From a9be6b9a3736211a365ad3d02bb609facfef534b Mon Sep 17 00:00:00 2001 From: Andrew Denisenko Date: Sun, 19 Dec 2021 13:09:23 +0200 Subject: [PATCH] add rtl8188eus driver; add hostapd with Realtek driver rtl8188eus supports rtl8188eu; it has nl80211 API (kernel driver r8188eu hasn't) --- br-ext-chip-hisilicon/Config.in | 2 + br-ext-chip-hisilicon/external.mk | 2 + .../package/rtl8188eus-openipc | 1 + br-ext-chip-hisilicon/package/rtw-hostapd | 1 + .../rtl8188eus-openipc/000-apmode.patch | 10 ++ general/package/rtl8188eus-openipc/Config.in | 16 ++ .../rtl8188eus-openipc/rtl8188eus-openipc.mk | 20 +++ .../rtl8188eus-openipc/rtl8188fufw.bin | Bin 0 -> 21020 bytes ...allow-event-subscriptions-with-URLs-.patch | 150 +++++++++++++++++ ...nt-message-generation-using-a-long-U.patch | 59 +++++++ ...HTTP-initiation-failures-for-events-.patch | 47 ++++++ .../package/rtw-hostapd/0004-Defconfig.patch | 12 ++ general/package/rtw-hostapd/Config.in | 113 +++++++++++++ general/package/rtw-hostapd/rtw-hostapd.mk | 158 ++++++++++++++++++ 14 files changed, 591 insertions(+) create mode 120000 br-ext-chip-hisilicon/package/rtl8188eus-openipc create mode 120000 br-ext-chip-hisilicon/package/rtw-hostapd create mode 100644 general/package/rtl8188eus-openipc/000-apmode.patch create mode 100644 general/package/rtl8188eus-openipc/Config.in create mode 100644 general/package/rtl8188eus-openipc/rtl8188eus-openipc.mk create mode 100644 general/package/rtl8188eus-openipc/rtl8188fufw.bin create mode 100644 general/package/rtw-hostapd/0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch create mode 100644 general/package/rtw-hostapd/0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch create mode 100644 general/package/rtw-hostapd/0003-WPS-UPnP-Handle-HTTP-initiation-failures-for-events-.patch create mode 100644 general/package/rtw-hostapd/0004-Defconfig.patch create mode 100644 general/package/rtw-hostapd/Config.in create mode 100644 general/package/rtw-hostapd/rtw-hostapd.mk diff --git a/br-ext-chip-hisilicon/Config.in b/br-ext-chip-hisilicon/Config.in index ec45771c..6be9e5a0 100644 --- a/br-ext-chip-hisilicon/Config.in +++ b/br-ext-chip-hisilicon/Config.in @@ -33,6 +33,8 @@ source "$BR2_EXTERNAL_HISILICON_PATH/package/motors/Config.in" source "$BR2_EXTERNAL_HISILICON_PATH/package/mt7601u-ap-openipc/Config.in" source "$BR2_EXTERNAL_HISILICON_PATH/package/node-exporter/Config.in" source "$BR2_EXTERNAL_HISILICON_PATH/package/opus-openipc/Config.in" +source "$BR2_EXTERNAL_HISILICON_PATH/package/rtl8188eus-openipc/Config.in" +source "$BR2_EXTERNAL_HISILICON_PATH/package/rtw-hostapd/Config.in" source "$BR2_EXTERNAL_HISILICON_PATH/package/rtl8188fu-openipc/Config.in" source "$BR2_EXTERNAL_HISILICON_PATH/package/uacme-openipc/Config.in" source "$BR2_EXTERNAL_HISILICON_PATH/package/vtund-openipc/Config.in" diff --git a/br-ext-chip-hisilicon/external.mk b/br-ext-chip-hisilicon/external.mk index 3b3dc408..87088d81 100644 --- a/br-ext-chip-hisilicon/external.mk +++ b/br-ext-chip-hisilicon/external.mk @@ -33,6 +33,8 @@ include $(BR2_EXTERNAL_HISILICON_PATH)/package/motors/motors.mk include $(BR2_EXTERNAL_HISILICON_PATH)/package/mt7601u-ap-openipc/mt7601u-ap-openipc.mk include $(BR2_EXTERNAL_HISILICON_PATH)/package/node-exporter/node-exporter.mk include $(BR2_EXTERNAL_HISILICON_PATH)/package/opus-openipc/opus-openipc.mk +include $(BR2_EXTERNAL_HISILICON_PATH)/package/rtl8188eus-openipc/rtl8188eus-openipc.mk +include $(BR2_EXTERNAL_HISILICON_PATH)/package/rtw-hostapd/rtw-hostapd.mk include $(BR2_EXTERNAL_HISILICON_PATH)/package/rtl8188fu-openipc/rtl8188fu-openipc.mk include $(BR2_EXTERNAL_HISILICON_PATH)/package/uacme-openipc/uacme-openipc.mk include $(BR2_EXTERNAL_HISILICON_PATH)/package/vtund-openipc/vtund-openipc.mk diff --git a/br-ext-chip-hisilicon/package/rtl8188eus-openipc b/br-ext-chip-hisilicon/package/rtl8188eus-openipc new file mode 120000 index 00000000..29ff6081 --- /dev/null +++ b/br-ext-chip-hisilicon/package/rtl8188eus-openipc @@ -0,0 +1 @@ +../../general/package/rtl8188eus-openipc/ \ No newline at end of file diff --git a/br-ext-chip-hisilicon/package/rtw-hostapd b/br-ext-chip-hisilicon/package/rtw-hostapd new file mode 120000 index 00000000..1d02e651 --- /dev/null +++ b/br-ext-chip-hisilicon/package/rtw-hostapd @@ -0,0 +1 @@ +../../general/package/rtw-hostapd \ No newline at end of file diff --git a/general/package/rtl8188eus-openipc/000-apmode.patch b/general/package/rtl8188eus-openipc/000-apmode.patch new file mode 100644 index 00000000..ee31342b --- /dev/null +++ b/general/package/rtl8188eus-openipc/000-apmode.patch @@ -0,0 +1,10 @@ +--- a/Makefile 2021-05-04 14:44:59.000000000 +0300 ++++ b/Makefile 2021-12-18 12:07:01.433235328 +0200 +@@ -2055,6 +2056,7 @@ + else + + export CONFIG_RTL8188EU = m ++EXTRA_CFLAGS += -DCONFIG_AP_MODE -DCONFIG_RTW_HOSTAPD_ACS -DCONFIG_RTW_MESH + + all: modules + diff --git a/general/package/rtl8188eus-openipc/Config.in b/general/package/rtl8188eus-openipc/Config.in new file mode 100644 index 00000000..af9fc91e --- /dev/null +++ b/general/package/rtl8188eus-openipc/Config.in @@ -0,0 +1,16 @@ +config BR2_PACKAGE_RTL8188EUS_OPENIPC + bool "rtl8188eus-openipc" + depends on BR2_LINUX_KERNEL + help + A standalone driver for the RTL8188EU/RTL8188EUS/RTL8188ETV USB Wi-Fi adapter. + + Make sure your target kernel has the CONFIG_WIRELESS_EXT + config option enabled. + + Note: this package needs a firmware loading mechanism to load + the binary blob for the chip to work. + + https://github.com/aircrack-ng/rtl8188eus/ + +comment "rtl8188eus needs a Linux kernel to be built" + depends on !BR2_LINUX_KERNEL diff --git a/general/package/rtl8188eus-openipc/rtl8188eus-openipc.mk b/general/package/rtl8188eus-openipc/rtl8188eus-openipc.mk new file mode 100644 index 00000000..d70d77ce --- /dev/null +++ b/general/package/rtl8188eus-openipc/rtl8188eus-openipc.mk @@ -0,0 +1,20 @@ +################################################################################ +# +# rtl8188eu +# +################################################################################ + +RTL8188EUS_OPENIPC_VERSION = 6146193406b62e942d13d4d43580ed94ac70c218 +RTL8188EUS_OPENIPC_SITE = $(call github,aircrack-ng,rtl8188eus,$(RTL8188EUS_OPENIPC_VERSION)) +RTL8188EUS_OPENIPC_LICENSE = GPL-2.0, proprietary (rtl8188fufw.bin firmware blob) +RTL8188EUS_OPENIPC_LICENSE_FILES = COPYING +RTL8188EUS_OPENIPC_MODULE_MAKE_OPTS = CONFIG_RTL8188EU=m CONFIG_CALIBRATE_TX_POWER_TO_MAX=y + +define RTL8188EUS_OPENIPC_INSTALL_FIRMWARE + $(INSTALL) -D -m 644 ../general/package/rtl8188eus-openipc/rtl8188fufw.bin \ + $(TARGET_DIR)/lib/firmware/rtlwifi/rtl8188fufw.bin +endef +RTL8188EUS_OPENIPC_POST_INSTALL_TARGET_HOOKS += RTL8188EUS_OPENIPC_INSTALL_FIRMWARE + +$(eval $(kernel-module)) +$(eval $(generic-package)) diff --git a/general/package/rtl8188eus-openipc/rtl8188fufw.bin b/general/package/rtl8188eus-openipc/rtl8188fufw.bin new file mode 100644 index 0000000000000000000000000000000000000000..0d7fbab5ce8aae0c562131b31065130e202d0d81 GIT binary patch literal 21020 zcmc(Hdwf$x+JDX@Y0^@987dSNC?PDaE7FSBU6rEM^$Lwf#Z^m?qJj!3q#~A*Q%XUo z+S4{w)?G!nt_ZGlyIZ{Msx1@+6tDqzy{wl5Bt?WaCu$IElk@vNbD9df@4oN5pWh!Z znlm%c+@G0w=DAIyk7k)HCX>nT7;$00i<#cM7>Sequ~n69$1NuTOeVH@!l~&U>rYAl zbAs)-Re;#mu|~M##eXjH@6+tjT(;&DCa+}jYPR8a)|}2>y_?BROkT_6-!S=ECO^;Q z7nr=B$s3vc3X}iHp1X|6uQK@!_UAL$>$}zhQEW$;X-8$K(X7l3106RoPfo8mk)0s^G36Ib%FV*}9MsJ(I6H^FXXTjib&Bt3 z`Z8v=SnR2(=^0s^r4Gp$nwiCMA}}sfmT8=6qN&(aZ|amLNCi@f=`qs|(`QnNbf5IJ zv`hM$F^fH&=Q{JR@jQ@o)_KJbKewY>k|c)znHkM8ONz~Ax7!UEzJSvgfe{+ztP;jx zO|b!2X4IqakN-xdSePl-z~=wKcWaBBIFGNe)N~Cg@3L=Hw>}nLOJa}h zee9@n)$#5(8T09#O;v4$rouf-%n!@MyY1c~TU)yG_nV7ykL_)-f70`HZI>gQu8(t8 z9nZAe+szig>EWvG{LnY1aC+yu;yi1*Z{_&(UA^pofzd7`3DZu_&an|l#hvSO7F#F#%B0d zo_oCeguOdg%p=}2*OQuhXynN6Q&Z({hYy!O?Zsp))+%ciMI2Px-hHBXb2{5lm79{% zEh>y0c_=mY`;qduqvcN`&XvczEyp91EErbfF?(cE<1xRSJkfJW{OHB~j?Tz$^xmfvJ-?10UEA;Y zs!n@hSFQHKIsJ#9pzj*32j8y|-~EyX_{3cokJsXdQR!nAHAmEq4qbc@n$vAtm+Q+ zc(ZzaT3Y=b^@C6m2dvACskT>|cH-|CAtZn=^e!=j3hf%%Z#<)rFStZk460 zk9`@Ehe)7GS$T!B@~A1aOltJJ*{r*#@js^8NFV_zQr;*k9I)TV6H)FzG}uDieHb=I~6vXVBen#8$+<;r^508 z{3qc?}0ShSLHuKaS|+gDr`K#zBv{46M}tvDr^G5`cH+Or74a5zL6M0 zn$M2!nX1y5KsXAaj&L-V!-Q}QLJ46WLWXcGLNh`KLJPui2(1W*_)f=nq>tiGz=k3m zk1zw_PY`AzoPaP3;aLc?(SM)XCJhJP8<+HB!-xeKB6g0HTYiRAer99&sQ&WNX~>Y4 zJjdsa6~I9GsG;Sftpd1_%^NGKo$m1WiTOoJB?o`*BF>KK(M1WjIo>;LnA_IZVUEs- ze#^V&b(#5w+Yw(>_O{aat`DPW{Lp99qBBrKY22ZqwZdk!BRqTyV z0a&NwQ=f^?AJ4<5H65kjL*yk1pO&7ojZ+mwlqvYU@G3s7XV7OHKF?i-&$OT7^WJ_` z+N?+&Y7tfs?JLq&I(8jw)m7!%880|5jx7(J-w>vKyzta)s(%H!Y!s;(WJNX&N5U6iYQ$bsx8U5AH)!0v`>; zT9^L|$ZuMf+PcyJXQ9#7-$&4Y=wXRl-g(#(Ek%CXKz_REr2I6IHB@A!qZjm>ta>`K za$8r3Hc=jG&qQs9Vx6Vxq5gQ{VLP{c{E}sZ zbz{oQHpS{Opbn)WP0dr;{%e(nS5=F~0~r>Oqy?JNFht#Kvxba#o2q+8AR1k&cCJ(E z7x0$)zPP`5nZ##J1z6RiFS>1sQsy!Ddb1#Hu|D>o>CheZaG6Di)Zt~fh- z1ApV9&}DStD*>tpK+9{<>v&5CeRf8#Q>>5Tbf7qvx@GT=(SQ6H4Gl(vV;mIsu~ieD zI1-Z+N@FKZEBa@vhGEj!7R++wt;j`#lgTz@080km=(xHw zr)%ygs6Z<23mzQjs4IDV<|eamOlMO`VVdj3P~7#b^Fz77H)Q}&ndkbg^HDj^H!}$+ z1fWaK^!W*p=X$Zy1Hg)S=zL3mcqR`Hi&d9v=3Z_+>!{Y;qk;W?Cg$l3*o)5$#b%YQ z>!|Knt~72}yOwuRITQGpcf2G7P$)-Wdej-8>!iA{>`c&*1b0M4cv=aD1O(bU>;lT>9JpCwf zLhWy3py>T-ytnK*F>BPKS@S5hJ?|Pdyr22#FwSMqSM+MIW=-d_t z1k`5$8MSZMXXv7(+$6?ueQZ1cjD-5)^=WaxH1(KYZ(T*(iO!w_cZnZ6DoxdK;XGf( z>u@C~fu)+qrsC#c&yNRnQoZN$;2$fdRW7Jci+-Z&%S;uPN~yJ>T^btwm0(>O(tQ#Z zFHot*E2dY)sZObc+QTs%UiTtSZ6<`s=W`;_yH!131v~FY1$jiIb6B35ZKSA+;>rbL zbOFEWDODQ&N*B;y)CHa^fhcufKq^E{nT|T$fwESgVGIXxwa*w)1`pn*VXpoe%Opnk zAPvbC(w|=iEdC|hBc>WHA#O=#(Oxl9t9N$rqKLOdz6~>1^-{CP3J%pfZ6Nb%f+Bqm zuUmpajG-n9)1rS@^-9yyr84hCw2$&CO(Yrgx0w0b-ueupLK|n}kXy zvF8@pE8FA<_C~x+chqMn4UcL+?#lX%*kZ9Q!;8h0^^4?o%U35vr>V}`WLoDN_eP>O zsuujPm}?+FZBDU7r-iUB_p1G9RplE$R3GqUh8Od$8;rBOnAiRh$vW^ay2sqkGQx|K z`!0m7{K{g#1k@@Gt7#9L^>$_jKezFFzvQSGQK{1o3Moxi4TqhO*<{lyf9cox+JlPq zxavKvS@mY)Hx$2A9y|;%LqCWrq#2rf(4A)CLY%dcs^ zP2(3Q&ua242}E3;gbpxiX+ZAn;+DhKPvomN;t2HOxVjx~3#zDsF%OZ7rgdJI%#O1_$+G;~tm4ehEoGy5ZPHCh4O1|aT2JvI|X z6P?5IRU5DSHs+C8ou_7INw{QRlc)Hs?2p`1yrqQCpNY@nOCl{LUQ6~moG%qEs2)p8 zN%lHxi5v{i^bXglfH#x3*YYK^_`AP%w`*>{=BSjC$ARtvkm|}J{{mN)(zp$xZfBd6 zs=D4Jfk3uV1jx!(#nv~j3C50v;&iq^RU0H+T*<})RcK7yW#V+5X`HT=TIGc<>VDz|Xez2WHkJfwyD-@4Fr0VAtXD>Cq0zw&A70Y;l z6ROAR`a_YdwOD<5lL*m7sofo#>ks%SO(s>}WcB5qJCFml$`i=X+dslBfwR{^HpZ)c zks@}zP8qlqt-kDJGd^AO{WO_S-QR1QEG<^!+y|;~sG3Z^bdbDCso+8-utG>MN?^HA zVX?&@56+-LpjBDX30f+Uae;x1C$-9-xco$FM!23rEBxnMc~^g)3YIdJq!8EhO5jQ0 zXhQZu*GhS`Yb8oipJ^KP_)kTn$CVZB&8pK+6I~vw#`e+0Q2l!LK^Rh$K!d8YJDYvn zK!pPwD5el-RB?L*gt)|tKk|(ooUTKShaUpd=d@CbRk3Qv;}1phyH78>#`QW>G)nyt zOugkHKH;*mUj*;+N%FP9Qi~QWEoI)(z769aicVGI-+7p9DZ56EyZ*w1zbLx~<(ND+ zSh^1!3RjN~eH&V!!e%9^t9gT#WoJUg!Qn>qnUTCqGwm&*;! z>YUl$tDDtWX*1~mRhpy2^{TnUCG_NiCo@$H$4ZYwjI^kP=f%Zd%qy!2{=VD^qlB;ub&m^4(_v815VuD1Q zJ1O=6T8Q0;*~~=?81a=M608k`l)7a-TfJR%XEv+vnL+Y@ubbEd~ieM`sB z9zeI+8L$GAmxbpj%l9|N=0!Xf>pbhc@SM&-df`~#TBBe9M@e`46OsHwDdBnN>X=b@ z-m`k$yzsnzfzw;&6*B+nNR%qow>Rqhlt7WX4kJ<(n7p^JUgscZ{B0Cu$4UYXJ|JGx*?VJO}*J6IOIf6HY& zxOdBC!K*?T$#p)ay*%%g*)4N7-N)Zw@WefJ_wwMiAlZ#g_l6pq?kP?Wx5drH9Jl^D5|4w{^JWGH~?|1w717C$I7tW z5x#juY>|jOU$@O|j`^aOVe3Y(72Sl(Zq)f^NIl{CwAIbAg}xic&*z)RgcoXI@0>;6 z3AAJ8^WXK70+2C>}pem%^ zc5uoL#WKd1r#Z4OQY=pB0l+9hbOs(EijJfKL%Z0kWuMKT`lMIOjI^1taLdc9P28M0 z{*FWh0vXgB)3PrjX&M5qKMtus;U1$jZg<6@n}u);)ntFKJ0C2A(zsKk3%7yBn4ze3 zfgaU;+vm0mqN6mvul;buZ6S^Wic7b&jU;2aV2#^99oo+ws(`pV0BE1CeeGdmSEC!% zJ;rs|t&%dqjGTTEq3aTfZ>iq9qMlntsV^xFb%Plf2C_ex9(96Mh&oC70u^f9r9!1o zVjQ@HPSsO@NgZ~YqrL7iP$?*l?-2*o2zmvjLU9fR|C{QTKT#dxW@wk+!>N%EC=F0- z*z|U58iYTvNAIFW2$`Z9^aG*-P^b4qW3lS+@^hjWfQ87IRe$}q|ALkV=r70DaO-}%l1{NX}`a4gi)9hhWH=vBF2hT7f z&d~W3FSOr2Pe_BsRb6^KuOdc5=dea>8OH2CIo1eEC4Nl#@%^L;_U2Z>Vc?Fb6kP z)KJbwycVA(50A7-7T2de8=S!Y}0gK|3s?AV$~3(2C5QTlIXo$pqDa2aR_-e=sNHAwwq=;PuaU|^$dmXInWAkeX1?eN5wm0}O=mz&Yvm8#0GVycEP|HWsV;xy zjjEadzGjBK{{D6;*?MU@RjI!pT$-rseb%Vkc51PcdQKmx?|oKuY4Miu-BDulZsm&; zvP+Eae_8qDsaZzwCEvXso9PT&{Bw$UAFS}MRJBBy@6{^kzNmHYJStnO%2E_AZ)Rc+B4Rixq4LjXbD!J znk8?-;sm{&PKpHf{QXMJn-I7j2+l1p85>-JzIgCw^3ae{^A@OWWueZOP7Qk9V=(3` zOE_s3MJ$J^88-spa`ZqRcPw zwSaH3>VRyq8iRN+IQPnug26%9Dhok-PwJixc5ev|rPkA;4|wuJ5cK5H{JpJ8O^4dX za`_{_3qB6@FQH4Xlw>n_ys~uJPAh;SkZ=oq4o&_Eje;tq(EgT(h=iRI>1FBBPf$C$ zi|?)%I4v)ca7BbmG>5+qWG0fNK}yrGh=$YGeX$@vv{}won!pD&<*0FFs{A+Cg_lo^ zUWg;5yEYRTS{bPR3O_&j%vPHHj8()52|8BXK@l9UDI%halLiCGl`4D*4lzjHp;$Q- zw5n$T-*&He9^c+kUM?9J%r>TEMhPI@%VOo>a?dq1^SlGB3@F&C7Qr@Hvj-w3i7&#q zLCGj5a|mo4h|Adm937biidfATngeR;-RdL^YY+7E<`OZzSnR_(R0q667OQdOLB4+zf~?Z@}Te5xN=FqPM>#2TKG! z+_gB(O{=g41}_sSqV>?3InpNCRNRXhIHgUJ>P*Bkk~U70-jY$!>AKD^ts)^q%WRlG zO%UWI{`l_;whv}gZM~q=FBKTKAz2KS0Bod3$b>oAaiHB$a0K3lgb%+JPHOC(!VtEF zY+7W#1Y>rR{gS}cP~E8p%-y06#P@iIRSE2-LXSTqU~j8>mz6*Kxu72*yj zaf_0o1v0nO&?!`F71vcR;7@+tF4+{zhdy1tMhR2{YgZSzQAaB~vWG9#sGnJ#F?h>@Br_5{dxXRlX6JTOG~<#!rgdG&N4zJZu~2 zTBw0uGASq|E-QgmloGBERs7Lm0$EgpRO?%Aqz#!stm?01S%r=qmeps9DT)4+z+JGa z)ir~;B!g|lI}S`3c#=HzbgEZW7_CPU@URVkQYSefoDg~AkN=ZR7Tf3F8f7W(U#zk& zT3zcLxa3O*rvQ?KvoRS{8JdrfJ-vX2PDXtFUuF6-l znn~g!Mu9ZTEVzlk`0J1!+&OFU08!;H;@16<**cjeB)f8g_=T2 zPipjjUJ;L0$##mg^VcSU)0Iac$0l-QtAIxziLM1ZFS-HyIt30(alaW}94T<Z-%%?nhfaO8=!JXOczOIWtlNyH=)f^Q0!*F8eA9z)~o_+ zDO$k{+B~SrTE?R)+^e7_?+ss zg*S&6K5YKopBveP;p>Hp3ddQ8XlJ9HK~TMOBgwrQqELQ}AO^acM(aW8BVDNi~rnv=nx}O^zM` z^X-8AxA>BFDN}$`qjTLhFP5|d^A>|j=0jHoMfcoystOQyn-J~s?4$hFazO# zmx&(P#J3Ee0dN+|%K0kf1V^a9=NzXg`?`>pezYz3Tc2rS_H__j+*3e*g|?%Q49-55 zjH_-<^O*-zuxa~-{FusuvK2=Kbsz_SiyM{ffK6OYz^H7JdZ8=#nI@e;0ayt;%%mAm z8oz@XEvdC5cUjhDhGGEKAtj$ul)S4C6YS@;LW_W^+1p~HjVkaW7v{JOI5Z>)YUB6l z-v8t>#_y3Mo@t7N#|w%yTwO{s-qFhw1s5reKVY)D5+_&oA0T$IfDro{zt7(0WaPlf zfAxFHapuB6fab2^w|=LvC$VP*Ngd#1iDe+&>)0-(@c>#nKt_VB;t7$0AY9S+i{}ws zY1~hT&v}qA)JRyRg1Ce~NIJ?NEFWzbJk&b^0i8Z4iUe^slLd~%MvMFpMgCqNd>m~enF$JNP5!K=%&t(I4|+=9M4E6^FnrN+zG=l)HpeaA#4VtN3nE3 zEt;!Jb1f)5lT0jP67Pyh*vO#rop*|Bu_miVk;zm9dx^5-K^Op`^O$pdj* z3T5_UE1?@68lnwq78WbfY?<9}DkgO!`h(806pn8zwg4mapVB}qm`N7x$!L#n|BCM_ z=M}%Lzp^X~di@$WiQ1uW(v2AUsK2j%6nG|ICdQ6>g>gUCE6;<5cef%vr?$n(CF#-0 z^}7{Q75rA>{wiv><7Z`0;FQ)p3zlI>r3s7Ku;eYC@!?MlPjTK#aorp9}|0NA`aVjuMTe@KW`1J~IvgZo8cXz#Wd)r3Y{Y3M*ze|&(a z&JbnNNp4aawhl1#eU8=>yduIcHS_llLrdH`y8dzu@XrGSOl2uwv>wGrF_~aai$hYX zpczSod1yO#Qne9O&2+Iq+Qo>o z`wsB(S9$r2Xqb1Thhl}Xsj(}{uasXY^cN%hm8pIg1y}fQqTovZ&Cq#b*YsiG_^#(5 zs(F6ViRr6>M`><>VTGB3-GgFS+U|>M@+g2?_26y$M4|IUAyeTtMS54wKlm0EN@xyD z_YY#aHA}W&Jz9_A11Dvyxl;3f4($^7yC^k5nj~xejPF@Zz81GFuS^%d#t0;&FmZ@f zcqdiU<@;QdGb4z!nXSGLNt0Tr`OhJBJFe1pD~j}?aq?rVf#cW82a#yTZfb^f0TH{| zXKVcoSs$Tiv^;n6fW9*Y(g*I|6zD*YlZcM{m;@J$tWR}Xl$y`QIB7PPfyJ{pFi^E;KMp@hYzbiyKJ6Ff@+xkuVSALX7Wa!rL> z1p3s!IQ%)wOl;{ozI&nHE@l^rQ{-}p@hO!T_$MGrcd9U+q~;&8LWq`A5cesX(Q;9i(K4>B&x;i+QhxXvtvP%xe%Il5J^IND z7i*64n^MYemdf4c@>}j!q>IBhA@gSZ-1yxBbV(uH4>-`^f{5k4K=XAFm4wZ?2NGIt z51bw7k!lEB)a#fx_Nd7*RQ>`}h1cUx>9l}9{3#e2RC-tS=90DD%bQj3Pyjpc5&SHg z_q&&+ z;;~M_f=CgR97X0t4+zZBf(6F=8u0|7Oau*eOrGyTfeLRUhipQ&YATfjo6*_o4`I|(%7ot7PFL;2Kazl z`Tc8UOYrvv73A6523!P2&|c;*)?hbB-0iOS!C;dDK~5!R*7YHlO|-E^)rH5`=!n~o zLidBpqFW0AkRNFhWR4zYX7xS@|u{$sq;_sKtaZ%nEiO=w<~+d}9q+ z2mSmvvJUPP6$ssmjrs;clB65tzP6 zo?PEiI0?%z5jHsZSbP5=JMmF!J^;M{1SfXjvaol&xgl zbkyGqd;Il;Pk04fPc{anVGk(t-3UKG2w|zA3!w*LP!o#{>ENhV?{&tD8BE?nNV334 zZRW2%R__JxpRc66jM+gS0}%nQubWjkwBZ(_qwzkrAhsxOkN4GtE}KvcZ(jC1FUA*q zWnkWS8S~Clo%J&pc&A4^HwaQ&sI?yEE%!pB$zQvWFtQ6yZgM^e53sPI=kfJ3Av2Cq ztc&oj1&&c=!n&V{jV7w$yOy^+Qhyr_TG-p`Zxe_p5+oJ_Y*r1a2bVH3I#nI*4yZq; zD$;E@eA1;p*hQt=RL`09)wJ_zQOprJ6U&h{AW^Zhs~zMGO>z`u9Ky4(9`C`@2q5_C zl@Ag+_TX(AXg9s28q-WVb6cy4oUD1IRf3Z>f2s#h=g4!q;TXAvz&dmqvF5NcIrwg< zsux5w9Lh>5Bs1eWC;#gF?rh@CW0e)GdAG#*27w~10d{V zEF+d(Y>DBb4jkL5Fx24igb~%q0sKtE1a9Wd12%BH{3Ba7q`hDs5dXf4B?MlKCmzPc zlkbaQ=@p1bK0~5P8WhpJ;?acR_D>rR^1TMvy$+m>*XGK<>dEh(N<)T;?<}HM!ruZ; z39!I}`kaYFg#ClAk+u-Wa`zK*4u5S>h_#atiyc0f)CMS(f5^sP`zn|xr-&s+MJTZb zE^3%-kPbqLVV$8l{s4Y!&T!`!L5CgqYZ)k z!zbzwcvGhCd%75BY&Sf&Yd%#wpE*a)?(BK`XMg~Jmn_&c>xgTjT-})#4?(c0`8>L4 zZJ{ONB!=&EfX5l&-2>op26!0`pYdFj>~{;iQpm%CuN-#AW%J=8hCyTJ?tA8FseIfA z4x;8G>I_a1U*N9@(8_>1DGhC4EBrQk8#1uBtbF|g9(bdGoLD082%&|BB7l|M3YQ6@ zEqe!O3sl^Kw%~D_pe=vH4J6hA4%N>KUh-*NRzJ~{73&3m4&8mI?+4=9S58v`QzDuN zSy)Cd-E-lsE$A$h0JueP3ManBe{);*^|&{10J-NbL=U9kNb-3P?ro9rhZ?rFh}w?x z{zrA$t(tEKE{zA?^xbNZcBK9r(oPKyYTv9Kw#xOmYkSa!4rfWx08Fl^5C8WrQhllC z8OOycc-kZy|2IdJufJ6sF*}{nbQycOL-nS_aXI0LCe2Sz_JVj2&z>MELTsGLH-(sV zXqc=wt3`PRpEfmVuOfP&G@Y)&act`Sc$$56j%Q&G;=}1P)oFo-x>lYdqRis@NIqW_J=gW5e6|3ZEw1-!QEHpi6=J&;C|Y%Asw!*mE+{2t~$BfRmawW(h08BRaZIIue)9b8|H8c zR@dNbk?p8-h!$L1sVwq|1uiNCQ#zil>&E+$N~aMHWJ5!v1fGIOYkI`A#H6e~1FE44 z{gLGqAB{L-Q`J|0-1k)tfkT) zJ=sSd?Dn2@`q5_-vIT-9dcNLJwnF<)e-LG0)B@&!^S>7b9Q>(Y;jM_B?!PpK=i^8U zdM*X%f`E_>VM39f#*3JuA(}r8+6X+RA{A_h-_!>GeDDj>S_s!5TG=Fd_|p=i#IIF% zzFwN;u|(SP%qRsxLy_+I6!`0~O4gDB&nWFiOw=o!IKAuAVR>5z@3FQZ3dTS-b-sQGrI9muGzNS^w=Z=pd10V5$@ z8c;dBDYOl+ki-qyoY0U?w;=oqfg2B_X*XqH%kVNc-3~hUbO{b(qyS$9D<#wl@U@Qf zd9NFa@Z?+vy)d&Rxr{Do-HrE+^OSZOAbyfdC%85U##u?1PNmTd zF-7Q9NSjiMA3fD0w#Y>r05{oQay@F;1DiPcITT(?7eAnI7~owyjO!n7F&fQs3Z)w@ zYN9jpEKD6(fSX7$JF$4U@9&d%R}uEVQu7Zw1@Qsf+&@&j0BKCY3y?;<^fTcv8yw=n zMjl*WJeqffvAJ&sPg#hw13o3-hRj4UoaoO7N}Wrkpl?D87y&f_FCnTEdNx_>mLF^F zMjPOFR1EAEg!_4LYap#KE#f=|=0pq0X`q821L#Ww8}bpxswR1oFOVQ^$4b+LX3v6y z2j*cCP3Q|KFw=_7LL>DBbm*F~;<&iyPImBZy9*~NHDA)y8zHe%bltT}kLhDQNBruvdLJ8mB&&@6hk?CjRcNo-Xgg5-Y)NoL2&Ay4WF@@%zm}lXfb@JaP z8TbP(#MsbVU!{q7xxhC>E$~tdA~yUZ`LFRj?O3nY4>E^WF)`SmvxHrN9@zsy-$6K@ zGfVhO(d!d;RENO|u8Gr0CW0F?ys1oA_UVzU>JAO0J|tTVqg>(-WE5RES(m zvEy&X#9f4|e#{ZC(Ghcr9gG2?kw7K#OeyrFN+&HJwnwLf9zWnuG{JMEWj33$mEQ7< cY6RIaS*RQcg$@3p*MKzR#U|u0)7-QFANUTBa{vGU literal 0 HcmV?d00001 diff --git a/general/package/rtw-hostapd/0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch b/general/package/rtw-hostapd/0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch new file mode 100644 index 00000000..1b26b8de --- /dev/null +++ b/general/package/rtw-hostapd/0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch @@ -0,0 +1,150 @@ +From 5b78c8f961f25f4dc22d6f2b77ddd06d712cec63 Mon Sep 17 00:00:00 2001 +From: Jouni Malinen +Date: Wed, 3 Jun 2020 23:17:35 +0300 +Subject: [PATCH 1/3] WPS UPnP: Do not allow event subscriptions with URLs to + other networks + +The UPnP Device Architecture 2.0 specification errata ("UDA errata +16-04-2020.docx") addresses a problem with notifications being allowed +to go out to other domains by disallowing such cases. Do such filtering +for the notification callback URLs to avoid undesired connections to +external networks based on subscriptions that any device in the local +network could request when WPS support for external registrars is +enabled (the upnp_iface parameter in hostapd configuration). + +Signed-off-by: Jouni Malinen +--- + src/wps/wps_er.c | 2 +- + src/wps/wps_upnp.c | 38 ++++++++++++++++++++++++++++++++++++-- + src/wps/wps_upnp_i.h | 3 ++- + 3 files changed, 39 insertions(+), 4 deletions(-) + +diff --git a/src/wps/wps_er.c b/src/wps/wps_er.c +index 6bded14327f8..31d2e50e4cff 100644 +--- a/hostapd-2.9/src/wps/wps_er.c ++++ b/hostapd-2.9/src/wps/wps_er.c +@@ -1298,7 +1298,7 @@ wps_er_init(struct wps_context *wps, const char *ifname, const char *filter) + "with %s", filter); + } + if (get_netif_info(er->ifname, &er->ip_addr, &er->ip_addr_text, +- er->mac_addr)) { ++ NULL, er->mac_addr)) { + wpa_printf(MSG_INFO, "WPS UPnP: Could not get IP/MAC address " + "for %s. Does it have IP address?", er->ifname); + wps_er_deinit(er, NULL, NULL); +diff --git a/src/wps/wps_upnp.c b/src/wps/wps_upnp.c +index 6e10e4bc0c3f..7d4b7439940e 100644 +--- a/hostapd-2.9/src/wps/wps_upnp.c ++++ b/hostapd-2.9/src/wps/wps_upnp.c +@@ -303,6 +303,14 @@ static void subscr_addr_free_all(struct subscription *s) + } + + ++static int local_network_addr(struct upnp_wps_device_sm *sm, ++ struct sockaddr_in *addr) ++{ ++ return (addr->sin_addr.s_addr & sm->netmask.s_addr) == ++ (sm->ip_addr & sm->netmask.s_addr); ++} ++ ++ + /* subscr_addr_add_url -- add address(es) for one url to subscription */ + static void subscr_addr_add_url(struct subscription *s, const char *url, + size_t url_len) +@@ -381,6 +389,7 @@ static void subscr_addr_add_url(struct subscription *s, const char *url, + + for (rp = result; rp; rp = rp->ai_next) { + struct subscr_addr *a; ++ struct sockaddr_in *addr = (struct sockaddr_in *) rp->ai_addr; + + /* Limit no. of address to avoid denial of service attack */ + if (dl_list_len(&s->addr_list) >= MAX_ADDR_PER_SUBSCRIPTION) { +@@ -389,6 +398,13 @@ static void subscr_addr_add_url(struct subscription *s, const char *url, + break; + } + ++ if (!local_network_addr(s->sm, addr)) { ++ wpa_printf(MSG_INFO, ++ "WPS UPnP: Ignore a delivery URL that points to another network %s", ++ inet_ntoa(addr->sin_addr)); ++ continue; ++ } ++ + a = os_zalloc(sizeof(*a) + alloc_len); + if (a == NULL) + break; +@@ -890,11 +906,12 @@ static int eth_get(const char *device, u8 ea[ETH_ALEN]) + * @net_if: Selected network interface name + * @ip_addr: Buffer for returning IP address in network byte order + * @ip_addr_text: Buffer for returning a pointer to allocated IP address text ++ * @netmask: Buffer for returning netmask or %NULL if not needed + * @mac: Buffer for returning MAC address + * Returns: 0 on success, -1 on failure + */ + int get_netif_info(const char *net_if, unsigned *ip_addr, char **ip_addr_text, +- u8 mac[ETH_ALEN]) ++ struct in_addr *netmask, u8 mac[ETH_ALEN]) + { + struct ifreq req; + int sock = -1; +@@ -920,6 +937,19 @@ int get_netif_info(const char *net_if, unsigned *ip_addr, char **ip_addr_text, + in_addr.s_addr = *ip_addr; + os_snprintf(*ip_addr_text, 16, "%s", inet_ntoa(in_addr)); + ++ if (netmask) { ++ os_memset(&req, 0, sizeof(req)); ++ os_strlcpy(req.ifr_name, net_if, sizeof(req.ifr_name)); ++ if (ioctl(sock, SIOCGIFNETMASK, &req) < 0) { ++ wpa_printf(MSG_ERROR, ++ "WPS UPnP: SIOCGIFNETMASK failed: %d (%s)", ++ errno, strerror(errno)); ++ goto fail; ++ } ++ addr = (struct sockaddr_in *) &req.ifr_netmask; ++ netmask->s_addr = addr->sin_addr.s_addr; ++ } ++ + #ifdef __linux__ + os_strlcpy(req.ifr_name, net_if, sizeof(req.ifr_name)); + if (ioctl(sock, SIOCGIFHWADDR, &req) < 0) { +@@ -1026,11 +1056,15 @@ static int upnp_wps_device_start(struct upnp_wps_device_sm *sm, char *net_if) + + /* Determine which IP and mac address we're using */ + if (get_netif_info(net_if, &sm->ip_addr, &sm->ip_addr_text, +- sm->mac_addr)) { ++ &sm->netmask, sm->mac_addr)) { + wpa_printf(MSG_INFO, "WPS UPnP: Could not get IP/MAC address " + "for %s. Does it have IP address?", net_if); + goto fail; + } ++ wpa_printf(MSG_DEBUG, "WPS UPnP: Local IP address %s netmask %s hwaddr " ++ MACSTR, ++ sm->ip_addr_text, inet_ntoa(sm->netmask), ++ MAC2STR(sm->mac_addr)); + + /* Listen for incoming TCP connections so that others + * can fetch our "xml files" from us. +diff --git a/src/wps/wps_upnp_i.h b/src/wps/wps_upnp_i.h +index e87a93232df1..6ead7b4e9a30 100644 +--- a/hostapd-2.9/src/wps/wps_upnp_i.h ++++ b/hostapd-2.9/src/wps/wps_upnp_i.h +@@ -128,6 +128,7 @@ struct upnp_wps_device_sm { + u8 mac_addr[ETH_ALEN]; /* mac addr of network i.f. we use */ + char *ip_addr_text; /* IP address of network i.f. we use */ + unsigned ip_addr; /* IP address of network i.f. we use (host order) */ ++ struct in_addr netmask; + int multicast_sd; /* send multicast messages over this socket */ + int ssdp_sd; /* receive discovery UPD packets on socket */ + int ssdp_sd_registered; /* nonzero if we must unregister */ +@@ -158,7 +159,7 @@ struct subscription * subscription_find(struct upnp_wps_device_sm *sm, + const u8 uuid[UUID_LEN]); + void subscr_addr_delete(struct subscr_addr *a); + int get_netif_info(const char *net_if, unsigned *ip_addr, char **ip_addr_text, +- u8 mac[ETH_ALEN]); ++ struct in_addr *netmask, u8 mac[ETH_ALEN]); + + /* wps_upnp_ssdp.c */ + void msearchreply_state_machine_stop(struct advertisement_state_machine *a); +-- +2.20.1 + diff --git a/general/package/rtw-hostapd/0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch b/general/package/rtw-hostapd/0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch new file mode 100644 index 00000000..7748de7c --- /dev/null +++ b/general/package/rtw-hostapd/0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch @@ -0,0 +1,59 @@ +From f7d268864a2660b7239b9a8ff5ad37faeeb751ba Mon Sep 17 00:00:00 2001 +From: Jouni Malinen +Date: Wed, 3 Jun 2020 22:41:02 +0300 +Subject: [PATCH 2/3] WPS UPnP: Fix event message generation using a long URL + path + +More than about 700 character URL ended up overflowing the wpabuf used +for building the event notification and this resulted in the wpabuf +buffer overflow checks terminating the hostapd process. Fix this by +allocating the buffer to be large enough to contain the full URL path. +However, since that around 700 character limit has been the practical +limit for more than ten years, start explicitly enforcing that as the +limit or the callback URLs since any longer ones had not worked before +and there is no need to enable them now either. + +Signed-off-by: Jouni Malinen +--- + src/wps/wps_upnp.c | 9 +++++++-- + src/wps/wps_upnp_event.c | 3 ++- + 2 files changed, 9 insertions(+), 3 deletions(-) + +diff --git a/src/wps/wps_upnp.c b/src/wps/wps_upnp.c +index 7d4b7439940e..ab685d52ecab 100644 +--- a/hostapd-2.9/src/wps/wps_upnp.c ++++ b/hostapd-2.9/src/wps/wps_upnp.c +@@ -328,9 +328,14 @@ static void subscr_addr_add_url(struct subscription *s, const char *url, + int rerr; + size_t host_len, path_len; + +- /* url MUST begin with http: */ +- if (url_len < 7 || os_strncasecmp(url, "http://", 7)) ++ /* URL MUST begin with HTTP scheme. In addition, limit the length of ++ * the URL to 700 characters which is around the limit that was ++ * implicitly enforced for more than 10 years due to a bug in ++ * generating the event messages. */ ++ if (url_len < 7 || os_strncasecmp(url, "http://", 7) || url_len > 700) { ++ wpa_printf(MSG_DEBUG, "WPS UPnP: Reject an unacceptable URL"); + goto fail; ++ } + url += 7; + url_len -= 7; + +diff --git a/src/wps/wps_upnp_event.c b/src/wps/wps_upnp_event.c +index d7e6edcc6503..08a23612f338 100644 +--- a/hostapd-2.9/src/wps/wps_upnp_event.c ++++ b/hostapd-2.9/src/wps/wps_upnp_event.c +@@ -147,7 +147,8 @@ static struct wpabuf * event_build_message(struct wps_event_ *e) + struct wpabuf *buf; + char *b; + +- buf = wpabuf_alloc(1000 + wpabuf_len(e->data)); ++ buf = wpabuf_alloc(1000 + os_strlen(e->addr->path) + ++ wpabuf_len(e->data)); + if (buf == NULL) + return NULL; + wpabuf_printf(buf, "NOTIFY %s HTTP/1.1\r\n", e->addr->path); +-- +2.20.1 + diff --git a/general/package/rtw-hostapd/0003-WPS-UPnP-Handle-HTTP-initiation-failures-for-events-.patch b/general/package/rtw-hostapd/0003-WPS-UPnP-Handle-HTTP-initiation-failures-for-events-.patch new file mode 100644 index 00000000..42f673f6 --- /dev/null +++ b/general/package/rtw-hostapd/0003-WPS-UPnP-Handle-HTTP-initiation-failures-for-events-.patch @@ -0,0 +1,47 @@ +From 85aac526af8612c21b3117dadc8ef5944985b476 Mon Sep 17 00:00:00 2001 +From: Jouni Malinen +Date: Thu, 4 Jun 2020 21:24:04 +0300 +Subject: [PATCH 3/3] WPS UPnP: Handle HTTP initiation failures for events more + properly + +While it is appropriate to try to retransmit the event to another +callback URL on a failure to initiate the HTTP client connection, there +is no point in trying the exact same operation multiple times in a row. +Replve the event_retry() calls with event_addr_failure() for these cases +to avoid busy loops trying to repeat the same failing operation. + +These potential busy loops would go through eloop callbacks, so the +process is not completely stuck on handling them, but unnecessary CPU +would be used to process the continues retries that will keep failing +for the same reason. + +Signed-off-by: Jouni Malinen +--- + src/wps/wps_upnp_event.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/src/wps/wps_upnp_event.c b/src/wps/wps_upnp_event.c +index 08a23612f338..c0d9e41d9a38 100644 +--- a/hostapd-2.9/src/wps/wps_upnp_event.c ++++ b/hostapd-2.9/src/wps/wps_upnp_event.c +@@ -294,7 +294,7 @@ static int event_send_start(struct subscription *s) + + buf = event_build_message(e); + if (buf == NULL) { +- event_retry(e, 0); ++ event_addr_failure(e); + return -1; + } + +@@ -302,7 +302,7 @@ static int event_send_start(struct subscription *s) + event_http_cb, e); + if (e->http_event == NULL) { + wpabuf_free(buf); +- event_retry(e, 0); ++ event_addr_failure(e); + return -1; + } + +-- +2.20.1 + diff --git a/general/package/rtw-hostapd/0004-Defconfig.patch b/general/package/rtw-hostapd/0004-Defconfig.patch new file mode 100644 index 00000000..896d7181 --- /dev/null +++ b/general/package/rtw-hostapd/0004-Defconfig.patch @@ -0,0 +1,12 @@ +--- a/hostapd-2.9/hostapd/defconfig 2021-10-29 04:23:27.000000000 +0300 ++++ b/hostapd-2.9/hostapd/defconfig 2021-12-17 23:47:31.733934121 +0200 +@@ -15,6 +15,9 @@ + # Driver interface for wired authenticator + #CONFIG_DRIVER_WIRED=y + ++# Driver interface for Realtek WLAN ++CONFIG_DRIVER_RTW=y ++ + # Driver interface for drivers using the nl80211 kernel interface + CONFIG_DRIVER_NL80211=y + diff --git a/general/package/rtw-hostapd/Config.in b/general/package/rtw-hostapd/Config.in new file mode 100644 index 00000000..dd37ba43 --- /dev/null +++ b/general/package/rtw-hostapd/Config.in @@ -0,0 +1,113 @@ +config BR2_PACKAGE_RTW_HOSTAPD + bool "hostapd for Realtek" + depends on BR2_USE_MMU # fork() + help + User space daemon for wireless access points on RTL8xxx. + + It implements IEEE 802.11 access point management, + IEEE 802.1X/WPA/WPA2/EAP authenticators, RADIUS client, + EAP server and RADIUS authentication server. + + http://w1.fi/hostapd/ + +if BR2_PACKAGE_RTW_HOSTAPD + +config BR2_PACKAGE_RTW_HOSTAPD_DRIVER_HOSTAP + bool "Enable hostap driver" + default y + select BR2_PACKAGE_RTW_HOSTAPD_HAS_WIFI_DRIVERS + help + Enable support for Host AP driver. + +config BR2_PACKAGE_RTW_HOSTAPD_DRIVER_NL80211 + bool "Enable nl80211 driver" + default y + depends on BR2_TOOLCHAIN_HAS_THREADS # libnl + select BR2_PACKAGE_LIBNL + select BR2_PACKAGE_RTW_HOSTAPD_HAS_WIFI_DRIVERS + help + Enable support for drivers using the nl80211 kernel interface. + +comment "nl80211 driver needs a toolchain w/ threads" + depends on !BR2_TOOLCHAIN_HAS_THREADS + +config BR2_PACKAGE_RTW_HOSTAPD_DRIVER_RTW + bool "Enable rtw driver" + default y + depends on BR2_TOOLCHAIN_HAS_THREADS # libnl + select BR2_PACKAGE_LIBNL + select BR2_PACKAGE_RTW_HOSTAPD_HAS_WIFI_DRIVERS + help + Enable support for drivers using the Realtek proprietary interface. + +comment "rtw driver needs a toolchain w/ threads" + depends on !BR2_TOOLCHAIN_HAS_THREADS + +config BR2_PACKAGE_RTW_HOSTAPD_DRIVER_WIRED + bool "Enable wired driver" + help + Enable support for wired authenticator. + +config BR2_PACKAGE_RTW_HOSTAPD_DRIVER_NONE + bool + default y + depends on !BR2_PACKAGE_RTW_HOSTAPD_DRIVER_HOSTAP + depends on !BR2_PACKAGE_RTW_HOSTAPD_DRIVER_NL80211 + depends on !BR2_PACKAGE_RTW_HOSTAPD_DRIVER_RTW + depends on !BR2_PACKAGE_RTW_HOSTAPD_DRIVER_WIRED + +config BR2_PACKAGE_RTW_HOSTAPD_HAS_WIFI_DRIVERS + bool + +config BR2_PACKAGE_RTW_HOSTAPD_EAP + bool "Enable EAP" + depends on !BR2_STATIC_LIBS + help + Enable support for EAP and RADIUS. + +comment "hostapd EAP needs a toolchain w/ dynamic library" + depends on BR2_STATIC_LIBS + +config BR2_PACKAGE_RTW_HOSTAPD_WPS + bool "Enable WPS" + help + Enable support for Wi-Fi Protected Setup. + +config BR2_PACKAGE_RTW_HOSTAPD_WPA3 + bool "Enable WPA3 support" + select BR2_PACKAGE_OPENSSL + select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL + help + Enable WPA3 support including OWE, SAE, DPP + +config BR2_PACKAGE_RTW_HOSTAPD_VLAN + bool "Enable VLAN support" + default y + help + Enable support for VLANs. + +if BR2_PACKAGE_HOSTAPD_VLAN + +config BR2_PACKAGE_RTW_HOSTAPD_VLAN_DYNAMIC + bool "Enable dynamic VLAN support" + default y + help + Enable support for fully dynamic VLANs. + This enables hostapd to automatically create + bridge and VLAN interfaces if necessary. + +config BR2_PACKAGE_RTW_HOSTAPD_VLAN_NETLINK + bool "Use netlink-based API for VLAN operations" + default y + depends on BR2_TOOLCHAIN_HAS_THREADS # libnl + select BR2_PACKAGE_LIBNL + help + Use netlink-based kernel API for VLAN operations + instead of ioctl(). + +comment "netlink-based VLAN support needs a toolchain w/ threads" + depends on !BR2_TOOLCHAIN_HAS_THREADS + +endif # BR2_PACKAGE_RTW_HOSTAPD_VLAN + +endif diff --git a/general/package/rtw-hostapd/rtw-hostapd.mk b/general/package/rtw-hostapd/rtw-hostapd.mk new file mode 100644 index 00000000..2586572b --- /dev/null +++ b/general/package/rtw-hostapd/rtw-hostapd.mk @@ -0,0 +1,158 @@ +################################################################################ +# +# hostapd +# +################################################################################ + +RTW_HOSTAPD_VERSION = a69d6361ef0185aa7d2e4c774bc2de36fe83d81e +RTW_HOSTAPD_SITE = $(call github,lwfinger,rtl8188eu,$(RTW_HOSTAPD_VERSION)) +RTW_HOSTAPD_SUBDIR = hostapd-2.9/hostapd +RTW_HOSTAPD_CONFIG = $(RTW_HOSTAPD_DIR)/$(RTW_HOSTAPD_SUBDIR)/.config +#RTW_HOSTAPD_PATCH = \ +# https://w1.fi/security/2020-1/0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch \ +# https://w1.fi/security/2020-1/0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch \ +# https://w1.fi/security/2020-1/0003-WPS-UPnP-Handle-HTTP-initiation-failures-for-events-.patch +RTW_HOSTAPD_DEPENDENCIES = host-pkgconf +RTW_HOSTAPD_CFLAGS = $(TARGET_CFLAGS) +RTW_HOSTAPD_LICENSE = BSD-3-Clause +RTW_HOSTAPD_LICENSE_FILES = README + +# 0001-AP-Silently-ignore-management-frame-from-unexpected-.patch +RTW_HOSTAPD_IGNORE_CVES += CVE-2019-16275 + +# 0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch +RTW_HOSTAPD_IGNORE_CVES += CVE-2020-12695 + +RTW_HOSTAPD_CONFIG_SET = + +RTW_HOSTAPD_CONFIG_ENABLE = \ + CONFIG_INTERNAL_LIBTOMMATH \ + CONFIG_DEBUG_FILE \ + CONFIG_DEBUG_SYSLOG + +RTW_HOSTAPD_CONFIG_DISABLE = + +# Try to use openssl if it's already available +ifeq ($(BR2_PACKAGE_LIBOPENSSL),y) +RTW_HOSTAPD_DEPENDENCIES += host-pkgconf libopenssl +RTW_HOSTAPD_LIBS += `$(PKG_CONFIG_HOST_BINARY) --libs openssl` +RTW_HOSTAPD_CONFIG_EDITS += 's/\#\(CONFIG_TLS=openssl\)/\1/' +else +RTW_HOSTAPD_CONFIG_DISABLE += CONFIG_EAP_PWD CONFIG_EAP_TEAP +RTW_HOSTAPD_CONFIG_EDITS += 's/\#\(CONFIG_TLS=\).*/\1internal/' +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_DRIVER_HOSTAP),) +RTW_HOSTAPD_CONFIG_DISABLE += CONFIG_DRIVER_HOSTAP +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_DRIVER_NL80211),y) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_DRIVER_NL80211 +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_DRIVER_RTW),) +RTW_HOSTAPD_CONFIG_DISABLE += CONFIG_DRIVER_RTW +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_DRIVER_WIRED),y) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_DRIVER_WIRED +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_DRIVER_NONE),y) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_DRIVER_NONE +endif + +# Add options for wireless drivers +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_HAS_WIFI_DRIVERS),y) +RTW_HOSTAPD_CONFIG_ENABLE += \ + CONFIG_HS20 \ + CONFIG_IEEE80211AC \ + CONFIG_IEEE80211N \ + CONFIG_IEEE80211R \ + CONFIG_INTERWORKING +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_ACS),y) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_ACS +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_EAP),y) +RTW_HOSTAPD_CONFIG_ENABLE += \ + CONFIG_EAP \ + CONFIG_RADIUS_SERVER + +# Enable both TLS v1.1 (CONFIG_TLSV11) and v1.2 (CONFIG_TLSV12) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_TLSV1 +else +RTW_HOSTAPD_CONFIG_DISABLE += CONFIG_EAP +RTW_HOSTAPD_CONFIG_ENABLE += \ + CONFIG_NO_ACCOUNTING \ + CONFIG_NO_RADIUS +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_WPS),y) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_WPS +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_WPA3),y) +RTW_HOSTAPD_CONFIG_SET += \ + CONFIG_DPP \ + CONFIG_SAE +RTW_HOSTAPD_CONFIG_ENABLE += \ + CONFIG_OWE +else +RTW_HOSTAPD_CONFIG_DISABLE += \ + CONFIG_OWE +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_VLAN),) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_NO_VLAN +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_VLAN_DYNAMIC),y) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_FULL_DYNAMIC_VLAN +RTW_HOSTAPD_CONFIG_SET += NEED_LINUX_IOCTL +endif + +ifeq ($(BR2_PACKAGE_RTW_HOSTAPD_VLAN_NETLINK),y) +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_VLAN_NETLINK +endif + +# Options for building with libnl +ifeq ($(BR2_PACKAGE_LIBNL),y) +RTW_HOSTAPD_DEPENDENCIES += libnl +RTW_HOSTAPD_CFLAGS += -I$(STAGING_DIR)/usr/include/libnl3/ +RTW_HOSTAPD_CONFIG_ENABLE += CONFIG_LIBNL32 +# libnl-3 needs -lm (for rint) and -lpthread if linking statically +# And library order matters hence stick -lnl-3 first since it's appended +# in the hostapd Makefiles as in LIBS+=-lnl-3 ... thus failing +ifeq ($(BR2_STATIC_LIBS),y) +RTW_HOSTAPD_LIBS += -lnl-3 -lm -lpthread +endif +endif + +define RTW_HOSTAPD_CONFIGURE_CMDS + cp $(@D)/$(RTW_HOSTAPD_SUBDIR)/defconfig $(RTW_HOSTAPD_CONFIG) + sed -i $(patsubst %,-e 's/^#\(%\)/\1/',$(RTW_HOSTAPD_CONFIG_ENABLE)) \ + $(patsubst %,-e 's/^\(%\)/#\1/',$(RTW_HOSTAPD_CONFIG_DISABLE)) \ + $(patsubst %,-e '1i%=y',$(RTW_HOSTAPD_CONFIG_SET)) \ + $(patsubst %,-e %,$(RTW_HOSTAPD_CONFIG_EDITS)) \ + $(RTW_HOSTAPD_CONFIG) +endef + +define RTW_HOSTAPD_BUILD_CMDS + $(MAKE) -C $(@D)/$(RTW_HOSTAPD_SUBDIR) clean + $(TARGET_MAKE_ENV) CFLAGS="$(RTW_HOSTAPD_CFLAGS)" \ + LDFLAGS="$(TARGET_LDFLAGS)" LIBS="$(RTW_HOSTAPD_LIBS)" \ + $(MAKE) CC="$(TARGET_CC)" -C $(@D)/$(RTW_HOSTAPD_SUBDIR) +endef + +define RTW_HOSTAPD_INSTALL_TARGET_CMDS + $(INSTALL) -m 0755 -D $(@D)/$(RTW_HOSTAPD_SUBDIR)/hostapd \ + $(TARGET_DIR)/usr/sbin/hostapd + $(INSTALL) -m 0755 -D $(@D)/$(RTW_HOSTAPD_SUBDIR)/hostapd_cli \ + $(TARGET_DIR)/usr/bin/hostapd_cli + $(INSTALL) -m 0644 -D $(@D)/$(RTW_HOSTAPD_SUBDIR)/hostapd.conf \ + $(TARGET_DIR)/etc/hostapd.conf +endef +$(eval $(generic-package))