Shibby
6d8cd8ce38
Merge branch 'shibby-arm' of https://bitbucket.org/pl_shibby/tomato-arm into shibby-arm
10 years ago
pl_shibby
70b70cf05a
Merged in edrikk/memory-leak-cherry-picks-from-upstream-kernel (pull request #21 )
...
Upstream Cherry Picks... Mostly Memory Leaks, and some data leaks
10 years ago
Shibby
eff97e2855
Merge branch 'shibby-arm' of https://bitbucket.org/pl_shibby/tomato-arm into shibby-arm
10 years ago
Shibby
d49977f000
do not try load IMQ modules
10 years ago
Kyle Sanderson
e99890dfaf
NULL out Shared Libs protection in tc IPTables.
10 years ago
Kyle Sanderson
656c3be4a8
Fix prior broken QOS ingress QOS Classifications.
10 years ago
Kyle Sanderson
73a945bae0
Change hardcoded imq0 in ctnf to ifb0.
10 years ago
Kyle Sanderson
da443bfc00
Fix IFB TC not forwarding traffic.
10 years ago
Kyle Sanderson
d8e0a1fef7
Add Kernel support for Mirred and IPT for tc.
10 years ago
Kyle Sanderson
281b9d3f2b
Add support for IFB instead of IMQ.
10 years ago
Kyle Sanderson
deeeed0afc
Build fix from previous revert-revert 72ddba5e88b4c92f7fee3ea1716eb53f18b7b988
10 years ago
Kyle Sanderson
93f3e92250
Enable Intermediate Functional Block device (part of the Linux Kernel since 2.6.20).
10 years ago
Kyle Sanderson
db808a8008
Explicitly add (FQ_)Codel to Local config_base
10 years ago
Kyle Sanderson
5ed1447d12
Revert "revert Tiomo patch, do not use IMQ for now"
...
This reverts commit 5b1a1cf6b3
.
Conflicts:
release/src-rt-6.x.4708/router/nvram/defaults.c
release/src-rt-6.x.4708/router/rc/qos.c
10 years ago
Kyle Sanderson
be51a6a3ca
Fix Layer7 RETURN being absolutely blank in iptables (QOS).
10 years ago
Kyle Sanderson
a4f4019ebf
Fix Length RETURN being absolutely blank in iptables (QOS).
10 years ago
Kyle Sanderson
7e418cd815
Fix DSCP RETURN being absolutely blank in iptables.
10 years ago
Kyle Sanderson
a2fcb607a4
Sync Netfilter Modules with fixes from Kernel 4.0.
10 years ago
Kyle Sanderson
0c2e9c3555
Add FQ_Codel support to Tomato.
10 years ago
Kyle Sanderson
e952598698
Backport FQ_Codel for Linux 2.6.36
10 years ago
Kyle Sanderson
bb8bc967a8
Backport Codel to Linux 2.6.36
10 years ago
Kyle Sanderson
8a1bad8f05
Add Codel support to Tomato.
10 years ago
Shibby
542e7b5a9b
switch4g: terminate connection process when 4G modem will be not detected
10 years ago
Shibby
d5514b3cc6
mssl updates
...
Cherry-picked from RMerlin:
- Remove obsolete ciphers such as RC4, and add support for ECDHE
- Added option to disable ECDHE support for some broken versions of Safari
- Allow the use of client+chain+CA certificates provided together in that order
- Allow TLS 1.1 and 1.2 support
10 years ago
Shibby
9358ea1865
Add libcurl to PHP. Add curl binary to image
10 years ago
Shibby
3eaa7ebbac
OpenSSL: update to 1.0.2a
10 years ago
Tvlz
db71f6b36b
QOS: Update HTTPS, Add QUIC Rules
...
http://www.linksysinfo.org/index.php?threads/qos-development-thread.31886/#post-255209
http://www.linksysinfo.org/index.php?threads/qos-development-thread.31886/#post-255272
10 years ago
tvlz
c917ab13ff
Merged pl_shibby/tomato-arm into shibby-arm
10 years ago
edrikk
a46db65c0f
seq_printf can return -1 if there is an issue. However, in those cases it's still ok to return 0.
...
In fact, more recent versions of this function are also behaving this way (returning 0 regardless of seq_printf ).
10 years ago
edrikk
7d333755df
params: Fix potential memory leak in add_sysfs_param()
...
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=63662139e519ce06090b2759cf4a1d291b9cc0e2&context=10&ignorews=0&dt=0
On allocation failure, it would fail to free the old attrs array which
was no longer referenced by anything (since it would free the old
module_param_attrs struct on the way out).
Comment the suspicious-looking krealloc() usage to explain why it *isn't*
actually buggy, despite looking like a classic realloc() usage bug.
10 years ago
edrikk
884470d5c1
nfsd: remove /proc/fs/nfs when create /proc/fs/nfs/exports error
...
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff7c4b3693cbc7e938f49ed89e2f649a33f03ed1
when create /proc/fs/nfs/exports error, we should remove /proc/fs/nfs,
if don't do it, it may cause Memory leak.
10 years ago
edrikk
b3bfa12b87
kernel/auditfilter.c: tree and watch will memory leak when failure occurs
...
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373e0f3408fe671550d69d9a7965d8a49e988525
In audit_data_to_entry() when a failure occurs we must check and free
the tree and watch to avoid a memory leak.
10 years ago
edrikk
a0b77135c5
fs/fscache/stats.c: fix memory leak
...
Backporting this memory leak fix to Tomato, as the explanation also holds true in 2.6.36:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ec686c9239b4d472052a271c505d04dae84214cc
There is a kernel memory leak observed when the proc file
/proc/fs/fscache/stats is read.
The reason is that in fscache_stats_open, single_open is called and the
respective release function is not called during release. Hence fix
with correct release function - single_release().
Addresses https://bugzilla.kernel.org/show_bug.cgi?id=57101
10 years ago
edrikk
764d1fb973
mac80211: disable u-APSD queues by default
...
Backporting from Kernel v3. This seems very relevant to Tomato.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa75ebc275b2a91b193654a177daf900ad6703f0&context=35&ignorews=0&dt=0
mac80211: disable u-APSD queues by default
Some APs experience problems when working with
U-APSD. Decreasing the probability of that
happening by using legacy mode for all ACs but VO
isn't enough.
Cisco 4410N originally forced us to enable VO by
default only because it treated non-VO ACs as
legacy.
However some APs (notably Netgear R7000) silently
reclassify packets to different ACs. Since u-APSD
ACs require trigger frames for frame retrieval
clients would never see some frames (e.g. ARP
responses) or would fetch them accidentally after
a long time.
It makes little sense to enable u-APSD queues by
default because it needs userspace applications to
be aware of it to actually take advantage of the
possible additional powersavings. Implicitly
depending on driver autotrigger frame support
doesn't make much sense.
10 years ago
edrikk
897b5e5fc7
ARM: 7809/1: perf: fix event validation for software group leaders
...
Backported from http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c95eb3184ea1a3a2551df57190c81da695e2144b&context=40&ignorews=0&dt=0
It is possible to construct an event group with a software event as a
group leader and then subsequently add a hardware event to the group.
This results in the event group being validated by adding all members
of the group to a fake PMU and attempting to allocate each event on
their respective PMU.
Unfortunately, for software events wthout a corresponding arm_pmu, this
results in a kernel crash attempting to dereference the ->get_event_idx
function pointer.
This patch fixes the problem by checking explicitly for software events
and ignoring those in event validation (since they can always be
scheduled).
10 years ago
edrikk
ca2becf244
net/netfilter/ipvs: Eliminate memory leak
...
Cherry Picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=b2aff96327545aa5ceb25e3116be69c8b06de703&context=10&ignorews=0&dt=0
_ip_vs_service_get and __ip_vs_svc_fwm_get increment a reference count, so that reference count should be decremented before leaving the function in an error case.
10 years ago
edrikk
e5b0bc52ba
mtd: phram: fix memory leak
...
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=f17f12ce9dd6ec0a8e1f415ecdbaebfce0207464
Commit 4f678a58 (mtd: fix memory leaks in phram_setup) missed two cases where the memory allocated for name would be leaked. This commit frees the memory when register_device() fails and on unregister_devices().
10 years ago
edrikk
bd668a943f
netfilter: nf_conntrack: fix sysctl memory leak
...
Cherry Picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=fe8f661f2c2bb058822f13f6f232e121bde1338f
Message in log because sysctl table was not empty at netns exit
WARNING: at net/sysctl_net.c:84 sysctl_net_exit+0x2a/0x2c()
Instrumenting showed that the nf_conntrack_timestamp was the entry
that was being created but not cleared.
10 years ago
edrikk
490e0f66d1
fix cdev leak on O_PATH final fput()
...
__fput doesn't need a cdev_put() for O_PATH handles.
Cherry picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=60ed8cf78f886753e454b671841c0a3a0e55e915
10 years ago
edrikk
7b271c1c66
drivers/misc/atmel_tclib.c: fix a memory leak
...
Cherry Picked: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=a844b43ca078d7dd8f0cd13c6f030ec62a996975
request_mem_region() will call kzalloc to allocate memory for struct
resource. release_resource() unregisters the resource but does not free
the allocated memory, thus use release_mem_region() instead to fix the
memory leak.
10 years ago
edrikk
0a141073f8
proc: disable mem_write after exec
...
Cherry Picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=26947f8c8f9598209001cdcd31bb2162a2e54691
This change makes mem_write() observe the same constraints as mem_read(). This
is particularly important for mem_write as an accidental leak of the fd across
an exec could result in arbitrary modification of the target process' memory.
IOW, /proc/pid/mem is implicitly close-on-exec.
10 years ago
edrikk
f3af29636e
proc: protect mm start_code/end_code in /proc/pid/stat
...
Cherry picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=5883f57ca0008ffc93e09cbb9847a1928e50c6f3
While mm->start_stack was protected from cross-uid viewing (commit
f83ce3e6b02d5 ("proc: avoid information leaks to non-privileged
processes")), the start_code and end_code values were not. This would
allow the text location of a PIE binary to leak, defeating ASLR.
Addresses CVE-2011-0726
10 years ago
edrikk
6e43135ef3
char/tpm: Fix unitialized usage of data buffer
...
This patch fixes information leakage to the userspace by initializing
the data buffer to zero.
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=1309d7afbed112f0e8e90be9af975550caa0076b
10 years ago
edrikk
0bec91ed18
genirq: Fix cpumask leak in __setup_irq()
...
The allocated cpumask should be freed in __setup_irq().
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=4f5058c3b71ed5930bb2b478c4d5dbc799dd9ad1
10 years ago
edrikk
f2b7a146ab
netfilter_dscp_ipv6_mangle.patch from openwrt, which is backport upstream Kernel commit 1ed2f73d90fb49bcf5704aee7e9084adb882bfc5 (netfilter: IPv6: fix DSCP mangle code).
...
netfilter: IPv6: fix DSCP mangle code
The mask indicates the bits one wants to zero out, so it needs to be inverted before applying to the original TOS field.
Signed-off-by: Fernando Luis Vazquez Cao <fernando@oss.ntt.co.jp>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10 years ago
Shibby
5a24a5b60f
switch4g: lot of improvements
10 years ago
Shibby
6b81c60bc5
4G: backport cdc_ether module from Oleg
10 years ago
tsynik
c4090b397f
long boot fix
10 years ago
Shibby
cc4b317011
Merged in ksanderson/tomato-arm/layer7 (pull request #19 )
...
Conflicts:
release/src-rt-6.x.4708/linux/linux-2.6.36/net/netfilter/Kconfig
10 years ago
pl_shibby
5ca50da9b0
Merged in edrikk/tomato-arm-minor-asp-fix (pull request #18 )
...
www fixes (asp, css)
10 years ago