[PATCH 1/2] mtd-utils: Update to version 2.1.2

2020-08-25 Thread Hauke Mehrtens
: Hauke Mehrtens --- package/utils/mtd-utils/Makefile | 4 ++-- package/utils/mtd-utils/patches/130-lzma_jffs2.patch | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/utils/mtd-utils/Makefile b/package/utils/mtd-utils/Makefile index 8acd46747e6c

[PATCH 2/2] tools: mtd-utils: Update to version 2.1.2

2020-08-25 Thread Hauke Mehrtens
: Hauke Mehrtens --- tools/mtd-utils/Makefile | 4 ++-- tools/mtd-utils/patches/100-sscanf_fix.patch | 2 +- tools/mtd-utils/patches/110-portability.patch| 12 ++-- tools/mtd-utils/patches/130-lzma_jffs2.patch | 2 +- ...ubigen-add

Re: [PATCH v2] wolfssl: Update to version 4.5.0

2020-08-27 Thread Hauke Mehrtens
On 8/27/20 9:25 AM, Andre Heider wrote: > Hi, > > On 26/08/2020 00:19, Hauke Mehrtens wrote: >> This fixes the following security problems: >> * In earlier versions of wolfSSL there exists a potential man in the >>    middle attack on TLS 1.3 clients. >> * De

Re: Upcoming 19.07.4 and 18.07.9 stable releases

2020-08-28 Thread Hauke Mehrtens
On 7/30/20 8:57 PM, Baptiste Jonglez wrote: > Hi, > > New point releases for 19.07 and 18.06 are starting to be overdue, and I > would like to help 19.07.4 and 18.06.9 get released somewhere around > mid-August. > > The main motivation are fixes for a libubox regression and for the musl > synchro

[PATCH 18.06] mac80211: Backport fixes for Kr00k vulnerabilities

2020-08-28 Thread Hauke Mehrtens
This backports some fixes from kernel 5.6 and 4.14.175. Signed-off-by: Hauke Mehrtens --- ...ation-unauthorized-before-key-remova.patch | 42 +++ ...ort-authorization-in-the-ieee80211_t.patch | 54 +++ ...-fix-authentication-with-iwlwifi-mvm.patch | 34

Re: [PATCH 18.06] mac80211: Backport fixes for Kr00k vulnerabilities

2020-08-29 Thread Hauke Mehrtens
On 8/29/20 2:02 PM, Baptiste Jonglez wrote: > On 28-08-20, Hauke Mehrtens wrote: >> This backports some fixes from kernel 5.6 and 4.14.175. > > Thanks, I will give this a try. > > It's missing two fixes though: > > 5981fe5b0529 ("mac80211: fix misplaced w

[PATCH] mac80211: Fix potential endless loop

2020-08-29 Thread Hauke Mehrtens
Backport a fix from kernel 5.8.3. Signed-off-by: Hauke Mehrtens --- ...11-fix-misplaced-while-instead-of-if.patch | 31 +++ 1 file changed, 31 insertions(+) create mode 100644 package/kernel/mac80211/patches/subsys/370-mac80211-fix-misplaced-while-instead-of-if.patch diff

[PATCH] uhttpd: Increase default certificate validate from 2 to 10 years

2020-08-29 Thread Hauke Mehrtens
. Modern browser only restrict the validity of certificates signed by globally trusted CAs, not self signed certificates. Signed-off-by: Hauke Mehrtens --- package/network/services/uhttpd/files/uhttpd.config | 2 +- package/network/services/uhttpd/files/uhttpd.init | 2 +- 2 files changed, 2

[PATCH] ethtool: Update to version 5.8

2020-08-29 Thread Hauke Mehrtens
Signed-off-by: Hauke Mehrtens --- package/network/utils/ethtool/Makefile | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/package/network/utils/ethtool/Makefile b/package/network/utils/ethtool/Makefile index c2f92a4ed9fc..6547eee9a5a7 100644 --- a/package/network/utils

[PATCH] strace: Update to version 5.8

2020-08-29 Thread Hauke Mehrtens
The added patch fixes a build problem in the x86/64 target. Signed-off-by: Hauke Mehrtens --- package/devel/strace/Makefile | 4 +-- ...10-v4l2-Fix-compile-of-mpers-m32-API.patch | 31 +++ 2 files changed, 33 insertions(+), 2 deletions(-) create mode 100644

[PATCH] iproute2: Update to version 5.8

2020-08-29 Thread Hauke Mehrtens
Signed-off-by: Hauke Mehrtens --- package/network/utils/iproute2/Makefile | 6 +-- .../001-devlink-update-include-files.patch| 46 --- .../002-configure-support-ipset-v7.patch | 32 - .../patches/115-add-config-xtlibdir.patch | 2 +- .../utils

Re: [RFC] self-signed certificates for LuCI

2020-08-30 Thread Hauke Mehrtens
On 8/30/20 9:57 AM, Paul Spooren wrote: > Hi team, > > I recently rewrote px5g[1] to use WolfSSL instead of MbedTLS, as the > former will be included in OpenWrt 20.x per default. > > Both implementations support the generation of RSA and ECC keys, where > uhttpd currently defaults to RSA with 204

Re: [PATCH] uhttpd: Increase default certificate validate from 2 to 10 years

2020-08-30 Thread Hauke Mehrtens
On 8/30/20 3:09 PM, Adrian Schmutzler wrote: > Hi Hauke, > >> -Original Message- >> From: openwrt-devel [mailto:openwrt-devel-boun...@lists.openwrt.org] >> On Behalf Of Hauke Mehrtens >> Sent: Samstag, 29. August 2020 20:33 >> To: openwrt-devel@lis

[PATCH v2] strace: Update to version 5.8

2020-08-30 Thread Hauke Mehrtens
OpenWrt targets for example. Just deactivate it for ARM64 too. Signed-off-by: Hauke Mehrtens --- package/devel/strace/Makefile | 11 --- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/package/devel/strace/Makefile b/package/devel/strace/Makefile index cdf4067ad2b2

Re: [PATCH] umdns: fix compilation with GCC 10

2020-08-31 Thread Hauke Mehrtens
On 8/31/20 11:35 AM, Petr Štetiar wrote: > Rosen Penev [2020-08-31 02:06:50]: > >> I compile with target GCC 10, not host. > > Then as you can see its probably some issue with GCC 10 for that target (which > one is that?) or something like that, because I'm not able to trigger that > with my GCC

Re: [RFC] self-signed certificates for LuCI

2020-08-31 Thread Hauke Mehrtens
On 8/31/20 8:34 PM, Michael Richardson wrote: > > Stijn Tintel wrote: > >> The question came up if we really want RSA certificates for LuCI or if > >> the faster and "more modern" ECC P-256 wouldn't be a better choice. > >> > >> If px5g is added to the next release, certificates a

[PATCH] iw: Update to version 5.8

2020-09-01 Thread Hauke Mehrtens
The ipk sizes for mips_24Kc change like this: old: iw_5.4-1_mips_24kc.ipk 35.767 iw-full_5.4-1_mips_24kc.ipk 68.423 new: iw_5.8-1_mips_24kc.ipk 36.883 iw-full_5.8-1_mips_24kc.ipk 71.992 Signed-off-by: Hauke Mehrtens --- package/network/utils/iw/Makefile

[PATCH] wolfssl: Activate link time optimization (LTO)

2020-09-01 Thread Hauke Mehrtens
The ipk sizes for mips_24Kc change like this: old: libwolfssl24_4.5.0-stable-1_mips_24kc.ipk 391.545 new: libwolfssl24_4.5.0-stable-2_mips_24kc.ipk 387.439 Signed-off-by: Hauke Mehrtens --- package/libs/wolfssl/Makefile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions

[PATCH 3/6] nftables: Update to version 0.9.6

2020-09-01 Thread Hauke Mehrtens
The ipk sizes for mips_24Kc change like this: old: nftables-json_0.9.3-1_mips_24kc.ipk 220.262 nftables-nojson_0.9.3-1_mips_24kc.ipk 192.937 new: nftables-json_0.9.6-1_mips_24kc.ipk 231.968 nftables-nojson_0.9.6-1_mips_24kc.ipk 204.731 Signed-off-by: Hauke Mehrtens --- package

[PATCH 4/6] jansson: Activate link time optimization (LTO)

2020-09-01 Thread Hauke Mehrtens
The ipk sizes for mips_24Kc change like this: old: jansson4_2.13.1-1_mips_24kc.ipk 19.171 new: jansson4_2.13.1-2_mips_24kc.ipk 18.936 Signed-off-by: Hauke Mehrtens --- package/libs/jansson/Makefile | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/package/libs/jansson

[PATCH 6/6] nftables: Activate link time optimization (LTO)

2020-09-01 Thread Hauke Mehrtens
The ipk sizes for mips_24Kc change like this: old: nftables-json_0.9.6-1_mips_24kc.ipk 231.968 nftables-nojson_0.9.6-1_mips_24kc.ipk 204.731 new: nftables-json_0.9.6-2_mips_24kc.ipk 221.894 nftables-nojson_0.9.6-2_mips_24kc.ipk 193.932 Signed-off-by: Hauke Mehrtens --- package

[PATCH 2/6] libnftnl: Update to version 1.1.7

2020-09-01 Thread Hauke Mehrtens
The ipk sizes for mips_24Kc change like this: old: libnftnl12_1.1.5-1_mips_24kc.ipk46.252 new: libnftnl12_1.1.7-1_mips_24kc.ipk47.459 Signed-off-by: Hauke Mehrtens --- package/libs/libnftnl/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package

[PATCH 5/6] libnftnl: Activate link time optimization (LTO)

2020-09-01 Thread Hauke Mehrtens
The ipk sizes for mips_24Kc change like this: old: libnftnl12_1.1.7-1_mips_24kc.ipk47.459 new: libnftnl12_1.1.7-2_mips_24kc.ipk45.742 Signed-off-by: Hauke Mehrtens --- package/libs/libnftnl/Makefile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a

[PATCH 1/6] jansson: Update to version 2.13.1

2020-09-01 Thread Hauke Mehrtens
This also sets the ABI_VERSION as this is a versioned shared library. The ipk sizes for mips_24Kc change like this: old: jansson_2.12-1_mips_24kc.ipk18.692 new: jansson4_2.13.1-1_mips_24kc.ipk 19.171 Signed-off-by: Hauke Mehrtens --- package/libs/jansson/Makefile | 5 +++-- 1 file changed

Re: [PATCH] uhttpd: Increase default certificate validate from 2 to 10 years

2020-09-01 Thread Hauke Mehrtens
On 9/1/20 12:45 AM, Yousong Zhou wrote: > It's worth mentioning that recent versions of macos since 10.15 have a > restriction on certificate validity period, self-signed or not. It's > a strong restriction that the browser ui will have no buttons or knobs > to bypass the certificate validation, r

Re: [PATCH] ath10k-ct: update to version 2018-08-25

2020-09-02 Thread Hauke Mehrtens
On 9/2/20 1:14 AM, Stijn Tintel wrote: > And since we are using mac80211 5.8, let's also switch the ath10k-ct > driver to the new 5.8 version. > > Signed-off-by: Stijn Tintel > --- > package/kernel/ath10k-ct/Makefile | 10 +- > .../164-ath10k-commit-rates-from-mac802

Re: [PATCH] uhttpd: Increase default certificate validate from 2 to 10 years

2020-09-02 Thread Hauke Mehrtens
On 9/2/20 12:05 PM, Yousong Zhou wrote: > On Wed, 2 Sep 2020 at 01:32, Hauke Mehrtens wrote: >> >> On 9/1/20 12:45 AM, Yousong Zhou wrote: >>> It's worth mentioning that recent versions of macos since 10.15 have a >>> restriction on certificate validity p

Re: Upcoming 19.07.4 and 18.07.9 stable releases

2020-09-06 Thread Hauke Mehrtens
On 9/5/20 12:28 AM, Baptiste Jonglez wrote: > On 03-09-20, Nick Lowe wrote: >> It seems there is an important ath10k patch included in the 4.4.235, >> 4.9.235, 4.14.196 and 4.19.143, 5.4.62 LTS kernels that is applicable >> for OpenWRT users who are not using an up to date CT driver with Wave >> 2

WBMv13 goes virutal - please vote on your preferred date!

2020-09-23 Thread Hauke Mehrtens
Hi OpenWrt community, In the beginning of the year we planned to have OpenWrt talks at the Wireless Battle Mesh, but this will not happen as an in person event this year because of Corona. The Wireless Battle Mesh goes virtual this year! OpenWrt would also like to participate in this virtual WBM

[PATCH uci 3/4] ucimap: Check return of malloc()

2020-10-03 Thread Hauke Mehrtens
Check the return value of malloc() before accessing it. Signed-off-by: Hauke Mehrtens --- ucimap.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/ucimap.c b/ucimap.c index 7c2b043..c46cf45 100644 --- a/ucimap.c +++ b/ucimap.c @@ -893,14 +893,16 @@ ucimap_parse(struct

[PATCH uci 4/4] Replace malloc() + memset() with calloc()

2020-10-03 Thread Hauke Mehrtens
Instead of manually clearing the memory with memset() use calloc(). Signed-off-by: Hauke Mehrtens --- cli.c| 3 +-- libuci.c | 3 +-- ucimap.c | 6 ++ util.c | 3 +-- 4 files changed, 5 insertions(+), 10 deletions(-) diff --git a/cli.c b/cli.c index 6ba97ea..267437d 100644 --- a

[PATCH uci 2/4] file: Check buffer size after strtok()

2020-10-03 Thread Hauke Mehrtens
in uninitialized memory and later over the allocated buffer. Fix this problem by storing how long the line we read was and check if we would read over the end of the string here. This also adds the input which detected this crash to the corpus of the fuzzer. Signed-off-by: Hauke Mehrtens --- fil

[PATCH uci 0/4] uci: Fix multiple bugs

2020-10-03 Thread Hauke Mehrtens
This is based on Petr's "[PATCH uci 0/6] fixes and improvements" patches. This fixes an additional heap read overflow and some other problems I discovered by analyzing and fixing the problem. Hauke Mehrtens (4): file: use size_t for position and pointer file: Check buffer si

[PATCH uci 1/4] file: use size_t for position and pointer

2020-10-03 Thread Hauke Mehrtens
The bufsz variable is used to store the size of the buf memory region and pos is used to index a position in this memory. Use size_t for these variables in the internal handling instaed of int to not break with big files. Signed-off-by: Hauke Mehrtens --- file.c | 14

Re: [PATCH uci 4/6] tests: cram: add uci import testing on fuzzer corpus

2020-10-04 Thread Hauke Mehrtens
On 10/3/20 9:48 AM, Petr Štetiar wrote: > Use valgrind and uci cli compiled with undefined, address and leak > sanitizers. > diff --git a/tests/cram/test-san_uci_import.t > b/tests/cram/test-san_uci_import.t > new file mode 100644 > index ..7faed221f93e > --- /dev/null > +++ b/tes

Re: [PATCH uci 1/6] tests: add libFuzzer based fuzzing

2020-10-04 Thread Hauke Mehrtens
On 10/3/20 9:48 AM, Petr Štetiar wrote: > LibFuzzer is in-process, coverage-guided, evolutionary fuzzing engine. > > LibFuzzer is linked with the library under test, and feeds fuzzed inputs > to the library via a specific fuzzing entrypoint (aka "target > function"); the fuzzer then tracks which a

[PATCH uci v2 4/4] Replace malloc() + memset() with calloc()

2020-10-04 Thread Hauke Mehrtens
Instead of manually clearing the memory with memset() use calloc(). Signed-off-by: Hauke Mehrtens --- cli.c| 3 +-- libuci.c | 3 +-- ucimap.c | 6 ++ util.c | 3 +-- 4 files changed, 5 insertions(+), 10 deletions(-) diff --git a/cli.c b/cli.c index 6ba97ea..267437d 100644 --- a

[PATCH uci v2 3/4] ucimap: Check return of malloc()

2020-10-04 Thread Hauke Mehrtens
Check the return value of malloc() before accessing it. Signed-off-by: Hauke Mehrtens --- ucimap.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/ucimap.c b/ucimap.c index 7c2b043..c46cf45 100644 --- a/ucimap.c +++ b/ucimap.c @@ -893,14 +893,16 @@ ucimap_parse(struct

[PATCH uci v2 0/4] uci: Fix multiple bugs

2020-10-04 Thread Hauke Mehrtens
This is based on Petr's "[PATCH uci 0/6] fixes and improvements" patches. This fixes an additional heap read overflow and some other problems I discovered by analyzing and fixing the problem. Changelog: v1: - only "file: Check buffer size after strtok()" Hauke Mehrten

[PATCH uci v2 2/4] file: Check buffer size after strtok()

2020-10-04 Thread Hauke Mehrtens
in uninitialized memory and later over the allocated buffer. Fix this problem by storing how long the line we read was and check if we would read over the end of the string here. This also adds the input which detected this crash to the corpus of the fuzzer. Signed-off-by: Hauke Mehrtens --- Changelog:

[PATCH uci v2 1/4] file: use size_t for position and pointer

2020-10-04 Thread Hauke Mehrtens
The bufsz variable is used to store the size of the buf memory region and pos is used to index a position in this memory. Use size_t for these variables in the internal handling instaed of int to not break with big files. Signed-off-by: Hauke Mehrtens --- file.c | 14

Re: [PATCH uci 4/6] tests: cram: add uci import testing on fuzzer corpus

2020-10-05 Thread Hauke Mehrtens
On 10/5/20 2:03 PM, Petr Štetiar wrote: > Hauke Mehrtens [2020-10-04 17:10:59]: > >> On 10/3/20 9:48 AM, Petr Štetiar wrote: >>> Use valgrind and uci cli compiled with undefined, address and leak >>> sanitizers. >> >>> diff --git a/tests/cram

[PATCH 3/4] kernel: move CONFIG_F2FS_CHECK_FS to generic kernel config

2020-10-10 Thread Hauke Mehrtens
Signed-off-by: Hauke Mehrtens --- package/kernel/linux/modules/fs.mk| 5 + target/linux/apm821xx/sata/config-default | 1 - target/linux/armvirt/config-4.19 | 1 - target/linux/armvirt/config-5.4 | 1 - target/linux/generic/config-4.19 | 1 + target/linux

[PATCH 2/4] kernel: Move CONFIG_F2FS_FS_SECURITY to generic kernel config

2020-10-10 Thread Hauke Mehrtens
Move the CONFIG_F2FS_FS_SECURITY kernel configuration option to the generic kernel configuration. Signed-off-by: Hauke Mehrtens --- package/kernel/linux/modules/fs.mk| 1 - target/linux/apm821xx/sata/config-default | 1 - target/linux/armvirt/config-4.19 | 1 - target/linux

[PATCH 1/4] kernel: Remove 2FS_FS_XATTR and F2FS_STAT_FS symbols from target configs

2020-10-10 Thread Hauke Mehrtens
This config option was moved to the generic kernel configuration. Fixes: ab1bd576562b ("kernel: move F2FS_FS_XATTR and F2FS_STAT_FS symbols to generic") Signed-off-by: Hauke Mehrtens --- package/kernel/linux/modules/fs.mk| 2 -- target/linux/apm821xx/sata/config-default | 1

[PATCH 4/4] kernel: Move CONFIG_*_FS_XATTR to generic kernel config

2020-10-10 Thread Hauke Mehrtens
This option is now activated in the generic kernel configuration, no need to do it for a specific package. Signed-off-by: Hauke Mehrtens --- package/kernel/linux/modules/fs.mk | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/package/kernel/linux/modules/fs.mk b/package

Re: [PATCH] mvebu: enable the vDSO

2020-10-10 Thread Hauke Mehrtens
On 10/7/20 8:20 PM, Rui Salvaterra wrote: The vDSO is used to accelerate some syscalls. It's working fine on other ARM targets (e.g. sunxi), let's also enable it on mvebu. Signed-off-by: Rui Salvaterra --- target/linux/mvebu/config-5.4 | 1 + 1 file changed, 1 insertion(+) Hi, I would pre

Re: [PATCH 2/2] target/linux: disable legacy and debug cifs options

2020-10-10 Thread Hauke Mehrtens
On 9/15/20 3:33 AM, Rosen Penev wrote: CIFS_ALLOW_INSECURE_LEGACY is only relevant for mounting shares that are provided by old CIFS servers. It is not relevant to the Samba or ksmbd package that provide a server. There are many old SMB servers running which do not support SMB 2.1 or later. By

[PATCH] build: Extract trusted-firmware-a.mk

2020-10-11 Thread Hauke Mehrtens
activate the build when build bot creates images. Signed-off-by: Hauke Mehrtens --- include/trusted-firmware-a.mk | 93 +++ .../boot/arm-trusted-firmware-mvebu/Makefile | 158 -- 2 files changed, 164 insertions(+), 87 deletions(-) create mode 100644

Re: Monocultures are bad [Was: Re: [PATCH] build: Extract trusted-firmware-a.mk]

2020-10-12 Thread Hauke Mehrtens
On 10/12/20 8:45 PM, Tomasz Maciej Nowak wrote: Hi. W dniu 12.10.2020 o 16:32, Andre Heider pisze: On 12/10/2020 12:21, Petr Štetiar wrote: Hauke Mehrtens [2020-10-11 20:41:21]: Hi,   (I've expressed this already in my initial review[1] which was not addressed    and pushed a

Battlemesh v13 Virtual Global Editions -- 14-15 November 2020

2020-10-14 Thread Hauke Mehrtens
Hi OpenWrt community, The Battlemesh v13 Virtual Global Editions is officially announced now! We would like to get some OpenWrt talks at this event, please participate and also propose some presentations. Hauke Forwarded Message Subject: [Battlemesh] Battlemesh v13 Virtu

[PATCH 1/5] toolchain: gdb: Update to version 10.1

2020-10-28 Thread Hauke Mehrtens
gdb 10.1 adds many new features for example gdbserver support for - ARC GNU/Linux - RISC-V GNU/Linux Removed this patch, because similar changes are now integrated upstream: toolchain/gdb/patches/100-no_extern_inline.patch Signed-off-by: Hauke Mehrtens --- toolchain/gdb/Makefile

[PATCH 5/5] gdb: Disable tests

2020-10-28 Thread Hauke Mehrtens
We do not use the tests or ubsan in our gdb package. Signed-off-by: Hauke Mehrtens --- package/devel/gdb/Makefile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/package/devel/gdb/Makefile b/package/devel/gdb/Makefile index 50d43e9fc193..e824f09e8fd0 100644 --- a/package/devel/gdb

[PATCH 4/5] gdb: Always use system zlib

2020-10-28 Thread Hauke Mehrtens
Instead of using the system zlib when the package is selected and using the internal zlib if it is not selected in OpenWrt, just activate it always. This should make the package more deterministic. Signed-off-by: Hauke Mehrtens --- package/devel/gdb/Makefile | 3 ++- 1 file changed, 2

[PATCH 3/5] gdb: Update to version 10.1

2020-10-28 Thread Hauke Mehrtens
gdb 10.1 adds many new features for example gdbserver support for - ARC GNU/Linux - RISC-V GNU/Linux Signed-off-by: Hauke Mehrtens --- package/devel/gdb/Makefile | 6 +++--- .../patches/001-gdb-pr14523-mips-signal-number.patch | 4 ++-- package/devel/gdb/patches

[PATCH 2/5] toolchain: gdb: Disable tests

2020-10-28 Thread Hauke Mehrtens
Instead of patching the tests out, just remove them with a configure option. No files were generates in the testsuite and unit-test directories. Signed-off-by: Hauke Mehrtens --- toolchain/gdb/Makefile | 2 ++ toolchain/gdb/patches/110-no_testsuite.patch | 21

[PATCH ustream-ssl] ustream-mbedtls: Use getrandom() instead of /dev/urandom

2023-01-28 Thread Hauke Mehrtens
Instead of keeping a file descriptor open just use the getrandom syscall to get random data. This is supported by the musl, glibc and Linux for some time now. This also improves the error handling in case this function returns not as many bytes as expected. Signed-off-by: Hauke Mehrtens

Re: [PATCH ustream-ssl] ustream-mbedtls: Use getrandom() instead of /dev/urandom

2023-01-29 Thread Hauke Mehrtens
On 1/29/23 15:13, Torsten Duwe wrote: On Sat, 28 Jan 2023 19:41:13 +0100 Hauke Mehrtens wrote: Instead of keeping a file descriptor open just use the getrandom syscall to get random data. This is supported by the musl, glibc and Linux for some time now. This also improves the error handling

Re: [PATCH v2] ramips: add support for Huasifei WS1208V2

2023-02-03 Thread Hauke Mehrtens
On 1/27/23 14:57, arinc9.u...@gmail.com wrote: From: Arınç ÜNAL The Huasifei WS1208V2 is an AC1200 router featuring 5 Ethernet ports with a Quectel RM520N-GL cellular modem which supports QMI and MBIM modes. Specifications: - MT7621AT, 256 MiB RAM, 16 MiB SPI Flash - MT7603EN 2.4 GHz & MT7612E

Re: Release Goals 23.x?

2023-02-05 Thread Hauke Mehrtens
On 1/24/23 20:48, Nick wrote: Hey, We have testing-support for 5.15 in almost all targets, so we may be able to release it shortly [0]? WIP 6.1 support is already underway in OpenWrt [1]. We are using GCC 12 as our default compiler version[2]. Binutils has been updated to version 2.40. Could w

Re: [PATCH] bcm47xx: relocate LZMA loader #2

2023-02-08 Thread Hauke Mehrtens
E1000 V2.1) 3. BCM47186B0 (Luxul XWR-600) It isn't needed but also doesn't break: 1. BCM5354 (Asus WL-500gP V2) Ref: 4cd97e476089 ("bcm47xx: relocate LZMA loader") Cc: Hauke Mehrtens Signed-off-by: Rafał Miłecki Acked-by: Hauke Mehrtens Maybe we should increase this even

[PATCH netifd 0/5] Fix some compiler warnings

2023-02-19 Thread Hauke Mehrtens
This fixes some compiler warnings and activates -Wextra by default now. Hauke Mehrtens (5): netifd: bridge: Fix format string position netifd: Fix multiple -Wsign-compare warnings netifd: Do not return values in void function netifd: Explicitly zero initialize variables netifd: Activate

[PATCH netifd 1/5] netifd: bridge: Fix format string position

2023-02-19 Thread Hauke Mehrtens
This fixes the following compile error: error: format not a string literal, argument types not checked [-Werror=format-nonliteral] blobmsg_printf() has the following signature: int blobmsg_printf(struct blob_buf *buf, const char *name, const char *format, ...) Signed-off-by: Hauke Mehrtens

[PATCH netifd 3/5] netifd: Do not return values in void function

2023-02-19 Thread Hauke Mehrtens
These two functions return void, do not try to return a parameter. Signed-off-by: Hauke Mehrtens --- interface-event.c | 6 -- main.c| 3 ++- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/interface-event.c b/interface-event.c index a40f6dc..b03bfbc 100644 --- a

[PATCH netifd 5/5] netifd: Activate -Wextra compile warnings

2023-02-19 Thread Hauke Mehrtens
This activates some more compile warnings. -pedantic is not yet activated, then we see too many errors which I do not know how to mitigate. Signed-off-by: Hauke Mehrtens --- CMakeLists.txt | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/CMakeLists.txt b/CMakeLists.txt

[PATCH netifd 4/5] netifd: Explicitly zero initialize variables

2023-02-19 Thread Hauke Mehrtens
The -pedantic option was complaining about the old initialization and prefers if it is explicitly initialized to zero. Signed-off-by: Hauke Mehrtens --- proto.c| 2 +- system-linux.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/proto.c b/proto.c index 01473f2

[PATCH netifd 2/5] netifd: Fix multiple -Wsign-compare warnings

2023-02-19 Thread Hauke Mehrtens
ever out of range of int. Signed-off-by: Hauke Mehrtens --- bonding.c | 2 +- handler.c | 5 +++-- interface-ip.c | 2 +- main.c | 4 ++-- system-linux.c | 21 - ubus.c | 4 ++-- vlan.c | 4 ++-- wireless.c | 2 +- 8 files changed,

Re: [PATCH ustream-ssl] ustream-mbedtls: Use getrandom() instead of /dev/urandom

2023-02-19 Thread Hauke Mehrtens
Hi Torsten, Sorry for the late answer, I forgot about this mail thread. On 1/30/23 10:57, Torsten Duwe wrote: Hi Hauke! On Sun, 29 Jan 2023 17:08:38 +0100 Hauke Mehrtens wrote: drivers/char/random.c lines 1240- ... * Reading from /dev/urandom has the same functionality as calling

[PATCH ustream-ssl v2] ustream-mbedtls: Use getrandom() instead of /dev/urandom

2023-02-19 Thread Hauke Mehrtens
Instead of keeping a file descriptor open just use the getrandom syscall to get random data. This is supported by the musl, glibc and Linux for some time now. This also improves the error handling in case this function returns not as many bytes as expected. Signed-off-by: Hauke Mehrtens

Re: [PATCH] kernel: replace out-of-tree hwmon-gsc driver with in-tree

2023-02-26 Thread Hauke Mehrtens
On 2/18/23 01:24, Tim Harvey wrote: The Gateworks GSC drivers were merged in Linux v5.8: - remove the old out-of-tree module - add configuration for the in-tree modules Signed-off-by: Tim Harvey --- package/kernel/hwmon-gsc/Makefile | 28 --- package/kernel/hwmon-gsc/src/Makefile | 1

Re: [PATCH] octeontx: add f2fs and ext4 support

2023-02-26 Thread Hauke Mehrtens
On 2/22/23 00:08, Tim Harvey wrote: Add both ext4 and f2fs support for overlayfs. The fstools mount_root application will choose f2fs if the overlay volume space available exceeds 100MB, otherwise ext4 is used. Signed-off-by: Tim Harvey --- target/linux/octeontx/Makefile| 3 ++- target/l

Re: [PATCH] hostapd: add support for unicast beacons

2023-02-26 Thread Hauke Mehrtens
On 1/9/23 14:47, Raphaël Mélotte wrote: Also refresh patches. Upstream status: https://patchwork.ozlabs.org/project/hostap/patch/20230105200945.761324-1-raphael.melo...@mind.be/ Signed-off-by: Raphaël Mélotte --- .../620-add-support-for-unicast-beacons.patch | 70 +++ .../ho

Re: [PATCH] hostapd: add option to ignore data frames from unknown stations

2023-02-26 Thread Hauke Mehrtens
On 1/26/23 11:04, Raphaël Mélotte wrote: Also refresh patches. Upstream hostapd status: https://patchwork.ozlabs.org/project/hostap/patch/20230126091539.2325752-1-raphael.melo...@mind.be/ Signed-off-by: Raphaël Mélotte --- ...-ignore-data-frames-from-unknown-sta.patch | 72 ++

Re: [PATCH] sunxi: enable CONFIG_NVMEM_SYSFS

2023-02-26 Thread Hauke Mehrtens
On 12/30/22 17:47, Robert Marko wrote: On Fri, 30 Dec 2022 at 03:41, Jan-Niklas Burfeind wrote: in both the stable and the testing kernel h2+/h3/h5 devices have a Secure ID that can be read from `/sys/bus/nvmem/devices/sunxi-sid0/nvmem`. Enabling CONFIG_NVMEM_SYSFS grants sysfs access from us

Re: [PATCH] mt7621: move uboot-envtools to DEFAULT_PACKAGES

2023-02-26 Thread Hauke Mehrtens
On 11/17/22 18:21, Bjørn Mork wrote: Several devices depend on fw_printenv during sysupgrade. Make sure it always is present in all images, including initramfs images built by the buildbots. Fixes: 2449a632084b ("ramips: mt7621: Add support for ZyXEL NR7101") Signed-off-by: Bjørn Mork --- ta

Re: [PATCH] arm64: only enable BHI mitigation on affected CPUs

2023-02-26 Thread Hauke Mehrtens
On 11/7/22 07:36, DENG Qingfang wrote: When kernel 5.15 support was added, a new config symbol for ARM64 BHI mitigation was enabled, which was also later backported to 5.10. However, only a few CPUs are affected by BHI [0]. Disable it by default, and enable it only on Cortex-A72 targets. [0] htt

Re: [PATCH] octeontx: add f2fs and ext4 support

2023-02-26 Thread Hauke Mehrtens
On 2/26/23 18:26, Hauke Mehrtens wrote: On 2/22/23 00:08, Tim Harvey wrote: Add both ext4 and f2fs support for overlayfs. The fstools mount_root application will choose f2fs if the overlay volume space available exceeds 100MB, otherwise ext4 is used. Signed-off-by: Tim Harvey ---   target

Re: [PATCH v2] mt7621: move uboot-envtools to DEFAULT_PACKAGES

2023-02-27 Thread Hauke Mehrtens
On 2/27/23 13:38, Bjørn Mork wrote: Several devices depend on fw_printenv during sysupgrade. Make sure it always is present in all images, including initramfs images built by the buildbots. Fixes: 2449a632084b ("ramips: mt7621: Add support for ZyXEL NR7101") Signed-off-by: Bjørn Mork --- Chang

Re: [PATCH v2] mvebu: add support for Fortinet FortiGate 50E

2023-03-05 Thread Hauke Mehrtens
On 3/1/23 17:01, INAGAKI Hiroshi wrote: Fortinet FortiGate 50E (FG-50E) is a UTM, based on Armada 385 (88F6820). Notes: - All "SPEED" LEDs(Green/Amber) of LAN and 1000M "SPEED" LEDs(Green) of WAN1/2 are connected to GPIO expander. There is no way to indicate link speed of networkin

Re: [ubus PATCH] libubus: remove global variables

2023-03-05 Thread Hauke Mehrtens
Hi Simon, On 1/5/23 15:30, Simon Tate wrote: Remove the use of global blob_buf and blob_attr variables to allow for better thread safety with a ctx per thread on client invoke and sends. Add the same variables to within each calling function's scope, encapsulating the memory usage there. Fixes

Re: [PATCH uqmi] fix uloop initialization

2023-03-05 Thread Hauke Mehrtens
Hi Leon, Please add a prefix for which application with patch is next time. git format-patch origin/master --subject-prefix="PATCH uqmi" On 11/27/22 09:38, Leon M. Busch-George wrote: uloop_init is already called in main. uloop_done is just missing. Signed-off-by: Leon M. Busch-George ---

OpenWrt @ Battlemesh

2023-03-07 Thread Hauke Mehrtens
Hi, Wireless Battlemesh v15 is coming up in May 8-14. https://battlemesh.org/BattleMeshV15 Battlemesh will take place this year in Calafou, Vallbona d'Anoia, Barcelona. We were thinking to do a OpenWrt meeting in parallel or before/after Battlemesh. I would like to know if it makes sense to or

[PATCH libubox 1/2] fuzz: Compile using libstd++

2023-03-08 Thread Hauke Mehrtens
It looks like libfuzzer is compiled using libstd++ on Debian Bookworm and not libc++. Using libc++ causes linking errors, use libstd++ instead. Signed-off-by: Hauke Mehrtens --- tests/fuzz/CMakeLists.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fuzz

[PATCH libubox 2/2] CI: Add github action

2023-03-08 Thread Hauke Mehrtens
Add a github action to build libubox and then execute the tests. clang 14 generates debug informations in DWARF 5 format, but valgrind 19.0 does not support that. Install valgrind 20.0 from experimental which supports it. Signed-off-by: Hauke Mehrtens --- I created a github pull request with

[PATCH uci 1/2] fuzz: Compile using libstd++

2023-03-08 Thread Hauke Mehrtens
It looks like libfuzzer is compiled using libstd++ on Debian Bookworm and not libc++. Using libc++ causes linking errors, use libstd++ instead. Signed-off-by: Hauke Mehrtens --- tests/fuzz/CMakeLists.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fuzz

[PATCH uci 2/2] CI: Add github action

2023-03-08 Thread Hauke Mehrtens
supports it. Signed-off-by: Hauke Mehrtens --- I created a github pull request with these changes too: https://github.com/openwrt/libubox/pull/2 .github/workflows/test.yml | 83 ++ 1 file changed, 83 insertions(+) create mode 100644 .github/workflows

Re: [PATCH uci 1/2] fuzz: Compile using libstd++

2023-03-12 Thread Hauke Mehrtens
On 3/11/23 10:01, Petr Štetiar wrote: Hauke Mehrtens [2023-03-09 00:18:09]: Hi, It looks like libfuzzer is compiled using libstd++ on Debian Bookworm and not libc++. Using libc++ causes linking errors, use libstd++ instead. so maybe this should be detected and decided at runtime? Otherwise

Re: Reusable Github Actions and containers [Was: Re: [PATCH uci 2/2] CI: Add github action]

2023-03-12 Thread Hauke Mehrtens
Hi Petr, thanks for the comments. These patches are my minimal version to get something running. I will try to extend it in the new few weeks. On 3/11/23 09:57, Petr Štetiar wrote: Hauke Mehrtens [2023-03-09 00:18:10]: Hi, thanks for taking care, LGTM for a start. I'll just provi

Re: [libnl-tiny PATCH] attr: add NLA_S8

2023-03-19 Thread Hauke Mehrtens
On 3/15/23 14:37, Nick Hainke wrote: NLA_S8 is used by newer hostapd versions. Signed-off-by: Nick Hainke --- attr.c | 1 + include/netlink/attr.h | 35 +++ 2 files changed, 36 insertions(+) diff --git a/attr.c b/attr.c index eae91e5..abde67

next OpenWrt 22.03 and 21.02 minor release

2023-03-27 Thread Hauke Mehrtens
Hi, I would like to create a new OpenWrt 22.03 and 21.02 minor release in the next week. OpenWrt 21.02.6 would be the final release of the OpenWrt 21.02 series. On github the following pull requests are tagged for the releases: https://github.com/openwrt/openwrt/pulls?q=is%3Apr+is%3Aopen+labe

Re: Regression in backport MEMREAD ioctl ? [Was: Re: mt7622: belkin-rt3200: r22602-42eeb22450: Kernel panic: kernel stack overflow]

2023-04-21 Thread Hauke Mehrtens
On 4/21/23 15:17, Michał Kępień wrote: Hi Petr, Since the crash happens right after snand driver initialization, I think the most likely candidate is this one: fa4dc86e9808 kernel: backport MEMREAD ioctl Maybe there are still some stack declarations of struct mtd_oob_ops left that aren't fully

OpenWrt 22.03.5 fifth service release

2023-05-01 Thread Hauke Mehrtens
Hi, The OpenWrt community is proud to announce the newest stable release of the OpenWrt 22.03 stable version series. It fixes security issues, improves device support, and brings a few bug fixes. Download firmware images using the OpenWrt Firmware Selector: * https://firmware-selector.openw

OpenWrt 21.02.7 seventh service release

2023-05-01 Thread Hauke Mehrtens
Hi, The OpenWrt community is proud to announce the newest stable release of the OpenWrt 21.02 stable version series. It fixes security issues and brings a bug fix. Download firmware images using the OpenWrt Firmware Selector: * https://firmware-selector.openwrt.org/?version=21.02.7 Download

Re: OpenWrt vs Defense positions

2023-05-07 Thread Hauke Mehrtens
On 5/1/23 21:28, Peter Naulls wrote: For those of you who track the small but very real OpenWrt job market, you may have seen there's a creep into Defense/Clearance jobs. Here's but one example: https://careers-bluehalo.icims.com/jobs/3844/job As a self-declared pacifist (and anyway, dual c

OpenWrt 23.05.0-rc1 first release candidate

2023-06-09 Thread Hauke Mehrtens
Hi, The OpenWrt community is proud to announce the first release candidate of the upcoming OpenWrt 23.05 stable series. OpenWrt 23.05.0-rc1 incorporates over 3900 commits since branching the previous OpenWrt 22.03 release and has been under development for over one year. This is just a relea

Re: [PATCH 1/9] kernel/generic: remove CONFIG_FB_NOTIFY

2023-06-25 Thread Hauke Mehrtens
On 4/26/23 01:23, Elliott Mitchell wrote: I don't know what version of Linux this option disappeared at, but it is clearly gone now. Signed-off-by: Elliott Mitchell --- target/linux/generic/config-5.10 | 1 - target/linux/generic/config-5.15 | 1 - 2 files changed, 2 deletions(-) diff --gi

[PATCH] Make struct nla_policy and struct nlattr const

2023-06-25 Thread Hauke Mehrtens
Make the struct nla_policy and the struct nlattr const in many places like it is done in full libnl. This bringe our libnl-tiny closer to the upstream version. Signed-off-by: Hauke Mehrtens --- attr.c | 14 +-- genl.c | 4 ++-- include/netlink

OpenWrt 23.05.0-rc2 - Second Release Candidate

2023-06-28 Thread Hauke Mehrtens
Hi, The OpenWrt community is proud to announce the second release candidate of the upcoming OpenWrt 23.05 stable series. OpenWrt 23.05.0-rc2 incorporates over 4000 commits since branching the previous OpenWrt 22.03 release and has been under development for over one year. This is just a rele

Re: [PATCH uci 2/2] remove internal usage of redundant uci_ptr.last

2023-08-01 Thread Hauke Mehrtens
On 7/14/23 20:28, Jan Venekamp wrote: In uci_lookup_ptr and uci_set the pointer uci_ptr ptr.last is set to the element corresponding to the first of: ptr.o, ptr.s, ptr.p. Thus, ptr.last is redundant and in case of uci_set is (and was) not always consistently set. In order to simplify the code t

Re: [PATCH 1/5] boot/apex: Restore the APEX boot loader

2023-08-11 Thread Hauke Mehrtens
On 6/19/23 13:31, Linus Walleij wrote: This is a partial revert of the deletion of the IXP4xx target: we restore the APEX boot loader so we can use it for the NSLU2 and related targets. The APEX upstream is as dead as it gets so I have applied OpenWrts old patches on top of the never released v1

<    9   10   11   12   13   14   15   16   17   18   >