Commit Graph

6431 Commits (2022.7)
 

Author SHA1 Message Date
Shibby 6d8cd8ce38 Merge branch 'shibby-arm' of https://bitbucket.org/pl_shibby/tomato-arm into shibby-arm 10 years ago
pl_shibby 70b70cf05a Merged in edrikk/memory-leak-cherry-picks-from-upstream-kernel (pull request #21)
Upstream Cherry Picks...  Mostly Memory Leaks, and some data leaks
10 years ago
Shibby eff97e2855 Merge branch 'shibby-arm' of https://bitbucket.org/pl_shibby/tomato-arm into shibby-arm 10 years ago
Shibby d49977f000 do not try load IMQ modules 10 years ago
Kyle Sanderson e99890dfaf NULL out Shared Libs protection in tc IPTables. 10 years ago
Kyle Sanderson 656c3be4a8 Fix prior broken QOS ingress QOS Classifications. 10 years ago
Kyle Sanderson 73a945bae0 Change hardcoded imq0 in ctnf to ifb0. 10 years ago
Kyle Sanderson da443bfc00 Fix IFB TC not forwarding traffic. 10 years ago
Kyle Sanderson d8e0a1fef7 Add Kernel support for Mirred and IPT for tc. 10 years ago
Kyle Sanderson 281b9d3f2b Add support for IFB instead of IMQ. 10 years ago
Kyle Sanderson deeeed0afc Build fix from previous revert-revert 72ddba5e88b4c92f7fee3ea1716eb53f18b7b988 10 years ago
Kyle Sanderson 93f3e92250 Enable Intermediate Functional Block device (part of the Linux Kernel since 2.6.20). 10 years ago
Kyle Sanderson db808a8008 Explicitly add (FQ_)Codel to Local config_base 10 years ago
Kyle Sanderson 5ed1447d12 Revert "revert Tiomo patch, do not use IMQ for now"
This reverts commit 5b1a1cf6b3.

Conflicts:
	release/src-rt-6.x.4708/router/nvram/defaults.c
	release/src-rt-6.x.4708/router/rc/qos.c
10 years ago
Kyle Sanderson be51a6a3ca Fix Layer7 RETURN being absolutely blank in iptables (QOS). 10 years ago
Kyle Sanderson a4f4019ebf Fix Length RETURN being absolutely blank in iptables (QOS). 10 years ago
Kyle Sanderson 7e418cd815 Fix DSCP RETURN being absolutely blank in iptables. 10 years ago
Kyle Sanderson a2fcb607a4 Sync Netfilter Modules with fixes from Kernel 4.0. 10 years ago
Kyle Sanderson 0c2e9c3555 Add FQ_Codel support to Tomato. 10 years ago
Kyle Sanderson e952598698 Backport FQ_Codel for Linux 2.6.36 10 years ago
Kyle Sanderson bb8bc967a8 Backport Codel to Linux 2.6.36 10 years ago
Kyle Sanderson 8a1bad8f05 Add Codel support to Tomato. 10 years ago
Shibby 542e7b5a9b switch4g: terminate connection process when 4G modem will be not detected 10 years ago
Shibby d5514b3cc6 mssl updates
Cherry-picked from RMerlin:
 - Remove obsolete ciphers such as RC4, and add support for ECDHE
 - Added option to disable ECDHE support for some broken versions of Safari
 - Allow the use of client+chain+CA certificates provided together in that order
 - Allow TLS 1.1 and 1.2 support
10 years ago
Shibby 9358ea1865 Add libcurl to PHP. Add curl binary to image 10 years ago
Shibby 3eaa7ebbac OpenSSL: update to 1.0.2a 10 years ago
Tvlz db71f6b36b QOS: Update HTTPS, Add QUIC Rules
http://www.linksysinfo.org/index.php?threads/qos-development-thread.31886/#post-255209
    http://www.linksysinfo.org/index.php?threads/qos-development-thread.31886/#post-255272
10 years ago
tvlz c917ab13ff Merged pl_shibby/tomato-arm into shibby-arm 10 years ago
edrikk a46db65c0f seq_printf can return -1 if there is an issue. However, in those cases it's still ok to return 0.
In fact, more recent versions of this function are also behaving this way (returning 0 regardless of seq_printf ).
10 years ago
edrikk 7d333755df params: Fix potential memory leak in add_sysfs_param()
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=63662139e519ce06090b2759cf4a1d291b9cc0e2&context=10&ignorews=0&dt=0


On allocation failure, it would fail to free the old attrs array which
was no longer referenced by anything (since it would free the old
module_param_attrs struct on the way out).

Comment the suspicious-looking krealloc() usage to explain why it *isn't*
actually buggy, despite looking like a classic realloc() usage bug.
10 years ago
edrikk 884470d5c1 nfsd: remove /proc/fs/nfs when create /proc/fs/nfs/exports error
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff7c4b3693cbc7e938f49ed89e2f649a33f03ed1

when create /proc/fs/nfs/exports error, we should remove /proc/fs/nfs,
if don't do it, it may cause Memory leak.
10 years ago
edrikk b3bfa12b87 kernel/auditfilter.c: tree and watch will memory leak when failure occurs
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373e0f3408fe671550d69d9a7965d8a49e988525


In audit_data_to_entry() when a failure occurs we must check and free
the tree and watch to avoid a memory leak.
10 years ago
edrikk a0b77135c5 fs/fscache/stats.c: fix memory leak
Backporting this memory leak fix to Tomato, as the explanation also holds true in 2.6.36:

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ec686c9239b4d472052a271c505d04dae84214cc


There is a kernel memory leak observed when the proc file
/proc/fs/fscache/stats is read.

The reason is that in fscache_stats_open, single_open is called and the
respective release function is not called during release.  Hence fix
with correct release function - single_release().

Addresses https://bugzilla.kernel.org/show_bug.cgi?id=57101
10 years ago
edrikk 764d1fb973 mac80211: disable u-APSD queues by default
Backporting from Kernel v3.  This seems very relevant to Tomato.

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa75ebc275b2a91b193654a177daf900ad6703f0&context=35&ignorews=0&dt=0


mac80211: disable u-APSD queues by default
Some APs experience problems when working with
U-APSD. Decreasing the probability of that
happening by using legacy mode for all ACs but VO
isn't enough.

Cisco 4410N originally forced us to enable VO by
default only because it treated non-VO ACs as
legacy.

However some APs (notably Netgear R7000) silently
reclassify packets to different ACs. Since u-APSD
ACs require trigger frames for frame retrieval
clients would never see some frames (e.g. ARP
responses) or would fetch them accidentally after
a long time.

It makes little sense to enable u-APSD queues by
default because it needs userspace applications to
be aware of it to actually take advantage of the
possible additional powersavings. Implicitly
depending on driver autotrigger frame support
doesn't make much sense.
10 years ago
edrikk 897b5e5fc7 ARM: 7809/1: perf: fix event validation for software group leaders
Backported from http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c95eb3184ea1a3a2551df57190c81da695e2144b&context=40&ignorews=0&dt=0


It is possible to construct an event group with a software event as a
group leader and then subsequently add a hardware event to the group.
This results in the event group being validated by adding all members
of the group to a fake PMU and attempting to allocate each event on
their respective PMU.

Unfortunately, for software events wthout a corresponding arm_pmu, this
results in a kernel crash attempting to dereference the ->get_event_idx
function pointer.

This patch fixes the problem by checking explicitly for software events
and ignoring those in event validation (since they can always be
scheduled).
10 years ago
edrikk ca2becf244 net/netfilter/ipvs: Eliminate memory leak
Cherry Picking: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=b2aff96327545aa5ceb25e3116be69c8b06de703&context=10&ignorews=0&dt=0

_ip_vs_service_get and __ip_vs_svc_fwm_get increment a reference count, so that reference count should be decremented before leaving the function in an error case.
10 years ago
edrikk e5b0bc52ba mtd: phram: fix memory leak
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=f17f12ce9dd6ec0a8e1f415ecdbaebfce0207464

Commit 4f678a58 (mtd: fix memory leaks in phram_setup) missed two cases where the memory allocated for name would be leaked. This commit frees the memory when register_device() fails and on unregister_devices().
10 years ago
edrikk bd668a943f netfilter: nf_conntrack: fix sysctl memory leak
Cherry Picking:  http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=fe8f661f2c2bb058822f13f6f232e121bde1338f

Message in log because sysctl table was not empty at netns exit
 WARNING: at net/sysctl_net.c:84 sysctl_net_exit+0x2a/0x2c()

Instrumenting showed that the nf_conntrack_timestamp was the entry
that was being created but not cleared.
10 years ago
edrikk 490e0f66d1 fix cdev leak on O_PATH final fput()
__fput doesn't need a cdev_put() for O_PATH handles.

Cherry picking:  http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=60ed8cf78f886753e454b671841c0a3a0e55e915
10 years ago
edrikk 7b271c1c66 drivers/misc/atmel_tclib.c: fix a memory leak
Cherry Picked:  http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=a844b43ca078d7dd8f0cd13c6f030ec62a996975

request_mem_region() will call kzalloc to allocate memory for struct
resource.  release_resource() unregisters the resource but does not free
the allocated memory, thus use release_mem_region() instead to fix the
memory leak.
10 years ago
edrikk 0a141073f8 proc: disable mem_write after exec
Cherry Picking:  http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=26947f8c8f9598209001cdcd31bb2162a2e54691

This change makes mem_write() observe the same constraints as mem_read().  This
is particularly important for mem_write as an accidental leak of the fd across
an exec could result in arbitrary modification of the target process' memory.
IOW, /proc/pid/mem is implicitly close-on-exec.
10 years ago
edrikk f3af29636e proc: protect mm start_code/end_code in /proc/pid/stat
Cherry picking:  http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=5883f57ca0008ffc93e09cbb9847a1928e50c6f3


While mm->start_stack was protected from cross-uid viewing (commit
f83ce3e6b02d5 ("proc: avoid information leaks to non-privileged
processes")), the start_code and end_code values were not.  This would
allow the text location of a PIE binary to leak, defeating ASLR.

Addresses CVE-2011-0726
10 years ago
edrikk 6e43135ef3 char/tpm: Fix unitialized usage of data buffer
This patch fixes information leakage to the userspace by initializing
the data buffer to zero.

http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=1309d7afbed112f0e8e90be9af975550caa0076b
10 years ago
edrikk 0bec91ed18 genirq: Fix cpumask leak in __setup_irq()
The allocated cpumask should be freed in __setup_irq().

http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=4f5058c3b71ed5930bb2b478c4d5dbc799dd9ad1
10 years ago
edrikk f2b7a146ab netfilter_dscp_ipv6_mangle.patch from openwrt, which is backport upstream Kernel commit 1ed2f73d90fb49bcf5704aee7e9084adb882bfc5 (netfilter: IPv6: fix DSCP mangle code).
netfilter: IPv6: fix DSCP mangle code

The mask indicates the bits one wants to zero out, so it needs to be inverted before applying to the original TOS field.

Signed-off-by: Fernando Luis Vazquez Cao <fernando@oss.ntt.co.jp>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10 years ago
Shibby 5a24a5b60f switch4g: lot of improvements 10 years ago
Shibby 6b81c60bc5 4G: backport cdc_ether module from Oleg 10 years ago
tsynik c4090b397f long boot fix 10 years ago
Shibby cc4b317011 Merged in ksanderson/tomato-arm/layer7 (pull request #19)
Conflicts:
	release/src-rt-6.x.4708/linux/linux-2.6.36/net/netfilter/Kconfig
10 years ago
pl_shibby 5ca50da9b0 Merged in edrikk/tomato-arm-minor-asp-fix (pull request #18)
www fixes (asp, css)
10 years ago