No description
Find a file
John Crispin 7c0a2bc930 busybox: backport cve-2017-16544 fix
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2,
the tab autocomplete feature of the shell, used to get a list of filenames
in a directory, does not sanitize filenames and results in executing any
escape sequence in the terminal. This could potentially result in code
execution, arbitrary file writes, or other attacks.

Fixes: FS#1181 - CVE-2017-16544:

Backport the patch from:
https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8
https://nvd.nist.gov/vuln/detail/CVE-2017-16544

Signed-off-by: Derek Werthmuller <thewerthfam@gmail.com>
Signed-off-by: John Crispin <john@phrozen.org>
2018-01-02 07:14:08 +01:00
.github github: include pull request template 2017-03-12 17:38:31 +01:00
config kernel: fix spelling in CONFIG_DEVTMPFS help text 2017-12-11 12:43:29 +01:00
include include/package.mk: remove old configured stamps before attempting configuration 2017-12-28 12:24:25 +01:00
package busybox: backport cve-2017-16544 fix 2018-01-02 07:14:08 +01:00
scripts base-files: allow skipping of hash verification 2017-12-14 09:29:31 +01:00
target bcm53xx: use iflag=skip_bytes for dd command during sysupgrade 2017-12-29 23:18:45 +01:00
toolchain toolchain: musl: update to current HEAD 2017-12-08 19:54:21 +01:00
tools tools/expat: Update to 2.2.5 2017-12-16 14:41:37 +01:00
.gitattributes add .gitattributes to prevent the git autocrlf option from messing with CRLF/LF in files 2012-05-08 13:30:49 +00:00
.gitignore gitignore: add /overlay 2017-01-15 18:16:29 +01:00
BSDmakefile add missing copyright header 2007-02-26 01:05:09 +00:00
Config.in merge: base: update base-files and basic config 2017-12-08 19:41:18 +01:00
feeds.conf.default Add video feed to feeds.conf.default 2017-01-25 16:04:39 +01:00
LICENSE finally move buildroot-ng to trunk 2016-03-20 17:29:15 +01:00
Makefile merge: base: update base-files and basic config 2017-12-08 19:41:18 +01:00
README merge: base: update base-files and basic config 2017-12-08 19:41:18 +01:00
rules.mk rules.mk: export TMPDIR 2017-12-12 17:44:01 +01:00

This is the buildsystem for the OpenWrt Linux distribution.

Please use "make menuconfig" to choose your preferred
configuration for the toolchain and firmware.

You need to have installed gcc, binutils, bzip2, flex, python, perl, make,
find, grep, diff, unzip, gawk, getopt, subversion, libz-dev and libc headers.

Run "./scripts/feeds update -a" to get all the latest package definitions
defined in feeds.conf / feeds.conf.default respectively
and "./scripts/feeds install -a" to install symlinks of all of them into
package/feeds/.

Use "make menuconfig" to configure your image.

Simply running "make" will build your firmware.
It will download all sources, build the cross-compile toolchain, 
the kernel and all choosen applications.

To build your own firmware you need to have access to a Linux, BSD or MacOSX system
(case-sensitive filesystem required). Cygwin will not be supported because of
the lack of case sensitiveness in the file system.


Sunshine!
	Your OpenWrt Community
	http://www.openwrt.org