hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
41,826 Commits
5 Branches
29 Tags
205 MiB
Commit Graph

2409 Commits (91a8bc1dd06719e9edd3ab0791f5a0f11af836cd)

Author SHA1 Message Date
Koen Vandeputte 270b9d30f6 kernel: bump 4.14 to 4.14.78 
Refreshed all patches.

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-22 15:29:01 +02:00
Koen Vandeputte 4dc42ef40e kernel: bump 4.9 to 4.9.135 
Refreshed all patches.

Fixes:
- CVE-2018-10883

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-22 15:29:01 +02:00
Koen Vandeputte 47f68ca586 kernel: bump 4.14 to 4.14.77 
Refreshed all patches.

Altered patches:
- 666-Add-support-for-MAP-E-FMRs-mesh-mode.patch

New symbol for arm targets:
    - HARDEN_BRANCH_PREDICTOR

Compile-tested on: cns3xxx, imx6, x86_64
Runtime-tested on: cns3xxx, imx6, x86_64

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
Tested-by: Stijn Tintel <stijn@linux-ipv6.be>
 2018-10-19 10:00:48 +02:00
Koen Vandeputte dbd067013d kernel: bump 4.9 to 4.9.134 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-19 10:00:48 +02:00
Koen Vandeputte 9ac7eb4a86 kernel: bump 4.14 to 4.14.76 
Refreshed all patches.

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-15 16:54:30 +02:00
Koen Vandeputte 235148b077 kernel: bump 4.9 to 4.9.133 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-15 16:54:30 +02:00
Koen Vandeputte bba743458e kernel: bump 4.14 to 4.14.75 
Refreshed all patches.

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-10 14:46:25 +02:00
Koen Vandeputte 86a3d2604f kernel: bump 4.9 to 4.9.132 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-10 14:46:25 +02:00
Amol Bhave b3c64797db build: use CMAKE_SOURCE_SUBDIR variable to cmake.mk 
Sometimes, the CMakeLists.txt file is not in the root directory of a
repo. In those cases, the CMAKE_SOURCE_SUBDIR variable can be specified
to use CMakeLists.txt from a subdirectory instead.

Signed-off-by: Amol Bhave <ambhave@fb.com>
 2018-10-04 22:26:22 +02:00
Koen Vandeputte 149dcc26d1 kernel: bump 4.14 to 4.14.74 
Refreshed all patches.

Fixes CVE:

- CVE-2018-7755

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-04 16:14:44 +02:00
Koen Vandeputte d837c93623 kernel: bump 4.9 to 4.9.131 
Refreshed all patches.

Fixes CVE:

- CVE-2018-10880
- CVE-2018-7755

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-04 16:14:44 +02:00
Koen Vandeputte 670f14ce67 kerneL: bump 4.14 to 4.14.73 
Refreshed all patches.

Removed upstreamed:
- 192-Revert-ubifs-xattr-Don-t-operate-on-deleted-inodes.patch

Compile-tested on: cns3xxx, imx6, x86_64
Runtime-tested on: cns3xxx, imx6, x86_64

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-02 13:44:45 +02:00
Koen Vandeputte 23bd33c5a3 kernel: bump 4.9 to 4.9.130 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-10-02 13:44:45 +02:00
Koen Vandeputte 81b2bf8e3b kernel: bump 4.14 to 4.14.72 
Refreshed all patches.

Removed upstreamed:
- 180-earlycon-initialize-port-uartclk-based-on-clock-frequency-property.patch
- 181-earlycon-remove-hardcoded-port-uartclk-initialization-in-of_setup_earlycon. patch
- 700-1-6-e1000e-Remove-Other-from-EIAC.patch
- 700-2-6-Partial-revert-e1000e-Avoid-receiver-overrun-interrupt-bursts.patch
- 700-3-6-e1000e-Fix-queue-interrupt-re-raising-in-Other-interrupt.patch
- 700-4-6-e1000e-Avoid-missed-interrupts-following-ICR-read.patch

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-09-26 15:55:23 +02:00
Koen Vandeputte 2e946ca366 kernel: bump 4.9 to 4.9.129 
Refreshed all patches.

Removed upstreamed:
- 203-MIPS-ath79-fix-restart.patch

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-09-26 15:55:23 +02:00
Koen Vandeputte 492bd8ddc9 kernel: bump 4.14 to 4.14.71 
Refreshed all patches.

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-09-21 13:23:59 +02:00
Koen Vandeputte 0d8d63c038 kernel: bump 4.9 to 4.9.128 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-09-21 13:23:59 +02:00
Stijn Segers de76cefd86 kernel: bump 4.14 to 4.14.70 for 18.06 
Refreshes patches and bumps 4.14 kernel to 4.14.70 for OpenWrt 18.06.

Compile-tested on ramips/mt7621, x86/64, imx6.
Run-tested on ramips/mt7621, x86/64, imx6.

Signed-off-by: Stijn Segers <foss@volatilesystems.org>

[added ubifs fix + tested on imx6]
Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-09-17 15:47:44 +02:00
Stijn Segers b4f672c1f9 kernel: bump 4.9 to 4.9.127 for 18.06 
Refreshes patches and bumps 4.9 kernel to 4.9.127 for OpenWrt 18.06.

Compile-tested on ar71xx.

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
 2018-09-17 15:47:44 +02:00
Koen Vandeputte 55bbd8293c kernel: bump 4.14 to 4.14.68 
Refreshed all patches.

Remove upstream accepted:
- 330-Revert-MIPS-BCM47XX-Enable-74K-Core-ExternalSync-for.patch

Altered:
- 303-v4.16-netfilter-nf_tables-remove-multihook-chains-and-fami.patch
- 308-mips32r2_tune.patch

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-09-07 17:22:23 +02:00
Koen Vandeputte 81d73ae747 kernel: bump 4.9 to 4.9.125 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-09-07 17:22:23 +02:00
Koen Vandeputte def9d215ac kernel: bump 4.14 to 4.14.67 
Refreshed all patches.

Removed upstreamed patches:
- 037-v4.18-0008-ARM-dts-BCM5301x-Fix-i2c-controller-interrupt-type.patch

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-28 23:06:48 +02:00
Koen Vandeputte 5fde931d60 kernel: bump 4.9 to 4.9.124 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-28 23:06:47 +02:00
Koen Vandeputte 82f9ef60ab kernel: bump 4.14 to 4.14.66 
Refreshed all patches

Compile-tested on: cns3xxx, imx6
Runtime-tested on: cns3xxx, imx6

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-22 13:48:04 +02:00
Koen Vandeputte a5ccdc0f59 kernel: bump 4.9 to 4.9.123 
Refreshed all patches

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-22 13:48:04 +02:00
Koen Vandeputte 705262f4d3 kernel: bump 4.14 to 4.14.65 
Refreshed all patches.

Compile-tested on: cns3xxx, imx6, x86_64
Runtime-tested on: cns3xxx, imx6, x86_64

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-20 13:04:00 +02:00
Koen Vandeputte c3be3c0e1d kernel: bump 4.9 to 4.9.122 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-20 13:04:00 +02:00
Jo-Philipp Wich 4b4a6308e7 OpenWrt v18.06.1: revert to branch defaults 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2018-08-16 18:36:52 +02:00
Jo-Philipp Wich 70255e3d62 OpenWrt v18.06.1: adjust config defaults 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2018-08-16 18:36:48 +02:00
Hauke Mehrtens 033472e1bd kernel: bump kernel 4.9 to version 4.9.120 
The following patch was integrated upstream:
 * target/linux/generic/backport-4.9/500-ext4-fix-check-to-prevent-initializing-reserved-inod.patch

This fixes tries to work around the following security problems:
 * CVE-2018-3620 L1 Terminal Fault OS, SMM related aspects
 * CVE-2018-3646 L1 Terminal Fault Virtualization related aspects

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2018-08-15 22:42:26 +02:00
Hauke Mehrtens bfc9a4401b kernel: bump kernel 4.14 to version 4.14.63 
The following patches were integrated upstream:
 * target/linux/ipq40xx/patches-4.14/050-0006-mtd-nand-qcom-Add-a-NULL-check-for-devm_kasprintf.patch
 * target/linux/mediatek/patches-4.14/0177-phy-phy-mtk-tphy-use-auto-instead-of-force-to-bypass.patch

This fixes tries to work around the following security problems:
 * CVE-2018-3620 L1 Terminal Fault OS, SMM related aspects
 * CVE-2018-3646 L1 Terminal Fault Virtualization related aspects

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2018-08-15 22:40:58 +02:00
Koen Vandeputte 67f91dfa51 kernel: bump 4.14 to 4.14.62 
Refreshed all patches.

Compile-tested on: cns3xxx, imx6, x86_64
Runtime-tested on: cns3xxx, imx6, x86_64

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-10 18:43:59 +02:00
Koen Vandeputte e4a5750931 kernel: bump 4.9 to 4.9.119 
Refreshed all patches.

Delete upstreamed patch:
- 100-tcp-add-tcp_ooo_try_coalesce-helper.patch

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-10 18:43:59 +02:00
Jo-Philipp Wich ae1ae07513 kernel: remove stray 4.4 references 
The 4.4 version hash was accidentally reintroduced while rebasing the
master commit, remove it again.

Fixes ca3174e4e9 ("kernel: bump 4.9 to 4.9.118")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2018-08-08 19:32:48 +02:00
Koen Vandeputte 16d89ef291 kernel: bump 4.14 to 4.14.61 
Refreshed all patches.

Compile-tested on: cns3xxx, imx6, x86_64
Runtime-tested on: cns3xxx, imx6, x86_64

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from commit 7a254aeeb8)
 2018-08-08 16:35:19 +02:00
Koen Vandeputte ca3174e4e9 kernel: bump 4.9 to 4.9.118 
Refreshed all patches.

Compile-tested on: ar71xx
Runtime-tested on: ar71xx

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
(backported from commit f7036a34ac)
 2018-08-08 16:35:19 +02:00
Koen Vandeputte 4017c528ca kernel: remove linux 4.4 support 
No targets are using it anymore

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-08 09:56:49 +02:00
Koen Vandeputte e3ab280e47 kernel: remove linux 3.18 support 
No targets are using it anymore

Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
 2018-08-08 09:54:51 +02:00
Stijn Segers 9ce7aa325e kernel: bump 4.14 to 4.14.60 for 18.06 
* Refreshed patches.
* Patches made redundant by changes upstream:
  - target/linux/ramips/patches-4.14/0036-mtd-fix-cfi-cmdset-0002-erase-status-check.patch
* Patches accepted upstream:
  - target/linux/apm821xx/patches-4.14/020-0001-crypto-crypto4xx-remove-bad-list_del.patch
  - target/linux/apm821xx/patches-4.14/020-0011-crypto-crypto4xx-fix-crypto4xx_build_pdr-crypto4xx_b.patch
  - target/linux/brcm63xx/patches-4.14/001-4.15-08-bcm63xx_enet-correct-clock-usage.patch
  - target/linux/brcm63xx/patches-4.14/001-4.15-09-bcm63xx_enet-do-not-write-to-random-DMA-channel-on-B.patch
  - target/linux/generic/backport-4.14/080-net-convert-sock.sk_wmem_alloc-from-atomic_t-to-refc.patch
  - target/linux/generic/pending-4.14/900-gen_stats-fix-netlink-stats-padding.patch

The ext4 regression introduced in 4.14.55 has been fixed by 4.14.60 (commit f547aa20b4f61662ad3e1a2040bb3cc5778f19b0).

Fixes the following CVEs:
- CVE-2018-10876
- CVE-2018-10877
- CVE-2018-10879
- CVE-2018-10880
- CVE-2018-10881
- CVE-2018-10882
- CVE-2018-10883

Thanks to Stijn Tintel for the CVE list :-).

Compile-tested on: ramips/mt7621, x86/64
Run-tested on: ramips/mt7621, x86/64

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
 2018-08-06 07:30:41 +02:00
Stijn Segers 9e1530b2a3 kernel: bump 4.9 to 4.9.117 for 18.06 
* Refreshed patches.
* Removed patches:
  - target/linux/ar71xx/patches-4.9/103-MIPS-ath79-fix-register-address-in-ath79_ddr_wb_flus.patch superseded by upstream
  - target/linux/ar71xx/patches-4.9/403-mtd_fix_cfi_cmdset_0002_status_check.patch superseded by upstream
  - target/linux/brcm63xx/patches-4.9/001-4.11-01-mtd-m25p80-consider-max-message-size-in-m25p80_read.patch accepted upstream
  - target/linux/brcm63xx/patches-4.9/001-4.15-08-bcm63xx_enet-correct-clock-usage.patch accepted upstream
  - target/linux/brcm63xx/patches-4.9/001-4.15-09-bcm63xx_enet-do-not-write-to-random-DMA-channel-on-B.patch accepted upstream
  - target/linux/generic/pending-4.9/900-gen_stats-fix-netlink-stats-padding.patch

* New backported patch to address ext4 breakage, introduced in 4.9.112:
  - backport-4.9/500-ext4-fix-check-to-prevent-initializing-reserved-inod.patch

Also add ARM64_SSBD symbol to ARM64 targets still running kernel 4.9

Thanks to Koen Vandeputte for pointing out the need to add the ARM64_SSBD symbol, and the ext4 patch.

Compile-tested on: ar71xx
Run-tested on: ar71xx

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
 2018-08-06 07:30:32 +02:00
Bjørn Mork 5f23d0f3db include/feeds.mk: fix distfeeds.conf without per-feed repos 
commit 514a4b3e1b ("include/feeds.mk: rework generation of opkg
distfeeds.conf") made the per-feed "base" repo unconditional, making
the default configuration fail when PER_FEED_REPO is disabled:

 root@wrt1900ac-1:~# cat /etc/opkg/distfeeds.conf
 src/gz openwrt_core http://openwrt.mork.no/18.06.0/targets/mvebu/cortexa9/packages
 src/gz openwrt_base http://openwrt.mork.no/18.06.0/packages/arm_cortex-a9_vfpv3/base
 root@wrt1900ac-1:~# opkg update
 Downloading http://openwrt.mork.no/18.06.0/targets/mvebu/cortexa9/packages/Packages.gz
 Updated list of available packages in /var/opkg-lists/openwrt_core
 Downloading http://openwrt.mork.no/18.06.0/targets/mvebu/cortexa9/packages/Packages.sig
 Signature check passed.
 Downloading http://openwrt.mork.no/18.06.0/packages/arm_cortex-a9_vfpv3/base/Packages.gz
 *** Failed to download the package list from http://openwrt.mork.no/18.06.0/packages/arm_cortex-a9_vfpv3/base/Packages.gz

 Collected errors:
  * opkg_download: Failed to download http://openwrt.mork.no/18.06.0/packages/arm_cortex-a9_vfpv3/base/Packages.gz, wget returned 8.

Cc: Matthias Schiffer <mschiffer@universe-factory.net>
Fixes: 514a4b3e1b ("include/feeds.mk: rework generation of opkg distfeeds.conf")
Signed-off-by: Bjørn Mork <bjorn@mork.no>
[whitespace/indentation fix]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit c72f3b5e2b)
 2018-07-31 14:06:07 +02:00
Jo-Philipp Wich ce234299bc OpenWrt v18.06.0: revert to branch defaults 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2018-07-30 18:30:59 +02:00
Jo-Philipp Wich 03b693064b OpenWrt v18.06.0: adjust config defaults 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2018-07-30 18:30:59 +02:00
Jo-Philipp Wich b84a1c56f3 build: do not alter global default package selection from profiles 
This partly reverts ca32373c95 which lets
profiles that suppress packages to alter the package selection for all
devices of the target when building with CONFIG_TARGET_PER_DEVICE_ROOTFS.

In particular, this caused the brcm47xx Edimax PS-1208MFG profile to
disable mtd, dropbear, firewall and other essential packages for all
brcm47xx/generic builds.

To solve this problem, prevent profiles from mangling the global
DEFAULT_PACKAGES selection and restrict the supression of negated
packages to the local PACKAGE variable list only.

Fixes ca32373c95 ("target.mk: let profile remove from DEFAULT_PACKAGES")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

(cherry picked from commit 69ea512c62)
 2018-07-21 20:53:43 +02:00
Felix Fietkau 5b12057d7c build: fix compile error when a package includes itself in PROVIDES 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 7c306ae640)
 2018-07-20 15:37:17 +02:00
Jo-Philipp Wich 7fc7128b08 OpenWrt v18.06.0-rc2: revert to branch defaults 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2018-07-15 17:54:39 +02:00
Jo-Philipp Wich 4de335bdbe OpenWrt v18.06.0-rc2: adjust config defaults 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2018-07-15 17:54:33 +02:00
Matthias Schiffer a7b2764879
include/prereq-build.mk: explicitly check for -f flag when using busybox time 
On Debian, busybox does have a time applet, but it does not support the -f
flag. Catch this in prereq check to give users to proper error message.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit b123921a92)
 2018-07-14 15:48:14 +02:00
Matthias Schiffer bc7abe8729
include/kernel-build.mk: fix kernel rebuild on backport patch changes 
An incorrect variable name was referenced in KERNEL_FILE_DEPENDS, leading
to the omission of the backport-* patch dirs in the generation of the
prepared stamp name.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 36fa1bbf6f)
 2018-07-14 13:10:08 +02:00
Matthias Schiffer 514a4b3e1b
include/feeds.mk: rework generation of opkg distfeeds.conf 
Allow enabling/commenting/disabling each feed individually by using a
tristate config symbol.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 16035a7dd3)
 2018-07-12 21:26:42 +02:00