openwrt/staging/wigyori.git
4 years agohifiveu: fix uboot inclusion into sdcard image kitchensink-202111
Zoltan HERPAI [Tue, 2 Nov 2021 12:48:51 +0000 (13:48 +0100)]
hifiveu: fix uboot inclusion into sdcard image

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoopensbi: disable qemu-virt package for now
Zoltan HERPAI [Tue, 2 Nov 2021 12:48:29 +0000 (13:48 +0100)]
opensbi: disable qemu-virt package for now

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agohifiveu: refresh kernelconfig
Zoltan HERPAI [Tue, 2 Nov 2021 09:28:13 +0000 (10:28 +0100)]
hifiveu: refresh kernelconfig

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agohifiveu: refresh kernelconfig
Zoltan HERPAI [Tue, 2 Nov 2021 07:47:17 +0000 (08:47 +0100)]
hifiveu: refresh kernelconfig

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agohifiveu: add FU740 support via backporting kernel patches from SDK
Zoltan HERPAI [Mon, 1 Nov 2021 23:51:05 +0000 (00:51 +0100)]
hifiveu: add FU740 support via backporting kernel patches from SDK

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agohifiveu: update target name
Zoltan HERPAI [Mon, 1 Nov 2021 23:50:52 +0000 (00:50 +0100)]
hifiveu: update target name

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoopensbi: fix typo and add FU740 support
Zoltan HERPAI [Mon, 1 Nov 2021 23:50:24 +0000 (00:50 +0100)]
opensbi: fix typo and add FU740 support

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agohifiveu: update config to enable further peripherals
Zoltan HERPAI [Mon, 1 Nov 2021 23:49:52 +0000 (00:49 +0100)]
hifiveu: update config to enable further peripherals

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agouboot-hifiveu: clear CSR only on FU740
Zoltan HERPAI [Mon, 1 Nov 2021 23:47:16 +0000 (00:47 +0100)]
uboot-hifiveu: clear CSR only on FU740

Having this set on FU540 will result in a bootloader crashing
and burning with:
Error 0x0100000000000002

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agohifiveu: update LOADADDR and add FU740 support
Zoltan HERPAI [Mon, 1 Nov 2021 23:46:42 +0000 (00:46 +0100)]
hifiveu: update LOADADDR and add FU740 support

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agouboot-hifiveu: rename uboot-riscv64 and add HiFive Unmatched support
Zoltan HERPAI [Sun, 31 Oct 2021 22:35:57 +0000 (23:35 +0100)]
uboot-hifiveu: rename uboot-riscv64 and add HiFive Unmatched support

These patches are taken from meta-sifive/2021.06. Also,
0035-riscv-clear-feature-disable-CSR.patch is reworked to compile only
for the Unmatched board, otherwise the Unleashed board will crash and burn
at boot time with "Error 0x0100000000000002" before the SPL init.

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agohifiveu: rename riscv64 generic target to a board-specific name
Zoltan HERPAI [Sun, 31 Oct 2021 15:40:40 +0000 (16:40 +0100)]
hifiveu: rename riscv64 generic target to a board-specific name

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoriscv64: add new port on 5.10
Zoltan HERPAI [Sun, 16 Dec 2018 10:05:58 +0000 (11:05 +0100)]
riscv64: add new port on 5.10

RISC-V is a new CPU architecture aimed to be fully free and open. This
target will add support for it, based on 5.10.

Supports running on:
 - HiFive Unleashed (which is the most known devboard for this arch)
 - QEMU (support is available in mainline qemu)
Further devboards are expected given the interest in this new arch.

An SD-card image is generated, where the partitions are required to have
specific type codes. Compared to earlier branches for this target, BBL
support is removed, giving way for OpenSBI.

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agouboot-riscv64: add new package
Zoltan HERPAI [Sun, 26 Jan 2020 22:46:18 +0000 (23:46 +0100)]
uboot-riscv64: add new package

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agofirmware: opensbi: add package for RISC-V
Zoltan HERPAI [Sun, 26 Jan 2020 22:45:48 +0000 (23:45 +0100)]
firmware: opensbi: add package for RISC-V

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agostrace: fix build error on riscv64
Zoltan HERPAI [Wed, 15 May 2019 15:22:31 +0000 (17:22 +0200)]
strace: fix build error on riscv64

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoopenssl: add linux-riscv64 into the targets list
Zoltan HERPAI [Wed, 15 May 2019 15:21:45 +0000 (17:21 +0200)]
openssl: add linux-riscv64 into the targets list

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agotools: add gptfdisk for riscv64 image generation
Zoltan HERPAI [Mon, 20 Aug 2018 21:07:19 +0000 (23:07 +0200)]
tools: add gptfdisk for riscv64 image generation

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agogeneric: groundwork for RISC-V
Zoltan HERPAI [Sun, 16 Dec 2018 09:45:53 +0000 (10:45 +0100)]
generic: groundwork for RISC-V

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoath79: DO NOT MERGE: add a custom WR741N v1/v2 8Mb variant
Zoltan HERPAI [Tue, 8 Jun 2021 11:38:18 +0000 (13:38 +0200)]
ath79: DO NOT MERGE: add a custom WR741N v1/v2 8Mb variant

Device is a WR741N v2.4 (AR7240) with the flash replaced with
an 8Mb chip. ART partition is moved to the end (0x7f0000). Also,
the commit adds the 741-related code back to the generic board.d
files.

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoath79: add label to flash in the TP-Link dtsi
Zoltan HERPAI [Tue, 8 Jun 2021 11:37:34 +0000 (13:37 +0200)]
ath79: add label to flash in the TP-Link dtsi

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoath79: add support for Ubiquiti LiteStation SR71
Zoltan HERPAI [Mon, 21 Dec 2020 22:39:51 +0000 (23:39 +0100)]
ath79: add support for Ubiquiti LiteStation SR71

Specifications:

SoC: AR7130
DRAM: 32Mb DDR1
Flash: 16Mb SPI-NOR
LAN: 2x 10/100Mbps via ADM6996 switch on MII
     (1 with PoE)
PCI: 1x mini-PCI
UART: standard UART header
JTAG: yes
LEDs: 8x LEDs

Installation instructions:

The original FIS partitioning does not provide enough
space for the kernel, so the installation must start
with re-partitioning the flash from RedBoot.

The MAC address is stored in the "boardconfig" partition, which is
automatically created.

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoath79: add support for Atheros PB42 reference board
Zoltan HERPAI [Sun, 13 Dec 2020 00:37:56 +0000 (01:37 +0100)]
ath79: add support for Atheros PB42 reference board

Specifications:

SoC: AR7130
DRAM: 32Mb DDR1
Flash: 8Mb SPI-NOR
LAN: 4x 10/100Mbps via ADM6996 switch on MII
WAN: 1x 10/100Mbps via RMII
PCI: 2x mini-PCI
UART: standard QCA UART header
JTAG: yes
Button: 1x WPS, 1x reset
LEDs: 8x LEDs

Installation instructions:

The original FIS partitioning does not provide enough
space for the kernel, so the installation must start
with re-partitioning the flash from RedBoot.

The suggested partition table is the following:

RedBoot           0xBF000000  0xBF000000  0x00040000  0x00000000
kernel            0xBF040000  0x80060000  0x001F0000  0x80060000
rootfs            0xBF230000  0x00000000  0x005B0000  0x00000000
FIS directory     0xBF7E0000  0xBF7E0000  0x0000F000  0x00000000
RedBoot config    0xBF7EF000  0xBF7EF000  0x00001000  0x00000000

Which can be created with:
fis init
fis create -r 0x80060000 -e 0x80060000 -b 0xbf040000 -l 0x220000 kernel
fis create -b 0xbf260000 -l 0x580000 rootfs

The kernel and the rootfs must then be loaded from TFTP:

load -r -v -b 0x80060000 openwrt-ath79-generic-atheros_pb42-squashfs-kernel.bin
fis create kernel
load -r -v -b 0x80100000 openwrt-ath79-generic-atheros_pb42-squashfs-rootfs.bin
fis create rootfs

Once OpenWrt is installed, the normal sysupgrade method will work for
upgrades.

The MAC address is stored in the "boardconfig" partition, which is
automatically created.

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agosunxi: add support for NextThing CHIP with Tzatziffy board
Zoltan HERPAI [Thu, 2 Jul 2020 08:50:31 +0000 (10:50 +0200)]
sunxi: add support for NextThing CHIP with Tzatziffy board

Specifications:
SoC     R8 @ 1Ghz
DRAM    512MiB DDR3-800E @ 360MHz
NAND    4GB
Power   DC 5V @ ~1A, 3.7V Li-Ion battery (Not included)
Storage SD-card via Tzatziffy board

Install method:
Standard sunxi method.

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agosunxi: enable NAND on C64mini
Zoltan HERPAI [Wed, 13 Mar 2019 21:34:54 +0000 (22:34 +0100)]
sunxi: enable NAND on C64mini

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agosunxi: add support for Retro Games Limited C=64 Mini (RGL001)
Zoltan HERPAI [Fri, 24 Apr 2020 13:44:01 +0000 (15:44 +0200)]
sunxi: add support for Retro Games Limited C=64 Mini (RGL001)

CPU: Allwinner A20 dual-core Cortex A7
Memory: 256/512Mb
Storage: 128Mb NAND
USB: 2x USB2.0

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agosunxi: enable NAND on pcDuino3
Zoltan HERPAI [Sun, 25 Aug 2019 20:40:37 +0000 (22:40 +0200)]
sunxi: enable NAND on pcDuino3

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agosunxi: enable NAND support on 5.10
Zoltan HERPAI [Sat, 30 Oct 2021 18:57:18 +0000 (20:57 +0200)]
sunxi: enable NAND support on 5.10

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agokirkwood: add support for Netgear Stora (MS2000/2110) NAS
Zoltan HERPAI [Thu, 16 Jul 2020 16:05:53 +0000 (18:05 +0200)]
kirkwood: add support for Netgear Stora (MS2000/2110) NAS

Dual-slot NAS based on Marvell Kirkwood.

Specifications:
 - Marvell 88F6281 @1GHz
 - 128Mb RAM
 - 256Mb NAND
 - 1x GbE LAN (Marvell 88E1116)
 - 1x USB 2.0
 - 2x SATA
 - PCF8563 RTC
 - LM75 sensor
 - TC654 PWM fan controller
 - Serial on J2 (115200,8n1)
 - Newer bootROM so kwboot-ing via serial is possible

Installation:

1. Serial console
 - Connect your levelshifter to the serial console
   on J2 (refer to the wiki page for pinout)
2. Update u-boot
 - Download the u-boot.kwb image for the device
 - Powercycle the NAS
 - Run "kwboot -b ./u-boot.kwb /dev/ttyUSB0 -p"
 - Connect to the serial console with minicom
 - tftp 0x0800000 netgear_stora-u-boot.kwb
 - nand erase 0x0 100000
 - nand write 0x0800000 0x0 0x100000
 - reset
3. Install OpenWrt
 - Boot up the initramfs image
 - tftpboot 0x800000 openwrt-kirkwood-netgear_stora-initramfs-uImage; bootm 0x800000
 - Download the sysupgrade image and perform sysupgrade

The fan is controlled in 3 stages by a script running every minute
from cron, measuring the CPU temperature.

Snippets taken from bodhi <[email protected]>

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agokirkwood: add hwmon-tc654
Zoltan HERPAI [Thu, 16 Jul 2020 15:46:44 +0000 (17:46 +0200)]
kirkwood: add hwmon-tc654

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agomodules: add Allwinner Mali support
Zoltan HERPAI [Mon, 26 Aug 2019 08:24:32 +0000 (10:24 +0200)]
modules: add Allwinner Mali support

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoimx-bootlets: bump to latest version available
Zoltan HERPAI [Wed, 13 Mar 2019 23:31:37 +0000 (00:31 +0100)]
imx-bootlets: bump to latest version available

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agosuniv: add new target
Zoltan HERPAI [Wed, 13 Mar 2019 23:24:50 +0000 (00:24 +0100)]
suniv: add new target

This is Allwinner's ARM926EJ-S core, which is one of its early
products, reappearing in recent compact designs. The SoC includes
32/64Mb memory integrated, and has display and USB interfaces,
allowing for small footprint boards.

The target consists of basic 5.4 support, with u-boot.

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoshmin: add new SH3-target
Zoltan HERPAI [Mon, 26 Aug 2019 15:04:33 +0000 (17:04 +0200)]
shmin: add new SH3-target

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agosh775x: add new SH4 target
Zoltan HERPAI [Mon, 26 Aug 2019 14:37:31 +0000 (16:37 +0200)]
sh775x: add new SH4 target

Signed-off-by: Zoltan HERPAI <[email protected]>
4 years agoipq40xx: detangle ath10k-board-qca4019 from ath10k-firmware-qca4019*
Christian Lamparter [Fri, 22 Oct 2021 18:38:49 +0000 (20:38 +0200)]
ipq40xx: detangle ath10k-board-qca4019 from ath10k-firmware-qca4019*

Back in the day, the board-2.bin came with ath10k-firmware-qca4019.
This changed with
commit c3b2efaf24b5 ("linux-firmware: ath10k: add board firmware packages")
which placed the board-2.bin into a separate package: ath10k-board-qca4019.
This was great, because it addressed one of the caveat of the original
ipq-wifi package:
commit fa03d441e96e ("firmware: add custom IPQ wifi board definitions")

|  2. updating ath10k-firmware-qca4019 will also replace
|      the board-2.bin. For this cases the user needs to
|      manually reinstall the wifi-board package once the
|      ath10k-firmware-qca4019 is updated.

This could be extended further so that ipq-wifi packages
no longer use "install-override" and the various QCA4019
variants list the ath10k-board-qca4019 as a CONFLICT
package.

Signed-off-by: Christian Lamparter <[email protected]>
4 years agoath9k: OF: qca,disable-(2|5)ghz => ieee80211-freq-limit
Christian Lamparter [Sat, 9 Oct 2021 18:51:21 +0000 (20:51 +0200)]
ath9k: OF: qca,disable-(2|5)ghz => ieee80211-freq-limit

OpenWrt maintains two special out-of-tree DT properties:
"qca,disable-5ghz" and "qca,disable-2ghz". These are implemented
in a mac80211 ath9k patch "550-ath9k-disable-bands-via-dt.patch".

With the things being what they are, now might be a good
point to switch the devices to the generic and upstream
"ieee80211-freq-limit" property. This property is much
broader and works differently. Instead of disabling the
drivers logic which would add the affected band and
channels. It now disables all channels which are not
within the specified frequency range.

Reviewed-by: Martin Blumenstingl <[email protected]>
Tested-by: Martin Blumenstingl <[email protected]> # HH5A
Signed-off-by: Christian Lamparter <[email protected]>
4 years agodropbear: add config options for agent-forwarding support
Sven Roederer [Thu, 15 Jul 2021 22:44:53 +0000 (00:44 +0200)]
dropbear: add config options for agent-forwarding support

* SSH agent forwarding might cause security issues, locally and on the jump
  machine (https://defn.io/2019/04/12/ssh-forwarding/). So allow to
  completely disabling it.
* separate options for client and server
* keep it enabled by default

Signed-off-by: Sven Roederer <[email protected]>
4 years agoscripts: eva_ramboot.py: remove unused import
Jan-Niklas Burfeind [Tue, 26 Oct 2021 11:25:03 +0000 (13:25 +0200)]
scripts: eva_ramboot.py: remove unused import

concludes:
commit e7bc8984d9ca ("scripts: make eva_ramboot.py offset configurable")

Signed-off-by: Jan-Niklas Burfeind <[email protected]>
4 years agorealtek: re-enable IPv6 routing
Bjørn Mork [Fri, 22 Oct 2021 16:09:18 +0000 (18:09 +0200)]
realtek: re-enable IPv6 routing

Commit 03e1d93e0779 ("realtek: add driver support for routing
offload") added routing offload for IPv4, but broke IPv6 routing
completely.  The routing table is empty and cannot be updated:

 root@gs1900-10hp:~# ip -6 route
 root@gs1900-10hp:~# ip -6 route add unreachable default
 RTNETLINK answers: Invalid argument

As a side effect, this breaks opkg on IPv4 only systems too,
since uclient-fetch fails when there are no IPv6 routes:

 root@gs1900-10hp:~# uclient-fetch http://192.168.99.1
 Downloading 'http://192.168.99.1'
 Failed to send request: Operation not permitted

Fix by returning NOTIFY_DONE when offloading is unsupported, falling
back to default behaviour.

Fixes: 03e1d93e0779 ("realtek: add driver support for routing offload")
Signed-off-by: Bjørn Mork <[email protected]>
4 years agorealtek: fix ZyXEL initramfs image generation
Bjørn Mork [Thu, 24 Jun 2021 21:04:08 +0000 (23:04 +0200)]
realtek: fix ZyXEL initramfs image generation

The current rule produces empty trailers, causing the OEM firmware
update application to reject our images.

The double expansion of a makefile variable does not work inside
shell code.  The second round is interpreted as a shell expansion,
attempting to run the command ZYXEL_VERS instead of expanding the
$(ZYXEL_VERS) makefile variable.

Fix by removing one level of variable indirection.

Fixes: c6c8d597e183 ("realtek: Add generic zyxel_gs1900 image definition")
Tested-by: Sander Vanheule <[email protected]>
Signed-off-by: Bjørn Mork <[email protected]>
4 years agobcm53xx: MR32: replace i2c-gpio with SoC's i2c
Christian Lamparter [Sat, 12 Sep 2020 20:28:38 +0000 (22:28 +0200)]
bcm53xx: MR32: replace i2c-gpio with SoC's i2c

During review of the MR32, Florian Fainelli pointed out that the
SoC has a real I2C-controller. Furthermore, the connected pins
(SDA and SCL) would line up perfectly for use. This patch swaps
out the the bitbanged i2c-gpio with the real deal.

Signed-off-by: Christian Lamparter <[email protected]>
4 years agosunxi: deselect CONFIG_VIDEO_SUN6I_CSI by default
Daniel Golle [Fri, 29 Oct 2021 17:40:02 +0000 (18:40 +0100)]
sunxi: deselect CONFIG_VIDEO_SUN6I_CSI by default

Deselect CONFIG_VIDEO_SUN6I_CSI Kconfig symbol for now. If anyone wants
to use CSI (camera interface) they should package the kernel module.
After this change, sunxi targets build again.

Signed-off-by: Daniel Golle <[email protected]>
4 years agosunxi: add CONFIG_ARM_CRYPTO Kconfig symbol
Daniel Golle [Fri, 29 Oct 2021 17:34:39 +0000 (18:34 +0100)]
sunxi: add CONFIG_ARM_CRYPTO Kconfig symbol

And another missing symbol...

Reported-by: Chen Minqiang <[email protected]>
Signed-off-by: Daniel Golle <[email protected]>
4 years agosunxi: add yet another missing Kconfig symbol
Daniel Golle [Fri, 29 Oct 2021 17:19:22 +0000 (18:19 +0100)]
sunxi: add yet another missing Kconfig symbol

Set CONFIG_CRYPTO_CRCT10DIF_ARM_CE=y for sunxi targets.

Signed-off-by: Daniel Golle <[email protected]>
4 years agobcm53xx: backport patch fixing pinctrl driver
Rafał Miłecki [Fri, 29 Oct 2021 13:28:57 +0000 (15:28 +0200)]
bcm53xx: backport patch fixing pinctrl driver

This switches pinctrl driver to use the old & good DT binding. There is
no more need to adjust upstream DTS file.

Signed-off-by: RafaÅ‚ MiÅ‚ecki <[email protected]>
4 years agosunxi: add missing CONFIG_VIDEO_SUN4I_CSI Kconfig symbol
Daniel Golle [Fri, 29 Oct 2021 13:20:15 +0000 (14:20 +0100)]
sunxi: add missing CONFIG_VIDEO_SUN4I_CSI Kconfig symbol

Simply disable this for now, if anyone wants to use CSI feel free to
package it as a kernel module package.

Signed-off-by: Daniel Golle <[email protected]>
4 years agoRevert "secilc: update to version 3.3"
Daniel Golle [Fri, 29 Oct 2021 13:12:21 +0000 (14:12 +0100)]
Revert "secilc: update to version 3.3"

This reverts commit 2da891e7357c83c54a30075fcddbb63eeca0af99.
secilc 3.3 requires libsepol to be version 3.3 as well and doesn't
build otherwise. Revert for now.

Signed-off-by: Daniel Golle <[email protected]>
4 years agoRevert "libsepol: update to version 3.3"
Daniel Golle [Fri, 29 Oct 2021 13:08:48 +0000 (14:08 +0100)]
Revert "libsepol: update to version 3.3"

This reverts commit de8a800ca9bda1171bfe17ee7653532465a8b596.
Host build uses host includes instead of staging/hostpkg.
This breaks the build in case of selinux host libs being older than
version 3.3. Revert for now until better fix is found.

Signed-off-by: Daniel Golle <[email protected]>
4 years agoselinux-policy: update to version 1.0
Dominick Grift [Fri, 22 Oct 2021 17:42:40 +0000 (19:42 +0200)]
selinux-policy: update to version 1.0

wifi: writes to terminal
hotplugcall and sqm read class sysfile symlinks
unbound and sqm related loose ends
support/example: policycoreutils host-compile is required
TODO: this was wrong and it is actually needed
linguist detectable does not work this way
linguist-detectable
updates README
adds workflows
adds a note about persistent /var option

project moved to https://github.com/DefenSec/selinux-policy

Signed-off-by: Dominick Grift <[email protected]>
4 years agosecilc: update to version 3.3
Dominick Grift [Fri, 22 Oct 2021 11:51:16 +0000 (13:51 +0200)]
secilc: update to version 3.3

Update VERSIONs to 3.3 for release.
Update VERSIONs to 3.3-rc3 for release.
Correct some typos
Update VERSIONs to 3.3-rc2 for release.
Update VERSIONs and Python bindings version to 3.3-rc1 for release
libsepol/secilc/docs: Update the CIL documentation
secilc: fix memory leaks in secilc2conf
secilc: fix memory leaks in secilc
libsepol/cil: Add support for using qualified names to secil2conf
libsepol/cil: Add support for using qualified names to secil2tree
secilc: Add support for using qualified names to secilc
secilc/test: Add test for anonymous args
secilc/docs: Relocate and reword macro call name resolution order
secilc/docs: Document the order that inherited rules are resolved in
secilc: Create the new program called secil2tree to write out CIL AST
secilc/docs: Update the CIL documentation for various blocks
secilc.c: Don't fail if input file is empty
cil_conditional_statements.md: fix expr definition
secilc/docs: Lists are now allowed in constraint expressions

Signed-off-by: Dominick Grift <[email protected]>
4 years agopolicycoreutils: update to version 3.3
Dominick Grift [Fri, 22 Oct 2021 11:51:15 +0000 (13:51 +0200)]
policycoreutils: update to version 3.3

Update VERSIONs to 3.3 for release.
Update VERSIONs to 3.3-rc3 for release.
libselinux/semodule: Improve extracting message
Correct some typos
Update VERSIONs to 3.3-rc2 for release.
Update VERSIONs and Python bindings version to 3.3-rc1 for release
policycoreutils: free memory of allocated context in newrole
policycoreutils: free memory of allocated context in run_init
policycoreutils: free memory on lstat failure in sestatus
policycoreutils: silence -Wextra-semi-stmt warning
fixfiles: do not exclude /dev and /run in -C mode
policycoreutils/setfiles: do not create useless setfiles.8.man file

Signed-off-by: Dominick Grift <[email protected]>
4 years agocheckpolicy: update to version 3.3
Dominick Grift [Fri, 22 Oct 2021 11:51:14 +0000 (13:51 +0200)]
checkpolicy: update to version 3.3

Update VERSIONs to 3.3 for release.
checkpolicy: Fix potential undefined shifts
Update VERSIONs to 3.3-rc3 for release.
checkpolicy: delay down-cast to avoid align warning
checkpolicy: drop incorrect cast
checkpolicy: update documentation
checkpolicy: print reason of fopen failure
checkpolicy: policy_define: cleanup declarations
Update VERSIONs to 3.3-rc2 for release.
checkpolicy: free extended permission memory
checkpolicy: print warning on source line overflow
checkpolicy: error out on parsing too big integers
checkpolicy: avoid implicit conversion
checkpolicy: resolve dismod memory leaks
checkpolicy: add missing function declarations
checkpolicy: mark file local functions in policy_define static
checkpolicy: mark read-only parameters in module compiler const
checkpolicy: misc checkpolicy tweaks
checkpolicy: misc checkmodule tweaks
checkpolicy: enclose macro argument in parentheses
Update VERSIONs and Python bindings version to 3.3-rc1 for release
checkpolicy: mark read-only parameters in policy define const
checkpolicy/test: mark file local functions static
checkpolicy: parse_util drop unused declaration
checkpolicy: drop redundant cast to the same type
checkpolicy: avoid potential use of uninitialized variable
checkpolicy: check before potential NULL dereference
checkpolicy: remove dead assignments
checkpolicy: follow declaration-after-statement
checkpolicy: use correct format specifier for unsigned
checkpolicy: drop dead condition
checkpolicy: simplify assignment
checkpolicy: drop -pipe compile option
checkpolicy: pass CFLAGS at link stage
checkpolicy: silence -Wextra-semi-stmt warning
checkpolicy: Do not automatically upgrade when using "-b" flag
libsepol/checkpolicy: Set user roles using role value instead of dominance

Signed-off-by: Dominick Grift <[email protected]>
4 years agolibsemanage: update to version 3.3
Dominick Grift [Fri, 22 Oct 2021 11:51:13 +0000 (13:51 +0200)]
libsemanage: update to version 3.3

Update VERSIONs to 3.3 for release.
Update VERSIONs to 3.3-rc3 for release.
Update VERSIONs to 3.3-rc2 for release.
Update VERSIONs and Python bindings version to 3.3-rc1 for release
libsemanage: Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
libsemanage: silence -Wextra-semi-stmt warning
libsemanage: fix use-after-free in parse_module_store()

Signed-off-by: Dominick Grift <[email protected]>
4 years agolibselinux: update to version 3.3
Dominick Grift [Fri, 22 Oct 2021 11:51:12 +0000 (13:51 +0200)]
libselinux: update to version 3.3

Update VERSIONs to 3.3 for release.
libselinux: Fix potential undefined shifts
Update VERSIONs to 3.3-rc3 for release.
Update VERSIONs to 3.3-rc2 for release.
libselinux/utils: drop requirement to combine compiling and linking
Update VERSIONs and Python bindings version to 3.3-rc1 for release
Improve error message for label file validation
libselinux: replace strerror by %m
libselinux: silence -Wextra-semi-stmt warning
libselinux/utils/getseuser.c: fix build with gcc 4.8
selinux.8: document how mount flag nosuid affects SELinux
libselinux: fix typo
libselinux: improve getcon(3) man page
libselinux: selinux_status_open: return 1 in fallback mode
libselinux: do not use status page fallback mode internally
libselinux: make selinux_status_open(3) reentrant
libselinux: avc_destroy(3) closes status page
libselinux: label_file.c: fix indent
libselinux: regex: unify parameter names
libselinux: sidtab_sid_stats(): unify parameter name
libselinux: drop redundant casts to the same type
libselinux: label_db::db_init(): open file with CLOEXEC mode
libselinux: matchpathcon: free memory on realloc failure
libselinux: label_file::init(): do not pass NULL to strdup
libselinux: init_selinux_config(): free resources on error
libselinux: matchmediacon(): close file on error
libselinux: store_stem(): do not free possible non-heap object
libselinux: getdefaultcon: free memory on multiple same arguments
libselinux: setexecfilecon(): drop dead assignment
libselinux: label_media::init(): drop dead assignment
libselinux: label_x::init(): drop dead assignment
libselinux: context_new(): drop dead assignment
libselinux: exclude_non_seclabel_mounts(): drop unused variable
libselinux: getconlist: free memory on multiple level arguments
libselinux: selabel_get_digests_all_partial_matches: free memory after FTS_D block
libselinux: selinux_restorecon: mark local variable static
libselinux: avcstat: use standard length modifier for unsigned long long
libselinux: sefcontext_compile: mark local variable static
libselinux: Sha1Finalise(): do not discard const qualifier
libselinux: label_common(): do not discard const qualifier
libselinux: selinux_file_context_cmp(): do not discard const qualifier
libselinux: sidtab_hash(): do not discard const qualifier
libselinux: silence -Wstringop-overflow warning from gcc 10.3.1
libselinux: selinux_check_passwd_access_internal(): respect deny_unknown
libselinux: do not duplicate make target when going into subdirectory

Signed-off-by: Dominick Grift <[email protected]>
4 years agolibsepol: update to version 3.3
Dominick Grift [Fri, 22 Oct 2021 11:51:11 +0000 (13:51 +0200)]
libsepol: update to version 3.3

Update VERSIONs to 3.3 for release.
libsepol/cil: Fix potential undefined shifts
libsepol: Fix potential undefined shifts
Update VERSIONs to 3.3-rc3 for release.
libsepol/cil: Do not skip macros when resolving until later passes
libsepol/cil: Limit the amount of reporting for bounds failures
libsepol/cil: silence clang void-pointer-to-enum-cast warning
libsepol: resolve GCC warning about null-dereference
libsepol: use correct cast
libsepol: ebitmap: mark nodes of const ebitmaps const
Update VERSIONs to 3.3-rc2 for release.
libsepol/cil: Handle operations in a class mapping when verifying
libsepol/cil: Do not use original type and typeattribute datums
libsepol: free memory after policy validation
libsepol: avoid implicit conversions
libsepol: fix typo
libsepol/cil: Free duplicate datums in original calling function
libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
Update VERSIONs and Python bindings version to 3.3-rc1 for release
libsepol/cil: Limit the number of active line marks
libsepol/cil: Add function to get number of items in a stack
libsepol: Fix detected RESOURCE_LEAKs
libsepol/cil: Fix syntax checking in __cil_verify_syntax()
libsepol/cil: Use size_t for len in __cil_verify_syntax()
libsepol/cil: Remove redundant syntax checking
libsepol/cil: Improve in-statement to allow use after inheritance
libsepol/cil: Simplify cil_tree_children_destroy()
libsepol/cil: Refactor the function __cil_build_ast_node_helper()
libsepol/cil: Don't destroy optionals whose parent will be destroyed
libsepol/cil: Properly check for parameter when inserting name
libsepol/cil: Reset expandtypeattribute rules when resetting AST
libsepol/cil: Properly check parse tree when printing error messages
libsepol/cil: Allow some duplicate macro and block declarations
libsepol/cil: When writing AST use line marks for src_info nodes
libsepol/cil: Report correct high-level language line numbers
libsepol/cil: Add line mark kind and line number to src info
libsepol/cil: Create common string-to-unsigned-integer functions
libsepol/cil: Push line mark state first when processing a line mark
libsepol/cil: Check for valid line mark type immediately
libsepol/cil: Check the token type after getting the next token
libsepol/cil: Check syntax of src_info statement
libsepol/cil: move the fuzz target and build script to the selinux repository
libsepol: replace strerror by %m
libsepol/cil: remove obsolete comment
libsepol/cil: do not allow \0 in quoted strings
libsepol/cil: Fix handling category sets in an expression
libsepol: assure string NUL-termination of ibdev_name
libsepol: avoid implicit conversions
libsepol: ignore UBSAN false-positives
libsepol: avoid unsigned integer overflow
libsepol/cil: Improve checking for bad inheritance patterns
libsepol: silence -Wextra-semi-stmt warning
libsepol/cil: do not override previous results of __cil_verify_classperms
libsepol/cil: Provide option to allow qualified names in declarations
libsepol/cil: make array cil_sym_sizes const
libsepol/cil: Only reset AST if optional has a declaration
libsepol/cil: Add function to determine if a subtree has a declaration
libsepol/cil: Improve degenerate inheritance check
libsepol/cil: Reduce the initial symtab sizes for blocks
libsepol/cil: Check for empty list when marking neverallow attributes
libsepol/cil: Fix syntax checking of defaultrange rule
libsepol/cil: Properly check for loops in sets
libsepol/cil: Allow duplicate optional blocks in most cases
libsepol: declare read-only arrays const
libsepol: declare file local variable static
libsepol: drop unnecessary casts
libsepol: drop repeated semicolons
libsepol/cil: avoid using maybe uninitialized variables
libsepol/cil: drop unnecessary casts
libsepol/cil: drop dead store
libsepol/cil: drop extra semicolon
libsepol/cil: silence cast warning
libsepol: remove dead stores
libsepol: do not allocate memory of size 0
libsepol: mark read-only parameters of type_set_ interfaces const
libsepol: mark read-only parameters of ebitmap interfaces const
libsepol: remove dead stores
libsepol/cil: follow declaration-after-statement
libsepol: follow declaration-after-statement
libsepol: avoid unsigned integer overflow
libsepol: remove unused functions
libsepol: resolve missing prototypes
libsepol: fix typos
libsepol: Quote paths when generating policy.conf from binary policy
libsepol/cil: Account for anonymous category sets in an expression
libsepol/cil: Fix anonymous IP address call arguments
libsepol: quote paths in CIL conversion
libsepol/cil: Resolve anonymous levels only once
libsepol/cil: Pointers to datums should be set to NULL when resetting
libsepol/cil: Resolve anonymous class permission sets only once
libsepol/cil: Limit the number of open parenthesis allowed
libsepol/cil: Destroy the permission nodes when exiting with an error
libsepol/cil: Handle disabled optional blocks in earlier passes
libsepol/cil: Do not resolve arguments to declarations in the call
libsepo/cil: Refactor macro call resolution
libsepol/cil: Do not add NULL node when inserting key into symtab
libsepol/cil: Make name resolution in macros work as documented
libsepol/cil: Fix name resolution involving inherited blocks
libsepol/cil: Check for self-referential loops in sets
libsepol/cil: Return an error if a call argument fails to resolve
libsepol/cil: Check datum in ordered list for expected flavor
libsepol/cil: Detect degenerate inheritance and exit with an error
libsepol/cil: Fix instances where an error returns SEPOL_OK
libsepol/cil: Properly reset an anonymous classperm set
libsepol: use checked arithmetic builtin to perform safe addition
libsepol/cil: Add functions to make use of cil_write_ast()
libsepol/cil: Create functions to write the CIL AST
libsepol/cil: Use CIL_ERR for error messages in cil_compile()
libsepol/cil: Make invalid statement error messages consistent
libsepol/cil: Do not allow tunable declarations in in-statements
libsepol/cil: Sync checks for invalid rules in macros
libsepol/cil: Check for statements not allowed in optional blocks
libsepol/cil: Sync checks for invalid rules in booleanifs
libsepol/cil: Reorder checks for invalid rules when resolving AST
libsepol/cil: Use AST to track blocks and optionals when resolving
libsepol/cil: Create new first child helper function for building AST
libsepol/cil: Cleanup build AST helper functions
libsepol/cil: Reorder checks for invalid rules when building AST
libsepol/cil: Move check for the shadowing of macro parameters
libsepol/cil: Create function cil_add_decl_to_symtab() and refactor
libsepol/cil: Refactor helper function for cil_gen_node()
libsepol/cil: Allow permission expressions when using map classes
libsepol/cil: Exit with an error if declaration name is a reserved word
libsepol/cil: More strict verification of constraint leaf expressions
libsepol/cil: Set class field to NULL when resetting struct cil_classperms
libsepol/cil: cil_reset_classperms_set() should not reset classpermission
libsepol/cil: Destroy classperm list when resetting map perms
libsepol/cil: Destroy classperms list when resetting classpermission
libsepol/cil: Fix out-of-bound read of file context pattern ending with "\"
libsepol/cil: Check for duplicate blocks, optionals, and macros
libsepol: Write "NO_IDENTIFIER" for empty CIL constraint expression
libsepol: Enclose identifier lists in CIL constraint expressions
libsepol/cil: Allow lists in constraint expressions
libsepol: Enclose identifier lists in constraint expressions
libsepol: Write "NO_IDENTIFIER" for empty constraint expression
libsepol: make num_* unsigned int in module_to_cil
libsepol/cil: do not leak avrulex_ioctl_table memory when an error occurs
libsepol/cil: fix NULL pointer dereference in __cil_insert_name
libsepol/cil: replace printf with proper cil_tree_log
libsepol/cil: remove stray printf
libsepol/cil: make cil_post_fc_fill_data static
libsepol: Check kernel to CIL and Conf functions for supported versions
libsepol: Remove unnecessary copying of declarations from link.c
libsepol: Properly handle types associated to role attributes
libsepol: Expand role attributes in constraint expressions

Signed-off-by: Dominick Grift <[email protected]>
4 years agomediatek: make sure MMC is not busy before commencing sysupgrade
Daniel Golle [Wed, 27 Oct 2021 14:30:39 +0000 (15:30 +0100)]
mediatek: make sure MMC is not busy before commencing sysupgrade

In case of the block device still being in use, re-reading the
partition table fails. In that case, abort sysupgrade to avoid
corrupting the just-written image because of wrong offsets caused
by failure to re-read the partition table.

Signed-off-by: Daniel Golle <[email protected]>
4 years agobase-files, metadata: support additional group membership
Daniel Golle [Tue, 26 Oct 2021 12:02:37 +0000 (13:02 +0100)]
base-files, metadata: support additional group membership

Some packages may require additional group membership for the system
user added by that package. Allow defining additional groups as third
member of the ':'-separated tuple, allowing to specify multiple
','-separated groups with optional GID.

Example:
USERID:=foouser=1000:foogroup=1000:addg1=1001,addg2=1002,addg3

Signed-off-by: Daniel Golle <[email protected]>
4 years agoumdns: add missing syscall to seccomp filter
Michael Peleshenko [Tue, 26 Oct 2021 00:12:57 +0000 (20:12 -0400)]
umdns: add missing syscall to seccomp filter

The 'madvise', syscall is missing.
Found with 'utrace /usr/sbin/umdns' on an R7800 and RT3200.

Signed-off-by: Michael Peleshenko <[email protected]>
4 years agoipq806x: add support for Netgear Nighthawk Pro Gaming XR500
Peter Geis [Mon, 13 Sep 2021 15:08:57 +0000 (11:08 -0400)]
ipq806x: add support for Netgear Nighthawk Pro Gaming XR500

This adds support for the Netgear Nighthawk Pro Gaming XR500.
It is the successor to the Netgear Nighthawk R7800 and shares almost
identical hardware to that device.
The stock firmware is a heavily modified version of OpenWRT.

Specifications:
  SoC: Qualcomm Atheros IPQ8065
  RAM: 512 MB
  Storage: 256 MiB NAND Flash
  Wireless: 2x Qualcomm Atheros QCA9984
  Ethernet: 2x 1000/100/10 dedicated interfaces
  Switch: 5x 1000/100/10 external ports
  USB: 2x 3.0 ports

More information:
Manufacturer page: https://www.netgear.com/gaming/xr500/
Almost identical to Netgear R7800
Differences (r7800 > xr500):
  Flash: 128MiB > 256MiB
  Removed esata
  swapped leds:
    usb1 (gpio 7 > 8)
    usb2 (gpio 8 > 26)
    guest/esata (gpio 26 > 7)

MAC addresses:

On the OEM firmware, the mac addresses are:

  WAN: *:50  art 0x6
  LAN: *:4f  art 0x0 (label)
  2G:  *:4f  art 0x0
  5G:  *:51  art 0xc

Installation:
Install via Web Interface (preferred):
Utilize openwrt-ipq806x-netgear_xr500-squashfs-factory.img

Install via TFTP recovery:
1.Turn off the power, push and hold the reset button (in a hole on
  backside) with a pin
2.Turn on the power and wait till power led starts flashing white
  (after it first flashes orange for a while)
3.Release the reset button and tftp the factory img in binary mode.
  The power led will stop flashing if you succeeded in transferring
  the image, and the router reboots rather quickly with the new
  firmware.
4.Try to ping the router (ping 192.168.1.1). If does not respond,
  then tftp will not work either.

Uploading the firmware image with a TFTP client
$ tftp 192.168.1.1
bin
put openwrt-ipq806x-netgear_xr500-squashfs-factory.img

Note:

The end of the last partition is at 0xee00000. This was chosen
by the initial author, but nobody was able to tell why this
particular arbitrary size was chosen. Since it's not leaving
too much empty space and it's the only issue left, let's just
keep it for now.

Based on work by Adam Hnat <[email protected]>
ref: https://github.com/openwrt/openwrt/pull/3215

Signed-off-by: Peter Geis <[email protected]>
[squash commits, move common LEDs to DTSI, remove SPDX on old
 files, minor whitespace cleanup, commit message facelift,
 add MAC address overview, add Notes, fix MAC addresses,
 use generic name for partition nodes in DTS]
Signed-off-by: Adrian Schmutzler <[email protected]>
4 years agoramips: minew g1-c: Allow dynamic RAM sizes
Bruno Randolf [Mon, 25 Oct 2021 10:38:15 +0000 (11:38 +0100)]
ramips: minew g1-c: Allow dynamic RAM sizes

Allow RAM size to be passed thru U-Boot. There are 128MB and 64MB
versions of Minew G1-C. This is also in line with the behaviour of
most other RAMIPS boards.

Signed-off-by: Bruno Randolf <[email protected]>
4 years agoucode: update to latest Git HEAD
Jo-Philipp Wich [Mon, 25 Oct 2021 20:57:50 +0000 (22:57 +0200)]
ucode: update to latest Git HEAD

0f022aa lib: increase refcount when returning cached module instance
c9e68bb lib: introduce resolver library
9041e24 lib: fix uninitialized memory access on handling %J string formats
4ee06d8 syntax: introduce optional chaining operators
ce4a7d9 vm: reset callframes before invoking unhandled exception handler
218e822 vm: clear exception information before calling managed code functions
5b908bd ubus: properly handle signed 64bit values too
e43b751 ubus: fix handling signed 16bit and 32bit integers
137428f nl80211: fix issues spotted by static code analyzer
b9d4f61 nl80211: treat signal attr values as signed integers
9a7c355 nl80211: expose sta_info attributes
bb358d9 lib: introduce Linux 802.11 netlink binding
914f54c types: fix invalid memory access on setting non-contiguous array indexes
631f00d main: fix leaking module name when processing -m flag
e55188b compiler: properly handle jumps to offset 0
98c4147 tests: support specifying cmdline args in testcase files
64e4f68 types: fix formatting escape sequences for 8 bit chars
dd86e1d rtnl: automatically derive message family from certain address attrs
74fdb97 rtnl: expose IPv4 and IPv6 devconfig information
7fa1008 rtnl: allow reply nla payloads to be smaller than headsize
cbae3cb lib: introduce Linux route netlink binding
e6dd389 ci: adjust build prereqs for GitHub as well
07ae165 ci: add libnl-tiny to prereqs

Signed-off-by: Jo-Philipp Wich <[email protected]>
4 years agosunxi: switch to Kernel 5.10
Paul Spooren [Thu, 30 Sep 2021 05:27:07 +0000 (19:27 -1000)]
sunxi: switch to Kernel 5.10

Compile tested and run tested on Pine64+.

Acked-by: Daniel Golle <[email protected]>
Acked-by: Hauke Mehrtens <[email protected]>
Signed-off-by: Paul Spooren <[email protected]>
4 years agokernel: Add extra configuration options
Hauke Mehrtens [Sun, 24 Oct 2021 17:39:38 +0000 (19:39 +0200)]
kernel: Add extra configuration options

These options show up when compiling the at91 target.

Signed-off-by: Hauke Mehrtens <[email protected]>
4 years agoat91: add support for sam9x60-ek board
Claudiu Beznea [Mon, 11 Oct 2021 08:47:26 +0000 (11:47 +0300)]
at91: add support for sam9x60-ek board

Add support for SAM9X60-EK board.

Hardware:
- SoC: SAM9X60
- RAM: Winbond W972GG6KB-25 (2Gbit DDR2)
- NAND Flash: Micron MT29F4G08ABAEA
- QSPI Flash: Microchip SST26VF064B
- EEPROM: Microchip 24AA02E48
- SDMMC: One standard 4-bit SD card interface
- USB: two stacked Type-A connectors with power switches, one micro-B
       USB device
- CAN: 2 interfaces (Microchip MCP2542)
- Ethernet: one 10/100Mbps
- WiFi/BT: one optional WiFi/Bluetooth interface
- Audio: one ClassD port
- Display: one 24-bit LCD interface
- Camera: one 12-bit image sensor interface
- IO: one IO expander (Microchip MCP23008)
- Debug ports: one J-Link-OB + CDC, one JTAG interface
- Leds: one RGB LED
- Buttons: 4 push button switches
- Expansion: one PIO connector, one mikrobus connector
- Power management: two power regulators, two power consumption measurement
                    devices

Flashing:
- follow the procedure at [1]

[1] https://www.linux4sam.org/bin/view/Linux4SAM/Sam9x60EKMainPage#Create_a_SD_card_with_the_demo

Signed-off-by: Claudiu Beznea <[email protected]>
4 years agoat91: enable kernel config for sam9x60
Claudiu Beznea [Mon, 11 Oct 2021 08:47:25 +0000 (11:47 +0300)]
at91: enable kernel config for sam9x60

Enable kernel config for SAM9X60.

Signed-off-by: Claudiu Beznea <[email protected]>
4 years agoat91: add support for sama5d27-wlsom1-ek board
Claudiu Beznea [Mon, 11 Oct 2021 08:47:24 +0000 (11:47 +0300)]
at91: add support for sama5d27-wlsom1-ek board

Add support for SAMA5D27 WLSOM1-EK board.

Hardware:
- SIP: SAMA5D27C-LD2G-CU including SAMA5D27 MPU and 2Gbit LPDDR2-SDRAM
- MMC: one standard SD card interface
- Flash: 64 Mb serial quad I/O flash memory (SST26VF064BEUIT-104I/MF)
 with embedded EUI-48 and EUI-64 MAC addresses
- USB: one USB device, one USB host one HSIC interface
- Ethernet: 1x10/100Mbps port
- WiFi/BT: IEEE 802.11 b/g/n Wi-Fi plus Bluetooth (Wi-Fi/BT) module
   (ATWILC3000-MR110UA)
- Crypto: one ATECC608B-TNGTLS secure element
- Video: one LCD RGB 18-bit interface, one ISC 12-bit camera interface
- Debug port: one JTAG interface, one UART interface, one WILC UART
              interface
- Leds: one RGB LED
- Buttons: start, reset, wakeup, user buttons
- Expansion: one tamper connector, one mikrobus interface, 2 XPRO PTC
             connector
- Power managament: PMIC (MCP16502)

Flashing:
- follow procedure at [1]

[1] https://www.linux4sam.org/bin/view/Linux4SAM/Sama5d27WLSom1EKMainPage#Create_a_SD_card_with_the_demo

Signed-off-by: Claudiu Beznea <[email protected]>
4 years agoat91: add support for sama5d2 icp board
Claudiu Beznea [Mon, 11 Oct 2021 08:47:23 +0000 (11:47 +0300)]
at91: add support for sama5d2 icp board

Add support for SAMA5D2 ICP board.

Hardware:
- SoC: SAMA5D27
- RAM: 512 MB DDR3L
- MMC: One stanard SD card interface
- USB: One USB host switch 4 ports with power switch,
       One USB device type Micro-AB
- CAN: 2 interfaces
- Ethernet: One Gigabit Ethernet PHY through HSIC,
    One ETH switchport,
    One EtherCAT interface
- WiFi/BT: Footprint for IEEE 802.11 b/g/n Wi-Fi plus
   Bluetooth module (Wi-Fi/BT), suitable for
   Microchip WILC3000-MR110CA or WILC3000-MR110UA
- Debug port: One J-Link-OB/J-Link-CDC, one JTAG interface
- Leds: one RGB LED
- Buttons: reset, wakeup, 2 user buttons
- Expansion: one PIOBU/PIO connector, 3 mikrobus sockets
- Power mangament: PMIC (MCP16502), one power consumption device
                   (PAC1934)

Not working in Linux:
- EtherCAT interface: there is no Linux support integrated
- PAC1934: driver available at [1] but not integrated in Linux

Flashing:
- follow the procedure at [2]

[1] https://ww1.microchip.com/downloads/en/DeviceDoc/pac193x_linux_driver.zip
[2] https://www.linux4sam.org/bin/view/Linux4SAM/Sama5d2IcpMainPage#Create_a_SD_card_with_the_demo

Signed-off-by: Claudiu Beznea <[email protected]>
4 years agoat91: enable specific sam9x kernel config flags
Claudiu Beznea [Mon, 11 Oct 2021 08:47:22 +0000 (11:47 +0300)]
at91: enable specific sam9x kernel config flags

Enable specific sam9x kernel config flags.

Signed-off-by: Claudiu Beznea <[email protected]>
4 years agoat91: kernel: bump to 5.10
Claudiu Beznea [Mon, 11 Oct 2021 08:47:21 +0000 (11:47 +0300)]
at91: kernel: bump to 5.10

Bump at91 targets to kernel v5.10. With this patches and files for
wb45n and wb50n were removed as they are now included in upstream
kernel. Along with:
- this the kernel config for sama5d2 and sam9x targets has been
  refreshed (with make kernel_menuconfig + save);
- CONFIG_ARCH_AT91 and specific sam9x SoCs (AT91RM9200, AT91SAM9,
  SAM9X60) has been enabled such that sam9x SoCs to be able to boot.

Signed-off-by: Claudiu Beznea <[email protected]>
4 years agowolfssl: enable ECC Curve 25519 by default
Stan Grishin [Thu, 7 Oct 2021 20:15:25 +0000 (20:15 +0000)]
wolfssl: enable ECC Curve 25519 by default

* fixes https://github.com/openwrt/packages/issues/16652
 see https://github.com/openwrt/packages/issues/16674#issuecomment-934983898

Signed-off-by: Stan Grishin <[email protected]>
4 years agosunxi: 5.10: enable sun8i-thermal
Chukun Pan [Sat, 2 Oct 2021 15:05:02 +0000 (23:05 +0800)]
sunxi: 5.10: enable sun8i-thermal

Enable the sun8i-thermal driver to allow reading the
temperature of the SoC.

As suggested by mans0n, disable this driver in the
a8 subtarget because it does not support yet.

Tested on NanoPi R1S H5.

Signed-off-by: Chukun Pan <[email protected]>
4 years agouclibc++: remove
Rosen Penev [Sat, 27 Feb 2021 04:17:46 +0000 (20:17 -0800)]
uclibc++: remove

No package here depends on it. Furthermore, uClibc++ is a fairly buggy
C++ library and seems to be relatively inactive upstream.

It also lacks proper support for modern C++11 features.

The main benefit of it is size: 66.6 KB vs 287.3 KB on mips24kc. Static
linking and LTO can help bring the size down of packages that need it.

Added warning message to uclibc++.mk

Signed-off-by: Rosen Penev <[email protected]>
Acked-by: Hauke Mehrtens <[email protected]>
4 years agou-boot.mk: always link host libraries static
Andre Heider [Tue, 19 Oct 2021 09:08:46 +0000 (11:08 +0200)]
u-boot.mk: always link host libraries static

Host libraries are only build static, so let's pass --static to
pkg-config globally and remove the then unnecessary patches doing
exactly that individually.

Signed-off-by: Andre Heider <[email protected]>
4 years agotools/pkgconf: add PKG_CONFIG_EXTRAARGS for additional arguments
Andre Heider [Tue, 19 Oct 2021 09:08:46 +0000 (11:08 +0200)]
tools/pkgconf: add PKG_CONFIG_EXTRAARGS for additional arguments

This can be used my the OpenWrt build system to pass additional
arguments when required.

Signed-off-by: Andre Heider <[email protected]>
4 years agou-boot.mk: fix pkg-config usage
Andre Heider [Wed, 13 Oct 2021 10:51:22 +0000 (12:51 +0200)]
u-boot.mk: fix pkg-config usage

Using Host/Exports doesn't work as intended, explicitly add the
required vars so that u-boot finds the required libraries when building
its tools.

Signed-off-by: Andre Heider <[email protected]>
4 years agokernel: 5.10: qca8k: backport qca8k_setup tidy-up
Matthew Hagan [Sat, 16 Oct 2021 19:54:25 +0000 (20:54 +0100)]
kernel: 5.10: qca8k: backport qca8k_setup tidy-up

Tidy qca8k_setup for loops relating to port handling. No functional
changes.

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport qca8k cpu_port_index fix in parse_port_config
Matthew Hagan [Sat, 16 Oct 2021 19:22:45 +0000 (20:22 +0100)]
kernel: 5.10: backport qca8k cpu_port_index fix in parse_port_config

Add cpu_port_index fix to apply settings to correct CPU port.

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport qca8k feature additions
Matthew Hagan [Thu, 9 Sep 2021 19:40:21 +0000 (19:40 +0000)]
kernel: 5.10: backport qca8k feature additions

Backport Ansuel Smith's various qca8k feature additions:
- mac-power-sel support
- SGMII PLL explicit enable
- tx/rx clock phase to falling edge
- power-on-sel and LED open drain mode
- cpu port 6
- qca8328 support
- sgmii internal delay
- move port config to dedicated struct
- convert to yaml schema

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport QCA83x PHY resume fix, DAC amplitude preferred master, debug...
Matthew Hagan [Fri, 1 Oct 2021 20:06:27 +0000 (21:06 +0100)]
kernel: 5.10: backport QCA83x PHY resume fix, DAC amplitude preferred master, debug reg names

Backport workaround for QCA8327 PHY resume, which does not properly support
genphy_suspend/resume. Also add DAC amplitude fix for the QCA8327 PHY,
set port to preferred master and add proper names to debug regs.

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport at803x QCA83xx phy support improvements
Matthew Hagan [Mon, 20 Sep 2021 12:37:53 +0000 (12:37 +0000)]
kernel: 5.10: backport at803x QCA83xx phy support improvements

This commit add accepted upstream patches that improve & tidy qca83xx support.
1 - Split qca8327 to A & B variants, identifiable by phy_id
2 - Add suspend/resume support to qca8xx phys
3 - Tidy spacing and phy naming.

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport at803x internal QCA8327 PHY support
Matthew Hagan [Tue, 14 Sep 2021 08:09:40 +0000 (08:09 +0000)]
kernel: 5.10: backport at803x internal QCA8327 PHY support

Add support for qca8327 internal phy needed for correct init of the
switch port. It does use the same qca8337 function and reg just with a
different id.

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport qca8k legacy mdio mapping panic fix
Matthew Hagan [Sat, 11 Sep 2021 16:41:03 +0000 (16:41 +0000)]
kernel: 5.10: backport qca8k legacy mdio mapping panic fix

Add backport of Ansuel Smith's "net: dsa: qca8k: fix kernel panic with
legacy mdio mapping" patch.

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport additional qca8k fixes
Matthew Hagan [Fri, 10 Sep 2021 17:59:49 +0000 (17:59 +0000)]
kernel: 5.10: backport additional qca8k fixes

Backport fixes including:
net: dsa: qca8k: fix missing unlock on error in qca8k_vlan_(add|del)
net: dsa: qca8k: check return value of read functions correctly
net: dsa: qca8k: add missing check return value in qca8k_phylink_mac_config()
net: dsa: qca8k: fix an endian bug in qca8k_get_ethtool_stats()
net: dsa: qca8k: check the correct variable in qca8k_set_mac_eee()

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agokernel: 5.10: backport qca8k stability improvements
Matthew Hagan [Thu, 9 Sep 2021 17:12:30 +0000 (17:12 +0000)]
kernel: 5.10: backport qca8k stability improvements

This is a backport of Ansuel Smith's "Multiple improvement to qca8k stability"
series. The QCA8337 switch is available on multiple platforms including
ipq806x, ath79 and bcm53xx.

Signed-off-by: Ansuel Smith <[email protected]>
Signed-off-by: Matthew Hagan <[email protected]>
4 years agomac80211: Add devm_platform_get_and_ioremap_resource()
Hauke Mehrtens [Sun, 24 Oct 2021 13:03:20 +0000 (15:03 +0200)]
mac80211: Add devm_platform_get_and_ioremap_resource()

This function is missing in kernel 5.4, but it is sued by ath10k.
This fixes the build of ath10k on some targets.

Fixes: cfe0eb7485d8 ("mac80211: Update to version 5.14.13-1")
Signed-off-by: Hauke Mehrtens <[email protected]>
4 years agokernel: 5.10: silence bogus "Missing #address-cells in interrupt provider" warnings
Christian Lamparter [Sun, 24 Oct 2021 00:45:25 +0000 (02:45 +0200)]
kernel: 5.10: silence bogus "Missing #address-cells in interrupt provider" warnings

Rosen reported strange dtc warnings that had their origin in
an upstream patch to 5.8-rc1. Upon further digging this
revealed an ongoing thread [0] discussing the topic:

> [...]I don't think we need a bunch of warning fix patches to add
> these everywhere. Also, the need for #address-cells pretty much makes
> no sense on any modern system. It is a relic from days when the bus
> (address) topology and interrupt topology were related.

and later on:
> So really, we only need to be checking for #address-cells in nodes
> with interrupt-map.

This patch backports just the patch which removed the warning message
(this is from the upstream dtc project [1] - but not the kernel).
the patch does not add the checking of the #address-cells in nodes
with interrupt-map.

[0] <https://lore.kernel.org/linux-devicetree/91e3405245c89f134676449cf3822285798d2ed2.1612189652[email protected]/>
[1] <https://git.kernel.org/pub/scm/utils/dtc/dtc.git/commit/?id=d8d1a9a77863a8c7031ae82a1d461aa78eb72a7b>
Link: <https://github.com/openwrt/openwrt/pull/4685>
Reported-by: Rosen Penev <[email protected]>
Signed-off-by: Christian Lamparter <[email protected]>
4 years agoimage: define DEVICE_DTS_DELIMITER as per-device variable
Christian Lamparter [Sat, 23 Oct 2021 19:01:24 +0000 (21:01 +0200)]
image: define DEVICE_DTS_DELIMITER as per-device variable

DEVICE_DTS_DELIMITER needs to be in the DEFAULT_DEVICE_VARS
list to work as expected. This was missing from the original
version and got overlooked.

Fixes: fd6790864739 ("scripts: mkits.sh: Allow legacy @ mode for dts creation")
Signed-off-by: Christian Lamparter <[email protected]>
4 years agomac80211: Update to version 5.15-rc6-1
Hauke Mehrtens [Mon, 18 Oct 2021 22:44:43 +0000 (00:44 +0200)]
mac80211: Update to version 5.15-rc6-1

The removed patches were applied upstream.
The Cisco Aironet 802.11b driver was removed from backports, remove
it also from OpenWrt.

Signed-off-by: Hauke Mehrtens <[email protected]>
4 years agomac80211: Update to version 5.14.13-1
Hauke Mehrtens [Sun, 10 Oct 2021 19:24:14 +0000 (21:24 +0200)]
mac80211: Update to version 5.14.13-1

The removed patches were applied upstream.

Signed-off-by: Hauke Mehrtens <[email protected]>
4 years agomac80211: Update to version 5.13.19-1
Hauke Mehrtens [Sat, 9 Oct 2021 17:25:36 +0000 (19:25 +0200)]
mac80211: Update to version 5.13.19-1

The removed patches were applied upstream.

of_get_mac_address() was backported in our OpenWrt kernel, remove the
change from backports.

Signed-off-by: Hauke Mehrtens <[email protected]>
4 years agomac80211: Update to version 5.12.19-1
Hauke Mehrtens [Sat, 9 Oct 2021 14:25:30 +0000 (16:25 +0200)]
mac80211: Update to version 5.12.19-1

The removed patches were applied upstream.

Signed-off-by: Hauke Mehrtens <[email protected]>
4 years agomac80211: Update to version 5.11.22-1
Hauke Mehrtens [Mon, 4 Oct 2021 21:48:20 +0000 (23:48 +0200)]
mac80211: Update to version 5.11.22-1

The removed patches were applied upstream.
This backports version 5.11.22 and later does not support kernel
versions < 4.4, this allows us to remove some patches too.

Signed-off-by: Hauke Mehrtens <[email protected]>
4 years agoethtool: update to v5.14
Hans Dedecker [Sat, 23 Oct 2021 19:39:41 +0000 (21:39 +0200)]
ethtool: update to v5.14

Update to newly released version 5.14

Signed-off-by: Hans Dedecker <[email protected]>
4 years agoRevert "ethtool: update to v5.14"
Hans Dedecker [Sat, 23 Oct 2021 19:37:27 +0000 (21:37 +0200)]
Revert "ethtool: update to v5.14"

This reverts commit 7630001427fa266fa61da0b2533e2c1054eababe

Signed-off-by: Hans Dedecker <[email protected]>
4 years agoethtool: update to v5.14
Hans Dedecker [Sat, 23 Oct 2021 19:30:55 +0000 (21:30 +0200)]
ethtool: update to v5.14

Update to newly released version 5.14

Signed-off-by: Hans Dedecker <[email protected]>
4 years agoumdns: add missing syscall to seccomp filter
Michael Peleshenko [Thu, 21 Oct 2021 22:14:05 +0000 (18:14 -0400)]
umdns: add missing syscall to seccomp filter

The 'clock_gettime64', syscall is missing.
Found with 'utrace /usr/sbin/umdns' on an R7800.

Signed-off-by: Michael Peleshenko <[email protected]>
4 years agowireless-regdb: update to version 2021.08.28
Christian Lamparter [Sat, 23 Oct 2021 16:08:51 +0000 (18:08 +0200)]
wireless-regdb: update to version 2021.08.28

e983a25 Update regulatory rules for Ecuador (EC)
a0bcb88 wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
cdf854d wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
86cba52 wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
6fa2384 wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
9839e1e wireless-regdb: recent FCC report and order allows 5850-5895 immediately
42dfaf4 wireless-regdb: update 5725-5850 MHz rule for GB

Signed-off-by: Christian Lamparter <[email protected]>
4 years agobase-files: chmod 1777 /var/lock
Deomid Ryabkov [Sat, 23 Oct 2021 13:22:39 +0000 (16:22 +0300)]
base-files: chmod 1777 /var/lock

Per FHS 3.0, /var/lock is the location for lock files [1].
However its current permissions (755) are too restrictive
for use by unprivileged processes.
Debian and Ubuntu set them to 1777, and now so do we.

[1] <https://refspecs.linuxfoundation.org/FHS_3.0/fhs-3.0.html#varlockLockFiles>

Signed-off-by: Deomid Ryabkov <[email protected]>
[fixed typo in commit message, had to remove "rojer" due to git hooks]
Signed-off-by: Christian Lamparter <[email protected]>
4 years agoath79: ag71xx: Disable napi related interrupts during probe
Sven Eckelmann [Sat, 23 Oct 2021 09:27:35 +0000 (11:27 +0200)]
ath79: ag71xx: Disable napi related interrupts during probe

ag71xx_probe is registering ag71xx_interrupt as handler for the gmac0/gmac1
interrupts. The handler is trying to use napi_schedule to handle the
processing of packets. But the netif_napi_add for this device is
called a lot later in ag71xx_probe.

It can therefore happen that a still running gmac0/gmac1 is triggering the
interrupt handler with a bit from AG71XX_INT_POLL set in
AG71XX_REG_INT_STATUS. The handler will then call napi_schedule and the
napi code will crash the system because the ag->napi is not yet
initialized:

  libphy: Fixed MDIO Bus: probed
  CPU 0 Unable to handle kernel paging request at virtual address 00000000, epc == 00000000, ra == 81373408
  Oops[#1]:
  CPU: 0 PID: 1 Comm: swapper Not tainted 5.4.152 #0
  $ 0   : 00000000 00000001 00000000 8280bf28
  $ 4   : 82a98cb0 00000000 81620000 00200140
  $ 8   : 00000000 00000000 74657272 7570743a
  $12   : 0000005b 8280bdb9 ffffffff ffffffff
  $16   : 00000001 82a98cb0 00000000 8280bf27
  $20   : 8280bf28 81620000 ffff8b00 8280bf30
  $24   : 00000000 8125af9c
  $28   : 82828000 8280bed8 81610000 81373408
  Hi    : 00005fff
  Lo    : 2e48f657
  epc   : 00000000 0x0
  ra    : 81373408 __napi_poll+0x3c/0x11c
  Status: 1100dc03 KERNEL EXL IE
  Cause : 00800008 (ExcCode 02)
  BadVA : 00000000
  PrId  : 00019750 (MIPS 74Kc)
  Modules linked in:
  Process swapper (pid: 1, threadinfo=(ptrval), task=(ptrval), tls=00000000)
  Stack : ffff8afb ffff8afa 81620000 00200140 00000000 82a98cb0 00000008 0000012c
          81625620 81373684 ffffffff ffffffff ffffffef 00000008 816153d8 81620000
          815b0d60 815bbd54 00000000 81753700 8280bf28 8280bf28 8280bf30 8280bf30
          81753748 00000008 00000003 00000004 0000000c 00000100 3fffffff 8175373c
          816059f0 814ddb48 00000001 8160ab30 81615488 810618bc 00000006 00000000
          ...
  Call Trace:

  [<81373684>] net_rx_action+0xfc/0x26c
  [<814ddb48>] __do_softirq+0x118/0x2ec
  [<810618bc>] handle_percpu_irq+0x50/0x80
  [<8125ab8c>] plat_irq_dispatch+0x94/0xc8
  [<81004e98>] handle_int+0x138/0x144

  Code: (Bad address in epc)

  ---[ end trace a60d797432b656b2 ]---

The gmcc0/gmac1 must be brought in a state in which it doesn't signal a
AG71XX_INT_POLL related status bits as interrupt before registering the
interrupt handler. ag71xx_hw_start will take care of re-initializing the
AG71XX_REG_INT_ENABLE.

Fixes: f529a3742043 ("surprise :p")
Signed-off-by: Sven Eckelmann <[email protected]>