Commit Graph

4877 Commits (2021.1.070)
 

Author SHA1 Message Date
M_ars bd63774510 radvd: remove leftovers at file router/rc/rc.h (Tomato uses dnsmasq) 7 years ago
M_ars b5aff2a905 OpenVPN: extend Server GUI functionality - add option to push LAN(br0)...LAN4(br3) (only if available) - push the suitable DNS Server LAN IP 7 years ago
M_ars dc31a214f9 router/rc/firewall.c and rc.h - add function "enable_ndp_proxy()" - Enable NDP Proxy for IPv6 builds - add missing conditional compilation 7 years ago
M_ars d52dc22202 router/rc/rc.h --> fix ARM builds WITHOUT IPv6 support (there is no freshtomato ARM build with IPv4 support only, but still if someone wants to try something. Discoverd by coincidence!) 7 years ago
M_ars 72f00b082a radvd: remove leftovers at file router/rc/rc.h (Tomato uses dnsmasq) 7 years ago
M_ars f7431c0727 OpenVPN: make IPv6 connection possible if IPv6 is enabled
- comment for option "proto" (With Version 2.4.0 full dual-stack functionality is available, no need for udp6 (only IPv6!)...)
- add firewall rules for IPv6 connection

--> IPv6 setup/config with OpenVPN Custom Configuration (and/or further commit)
7 years ago
pedro 79e70c69e1 GUI: fix commit 406081b
- yeah, there is no "js" subfolder in ARM branch...
7 years ago
pedro 641eefe0ad GUI: fix commit 406081b
- yeah, there is no "js" subfolder in ARM branch...
7 years ago
kille72 ca045f86de Merge branch 'shibby-arm' into shibby-arm7 7 years ago
AndreDVJ 632b5de8ae ~/router/rc/transmission.c: sysctl binary is not included in TomatoUSB, write values directly instead
For some reason, changes introduced in this commit: 65b59a8dce (chg-release)/src-rt-6.x.4708/router/rc/transmission.c

To tune TCP buffers essentially did not work, because sysctl is not included in Tomato, so the only way is to "echo" the values directly.
Also backout to default values when transmission-daemon is stopped via the standard stop script included.

It's difficult to tell if increasing these buffers will help the router in any way while transmission-daemon is running, so only time will tell.
7 years ago
pedro 3e650c1faa GUI: add a needed include file for code utilizing bwm-common.js
- namely, MAX_BRIDGE_ID was not defined in the populateCache() function.

as per: d3f82e2a4f
7 years ago
AndreDVJ e6e1f4ae43 dnsmasq: Updated to 2.80test5 7 years ago
AndreDVJ 4b94cde84a ~/router/rc/transmission.c: sysctl binary is not included in TomatoUSB, write values directly instead
For some reason, changes introduced in this commit: 65b59a8dce (chg-release)/src-rt-6.x.4708/router/rc/transmission.c

To tune TCP buffers essentially did not work, because sysctl is not included in Tomato, so the only way is to "echo" the values directly.
Also backout to default values when transmission-daemon is stopped via the standard stop script included.

It's difficult to tell if increasing these buffers will help the router in any way while transmission-daemon is running, so only time will tell.
7 years ago
AndreDVJ 40f7fa4af1 dnsmasq: Updated to 2.80test5 7 years ago
pedro 406081b70c GUI: add a needed include file for code utilizing bwm-common.js
- namely, MAX_BRIDGE_ID was not defined in the populateCache() function.

as per: d3f82e2a4f
7 years ago
kille72 e951904da9 e2fsprogs: update to 1.44.4 7 years ago
kille72 0ea49c72c1 php: updated to 7.2.9 7 years ago
kille72 4fe0942f8b dnsmasq: Updated to 2.80test4 7 years ago
kille72 d0cc1d7649 openssl: updated to 1.0.2p 7 years ago
kille72 143d913dff e2fsprogs: update to 1.44.4 7 years ago
kille72 b3482fa9ca php: updated to 7.2.9 7 years ago
kille72 6c6bf01d9c dnsmasq: Updated to 2.80test4 7 years ago
kille72 dd6e92c596 openssl: updated to 1.0.2p 7 years ago
AndreDVJ 741eab0418 Retiring Captive Portal feature
Captive Portal in TomatoUSB is based on NoCatSplash, which NEVER worked in ARM routers, and it's too old and doesn't support redirection to https sites properly.
It's broken in DD-WRT as well. While alternatives exists, porting them to TomatoUSB and replace NoCatSplash is a different story.
7 years ago
AndreDVJ 4249f23010 nocat: Attempts to make Captive Portal work 7 years ago
AndreDVJ 44858af223 Retiring Captive Portal feature
Captive Portal in TomatoUSB is based on NoCatSplash, which NEVER worked in ARM routers, and it's too old and doesn't support redirection to https sites properly.
It's broken in DD-WRT as well. While alternatives exists, porting them to TomatoUSB and replace NoCatSplash is a different story.
7 years ago
AndreDVJ 1c89ef958d nocat: Attempts to make Captive Portal work 7 years ago
kille72 c028da94f4 Merge branch 'shibby-arm' into shibby-arm7 7 years ago
pedro 3a82f62d7a watchdog: increase waittime to 3 and max_ttl to 4 in traceroute to reduce false positives 7 years ago
pedro 83a3c710cf watchdog: increase waittime to 3 and max_ttl to 4 in traceroute to reduce false positives 7 years ago
kille72 3470c142b0 dnsmasq: Updated to 2.80test3 7 years ago
kille72 ae1b19226d php: updated to 7.2.8 7 years ago
kille72 d30d14ef5d tor: Updated to 0.3.3.9 7 years ago
kille72 781ceb3e56 dnsmasq: Updated to 2.80test3 7 years ago
kille72 2178b0f2f0 php: updated to 7.2.8 7 years ago
kille72 de50070980 tor: Updated to 0.3.3.9 7 years ago
kille72 130ef67b2b Merge branch 'shibby-arm' into shibby-arm7 7 years ago
edrikk 6d48c1b3a7 ext2: Fix error handling on inode bitmap corruption
When insert_inode_locked() fails in ext2_new_inode() it most likely means inode bitmap got corrupted and we allocated again inode which is already in use. Also doing unlock_new_inode() during error recovery is wrong since the inode does not have I_NEW set. Fix the problem by informing about filesystem error and jumping to fail: (instead of fail_drop:) which doesn't call unlock_new_inode().

From upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ef6919c283257155def420bd247140e9fd2e9843
7 years ago
edrikk 41919712e6 ext2: Fix error handling on inode bitmap corruption
When insert_inode_locked() fails in ext2_new_inode() it most likely means inode bitmap got corrupted and we allocated again inode which is already in use. Also doing unlock_new_inode() during error recovery is wrong since the inode does not have I_NEW set. Fix the problem by informing about filesystem error and jumping to fail: (instead of fail_drop:) which doesn't call unlock_new_inode().

From upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ef6919c283257155def420bd247140e9fd2e9843
7 years ago
edrikk a96aea302e ext3: Fix error handling on inode bitmap corruption
When insert_inode_locked() fails in ext3_new_inode() it most likely means inode bitmap got corrupted and we allocated again inode which is already in use. Also doing unlock_new_inode() during error recovery is wrong since inode does not have I_NEW set. Fix the problem by jumping to fail: (instead of fail_drop:) which declares filesystem error and does not call unlock_new_inode().

Per upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1415dd8705394399d59a3df1ab48d149e1e41e77
7 years ago
edrikk ecef7d5a7e ext3: Fix error handling on inode bitmap corruption
When insert_inode_locked() fails in ext3_new_inode() it most likely means inode bitmap got corrupted and we allocated again inode which is already in use. Also doing unlock_new_inode() during error recovery is wrong since inode does not have I_NEW set. Fix the problem by jumping to fail: (instead of fail_drop:) which declares filesystem error and does not call unlock_new_inode().

Per upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1415dd8705394399d59a3df1ab48d149e1e41e77
7 years ago
edrikk 049d2d309f ARM: 6891/1: prevent heap corruption in OABI semtimedop
When CONFIG_OABI_COMPAT is set, the wrapper for semtimedop does not bound the nsops argument. A sufficiently large value will cause an integer overflow in allocation size, followed by copying too much data into the allocated buffer. Fix this by restricting nsops to SEMOPM.

Per upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f22072ab50cac7983f9660d33974b45184da4f9
7 years ago
edrikk 6a9c139c3f ARM: 6891/1: prevent heap corruption in OABI semtimedop
When CONFIG_OABI_COMPAT is set, the wrapper for semtimedop does not bound the nsops argument. A sufficiently large value will cause an integer overflow in allocation size, followed by copying too much data into the allocated buffer. Fix this by restricting nsops to SEMOPM. 

Per upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f22072ab50cac7983f9660d33974b45184da4f9
7 years ago
edrikk 3a24b3064d cifs: fix possible memory corruption in CIFSFindNext
The name_len variable in CIFSFindNext is a signed int that gets set to the resume_name_len in the cifs_search_info. The resume_name_len however is unsigned and for some infolevels is populated directly from a 32 bit value sent by the server.

If the server sends a very large value for this, then that value could look negative when converted to a signed int. That would make that value pass the PATH_MAX check later in CIFSFindNext. The name_len would then be used as a length value for a memcpy. It would then be treated as unsigned again, and the memcpy scribbles over a ton of memory.

Fix this by making the name_len an unsigned value in CIFSFindNext.

Per upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9438fabb73eb48055b58b89fc51e0bc4db22fabd
7 years ago
edrikk 582a648edb cifs: fix possible memory corruption in CIFSFindNext
The name_len variable in CIFSFindNext is a signed int that gets set to the resume_name_len in the cifs_search_info. The resume_name_len however is unsigned and for some infolevels is populated directly from a 32 bit value sent by the server.

If the server sends a very large value for this, then that value could look negative when converted to a signed int. That would make that value pass the PATH_MAX check later in CIFSFindNext. The name_len would then be used as a length value for a memcpy. It would then be treated as unsigned again, and the memcpy scribbles over a ton of memory. 

Fix this by making the name_len an unsigned value in CIFSFindNext.

Per upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9438fabb73eb48055b58b89fc51e0bc4db22fabd
7 years ago
edrikk b856b5e53b logfs: Prevent memory corruption
This is a bad one. I wonder whether we were so far protected by no_free_segments(sb) usually being smaller than LOGFS_NO_AREAS. Found by Dan Carpenter <dan.carpenter@oracle.com> using smatch.

Per Upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=934eed395d201bf0901ca0c0cc3703b18729d0ce
7 years ago
edrikk 6732608bba logfs: Prevent memory corruption
This is a bad one. I wonder whether we were so far protected by no_free_segments(sb) usually being smaller than LOGFS_NO_AREAS. Found by Dan Carpenter <dan.carpenter@oracle.com> using smatch.

Per Upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=934eed395d201bf0901ca0c0cc3703b18729d0ce
7 years ago
edrikk 0759d4ee2e netfilter: ebtables: fix wrong name length while copying to user-space
user-space ebtables expects 32 bytes-long names, but xt_match names use 29 bytes. We have to copy less 29 bytes and then, make sure we fill the remaining bytes with zeroes.

Per upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=848edc69192a38bf9d261032f248b14f47e6af8b
7 years ago
edrikk 0538ab074b netfilter: ebtables: fix wrong name length while copying to user-space
user-space ebtables expects 32 bytes-long names, but xt_match names use 29 bytes. We have to copy less 29 bytes and then, make sure we fill the remaining bytes with zeroes.

Per upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=848edc69192a38bf9d261032f248b14f47e6af8b
7 years ago
edrikk 41db6ca2f5 netfilter: ipset: dumping error triggered removing references twice
If there was a dumping error in the middle, the set-specific variable was not zeroed out and thus the 'done' function of the dumping wrongly tried to release the already released reference of the set. The already released reference was caught by __ip_set_put and triggered a kernel BUG message.

Per upstream:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=be94db9ddac0d6ea76f479b04fb3a43314654c9f
7 years ago