Commit Graph

5495 Commits (2021.7)
 

Author SHA1 Message Date
lancethepants fbfb8bf130 Merged in lancethepants/tomato-arm-kille72 (pull request #3)
tinc: Add daemon poll option to check if the daemon is running, Similar to OpenVPN.
8 years ago
kille72 6a8839b5c3 blink_5g binary on ARM devices is not needed (reverted from commit 0f2ccd8359)
This binary / code used to drive GPIO LAN led on WS800 for example. Also, blink_5g_interface also defined for EA6500V1, TDN60 in init.c. Thx Nikk Gitanes!
8 years ago
lancethepants 592dc9934b tinc: Add daemon poll option to check if the daemon is running, Similar to OpenVPN. 8 years ago
AndreDVJ 38ed20d9bc libcurl: Updated to 7.54.0
Files from previous versions were kept in order to resolve build failures:

acinclude.m4
configure
configure.ac
Makefile
Makefile.am
Makefile.in
8 years ago
AndreDVJ aa46c6ae0d nano: Updated to 2.8.1 8 years ago
AndreDVJ 0f2ccd8359 blink_5g binary on ARM devices is not needed 8 years ago
AndreDVJ cafe5af81c dnsmasq: reverting rfc2131.c to previous version
There was a report of a device stuck in DHCPDISCOVER/DHCPOFFER loop, because the DHCP client doesn't implement RFC-6842 to my knowledge.
8 years ago
AndreDVJ 7074cdcad8 kernel-arm: Disable router anycast address for /127 and /128 prefixes
Taken from 2084767445
8 years ago
kille72 fd6655c256 AdBlock: Autoupdate will be randomly launch between 2:00-2.59 AM every day (to reduce server load at the same time)
Thx @pedro
8 years ago
kille72 0842db46c7 Merge branch 'shibby-arm' into shibby-arm7 8 years ago
kille72 3ab2c6d581 AdBlock: Autoupdate will be launch on 2:00AM every day (changed value due to slow downloads at 1.00AM) 8 years ago
kille72 2b16e82d5f Cosmetics 8 years ago
kille72 b92ab70689 TomatoAnon: changed Tomato MOD information to "Kille72"
about.asp: changed link to my forum thread https://openlinksys.info/forum/viewthread.php?thread_id=20829
GUI: Added information: "by Kille72 - forked off from Tomato-ARM by Shibby"
8 years ago
kille72 c8a83a35f3 nginx: updated to 1.10.3
All Tomato-specific hacks were kept.
8 years ago
kille72 3b123d8a2f kernel-arm7: Patched kernel against CVE-2016-10229
https://nvd.nist.gov/vuln/detail/CVE-2016-10229
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2016-10229&vector=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8 years ago
kille72 89df5b0ed3 kernel-arm: Patched kernel against CVE-2016-10229
https://nvd.nist.gov/vuln/detail/CVE-2016-10229
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2016-10229&vector=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8 years ago
AndreDVJ bb3ea06227 nano: Updated to 2.8.0 8 years ago
AndreDVJ 83bd0d1f18 sqlite: Updated to 3.18.0 8 years ago
kille72 2a049ce972 tinc: update to 1.1pre14
Thx @lancethepants
8 years ago
lancethepants fcd5bdfbe2 Merged in lancethepants/tomato-arm-kille72 (pull request #2)
tinc: fix building for version 1.1pre14.
8 years ago
lancethepants bb889ec2dd tinc: fix building for version 1.1pre14. 8 years ago
AndreDVJ 44fa3b9c2b xl2tpd: Re-apply Tomato-specific hacks 8 years ago
kille72 08fd4784cc OpenVPN: upgrade bundled LZ4 library to 1.7.5 9 years ago
AndreDVJ e8916e5d65 stop_transmission.sh: Added additional logging and modified SIGTERM/SIGKILL logic
- This script once hung up on me, so modified logic to issue SIGTERM in case TIMEOUT is less than 10, and SIGKILL in case TIMEOUT is greater or equal than 10.
- That way, in case for some reason the daemon won't go down even after a SIGKILL, more SIGKILL attempts will be made, instead of a single one.
- Each termination or killing attempt will be logged as well, in case this script is hung up, user can look after logs and see what the script is doing.
9 years ago
kille72 d56a611750 OpenVPN: updated to 2.4.1 9 years ago
AndreDVJ fe35f9ce66 /rom/etc/trust-anchors.conf: Added new digest ID.
Thx Vindicator: http://linksysinfo.org/index.php?threads/dnsmasq-dnssec-trust-anchors-conf.73391/
9 years ago
AndreDVJ 2894c3ba5b dnsmasq: Adding back one digest ID I nuked in the previous commit 9 years ago
kille72 00420a6124 Merge branch 'shibby-arm' into shibby-arm7 9 years ago
AndreDVJ 4c0fff11eb kernel-arm: Fix access to unitialized pointer (ported from DD-WRT) (Broadcom bug), in MIPS directory
Applied this for the sake of consistency across directories, but in fact this commit does not do anything, because MIPS does not get compiled at all.
9 years ago
M_ars 36372b4e19 [PATCH 2/2] security update for samba, CVE-2015-5252; Subject: Insufficient symlink verification in smbd 9 years ago
M_ars af8624f3dd [PATCH 1/2] security update for samba, CVE-2012-0870; Subject: Remote code execution vulnerability in smbd 9 years ago
kille72 d28f55c0f6 Merge branch 'shibby-arm' into shibby-arm7 9 years ago
AndreDVJ b86e71c62f dnsmasq: Many changes ported from upstream
Patched with changes up to March 17th, 2017.

Not everything was ported, and only actual code as much as possible. Manual pages per example were left out.

List of what was ported to Tomato's 2.76. All of this will be eventually updated/replaced when dnsmasq 2.77 is released or any correction that may come from upstream is necessary.

- Calculate length of TFTP error reply correctly.
- Zero newly malloc'ed memory.
- Check return of expand() always.
- Fix bad behaviour with some DHCP option arrangements.
- Fix logic error in Linux netlink code.
- Fix problem with --dnssec-timestamp
- malloc(); memset()  -> calloc() for efficiency.
- Zero packet buffers before building output, to reduce risk of information leakage.
- Don't reset packet length on transmission, in case of retransmission.
- Compile-time check on buffer sizes for leasefile parsing code.
- auth-zone: allow to exclude ip addresses from answer.
- Bump auth zone serial when reloading /etc/hosts and friends.
- Handle v4-mapped IPv6 addresses sanely for --synth-domain.
- Suppress useless warning about DHCP packets of interfaces without addresses.
- Handle binding upstream servers to an interfaces
- Improve --address and --ipset docs, fix --help output
- Log ipset errors.
- Fix crash introduced in 2675f2061525bc954be14988d64384b74aa7bf8b
- Bump TCP connection backlog from 5 to 32.
- Additional syntax check on MAC wildcards.
- Fix getsockname error return check.
- Tweak start-up logging
- Detect and error loops in --cname configuration.
- Fix rrfilter bug leading to malformed replies.
- Make --localise-queries apply to names from --interface-name.
- Stop treating SERVFAIL as a successful response from upstream servers.
- Improve connection handling when talking to TCP upsteam servers.
- Add forthcoming 2017 root zone trust anchor to trust-anchors.conf.
- Decrease the number of individual sites listed in log.
- Implement RFC-6842 (Client-ids in DHCP replies.)
- Make --bogus-priv apply to IPv6
- Allow wildcard CNAME records in authoritative zones.
- Fix CNAME wildcard in auth-mode.
- Fix rev-server with /32 prefix.
- Improve error checking for --rev-server.
- When forwarding a query to a non-DNSSEC nameserver, don't verify the lack of DNSSEC.
9 years ago
AndreDVJ e9ef9a7e8d Workaround to fix VPN build
A previous commit introduces a line of code which requires Tor to be built, which isn't the case for VPN builds.
So script was modified to only have that said line of code called "externally", inside a case called ln_Tor, and rootprep script is called again in the Makefile but this time specifying ln_Tor as a parameter whenever TOR is included.
9 years ago
kille72 1140e2d438 USB: Cleanup and tweaks
Thx Nikk Gitanes
9 years ago
kille72 843adc8709 Updated mymotd script
Thx Nikk Gitanes!
9 years ago
tsynik 25f6e87969 R1D: Turn off USB 3.0 option
AndreDVJ: Even though I don't have that router, the change to grey out USB 3.0 support in Webpage in case router does not have an USB 3.0 port if usb_usb3=-1 is very useful.
9 years ago
kille72 888b34aa34 kernel-arm7: (backport) fix reuse-after-free in DCCP
Tomato doesn't use DCCP (not even compiled) so it's not affected at all, but since AsusWRT folks applied this, I'm jumping into that bandwagon as well.

This fixes Linux kernel: CVE-2017-6074: DCCP double-free vulnerability (local root). See http://seclists.org/oss-sec/2017/q1/471
Upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5edabca9d4cff7f1f2b68f0bac55ef99d9798ba4
9 years ago
AndreDVJ 99146261be kernel: (backport) fix reuse-after-free in DCCP
Tomato doesn't use DCCP (not even compiled) so it's not affected at all, but since AsusWRT folks applied this, I'm jumping into that bandwagon as well.

This fixes Linux kernel: CVE-2017-6074: DCCP double-free vulnerability (local root). See http://seclists.org/oss-sec/2017/q1/471
Upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5edabca9d4cff7f1f2b68f0bac55ef99d9798ba4
9 years ago
Jeremy Chadwick c744fc095b Don't send AT+CGDCONT if APN field is empty
Some 3G modems/ISPs) don't require an APN, and the PDP context
set AT command returns ERROR in this scenario.  Allow users to
empty the APN field in the GUI to disable sending the AT+CGDCONT
command.  This is needed for BSNL EVDO (India) customers.

Reference: http://www.linksysinfo.org/index.php?threads/how-to-edit-file-on-tomato-firmware.73090/
Reference: http://m2msupport.net/m2msupport/atcgdcont-define-pdp-context/

AndreDVJ: Different function ( nvram_safe_get() instead of nvram_get() ) was used due Multi-WAN changes & requirements.
9 years ago
kille72 d946600de4 Ensure both UDP and TCP DNS requests are intercepted for all LAN interfaces
Patch from Vindicator: http://www.linksysinfo.org/index.php?threads/tomato-toastmans-releases.36106/page-42#post-285205
With very minor change on the Intercept DNS port description. Thx Vindicator & AndreDVJ!
9 years ago
kille72 f63e38b2ba Collection of patches from M_ars to hopefully correct IPTraffic/Bandwidth monitor
Further code was retrofitted due to Multi-WAN feature. Thx M_ars & AndreDVJ!
9 years ago
kille72 1d820285ce Merge branch 'shibby-arm' into shibby-arm7 9 years ago
kille72 c327d8e721 Cosmetics 9 years ago
AndreDVJ 25f8a78d28 ~/router/Makefile: add PARALLEL_BUILD directive to OpenSSL and xl2tpd 9 years ago
AndreDVJ c986ea0a61 ~/router/Makefile: updates to support libsodium 1.0.12 9 years ago
AndreDVJ 59ea2827a3 libsodium: Updated to 1.0.12 9 years ago
kille72 5ad43a8860 Cosmetics 9 years ago
AndreDVJ b7475f89a9 others/Makefile: stealthMode and optware no longer to be installed.
- stealthMode was originally written for mipsel routers. I heard of problems of Yahoo! API, but not sure if they were rectified, but it doesn't matter.
stealthMode cannot be used with ARM routers because of blink binary. It is easy enough to kill blink, but if users do any change that causes wireless to be restarted, blink will also be restarted, and will nullify the effects of this script.

- optware is not updated since 2014.
And we have Entware for years, which is well maintained and supported as of 2017.
9 years ago
AndreDVJ 6fdb5a7b13 xl2tpd: Updated to 1.3.9 9 years ago