mirror of
https://github.com/breeze303/nss-packages.git
synced 2025-12-17 09:16:59 +00:00
2a9e76182d
qca-nss-ecm: avoid a memcpy overflow in ecm_db Reference: https://github.com/robimarko/nss-packages/pull/10/files qca-nss-ecm: fix nf_ct_net null pointer reference Fixed by xsm1997, massive thanks! It fixes a null pointer access which is introduced in previous qca-nss-ecm patches. Reference: https://github.com/bitthief/openwrt/issues/9
118 lines
3.4 KiB
Bash
118 lines
3.4 KiB
Bash
#!/bin/sh /etc/rc.common
|
|
#
|
|
# Copyright (c) 2014, 2019-2020 The Linux Foundation. All rights reserved.
|
|
#
|
|
# Permission to use, copy, modify, and/or distribute this software for any
|
|
# purpose with or without fee is hereby granted, provided that the above
|
|
# copyright notice and this permission notice appear in all copies.
|
|
#
|
|
# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
|
# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
# The shebang above has an extra space intentially to avoid having
|
|
# openwrt build scripts automatically enable this package starting
|
|
# at boot.
|
|
|
|
START=75
|
|
|
|
get_front_end_mode() {
|
|
config_load "ecm"
|
|
config_get front_end global acceleration_engine "auto"
|
|
|
|
case $front_end in
|
|
auto)
|
|
echo '0'
|
|
;;
|
|
nss)
|
|
echo '1'
|
|
;;
|
|
*)
|
|
echo 'uci_option_acceleration_engine is invalid'
|
|
esac
|
|
}
|
|
|
|
support_bridge() {
|
|
# NSS support bridge acceleration
|
|
[ -d /sys/kernel/debug/ecm/ecm_nss_ipv4 ] && [ -d /sys/kernel/debug/ecm/ecm_nss_ipv6 ] && return 0
|
|
}
|
|
|
|
load_ecm() {
|
|
[ -d /sys/module/ecm ] || {
|
|
insmod ecm front_end_selection=$(get_front_end_mode)
|
|
echo 1 > /sys/kernel/debug/ecm/ecm_classifier_default/accel_delay_pkts
|
|
}
|
|
|
|
support_bridge && {
|
|
sysctl -w net.bridge.bridge-nf-call-arptables=1
|
|
sysctl -w net.bridge.bridge-nf-call-iptables=1
|
|
sysctl -w net.bridge.bridge-nf-call-ip6tables=1
|
|
}
|
|
}
|
|
|
|
unload_ecm() {
|
|
sysctl -w net.bridge.bridge-nf-call-arptables=0
|
|
sysctl -w net.bridge.bridge-nf-call-iptables=0
|
|
sysctl -w net.bridge.bridge-nf-call-ip6tables=0
|
|
|
|
if [ -d /sys/module/ecm ]; then
|
|
#
|
|
# Stop ECM frontends
|
|
#
|
|
echo 1 > /sys/kernel/debug/ecm/front_end_ipv4_stop
|
|
echo 1 > /sys/kernel/debug/ecm/front_end_ipv6_stop
|
|
|
|
#
|
|
# Defunct the connections
|
|
#
|
|
echo 1 > /sys/kernel/debug/ecm/ecm_db/defunct_all
|
|
sleep 5
|
|
|
|
rmmod ecm
|
|
sleep 1
|
|
fi
|
|
}
|
|
|
|
start() {
|
|
load_ecm
|
|
|
|
# If the acceleration engine is NSS, enable wifi redirect
|
|
[ -d /sys/kernel/debug/ecm/ecm_nss_ipv4 ] && sysctl -w dev.nss.general.redirect=1
|
|
|
|
support_bridge && {
|
|
if ([ -z "$(grep "net.bridge.bridge-nf-call-iptables=1" /etc/sysctl.d/qca-nss-ecm.conf)" ] && [ -z "$(grep "net.bridge.bridge-nf-call-ip6tables=1" /etc/sysctl.d/qca-nss-ecm.conf)" ]); then
|
|
echo 'net.bridge.bridge-nf-call-arptables=1' >> /etc/sysctl.d/qca-nss-ecm.conf
|
|
echo 'net.bridge.bridge-nf-call-iptables=1' >> /etc/sysctl.d/qca-nss-ecm.conf
|
|
echo 'net.bridge.bridge-nf-call-ip6tables=1' >> /etc/sysctl.d/qca-nss-ecm.conf
|
|
fi
|
|
}
|
|
|
|
if [ -d /sys/module/qca_ovsmgr ]; then
|
|
insmod ecm_ovs
|
|
fi
|
|
}
|
|
|
|
stop() {
|
|
# If ECM is already not loaded, just return
|
|
if [ ! -d /sys/module/ecm ]; then
|
|
return
|
|
fi
|
|
|
|
# If the acceleration engine is NSS, disable wifi redirect
|
|
[ -d /sys/kernel/debug/ecm/ecm_nss_ipv4 ] && sysctl -w dev.nss.general.redirect=0
|
|
|
|
sed '/net.bridge.bridge-nf-call-arptables=1/d' -i /etc/sysctl.d/qca-nss-ecm.conf
|
|
sed '/net.bridge.bridge-nf-call-iptables=1/d' -i /etc/sysctl.d/qca-nss-ecm.conf
|
|
sed '/net.bridge.bridge-nf-call-ip6tables=1/d' -i /etc/sysctl.d/qca-nss-ecm.conf
|
|
|
|
if [ -d /sys/module/ecm_ovs ]; then
|
|
rmmod ecm_ovs
|
|
fi
|
|
|
|
unload_ecm
|
|
}
|