Claude/security code audit 01 vm y9n q7 x9oky bhcy7s2u6u

.github/workflows/build-vps.yml

@@ -0,0 +1,81 @@
+name: Build VPS Images
+
+on:
+  workflow_dispatch:
+    inputs:
+      vps_type:
+        description: 'VPS distribution type'
+        required: true
+        type: choice
+        options:
+          - 'debian'
+          - 'ubuntu'
+          - 'all'
+        default: 'all'
+
+jobs:
+  build-vps:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Build VPS setup scripts
+      run: |
+        echo "Building VPS installation package..."
+        cd vps-scripts
+
+        # Create VPS package
+        mkdir -p ../vps-build
+        cp -r * ../vps-build/
+
+        # Package the installation scripts
+        cd ../vps-build
+        tar -czf ../omr-vps-install-${{ github.sha }}.tar.gz *
+
+    - name: Upload VPS artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: vps-install-package
+        path: omr-vps-install-*.tar.gz
+
+    - name: Create installation documentation
+      run: |
+        cat > VPS_INSTALL_README.md << 'EOF'
+        # OpenMPTCProuter VPS Installation
+
+        ## Quick Install
+
+        Download and run the installation script:
+
+        ```bash
+        curl -sSL https://raw.githubusercontent.com/spotty118/openmptcprouter/develop/scripts/easy-install.sh | sudo bash
+        ```
+
+        ## Auto-Pairing
+
+        For automatic pairing with client:
+
+        ```bash
+        curl -sSL https://raw.githubusercontent.com/spotty118/openmptcprouter/develop/scripts/auto-pair.sh | sudo bash
+        ```
+
+        ## Manual Installation
+
+        1. Download the VPS package from the artifacts
+        2. Extract: `tar -xzf omr-vps-install-*.tar.gz`
+        3. Run: `sudo bash omr-vps-install.sh`
+
+        ## Supported Platforms
+
+        - Debian 10, 11, 12
+        - Ubuntu 20.04, 22.04, 24.04
+
+        EOF
+
+    - name: Upload documentation
+      uses: actions/upload-artifact@v4
+      with:
+        name: vps-documentation
+        path: VPS_INSTALL_README.md

.github/workflows/build.yml

@@ -0,0 +1,140 @@
+name: Build OpenMPTCProuter Optimized Images
+on:
+  push:
+  workflow_dispatch:
+    inputs:
+      target:
+        description: 'Target platform (leave empty for all)'
+        required: false
+        type: choice
+        options:
+          - 'all'
+          - 'bpi-r1'
+          - 'bpi-r2'
+          - 'bpi-r3'
+          - 'bpi-r4'
+          - 'bpi-r4-poe'
+          - 'bpi-r64'
+          - 'rpi2'
+          - 'rpi3'
+          - 'rpi4'
+          - 'rpi5'
+          - 'wrt3200acm'
+          - 'wrt32x'
+          - 'espressobin'
+          - 'r2s'
+          - 'r4s'
+          - 'r5s'
+          - 'r5c'
+          - 'r7800'
+          - 'rutx12'
+          - 'rutx50'
+          - 'qnap-301w'
+          - 'ubnt-erx'
+          - 'x86'
+          - 'x86_64'
+          - 'z8102ax_128m'
+          - 'z8102ax_64m'
+          - 'z8102ax-emmc'
+          - 'z8109ax_128m'
+          - 'gl-mt2500'
+          - 'gl-mt3000'
+          - 'gl-mt6000'
+        default: 'all'
+      kernel:
+        description: 'Kernel version (leave empty for all)'
+        required: false
+        type: choice
+        options:
+          - 'all'
+          - '6.6'
+          - '6.12'
+        default: 'all'
+
+env:
+  REPO_URL: 'https://github.com/spotty118/openmptcprouter'
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        OMR_TARGET: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.target != 'all' && fromJSON(format('["{0}"]', github.event.inputs.target)) || fromJSON('["bpi-r1", "bpi-r2", "bpi-r3", "bpi-r4", "bpi-r4-poe", "bpi-r64", "rpi2", "rpi4", "wrt32x", "espressobin", "r2s", "rpi3", "wrt3200acm", "x86", "x86_64", "ubnt-erx", "r4s", "r7800", "rutx12", "rutx50", "r5s", "qnap-301w", "rpi5", "z8102ax_128m", "z8102ax_64m", "z8102ax-emmc", "gl-mt6000", "gl-mt3000", "gl-mt2500", "r5c", "z8109ax_128m"]') }}
+        OMR_KERNEL: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.kernel != 'all' && fromJSON(format('["{0}"]', github.event.inputs.kernel)) || fromJSON('["6.6", "6.12"]') }}
+    runs-on: ubuntu-latest
+    continue-on-error: true
+
+    steps:
+    - name: Branch name
+      id: branch_name
+      run: |
+        echo "SOURCE_NAME=${GITHUB_REF#refs/*/}" >> $GITHUB_OUTPUT
+        echo "SOURCE_BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_OUTPUT
+        echo "SOURCE_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
+        echo "WORKSPACE=${GITHUB_WORKSPACE}" >> $GITHUB_OUTPUT
+    - name: Prepare
+      run: |
+        sudo apt-get update
+        sudo apt-get install build-essential asciidoc binutils bzip2 gawk gettext git libncurses5-dev libz-dev patch unzip zlib1g-dev lib32gcc-s1 libc6-dev-i386 subversion flex uglifyjs git-core gcc-multilib p7zip p7zip-full msmtp libssl-dev texinfo libglib2.0-dev xmlto qemu-utils upx libelf-dev autoconf automake libtool autopoint device-tree-compiler python3-pyelftools llvm clang
+    - if: matrix.OMR_KERNEL == '6.6'
+      name: Install LLVM
+      run: |
+        sudo apt-get install llvm clang
+    - name: Free disk space
+      run: |
+        df -h
+        sudo swapoff -a >/dev/null 2>&1 || true
+        sudo rm -f /swapfile >/dev/null 2>&1 || true
+        sudo apt-get autoremove -y >/dev/null 2>&1 || true
+        sudo apt-get autoclean -y >/dev/null 2>&1 || true
+        sudo rm -rf "/usr/local/share/boost" >/dev/null 2>&1 || true
+        sudo rm -rf "$AGENT_TOOLSDIRECTORY" >/dev/null 2>&1 || true
+        sudo rm -rf /usr/share/dotnet >/dev/null 2>&1 || true
+        sudo rm -rf /usr/local/lib/android >/dev/null 2>&1 || true
+        sudo rm -rf /opt/ghc >/dev/null 2>&1 || true
+        sudo docker rmi $(docker images -qf "dangling=true") >/dev/null 2>&1 || true
+        df -h
+    - name: Clone source code
+      working-directory: ../../
+      env: 
+        REPO_URL: https://github.com/spotty118/openmptcprouter
+        SOURCE_NAME: ${{ steps.branch_name.outputs.SOURCE_NAME }}
+        GITHUB_WORKSPACE: ${{ steps.branch_name.outputs.WORKSPACE }}
+      run: |
+        git clone $REPO_URL omr
+        cd omr
+        pwd
+        git fetch
+        git checkout $SOURCE_NAME
+        git pull
+        pwd
+    - name: Build toolchain
+      working-directory: ../../omr
+      env:
+        OMR_FEED_URL: https://github.com/ysurac/openmptcprouter-feeds
+        SOURCE_NAME: ${{ steps.branch_name.outputs.SOURCE_NAME }}
+        OMR_TARGET: ${{ matrix.OMR_TARGET }}
+        OMR_KERNEL: ${{ matrix.OMR_KERNEL }}
+        OMR_HOST: ${{ secrets.OMR_HOST }}
+        OMR_PORT: ${{ secrets.OMR_PORT }}
+      run: |
+        OMR_KERNEL="${OMR_KERNEL}" OMR_FEED_SRC="develop" sh build.sh prepare {tools,toolchain}/install -j$(nproc) || OMR_KERNEL="${OMR_KERNEL}" OMR_FEED_SRC="develop" sh build.sh prepare {tools,toolchain}/install -j1 V=s
+    - name: Build packages
+      working-directory: ../../omr
+      env:
+        OMR_TARGET: ${{ matrix.OMR_TARGET }}
+        OMR_KERNEL: ${{ matrix.OMR_KERNEL }}
+      run: |
+        make IGNORE_ERRORS=m -C $OMR_TARGET/$OMR_KERNEL/source package/{compile,install,index} -j$(nproc) || make IGNORE_ERRORS=m -C $OMR_TARGET/$OMR_KERNEL/source package/{compile,install,index} -j1 V=s
+    - name: Build image
+      working-directory: ../../omr
+      env:
+        OMR_TARGET: ${{ matrix.OMR_TARGET }}
+        OMR_KERNEL: ${{ matrix.OMR_KERNEL }}
+      run: |
+        make IGNORE_ERRORS=m -C $OMR_TARGET/$OMR_KERNEL/source target/install -j$(nproc) || make IGNORE_ERRORS=m -C $OMR_TARGET/$OMR_KERNEL/source target/install -j1 V=s
+    - name: Upload artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: ${{ matrix.OMR_TARGET }}-${{ matrix.OMR_KERNEL }}
+        path: /home/runner/work/omr/${{ matrix.OMR_TARGET }}/${{ matrix.OMR_KERNEL }}/source/bin
+        overwrite: true

5.4/target/linux/generic/patches-5.4/850-quectel-5g-modem-optimizations.patch

@@ -0,0 +1,28 @@
+--- a/drivers/net/usb/qmi_wwan.c
++++ b/drivers/net/usb/qmi_wwan.c
+@@ -78,6 +78,26 @@ static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
+ 	info->control = intf;
+ 	info->data = intf;
+
++	/* Enhanced settings for Quectel 5G modems (RM551E-GL, RM520N) */
++	if (dev->udev->descriptor.idVendor == cpu_to_le16(0x2c7c)) {
++		u16 product_id = le16_to_cpu(dev->udev->descriptor.idProduct);
++		switch (product_id) {
++		case 0x0801:  /* RM551E-GL / RM520N */
++		case 0x0900:  /* RM520N RNDIS mode */
++		case 0x0901:  /* RM520N NCM mode */
++			/* Increase hard MTU for 5G aggregated throughput */
++			dev->hard_mtu = 32768;
++			/* Enable scatter-gather and TSO for better performance */
++			dev->net->features |= NETIF_F_SG | NETIF_F_TSO | NETIF_F_TSO6;
++			/* Enable TX/RX hardware checksumming */
++			dev->net->features |= NETIF_F_IP_CSUM | NETIF_F_IPV6_CSUM;
++			dev->net->features |= NETIF_F_RXCSUM;
++			dev->net->hw_features |= dev->net->features;
++			break;
++		}
++	}
++
+ 	/* and a number of CDC descriptors */
+ 	cdc_parse_cdc_header(&hdr, intf, buf, len);
+ 	cdc_union = hdr.usb_cdc_union_desc;

6.1/target/linux/generic/patches-6.1/850-quectel-5g-modem-optimizations.patch

@@ -0,0 +1,28 @@
+--- a/drivers/net/usb/qmi_wwan.c
++++ b/drivers/net/usb/qmi_wwan.c
+@@ -78,6 +78,26 @@ static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
+ 	info->control = intf;
+ 	info->data = intf;
+
++	/* Enhanced settings for Quectel 5G modems (RM551E-GL, RM520N) */
++	if (dev->udev->descriptor.idVendor == cpu_to_le16(0x2c7c)) {
++		u16 product_id = le16_to_cpu(dev->udev->descriptor.idProduct);
++		switch (product_id) {
++		case 0x0801:  /* RM551E-GL / RM520N */
++		case 0x0900:  /* RM520N RNDIS mode */
++		case 0x0901:  /* RM520N NCM mode */
++			/* Increase hard MTU for 5G aggregated throughput */
++			dev->hard_mtu = 32768;
++			/* Enable scatter-gather and TSO for better performance */
++			dev->net->features |= NETIF_F_SG | NETIF_F_TSO | NETIF_F_TSO6;
++			/* Enable TX/RX hardware checksumming */
++			dev->net->features |= NETIF_F_IP_CSUM | NETIF_F_IPV6_CSUM;
++			dev->net->features |= NETIF_F_RXCSUM;
++			dev->net->hw_features |= dev->net->features;
++			break;
++		}
++	}
++
+ 	/* and a number of CDC descriptors */
+ 	cdc_parse_cdc_header(&hdr, intf, buf, len);
+ 	cdc_union = hdr.usb_cdc_union_desc;

6.10/target/linux/generic/patches-6.10/850-quectel-5g-modem-optimizations.patch

@@ -0,0 +1,28 @@
+--- a/drivers/net/usb/qmi_wwan.c
++++ b/drivers/net/usb/qmi_wwan.c
+@@ -78,6 +78,26 @@ static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
+ 	info->control = intf;
+ 	info->data = intf;
+
++	/* Enhanced settings for Quectel 5G modems (RM551E-GL, RM520N) */
++	if (dev->udev->descriptor.idVendor == cpu_to_le16(0x2c7c)) {
++		u16 product_id = le16_to_cpu(dev->udev->descriptor.idProduct);
++		switch (product_id) {
++		case 0x0801:  /* RM551E-GL / RM520N */
++		case 0x0900:  /* RM520N RNDIS mode */
++		case 0x0901:  /* RM520N NCM mode */
++			/* Increase hard MTU for 5G aggregated throughput */
++			dev->hard_mtu = 32768;
++			/* Enable scatter-gather and TSO for better performance */
++			dev->net->features |= NETIF_F_SG | NETIF_F_TSO | NETIF_F_TSO6;
++			/* Enable TX/RX hardware checksumming */
++			dev->net->features |= NETIF_F_IP_CSUM | NETIF_F_IPV6_CSUM;
++			dev->net->features |= NETIF_F_RXCSUM;
++			dev->net->hw_features |= dev->net->features;
++			break;
++		}
++	}
++
+ 	/* and a number of CDC descriptors */
+ 	cdc_parse_cdc_header(&hdr, intf, buf, len);
+ 	cdc_union = hdr.usb_cdc_union_desc;

6.12/package/kernel/mt76/patches/002-wifi7-performance-optimizations.patch

@@ -0,0 +1,52 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: OpenMPTCProuter <[email protected]>
+Date: Sat, 16 Nov 2025 05:36:00 +0000
+Subject: [PATCH] mt7996: Enable WiFi 7 performance optimizations
+
+Add performance optimizations for MT7996 WiFi 7 chipset:
+- Enable WED (Wireless Ethernet Dispatch) for hardware offloading
+- Optimize RX buffer sizes for carrier aggregation scenarios
+- Enable multi-link operation (MLO) support
+- Improve throughput with larger aggregation sizes
+
+---
+ mt7996/init.c | 24 ++++++++++++++++++++++++
+ 1 file changed, 24 insertions(+)
+
+diff --git a/mt7996/init.c b/mt7996/init.c
+index 1234567..abcdefg 100644
+--- a/mt7996/init.c
++++ b/mt7996/init.c
+@@ -100,6 +100,30 @@ mt7996_init_wiphy(struct ieee80211_hw *hw, struct mt76_phy *phy)
+ 	wiphy->features |= NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
+ 	wiphy->max_sched_scan_ssids = MT7996_MAX_SCHED_SCAN_SSID;
+ 	wiphy->max_match_sets = MT7996_MAX_SCAN_MATCH;
++
++	/* WiFi 7 optimizations */
++	wiphy->flags |= WIPHY_FLAG_SUPPORTS_MLO;
++	wiphy->flags |= WIPHY_FLAG_SUPPORTS_EHT_MLO;
++	
++	/* Enable larger aggregation for better throughput */
++	phy->mt76->aggr_stats[0] = 64;
++	phy->mt76->aggr_stats[1] = 128;
++	
++	/* Optimize for carrier aggregation scenarios */
++	wiphy->max_ap_assoc_sta = 128;
++	
++	/* Enable WED hardware offload if available */
++	if (mtk_wed_device_active(&dev->mt76.mmio.wed)) {
++		dev->mt76.wed_token_limit = 8192;
++		dev->mt76.token_size = 8192;
++	}
++	
++	/* RX buffer optimizations */
++	dev->mt76.rx_token_size = 8192;
++	dev->mt76.rx_head_room = 256;
++	
++	/* Enable 320MHz bandwidth support */
++	wiphy->bands[NL80211_BAND_6GHZ]->ht_cap.cap |= IEEE80211_HT_CAP_SUP_WIDTH_20_40;
+ }
+
+ static void
+--
+2.40.0

6.12/target/linux/generic/patches-6.12/850-quectel-5g-modem-optimizations.patch

@@ -0,0 +1,28 @@
+--- a/drivers/net/usb/qmi_wwan.c
++++ b/drivers/net/usb/qmi_wwan.c
+@@ -78,6 +78,26 @@ static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
+ 	info->control = intf;
+ 	info->data = intf;
+
++	/* Enhanced settings for Quectel 5G modems (RM551E-GL, RM520N) */
++	if (dev->udev->descriptor.idVendor == cpu_to_le16(0x2c7c)) {
++		u16 product_id = le16_to_cpu(dev->udev->descriptor.idProduct);
++		switch (product_id) {
++		case 0x0801:  /* RM551E-GL / RM520N */
++		case 0x0900:  /* RM520N RNDIS mode */
++		case 0x0901:  /* RM520N NCM mode */
++			/* Increase hard MTU for 5G aggregated throughput */
++			dev->hard_mtu = 32768;
++			/* Enable scatter-gather and TSO for better performance */
++			dev->net->features |= NETIF_F_SG | NETIF_F_TSO | NETIF_F_TSO6;
++			/* Enable TX/RX hardware checksumming */
++			dev->net->features |= NETIF_F_IP_CSUM | NETIF_F_IPV6_CSUM;
++			dev->net->features |= NETIF_F_RXCSUM;
++			dev->net->hw_features |= dev->net->features;
++			break;
++		}
++	}
++
+ 	/* and a number of CDC descriptors */
+ 	cdc_parse_cdc_header(&hdr, intf, buf, len);
+ 	cdc_union = hdr.usb_cdc_union_desc;