during init, because of this 802.1w is not getting enabled
eventhough rstpd is running

Change-Id: Ic6c55ea957b5464f96cc3f261065c97ebb7449a5
Signed-off-by: Venkatesh Perumal <quic_venkperu@quicinc.com>

network_get_device will extract "l3_device" value from
interface's netifd attribute. But when LAN interface is
set to dhcp proto, l3_device is not set. Hence we use
network_get_physdev to get "device" field, which is present
for either dhcp or non-dhcp proto.

Signed-off-by: Tian Yang <quic_tiany@quicinc.com>
Change-Id: Ia44a11100bb6547c59cffcc71ca96e647c1c0295

Change-Id: I318f5df920ad04b2f6789da70c70b8bbefbb8244
Signed-off-by: Ram Chandra Jangir <quic_rjangir@quicinc.com>

After parsing sa boday message, tunnel mode is set.
This will change transport mode setting.
We move notify message process after parsing sa body message
so that it sets mode back to transport again.

Change-Id: Idf39c9ff7c36fcc3cd14e17360fcb7489eb6fcf7
Signed-off-by: Ken Zhu <quic_guigenz@quicinc.com>

ip_options_echo() uses CB without any validation and if CB
has garbage values, we may run into out-of-bound issue.
This function is used by icmp_send().

Change-Id: I0cc3cd75aa4609d837010ba6773a9584266d8643
Signed-off-by: Hardik S. Panchal <quic_hpanchal@quicinc.com>

Change-Id: Ie44e3401eba696071d4d21dbd48ba6fe65c54db0
Signed-off-by: Suruchi Agarwal <suruchia@codeaurora.org>

1. Restart ipsec in offload mode, if it was running
in offload mode, before network topology change.

2. Get the wan iface from uci instead of using eth0.

Signed-off-by: Neelansh Mittal <neelanshm@codeaurora.org>
Change-Id: Icdd71107af40928dd010e6df1cfd1baa9da8ee3a

Port rstp into Maple board. Added a different switch_id support in rstpd.
In some maple boards, the switch id is 1 rather than 0.

Signed-off-by: Tian Yang <tiany@codeaurora.org>
Change-Id: I4aa1092084de45b095d33b61c47680f5a9598d8c

Keyword 'local' should only be used within function in busybox 1.25.0+.

Signed-off-by: Tian Yang <tiany@codeaurora.org>
Change-Id: I382e3c8016b76377e977445577ab2e9f80b5bbd9

Change dependency syntax on nohnat.

Signed-off-by: Tian Yang <tiany@codeaurora.org>
Change-Id: Ie2995cb07e9384e98cd371867d9246d370c07e81

if kmod-crypto-ocf is not available, disable klips either.

Change-Id: Ib8830b8db1c1dd93fde60e2adc81615cd21427f1
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

fix the issues that api was rename and structure was changed

Change-Id: I8ecf9cfaa914ab58960aeaddb2a757c454a4a4d1
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

This is for Service Prioritization feeds.

Change-Id: I42af4cdd554eced833aac4613328fd18cecbb504
Signed-off-by: Tian Yang <tiany@codeaurora.org>

Change copyright year from 2019,2020 to 2019-2020.

Signed-off-by: Tian Yang <tiany@codeaurora.org>
Change-Id: I5d9ba82175c62e669f977de28449e0cf264a39d1

get the board_name using cat /tmp/sysinfo/board_name instead of
reading from /lib/ipq806x.sh file which is removed.

Change-Id: I488ea7fb7d8f4b4d7735959b3f56d73d47bb0e83
Signed-off-by: Tian Yang <tiany@codeaurora.org>

Disable the warning of the type cast between integer and pointer.

Change-Id: Ide69a9786c868de01d059850726cfb2c0a94d924
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

/etc/init.d/qca-nss-ipsec restart sets transport mode as true for
tunnel mode in case of IKEv2. IKEv1 works fine. This patch
fixes the issue

Change-Id: If30c261be5ef70a9cc10d12af5614724b4b15360
Signed-off-by: Ratheesh Kannoth <rkannoth@codeaurora.org>

all variable out of function can't be declared local.

Change-Id: I5cf377c625abd35d59af4ed4ab4c2f8809166c8f
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

This patch fills sock handle in skb CB.

Change-Id: I7444ec285b4549d338a87779b04b11394e218e00
Signed-off-by: Hardik S. Panchal <hpanchal@codeaurora.org>

when swith ports are controlled by the rstp, some commands doesn't
work for using wrong ports name.
load the correct switch ports name before get the information.

Change-Id: I81115249d570f4b4e6e01be6388970796fc675c9
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

When creating new board enabled switch dev, needn't change this scripts
any more.

Change-Id: I90448e2dccfbbc1e83af5a60d4db6a565585e42e
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

When the side is in responder state and no active connection, the
kernel will send a request to start the connection. in the circumstance
of the peer keeps restarting, this case will cause the connection
keeping increasing and memory consuming.
Before start new connection, looking for if there is any connection
existing for the new pair, if it exists, don't creat new connection.

Change-Id: I8c38434824380ed46cd99dcd399d0300c7e80423
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

before the file is used, it was not generated if in parallel
compiling. disable it.

Change-Id: I8c70fc662384cead081de6d89daea574d5260dac
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

in the new version, state struct have already stored the msgid in network
order, needn't change it.

Change-Id: I4a6f46855d9e2c8e191be7f1db655499a7592292
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

1. KLIPS throws error for all non zero value of crp_etype. Here, crypto driver
sets error value EINPROGRESS to indicate packet is consumed. This patch include
changes to avoid error prints and to indicate that packet is handled properly.
2. This patch fills replay windows size in decap direction. This is used by NSS
client module.

Change-Id: I11bc366ffde319e3aeaeeef66c2707f5fc996e6f
Signed-off-by: Hardik S. Panchal <hpanchal@codeaurora.org>

upgrade from 2.6.41 to the 2.6.51.3 version

Change-Id: I4f6c010c6211a9bd37c3f0f7e30ce4bdce20a2bd
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

The patch adds support to enable IPSec transport mode in NSS.

Change-Id: I4a3377e729eb68541216ef2d1d4e825d2b644c5b
Signed-off-by: Gaurav Pathak <gaurpath@codeaurora.org>

Conditional dependency is not working. Later fix it by adding hidden config.

Change-Id: Iad74874f99bb2829e78d7686fde43bc6f4358ff8
Signed-off-by: Naresh Kumar Mehta <naresh@codeaurora.org>

Cypress uses switchdev, no switch port definition is required.

Change-Id: If0e19daab2174aecbe21a10b1ca38d9833f28b64
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

It is hard to add new patch file for the only two number prefix, make it
to be 3 number prefix.

Change-Id: I406870bed59d5245c465957ce20a3166c61e4872
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

When using rstpctl command to stop the rstp service, the daemon will
stop unexpectedly.
it exits because the rcvmsg returns error that no buffer space available, 
but this is not a critical issue, let it ignore this and continue.

Change-Id: Ia20978a9dd846c24a6fef9604346f1356f44adc3
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

before using udp encap, need call udp_encap_enable
otherwise, the udp encap packets will go to the socket creator.

Change-Id: I267179c71c646a8d11984990cabe99e198e32322
Signed-off-by: Ken Zhu <guigenz@codeaurora.org>

Avoid rstp start and restart run simultaneously during boot time.

Change-Id: If7fabfb4085a55a733fc4f8d44ebcd408e5024bf
Signed-off-by: Casey Chen <kexinc@codeaurora.org>

Change-Id: I8445d48b5f736761e73fbcfbdd585c29f5fe8e23
Signed-off-by: Casey Chen <kexinc@codeaurora.org>

Change-Id: Ia72ce4810242b7ebb81c65c2c86131f3bcebe399
Signed-off-by: Naresh Kumar Mehta <naresh@codeaurora.org>