Commit Graph

38 Commits

Author SHA1 Message Date
Alexander Couzens cb5ddd5168 Merge remote-tracking branch 'upstream_openwrt/master'
* openssl update
* hostapd: fix remote denial of service vulnerability in WMM action frame parsing
* kernel: remove the netfilter optimization that skips the filter table, it has caused too many issues
* ath9k: fix a beacon enable handling bug
* minor bugfixes and board backports
2015-07-19 19:59:25 +02:00
nbd 179bab8b17 hostapd: fix remote denial of service vulnerability in WMM action frame parsing
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r45619

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@45620 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-05-06 09:47:05 +00:00
Alexander Couzens 1c00a18a38 package/lldp: add eth0 to listening interfaces 2015-03-17 13:21:56 +01:00
nbd e0b8c83ec8 samba36: update to 3.6.25, fixes remote code execution bug (CVE-2015-0240)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r44515

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44516 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-24 07:24:29 +00:00
jow 4d84b8624b BB: openvpn: bump PKG_REVISION and copyright year
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43859

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43861 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-06 12:43:44 +00:00
nbd c2a8bebec3 openvpn: backport an upstream fix for a regression in using --cipher none (fixes #18676)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43823

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43824 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-04 12:03:51 +00:00
nbd 678b8b53a3 openvpn: update to 2.3.6, fixes CVE-2014-8104
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43482

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43483 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-01 19:50:45 +00:00
jow 071e09e698 BB: uhttpd: fix HTTP incompatibilities in file handler
* Fixes sending an extraneous message body for 204 and 304 resoponses which
   breaks Chrome in keep-alive mode.

 * Adds mimetypes for JSON and JSONP.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43078

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43082 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:09:09 +00:00
cyrus 249857af0e hostapd: CVE-2014-3686 fixes
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42943 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-17 06:16:07 +00:00
nbd 059675c34f hostapd: merge an upstream patch for pmksa cache
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42762

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42763 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-05 10:39:52 +00:00
cyrus b03d43d551 odhcpd: fix segfault when parsing domain options in UCI
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42664 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-25 11:54:08 +00:00
blogic f3c7b78225 ppp: update to version 2.4.7
This fixes: CVE-2014-3158 and some other bugs.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Backport of r42525

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42613 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-18 15:24:22 +00:00
blogic 445be98788 mdns: update to latest git HEAD
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42593 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-17 11:01:26 +00:00
blogic 5d7d895845 hostapd: do not remove foreign wpa_supplicant sockets
https://dev.openwrt.org/ticket/17886

Signed-off-by: John Crispin <blogic@openwrt.org>

Backport of r42586

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42591 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-17 11:01:23 +00:00
nbd cebcd32fe8 hostapd: remove bogus default setting for wps_pin (#17873)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42553

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42554 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-15 16:09:36 +00:00
blogic 67cfa7ee6e dnsmasq: Make the --dhcp-host logic easier to understand
Use an if/else statement to cover the two different syntaxes.  Add
comments explaining what the end results should look like.

This patch should not change the script's output.

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>

Backport of r42320

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42390 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:22:08 +00:00
blogic 41ed6f55fb dnsmasq: Fix hosts file format when MAC address is not specified
An entry like this in /etc/config/dhcp:

    config 'host'
        option 'name' 'pc2'
        option 'ip' '192.168.100.56'
        option 'dns' '1'

results in a /tmp/hosts/dhcp entry that looks like this:

    192.168.100.56 .lan

Obviously it should say "pc2.lan".

This happens because $name is set to "" in order to support the MAC-less
syntax: "--dhcp-host=lap,192.168.0.199".  Fix this by reordering the
operations.  Also, refuse to add a DNS entry if the hostname or IP is
missing.

Fixes #17683

Reported-by: Kostas Papadopoulos <kpapad75@travelguide.gr>
Signed-off-by: Kevin Cernekee <cernekee@gmail.com>

Backport of r42319

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42389 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:22:06 +00:00
blogic abd77939b4 dnsmasq: Create rDNS records for LuCI "Hostnames"
LuCI creates "domain" UCI config sections, which the dnsmasq init file
then, currently, translates into "address" config lines. This is not
the correct usage of "address" (see r36943), and also causes rDNS
records to not be created. This patches dnsmasq.init to utilize the
additional hosts file introduced in r40799 for such domain names,
resolving both issues.

Signed-off-by: Tyler Fenby <tylerf@securecominc.com>

Backport of r42318

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42388 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:22:05 +00:00
blogic cb8f6fa0b4 package/*: remove useless explicit set of function returncode
somebody started to set a function returncode in the validation
stuff and everybody copies it, e.g.

myfunction()
{
	fire_command

	return $?
}

a function automatically returns with the last returncode,
so we can safely remove the command 'return $?'. reference:

http://tldp.org/LDP/abs/html/exit-status.html
"The last command executed in the function or script determines the exit status."

Signed-off-by: Bastian Bittorf <bittorf@bluebottle.com>

Backport of r42278

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42379 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:21:54 +00:00
blogic 64098682a1 ppp: enable IPv6CP by default
Signed-off-by: Steven Barth <steven@midlink.org>

Backport of r42158

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42355 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:21:11 +00:00
blogic 4eebf6dfc4 hostapd: fix some whitespaces
Signed-off-by: Luka Perkov <luka@openwrt.org>

Backport of r42111

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42351 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-01 13:21:04 +00:00
jow dc422c5293 BB: uhttpd: do not configure TLS parameters if libustream-ssl is not present
A quite frequent problem after sysupgrading from an older, SSL enabled build
is that ustream-ssl is not installed so uhttpd fails to come up again due to
https listening directives in the preserved configuration.

Skip key/cert and ssl listen options when libustream-ssl.so is not present.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42284

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42286 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-25 12:46:35 +00:00
cyrus fef411a8e3 odhcpd: fix static lease behavior with dhcpv4
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42271 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-24 08:13:42 +00:00
jogo b5cd5061ce BB: dropbear: restore performance by disabling mips16
Disable MIPS16 to prevent it negatively affecting performance.
Observed was a increase of connection delay from ~6 to ~11 seconds
and a reduction of scp speed from 1.1MB/s to 710kB/s on brcm63xx.

Fixes #15209.

Backport of r42250.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42255 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-21 18:28:09 +00:00
cyrus c15b063267 dnsmasq: fix a race condition possibly leading to lockup
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42226 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-20 09:53:29 +00:00
cyrus c7dc71aa9f odhcpd: bump for bugfixes
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42219 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-19 06:00:09 +00:00
cyrus 6566ae535e dnsmasq: respect option dhcpv4 disabled in dhcp-config
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42218 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-19 06:00:07 +00:00
cyrus 7a828618dc odhcpd: multiple DHCPv4 improvements (thx Christian Mehlis)
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42154 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-12 13:30:38 +00:00
cyrus 9d93edf44c odhcpd: avoid logspam in certain corner cases
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42068 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-08 08:46:26 +00:00
cyrus 8e48d605c9 odhcpd: write host-entries for all leased IPv6 addresses
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42066 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-08 05:31:38 +00:00
cyrus f7bc58852f odhcpd: update hostfile more often
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42043 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-07 18:08:10 +00:00
cyrus d91f530a55 odhcpd: correct incorrect commit-id in last commit
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42027 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-07 05:51:21 +00:00
cyrus 950a6a298f odhcpd: skip MSRs in RAs for prefixes with same size as DP
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42025 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-07 05:34:43 +00:00
blogic 4ecbb4d388 hostapd: revert bogus version that was added in r41872
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r41960

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@41982 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-03 11:15:59 +00:00
blogic 4e11e2d7a7 igmpproxy: add missing include
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r41957

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@41979 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-03 11:15:54 +00:00
blogic 17419452a6 ppp: fix a buffer overrun in the ms chap code
https://dev.openwrt.org/ticket/17296

Signed-off-by: John Crispin <blogic@openwrt.org>

Backport of r41882

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@41966 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-03 11:15:36 +00:00
blogic d4f181f2f2 hostapd: Reintroduce Full Dynamic VLAN support
This patch brings full dynamic vlan support to netifd that existed in hostapd.sh in Attitude Adjustment.

Signed-off-by: Joseph CG Walker <Joe@ChubbyPenguin.net>
[jow@openwrt.org: changed commit message, rebased on top of current hostapd.sh]
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r41872

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@41963 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-03 11:15:32 +00:00
nbd e345c9a277 create branch for barrier breaker (from trunk r41863)
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@41864 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-07-28 23:18:57 +00:00