fixes rare errors like: cc1: error: staging_dir/target-aarch64_cortex-a53_musl/usr/include: No such file or directory [-Werror=missing-include-dirs] Signed-off-by: Andre Heider NAK - I'd

[PATCH] wolfssl: Update to version 4.5.0

2020-08-24 Thread Hauke Mehrtens
This fixes the following security problems: * In earlier versions of wolfSSL there exists a potential man in the middle attack on TLS 1.3 clients. * Denial of service attack on TLS 1.3 servers from repetitively sending ChangeCipherSpecs messages. (CVE-2020-12457) * Potential cache timing attack

Re: [PATCH] tools: always create $STAGING_DIR/usr/{include,lib}

2020-08-24 Thread Matthias Schiffer
On 8/24/20 7:56 PM, Paul Spooren wrote: > > On 24.08.20 00:55, Jo-Philipp Wich wrote: >> Hi, >> >>> rules.mk always passes these as -I/-L to the toolchain. >>> >>> Fixes rare errors like: >>> cc1: error: staging_dir/target-aarch64_cortex-a53_musl/usr/include: No >>> such file or directory [-Werror

FW: [PATCH v2 1/8] at91: bump linux version to 5.4

2020-08-24 Thread Adrian Schmutzler
Hi Sandeep, -Original Message- From: openwrt-devel [mailto:openwrt-devel-boun...@lists.openwrt.org] On Behalf Of Adrian Schmutzler Sent: Sonntag, 23. August 2020 22:38 To: openwrt-devel@lists.openwrt.org Cc: sandeep.sheri...@microchip.com Subject: [PATCH v2 1/8] at91: bump linux version t

Google Season of Docs withdraw

2020-08-24 Thread Hauke Mehrtens
Hi, OpenWrt withdraw from this year's Google Season of Docs. We good multiple good looking applications, but we think we would not be able to spend the necessary time on mentoring a project this year. Before committing to any project we withdraw from the Google Season of Docs and informed Google

[PATCH] util-linux: update to 2.36

2020-08-24 Thread Rosen Penev
hwclock was fixed to work with musl. Unfortunately, the fix breaks under musl 1.2.x. Backported patch to fix that. Add libblkid DEPENDS to blkdiscard. Seems to be needed now. Signed-off-by: Rosen Penev --- package/utils/util-linux/Makefile | 9 +++--- .../patches/003-fix_pkgconfig

[PATCH opkg 3/5] download: factor out the logic for building cache filenames

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez If we want to access files in the cache from multiple functions, it is necessary to have a single source of truth regarding the naming of files in the cache. Signed-off-by: Baptiste Jonglez --- libopkg/opkg_download.c | 17 - 1 file changed, 12 insertions

[PATCH opkg 2/5] libopkg: factor out checksum and size verification

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez This is a sizeable chunk of code that be can pretty well isolated in its own function. This refactoring will be necessary for an upcoming feature in which opkg_download_pkg() will need to verify the checksum of packages in the cache. This is the reason why the new functio

[PATCH opkg 5/5] opkg_verify_integrity: better logging and error conditions

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez The function now always returns an error if size/checksum don't match: we let the caller decide what to do with the result. In addition, most of the logging is also moved to the caller. We just keep logging for unexpected errors and a bit of debug at loglevel INFO. Signe

[PATCH opkg 4/5] download: purge cached packages that have incorrect checksum

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez Before using a package from the cache, verify its size and checksum against a package index, and delete the package from the cache if they don't match. The install process will then proceed to download the "fixed" package as usual. This allows to cope with remote packages

[PATCH opkg 0/5] Purge packages from cache when they have incorrect checksum

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez The motivation of this patch series is to fix FS#2690. Because packages are continuously rebuilt, the ImageBuilder ends up with old packages in its cache, and fails because checksums don't match with the new package index from the download server. The approach to solve th

[PATCH opkg 1/5] download: remove compatibility with old cache naming scheme

2020-08-24 Thread Baptiste Jonglez
From: Baptiste Jonglez A long time ago, the name of cached files was derived from the source URL. This was changed in 2011 with d46db43e21 ("Don't include the source URI in the cached filename.") Some compatibility code was left behind: even today, we are still trying to read from the old filena

[PATCH] toolchain/binutils: add binutils 2.35

2020-08-24 Thread DENG Qingfang
Add binutils version 2.35 Signed-off-by: DENG Qingfang --- toolchain/binutils/Config.in | 4 ++ toolchain/binutils/Config.version | 4 ++ toolchain/binutils/Makefile | 4 ++ .../2.35/300-001_ld_makefile_patch.patch | 22 +++ .../400-

[PATCH] toolchain: Update GCC 10 to version 10.2.0

2020-08-24 Thread DENG Qingfang
Signed-off-by: DENG Qingfang --- toolchain/gcc/Config.version | 2 +- toolchain/gcc/common.mk | 4 ++-- .../gcc/patches/{10.1.0 => 10.2.0}/002-case_insensitive.patch | 0 .../gcc/patches/{10.1.0 => 10.2.0}/010-documentation.pa

Re: [PATCH] tools: always create $STAGING_DIR/usr/{include,lib}

2020-08-24 Thread Jo-Philipp Wich
Hi, > Isn't that breaking some packages which currently use `/usr/lib`? > > packages.git/boost: > https://github.com/openwrt/packages/blob/e2e152da599ceeacf06b4a045b5b391107d194df/libs/boost/Makefile#L485 I don't see how. The code you quoted creates the destination directory directly in the line