Commit Graph

3703 Commits (arm-ng)
 

Author SHA1 Message Date
M_ars f486e6d34c SDK6: small ng-branch clean-up (only cosmetic) 6 years ago
M_ars 94481a556b router: Makefile: correct/adjust/fix emf & igs targets
Finally :-)

fix for: emf was not working at all! See log file ...
Jan  1 01:00:09 Tomato-Router kern.warn kernel: EMF Instance doesn't exist
Jan  1 01:00:09 Tomato-Router kern.warn kernel: IGMP Snooper couldn't register with EMF
Jan  1 01:00:09 Tomato-Router kern.warn kernel: IGSC init failed

tested with RT-N18U, working!
6 years ago
M_ars c147f8ec36 shared: defaults: add limit for association retries (align to Asus SRC) 6 years ago
M_ars 779f575907 shared: defaults: add nvram acs variables (align to Asus SRC) 6 years ago
M_ars 1a0775c14a shared: defaults.c: align type1 nvram settings to Asus SRC 6 years ago
M_ars d35544cd98 router: rc: led clean-up (use defines for on/off; only cosmetic) 6 years ago
pedro f3a4a586ca NFS: allow selection of protocol version; optimization and clean-up; move code from nfs.rc script to nfs.c 6 years ago
pedro d17c9da52e busybox: wget: openssl11: fix ssl when built with OpenSSL-1.1.x 6 years ago
pedro 41e4d00b4b vpnrouting: further optimization, clean-up 6 years ago
pedro de9c53eb83 vpnrouting: fix the extraction of foreign options from the OpenVPN server, add a warning if the option is enabled but nothing was received from the server, change firewall restart - move to the very end 6 years ago
pedro c5a15cf772 router: Makefile: portmap: clean-up recipe 6 years ago
pedro ae261be708 miniupnpd: appendix to commit dff9e41: fix compiler warnings 6 years ago
pedro dff9e4183c miniupnpd: get rid of OpenSSL dependencies in miniupnpd 6 years ago
pedro c403c378b1 pppd: fixes from upstream
- pppd.h: Add missing headers

Signed-off-by: Rosen Penev <rosenp@gmail.com>
03104baaa8

- pppd: Don't free static string

Commit fcb076c ("Various fixes for errors found by coverity static
analysis (#109)", 2019-05-06) added statements to free the result
returned from get_first_ethernet().  However, the result of
get_first_ethernet() is not dynamically allocated, either on Linux
or Solaris.  Hence this removes the unnecessary (and dangerous)
free() statements.

Fixes: fcb076c ("Various fixes for errors found by coverity static analysis (#109)")
Reported-by: Florian Kohnhäuser <florian@kohnhaeuser.com>
Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
09f695f09e

- pppd: Limit memory accessed by string formats with max length specified

Currently, calls to [v]slprintf that have a string format (%s, %v,
%q) with a maximum length specified (e.g. %.20s) do a strlen() on
the string, and can therefore access memory beyond the maximum
length specified.  If the string is not null-terminated, this could
result in an out-of-bounds read.

This makes vslprintf use strnlen() in cases where a maximum length
has been specified, so that we don't access the string beyond the
maximum length that was given.

Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
b311e98b1d

- pppd: Make sure word read from options file is null-terminated

If a word read from an options file was longer than MAXWORDLEN,
we could pass it to option_error() without null termination,
which could have lead to an out-of-bounds access in vslprintf.
Make sure word[] is null terminated in all cases.

Reported-by: Florian Kohnhäuser <florian@kohnhaeuser.com>
Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
c10c3c7cb3

- pppd: Avoid use of strnlen (and strlen) in vslprintf

Commit b311e98 ("pppd: Limit memory accessed by string formats with
max length specified") added calls to strnlen() in vslprintf().
Unfortunately, strnlen() is not provided in some standard C libraries.
This changes the code to avoid using strnlen().  Using the observation
that the number of characters we can use from the input string is
bounded by buflen, the number of bytes of output buffer available,
we can also avoid doing strlen() on a potentially long string.

Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
5d034034a6
6 years ago
pedro ea9c60fcd3 pppd: restore the use of libcrypt to support DES instead of OpenSSL
- commit #5c08f06 introduced an upstream change: 'Use openssl for DES instead of libcrypt / glibc', with no choice of libcrypt (only libdes and OpenSSL).
  It requires OpenSSL 1.0.2 and prevents compilation with OpenSSL 1.1. This commit fixes it.

Based on PR: 264707afd0
6 years ago
pedro 76956602f2 router: rc: services.c: first inform about it and only then run stubby 6 years ago
pedro a9afb39b5e stubby: add syslog support
- Ported from @Merlin, thanks: 9ef7b80958
6 years ago
pedro be807c16b6 openssl11: don't build test and fuzz to shorten build time 6 years ago
pedro ec19470a6b openssl11: enable OpenSSL 1.1.x on all targets 6 years ago
pedro 7bd5f1d8a6 Merge branch 'arm-master' into arm-ng 6 years ago
pedro 7ff43b154a GUI: Advanced: DHCP / DNS Server (LAN): change the 'DHCPC Options' format to a 256 character textarea 6 years ago
pedro 37a864ee4d openssl11: enable OpenSSL 1.1.x on all targets 6 years ago
pedro 9ea4a475f8 openssl11: priorize CHACHA over GCM for models with no AES acceleration
- it means all in our case

- Ported from @Merlin, thanks: 8fed354c55
6 years ago
pedro 7b9cd8f423 openssl11: Add OPENSSL_PREFER_CHACHA_OVER_GCM option
- Ported from @Merlin, thanks: c00cbfe5d5
6 years ago
pedro f814549461 GUI: Static DHCP/ARP/IPT: also restart dnsmasq when saving 6 years ago
pedro 82d73f68b6 Makefile: cosmetic - change description for target dir868l to 'Custom' 6 years ago
M_ars 434738e642 router: wlconf: use src files / compile from src
finally, get back more wifi control :-)

tested with RT-N18U and R7000, working (wifi bridge, VIFS, speedtest, wifi on/off, et cetera... all ok)
6 years ago
M_ars a19046582f GUI: advanced-vlan.asp - make it possible to create a VLAN with all ports (including tag on!)
fix for: it was only possible to have 4 ports tagged in total for one VLAN (because of nvram size check --> increase from 16 to 17)

see problem report (applies to mips & arm)
https://bitbucket.org/pedro311/freshtomato-mips/issues/12/vlan-cant-have-all-ports-tagging
https://www.linksysinfo.org/index.php?threads/about-feee-memory-and-vlan-settings-in-freshtomato.75114/#post-310846

tested with WRT54GL v1.1 and RT-N18U, working
6 years ago
pedro f851f4f7f4 openssl11: dnsmasq: add openssl backend for DNSSEC
nettle		openssl
sha1		supported	supported
sha256		supported	supported
sha384		supported	supported
sha512		supported	supported
md-gost		not supported	with gost engine
md5		disabled	disabled
rsa		supported	supported
dsa		disabled	disabled
ecdsa		supported	supported
ed25519		supported	supported
ed448		not supported	supported
gost2001	not supported	with gost engine

- Ported from @Merlin, thanks: 7c6667d25e
  (as amended)
6 years ago
pedro b4a163077f openssl11: enable OpenSSL 1.1.1 for httpd, mssl, mdu (if built with mssl) 6 years ago
pedro 1f47932067 openssl11: mysql: enable OpenSSL 1.1.x support 6 years ago
pedro 101a7c7c5f openssl11: nginx: enable OpenSSL 1.1.x support 6 years ago
pedro f2453312de openssl11: tinc: enable OpenSSL 1.1.x support 6 years ago
M_ars ef1b716d12 Asus RT-AC1900P: add some more infos/documentation at id.c (only cosmetic) 6 years ago
M_ars c86e5580fc GUI: advanced-vlan.asp - small cosmetic fix (add missing semicolon) 6 years ago
M_ars f04843d977 RT-AC68U: extend stealth mode (add / turn off Asus Logo LED also)
see linksysinfo forum report / request
https://www.linksysinfo.org/index.php?threads/fork-freshtomato-mips-development-thread.74145/page-76#post-310599
6 years ago
pedro 724a21b877 router: www: about.asp: update copyright 6 years ago
pedro 7411a25844 openssl11: enable OpenSSL 1.1.x for libcurl, mdu (if built with libcurl), transmission
- libs optimization
6 years ago
pedro 16da3cd0d7 router: Makefile: addition to the commit #8cb35bd 6 years ago
pedro fc6c0322fe GUI: FTP Server Configuration: add usage notes 6 years ago
pedro 8cb35bd7c9 openssl11: vsftpd: enable OpenSSL 1.1.x support 6 years ago
pedro d92549de96 vsftpd: clean 3.0.3 sources, add patch instead 6 years ago
pedro 96031004c4 openssl11: getdns/stubby: enable OpenSSL 1.1.x support 6 years ago
pedro f8549e1bf3 openssl11: OpenVPN: enable OpenSSL 1.1.x support 6 years ago
pedro d4b48f4b84 openssl11: tor: enable OpenSSL 1.1.x support 6 years ago
pedro 80446a7b1d openssl11: add patch 6 years ago
pedro f9e968367a openssl11: Enable OpenSSL 1.1.1 in router/Makefile 6 years ago
pedro 1b73ff2e36 openssl-1.1: move folder to openssl-1.1 6 years ago
pedro 95b23e6652 Merge branch 'arm-master' into arm-ng 6 years ago
pedro 98a0ba5a3a dnsmasq: update to 18a6bdd (2019.12.20) snapshot 6 years ago