domenico/openwrt-R7800-nss
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
65,122 Commits 7 Branches 2 Tags
c95a08b1c565e29a986f4eda5d35ea0613d35095
Commit Graph

4572 Commits

Author SHA1 Message Date
Felix Fietkau
a2c361c520 hostapd: add missing MLO check on ucode bss stop 
Fixes a crash on some config reload types

Fixes: 816c2d86e7 ("hostapd: add support for MLO interfaces in ucode")
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-03 06:50:42 +02:00
Felix Fietkau
da370c7b96 netifd: update to Git HEAD (2025-08-03) 
b563d7b2e65a ucode: add missing return code checks for fchdir/chdir
c3cfd8df02af system-linux: add variable initialization to avoid compiler warnings on older gcc

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-03 06:22:59 +02:00
Felix Fietkau
287f1ea3dd wifi-scripts: ucode: fix ssid handling 
Add proper escaping for ssid values.
Use it to fix multi-ap backhaul ssid.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-02 17:43:28 +02:00
Felix Fietkau
3786d15561 hostapd: fix bss config reload while in DFS state 
Only start a BSS after a config change if it was started before.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-02 16:46:59 +02:00
Felix Fietkau
217c315423 wifi-scripts: ucode: add MLO interface support 
MLO can be enabled by configuring a wifi-iface section with multiple
radios, like this:

  config wifi-iface
    list radio 'radio0'
    list radio 'radio1'
    option mlo '1'
    option ssid 'OpenWrt'
    option mode 'ap'
    option network 'lan'
    ...

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-02 16:46:59 +02:00
Felix Fietkau
816c2d86e7 hostapd: add support for MLO interfaces in ucode 
MLO interface config is provided in a separate ubus call before
adding regular per-phy interfaces.
Preparation for full MLO support.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-02 16:46:59 +02:00
Felix Fietkau
be2916b1d4 hostapd: remove unnecessary ucv_gc calls 
They should not be needed, since the code doesn't use circular references

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-02 16:46:59 +02:00
Felix Fietkau
bcd3d62834 hostapd: maintain ucode hostapd.bss list per interface 
Preparation for MLO support

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-02 16:46:59 +02:00
Felix Fietkau
96fa769937 netifd: update to Git HEAD (2025-08-02) 
3a7878065829 system-dummy: add missing vrf functions
471d9d6abb6d CMakeLists.txt: bump minimum required version
c3a0255e2150 scripts: fix dummy mode on systems where libubox is in /usr/local
7a3b281230e4 update example mac80211 script and wireless config
d9f2dd2614f2 wireless: replace with ucode scripts
74c22601baad wireless: add MLO support to example scripts

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-08-02 16:46:31 +02:00
Christian Korber
682de550a0 hostapd: fix logging of configuration content 
As discussed in openwrt#17517, there are contents of hostapd's configuration file logged in syslog.
This includes critical information like `passphrase`. To circumvent this condition,
this commit logs only "inline" if config_fname is inline data.

Otherwise the upstream logic of hostapd applies.

Fixes: openwrt#14049

Signed-off-by: Christian Korber <ck@dev.tdt.de>
Link: https://github.com/openwrt/openwrt/pull/17718
Signed-off-by: Robert Marko <robimarko@gmail.com>
 2025-08-01 22:14:08 +02:00
Michael Pratt
92d10e2cdf nftables: remove usage of autoreconf 
The usage of automake is left over
after the patch which required it was removed
since the new configure option
"--without-cli" was added to upstream.

Remove the usage of autotools to save build time.

Ref: 72e6e0b85 ("nftables: introduce experimental nftables")
Signed-off-by: Michael Pratt <mcpratt@pm.me>
Link: https://github.com/openwrt/openwrt/pull/16522
Signed-off-by: Robert Marko <robimarko@gmail.com>
 2025-07-26 14:38:09 +02:00
Konstantin Demin
467b7c0dc6 uhttpd: bump PKG_RELEASE 
improves ec62e87c0c "uhttpd: adjust with glibc and libcrypt-compat"

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19404
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-19 18:54:05 +02:00
Konstantin Demin
d03f65a8f2 ppp: bump PKG_RELEASE 
improves ea6bcebc41 "ppp: adjust with glibc and libcrypt-compat"

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19404
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-19 18:54:05 +02:00
Konstantin Demin
c4064c55bd dropbear: bump PKG_RELEASE 
improves eecc53cbe5 "dropbear: adjust with glibc and libcrypt-compat"

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19404
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-19 18:54:05 +02:00
Felix Fietkau
119aa00a78 wifi-scripts: ucode: add support for iwinfo nl80211 phyname 
It is needed for compatibility with scripts that rely on this
existing iwinfo behavior

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-18 12:33:14 +02:00
Hauke Mehrtens
efb4200ba5 uhttpd: update to Git HEAD (2025-07-06) 
b3e3c05 client: don't send stray EOF chunk on connection timeout
fad0d05 proc: inhibit chunked transfer encoding on existing TEs or known length
3d6f01b file: prevent writes beyond end of uh_buf on enumerating directories
c7294e7 client: reject requests with multiple content-lengths and/or TEs
7e64e8b client: Allow sending content in DONE state

uhttpd commit 3d6f01b fixes: CVE-2025-32108

Link: https://github.com/openwrt/openwrt/pull/19290
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-15 22:06:10 +02:00
Jan Hoffmann
b002cdd6a3 ltq-*-app: correctly report downstream band borders 
The direction needs to be included in the IOCTL call.

Fixes: b91d7d9d78 ("ltq-*-app: extend ubus metrics/statistics")
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
Link: https://github.com/openwrt/openwrt/pull/19363
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-13 15:39:14 +02:00
Konstantin Demin
ec62e87c0c uhttpd: adjust with glibc and libcrypt-compat 
glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19293
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-12 23:38:19 +02:00
Konstantin Demin
ea6bcebc41 ppp: adjust with glibc and libcrypt-compat 
glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19293
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-12 23:38:19 +02:00
Konstantin Demin
eecc53cbe5 dropbear: adjust with glibc and libcrypt-compat 
glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19293
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2025-07-12 23:38:19 +02:00
Konstantin Demin
5e0fbca9b9 dropbear: disable RSA-SHA1 by default 
Upstream has disabled SHA-1 algorithms by default since version 2025.87.
SHA-1 has known weakness and most SSH implementations support alternatives.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
 2025-07-11 11:23:50 +02:00
Konstantin Demin
3dc05213e0 dropbear: simplify rebuild on config changes 
It's hard or even impossible to track affected sources
so it's safe to remove all built objects (if any).

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
 2025-07-11 11:23:50 +02:00
Konstantin Demin
d8ff2d8cba dropbear: refactor configuration 
This allows to fine-tune dropbear build options.

This change is heavily based on similar work done by Marius Dinu earlier
so I'd like to say many thanks to original author.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
 2025-07-11 11:23:50 +02:00
Konstantin Demin
bbe4d6ddb2 dropbear: bump to 2025.88 
- update dropbear to latest stable 2025.88;
  for the changes see https://matt.ucc.asn.au/dropbear/CHANGES
- rewrite 100-pubkey_path.patch
- refresh remaining patches

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
 2025-07-11 11:23:49 +02:00
David Bauer
a854d833ea wifi-scripts: correctly set basic-rates with wpa_supplicant 
Correctly load the list of basic_rates from UCI. basic-rates shall be
stored as a option-list. The current code did not retrieve this list
correctly.

wpa_supplicant uses a different config option to set basic-rates
when operating in mesh-mode.

Use the correct config key and calculation for mesh-interfaces.

Signed-off-by: David Bauer <mail@david-bauer.net>
 2025-07-11 02:59:35 +02:00
Felix Fietkau
bcf51747a2 unetd: update to Git HEAD (2025-07-05) 
790b41b6b987 pex: indicate refused update requests
8b100a9e311a host: add support for defining per-host metadata

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-10 10:48:19 +02:00
Felix Fietkau
db763342af hostapd: ignore comment lines for hash comparison 
Fixes spurious unnecessary bss restarts

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-09 12:14:30 +02:00
Antony Kolitsos
1052ecf659 nftables: update to 1.1.3 
ChangeLog:

1.1.3: https://netfilter.org/projects/nftables/files/changes-nftables-1.1.3.txt
1.1.2: https://netfilter.org/projects/nftables/files/changes-nftables-1.1.2.txt

Signed-off-by: Antony Kolitsos <zeusomighty@hotmail.com>
Link: https://github.com/openwrt/openwrt/pull/19288
Signed-off-by: Nick Hainke <vincent@systemli.org>
 2025-07-07 20:49:25 +02:00
Rosen Penev
7e09959efd mac80211: fix wmac node names 
The upstream submission for this mandates the node to be named wifi
instead of wmac. Change all ath79 entries to match the new names and
remove the compatibility patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19328
Signed-off-by: Robert Marko <robimarko@gmail.com>
 2025-07-07 17:28:14 +02:00
Felix Fietkau
a7ab0d5bff hostapd: enable CONFIG_OCV when 802.11be support is enabled 
The 802.11be supoort code unconditionally calls ocv related functions

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-07 17:16:23 +02:00
Felix Fietkau
bb279e1a69 hostapd: revert a broken upstream patch that was breaking multi-band operation 
nl80211 events were propagated to the wrong interfaces

Fixes: 2ac791e87d ("hostapd: update to version 2025-06-27")
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-06 18:47:41 +02:00
Agustin Lorenzo
9738853b73 hostapd: removed OSU support from configuration files, it was removed in the last hostapd update. 
Ref: https://w1.fi/cgit/hostap/commit/hostapd?id=e835288592fd672469f46dc35a03e64115b996e5
Ref: https://w1.fi/cgit/hostap/commit/hostapd?id=7bb11e35d55e3d50199efc45921e76696bebd8ef

Fixes: https://github.com/openwrt/openwrt/issues/19142
Link: https://github.com/openwrt/openwrt/pull/19273
Signed-off-by: Agustin Lorenzo <agustin.lorenzo@thinco.es>
 2025-07-05 14:49:12 +02:00
Agustin Lorenzo
2ac791e87d hostapd: update to version 2025-06-27 
Manually refreshed:

140-tests-Makefile-make-run-tests-with-CONFIG_TLS.patch
601-ucode_support.patch

Fixed in upstream:

804-hostapd-revert-ACS-Validate-6-GHz-AP-criteria-before.patch [1]

Automatically rebased all other patches.

[1] https://w1.fi/cgit/hostap/commit/?id=0b60826a66885bffa2fd709ed5e48cd5fe241b6b

Signed-off-by: Agustin Lorenzo <agustin.lorenzo@thinco.es>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-05 14:41:57 +02:00
Felix Fietkau
39580b1d7b hostapd: disable 802.11be support in the mini variant 
802.11be capable platforms are big enough to not need the mini variant,
and removing it here saves space for other other devices.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-05 14:41:00 +02:00
Felix Fietkau
6e1d4afa86 hostapd: fix potential double free in ubus code 
Ensure that the object name is never freed twice

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-05 14:41:00 +02:00
Felix Fietkau
14b686247a wifi-scripts: ucode: fix iwinfo crash on untracked interfaces 
Deal with data.radio being null

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-07-05 14:41:00 +02:00
Felix Fietkau
ba2ae60a00 wifi-scripts: ucode: fix invalid generated MAC address 
macaddr_base can be NULL, in which case it needs to be passed as an empty string

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-27 13:09:17 +02:00
Felix Fietkau
35a4608a30 wifi-scripts: iwinfo(ucode): add missing null checks 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-26 19:44:43 +02:00
Felix Fietkau
fdcb0e0b24 wifi-scripts: fix validation of require_mode 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-26 19:18:49 +02:00
Felix Fietkau
945d168dbe wifi-scripts: fix missing variables for setting frag/rts 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-26 19:16:42 +02:00
Felix Fietkau
126dc7ddb9 wifi-scripts: fix another regression in the ucode auth_type changes 
Clear the right variable
Handle psk2 explicitly

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-25 13:26:59 +02:00
Felix Fietkau
8ad5416d99 wifi-scripts: fix corner case in RSN override support 
When used, all relevant parameters need to be set

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-25 10:49:05 +02:00
Felix Fietkau
b48925fd9c wifi-scripts: add support for RSN overide and use it for improved WPA3 compat 
Override via RSNE is a relatively new feature, which can be used to enable
WPA3 features in a way that is invisible to older clients.
Use it by default to mask the GCMP-256 cipher from older clients, since
there are compatibility issues with existing devices.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-24 15:07:23 +02:00
Felix Fietkau
f940f7c1ac hostapd: preserve vif radio mask for extra bss interfaces 
Fixes status information and scanning on extra BSS interfaces when operating
on multi-radio devices.

Reported-by: Chad Monroe <chad.monroe@adtran.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-23 11:23:12 +02:00
Felix Fietkau
583f81ef0e wifi-scripts: enforce management frame protection on 6 GHz 
Configurations that don't enforce it are rejected by hostapd

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-21 20:34:12 +02:00
Felix Fietkau
254dd7d7d9 wifi-scripts: enable GCMP-256 by default on WPA3/OWE configurations with HE or EHT 
GCMP-256 support is mandatory with EHT, but HE hardware can already be expected
to support it.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-21 20:34:09 +02:00
Felix Fietkau
a17c3be409 wifi-scripts: on psk-sae configurations, disable PSK support on 6 GHz 
This allows sharing a wifi-iface section across bands while enforcing the no-PSK
rule for 6 GHz

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-21 20:34:06 +02:00
Felix Fietkau
91a50b27bc unetmsg: make remote connection TCP timeout more aggressive 
It is meant for reliable network connections, so requests should fail
early if a node goes down.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-21 17:12:46 +02:00
Felix Fietkau
9850052190 hostapd: fix generating own neighbor report for dynamically added/changed interfaces 
hostapd_neighbor_set_own_report is normally called from interface setup only.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-20 14:57:35 +02:00
Felix Fietkau
3ebf110711 hostapd: fix dealing with mac address changes for the primary BSS 
Ensure that hapd->own_addr is set properly, since hostapd_setup_bss
only handles it for secondary BSS interfaces

Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2025-06-20 14:57:35 +02:00