Commit Graph

5025 Commits (2021.2)
 

Author SHA1 Message Date
pedro 10256a7beb router: Makefile: fix xl2tpd-clean recipe 6 years ago
pedro e81323ced4 router: Makefile: fix dnsmasq-clean recipe 6 years ago
pedro 7dfa1d78ac router: Makefile: clean-up php recipe 6 years ago
pedro 9f082de8e0 router: rc: misc.c: clean-up 6 years ago
pedro 9d4d0d6b2f router: rc: nocat.c: optimize code, clean-up 6 years ago
pedro 499eac7ccb router: rc: restrict.c: clean-up 6 years ago
pedro 0149b71d0e router: rc: snmp.c: optimize code, clean-up 6 years ago
pedro 7a6643f40d router: rc: tinc.c: optimize code, clean-up 6 years ago
pedro 601d9aed3e router: rc: transmission.c: optimize code, clean-up 6 years ago
pedro 7ef479643d router: rc: mysql.c: optimize code, clean-up 6 years ago
M_ars f62c145031 Add Asus RT-AC68U B2 support (almost the same like AC1900P)
THX to user steveineastie from linksysinfo.org

Detection Infos:
boardtype=0x072F
boardrev=0x1500
boardnum=00
boardflags=0x00000110
boardflags2=0x00000000
odmpid=RT-AC68U
model=RT-AC68U
cpurev=c0
6 years ago
pedro 0fce047fd6 router: Makefile: always build and install zlib 6 years ago
pedro ad10bfb6fe router: Makefile: remove FULL_OPENSSL var 6 years ago
pedro d4e637f3f4 router: Makefile: there is no libyaml to install 6 years ago
pedro d380f0f0e8 Merge branch 'arm-master' into arm-sdk7 6 years ago
pedro 5c05f552ce libcurl: update CA certificate bundle as of 2020-01-01 6 years ago
pedro e9e3e3d072 router: Makefile: fix some configure/compiler warnings, clean-up 6 years ago
pedro 81bd842541 router: mssl: add debug log, clean-up 6 years ago
pedro 071c15ad89 router: Makefile: clean-up; remove unused scsi-idle package from the tree 6 years ago
pedro a283aec7b9 GUI: TOR: add an option to resolve only .onion/.exit domains without having to configure anything else 6 years ago
pedro 6a55273ab4 router: www: vpn-tinc.asp: fix some bugs, add link to the tutorial, clean-up 6 years ago
pedro 9350fef7b2 Bump version to 2020.2 6 years ago
pedro 7a88593098 Merge branch 'arm-master' into arm-sdk7 6 years ago
pedro 51f6763e96 Merge branch 'arm-master' into arm-ng 6 years ago
pedro 94cfe99369 Update CHANGELOG 6 years ago
pedro f0003a1a71 Merge branch 'arm-master' into arm-sdk7 6 years ago
pedro 382ae15a56 Merge branch 'arm-master' into arm-ng 6 years ago
pedro 8580341d58 libcurl: update to 7.68.0
- remove the patch that is no longer needed
- changes in router/Makefile - avoid configure warning
6 years ago
pedro 3d48b6ed1e dnsmasq: update to ab53883 (2020.01.11) snapshot
- cosmetic in patch
6 years ago
pedro a23fe7b938 e2fsprogs: update to 1.45.5 6 years ago
M_ars f486e6d34c SDK6: small ng-branch clean-up (only cosmetic) 6 years ago
M_ars 94481a556b router: Makefile: correct/adjust/fix emf & igs targets
Finally :-)

fix for: emf was not working at all! See log file ...
Jan  1 01:00:09 Tomato-Router kern.warn kernel: EMF Instance doesn't exist
Jan  1 01:00:09 Tomato-Router kern.warn kernel: IGMP Snooper couldn't register with EMF
Jan  1 01:00:09 Tomato-Router kern.warn kernel: IGSC init failed

tested with RT-N18U, working!
6 years ago
M_ars c147f8ec36 shared: defaults: add limit for association retries (align to Asus SRC) 6 years ago
M_ars 779f575907 shared: defaults: add nvram acs variables (align to Asus SRC) 6 years ago
M_ars 1a0775c14a shared: defaults.c: align type1 nvram settings to Asus SRC 6 years ago
M_ars d35544cd98 router: rc: led clean-up (use defines for on/off; only cosmetic) 6 years ago
pedro f3a4a586ca NFS: allow selection of protocol version; optimization and clean-up; move code from nfs.rc script to nfs.c 6 years ago
pedro d17c9da52e busybox: wget: openssl11: fix ssl when built with OpenSSL-1.1.x 6 years ago
pedro 41e4d00b4b vpnrouting: further optimization, clean-up 6 years ago
pedro de9c53eb83 vpnrouting: fix the extraction of foreign options from the OpenVPN server, add a warning if the option is enabled but nothing was received from the server, change firewall restart - move to the very end 6 years ago
pedro c5a15cf772 router: Makefile: portmap: clean-up recipe 6 years ago
pedro ae261be708 miniupnpd: appendix to commit dff9e41: fix compiler warnings 6 years ago
pedro dff9e4183c miniupnpd: get rid of OpenSSL dependencies in miniupnpd 6 years ago
pedro c403c378b1 pppd: fixes from upstream
- pppd.h: Add missing headers

Signed-off-by: Rosen Penev <rosenp@gmail.com>
03104baaa8

- pppd: Don't free static string

Commit fcb076c ("Various fixes for errors found by coverity static
analysis (#109)", 2019-05-06) added statements to free the result
returned from get_first_ethernet().  However, the result of
get_first_ethernet() is not dynamically allocated, either on Linux
or Solaris.  Hence this removes the unnecessary (and dangerous)
free() statements.

Fixes: fcb076c ("Various fixes for errors found by coverity static analysis (#109)")
Reported-by: Florian Kohnhäuser <florian@kohnhaeuser.com>
Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
09f695f09e

- pppd: Limit memory accessed by string formats with max length specified

Currently, calls to [v]slprintf that have a string format (%s, %v,
%q) with a maximum length specified (e.g. %.20s) do a strlen() on
the string, and can therefore access memory beyond the maximum
length specified.  If the string is not null-terminated, this could
result in an out-of-bounds read.

This makes vslprintf use strnlen() in cases where a maximum length
has been specified, so that we don't access the string beyond the
maximum length that was given.

Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
b311e98b1d

- pppd: Make sure word read from options file is null-terminated

If a word read from an options file was longer than MAXWORDLEN,
we could pass it to option_error() without null termination,
which could have lead to an out-of-bounds access in vslprintf.
Make sure word[] is null terminated in all cases.

Reported-by: Florian Kohnhäuser <florian@kohnhaeuser.com>
Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
c10c3c7cb3

- pppd: Avoid use of strnlen (and strlen) in vslprintf

Commit b311e98 ("pppd: Limit memory accessed by string formats with
max length specified") added calls to strnlen() in vslprintf().
Unfortunately, strnlen() is not provided in some standard C libraries.
This changes the code to avoid using strnlen().  Using the observation
that the number of characters we can use from the input string is
bounded by buflen, the number of bytes of output buffer available,
we can also avoid doing strlen() on a potentially long string.

Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
5d034034a6
6 years ago
pedro ea9c60fcd3 pppd: restore the use of libcrypt to support DES instead of OpenSSL
- commit #5c08f06 introduced an upstream change: 'Use openssl for DES instead of libcrypt / glibc', with no choice of libcrypt (only libdes and OpenSSL).
  It requires OpenSSL 1.0.2 and prevents compilation with OpenSSL 1.1. This commit fixes it.

Based on PR: 264707afd0
6 years ago
pedro 76956602f2 router: rc: services.c: first inform about it and only then run stubby 6 years ago
pedro a9afb39b5e stubby: add syslog support
- Ported from @Merlin, thanks: 9ef7b80958
6 years ago
pedro be807c16b6 openssl11: don't build test and fuzz to shorten build time 6 years ago
pedro c22cf08561 openssl11: enable OpenSSL 1.1.x on all targets 6 years ago
pedro ec19470a6b openssl11: enable OpenSSL 1.1.x on all targets 6 years ago