mirror of
https://git.openwrt.org/openwrt/openwrt.git
synced 2024-06-18 05:03:56 +02:00
123d12eada
Refresh all patches. This contains fixes for CVE-2020-3702 1. These patches (ath, ath9k, mac80211) were included in kernel versions since 4.14.245 and 4.19.205. They fix security vulnerability CVE-2020-3702 [1] similar to KrØØk, which was found by ESET [2]. Thank you Josef Schlehofer for reporting this problem. [1] https://nvd.nist.gov/vuln/detail/CVE-2020-3702 [2] https://www.welivesecurity.com/2020/08/06/beyond-kr00k-even-more-wifi-chips-vulnerable-eavesdropping/ Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
64 lines
2.3 KiB
Diff
64 lines
2.3 KiB
Diff
From 011a56a3336a5de9c3152c169cd52ff79b8c3f89 Mon Sep 17 00:00:00 2001
|
|
From: Arend van Spriel <arend.vanspriel@broadcom.com>
|
|
Date: Thu, 11 Jul 2019 10:45:31 +0200
|
|
Subject: [PATCH] brcmfmac: enable DFS_OFFLOAD extended feature if supported
|
|
|
|
If the firmware supports 802.11h and the device can operate in 5GHz
|
|
band we can enable DFS_OFFLOAD extended feature.
|
|
|
|
Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com>
|
|
Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com>
|
|
Reviewed-by: Franky Lin <franky.lin@broadcom.com>
|
|
Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com>
|
|
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
|
|
---
|
|
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 5 +++++
|
|
drivers/net/wireless/broadcom/brcm80211/brcmfmac/feature.c | 1 +
|
|
drivers/net/wireless/broadcom/brcm80211/brcmfmac/feature.h | 4 +++-
|
|
3 files changed, 9 insertions(+), 1 deletion(-)
|
|
|
|
--- a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c
|
|
+++ b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c
|
|
@@ -6731,6 +6731,11 @@ static int brcmf_setup_wiphy(struct wiph
|
|
}
|
|
}
|
|
|
|
+ if (wiphy->bands[NL80211_BAND_5GHZ] &&
|
|
+ brcmf_feat_is_enabled(ifp, BRCMF_FEAT_DOT11H))
|
|
+ wiphy_ext_feature_set(wiphy,
|
|
+ NL80211_EXT_FEATURE_DFS_OFFLOAD);
|
|
+
|
|
wiphy_read_of_freq_limits(wiphy);
|
|
|
|
return 0;
|
|
--- a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/feature.c
|
|
+++ b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/feature.c
|
|
@@ -39,6 +39,7 @@ static const struct brcmf_feat_fwcap brc
|
|
{ BRCMF_FEAT_P2P, "p2p" },
|
|
{ BRCMF_FEAT_MONITOR, "monitor" },
|
|
{ BRCMF_FEAT_MONITOR_FMT_RADIOTAP, "rtap" },
|
|
+ { BRCMF_FEAT_DOT11H, "802.11h" }
|
|
};
|
|
|
|
#ifdef DEBUG
|
|
--- a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/feature.h
|
|
+++ b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/feature.h
|
|
@@ -25,6 +25,7 @@
|
|
* MONITOR: firmware can pass monitor packets to host.
|
|
* MONITOR_FMT_RADIOTAP: firmware provides monitor packets with radiotap header
|
|
* MONITOR_FMT_HW_RX_HDR: firmware provides monitor packets with hw/ucode header
|
|
+ * DOT11H: firmware supports 802.11h
|
|
*/
|
|
#define BRCMF_FEAT_LIST \
|
|
BRCMF_FEAT_DEF(MBSS) \
|
|
@@ -43,7 +44,8 @@
|
|
BRCMF_FEAT_DEF(FWSUP) \
|
|
BRCMF_FEAT_DEF(MONITOR) \
|
|
BRCMF_FEAT_DEF(MONITOR_FMT_RADIOTAP) \
|
|
- BRCMF_FEAT_DEF(MONITOR_FMT_HW_RX_HDR)
|
|
+ BRCMF_FEAT_DEF(MONITOR_FMT_HW_RX_HDR) \
|
|
+ BRCMF_FEAT_DEF(DOT11H)
|
|
|
|
/*
|
|
* Quirks:
|