summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* nodogsplash: explicit file copyopenwrt-22.03Moritz Warning2023-10-231-6/+10
| | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de> (cherry picked from commit 2a725e7cbec6645f55d6104dee17b673b142cba8)
* nodogsplash: update to version 5.0.2Moritz Warning2023-10-235-7/+388
| | | | | | | | Fix a buffer overflow in case the query string is too long. Signed-off-by: Moritz Warning <moritzwarning@web.de> (cherry picked from commit fe1c67fb3d83089210d5b45bc35eb7d7393aeb1f)
* bmx6: drop packageJosef Schlehofer2023-09-294-309/+0
| | | | | | | | | | | | | | This package is no longer maintained by us or by upstream developers. The last version in the GitHub repository is from 2020 with no activity so far. We are using version 0.1-alpha. Because LuCI app is vulnerable to several CVEs and DependencyBot still sends emails about it, let's drop it. If anyone wants, they can use bmx7. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 9fb9d9343ea27d6dbb5008ece10c0c843dd2c781)
* luci-app-bmx6: drop this because of security vulnerabilitiesJosef Schlehofer2023-09-2933-2771/+0
| | | | | | | | | | | | | | | DependencyBot, which are using is sending us emails about these CVEs: CVE-2012-6708 CVE-2020-23064 CVE-2019-11358 This was reported to maintainer in April 2023, but no one stepped it to fix that, so let's drop this. Replacement could be luci-app-bmx7. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit c2124dd2ad542f526ee84e1984f03dd2f5b34dfe)
* opennds: update to version 10.1.3Rob White2023-09-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 Description: opennds (10.1.3) Security Advisory. This version contains fixes for multiple potential security vulnerabilities Credit - Stanislav Dashevskyi - standash.github.io [standash] It also contains some minor bug fixes * Fix - Buffer overflow causing segfault - CVE-2023-41101 [bluewavenet] * Fix - Memory leaks due to passing allocated buffer into safe_asprintf() - CVE-2023-41102 [bluewavenet] * Fix - Remove deprecated preauth option [bluewavenet] * Fix - missing free in show_preauth_page if MHD does not respond [bluewavenet] * Fix - more safe_asprintf memory leaks [bluewavenet] * Fix - missing free for mark_auth [bluewavenet] * Fix - memory leak after starting authmon daemon [bluewavenet] * Fix - memory leak in encode_and_redirect_to_splashpage [bluewavenet] * Fix - Community themespec, voucher css and logo image [bluewavenet] * Fix - ThemeSpec, path to logo in page footer [bluewavenet] * Fix - ensure gatewayurl is urldecoded to fix broken css and images in themespec [bluewavenet] * Add - set default fas remote fqdn to disabled [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 88c98c910acccab694b3afb6d36d70ca429118a6)
* CI: Sort build architectures in alphabetical orderJeffery To2023-09-011-12/+12
| | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 06b7d9b665d6299571a305b49e1bc159290d16cd)
* CI: add concurrency rules to skip redundant buildChristian Marangi2023-09-011-0/+4
| | | | | | | | Add concurrency rules to skip redundant build to skip extra build test on force push on pull request. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 5aa683be13c9b1f4a2bdb09ec0481b7cd546dd77)
* CI: Do package run-tests only if target packages were builtJeffery To2023-09-011-3/+14
| | | | | | | | | | | Currently, the package run-test phase will fail for PRs that only add/update host-only packages, as no target packages (*.ipk) are built. This checks if any target packages are built before attempting the run-tests. Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 299ee2b1cfd20a7c9d31e8024b4333e8da035af3)
* CI: Run "apt-get update" before installing signify-openbsdJeffery To2023-09-011-0/+1
| | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 89cf0d561977c028b45e5ab6db1b34dab27b9a11)
* CI: Enable runtime_test for mips_24kcVan Waholtz2023-09-011-2/+4
| | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com> (cherry picked from commit 28d204148a7cad8f1ee903bf6af4dae234b28119)
* cache-domains: added pre-test.sh CI stepGerard Ryan2023-09-011-2/+16
| | | | | | | | | | | | | Some packages variants have conflicting dependencies with the base packages and the CI test will fail to install before anything can be done by the packages to setup the system for install. This change adds a pre-test.sh that runs before the install so things like the default libustream variant can be swapped out as shown in the updated cache-domains. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com> (cherry picked from commit 61997c86b01c83320a2cbb1b490941a8af741253)
* CI: Add local feed for CI-built packagesJeffery To2023-09-012-5/+25
| | | | | | | | | | | | | | | | | | | | | | | | To test each package, the CI-built target package (ipk) file is installed, but currently the target package's dependencies are installed from the standard opkg feeds. There are cases when the CI-built target packages should be installed/tested together: * If a pull request contains several new packages that depend on each other, the test step will fail as the new dependencies cannot be found in the current packages feed. * If a pull request upgrades a source package that builds several target packages that depend on each other, the test step may fail due to the version/ABI mismatch between a newer target package and the older dependencies installed from the packages feed. This sets up a local feed for the CI-built packages so that dependencies are also installed from the same set of packages. Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit f818fe716ea126dd8240c9600f92e5b412d59060)
* CI: Add --autoremove, ignore removal errorsJeffery To2023-09-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 836b4e1c734f9705bfd8db0da0c04214c2647932 added --force-removal-of-dependent-packages but it does not do what the commit message says it does. When package A depends on package B (package B is a dependency of package A; package A is a dependent of package B), trying to remove package B while package A is installed will result in an error. Adding --force-removal-of-dependent-packages in this case will cause the removal of package B and package A (package B's dependent). But in the case of the CI testing step, it is package A that is being installed and removed. Removing package A with --force-removal-of-dependent-packages will not cause package B (package A's dependency) to be removed. This adds --autoremove to actually remove the package's dependencies. This also ignores any errors returned by opkg remove as --autoremove can sometimes falsely return an error[1]. [1]: https://github.com/openwrt/openwrt/issues/12241 Fixes: 836b4e1c734f ("github-ci: add --force-removal-of-dependent-packages") Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 53a53b8ee38d79083ff59e656798948f9b0a7e68)
* CI: update build architecturesTianling Shen2023-09-011-5/+1
| | | | | | | | | | | Removed arc_archs - archs38 was marked as source-only [1]. Renamed powerpc_8540 to powerpc_8548 [2]. 1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351 2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 7928f7d3990c7bae097224d90c28590a45405686)
* ci: only comment AUTORELEASE deprecation if existsPaul Spooren2023-09-011-2/+7
| | | | | | | If it doesn't exists, don't confuse the contributors. Signed-off-by: Paul Spooren <mail@aparcar.org> (cherry picked from commit b3b01af314ec675b0b2ee0497a7b9c90d2e9e631)
* CI: deprecate $(AUTORELEASE) via commentsPaul Spooren2023-09-011-0/+86
| | | | | | | | | | | | | | Autorelease causes some issues like heavy bandwidth usage as well as non-deterministic package releases whenever someone doesn't use the full git log. With this comment all modified packages are checked and if they use the autorelease feature, kindly comment to the user to change that. Signed-off-by: Paul Spooren <paul.spooren@rhebo.com> [ move check to separate workflow to handle ci limitation ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit c993ee8a893c04baef602574ca9353ce4c72e11e)
* ci: change default packagesJosef Schlehofer2023-09-011-1/+1
| | | | | | | | | | | Since this file was taken from packages repository, it tries to compile packages from that repository as fallback if changes are not detected. Let's change these packages to some, which are present in this repository, so they will be compiled as test. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit c9a8f2d03226191111b95890302cb7e1ff18c11e)
* github-ci: error on any shell errorsAlois Klink2023-09-011-1/+5
| | | | | | | | | | | | | Enable `errexit` and `nounset` [POSIX shell options][1] in `.github/workflows/entrypoint.sh` so that the script fails if any command within the script fails. [1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set Reported-by: Marius Dinu <m95d+git@psihoexpert.ro> Fixes: https://github.com/openwrt/packages/issues/19953 Signed-off-by: Alois Klink <alois@aloisklink.com> (cherry picked from commit 03ca0722f73c8121521ff59ca9a4ad6358b6a262)
* ci: update github actions to v3Christian Marangi2023-09-012-4/+4
| | | | | | | | | Update checkout and upload-artifact action to v3 to mute nodejs deprecation warning. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 52570d4242822e3db678f5484c2ca3e72f485d52) (cherry picked from commit 5d87b956975034d74a40385646a7d358722c0eb3)
* ci: Use openwrt/gh-action-sdk@v5Jeffery To2023-09-011-1/+1
| | | | | | | | The previous build errors with v5 have been fixed. This version builds packages as a normal user instead of as root. Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit e2d72c57756751230d61bd7a738a35dad912e644)
* Merge pull request #1017 from ecsv/batadv-for-22.03Simon Wunderlich2023-08-231-0/+35
|\ | | | | openwrt-22.03: batman-adv: Fix lock assert after fragmentation change
| * batman-adv: Fix lock assert after fragmentation changeSven Eckelmann2023-08-221-0/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The automatic recalculation of the maximum allowed MTU is usually triggered by code sections which are already rtnl lock protected by callers outside of batman-adv. But when the fragmentation setting is changed via batman-adv's own batadv genl family, then the rtnl lock is not yet taken. But dev_set_mtu requires that the caller holds the rtnl lock because it uses netdevice notifiers. And this code will then fail the check for this lock: RTNL: assertion failed at net/core/dev.c (1953) Fixes: 12577be7ed67 ("batman-adv: Merge bugfixes from 2023.2") Signed-off-by: Sven Eckelmann <sven@narfation.org>
* | Merge pull request #1014 from ecsv/batadv-for-22.03Simon Wunderlich2023-08-187-0/+410
|\| | | | | openwrt-22.03: batman-adv: Merge bugfixes from 2023.2
| * batman-adv: Merge bugfixes from 2023.2Sven Eckelmann2023-08-187-0/+410
| | | | | | | | | | | | | | | | | | | | | | | | * Broken sync while rescheduling delayed work * compat: Use native kstrtox.h for 5.10.185 * Do not get eth header before batadv_check_management_packet * Trigger events for auto adjusted MTU * Don't increase MTU when set by user * Fix TT global entry leak when client roamed back * Fix batadv_v_ogm_aggr_send memory leak Signed-off-by: Sven Eckelmann <sven@narfation.org>
* | mesh11sd: update to version 2.0.0Rob White2023-08-091-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: All Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64, on 21.02, 22.03 and snapshot. Description: mesh11sd (2.0.0) This release contains new functionality. Autonomous portal mode is introduced. This simplifies the rollout of meshnodes allowing a common configuration to be used on all nodes. Remote administration is introduced, allowing files to be copied and terminal sessions to be opened on established meshnodes, identifying remote nodes by mac address. * Add - Update config file [bluewavenet] * Add - implementation of remote copy [bluewavenet] * Add - implementation of remote connect [bluewavenet] * Add - Autonomous portal mode [bluewavenet] -- Rob White dot@blue-wave.net Mon, 31 Jul 2023 16:59:52 +0000 Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 5beb3be9b86ddd1e859dd9ad38d1fb9a1a32dc65)
* | nodogsplash: remove opennds from conflictsMoritz Warning2023-08-051-2/+1
| | | | | | | | | | | | | | | | OpenNDS lists nodogsplash a conflict as well. This causes a circular reference that is not allowed. Signed-off-by: Moritz Warning <moritzwarning@web.de> (cherry picked from commit 967dde509b90c2166773ec672b2e8e8b81b6288a)
* | nodogsplash: update to 5.0.1Moritz Warning2023-08-051-8/+6
| | | | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de> (cherry picked from commit 91e07907fafa7ca442c3710799352782f4f0201a)
* | opennds: Release v10.1.2Rob White2023-08-041-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 Description: opennds (10.1.2) Security Advisory. This version contains fixes for multiple potential security vulnerabilities Credit - Stanislav Dashevskyi - standash.github.io [standash] It also contains some minor bug fixes * Fix - Generate unique sha256 faskey if not set in config - CVE-2023-38324 [bluewavenet] * Fix - NULL pointer dereference if user_agent is NULL - CVE-2023-38320, CVE-2023-38322 [bluewavenet] * Fix - NULL pointer dereference if authdir is called with an incomplete or missing query string - CVE-2023-38313, CVE-2023-38314, CVE-2023-38315 [bluewavenet] * Fix - remove deprecated and non-functioning unescape callback - CVE-2023-38316 [bluewavenet] * Fix - prevent potential recursive dependency and detect if conflicting package is installed [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 3eb9aa30566eb34608e6aacc55157dad46550a6a)
* | opennds: Release v10.1.1Rob White2023-08-041-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 opennds (10.1.1) * This version contains some minor bug fixes and documentation updates * Fix - send only contents of buffer, not entire buffer when serving page511 [bluewavenet] * Fix - Set fas_remotefqdn to gw_fqdn when overriding FAS settings [bluewavenet] * Fix - use absolute path for css and images in ThemeSpec [bluewavenet] * Fix - revert to old option names without underscores [bluewavenet] * Fix - FAS URL when fas_remotefqdn is not set [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 26f5f0f812c73a3d26f9643fbd3da7f56f5e9a8a)
* | opennds: Release v10.1.0Rob White2023-06-301-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 opennds (10.1.0) This version is a major upgrade including full migration to nftables and native uci configuration support even for generic Linux distributions. It also includes a significant refactoring of inbuilt memory management, improving long term reliability, fixing several memory leaks, buffer overflows and several edge case crashes. * Add - support for included custom binauth script [bluewavenet] * Add - emit a useful stderr message if auth_restore fails [bluewavenet] * Add - procd respawn threshold, respawn timeout and respawn retry parameters [bluewavenet] * Add - user friendly commandline message if already running [bluewavenet] * Fix - Enabling of Data volume quotas [bluewavenet] * Fix - use get_list_from_config instead of get_option_from_config [bluewavenet] * Fix - compiler warning - unused variable [bluewavenet] * Fix - remove redundant function call ipsetconf [bluewavenet] * Fix - walledgarden for both nftset and ipset on OpenWrt [bluewavenet] * Add - more meaningful output if attempt is made to restart when already running [bluewavenet] * Fix - resolve gatewayfqdn after startup [bluewavenet] * Fix - Choose forground or background running according to commandline arguments [bluewavenet] * Fix - remove superfluous debug message [bluewavenet] * Fix - replace sleep with procd_set_param term_timeout [bluewavenet] * Fix - make option enabled default to enabled [bluewavenet] * Fix - report authmon pid instead of opennds pid from authmon [bluewavenet] * Fix - ensure correct pid obtained for opennds [bluewavenet] * Add - StartLimitIntervalSec and StartLimitBurst to systemd service script [bluewavenet] * Fix - refactor remote downloads [bluewavenet] * Fix - suppress error message on ipset test failure [bluewavenet] * Fix - send non-syslog debug information to stdout by default [bluewavenet] * Add - C function to check heartbeat watchdog [bluewavenet] * Fix - Update generic Linux makefile [bluewavenet] * Fix - remove redundant ruleset struct definition [bluewavenet] * Fix - potential buffer overflow issue during config stage [bluewavenet] * Fix - remove unnecessary calls to free() in page 404 processing [bluewavenet] * Fix - remove redundant code from fw_iptables [bluewavenet] * Add - updates to binauth_log script [bluewavenet] * Add - updates for service startup, systemd and procd [bluewavenet] * Add - refactoring of commandline processing [bluewavenet] * Fix - remove debugging message [bluewavenet] * Fix - typo in client ruleset [bluewavenet] * Add - Refactor to use uci config directly even for Generic Linux [bluewavenet] * Add - Parsing for multi item lists with spaces in items [bluewavenet] * Add - use common library call get_option_fom_config [bluewavenet] * Add - support for direct use of uci format config file - string and integer parameters [bluewavenet] * Fix - Remove deprecated syslog_facility config setting [bluewavenet] * Add - thread busy message to ndsctl [bluewavenet] * Add - refactor configure_log_location [bluewavenet] * Fix - suppress LOG_NOTICE message when getting mac of interface [bluewavenet] * Fix - ndsctl error message [bluewavenet] * Fix - get_client_interface for levels 2 and 3 [bluewavenet] * Add - use common library write_log function [bluewavenet] * Add - Refactor memory management [bluewavenet] * Fix - fix and refactor upload rate limiting rules [bluewavenet] * Fix - Change a debug message from err to info [bluewavenet] * Add - refine common buffer sizes [bluewavenet] * Add - use initialised heap memory for redirect_to_splashpage [bluewavenet] * Add - user message to themespec [bluewavenet] * Add - auth_restore support ie reauth clients after a restart by default. [bluewavenet] * Add - Library call to preemptively re-auth clients after a restart or crash [bluewavenet] * Add - BinAuth, write an authenticated clients list [bluewavenet] * Add - library call "check_heartbeat" [bluewavenet] * Fix - Tidy up redundant code [bluewavenet] * Fix - change warning message to debug message when iw not installed [bluewavenet] * Add - library call to log to syslog [bluewavenet] * Fix - use initialised heap memory for client list entries [bluewavenet] * Fix - ignore legacy ipset firewall rule [bluewavenet] * Fix - refactor memory management for MHD calls - use heap memory for buffers etc [bluewavenet] * Fix - missing free causing memory leak [bluewavenet] * Fix - predefine and initialise buffer for send_redirect_temp [bluewavenet] * Add - support protocol "all" in firewall ruleset [bluewavenet] * Add - pre-allocation of initialised buffers [bluewavenet] * Fix - prevent buffer overrun on removing client [bluewavenet] * Add - update MHD connection timeout and connection limit [bluewavenet] * Add - chain ndsDLR for dynamic client download rate limiting rules [bluewavenet] * Add - Use Internal Polling Thread / Thread Per Connection in MHD [bluewavenet] * Add - some new default values [bluewavenet] * Fix - remove some redundant code and fix some compiler warnings [bluewavenet] * Fix - remove redundant library command string [bluewavenet] * Fix - Tidy up redundant iptables code [bluewavenet] * Add - convert trusted client support to nftables [bluewavenet] * Add - refer to nftables [bluewavenet] * Add - move code for generating authentication mark string to initial setup [bluewavenet] * Add - full nftset support with ipset import where required [bluewavenet] * Add - nftset support library calls [bluewavenet] * Add - ipset_to_nftset library call [bluewavenet] * Add - support for nftables version of append_ruleset and nftables_compile [bluewavenet] * Fix - buffer overflow in page_511 generation [bluewavenet] * Add - more nftables migration including rate quotas [bluewavenet] * Fix - change GatewayInterface to lower case [bluewavenet] * Add - upload and download limiting client flags for future use [bluewavenet] * add - lib calls "pad_string" and "replace_client_rule" [bluewavenet] * Add - further nftables migration [bluewavenet] * Fix - correctly parse options from legacy conf file [bluewavenet] * Fix - some compiler warnings and set min iptables version [bluewavenet] * Add - Generic Linux configure walledgarden [bluewavenet] * Add - Implementation of nftsets for walledgarden [bluewavenet] * Add - migration to nftables, next phase. [bluewavenet] * Add - library function delete_client_rule [bluewavenet] * Fix - remove duplicate definition [bluewavenet] * Add - First stage migration to nftables [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 7b1911020b335492ecfd02f39fb0a4f1911b23db)
* | bird2: bump to version 2.13.1Bradford Zhang2023-06-301-2/+2
| | | | | | | | | | Signed-off-by: Bradford Zhang <zyc@zyc.name> (cherry picked from commit d98b9b50521cbef56a92821ba67ae1cef2b2e6d5)
* | bird2: bump to version 2.13Bradford Zhang2023-05-201-2/+2
| | | | | | | | | | Signed-off-by: Bradford Zhang <zyc@zyc.name> (cherry picked from commit 6410411b123d57a07546c0cb056dca86e94e10dc)
* | Merge pull request #957 from rogerpueyo/openwrt-22.03-backport-bird1-fixesJosef Schlehofer2023-03-097-226/+192
|\ \ | | | | | | Backport bird1-openwrt fixes to 22.03
| * | bird1: fix "Form token mismatch" errors in luci-app-bird1-ipv{4,6}Roger Pueyo Centelles2023-03-083-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The "Filters", "Functions" and "Status" sections of the web interfaces for both Bird4 and Bird6 threw the following error upon performing any action: Form token mismatch The submitted security token is invalid or already expired! Changing their entry types from "cbi" to "form" fixes them. Fixes #922. Signed-off-by: Roger Pueyo Centelles <roger.pueyo@guifi.net> (cherry picked from commit c37fbab8f5e3af0843cf1bef5aa199a0c0db245b)
| * | bird1: rename get_bool() to get_a_bool() in bird{4,6}-lib.shRoger Pueyo Centelles2023-03-083-15/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch renames the get_bool() function, implemented in the bird4-lib.sh and bird6-lib.sh files (respectively, for the IPv4 and the IPv6 versions of the package), as well as all the calls to it. This way, we avoid a function name collision with the one provided by file /lib/functions.sh, which is slightly different and caused an out-of-memory error when parsing the bird4/bird6 UCI config files. Fixes #920. Signed-off-by: Roger Pueyo Centelles <roger.pueyo@guifi.net> (cherry picked from commit d32f93e0499164ac171228bbb6e8a5b17b8785fe)
| * | bird1-openwrt: fix Makefile issuesRoger Pueyo Centelles2023-03-081-34/+23
| | | | | | | | | | | | | | | | | | | | | | | | This commit replaces the deprecated licensing text with an SPDX license identifier, and removes tab indentations in the conffiles sections. Signed-off-by: Roger Pueyo Centelles <roger.pueyo@guifi.net> (cherry picked from commit 6697ca291f97438e937897d73acc46a29d7dc9f4)
| * | bird1-openwrt: use a single Makefile for IPv4 and IPv6 packagesRoger Pueyo Centelles2023-03-083-206/+177
|/ / | | | | | | | | | | | | | | | | | | | | Having two Makefile files, respectively in the bird1-openwrt-ipv4 and bird1-ipv6-openwrt folders, made the CI tests fail at the time of building the packages, due to a compilation error. This patch merges both Makefile files into a single one. As a result, package compilation succeeds during the CI tests. Signed-off-by: Roger Pueyo Centelles <roger.pueyo@guifi.net> (cherry picked from commit 914c27aeb66b21c7510e376625e9ec386a56ee35)
* | bird2: bump to version 2.0.12Bradford Zhang2023-02-221-2/+2
| | | | | | | | | | Signed-off-by: Bradford Zhang <zyc@zyc.name> (cherry picked from commit 7d6f3c049226cae454b0a0f45c16dd170f5006e9)
* | babeld: remove AUTORELEASENick Hainke2023-02-131-1/+1
| | | | | | | | | | | | | | AUTOREMOVE is now deprecated. Signed-off-by: Nick Hainke <vincent@systemli.org> (cherry picked from commit 20e1b16a97ff7d152ea5f9ce34faf7503aba8e4a)
* | babeld: update to 1.12.2Nick Hainke2023-02-131-2/+2
| | | | | | | | | | | | | | | | Release announcement: https://alioth-lists.debian.net/pipermail/babel-users/2023-February/004038.html Signed-off-by: Nick Hainke <vincent@systemli.org> (cherry picked from commit bb65c3a18d509874b6b4c6bbb1ad779ae667c0ed)
* | opennds: Release v9.10.0Rob White2023-01-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03 opennds (9.10.0) * This version adds new functionality, and fixes some issues * Fix - unable to read client upload traffic volume on some versions of iptables-nft (generic Linux) [bluewavenet] * Fix - compatibility with bash shell on generic Linux [bluewavenet] * Fix - compiler warning, unused variable [bluewavenet] * Fix - silently continue if fw4 table is not found [bluewavenet] * Add - Start daemon earlier on boot [bluewavenet] * Fix - compatibility with legacy iptables packages [bluewavenet] * Add - call to delete nft chains [bluewavenet] * Fix - stop using legacy INPUT and FORWARD chains [bluewavenet] * Add - watchdog restart if openNDS nftables ruleset is missing [bluewavenet] * Add - automated rule setting/deleting for users_to_router [bluewavenet] * Add - Change fwhook to add users to router rule to fw4 on OpenWrt [bluewavenet] * Add - Set allow or passthrough mode for users_to_router rules [bluewavenet] * Fix - set fwhook default to disabled to prevent restart on hotplug event [bluewavenet] * Fix - fas-aes-https description comments [bluewavenet] * Fix - icon overspill on splash pages [bluewavenet] * Fix - missing config option in community script [bluewavenet] * Fix - urlencode handling of "$" character and add htmlentity encode/decode library call [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 18168b34682cd7cd159c151c248350bc6f5649ff)
* | bird2: bump to version 2.0.11Bradford Zhang2022-12-211-2/+2
| | | | | | | | Signed-off-by: Bradford Zhang <zyc@zyc.name>
* | opennds: Release v9.9.1Rob White2022-11-221-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03 opennds (9.9.1) * This version fixes some issues * Fix - minimalise deprecated legacy .conf file * Fix - Prevent rate limit refresh if rate limit is set to 0 [bluewavenet] * Fix - Mute some unneccessary debug messages [bluewavenet] * Fix - do not write unconfigured (null) parameters to client id file (cidfile) [bluewavenet] * Fix - Prevent error "Command process exited due to signal 13" when executing an external script [bluewavenet] * Fix - use WTERMSIG() return code for _execute_ret when execute fails [bluewavenet] * Fix - use correct response type for error 503 [bluewavenet] * Update Makefile description [bluewavenet] * Add - Community Local FAS install script [bluewavenet] * Update - Mention TCP port 80 requires AutonomousWG [afriza] Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 6c31b5bd1c5c27deff7bcb9393abd15f741606e8)
* | Merge pull request #918 from ecsv/batadv-for-22.03Simon Wunderlich2022-11-111-0/+43
|\| | | | | openwrt-22.03: batman-adv: Merge bugfixes from 2022.3
| * batman-adv: Merge bugfixes from 2022.3Sven Eckelmann2022-11-101-0/+43
| | | | | | | | | | | | * Fix hang up with small MTU hard-interface Signed-off-by: Sven Eckelmann <sven@narfation.org>
* | Merge pull request #913 from ecsv/batadv-for-22.03Simon Wunderlich2022-10-242-0/+16
|\| | | | | openwrt-22.03: alfred/batman-adv: Rebuild on CONFIG*_ALFRED_*/CONFIG_BATMAN_ADV_ changes
| * alfred: Rebuild on CONFIG*_ALFRED_* changesSven Eckelmann2022-10-231-0/+7
| | | | | | | | | | | | | | | | | | The buildsystem doesn't know that the Package/*/config kconfig symbols are related to the alfred package build. It is necessary to explicitly define it via PKG_CONFIG_DEPENDS. Fixes: f76074d42429 ("alfred: add alfred 2013.3.0 to feed") Signed-off-by: Sven Eckelmann <sven@narfation.org>
| * batman-adv: Rebuild on CONFIG_BATMAN_ADV_* changesSven Eckelmann2022-10-231-0/+9
| | | | | | | | | | | | | | | | | | The buildsystem doesn't know that the KernelPackage/*/config kconfig symbols are related to the batman-adv package build. It is necessary to explicitly define it via PKG_CONFIG_DEPENDS. Fixes: 522ce8dfdb7f ("batman-adv: rename folder name to match project & package name") Signed-off-by: Sven Eckelmann <sven@narfation.org>
* | opennds: Release v9.9.0Rob White2022-10-091-9/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03 opennds (9.9.0) * This version adds new functionality, and fixes some issues * Add - Community ThemeSpec to support legacy splash.html [bluewavenet] * Fix - ensure nat_traversal_poll_interval defaults to 10 seconds [bluewavenet] * Add - process send_to_fas_deauthed and send_to_fas_custom in fas-aes-https [bluewavenet] * Add - support for send_to_fas_deauthed library call in binauth_log.sh [bluewavenet] * Add - heartbeat file containing timestamp [bluewavenet] * Add - send_to_fas_deauthed and send_to_fas_custom library calls [bluewavenet] * Add - Save authmon daemon startup arguments for libopennds [bluewavenet] * Fix - potential divide by zero errors [bluewavenet] * Add - option nat_traversal_poll_interval [bluewavenet] * Add - Library calls for urlencode and urldecode[bluewavenet] * Fix - Don't download remotes if ThemeSpec not configured [bluewavenet] * Add - Error report in syslog if dhcp database is not found [bluewavenet] * Add - library calls, deauth and daemon_deauth [bluewavenet] * Fix - change WTERMSIG log from WARNING to NOTICE [bluewavenet] * Add - Set minimum bucket size to 5 regardless of configured bucket ratio [bluewavenet] * Fix - safe_vasprint return value [bluewavenet] * Add - test if safe_calloc failed and serve error 503 [bluewavenet] * Add - use calloc instead of malloc[bluewavenet] * fix - safe functions to return error rather than exit [bluewavenet] * Add - b64decode custom string received by binauth script [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 6cccf1fd651db1826f41044102531596ad73dfbe)
* | mesh11sd: Release v1.2.0Rob White2022-08-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Rob White rob@blue-wave.net Compile tested: All Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64, on 21.02, 22.03 and snapshot. Description: * This version adds new functionality. * Update README.md * Add - Traffic volume, Peers and stations to status output [bluewavenet] * Add - limit up-checks to mesh interfaces only [bluewavenet] -- Rob White <dot@blue-wave.net> Mon, 08 Aug 2022 13:40:31 +0000 Signed-off-by: Rob White <rob@blue-wave.net> (cherry picked from commit 290ed82bd8b8b2d4153721aa073456d5089da73b)
generated by cgit (git 2.46.0) at 2026-10-12 00:21:55 +0000