db71f6b36b
QOS: Update HTTPS, Add QUIC Rules
...
http://www.linksysinfo.org/index.php?threads/qos-development-thread.31886/#post-255209
http://www.linksysinfo.org/index.php?threads/qos-development-thread.31886/#post-255272
10 years ago
c917ab13ff
Merged pl_shibby/tomato-arm into shibby-arm
10 years ago
a46db65c0f
seq_printf can return -1 if there is an issue. However, in those cases it's still ok to return 0.
...
In fact, more recent versions of this function are also behaving this way (returning 0 regardless of seq_printf ).
10 years ago
7d333755df
params: Fix potential memory leak in add_sysfs_param()
...
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=63662139e519ce06090b2759cf4a1d291b9cc0e2&context=10&ignorews=0&dt=0
On allocation failure, it would fail to free the old attrs array which
was no longer referenced by anything (since it would free the old
module_param_attrs struct on the way out).
Comment the suspicious-looking krealloc() usage to explain why it *isn't*
actually buggy, despite looking like a classic realloc() usage bug.
10 years ago
884470d5c1
nfsd: remove /proc/fs/nfs when create /proc/fs/nfs/exports error
...
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff7c4b3693cbc7e938f49ed89e2f649a33f03ed1
when create /proc/fs/nfs/exports error, we should remove /proc/fs/nfs,
if don't do it, it may cause Memory leak.
10 years ago
b3bfa12b87
kernel/auditfilter.c: tree and watch will memory leak when failure occurs
...
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373e0f3408fe671550d69d9a7965d8a49e988525
In audit_data_to_entry() when a failure occurs we must check and free
the tree and watch to avoid a memory leak.
10 years ago
a0b77135c5
fs/fscache/stats.c: fix memory leak
...
Backporting this memory leak fix to Tomato, as the explanation also holds true in 2.6.36:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ec686c9239b4d472052a271c505d04dae84214cc
There is a kernel memory leak observed when the proc file
/proc/fs/fscache/stats is read.
The reason is that in fscache_stats_open, single_open is called and the
respective release function is not called during release. Hence fix
with correct release function - single_release().
Addresses https://bugzilla.kernel.org/show_bug.cgi?id=57101
10 years ago
764d1fb973
mac80211: disable u-APSD queues by default
...
Backporting from Kernel v3. This seems very relevant to Tomato.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa75ebc275b2a91b193654a177daf900ad6703f0&context=35&ignorews=0&dt=0
mac80211: disable u-APSD queues by default
Some APs experience problems when working with
U-APSD. Decreasing the probability of that
happening by using legacy mode for all ACs but VO
isn't enough.
Cisco 4410N originally forced us to enable VO by
default only because it treated non-VO ACs as
legacy.
However some APs (notably Netgear R7000) silently
reclassify packets to different ACs. Since u-APSD
ACs require trigger frames for frame retrieval
clients would never see some frames (e.g. ARP
responses) or would fetch them accidentally after
a long time.
It makes little sense to enable u-APSD queues by
default because it needs userspace applications to
be aware of it to actually take advantage of the
possible additional powersavings. Implicitly
depending on driver autotrigger frame support
doesn't make much sense.
10 years ago
897b5e5fc7
ARM: 7809/1: perf: fix event validation for software group leaders
...
Backported from http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c95eb3184ea1a3a2551df57190c81da695e2144b&context=40&ignorews=0&dt=0
It is possible to construct an event group with a software event as a
group leader and then subsequently add a hardware event to the group.
This results in the event group being validated by adding all members
of the group to a fake PMU and attempting to allocate each event on
their respective PMU.
Unfortunately, for software events wthout a corresponding arm_pmu, this
results in a kernel crash attempting to dereference the ->get_event_idx
function pointer.
This patch fixes the problem by checking explicitly for software events
and ignoring those in event validation (since they can always be
scheduled).
10 years ago
ca2becf244
net/netfilter/ipvs: Eliminate memory leak
...
Cherry Picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=b2aff96327545aa5ceb25e3116be69c8b06de703&context=10&ignorews=0&dt=0
_ip_vs_service_get and __ip_vs_svc_fwm_get increment a reference count, so that reference count should be decremented before leaving the function in an error case.
10 years ago
e5b0bc52ba
mtd: phram: fix memory leak
...
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=f17f12ce9dd6ec0a8e1f415ecdbaebfce0207464
Commit 4f678a58 (mtd: fix memory leaks in phram_setup) missed two cases where the memory allocated for name would be leaked. This commit frees the memory when register_device() fails and on unregister_devices().
10 years ago
bd668a943f
netfilter: nf_conntrack: fix sysctl memory leak
...
Cherry Picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=fe8f661f2c2bb058822f13f6f232e121bde1338f
Message in log because sysctl table was not empty at netns exit
WARNING: at net/sysctl_net.c:84 sysctl_net_exit+0x2a/0x2c()
Instrumenting showed that the nf_conntrack_timestamp was the entry
that was being created but not cleared.
10 years ago
490e0f66d1
fix cdev leak on O_PATH final fput()
...
__fput doesn't need a cdev_put() for O_PATH handles.
Cherry picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=60ed8cf78f886753e454b671841c0a3a0e55e915
10 years ago
7b271c1c66
drivers/misc/atmel_tclib.c: fix a memory leak
...
Cherry Picked: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=a844b43ca078d7dd8f0cd13c6f030ec62a996975
request_mem_region() will call kzalloc to allocate memory for struct
resource. release_resource() unregisters the resource but does not free
the allocated memory, thus use release_mem_region() instead to fix the
memory leak.
10 years ago
0a141073f8
proc: disable mem_write after exec
...
Cherry Picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=26947f8c8f9598209001cdcd31bb2162a2e54691
This change makes mem_write() observe the same constraints as mem_read(). This
is particularly important for mem_write as an accidental leak of the fd across
an exec could result in arbitrary modification of the target process' memory.
IOW, /proc/pid/mem is implicitly close-on-exec.
10 years ago
f3af29636e
proc: protect mm start_code/end_code in /proc/pid/stat
...
Cherry picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=5883f57ca0008ffc93e09cbb9847a1928e50c6f3
While mm->start_stack was protected from cross-uid viewing (commit
f83ce3e6b02d5 ("proc: avoid information leaks to non-privileged
processes")), the start_code and end_code values were not. This would
allow the text location of a PIE binary to leak, defeating ASLR.
Addresses CVE-2011-0726
10 years ago
6e43135ef3
char/tpm: Fix unitialized usage of data buffer
...
This patch fixes information leakage to the userspace by initializing
the data buffer to zero.
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=1309d7afbed112f0e8e90be9af975550caa0076b
10 years ago
0bec91ed18
genirq: Fix cpumask leak in __setup_irq()
...
The allocated cpumask should be freed in __setup_irq().
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=4f5058c3b71ed5930bb2b478c4d5dbc799dd9ad1
10 years ago
f2b7a146ab
netfilter_dscp_ipv6_mangle.patch from openwrt, which is backport upstream Kernel commit 1ed2f73d90fb49bcf5704aee7e9084adb882bfc5 (netfilter: IPv6: fix DSCP mangle code).
...
netfilter: IPv6: fix DSCP mangle code
The mask indicates the bits one wants to zero out, so it needs to be inverted before applying to the original TOS field.
Signed-off-by: Fernando Luis Vazquez Cao <fernando@oss.ntt.co.jp>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10 years ago
5a24a5b60f
switch4g: lot of improvements
10 years ago
6b81c60bc5
4G: backport cdc_ether module from Oleg
10 years ago
c4090b397f
long boot fix
10 years ago
cc4b317011
Merged in ksanderson/tomato-arm/layer7 (pull request #19 )
...
Conflicts:
release/src-rt-6.x.4708/linux/linux-2.6.36/net/netfilter/Kconfig
10 years ago
5ca50da9b0
Merged in edrikk/tomato-arm-minor-asp-fix (pull request #18 )
...
www fixes (asp, css)
10 years ago
f397ebd975
Merged in edrikk/tomato-arm-layer7-patch-for-linux-2.6.35 (pull request #17 )
...
Update xt_layer7 to version 2.23, adding patch to make it work with kernel 2.6.35 and above.
10 years ago
9e237a26a4
Merged in edrikk/tomato-arm-dnsmasq-performance-options (pull request #15 )
...
Couple of dnsmasq performance optimization options
10 years ago
b10e94e7d7
Merged in edrikk/tomato-arm-netfilter-fixes (pull request #16 )
...
One netfilter memory leak fix, and one backport
10 years ago
b4f19bb91b
Re-enable IPv6 Debug Logging
...
by setting debug_ipv6=1 in nvram
REVERT: WIDE-DHCPV6: reduce size by disabling debug logging at compile time
Tomato Git Commit:54859dca1f85a97261b7d6e70b1247e0ca1ad3c5
10 years ago
1e89d94e9b
add missing semicolons.
10 years ago
0f5ce1bb4a
Delete duplicated function ymText(yr, mo)
10 years ago
a7c045b9c5
Fixed cosmetics of check() procedure -- indentations.
10 years ago
004bc00a22
Since NF_CT_ACCT is gone, Accounting has to be enabled in code...
...
Setting nf_ct_set_acct(par->net, true)
10 years ago
8d53a98257
Adding some semi-colons
10 years ago
2eb4a7ce93
Add missing semi-colon.
10 years ago
9b0486d6e3
Add missing semi-colon
10 years ago
b665ff5887
Fix missing semi-colon for ip6 lan stats.
10 years ago
688f65c62e
Merge branch 'shibby-arm' of https://bitbucket.org/pl_shibby/tomato-arm into shibby-arm
10 years ago
22cf3e008a
Added a couple of divs to get rid of dangling /divs
10 years ago
26b3e8b615
Added div to account for dangling /div
10 years ago
e9627486e4
Adding opening div as /div was dangling. Didn't want to remove it...
10 years ago
c2e04bd0bd
Fixed typo "blanc" which should be "blank". Removed close font when it wasn't opened. Added open divs in two places because the close ones were dangling.
10 years ago
40d7d0860a
Added missing tag closures
10 years ago
b43faf2274
Add a number of missing closing html tags
10 years ago
a53efe608f
Fix typo. "tyle" -> "type"
10 years ago
de3a14abb1
Fix typo. "tyle" -> "type"
10 years ago
3e911c624d
Fix typo. "tyle" -> "type"
10 years ago
40a37b0091
Removing extra "," which resulted in broken CSS/ruleset being dropped. The CSS now passes W3C check.
10 years ago
e1e365b3eb
Removed NF_CT_ACCT from NETFILTER_XT_MATCH_LAYER7 as per Kyle Sanderson's finding that it is causing module not to compile.
10 years ago
78d407bbd7
Permit NETFILTER_XT_MATCH_LAYER7 to be built.
10 years ago
5612d69a25
Incorporating patch for .36 found at: This aligns with other code in Tomato as well, so it seems sane...
...
https://lists.openwrt.org/pipermail/openwrt-devel/2014-May/025280.html
10 years ago
Tvlz
tvlz
edrikk
Shibby
tsynik
pl_shibby
Kyle Sanderson