07070100DC19C0000041ED00000000000000000000001068F513D900000000000000080000000100000000000000000000000200000000.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-uboxELF @@8 @@ @ @8 8 8pX X X  /P/P  8` ` `ppdtQdtR  hh/lib/ld-musl-mips64-sf.so.1@( P( P(4 P( P( P( P  (  (`     p  p Pp5 `ppp p pAp$poo oo %A- = 3, 4 !$>&? #%;2'"+/)6@(*059.:17<8  ( Pq  |  (`e (@ (0 (  ( (d '_ ' 'Z ' ' ' ' 'T 'p '` 'P '@v '0M ' E ' 'f & &> & &6 &Q & &. & &p &` &P' &@v! &0 &  &" &? %1 % % %x %j %  %'} %# %p7 %` %P  %@> %0 % ` %"EW %__RLD_MAPuloop_doneuloop_fd_addblob_buf_initblobmsg_parseblobmsg_add_fieldustream_get_read_bufustream_consumeuloop_run_timeoutuloop_fd_deleteusock_finiuloop_timeout_setuloop_initustream_fd_initfputsstrlenstderrfclosememsetfopenunlinkopenlogfprintfwrite__stack_chk_failuloop_cancelledmallocmemcpy__stack_chk_guardsnprintfubus_freeubus_strerrorubus_lookup_idubus_invoke_async_fdubus_connectubus_complete_request_asyncsprintfstat__register_frame_info__deregister_frame_infogetpidsleepstrtoulsendrenamectimesignalstrncatregcompgetoptregexecsyslogfsyncexitatoi__libc_start_mainoptindoptarglibubox.so.20240329libubus.so.20250102libjson-c.so.5libblobmsg_json.so.20240329libgcc_s.so.1libc.soGLIBC_2.0 iig߼߿g g <-gpPߙhߔ@ߓ@%%$ $%%fs-h$f.@ $Pߙ `0% (% @ %W@%ߙ ߙ@  %@@%߂߄@Eߙp d-߿*{@ *Z@Y*Q@&$0P5$FPJ߂߂߅@ߙ&Dd* $߿߾߼߷߶ߵߴ߲߳߱%߰g&.!@߂~-\-@$SP߂ߙ D$ *d ߃8b߂8$C ߂8$C߂V߃bdDd߃8b@߃pb$D"-dC߂8C8C߂8CH߂C߂8C(߂C߂8C0߂8$C߂ߙ D|@%߂ߙD0% (%߄80C$bC%m߂ߙD0% (%߄80C$bC%^߂C߂8YC ߐ߄8ߙ0$ dP@Qߙ ߂8MC߂8$HCߙߔ8$  dDP@ߓ8߂8D(߅@ߙ( d-@ @%ߙ ߅@ߙ@0%d-  %ߙ  %ߓ8ߙ(%fd g߆@ߙ$$@8%d-$fd ߆@ߙ,B$@8%d-$fd A߆@ߙ$@8%d-$ fd߂@ߖ8dBfߙ$h(%@ % ߕ8߅@ߙgd-  %@)@%ߙ߂ % ^߅@ߙ %@0% d-ߙ$ @$C@ண@ߙ   %ߙ @߿߂8D(ߙX @߂@@@@߆@߂8B@@)߂8B8@&߄@ߙ`$$ d-߂8$C߂@߄8dBߙ߂@d$dB ߆@ߙPg؏$ @@%d.  %ߢߙ %@(% X$ߙߞ8H߂8ߙx$$ $ CA߂߅@ߙDH d(ߙ $$֮%/ %(-<-$$ g<-ghPߙ߈ ߇(0%߄0H% d߿߼gg<-ghߐ8@߂@ߙ߄8 d$߿߼߰g g<-gg߂(@߅8߄8ߙ(d d߿߼ga d*8e%$$cd$|cC-%< -dg܂8B@܂܂8$ C@܂$Cg<-gfߐ8ߙf %%$ (%߂@ߙdB$L߂@ (% %dBL ߿߼߱߰g @g<-gfLߙߐ8 fߙh ߄8ߙ$d$ ߿߼߰g g <-geߐ8ߒ8ߑ8 ߙ&8E@(  +߄8dA߂߅@ߙD d(߄8ߙ$ d߿(߼ ߲߱߰g0ߙ $ (C`߿(F@@'8߈@e(߅@ߙd( $ $b$ ߈@e(gX<-gd߂0`ߞ8B g"hPH@80(@(d߄8ߙ}%g0$ dߢ8@ߢ@@ߢH@ߢP@ߢ0@$ߖ8b6ߒ8B@3ߐ8ߙH gX@-Cߢb*@)ߙ Hߙ dD$ߙh @%@ ߅@Hߙd( @ %Hߙ @(%ߙ` @ %ߙxH$ $ A "߂߅@ߙDH d(ߙ $ߓ@fs`% ߤ@U߂8B@~0b0B@ߢ߲0@`% @ %@%߂8B@߄8ߤP`% ߗ8hHlH$@8@@(߆@ߙ8d)$  ghߙx g(ߙ@ % @%-@$b߆@ߙ8g8%d) $  %ߙH$f  %@ ߂8ߙ  %$ߙH0/gh  %߂8U ߙ % $ߙH0/(%  %ߙ  %߅@ߙH0/d)(  %߂8U0ߙ % $ߙH0/(%  %ߙ  %߅@ߙH0/d)0  %`% ߤHB@ ߙ  %߅@$ߙH0/d)8  %ߙ  %$ߙH@(% %ߒ8 0/B 3ߙ@G % ߙ@0%(% ` %A߂8F@߂8G8B @H߈@߈@e(߅@ߙd)H $ߙ gߙh $߄8ߙ$d$ "$bߙ $ߢ߂8B@E߲0b>'ߙ@%8%0%@(% dP$bAߢߣBbc߿hߙ  ߃8c`ߙdCg$ e-dx8%dF(% ` %e(@߂@gh߅8ߙg$pd % 2$Cߗ@f(d^)p߅8ߙg($dp % 2$Cߊ@eJ(f `% ߤHB@ߋ@ߋ@ek)p߆@ߙ8gH%@%8%d)x$ % ߙ  %$ߙ@0% (%fek(߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gpg0<-g^ ߒ@(8%g fRߙ8 % `(%@ % ,C`߿8~P*@ @% ߙ(%  %ߙ8߼0߳(߲ ߱߰g@ߙx% d@ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d*ߙx% d)ߙx% d(ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dߙx% dg߼߿g udptcpfailed to connect: %m Logread connected to %s:%s via %s kernel:%s.oldfailed to open %s: %m [%lu.%03u] <%u> : kernel: Failed to send log data to %s:%s via %s %s %s%s.%s%s %s authauthprivcrondaemonftpkernlprmailmarknewssecuritysysloguseruucplocal0local1local2local3local4local5local6local7alertcritdebugemergerrerrorinfononenoticepanicwarnwarningUsage: %s [options] Options: -s Path to ubus socket -l Got only the last 'count' messages -e Filter messages with a regexp -r Stream message to a server -F Log file -S Log size -p PID file -h Add hostname to the message -P Prefix custom text to streamed messages -z handle only messages with given facility (0-23), repeatable -Z ignore messages with given facility (0-23), repeatable -f Follow log messages -u Use UDP as the protocol -t Add an extra timestamp -0 Use \0 instead of \n as trailer when using TCP u0fcs:l:z:Z:r:F:p:S:P:h:e:tFailed to connect to ubus w+%dstreamoneshotlineslogFailed to find log object: %s logreadreadmsgidprioritysourcetimet l8  P . . . .( .0 )  )P )H ) )X ) )0 ) ) )8 )  )( * *@ * * *  *( *0 *8 *@ *H *P *X *` *h *p *x * * * * * *  (` (    (@ (0 (  ( ( ' ' ' ' ' ' ' ' 'p '` 'P '@ '0 '  ' ' & & & & & & & & &p &` &P &@ &0 &  & & % % % % % % % % %p %` %P %@ %0 %  % %07070100DC2807000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001400000000usr/libexec/network07070100DC2808000081ED00000000000000000000000168F513D90000175C000000080000000100000000000000000000002700000000usr/libexec/network/packet-steering.uc#!/usr/bin/env ucode 'use strict'; import { glob, basename, dirname, readlink, readfile, realpath, writefile, error, open } from "fs"; let napi_weight = 1.0; let cpu_thread_weight = 0.75; let rx_weight = 0.75; let eth_bias = 2.0; let debug = 0, do_nothing = 0; let disable; let cpus; let all_cpus; let local_flows = 0; while (length(ARGV) > 0) { let arg = shift(ARGV); switch (arg) { case "-d": debug++; break; case "-n": do_nothing++; break; case '0': disable = true; break; case '2': all_cpus = true; break; case '-l': local_flows = +shift(ARGV); break; } } function task_name(pid) { let stat = open(`/proc/${pid}/status`, "r"); if (!stat) return; let line = stat.read("line"); stat.close(); return trim(split(line, "\t", 2)[1]); } function set_task_cpu(pid, cpu) { if (disable) cpu = join(",", map(cpus, (cpu) => cpu.id)); let name = task_name(pid); if (!name) return; if (debug || do_nothing) warn(`taskset -p -c ${cpu} ${name}\n`); if (!do_nothing) system(`taskset -p -c ${cpu} ${pid}`); } function cpu_mask(cpu) { let mask; if (cpu < 0) mask = (1 << length(cpus)) - 1; else mask = (1 << int(cpu)); return sprintf("%x", mask); } function set_netdev_cpu(dev, cpu, rx_queue) { rx_queue ??= "rx-*"; let queues = glob(`/sys/class/net/${dev}/queues/${rx_queue}/rps_cpus`); let val = cpu_mask(cpu); if (disable) val = 0; for (let queue in queues) { if (debug || do_nothing) warn(`echo ${val} > ${queue}\n`); if (!do_nothing) writefile(queue, `${val}`); } queues = glob(`/sys/class/net/${dev}/queues/${rx_queue}/rps_flow_cnt`); for (let queue in queues) { if (debug || do_nothing) warn(`echo ${local_flows} > ${queue}\n`); if (!do_nothing) writefile(queue, `${local_flows}`); } } function task_device_match(name, device) { let napi_match = match(name, /napi\/([^-]*)-\d+/); if (!napi_match) napi_match = match(name, /mt76-tx (phy\d+)/); if (napi_match && (index(device.phy, napi_match[1]) >= 0 || index(device.netdev, napi_match[1]) >= 0)) return true; if (device.driver == "mtk_soc_eth" && match(name, /napi\/mtk_eth-/)) return true; return false; } cpus = map(glob("/sys/bus/cpu/devices/*"), (path) => { return { id: int(match(path, /.*cpu(\d+)/)[1]), core: int(trim(readfile(`${path}/topology/core_id`))), load: 0.0, }; }); cpus = slice(cpus, 0, 64); if (length(cpus) < 2) exit(0); function cpu_add_weight(cpu_id, weight) { let cpu = cpus[cpu_id]; cpu.load += weight; for (let sibling in cpus) { if (sibling == cpu || sibling.core != cpu.core) continue; sibling.load += weight * cpu_thread_weight; } } function get_next_cpu(weight, prev_cpu) { if (disable) return 0; let sort_cpus = sort(slice(cpus), (a, b) => a.load - b.load); let idx = 0; if (prev_cpu != null && sort_cpus[idx].id == prev_cpu) idx++; let cpu = sort_cpus[idx].id; cpu_add_weight(cpu, weight); return cpu; } let phys_devs = {}; let netdev_phys = {}; let netdevs = map(glob("/sys/class/net/*"), (dev) => basename(dev)); for (let dev in netdevs) { let pdev_path = realpath(`/sys/class/net/${dev}/device`); if (!pdev_path) continue; if (length(glob(`/sys/class/net/${dev}/lower_*`)) > 0) continue; let pdev = phys_devs[pdev_path]; if (!pdev) { pdev = phys_devs[pdev_path] = { path: pdev_path, driver: basename(readlink(`${pdev_path}/driver`)), netdev: [], phy: [], tasks: [], rx_tasks: [], rx_queues: map(glob(`/sys/class/net/${dev}/queues/rx-*/rps_cpus`), (v) => basename(dirname(v))), }; } let phyidx = trim(readfile(`/sys/class/net/${dev}/phy80211/index`)); if (phyidx != null) { let phy = `phy${phyidx}`; if (index(pdev.phy, phy) < 0) push(pdev.phy, phy); } push(pdev.netdev, dev); netdev_phys[dev] = pdev; } for (let path in glob("/proc/*/exe")) { readlink(path); if (error() != "No such file or directory") continue; let pid = basename(dirname(path)); let name = task_name(pid); for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!task_device_match(name, dev)) continue; push(dev.tasks, pid); let napi_match = match(name, /napi\/([^-]*)-(\d+)/); if (napi_match && napi_match[2] > 0) push(dev.rx_tasks, pid); break; } } function assign_dev_queues_cpu(dev) { let num = length(dev.rx_queues); if (num < length(dev.rx_tasks)) num = length(dev.rx_tasks); for (let i = 0; i < num; i++) { let cpu; let task = dev.rx_tasks[i]; if (num >= length(cpus)) cpu = i % length(cpus); else if (task) cpu = get_next_cpu(napi_weight); else cpu = -1; set_task_cpu(task, cpu); let rxq = dev.rx_queues[i]; if (!rxq) continue; if (num >= length(cpus)) cpu = (i + 1) % length(cpus); else if (all_cpus) cpu = -1; else cpu = get_next_cpu(napi_weight, cpu); for (let netdev in dev.netdev) set_netdev_cpu(netdev, cpu, rxq); } } function assign_dev_cpu(dev) { if (length(dev.rx_queues) > 1 && length(dev.rx_tasks) > 1) return assign_dev_queues_cpu(dev); if (length(dev.tasks) > 0) { let cpu = dev.napi_cpu = get_next_cpu(napi_weight); for (let task in dev.tasks) set_task_cpu(task, cpu); } if (length(dev.netdev) > 0) { let cpu; if (all_cpus) cpu = -1; else cpu = get_next_cpu(rx_weight, dev.napi_cpu); for (let netdev in dev.netdev) set_netdev_cpu(netdev, cpu); } } // Assign ethernet devices first for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!length(dev.phy)) assign_dev_cpu(dev); } // Add bias to avoid assigning other tasks to CPUs with ethernet NAPI for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!length(dev.tasks) || dev.napi_cpu == null) continue; cpu_add_weight(dev.napi_cpu, eth_bias); } // Assign WLAN devices for (let devname in phys_devs) { let dev = phys_devs[devname]; if (length(dev.phy) > 0) assign_dev_cpu(dev); } if (debug > 1) warn(sprintf("devices: %.J\ncpus: %.J\n", phys_devs, cpus)); 07070100DC2C0C000081ED00000000000000000000000168F513D900000122000000080000000100000000000000000000001500000000usr/libexec/login.sh#!/bin/sh [ -t 0 ] && { tty_dev=$(readlink /proc/self/fd/0) case "$tty_dev" in /dev/console|/dev/tty[0-9]*) export TERM=${TERM:-linux} ;; /dev/*) export TERM=vt102 ;; esac } [ "$(uci -q get system.@system[0].ttylogin)" = 1 ] || exec /bin/login -f root exec /bin/login 07070100DC2C0D000081ED00000000000000000000000168F513D90000061D000000080000000100000000000000000000002400000000usr/libexec/validate_firmware_image#!/bin/sh . /lib/functions.sh . /lib/functions/system.sh . /usr/share/libubox/jshn.sh include /lib/upgrade VALID=1 FORCEABLE=1 ALLOW_BACKUP=1 # Mark image as invalid but still possible to install notify_firmware_invalid() { VALID=0 } # Mark image as broken (impossible to install) notify_firmware_broken() { VALID=0 FORCEABLE=0 } # Mark image as incompatible with preserving a backup notify_firmware_no_backup() { ALLOW_BACKUP=0 } # Add result of validation test notify_firmware_test_result() { local old_ns json_set_namespace validate_firmware_image old_ns json_add_boolean "$1" "$2" json_set_namespace $old_ns } err_to_bool() { [ "$1" -ne 0 ] && echo 0 || echo 1 } fwtool_check_signature "$1" >&2 FWTOOL_SIGNATURE=$? [ "$FWTOOL_SIGNATURE" -ne 0 ] && notify_firmware_invalid fwtool_check_image "$1" >&2 FWTOOL_DEVICE_MATCH=$? [ "$FWTOOL_DEVICE_MATCH" -ne 0 ] && notify_firmware_invalid json_set_namespace validate_firmware_image old_ns json_init json_add_object "tests" json_add_boolean fwtool_signature "$(err_to_bool $FWTOOL_SIGNATURE)" json_add_boolean fwtool_device_match "$(err_to_bool $FWTOOL_DEVICE_MATCH)" # Call platform_check_image() here so it can add its test # results and still mark image properly. json_set_namespace $old_ns platform_check_image "$1" >&2 || notify_firmware_invalid json_set_namespace validate_firmware_image old_ns json_close_object json_add_boolean valid "$VALID" json_add_boolean forceable "$FORCEABLE" json_add_boolean allow_backup "$ALLOW_BACKUP" json_dump -i json_set_namespace $old_ns 07070100DC3AA6000081ED00000000000000000000000168F513D900010398000000080000000100000000000000000000001300000000usr/libexec/cgi-ioELF @@8 @@ @ @8 8 8pX X X  OO    PPdtQdtR  ((/lib/ld-musl-mips64-sf.so.1@( ( (4 ( (| ( ( ( FZn|    F     X ( p p50 ppp p pPp%poo oo CP/. D3 ;'8> G !%"I+0#&1$C(=26- 9 )F*4,<A@JNE5B7?:MOHKL  <| (  :     5P  64<  4  6H   ?tD  F  A\X  >\  =(d FJ FpP F`A FPW F@/ F0^ F  F( F# E E" E Eo E E E Ev Ep E` EP E@ E0} E  E E D D D) D D@" D2 D D Dp$ D` DP D@ D0 D  D D C C C C C C C| Cv Cp  C` CP C@*" C0 C m Cf C` B B BX B__RLD_MAPuloop_doneblob_buf_initblobmsg_parseblobmsg_add_field_finiclosestrchrstrlen__errno_locationstrcmpmemsetunlinkstrncmpreadcallocpipe__stack_chk_failmallocmemcpygetenv__stack_chk_guardsnprintfwaitpidstrcpyubus_freeubus_lookup_idubus_connectubus_invoke_fdsprintf__register_frame_info__deregister_frame_infoputcharioctlstdoutstrerrorexeclputsdup2tolowerstrtoulsplicefflushlseekstrncasecmpchmodisxdigitstrtolsendfilechdirstrstrstrncpyforkexecvlocaltimelinkatisalnumgethostnamestrftimestatfwrite__libc_start_mainopenlibubox.so.20240329libubus.so.20250102libgcc_s.so.1libc.socanonicalize_pathdataduppartspostdecodemultipart_parser_initmultipart_parser_freemultipart_parser_executeparse_commandurldecodepostdecode_fieldsGLIBC_2.0n iig߼߿g g@<-glߑpܰ߅@ߙ"dM %x @߅@ߣx"bߙ@ߙ g9-4߿߼ߵߴ߲߳߱߰ gߙdM  %@߅@ߣx"bߙ@g9(ߙdM  %@߅@ߙ8g8$@(%` %( 0߂@ߙ`g$dBL ߤ @%߆@(%dM$ߙ@g9" @%ߙ  %ߣx"b߿߼ߵߴ߲߳߱%߰g߇@߆@߅@ߙ@dJdMg9%l dI@߆@ߙ g@ @%ߙ ߆@dM E$ߙX @%$BNߙ@Qߙ g(ߙ( %ߙ@g ߆@ߙ@8%dN($  %ߙ$? ` %@ߙ߅@dN8 ` %߄@ߙ8 dF߄@ߙ8 dN@߄@ߙ0%`(%dNh $߂ߙD $ߙ$ $8%$ (%`ߙuߙߙ BSߙ0%g @ %ߙ ߙ ߆@dM8ߙ0 $ߙ %ߙ $ߙ ߙ ߄@ߙ dM`A߇@ߙ ߆@dMh߅@߆@ߙ@dN@%dMdN % $YߙߙdN  %@U$ߣx"bߙ@g9/0%( / %(-<-$$ g<-gfߙ߈ ߇(0%߄0H% d߿߼gg<-gfߐ8@߂@ߙ߄8 d$߿߼߰g g<-gf4߂`@߅8߄8ߙ`d d߿߼g+dgЈ <-geܐ`߄8ߙ}%g$( dߢ@߿(DD dCDB"8D%$B$D$|Bb-b+߿(߼ ߰g0g<-ge( %߅@ߙ dF߿߃8,B߼bH%gg0<-gdߙ%g( 8% %@JߙX @%$""% (ߙ8ߙH ߙ0 $ߙ %ߙ $ߙ ߙ ߅@ߙ@dF@%`8%0% %@%߂8dB߿8߼0߳(߲ ߱߰g@ߐ8f %$A (%ߙx(% @0%ߙ0%(% % @%ߙ ߙ %g<-gch%߄@ߙ8dF %߄@ߙ8ߐ8dG fH@Fߙ (%@2ߙ8߄@Dߙ dG(ߑ@߄@f1$  % dGH@(@0%߇@dF߄@ߙ(% dGP߄@$@ % dGh@@0%߇@dF߄@ߙ(% dGx߄@ߙ8 dG߿߼߲߱߰$g߄@ dG8ߑ@߆@߇@dFdK߆@߇@dFdK ߙ߄@ (% dGߙ ߙQ  %߄@ߙ@0% (% dG @߄@ߙ` g0<-gaߑpߐ8"fH$8(@ ߙ ߙ $Cߣ"b߅@ߙ ߙ@߿8߼0߳(߲ ߱߰dG %g9x g@߆@ߙxg8%dG$ @ %ߙ` Aߙ C$bߙ0ߙ $߅@dHߙ@g9x %ߤ#߿8߼0߳(߲ ߱߰g@ߙ0$$@(% $A4ߙߙ$0% (%Aߙߙ $߅@dH $ $A ߙ $߅@dH@ߙ @(%S ߙ $ߙ  ߅@dH`$ߙx$ @(% 0%ߙ ߙ $ߙ @߅@dHg<-g_ߐ8$fHg. %,g $e$e"ߙH߿߼߱߰%g $dߙ$ Qߙ $߅@ߙ@߿߼߱߰dH %g9x g ߙP (% (%ߙ$ (%֮`߿+Тg<-g^%(%߄@ߙdH %߄@ߙ8 dH߄@ߙ (% dI ߙߙ  %߄@ߙ@(% dIߙ $ ߿߼߱߰$g g0<-g]Pߒ88BH( @=, @:%%߅@ߙ$ dI  %@1f1 f$ $;"D(C'ff.@%߅@ߙ$dI(  %@f$$"&-BC#ddߔXf1$dfRH$ߙpޅ0%  %@Sfsuf߿8ff1߿8߼0ߵ(ߴ ߲߳߱߰%g@+@&-߿8g<-g[ߙ% % %߄8@ߙ8% 0%%$ d(߿߼߱߰g g@<-g[tߙH% %0( H8%%% @6߿H@0@%߅@ߙg dI0 @ %@)ߙXߕ8ߙ(% f( (%ߑ@߄@f1$ % dI8߄@(% % dIP߄@@(% % dIX߄@`(% % dI`߈@߆@ާ(ߙ菥 $ $ g edIp  %ߙX  %߿H ߼@ߵ8ߴ0߳(߲ ߱߰gPg<-gZ ߐ8fH$Q߇@߆@߅@ߙ@dIxdIg9%l dI@ߙ ߅@QdI %ߙ@߿߼߱߰g9x g $C$Aߙ@߅@dIg9\ @ (%$%߿߼߱߰g $g<-gYߐ8$fHb) ߅@dIߙ@߿߼߰g9x g ߇@߅@dI %߅@ߙ@dIxg9%l dJ@ߙ߅@dJ߄@<A$d dJ0A$߅@dJ8߿߼߰%g gpx<-gX4X߅8ߔpߙP8gނ$@d %ph`PH@( ߙ` %$ ߤ ߆@dJx(%$ߙ@g9" @%ߙ ߤߣ(ނb߿ߙ ߐ@ߑ@߆@߅@f%lf'JdJ% dI@ߦ0߅@߆@dJߤ f'J% dJ@߆@ߙߤ0 gX@ @%ߙ ߆@EdJ$x40BC$`C߱@߆@dJ߱@ ߕ@fK2@ߙ ߱P ߙߕ@fK@2@ߙ ߙߤ0 (%A'@%ߙ ߆@EdKh$ @ %@ ߙ@(%  %@f1߆@dK (%$f1 @ %@ ߙ@(%  %@f1߆@dKHf1x$`0BC<ߢߙ<@gdr  %߄@ߙ8 dFߥP߅@dJX߄@ߙ dKߥ@ߙ߄@ dK߂ߥ@R߄@ߙdK $ߙ@ %$Y$$ $ ߧ'0%ߙ (% $S&ߙ BUVg(ߙ@8%$  %ߙx(%$  %@@(%ߙ @ %ߙWߧ^ߙ  %0ߙ@ߣb/߄@ߙ8dK g(ߙx(%$  %@@(%ߙ@8%$  %ߙx߾߼x߷p߶hߵ`ߴX߳P߲H߱@%߰8gg@<-gS ߄@ߑpߙh"dL8H80( @߅@ߙ $Cߣ"bߙ@ߙ ߅@߿H߼@ߴ8߳0߲(߱ ߰dLH %g9x gPߙp$dLX@ % @%@f$=@fCߙ  %ߙ  dD@@%߅@ߙdLp @ %ߙ(% fD߂8߅8ߙhdBH$d@ %C$ C ߙ@ % @%`%gߙx$@(% %0%ߙp ` %ߣ"b߿H߼@ߴ8߳0߲(߱ ߰%gPߙxߙx@(% ` %*g`<-gQ߅8ߙPHg0$@d@ %xph`X Pߙ` % $ߤ8߆@dL(%/$ߔ@߇@ߖ@߅@f%ldJfL% dI@߰Xߒ@fRK ߙ ߰hߤHߒ@fRK@ ,ߙ ߤH7ߙ߆@ dL  %@ ߙ (% @ %@f߆@dK (%$ߙ@g9" @%ߙ ߤ߿߾߼߷߶xߵpߴh߳`߱P߰H@%߲Xgf  %@ ߙ (% @ %@f߆@dKHf @@%ߞ@Fߤ8fL% gJ@%fC`LdB Aߙ  %ߙdBgp@(% % @40BC<߄@ߙh dL@@(%߅@dLx߂@ߒ8dBL%fRb$:C@ߢe/W-,B@ߙh0% @ %ߥߙ 0% W -ߥߙ @ %@fe40BCb@fsߙ  %߆@(%dL$`@%ߙߤ8fL 0%% gJ@ߙߙ  %߆@ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dg߼߿g Content-Disposition/bin/busybox"nullStatus: 200 OK Content-Type: text/plain { "size": %u, "size": null,md5sum "checksum": %s%s%s, sha256sum "sha256sum": %s%s%s "message": "%s", "failure": [ %u, "%s" ] }No file data received/proc/self/fd/%dFailed to unlink existing fileFailed to rewind temp fileFailed to open target fileI/O failure while writing target fileFailed to chmod target fileI/O failure while writing temporary fileStatus: %d %s Content-Type: text/plain %s: %sform-dataname="sessionubus_rpc_sessionscopeobjectfunctionaccesswriteuploadcgi-ioUpload permission deniedInternal program failureFile data without sessionFile data without namefileAccess to path denied by ACL/tmpFailed to create temporary fileapplication/octet-streamDownload permission deniedreaddownloadFailed to stat requested pathRequested path is not a regular file or block device ()<>@,;:[]?.=%-Invalid characters in filename .;=/-Invalid characters in mimetypeFailed to open requested pathContent-Type: %s Content-Disposition: attachment; filename="%s" Content-Length: %llu sessionidpathfilenamemimetypeCONTENT_TYPEInvalid requestmultipart/form-data;--/bin:/usr/bin:/sbin:/usr/sbinExec permission deniedexecInvalid command parameterPATH/%sExecutable not foundAccess to command denied by ACLFailed to spawn pipeFailed to fork process/dev/null/Failed chdir('/')Failed execv(...)commandcgi-uploadcgi-downloadcgi-backupBackup permission deniedbackup---create-backup/sbin/sysupgrade%Y-%m-%dOpenWrtContent-Type: application/x-targz Content-Disposition: attachment; filename="backup-%s-%s.tar.gz" cgi-exec(bug)filemodefiledataapplication/x-www-form-urlencodedCONTENT_LENGTH| pp  P Ip L L L L( L M L L(  # ! ' & N L L N N F     =( <  A\ 5P 6 6H : > ? F Fp F` FP F@ F0 F  F F E E E E E E E E Ep E` EP E@ E0 E  E E D D D D D D D D Dp D` DP D@ D0 D  D D C C C C C C C C Cp C` CP C@ C0 C  C C B B B B07070100DC3E0C000081ED00000000000000000000000168F513D90000010B000000080000000100000000000000000000001B00000000usr/libexec/syslog-wrapper#!/bin/sh . /lib/functions.sh main() { local log_file log_file="$(uci_get system @system[0] log_file "")" if [ -f "$log_file" ]; then cat "$log_file" return fi if [ -f /sbin/logread ]; then /sbin/logread -e ^ else /usr/sbin/logread -e ^ fi } main 07070100DC3EBD000081ED00000000000000000000000168F513D900000555000000080000000100000000000000000000001A00000000usr/libexec/luci-peeraddr#!/bin/sh NL=" " function ifaces_by_device() { ubus call network.interface dump 2>/dev/null | \ jsonfilter -e "@.interface[@.device='$1' || @.l3_device='$1'].interface" } function device_by_addr() { set -- $(ip route get "$1" ${2:+from "$2"} 2>/dev/null) echo "$5" } for inbound_device in $(device_by_addr "$REMOTE_ADDR" "$SERVER_ADDR"); do inbound_devices="$inbound_device" inbound_interfaces="" for iface in $(ifaces_by_device "$inbound_device"); do inbound_interfaces="${inbound_interfaces:+$inbound_interfaces$NL}$iface" for peeraddr in $(uci get "network.$iface.peeraddr"); do for ipaddr in $(resolveip -t 1 "$peeraddr" 2>/dev/null); do for peerdev in $(device_by_addr "$ipaddr"); do for iface in $(ifaces_by_device "$peerdev"); do inbound_devices="${inbound_devices:+$inbound_devices$NL}$peerdev" inbound_interfaces="${inbound_interfaces:+$inbound_interfaces$NL}$iface" done done done done done done inbound_devices="$(echo "$inbound_devices" | sort -u | sed ':a;N;$!ba;s/\n/", "/g')" inbound_interfaces="$(echo "$inbound_interfaces" | sort -u | sed ':a;N;$!ba;s/\n/", "/g')" cat </dev/null else cat /usr/lib/opkg/status fi ;; list-available) if [ $ipkg_bin = "apk" ]; then $ipkg_bin list --full 2>/dev/null else lists_dir=$(sed -rne 's#^lists_dir \S+ (\S+)#\1#p' /etc/opkg.conf /etc/opkg/*.conf 2>/dev/null | tail -n 1) find "${lists_dir:-/usr/lib/opkg/lists}" -type f '!' -name '*.sig' | xargs -r gzip -cd fi ;; install|update|upgrade|remove) ( cmd="$ipkg_bin" # APK have command renamed if [ $ipkg_bin = "apk" ]; then case "$action" in install) action="add" ;; update) action="update" ;; upgrade) action="upgrade" ;; remove) action="del" ;; esac fi # APK have --autoremove enabled by default and # --force-removal-of-dependent-packages as -r option if [ $ipkg_bin = "apk" ]; then while [ -n "$1" ]; do case "$1" in --force-removal-of-dependent-packages) cmd="$cmd -r" shift ;; --force-overwrite) cmd="$cmd $1" shift ;; -*) shift ;; *) break ;; esac done else while [ -n "$1" ]; do case "$1" in --autoremove|--force-overwrite|--force-removal-of-dependent-packages) cmd="$cmd $1" shift ;; -*) shift ;; *) break ;; esac done fi if flock -x 200; then pkmcmd="$cmd $action $@" $cmd $action "$@" /tmp/ipkg.out 2>/tmp/ipkg.err code=$? stdout=$(cat /tmp/ipkg.out) stderr=$(cat /tmp/ipkg.err) else code=255 stderr="Failed to acquire lock" fi json_init json_add_int code $code [ -n "$pkmcmd" ] && json_add_string pkmcmd "$pkmcmd" [ -n "$stdout" ] && json_add_string stdout "$stdout" [ -n "$stderr" ] && json_add_string stderr "$stderr" json_dump ) 200>/tmp/ipkg.lock rm -f /tmp/ipkg.lock /tmp/ipkg.err /tmp/ipkg.out ;; *) echo "Usage: $0 {list-installed|list-available|update}" >&2 echo " $0 {install|upgrade|remove} pkg[ pkg...]" >&2 exit 1 ;; esac 07070100DC21C8000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000000800000000usr/bin07070100DC3F960000A1FF00000000000000000000000168F513D900000012000000080000000100000000000000000000000C00000000usr/bin/scp/usr/sbin/dropbear07070100DC2AE70000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000B00000000usr/bin/du../../bin/busybox07070100DC2640000081ED00000000000000000000000168F513D900010240000000080000000100000000000000000000000D00000000usr/bin/jshnELF @@8 @@ @ @8 8 8pX X X  **  X` ` ```dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( ( ;Wfz    '`    x `  p p5  ppp p pAp$poo oo %A0-4 ?" !' +( ,@.9%*5$#; =82)<7&/:163>2!1z     D  '`J '@ '0 ' 9 '$ ' &O & &  & & & & &P &p &` &P@ &@ &0 &  &G & % %" % % % % %N % %p8 %`~ %PS %@' %0 % 3"[ % %b $  $V $  $ $g $ $*r $i $p"gy $` $P" $@ $0 $ __RLD_MAPblobmsg_format_json_with_cbblobmsg_add_json_from_string_finifreestrlen__stack_chk_fail__stack_chk_guardsnprintfjson_object_get_objectjson_object_new_int64json_object_to_json_stringjson_object_get_int64json_tokener_parsejson_object_new_booleanjson_object_new_doublejson_object_new_arrayjson_object_get_booleanjson_object_get_doublejson_object_new_stringjson_object_get_typejson_object_get_stringjson_object_object_addjson_object_array_addarray_list_get_idxjson_object_putjson_object_get_arrayarray_list_lengthjson_object_new_objectstrchrstderrstrcmpreadfprintfstrtodcallocavl_findblob_buf_initavl_initavl_insertfputsfclosefopenstrtok_r__register_frame_info__deregister_frame_infostdoutfflushfstatgetoptisalnumputcfwriteatoi__libc_start_mainatolloptarg__environlibblobmsg_json.so.20240329libjson-c.so.5libubox.so.20240329libgcc_s.so.1libc.soGLIBC_2.0JSONC_0.14z iiWg߼߿g g<-gnߔ8%߅@ߙdߖ%8%0%f(  %@ %dB-c`ߙ $@@%@%@%%fU-D2ߙxߔ@ߗ@%%f)x$$Rf*ߙ80%(% ` %R0ߙ`  %߂߅@ߙhDd)0 $ ߿(߂߅@ߙhDd( $߿(߾ ߼߷߶ߵߴ߲߳߱%߰g0$= D(@ߙPdB@(% % B8ffR@^$B,C`|B-B\-@߂ߙD߂8 D߃8b߂ߙ@g9p D#@%߂ߙP(%  %R @%߂߅@Dߙh0% d($ߙx(% @ %Bߴ@߅@0%d(߂ߙh Dߙh ` %$ߙ`  %߿(ߙf $@@%߅@0%d(ߙH0%@(% ` %ߣ@C ߙ@߂߅@ߙhD0% d)ߙ` @ %g9p @ %ߙ`@ % @%ߙh ` %ߙ`߂ߙ@F(%g9  %߂߅@Pߙ@d)(  %@@%ߙ@ %@0%g9 (%ߙ(@ % @%?$=$%P/ %(-<-$$ g<-giߙ߈ ߇(0%߄0H% d߿߼gg<-ghߐ8P@߂@ߙ߄8 d$P߿߼߰g g<-ghd߂@߅8߄8ߙdX d߿߼g@C d$=D%$=d%C#dg<-gg(%߄8ߙ d@߿B8߼gg(<-ggߐߙ0%8 % ߃8߆@eߙd(-d:8/߂8%G @%d' @ %ߙ@g9D @ %8ߙ %߾0߼(߲ ߱߰g@gh<-gf`ߗߙp%xXPH@80(%%% ߕ83ߙ` % @%߃8p߆@f--f:8/%`H%ާߓ@ߙ@%d'(%@ % fsD`% @ %߆@)ާߙ@%d'(% @ %`% @ %߆@b)ߙާ@%d'(% @ %`% @ %@"bxߙ %߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(ggpx<-ge ߙ@Hg9% %`PphX@8% %@߿@ߗ@ߙ @ %ߖ@gߔ@@0%f'ߞ@f`f @g(߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8gg g` %% ߱  ߰(ߙg'  %@߅@ߙ $@% (%%  %Uߥߙ(% @ %ߙ ߦf' %ߙd'  %@߅@ߙ  0%@%ߙd'  %@߅@ߙ % @%ߙd'  %@߅@ߙ  %ߙ@ %ߙd'  %@ ߅@ߙ % (%ߙ @ %ߙd'  %@ ߅@ߙ  %ߙ  +ߙd'  %@%ߙ(0% @ %g0<-gbdߙ ( 8%% %@C߅@ߙ@@ %0%d'g9 @%ߙ  %@@%$ߙ  %߿8߼0ߴ(߳ ߲߱%߰g@%ߔ8ߙ(% fߙp(% f@ߙބ@%8%0% $@@%@%`߇@߇@d'߅@ߙh0%d(@ % %ߙ`  %ߙd($g<-ga ߙ ߑ@Pf1 @ % @߿߼߱߰g g<-g`ߙ @ ߙ`@ % @%$b߂ߙ  %߂߄@ߙpE d($߿߼߱߰g ߄@Qߙp (% d((ߙ@g9  %ߙ  %ߙ  %%g`<-g_0ߒߙ`B(% % hXPH@8% ,C`"߃@dc)b-B\-@߆@d'߂߅@Sߙhd(8` % $_4(ߙߙ`  %,C`߃@dc)b-B\-@$ߤC߿hߙ ߆@d'߆@d'߆@d'߆@d'߆@d'߆@d' % f1 %ߙ`(%  ΂4߄@ߙp`(% d(Hߙ@g9  %߄@`(%d(Pߙp e%߄@ߙp`(%d(H ߑ@ߙ % ߔ@ߙ@ % @%%gf1(hf @8*@ߙ 0%$   %ߙ(% % f %% @(%@8߄@`(%d(p߄@ߙp`(%d( ߔ@ߙ0 % f(@%ߙx$'  %@@%ߙ  %(ߙ`8%$  %߄@`(%d(H0(/(`8%ߙ$  %ߙ`8%$$ % f0ߙxߙX  %߅@ߙh@0%d( ` %%gߙ  %߅@ߙh@0%d( ` %%ߙ  %߅@ߙh@0%d( ` %%߼`߷X߶PߵHߴ@߳8߲0߱(߰ gpߙx% d@ߙx% d?ߙx% d=ߙx% d<ߙx% d;ߙx% d8ߙx% d7ߙx% d5ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dg߼߿g %sK_%s%s%s_%s%sT_%s_%s%sN_%s_%s arrayobjectstringintdoublebooleannullJ_V%s%sFailed to parse message data json_init; json_add_%s ''; json_close_object; %djson_close_array; ' ''\''' %d; ' %ld; ' %lf; %m Error opening %s Error getting size of %s Error allocating memory for %s Error reading %s wUsage: %s [-n] [-i] -r |-R |-o |-p |-w p:nir:R:o:wlH`Tx<XxT  P ' '`     '@ '0 '  ' ' & & & & & & & & &p &` &P &@ &0 &  & & % % % % % % % % %p %` %P %@ %0 %  % % $ $ $ $ $ $ $ $ $p $` $P $@ $0 $ 07070100DC2AFF0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001100000000usr/bin/readlink../../bin/busybox07070100DC2AE80000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/env../../bin/busybox07070100DC278D000081ED00000000000000000000000168F513D9000102A0000000080000000100000000000000000000000E00000000usr/bin/ucodeELF '@@8 @@ @ @8 8 8pX X X  ;;  ` ` `PPdtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( (     /    0   p p5 ppp p pMp"poo oo (CM=A 3+ J*#E-8G/9,B 4 >:! 7.& H"1)5'D$(%2C;60?@<FILK     $  / /t /py /` /P /@ /0j / x / /{ .j .v ._ .Q .T . .k . .p< .` .P .@* .0 .  . . -  - - - -o - - - -p -` -P -@h -0a -  - - ,[ ,C" , ,  , ,r ,e ,U ,p ,`% ,PM ,@; ,0+ , -"- ," , +2 +D +M + +  + +__RLD_MAPucv_array_pushucv_putuc_vm_freeucv_from_jsonucv_object_deleteucv_getuc_vm_scope_getuc_vm_invokeucv_object_adduc_source_new_fileucv_string_newucv_to_stringbuf_formatteduc_program_writeuc_vm_executeuc_stdlib_loaduc_search_path_inituc_vm_initucv_typeuc_vm_trace_set_finiucv_string_lengthuc_source_new_bufferucv_array_newuc_compileucv_int64_get_ucv_string_getuc_vm_gc_startvasprintffputsstrchrstrlen__errno_locationfwritestderrstrcmpfclosememsetfopenstrdupfreadreallocfprintfstrrchr__stack_chk_failabortmemcpy__stack_chk_guardstrerrorstdoutjson_object_get_objectprintbuf_freejson_tokener_parse_exjson_tokener_newjson_tokener_freeprintbuf_newjson_tokener_get_parse_endjson_object_is_typejson_object_putjson_tokener_error_descjson_tokener_get_error__register_frame_info__deregister_frame_infostdinstrtokfdopengetoptatoi__libc_start_mainoptindoptarglibucode.so.20230711libjson-c.so.5libgcc_s.so.1libc.soGLIBC_2.0JSONC_PRIVATEJSONC_0.14 ii ꏅg߼߿g g<-gk߂`ߙPg@X$xB(% % <$B$ߢP2ߙ$/  %@ߣdP$b"߅@߄@ߙ(%d08 %ߢߤ@ߙh ߤߙh ߤߙX ߙP  %ߢXߣBb߿ߙߙd8@  %@߅@%߂8߃8 ߂ߖ@Bb߂@`dB8߂@d^8h$$Sߙd8H  %@ߐ@f/S(CT`N$LCg$RC$ߙXߦߥ ߤRߙHߓ gbߣߙ@b-g %T$ bߙ  %ߙp @ %ߙ  %ߙ % 8ߤ8ߙ  @%߅@ߙ@0%d8 @ % ߙ  %ߙ % @%߅@ߙ@0%d8 @ %߂@dB0 (߂@HdB;Ph߂@p߂@dB:ux$TC߂(Dߙf8` ߓ@ߔ@@%fs8x@ߙ(% @ %@Hߙߙf8` %@%߂(ߙR$* @ %@ߙߙ@@(%g9+ g{$ @ %@vB-$/D#dBߔ@߅@gf)(@0% %%d8P g߂@ߥdW+% ` %ߙh ߤ߅@@0% %% d8Xߥ% ` %ߙh ߤڠ@$KI`(% @ %@߂ߙD@0% f8ߙ@ *Bc@$FR$UR{ߙ$DR\߂(ߢ`ߙXߥߤ dF8@%$B*Buߢ@Mߣbb-T߂߄@Ed:&R.B@ߢh~RR-B\-@ߢ߄@ߙEd08 %ߢߒ(ߙ@g9) DDߙ @%߄@ߙ@0%(% d8ߒ(ߙ@g9) DDߙ @%߄@ߙ@0%(% d8$Hߙ($  %ߢ`߂(ߙ D % Tߙ$= % 0@@%dB@%@%ߙ  %ߙh @%@@%ߙ@g9* ߙp0$(% @ %ߙ % @%@@%ߙ  %^+ߙ  %ߙ  %@ߙ B@ ߂ % P߅@@8%0%d9 %ߙ  %ߤ0@0%@(%ߙ @ߙhB@(%ߙH %ߤ0ߙ@0% @(%$ߙ  %@Hߢ`E$$  %@߂ߙ  %R@ߙHE %T Rߤ0ߙ@0% (%߅@ߙD0%d90 %ߙߙ߂( % Uߙ$= % 0@@%dB@%@%߅@ߙd9h  %@Aߢ W ߄@߂Ed9pߙ $@ߙh @n@%g%PߙߤP8%$ $@<ߙpߥP0  %ߙ % @%@%$ߙߙ  %ߙ0  %*ߙhߙ  %߂;D߇@d/߅@0%d9ߙ ߅@ߙ`d9  %@@%ߙ߂ Rߙp D߅@ߙ@8%0%d9 @ % $$  %@ߙ@ߙЂB@(%ߙH %ߤ0ߙ@0% @(%ߙ  %߇@d0  %R@ߙHE %U Rߤ0ߙ@0% (%  %߃(ߙ0e @ %߂(ߙT$=  %@@%dB@%@%ߙ  %߅@ߙ@8%$d9 % @%ߙX % @%ߙP@bߢ`_$  %(%0%R( @ %߂(D ߙߔ@f: ߕ@@%߂@dW:߂@dV:Hߙߐ@Ff/$=  %@@%@dRߙ(%  %@ߙ@ߢpߙߥxD 0%%ߙf: %(@%(%  %@ ߙ@ߙ߅@0%d:P߂ߙ D߲(f:  %@ ߅@@ߙ@ߥg9*< gRߢdB0%d:߂(P$@߅@ߙd9h  %@|ߙߢ B@ߢ ߂߄@ߙE d9pߙ $C߂ߣPbߙb- Rߙp D߅@@8%@0%td:%%gߙG$$  %@@%ߙU- % (%@@%ߙ@8g9*ߙ8U -0%(% %ߢ ߢ @߄@ߙ@d:g9) $@%߄@ߙ0%(% d:@c$cc߅@ߙd9h  %@&߂xPbߣC*`;ߣߙX ߤ8ߥߙߤg @=@%߂ߙE ߤߙh ߤߙX ` %ߙX ߤߢ  %ߙ %$ $@ %$ ߙ߂ Rߙp D߅@@8%0%d;@ %߅@ߙ d;8@%b-ߙ Dߤ8ߙ @(%b$Bbߢ(@߅@ߙ@0%d;@  %ߢ@ߙ` %8F (%ߙ0  %%ߙߙ`  %ߙg0%`(%  %$C,C`@>ߙߢH@ߤߙ8 ߒx$bߙ  %ߤߙ @%Gߙ$@(%  %$C(@%ߙ @ @%߂߄@ߙE d/ߙ ߙߦ$ $ @(% % 8%Gߙ $ߙ  % ߤec$dB - ܄aߣ$bߐ@f/߾߼߷߶ߵߴ߳߱߰@%߲g %`/ %(-<-$$ g<-gXߙ߈ ߇(0%߄0H% d߿߼gg<-gWߐ8@߂@ߙ߄8 d$߿߼߰g g<-gWT߂@@߅8߄8ߙ@d d߿߼g%C-+`zg<-gVߙx g (08@H $b ߿߂߄@ߙE d/ߙ ߼gPg<-gV\ߙx @ ߿߂߄@ߙE d/ߙ ߼gg<-gV߂߄@ߙE d/ߙ g <-gUߙ@g9)%$( '%@ %d+@߿( ߙ( % @%@ߙPߙ@g9* 0/0(%S - "߿("߼ ߲߱߰S-߳g0g <-gTߙ@%܅g9*<%d( ߙ@@ %g9) @%߿("߼ dB߲߱߰g0ߙx% dLߙx% dKߙx% dJߙx% dIߙx% dGߙx% dFߙx% dDߙx% dCߙx% dBߙx% d@ߙx% d?ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d4ߙx% d2ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dߙx% dg߼߿g Out of memory ucode./uc.outJSON parse failureNot a valid JSON object/usr/bin/env ucodeUsage: %1$s -h %1$s -e "expression" %1$s input.uc [input2.uc ...] %1$s -c [-s] [-o output.uc] input.uc [input2.uc ...] -h Help display this help. -e "expression" Execute the given expression as ucode program. -p "expression" Like `-e` but print the result of expression. -t Enable VM execution tracing. -g interval Perform periodic garbage collection every `interval` object allocations. -S Enable strict mode. -R Process source file(s) as raw script code (default). -T[flag,flag,...] Process the source file(s) as templates, not as raw script code. Supported flags: no-lstrip (don't strip leading whitespace before block tags), no-rtrim (don't strip trailing newline after block tags). -D [name=]value Define global variable. If `name` is omitted, a JSON dictionary is expected with each property becoming a global variable set to the corresponding value. If `name` is specified, it is defined as global variable set to `value` parsed as JSON (or the literal `value` string if JSON parsing fails). -F [name=]path Like `-D` but reading the value from the file in `path`. The given file must contain a single, well-formed JSON dictionary. -U name Undefine the given global variable name. -l [name=]library Preload the given `library`, optionally aliased to `name`. -L pattern Prepend given `pattern` to default library search paths. If the pattern contains no `*`, it is added twice, once with `/*.so` and once with `/*.uc` appended to it. -c[flag,flag,...] Compile the given source file(s) to bytecode instead of executing them. Supported flags: no-interp (omit interpreter line), interp=... (over- ride interpreter line with ...), dynlink=... (force import from ... to be treated as shared extensions loaded at runtime). -o path Output file path when compiling. If omitted, the compiled byte code is written to `./uc.out`. Only meaningful in conjunction with `-c`. -s Omit (strip) debug information when compiling files. Only meaningful in conjunction with `-c`. utplucc%s/*.so%s/*.uc, no-lstripno-rtrimUnrecognized -T flag "%s", ignoring he:p:tg:ST::RD:F:U:l:L:c::o:sARGVSCRIPT_NAME[-e argument][-p argument]Invalid -D option value "%s": %s Invalid -D option value "%s": Not a valid JSON object -The stdin can only be read once rUnable to open definition file "%s": %s Invalid definition file "%s": %s require,no-interpCompile flag "%s" takes no value, ignoring interpCompile flag "%s" requires a value, ignoring dynlinkUnrecognized -c flag "%s", ignoring Require either -e/-p expression or source file [stdin]Failed to open "%s": %s Unable to open output file %s: %s wb#!%s @t( ( (P /     / /p /` /P /@ /0 /  / / . . . . . . . . .p .` .P .@ .0 .  . . - - - - - - - - -p -` -P -@ -0 -  - - , , , , , , , , ,p ,` ,P ,@ ,0 ,  , , + + + + + + +07070100DC2AE90000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/expr../../bin/busybox07070100DC32F4000081ED00000000000000000000000168F513D9000103B8000000080000000100000000000000000000000F00000000usr/bin/iwinfoELF @@8 @@ @ @8 8 8pX X X  ==   h` ` `dtQdtR  /lib/ld-musl-mips64-sf.so.1@(  (  (4  (  (  (  0DXn~    3    P 0  p  p5 0ppp p p,p#poo Poo %,   #$ !& )'("*%+       h  3 3  3 3/ 3p 3`J 3P 3@4 30j 3  3 3[ 2 2 2"S 2 N 2m 2 2E 2# 2p"_ 2`< 2P 2@ 20 2  2__RLD_MAP_init_finisnprintfIWINFO_CIPHER_NAMESsprintf__stack_chk_guard__stack_chk_failiwinfo_dbm2mwIWINFO_ISO3166_NAMESstrncmpstrcpyIWINFO_KMGMT_NAMESstderrfputsiwinfo_band_nameIWINFO_FREQ_FLAG_NAMESIWINFO_OPMODE_NAMESht_secondary_offsetvht_chan_widthiwinfo_htmode_nameiwinfo_typeiwinfo_format_hwmodesglobglobfreestrrchriwinfo_backendiwinfo_backend_by_namefprintfiwinfo_finishstrcmpIWINFO_HTMODE_NAMES__register_frame_info__divdf3__floatsisf__deregister_frame_info__extendsfdf2putchar__libc_start_mainlibuci.so.20250120libubox.so.20240329libubus.so.20250102libiwinfo.so.20230701libnl-tiny.so.1libgcc_s.so.1libc.soGLIBC_2.0GCC_3.0~ ii y&Pg߼߿g gp<-$xh`XPgs ߂߄@ߙ`Ed; $߿x߼p߳h߲`߱X%߰Pg$*%߄@ߙ0ߒ@g`8%0%(%d<% fR)ߢ"+@ߢߙ ` %%C-ߙD $/@ ߙdP  %@@ %@% (%ߙ $ f1*"ܤ@8%ߙ @ @%߅@d<߂ߙD $"ߙ߅@ߙd< @ %@$p9  g@ߤߙ  Cb @0%ߙ@$g9! %ߙ ߿x߅@d<ߙ @A@ %߅@d<ߙ@g9)ߙ@܄g9%ߙ@g9(ߙ@g9#ߙ@܄g9!ߙ@g9ܙg @@%߄@ߙ  d=ߒ@ߑfR=@$b0B@ߙ% @ %&f1ߙ $ $"$B0C,c`߃@0Bdc=Pb-B\-@%@/ %(-<-$$ g<-gn ߙh߈ ߇(0%߄0H% d߿߼gg<-gmߐ8@߂@ߙ߄8 d$߿߼߰g g<-gmt߂H@߅8߄8ߙHd d߿߼gg (<-gm ߐ8߆@ߙpd3fP $߿(߼ fP߰g0g@<-glߐ8(ߔ@fHߒ80 H%%%f4$ 30B@ߙF % (%-&16fR߿H߼@߶8ߴ(߳ ߲߱߰%ߵ0gPg``<-gk`@ߓhܙ`0%b`8g %g %`h`X`P`H`(` @߄@@% @ g߄@ߙ  d4ߣ`bb-߿`hߙ Y@  %@$YHg  %@ߑ@ߒ@ߕ@f14fR4 *@f` ]-Bb %@%ߙP! ! &ߙ@8%0%(% f4@ꏢ ߼``߶`Xߵ`Pߴ`H߳`@߲`8߱`0߰`(g`pg`X<-gj`Hߖhܙ`P`g%` g%(% %`h```@`8`0`(` @ %߄@ߙ  d4Xߣ`b-߿`hߙ 9`(%  %@ߔ@`ߕ@ߒߞ@f4f4Q % (%D*`-e$Bߙf$`(%  %(%ߙ( 2(::0% g4fR߾``߼`X߷`P߶`Hߵ`@ߴ`8߳`0߲`(߱` ߰`g`pg<-gi@ߐ8߆@ߙp8%d4$# f (߿߼f (߰g ߅@ߙd4 f (߿g<-gh ߐ8߅@ߙd4 f߿߼f߰g ߆@ߙp8%d58$ f߿g<-gh( ߐ8߅@ߙd4 fp߿߼fp߰g ߙ ߙp @ %߃@ߙxe= @ %߆@ߙp@8%d4$  fp߿g<-gg ߐ8߅@ߙd4 f0߿߼f0߰g ߆@ߙp8%d4$  f0߿g<-gg ߐ8߅@ߙd4 f ߿߼f ߰g ߆@ߙp8%d4$  f ߿g<-gf ߐ8߅@ߙd4 f߿߼f߰g $@$d߆@ߙpd4$ 8@f @߿g <-gf ߒ8%(fR߅@ߙd4 @ %߿(߼ ߳߱߰@%߲g0ߙ@g9 $P߆@ߙp$P@8%d4 @ %B-b(#0C ` 0C߆@ߙpd4  %`0C߆@ߙpd4  % ߿(߆@" -(/(d4ߙp e(#`#0B߆@ߙp % d5߆@"-2(/ ߙp( %d5  e(#߆@"-2(/ߙp(d50e(#  %߆@" -(/(d5@@߿( ߆@ߙpB %@! d5P߆@"-2(/ ߙp(d5he(#  %߆@" -(/ (d5xgH<-XP@80(  gc߅@d4߄8ߙ d@%@660C$dߐ8ߙ@g9l $߆@@8%d5ߙp$f ߿X߂8߾P߼H߷@߶8ߵ0ߴ(߳ ߲߱߰dBg`0C` 0Bߙ@g9l $߆@@8%d5@߿Xߙ@g9l $߆@@8%d5W߅@%%$d(0$B$cfd((B@>߄8߅@ߙߐ8d5d fߒ@%$fR5ؒ#$FC0c`$S@-ߙ %@(% ft`%ߔ8ߖ@>ߕ`ff%f5$~0B@ߙަ@ % (%B-&swf@$"ߙ@ %g9l 0߅@@8%ߙfd5 %d߅@ߙ %d5 f`%߅@fd6g` <-ga `ߐh`(`%`g߂߄@Ed6ߙ` ߣ`b߿`(ߙ %  (%@ߙ ߂߄@Ed6  %߼` ߱`߰`g`0g`X<-g`d`@ߕh`Hޢg%g %(%`h```P`8`0`(` `` @ @%߄@d6(ߙ  ߣ`ޢbH߿`hߙ @?ߓ@ߔ@ߗ@fsf"*@р- %`% &1% @%f  @%߄@ @(%ߒ@ߙ@#@8%0%d6` fR@% f(߄@ߙ@(% d6@% f4߄@ߙ@(% d6ߙ@g9 d߄@ߙ@(% d6ȏ߄@d6H߾``߼`X߷`P߶`Hߵ`@ߴ`8߳`0߲`(߱` ߰`g`pg``<-g^`xߖhܙ`H`8%g8`Pg0%@(% %````p`h```X @0@ g4߄@ߙ  d6ߣ`8bX߿`ߙ 90  %@߂@$4߂@%dT4߂@dB4 ߂@(0B*@ߢR-$4D%߷ ߢ(dY $ߙ @@%ߐ@f4ߙ@g9 $> &߂@ߑ8dB4ߕ(%f1$b^$@ߙަߥ  %"-&s$ bf߉8$]" e)߄@ߙߨߦ8%(%d7 &R0߉@e)8߾`߼`߷`߶`xߵ`pߴ`h߳``߲`X߱`P߰`Hg`g`h<-g\``Xߖh% %`gg@(%`x`p```P`H`@`8`0`( @ @%߄@d7xߙ  ߣ`b߿`xߙ @߂@߄@d7߹Q-  %ߙ@0%`(% f7% f߄@ߙ@(% d7Ȟ(ߙ@0߂g9C- ^,ߙ @%@@%ߒ@fR4ߙ@g9 -߄@ߙ@@%@8%0%(%d7 ߞ@4ߙ@$g9 ߕ85ߙpg58$fP @%g58ߞ86ߙp$ g@߄@ߙg@fP@(% d8 ߙ@g9L f8߄@ߙ@(% d8H߄@ߙ  d8h߄@@ߙ d8A߂8C-߄@Eߙ d8B,C`E߅@߃Xxb-B$C;$Cd4߅@d70ߒ@ߙ fD8D@&ߙ߄@ߙ  d9߄@Dߙ d90߄@Eߙ d9`C,C`0߅@߃xb-B$C",C`$(C!$PCd4߅@d7`ߙ fD8ߙ$ &1H &s"*@YߢJ߅@d7(d4$C ߅@d7P߅@d7H߅@d7h߅@d4ߔ@dBߗ@$f ߾`p߼`h߷``߶`Xߵ`Pߴ`H߳`@߲`8߱`0߰`(g`g<-gXhߖhܙg %`(%% % (08@ @ߙ@ ```` ` %g9  ߒ8߄@ߙ@0%(% d99fE   %@߅@ߙd9 fD ߄@ߙfE d9 g9@(%  %@߂C-ߗ@ߞ8ߙpGf4$ g9@(%  %@ߔ@$f% 90@(% % @ߙ@$g9 9@(% % @%@ߙ$ @@@%߈@e4߄@ߙߦ8%g d99  @(%  %@%$ ߄@ߙ@(% d:(9(@(%  %@%$ ߄@ߙ@(% d:H9H@(%  %@9@g % ߔ8@߅@C8!C!A߅@ߙd4 f`9h@(%  %@$ߕ8߅@ߙd4 fP9p@(%  %@$ߞ8߅@ߙd4 g@߄@ߙg@fPf` d:P9X@(%  %@ߙ@g9 9`@(% % @%@ߙ@g9  ߄@ߙ@0%(% d:9P@(%  %@$ߙ@g9 ߄@ߙ@(% d:9@(% % ߙ@@Rg9L % ߄@ߙ@(% d8Hߙ@  %@@%ߔ@f49@(%  %@߅8$ߙx$d ߕ8@߅@ߙd4 f߄@ߙf(% d:9`(% % ߓ8@\(@" ߅@d:ߙ fd0.ߔ8߆@ߙpd4$ f`g9h߆@ߙpd58$ fPo9p߆@ߙpd58$ g@w߄@@ %"$& %ߙp@H%*`P%@)߆@`($߆@`@%@8%d: fd0ߔ89f  %@߅@ߙd4 f߄@ߙfe0fd;  ߓ89H@(%  %@߅@d4ߙ fd߄@߆@$d; fd0ߔ8߅@d4߅@߆@ߙpd;@$  fd߄@ߙfed;H ߓ898@(%  %@ ߅@d4ߙ fd߄@d69߅@ߙ ߙp @ %߃@ߙxe= @ %߆@ߙp@8%d4$  fd߄@ߙfe d;h9x@(% % ߒ8@߅@ߙd9 fD9ߑ8 % f%h@f&h߆@d9߄@ߙfE d;ߣb߿ߙ d6@ ߇@߇@d9ߙpf4$ fD9d9߾߼߷߶ߵߴ߲߳߱߰gߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d#ߙx% d!ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dߙx% dg߼߿g %02X:%02X:%02X:%02X:%02X:%02X%s, * No TX power information available%s%3d dBm (%4d mW) No country code information available%s %4s %c%c "%s"unknown%.3f GHz%d dBm%d.%d MBit/s%s, MCS %d, %dMHz, VHT-MCS %d, %dMHz, VHT-NSS %d, HE-MCS %d, %dMHz, HE-NSS %d, HE-GI %d, HE-DCM %d, EHT-MCS %d, %dMHz, EHT-NSS %d, EHT-GI %dWEP Open/Shared (%s)WEP Open System (%s)WEP Shared Auth (%s)mixed WPA%d/WPA/%s/ %s (%s)noneNot supported Phy not found No information availableNo station connected%s %s / %s (SNR %d) %d ms ago RX: %-38s %8d Pkts. TX: %-38s %8d Pkts. expected throughput: %s No frequency information available%s %s (Band: %s, Channel %s) %s 20 MHz40 MHz or higher160 MHz80+80 MHz80 MHz20 or 40 MHzScanning not possible No scan results Cell %02d - Address: %s ESSID: %s Mode: %s Frequency: %s Band: %s Channel: %s Signal: %s Quality: %s/%s Encryption: %s HT Operation: Primary Channel: %d Secondary Channel Offset: %s Channel Width: %s VHT Operation: Center Frequency 1: %d Center Frequency 2: %d yesno?%-9s ESSID: %s 00:00:00:00:00:00 Access Point: %s Mode: %s Channel: %s (%s) HT Mode: %s Center Channel 1: %s 2: %s Tx-Power: %s Link Quality: %s/%s Signal: %s Noise: %s Bit Rate: %s Type: %s HW Mode(s): %s embeddedUSB %04X:%04X%04X:%04X %04X:%04X Hardware: %s [%s] %d dB TX power offset: %s Frequency offset: %s Supports VAPs: %s PHY name: %s Usage: iwinfo info iwinfo scan iwinfo txpowerlist iwinfo freqlist iwinfo assoclist iwinfo countrylist iwinfo htmodelist iwinfo phyname
/sys/class/net/*No such wireless backend: %s pathUnknown command: %s No such wireless device: %s No HT mode information available%s ThDx 4@@  P[802.11 3     3 3 3 3p 3` 3P 3@ 30 3  3 3 2 2 2 2 2 2 2 2 2p 2` 2P 2@ 20 2  207070100DC2B010000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000F00000000usr/bin/resize../../bin/busybox07070100DC2AF30000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000B00000000usr/bin/id../../bin/busybox07070100DC2AEA0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/find../../bin/busybox07070100DC2AD00000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000A00000000usr/bin/[../../bin/busybox07070100DC2AF60000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/less../../bin/busybox07070100DC3E0A000081ED00000000000000000000000168F513D900010230000000080000000100000000000000000000001100000000usr/bin/luci-bwcELF @@8 @@ @ @8 8 8pX X X  11  H` ` `00dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( (     .       p p5  ppp p p=p#poo Poo %= 1;% $ 9+ # (5' 80&!/.")6,*-3<247:        .P - - -C -: - - - -p -`z -Pq -@jA -0c - [ -V - ,O ,J ,H ,B ,9 ,3 ,- ,# ,p ,` ,P ,@  ,0. ,  , , + + +Q" + + + + + +p +`i +P +@ +0 + $" + + *| *p * *__RLD_MAP_init_fini__fixunssfsi__register_frame_infostrlen__mulsf3memset__deregister_frame_infomemcpysigemptysetstrerrormemmovesnprintfmunmapgetpidfscanffgetsglobperrorsleepreaddirmmapdlclose__stack_chk_failwritefprintfkillchdirstrstrdlopenunlinkforksscanfsigactionfreaddlsymstrtoullfopengetoptfclosetimeopendirstrcmpstderrglobfreestat__errno_locationexitatoi__libc_start_mainclosedirmkdiroptarg__stack_chk_guardlibgcc_s.so.1libc.soGCC_3.0GLIBC_2.0 y&P iig߼߿g g0<-gpܣ߂8 ߔ88(%%C%$R*@!ߑ@$lf11P$r$cߙ 0%(% @ %A߅@߂ ߙhD @% 8% 0% d1`߿8߼0ߵ(ߴ ߲߳߱߰$g@-ߙD&1 fs"!S2(Cm`U"$iC߂Dߙߙ@g9$x߿8߼0ߵ(ߴ ߲߳߱߰ g@T $tC߂ߙ D߃8b߂Dߙ@g9&ߙ@g9'߿8߼0ߵ(ߴ ߲߳߱߰ g@ߙ@g9)0%P/ %(-<-$$ g<-gmߙ߈ ߇(0%߄0H% d߿߼gg<-glߐ8@@߂x@ߙx߄8 d$@߿߼߰g g<-gld߂@߅8߄8ߙdH d߿߼g< -dl܂8C܂8Cgp<-gkPߓhb`XH@8x%%( d$/$/$"@ߙx %$$ $<@ @%%ߙp@0%(%  %@&1 ߙpߙ`  %%T ߙh$ % @ߙ BV$5f1$ߤ(c߿xߙ ߼p߶hߵ`ߴX߳P߲H߱@߰8gg<-gjߙx$%(% %@@@%$ => return bytes from getrandom() Not outputting random to a tty Invalid param (must be > 0) getrandom() failed: %m write() failed: %m   P      p ` P @ 0   07070100DC2AFE0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000F00000000usr/bin/printf../../bin/busybox07070100DC3F970000A1FF00000000000000000000000168F513D900000012000000080000000100000000000000000000000C00000000usr/bin/ssh/usr/sbin/dropbear07070100DC2B120000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000F00000000usr/bin/uptime../../bin/busybox07070100DC3F950000A1FF00000000000000000000000168F513D900000012000000080000000100000000000000000000001300000000usr/bin/ssh-keygen/usr/sbin/dropbear07070100DC2AF90000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000F00000000usr/bin/md5sum../../bin/busybox07070100DC2AD40000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001100000000usr/bin/basename../../bin/busybox07070100DC2B0E0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/top../../bin/busybox07070100DC2AED0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/free../../bin/busybox07070100DC2B030000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000F00000000usr/bin/setsid../../bin/busybox07070100DC2B040000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001200000000usr/bin/sha256sum../../bin/busybox07070100DC28D1000081ED00000000000000000000000168F513D900010118000000080000000100000000000000000000000F00000000usr/bin/fwtoolELF @@8 @@ @ @8 8 8pX X X  ""  0` ` `00dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( (   H      p  f p p5  ppp p p'p#poo (oo %'#  "  $& %!      H&  .  '  5  L > @  `  J 8Q V @        p ` P @2"p 0f  _ J Q "X__RLD_MAP_init_finifree__register_frame_info__deregister_frame_infomallocmemcpystdoutfflushftruncate__stack_chk_failfprintfstdinfreadfopengetoptfclosestrcmpstderrfwritefileno__libc_start_mainfputsoptindoptarg__stack_chk_guardlibgcc_s.so.1libc.so_fdata_start_data__start_ftext_start_c__bss_start_edata_end_fbssGLIBC_2.0 ii\g߼߿g g@<-gs߃8<xܳp%h%dc(%4ƃ $%$0D # $|BC$&$dcbߖ@ߕ8ߔ@f ffߙ0% (% @ %$C߂BR*@M߄8߂߅@Dߙ`0% d $$$iC7(Cj` $s$SC$TC6$IC$߂ %EC&$tC($qC߂8$ҠC$߂߄8Ed% @@%߂8Dߙ ߂8Dߙ ߂8D%ߙ "߿0%0%߂8$C߂8$CCߞ8`߃8c`߂8B@$߂߄@ߙhE d!$߿߾߼߷߶ߵߴ߲߳x߱p%߰hg"-@$ߙ@g9l @%ߙ@(%g9g88ߕ8HPX @@ ߂8B@~߂߄@Edߙh vߗ8` ߃cC ߙ߂8B@k߂߄@Ed" ߙ 4@b@%߂ߖ8߂@$dB|ߴH@ ߰PߢߙG4$  %H2P߹` %4 (%@%ߤHߙާ4 $\b!\4CޯX߂@dB(<FW$Bx0,߂@dB|ߥ߹gH$  %@8߂8B@5߂߄@Ed"Pߙh %$ߙ 4H,CߥP߂8B@߂$~$߄@ߙhE d"x$D<& @%߹` % 4@ %X߹ ߥH4߂8B@߂%^$` %߄@Ed"B*@ ߹߂8B@߂߄@Ed" %@0%  (%@ @%߂8B@߂߄@Ed"@@*$$@(% %ߙ `2ߙx ޤ\ߙ @ %A'@%߂8B@ߙ`߂߅@Dߙ dߙ`  %ߙ` ߤHߙ` ߤP߂8Cq߂8G\ߣ C!$B\"&@e&$f$%@ߙ`ߤP߂ߙG4 $ߤH߂ߙGX $`ߙ`߂ߙS@(%`8% % $ߤߙ`8%$ $$%P/ %(-<-$$ g<-gjߙp߈ ߇(0%߄0H% d߿߼gg<-giߐ8@@߂@ߙ߄8 d$@߿߼߰g g<-gid߂@߅8߄8ߙdH d߿߼gg<-gi%߅@ߙd0 %@ ߂߂B߿߼߱߰g ߂@߂@dE ߙ  %@߿߅@ߙd8  %߿dE(g<-gh\߃8b%A %f@ߙ@߂8B@$߂߄@E dF߂8B@ $߂߄@Ed@ߙh $߿߼߰g 8g9 0,B<8-dg%8|0-ddb&0c-c|Bb&g<-gg<ߙ@@%g9| ߿߼ggP<-gfHߖ8ߔ@@0( X%%%%gfߙ8%$$ @ %H  %)#  0% I!@(% %%  ߙ`8%$ (% @ %ߙ$ߤ߿Xߙ ߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`g0 <%܅-8( ge$߿8߼0ߴ(߳ ߲߱߰g@%% *`0%D0 %F#t/ߙ(-r - @%T#t#@ ߙ` 4@$ߙQ/ 0%(- ` %R#r#@ ߙ` 4%g`<-gd8ߒ߅@Bߙ<FWdBx1 Options: -S : Append signature file to firmware image -I : Append metadata file to firmware image -s : Extract signature file from firmware image -i : Extract metadata file from firmware image -t: Remove extracted chunks from firmare image (using -s, -i) -T: Output firmware image without extracted chunks to stdout (using -s, -i) -q: Quiet (suppress error messages) Cannot append/extract metadata and signature in one run Cannot truncate file when reading from stdin unable to extract trailer header Data not found CRC error Size error unable to extract trailer data   P  H           p ` P @ 0     07070100DC2B150000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000E00000000usr/bin/which../../bin/busybox07070100DC2B0C0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/test../../bin/busybox07070100DC2B0F0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000B00000000usr/bin/tr../../bin/busybox07070100DC2AFB0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000B00000000usr/bin/nc../../bin/busybox07070100DC21CA0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/ldd../../lib/libc.so07070100DC2AD80000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/cmp../../bin/busybox07070100DC2B020000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/seq../../bin/busybox07070100DC34270000A1FF00000000000000000000000168F513D900000010000000080000000100000000000000000000001100000000usr/bin/dbclient../sbin/dropbear07070100DC2AEB0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000E00000000usr/bin/flock../../bin/busybox07070100DC2B130000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000B00000000usr/bin/wc../../bin/busybox07070100DC2AD20000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000B00000000usr/bin/[[../../bin/busybox07070100DC2AD90000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001000000000usr/bin/crontab../../bin/busybox07070100DC34280000A1FF00000000000000000000000168F513D900000010000000080000000100000000000000000000001400000000usr/bin/dropbearkey../sbin/dropbear07070100DC283E000081ED00000000000000000000000168F513D900010380000000080000000100000000000000000000001300000000usr/bin/jsonfilterELF @@8 @@ @ @8 8 8pX X X  S S ( ( (Xp p pPPdtQdtR( ( (/lib/ld-musl-mips64-sf.so.1@(7E  `  D 0 8     p p5 ppp p pIp!poo  oo CI>54-&. #'?B " 6: )+$;%GD@* 902!(<,7/1E38=HACF  2L\   `V @M  %80  0d    }  2  D  #Dr  2 ,a  $`i  88dB D" D Dx( Dh DX DH D8 D( D/ Di C C C C0 C@X C CG C@ Cx Ch CXN CH C8U C( C\ C) B Bb Bi Bo B B B Bw Bx" Bh BX BH B8 B( # B Bx" A AX Ao A Ax A} A A Ax__RLD_MAP_init__calloc_a_finifputsstrlen__errno_locationstderrstrcmpfclosememsetfopenstrdupfreadstrncmpfprintfcalloc__stack_chk_failmallocmemcpy__stack_chk_guardsnprintfstrcpyjson_object_get_objectjson_object_to_json_stringjson_object_get_int64json_object_array_get_idxjson_object_array_lengthjson_tokener_parse_exjson_tokener_newjson_object_get_intjson_tokener_freejson_object_new_arrayjson_object_object_get_exjson_object_get_booleanjson_object_get_doublejson_object_get_typejson_object_get_stringjson_object_array_addjson_object_putjson_tokener_error_descjson_tokener_get_errorstrerror__register_frame_info__deregister_frame_infoputcharisxdigitstrtolstdinregcompgetoptregexecisalnumfputcexitatoi__libc_start_mainregfreeoptarglibubox.so.20240329libjson-c.so.5libgcc_s.so.1libc.sojp_parsetokennamesjp_freejp_matchParseAllocParseParseFreejp_get_tokenjp_alloc_opGLIBC_2.0JSONC_0.147 ii(g߼߿g g<-gn߂(B $H(ܩ߄8ߙ` @% 8% 0% (% dE8߲ @2ߢ R0ߙ` @ %-߿(ߢ(߄8Iߙ` @% 8% 0% (% dE8`ߙ  ` %ߐ߅8ߙ dJ@$@%ߙ߂( QߙP D߅8ߙ@8%0%dJ  %$}`߿(ߢ߾ ߼߷߶ߵߴ߲߳߱߰g0߂B8ߙxߦpߥ( ߤH@%$$F &,C`ߣx|Bb-B\-@߂B@ߤCC ߂ߙ D`߂ߙ8ߧ0ߥ8gg9 @ %@ @%߂(߅8ߙߦD dJ$~߂ߙ@^  %@ @%߂(߄8ߙE dK$B@d߆8߂(߄8Pߙ(% dK"$CO(C`!$C%$CF(%ߖ8ߗ8ߕH$%fE(fE"0B@ߙަ(%(   %%&$ fߙ(% $ ߅8$C(%߄8dK߄8(%dK(ߙ ߅8ߙ0%dK % %߄8ߙ(% dK"*@(%߄8ߙ dK@ߙP  %ߢ@@cߙx$߄8dK@߄8(%dKhߙ$- &"g$ߙX8%d!`(% $ @"D%U $tBߴ߅`ߙ $8d gߢߙ`߄8(% dKߴߗ8ߞ8f$fEgKf@ߙ`  %ߙ:߄8ߙx $ ߢTdDfdߙ ނ %dTބ &g|BdBPC-Eߙ`  %ޔ%f⯠ߙ ߤ߄8ߙ`(%dK @%߂8ߴdBNh߂8fdW"ߢ<ߙ ބ,C`@ ߙޔ&fVߙhބބ ߙ @ %ޔ߂(ߙ` D:ߙx$60߂8߲ dBE0<4B߂88dBLp߂8%dBN 0$x%p/ %(-<-$$ g<-gcߙ߈ ߇(0%߄0H% d߿߼gg<-gbߐ`@߂@ߙ߄` d($߿߼߰g g<-gbT߂(@߅`߄`ߙ(d d(߿߼gg@<-80( Hgb%%%%%%$ߙ0`(% @ %ߙ0@ % @%@  ߙ (%  %B b-/V߿H߼@߶8ߵ0ߴ(߳ ߲߰ %߱gPgh<-ga$`ߗ0ߙHPH@8(xpX0%%%% @%$@ `ߙX @@%ߙh @ %߂8dBD%ߣbB߿xߙ %ߙgߖ8gf$ߙߤ8%$ $@@8%ߨߦ (%% @ %@%@`ߙh   %ߙ80%g@8% (%g9 @ %@%ߙh @ %@1 $CߙH$ ^ߙh߾p߼h߷`߶XߵPߴH߳@߲8߱0%߰(gg<-g_4ߙ%%$ $@dDQPCd߿߼߱߰g g<-g^@%$BF -$" $'$ ߙx ߄8dDߙ` ߿$B߼߰g ߄8dE߄8dEg <-g^ ߙxߑ8%$'($' f1E ߙx $'߿(߼ ߲߱߰g0ߙ`  %f fg@<-80( Hg]l%%%%PX`hߙ %gdFߙ8% $0@ @%߂(߄8ߙE dKߙ $(%0%T S(ߙpߤ  (% gPC`dD߿HB߼@ߴ8P߳0߲(߱ %߰gp@%@(%B@g<-%܄g\( ߙ  %߿߼߱߰g  ܑ %g@<-g[ߙH0 8( %ߙ$ $ @ ߙh%߿H߼@ߴ8߳0߲(߱ %߰gP߄ @%@@%g  0%ߙp8%0%(% @ % ߙxߙ`(%  %@0% Aߙx߅ @ %߿Hߙp8% @ % ##C!c-ܮ$,C` ,C@i܂dCF$B$`4(B@Z$܃dbG%b0?$B܂dC$0%C+`<(B@C$܃dbG%b܇$Bd$|)C%0?$B܂dG4cC+@(B@#܂dC$C܇$Bd$b%܇$cd|)b%0?$c܃0%dgf%g0<-gXߙ( %%g$ 8 %ߣp ""$߿8߼0߲(߱ ߰g@B(p/g<-gXPߗ0ߙpg%%%(%$` %  %f"`%$_ߙP  %@ߢ߅8ߙ@dLP ` %@ ߅8ߙ@dLX ` %@ߙ8Bt,BB($B/ ߢff/P!$ߤ ߿ߙ fϢ ` %B ߾߼߷߶ߵߴ߲߳߱߰gg<-gVߗ0ߙp( gH d%(%$@ % ߢ%@$<߂8%dBN(g<߂8dB&h@;$`$\$uCZ$xߙ  %@ߙ ` %@ߙ @ %@ߙ  %@*"a@%*"A&1*ba@'&s*Ba@)3!&R*a@+2!&ߥ߹60! g@@*ff/!$ߤ߿(ߙ @&1&1*bA@&s&s*BA@&R&R*A@&&%C+$FЂߙ  %@>ߙ @ %@9*"a@*"A&1*Ba@&Rߥ߹20!g@ @f@&1&1*BA@&R&R0,c`.<$0,c` ߙ8$cD0!D!0d,g<C0!C!(B@g@/!$g9&hg9&h g@@fg8% 0%g<-% %$ gGf%$bߙ 8%0%ߙX @ @ %%߿߼߰g 8%0%@(%ߙ8߿߼(%߰g98@ g (%$0 %$g <-gGߑ0("،$B,C`߃8|BdcR@b-B%\-%%%@%ߔ8܆f9,g8`(%% @ %@gh(%F`(%% @ %@h8b(C`$(B@`C#$c,d߄8|cdR-c|-`Cߙ@ߥ ߤX(Bߤ#߿(ߙ *'(B+ߔ8܆f9,g`(%% @ %@%g8F`(%% @ %@$C/$8C$C&$C%`@#ߐ8ߐ8fLPߥ(0ߙgh @ %@ߙX(%@%8%0% @ %ߙ@ % @%.߆8ߙ@`gdK$  %ߥ(߰XfLXC$C&$C%0@#ߐ8ߐ8fLP8$C*(C`$C $Cq߆8ߙ@g`dK$ @ %$ @(%߆8ߙ@0gdK$  %䏢8߰(fLX$CVߥX``@$ ߅8dLPߥX$ ߅8dLX8%0%ߙX  %j+8%0%`(%ߙ8g99 ܄0B_8Bߖ8ܐf9@%X$8%`0%@(%%  %@P%ߖ8ܐf9 @%8%`0%@(%%  %@A$ߙ@܄  (%8,B(G&߼ ߶ߵߴ߲߳߱߰g0gpx<-`XHphP@8gBp%%%((%% %@%߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@%߰8g$%C%$C$ C,ߙߙ% g( @ %@ߦ(%@%8%ߙ8$g9> `(%@%ߙ %$b%0(ߙ8ߙ @ %P!ߙ8(% @ %(ߦ(@%8% %$C0$C%ߙ@ % %%@%߂8dB9߂8dB>ߢ*@ߙ8(% @ %߹@%8%@0%`(% % @%@ %$߹@%8%0% `(%@*%f@%ߙ@ % ߖ8ߗ8R%f9f>@$^H0%`(% %% R@ %$@%8%0%% `(%@%@%@%fߙx% dHߙx% dGߙx% dFߙx% dEߙx% dDߙx% dCߙx% dBߙx% dAߙx% d@ߙx% d=ߙx% d<ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d3ߙx% d2ߙx% d1ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dg߼߿g Out of memory'"'"'"\ '"'"'Expecting %s or %s == Usage == # %s [-a] [-i | -s "json..."] {-t | -e } -q Quiet, no errors are printed -h, --help Print this help -a Implicitely treat input as array, useful for JSON logs -i path Specify a JSON file to parse -s "json" Specify a JSON string to parse -l limit Specify max number of results to show -F separator Specify a field separator when using export -t Print the type of values matched by pattern -e Print the values matched by pattern -e VAR= Serialize matched value for shell "eval" == Patterns == Patterns are JsonPath: http://goessner.net/articles/JsonPath/ This tool implements $, @, [], * and the union operator ',' plus the usual expressions and literals. It does not support the recursive child search operator '..' or the '?()' and '()' filter expressions as those would require a complete JavaScript engine to support them. == Examples == Display the first IPv4 address on lan: # ifstatus lan | %s -e '@["ipv4-address"][0].address' Extract the release string from the board information: # ubus call system board | %s -e '@.release.description' Find all interfaces which are up: # ubus call network.interface dump | \ %s -e '@.interface[@.up=true].interface' Export br-lan traffic counters for shell eval: # devstatus br-lan | %s -e 'RX=@.statistics.rx_bytes' \ -e 'TX=@.statistics.tx_bytes' rFailed to open %s: %s Failed to parse json data: %s Out of memory Syntax error: Unexpected character String or label literal too long Invalid escape sequence Unterminated string In expression %s Near here ----^ export %s=%s; %d%ld%fahi:s:e:t:F:l:qnullbooleandoubleintobjectarraystringtruefalseEnd of file'&&''||'',''=''!=''>''>=''<''<=''~''!'Label'$''@''.''*''['']'BoolNumberString/.../'('')' <=>=!=&&||.[](),$@<>=~!*/'"_azAZ-09$ $8tT @LXdp|HPxxx,PtH  !""#$$%%%%%%%%&&&&&&&&]]]]]]]]]]]]]]>=<;]T]]JGD]]]:FSRQPON\[ZLIYXWVUMKHEC@BA?942.-,%)'8850111137LJ   & !"#$%& !"#$%&%&&!"#$%&#$%&  &&&&''&'& 8$)-,+*$.(' $2$$1('$/%$('0'^5$433$$$#$&$7"! _6__llllllpx\@ThT\`4  P E0 M0 M8  M@ MH MP MX M` Mh Mp Mx M M M  M M M M M  M  M M M /` M *8 M *8  M (  M (  N ( N (, N (, L L  L( L0 L8 L@ LH L` Lp Lx L L L L L L L L L L L L L L L L M M M M M  M( D `   %8 @ $ 8  2  2 2L 0 # D D Dx Dh DX DH D8 D( D D C C C C C C C C Cx Ch CX CH C8 C( C C B B B B B B B B Bx Bh BX BH B8 B( B B A A A A A A A A Ax07070100DC2AD30000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/awk../../bin/busybox07070100DC2AE50000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001000000000usr/bin/dirname../../bin/busybox07070100DC2ADA0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/cut../../bin/busybox07070100DC2AF00000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001000000000usr/bin/hexdump../../bin/busybox07070100DC2B110000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/uniq../../bin/busybox07070100DC2B060000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001000000000usr/bin/strings../../bin/busybox07070100DC2B000000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000E00000000usr/bin/reset../../bin/busybox07070100DC2B050000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/sort../../bin/busybox07070100DC278C0000A1FF00000000000000000000000168F513D900000005000000080000000100000000000000000000000C00000000usr/bin/uccucode07070100DC2B210000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/yes../../bin/busybox07070100DC3F8F0000A1FF00000000000000000000000168F513D900000012000000080000000100000000000000000000000D00000000usr/bin/wget/bin/uclient-fetch07070100DC2AFC0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001100000000usr/bin/nslookup../../bin/busybox07070100DC2AEF0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/head../../bin/busybox07070100DC2AFA0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000F00000000usr/bin/mkfifo../../bin/busybox07070100DC2B160000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000E00000000usr/bin/xargs../../bin/busybox07070100DC2AF50000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001000000000usr/bin/killall../../bin/busybox07070100DC2B090000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000001000000000usr/bin/taskset../../bin/busybox07070100DC2AFD0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000E00000000usr/bin/pgrep../../bin/busybox07070100DC284F000081ED00000000000000000000000168F513D900010220000000080000000100000000000000000000000E00000000usr/bin/usignELF @@8 @@ @ @8 8 8pX X X  Z`Z`  8` ` `@@dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( ( 1ES  H  O@    @  G p p5 ppp p !pNp#p,oo (oo CN#.'!579J+, 1(6*$2=/&0- )?;%38MHC@AIKD<"4E  :>G B FL   6H  0  #HLI  ?$    "P  +  'xx  <   )4  H    EU  3H      Ll  (   #D Z   #L 0L  8  1(  $0\   O@7  >(`h  ([  $  8`D+ 02    %  <x  /Xx  & X,  8  :X7 0  &h O  O O N N? N N N N) N" N Np N`  NP N@ N0{ N  N'"c N M M M Mt M M"Q M M__RLD_MAP_fini__register_frame_info__deregister_frame_info__libc_start_main__stack_chk_guard__stack_chk_failmemcpystdinfopenstdoutstderrfprintfexitfwritefputsfclosefgetsstrchrfreadb64_decodememsetfstatmmapmunmapb64_encodeperrorfeofsnprintfgetoptoptargstrlenstrcmpsprintflibubox.so.20240329libgcc_s.so.1libc.sof25519_normalizef25519_mul__distinctf25519_subf25519_addf25519_neged25519_addf25519_inv__distinctf25519_onef25519_sqrtsha512_addsha512_finaled25519_baseed25519_smulted25519_packfprime_from_bytesfprime_muledsign_sec_to_pubedsign_signed25519_try_unpacked25519_projectedsign_verify_initedsign_verifysha512_init_fdataed25519_unprojectf25519_eq_start_dataf25519_load__start_ftext_start_cf25519_select__bss_startfprime_addfprime_select_edata_end_fbssGLIBC_2.0E ii=g߼߿g gH<-gl8ߕ0ޢߑ@ߔ@P%@( X%%%f1S$fTߙ 0%(% @ %S $B,C3`|B-B\-@ߑ8"@l߂8$BC,C`|$C$C߂8߂`߅@ߙD dO$ޣX%߾P߼H߶@ߵ8ߴ0߳(߲ ߱߰g`߂C߂8C߂C߂8Cp߂8$C߂C߂8C߂V߂C߂8C߂8C`$C߂8C`$C߂C߂8Cx߂8C`z$C߂8C`r$Cߙ8  %߅@dB:8ߙp/dT % %@Pߙh߅@0%dT@ @ %2$C߂8Bp@߂8B@ߙ@g9J Bp@|߂`x"@vߙ@g9B  %{߂8B@5߂8kߙ@g9G  %p߃8߂8dBp#+ ++D!C!$Cߙ@߂`߄@QߙX 8%$($ dTH߅@ߙdO  %R$g9! M߂`߄@ߙXG$4$ dTC$Bx@߂`8߅@ߙ@g9 ߙ %`/ %(-<-$$ g<-gfߙ@߈ ߇(0%߄0H% d߿߼gg<-geߐ80@߂@ߙ߄8 d$0߿߼߰g g<-geT߂@߅8߄8ߙd8 d߿߼gg0<-geߋgb8(g(`0%@%8%dJ#G#0B|Ged8#0edcE&G$E&idߣ(bb߿8߼0g@ߙ hlg<-gd0ߙ$%gP(  ߓ@%0.2(-/ 0(&8 %%8fsV%%H%%%@%X%P% (0@H(%% % %`%H%`X%@`%%J1D% gPd0c -(܆dcdgPe-% -1d)C))r~@& `o@&gPNe&::`-&(zݞπ-(&1(&$$w~- h'H5$88&h$+g:+(-p&!`&(-8x$+18$& & -0&-8&b-0-D$Pv`-%f-%1EDfs߲߮ߨ߭ ߯(߰0ߥ8ߦ@߿(߱H԰-K- -(-p-@-h-x-20(68߾ ߼߷߶ߵߴ߲߳߰.(-/ %0߱g0g<-$Bga%@ %@߂ B ߅@߅@dOhߙ  %@ ߿߼߱߰g dO`߂ B߂8B@߂`߃8$cb ߂` D߇@dOp߅@ߙ0% dOߙP $߇@dOxg<-g`߂`߅@ߙ0%D dOߙP $g <-g`@ߙ@g9x%(%(% %߄@ߙXdR@8%$$ @%߂8Dߙ  (%߅@ߙ 0% % dR0ߙx  %߿(߼ ߲߳߱߰g0ߙ@` %g9 ߅@ߙ@8%@0%dR   %߅@g <-g_Hߙ@g9x%$(% %@%ߙ 0%$  %@!ߙ($   %@ߙߙ 8%$$  %ߙx- % @ߙH@0%`(%  %߿(B&߼ ߲߳߱߰,Bg0߂`߄@ߙXGdR8$ $ߙP $g<-g^0߃8ߐdp ߙ@8%$hg9  g@߂8g߂8D ߙ@8%$*g9  g@߂8 g߂8Dߙ@8%$Jg9  g0@g2ߙ@߂ g9G ߅@ߙ@0%dRP %%ߤ߿߼߰g$ߙ g<-%g]dEdB|ߙ$ (%߿߼gd %df&b%0Bd:b%|b8C%0C|B0CC'0B8#0%$ 8--B@-G&I$G&dcjg<-g\ ߅@ߙ$@dX %߿߼߰g 8%%(%d @%bdcI!H!0BbB:Cd< yX-ek[y@g9 g0<-8g[pߊ|byE0c#(0B(%d %fdcF-b:gg'`0%8%$dH-d&:dg $!0B30#'0ddcD&F$D&dߣ(Bb߿8߼0g@ߙ gP<-gZhHߓߙ8gb@0%%$  %X( ߙH  %ߙ$ @(% % ߙH % ߤ(21cQ% ߿X߼P߳H߲@߱8߰0g`ߙ %%$ 8-@-:8!!0B8-dci$pC(%0c0Bd db!0B:%$4 $ -c@-j!h#g!8-dBI|g$b#g!|bpE0e%d ddcD-b:%0%d@%$4 gdc'8#!|Bje$C#|bpE0cd dC-:gd$ 8%d$ d$$ & H|@-%C pjdB8beH#})d H/C epjdBpl(8-Geek|$pC0d dC-:gg <-gW ߙ%$ (% %ߙ (%f  $ ߙfd$(%$`ab cߙP 0%@(% f@߿(߼ ߲߱߰g0gX<-gVxPߗߙX` d g80%% %0%(%(%hH@ gfu ߙX`0%(% % gߙP0% (%  %ߙ`@0% % (%ߙ``0%(% % gߙP0% (%  %ߙPff@fE@  %߆@ߙP(% % dYߙPff`fE` % ghߙ`0%(% % gHߙX0%(% ` %ߙX 0%(% @ %(%g(ߙ` 0% % gߙ`0%(%  %ߙP@0%`(%  %ߙP 0%(% f ߙP 0%`(% f@ߙP0%@(% f`ߣb ߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gpߙ gh<-gT@8%߂߅@gߙ@%%H$BdYx %p`XPH@80(x@08 gX$gX(gg8gxgxgggggߣߤ8-ߦB0cߙPb(% %0B ߙP 0% (%  %ߙP0%(%  %ߙ`0%(%  %ߥߙ` 0% ` %ߙP`0%`(% @ %ߙX0%@(% @ %ߙX0%@(% @ %ߙX0%(%  %ߙX0%(% ` %ߙh(%  %ߙX0%(%  %ߤߙP`0% @(%ߙP0%(%  %ߤ(ߙP0% @(%ߙP0%`(%  %ߦ0ߙpߥ  %ߢ %#0B|C|C|Cz|C8|C|C|Czߥ|C8 %0%ܧd&C$G&%d 0%(%ܢ d&C$G&ߢd0%(%ܢ`d&C$G&ߢdߥ(ܦ܂@d&C$F&ߢdߢ$$BCdߙߥߤ@ $ߢHߣBb ߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(gߙ g`<-gPXߔߙPHgނ0%8%@ %hP@%( $ߙP`0%@(%  %ߙP0%(%@ % &1ߙP`0%@(%  % ߙP0%(% @ %ߙP@0%@(%  %ߙP`0%(% @ %ߙP@0%@(%  %ߙP0%(% @ %ߙP`0%@(%  %ߙP0%(% @ %ߙP`0%@(%  %ߣ(ނb ߿h߼`ߴX߳P߲H߱@߰8gpߙ g`<-gO0Xߔߙx@gނPH%% %d`h8( %ߙP 0%(% ` %ߙP 0%f  @ %ߙH ` %ߙH @ %ߣ(ނb ߿h߼`ߴX߳P߲H߱@߰8gpߙ g <-gNXߔނg(%%0%%gH %%:(@!d$d$pDG0GddcD-b#:ߙPgh0%(% % gߙP0%(% % $ߙP0%(% % &ߙP0%(%  %ߙP0%(%  %ߙP0%(%  %ߙP0%(%  %ߙP0%(%  %ߙP0%(%  %ߙX0% (% %<   $ߙP@0%(%  %ߙP 0%(% ` %ߣނb ߿߼߷߶ߵߴ߲߳߱߰gߙ gP<-gL0ߕ%ߙ%ޣpx%$ @ %@(%Qh gߙP2"@0%@(% % B߆@g(ߙPdZ8(%@ % gH߆ߙ`@(% ` %ߙx`(% @ %߆ߙX(% ` %ߙP@0%`(%  %ߙ(% ` %ߙh`(% @ %H98&08#0`%@(% %gh`%fdcF&G$F&dhdߙP0%(% ` %ߙH ` %ߙH  %%$fD&C%Pf1|d>|b<D%|d:D% ?D%|d>D%|d<D%|d:D%C%0C|BC%C%ߤh(zޣE' 0B߿߼ߵߴ߲߳߱x߰pgߙ g@<-( H%80gI%%%$$Dgb-c`dBdBpc C#$B"*ߙ# $ (%@ %0W "# /-@%(-DdBddc@%fP %(bdcD%0Bbp":fV/-B$Dw#bD%B&1 ߕ@fP f$-F2"F00@% %bdc@D%0Bbp":B`(%F%@ %%B &16߿H߼@߷8߶0ߵ(ߴ ߲߳߱߰gPc`ߙ$(E$ $ (%@ %0W "#8#0%$ 8--B@-G&I$G&dcjgP<-gGX߂ߙ@%%$ B(%xph`X%%H $$DP-c`dBdB߂@pc #dB&f g(gHߣb-S2S2s%% %bdc@D%0Bb":߹(% % %ߙ(% % $ ߤ(%%bdcF!E!0Bb*:Cd߹(% %# 2s"f1C&S$C&Qf&$ߣߢߣHBb ߿߾߼߷߶ߵߴx߳p߲h߱`߰Xgߙ g%0<-0 8(gE8%%$D#~R+ ߙd@@0% $ -"B-0C`+"-r/.b@0ߔ@frfR-f(% %% f"dB"2s` ߿8ߙ`0%@(% f$@"S-"߿8߼0ߴ(߳ ߲߱߰g@ߔ@f%@f %% -r/%g <-gC%߅@ߙdX%$@( %ߙ@(% %$  ߙ (% % $ ߿(߼ ߲߱߰g0g%܄ 0<-$-$d$(gCP%C@F f3@ߙdA0/(%$ - .Rq@?ߒ@ߒ@`(%fR@%  %ߙ$x(% ` %" %Z:T:N:@>:>4>>`(%@%+"*)('& # %f @܂fR:L:F:8>2>,>> d ߿(߼ ߲߳߱߰g0fRg`<-gAxߓ%߅@ߙpgb$@%dX %h ߙ$  (% % `g`ߙ (%  %`߅ߙ 0% %0B0c4B@` g@ߙx % g(%%ߙP 0%  % 0%g ߙPg  %ߙH  %ߙH  %ߙ 0%(% @ %ߣhbb߿߼߲߳߱x߰pgߙ g<-g@xߗ@ߞߙfXg%@(%%% %$@%% ߖ@ߙ$ (% % gߙ(%  %ϓߙ@(%$@ %0B0c4B@( ߙ$ g % ߙ0%`(% %  g0ߙ(% % g0ߙfX$@(% % g߅ߙ0% % gpߙxgP @ %gPߙP@ %@0% (% ߙP@0%g ` %ߙH ߤߙH ` %ߥߙ`0%  %ߥ(ߙ$@  %ߙ$ (% % ߥߙ$   %ߦ ߥߙ  %ߙ(%  %ߙ$@fX(% ` %ߙ$ fX(%  %ߙ`(%@ %fX  0%(%@% %bdcF!E!0Bb*:dߙ@fXg9 @ %ߙ$ @(% f ߣb ߿߾߼߷߶ߵߴ߲߳߱߰g ߙ g <-g=Pߑߙg"$H(%%` % g߂8ߙ@Dp@8%$hg g9 $Ed @G $EdbD$@bߙ0 %0% (%@V@%ߙ(% @ %@Mߙߥ@H%@%$$ %$CC@%ߙ$g@` %߶@ gHߙ(% @ %ߙ@%8%0%@(% gߙ(%  %ߙ  %ߙ$@0%$J g@߂8߆@ߙ@D@8%dRg9 `(% %߂`߄@ߙXG$$ dRX$ߤ#߿߼߶ߵߴ߲߳߱߰gߙ  %߄@ߙ dR$߂`߄@ߙXG$1$ dRx$ߙ g<-g:ߞߙd@%(% ߇@gߙdX(%$@ % g8߅ߙf ` % ggߙx(% % gxߙP`(% 0%@ % ggXߙP@(% 0% % ߙH@ % g8ߙH  %ߙ0%@(%  %ߦߙ (%  %ߙ` % 0%(% ߙ`(%` % 0%ߙ0%(% @ %ߙ0%@(% % @%ߙpߣ 0%`(%` % ð$ߙx(% % 2`(%gXߙP0% ` %ߥߙP0% @ %ߙH ` %ߙH @ %ߙ %@0% `(%% %܂fE&C%0d|d>|b<D%|d:D% ?D%|d>D%|d<D%|d:D%C%0C|BC%C%zC'ߤV$0B߿߾߼߷߶ߵߴ߲߳߱߰g ߙ gp<-g8hߙ@ߓ$bg9xxp`XPH @gߒ@@%߂8%DfR  8%$J@% g0@0$Edbߔ8ނ@_ߙ@ބ 8%$*@% g@$Edb#g ߂`߄@GߙX$$dS0߂`߄@GߙX$$dS ߙx  %$ߤHc^߿߼ߵxߴp߳h߲`߱X߰Pgߙg:g0%(% @ % ߙ8%$$  %ߙ0 (% @ %ߙ  %@ߙߙx  %ߙ0%(% @ %@߂8B@'߄@%߂`߄@ߙXG$$ dR$߂8g2g9Gx ߆@ߙ@@%dS $  %B@߂`߄@ߙXG$$ dSP$߂`ߙXG$$ dSh%ߙ g@<-g5`ߒߙB$d(%g<xh g ߙ$((%` %<Ed$BBK 8߅@߄@ߙdO`dSp$Ed @ߙgX@8%$$ % @%$C@%߂`߄@ߙXG$"$ dSߙx  %$ߤhCq߿߼߶ߵߴ߲߳߱߰xgߙg`8%$$   %Q@%ߙ8%$$ g@T߂`ߙx % g`ߙ(% %0B0c4B@` gߙ  %ߙ$@ % (%ߙ %g gߙߢ$0%$hg8 P@߂8ߔ@߆@Dpf8%dS% (%ߙ$(% ` %ߙ$  (% gߙ$0%$* g@߂8߆@D8%dS% `(%%߂`߄@ߙXG$$ dS$ߙ ߙx% dLߙx% dKߙx% dHߙx% dGߙx% dFߙx% dEߙx% dDߙx% dBߙx% dAߙx% d?ߙx% d>ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d,g߼߿g rwreadingwritingCannot open file '%s' for %s Usage: %s Commands: -V: verify (needs at least -m and -p|-P) -S: sign (needs at least -m and -s) -F: print key fingerprint of public/secret key or signature -G: generate a new keypair (needs at least -p and -s) Options: -c : add comment to keys -m : message file -p : public key file (verify/fingerprint only) -P : public key directory (verify only) -q: quiet (do not print verification result, use return code only) -s : secret key file (sign/fingerprint only) -x : signature file (defaults to .sig) untrusted comment: %s %016lx %s Premature end of file %016lx Failed to decode secret key Password protected secret keys are not supported Cannot open message filesigned by keyCannot open message file Failed to decode signature %s/%016lxFailed to decode public key verification failed OK /dev/urandomCan't open /dev/urandom Can't read data from /dev/urandom private keypublic keyFGSVc:m:P:p:qs:x:-Need signature file when reading message from stdin %s.sigNeed one secret/public key or signature H(hPB/("q7D#e͵M;/ۥۼ9V[H8Y?O^mB[Epo$1N䲌U }r]t{oޱ;%5ti&iJG8O%Ƌյ$ we-,oY+uJtn\ܽAvڃS>QRf߫1m-2'Ș!?YǾ =էG %cQo))g np' F/.!8\&&M,mZ*S8 e sTcvj &aц!}}Onxgro c}ŢȘ? q 5G(w#}2ʫ{@$< ɾCgĜ LLԾ>BY)e~*_o:lDJGX\cX֜j ggʧ;l٫Ak[~!y%`-Vɲ%`,i\1Sn6i!XfffffffffffffffffffffffffffffffݷmRQw }dNfev_gY&V0V$xYMuAAM pywy@njso+lR  P O@ H    $ ( & &h ' ) /X Z 1 : < X + % 6 8 >( ? 3 ( <  E # O  O O N N N N N N N N Np N` NP N@ N0 N  N N M M M M M M M M07070100DC284E0000A1FF00000000000000000000000168F513D900000005000000080000000100000000000000000000001000000000usr/bin/signifyusign07070100DC2B080000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000D00000000usr/bin/tail../../bin/busybox07070100DC278E0000A1FF00000000000000000000000168F513D900000005000000080000000100000000000000000000000D00000000usr/bin/utplucode07070100DC2B0B0000A1FF00000000000000000000000168F513D900000011000000080000000100000000000000000000000C00000000usr/bin/tee../../bin/busybox07070100DC2685000041ED00000000000000000000000E68F513D900000000000000080000000100000000000000000000000A00000000usr/share07070100DC2B4B000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001000000000usr/share/acl.d07070100DC3B01000081A400000000000000000000000168F513D90000005B000000080000000100000000000000000000001F00000000usr/share/acl.d/luci-base.json{ "user": "nobody", "access": { "system": { "methods": [ "board", "info" ] } } } 07070100DC3592000081A400000000000000000000000168F513D9000000D9000000080000000100000000000000000000002100000000usr/share/acl.d/dnsmasq_acl.json{ "user": "dnsmasq", "publish": [ "dnsmasq" ], "access": { "hotplug.dhcp": { "methods": [ "call" ] }, "hotplug.neigh": { "methods": [ "call" ] }, "hotplug.tftp": { "methods": [ "call" ] } } } 07070100DC3776000081A400000000000000000000000168F513D90000002B000000080000000100000000000000000000001A00000000usr/share/acl.d/logd.json{ "user": "logd", "publish": [ "log" ] } 07070100DC2B4E000081A400000000000000000000000168F513D900000054000000080000000100000000000000000000001A00000000usr/share/acl.d/ntpd.json{ "user": "ntp", "access": { "hotplug.ntp": { "methods": [ "call" ] } } } 07070100DC33EF000081A400000000000000000000000168F513D9000001C1000000080000000100000000000000000000001E00000000usr/share/acl.d/wpad_acl.json{ "user": "network", "access": { "service": { "methods": [ "event" ] }, "wpa_supplicant": { "methods": [ "phy_set_state", "phy_set_macaddr_list", "phy_status" ] }, "hostapd": { "methods": [ "apsta_state" ] }, "udebug": { "methods": [ "get_config" ] } }, "subscribe": [ "udebug" ], "publish": [ "hostapd", "hostapd.*", "wpa_supplicant", "wpa_supplicant.*", "hostapd-auth" ], "send": [ "bss.*", "wps_credentials" ] } 07070100DC355E000041ED00000000000000000000000368F513D900000000000000080000000100000000000000000000001000000000usr/share/ucode07070100DC3C46000041ED00000000000000000000000468F513D900000000000000080000000100000000000000000000001500000000usr/share/ucode/luci07070100DC3C76000081A400000000000000000000000168F513D900003E72000000080000000100000000000000000000002100000000usr/share/ucode/luci/zoneinfo.uc// Autogenerated by zoneinfo2ucode.pl export default { 'Africa/Abidjan': 'GMT0', 'Africa/Accra': 'GMT0', 'Africa/Addis Ababa': 'EAT-3', 'Africa/Algiers': 'CET-1', 'Africa/Asmara': 'EAT-3', 'Africa/Bamako': 'GMT0', 'Africa/Bangui': 'WAT-1', 'Africa/Banjul': 'GMT0', 'Africa/Bissau': 'GMT0', 'Africa/Blantyre': 'CAT-2', 'Africa/Brazzaville': 'WAT-1', 'Africa/Bujumbura': 'CAT-2', 'Africa/Cairo': 'EET-2EEST,M4.5.5/0,M10.5.4/24', 'Africa/Casablanca': 'XXX-2<+01>-1,0/0,J365/23', 'Africa/Ceuta': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Africa/Conakry': 'GMT0', 'Africa/Dakar': 'GMT0', 'Africa/Dar es Salaam': 'EAT-3', 'Africa/Djibouti': 'EAT-3', 'Africa/Douala': 'WAT-1', 'Africa/El Aaiun': 'XXX-2<+01>-1,0/0,J365/23', 'Africa/Freetown': 'GMT0', 'Africa/Gaborone': 'CAT-2', 'Africa/Harare': 'CAT-2', 'Africa/Johannesburg': 'SAST-2', 'Africa/Juba': 'CAT-2', 'Africa/Kampala': 'EAT-3', 'Africa/Khartoum': 'CAT-2', 'Africa/Kigali': 'CAT-2', 'Africa/Kinshasa': 'WAT-1', 'Africa/Lagos': 'WAT-1', 'Africa/Libreville': 'WAT-1', 'Africa/Lome': 'GMT0', 'Africa/Luanda': 'WAT-1', 'Africa/Lubumbashi': 'CAT-2', 'Africa/Lusaka': 'CAT-2', 'Africa/Malabo': 'WAT-1', 'Africa/Maputo': 'CAT-2', 'Africa/Maseru': 'SAST-2', 'Africa/Mbabane': 'SAST-2', 'Africa/Mogadishu': 'EAT-3', 'Africa/Monrovia': 'GMT0', 'Africa/Nairobi': 'EAT-3', 'Africa/Ndjamena': 'WAT-1', 'Africa/Niamey': 'WAT-1', 'Africa/Nouakchott': 'GMT0', 'Africa/Ouagadougou': 'GMT0', 'Africa/Porto-Novo': 'WAT-1', 'Africa/Sao Tome': 'GMT0', 'Africa/Tripoli': 'EET-2', 'Africa/Tunis': 'CET-1', 'Africa/Windhoek': 'CAT-2', 'America/Adak': 'HST10HDT,M3.2.0,M11.1.0', 'America/Anchorage': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Anguilla': 'AST4', 'America/Antigua': 'AST4', 'America/Araguaina': '<-03>3', 'America/Argentina/Buenos Aires': '<-03>3', 'America/Argentina/Catamarca': '<-03>3', 'America/Argentina/Cordoba': '<-03>3', 'America/Argentina/Jujuy': '<-03>3', 'America/Argentina/La Rioja': '<-03>3', 'America/Argentina/Mendoza': '<-03>3', 'America/Argentina/Rio Gallegos': '<-03>3', 'America/Argentina/Salta': '<-03>3', 'America/Argentina/San Juan': '<-03>3', 'America/Argentina/San Luis': '<-03>3', 'America/Argentina/Tucuman': '<-03>3', 'America/Argentina/Ushuaia': '<-03>3', 'America/Aruba': 'AST4', 'America/Asuncion': '<-03>3', 'America/Atikokan': 'EST5', 'America/Bahia': '<-03>3', 'America/Bahia Banderas': 'CST6', 'America/Barbados': 'AST4', 'America/Belem': '<-03>3', 'America/Belize': 'CST6', 'America/Blanc-Sablon': 'AST4', 'America/Boa Vista': '<-04>4', 'America/Bogota': '<-05>5', 'America/Boise': 'MST7MDT,M3.2.0,M11.1.0', 'America/Cambridge Bay': 'MST7MDT,M3.2.0,M11.1.0', 'America/Campo Grande': '<-04>4', 'America/Cancun': 'EST5', 'America/Caracas': '<-04>4', 'America/Cayenne': '<-03>3', 'America/Cayman': 'EST5', 'America/Chicago': 'CST6CDT,M3.2.0,M11.1.0', 'America/Chihuahua': 'CST6', 'America/Ciudad Juarez': 'MST7MDT,M3.2.0,M11.1.0', 'America/Costa Rica': 'CST6', 'America/Coyhaique': '<-03>3', 'America/Creston': 'MST7', 'America/Cuiaba': '<-04>4', 'America/Curacao': 'AST4', 'America/Danmarkshavn': 'GMT0', 'America/Dawson': 'MST7', 'America/Dawson Creek': 'MST7', 'America/Denver': 'MST7MDT,M3.2.0,M11.1.0', 'America/Detroit': 'EST5EDT,M3.2.0,M11.1.0', 'America/Dominica': 'AST4', 'America/Edmonton': 'MST7MDT,M3.2.0,M11.1.0', 'America/Eirunepe': '<-05>5', 'America/El Salvador': 'CST6', 'America/Fort Nelson': 'MST7', 'America/Fortaleza': '<-03>3', 'America/Glace Bay': 'AST4ADT,M3.2.0,M11.1.0', 'America/Goose Bay': 'AST4ADT,M3.2.0,M11.1.0', 'America/Grand Turk': 'EST5EDT,M3.2.0,M11.1.0', 'America/Grenada': 'AST4', 'America/Guadeloupe': 'AST4', 'America/Guatemala': 'CST6', 'America/Guayaquil': '<-05>5', 'America/Guyana': '<-04>4', 'America/Halifax': 'AST4ADT,M3.2.0,M11.1.0', 'America/Havana': 'CST5CDT,M3.2.0/0,M11.1.0/1', 'America/Hermosillo': 'MST7', 'America/Indiana/Indianapolis': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Knox': 'CST6CDT,M3.2.0,M11.1.0', 'America/Indiana/Marengo': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Petersburg': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Tell City': 'CST6CDT,M3.2.0,M11.1.0', 'America/Indiana/Vevay': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Vincennes': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Winamac': 'EST5EDT,M3.2.0,M11.1.0', 'America/Inuvik': 'MST7MDT,M3.2.0,M11.1.0', 'America/Iqaluit': 'EST5EDT,M3.2.0,M11.1.0', 'America/Jamaica': 'EST5', 'America/Juneau': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Kentucky/Louisville': 'EST5EDT,M3.2.0,M11.1.0', 'America/Kentucky/Monticello': 'EST5EDT,M3.2.0,M11.1.0', 'America/Kralendijk': 'AST4', 'America/La Paz': '<-04>4', 'America/Lima': '<-05>5', 'America/Los Angeles': 'PST8PDT,M3.2.0,M11.1.0', 'America/Lower Princes': 'AST4', 'America/Maceio': '<-03>3', 'America/Managua': 'CST6', 'America/Manaus': '<-04>4', 'America/Marigot': 'AST4', 'America/Martinique': 'AST4', 'America/Matamoros': 'CST6CDT,M3.2.0,M11.1.0', 'America/Mazatlan': 'MST7', 'America/Menominee': 'CST6CDT,M3.2.0,M11.1.0', 'America/Merida': 'CST6', 'America/Metlakatla': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Mexico City': 'CST6', 'America/Miquelon': '<-03>3<-02>,M3.2.0,M11.1.0', 'America/Moncton': 'AST4ADT,M3.2.0,M11.1.0', 'America/Monterrey': 'CST6', 'America/Montevideo': '<-03>3', 'America/Montserrat': 'AST4', 'America/Nassau': 'EST5EDT,M3.2.0,M11.1.0', 'America/New York': 'EST5EDT,M3.2.0,M11.1.0', 'America/Nome': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Noronha': '<-02>2', 'America/North Dakota/Beulah': 'CST6CDT,M3.2.0,M11.1.0', 'America/North Dakota/Center': 'CST6CDT,M3.2.0,M11.1.0', 'America/North Dakota/New Salem': 'CST6CDT,M3.2.0,M11.1.0', 'America/Nuuk': '<-02>2<-01>,M3.5.0/-1,M10.5.0/0', 'America/Ojinaga': 'CST6CDT,M3.2.0,M11.1.0', 'America/Panama': 'EST5', 'America/Paramaribo': '<-03>3', 'America/Phoenix': 'MST7', 'America/Port of Spain': 'AST4', 'America/Port-au-Prince': 'EST5EDT,M3.2.0,M11.1.0', 'America/Porto Velho': '<-04>4', 'America/Puerto Rico': 'AST4', 'America/Punta Arenas': '<-03>3', 'America/Rankin Inlet': 'CST6CDT,M3.2.0,M11.1.0', 'America/Recife': '<-03>3', 'America/Regina': 'CST6', 'America/Resolute': 'CST6CDT,M3.2.0,M11.1.0', 'America/Rio Branco': '<-05>5', 'America/Santarem': '<-03>3', 'America/Santiago': '<-04>4<-03>,M9.1.6/24,M4.1.6/24', 'America/Santo Domingo': 'AST4', 'America/Sao Paulo': '<-03>3', 'America/Scoresbysund': '<-02>2<-01>,M3.5.0/-1,M10.5.0/0', 'America/Sitka': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/St Barthelemy': 'AST4', 'America/St Johns': 'NST3:30NDT,M3.2.0,M11.1.0', 'America/St Kitts': 'AST4', 'America/St Lucia': 'AST4', 'America/St Thomas': 'AST4', 'America/St Vincent': 'AST4', 'America/Swift Current': 'CST6', 'America/Tegucigalpa': 'CST6', 'America/Thule': 'AST4ADT,M3.2.0,M11.1.0', 'America/Tijuana': 'PST8PDT,M3.2.0,M11.1.0', 'America/Toronto': 'EST5EDT,M3.2.0,M11.1.0', 'America/Tortola': 'AST4', 'America/Vancouver': 'PST8PDT,M3.2.0,M11.1.0', 'America/Whitehorse': 'MST7', 'America/Winnipeg': 'CST6CDT,M3.2.0,M11.1.0', 'America/Yakutat': 'AKST9AKDT,M3.2.0,M11.1.0', 'Antarctica/Casey': '<+08>-8', 'Antarctica/Davis': '<+07>-7', 'Antarctica/DumontDUrville': '<+10>-10', 'Antarctica/Macquarie': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Antarctica/Mawson': '<+05>-5', 'Antarctica/McMurdo': 'NZST-12NZDT,M9.5.0,M4.1.0/3', 'Antarctica/Palmer': '<-03>3', 'Antarctica/Rothera': '<-03>3', 'Antarctica/Syowa': '<+03>-3', 'Antarctica/Troll': '<+00>0<+02>-2,M3.5.0/1,M10.5.0/3', 'Antarctica/Vostok': '<+05>-5', 'Arctic/Longyearbyen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Asia/Aden': '<+03>-3', 'Asia/Almaty': '<+05>-5', 'Asia/Amman': '<+03>-3', 'Asia/Anadyr': '<+12>-12', 'Asia/Aqtau': '<+05>-5', 'Asia/Aqtobe': '<+05>-5', 'Asia/Ashgabat': '<+05>-5', 'Asia/Atyrau': '<+05>-5', 'Asia/Baghdad': '<+03>-3', 'Asia/Bahrain': '<+03>-3', 'Asia/Baku': '<+04>-4', 'Asia/Bangkok': '<+07>-7', 'Asia/Barnaul': '<+07>-7', 'Asia/Beirut': 'EET-2EEST,M3.5.0/0,M10.5.0/0', 'Asia/Bishkek': '<+06>-6', 'Asia/Brunei': '<+08>-8', 'Asia/Chita': '<+09>-9', 'Asia/Colombo': '<+0530>-5:30', 'Asia/Damascus': '<+03>-3', 'Asia/Dhaka': '<+06>-6', 'Asia/Dili': '<+09>-9', 'Asia/Dubai': '<+04>-4', 'Asia/Dushanbe': '<+05>-5', 'Asia/Famagusta': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Asia/Gaza': 'EET-2EEST,M3.4.4/50,M10.4.4/50', 'Asia/Hebron': 'EET-2EEST,M3.4.4/50,M10.4.4/50', 'Asia/Ho Chi Minh': '<+07>-7', 'Asia/Hong Kong': 'HKT-8', 'Asia/Hovd': '<+07>-7', 'Asia/Irkutsk': '<+08>-8', 'Asia/Jakarta': 'WIB-7', 'Asia/Jayapura': 'WIT-9', 'Asia/Jerusalem': 'IST-2IDT,M3.4.4/26,M10.5.0', 'Asia/Kabul': '<+0430>-4:30', 'Asia/Kamchatka': '<+12>-12', 'Asia/Karachi': 'PKT-5', 'Asia/Kathmandu': '<+0545>-5:45', 'Asia/Khandyga': '<+09>-9', 'Asia/Kolkata': 'IST-5:30', 'Asia/Krasnoyarsk': '<+07>-7', 'Asia/Kuala Lumpur': '<+08>-8', 'Asia/Kuching': '<+08>-8', 'Asia/Kuwait': '<+03>-3', 'Asia/Macau': 'CST-8', 'Asia/Magadan': '<+11>-11', 'Asia/Makassar': 'WITA-8', 'Asia/Manila': 'PST-8', 'Asia/Muscat': '<+04>-4', 'Asia/Nicosia': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Asia/Novokuznetsk': '<+07>-7', 'Asia/Novosibirsk': '<+07>-7', 'Asia/Omsk': '<+06>-6', 'Asia/Oral': '<+05>-5', 'Asia/Phnom Penh': '<+07>-7', 'Asia/Pontianak': 'WIB-7', 'Asia/Pyongyang': 'KST-9', 'Asia/Qatar': '<+03>-3', 'Asia/Qostanay': '<+05>-5', 'Asia/Qyzylorda': '<+05>-5', 'Asia/Riyadh': '<+03>-3', 'Asia/Sakhalin': '<+11>-11', 'Asia/Samarkand': '<+05>-5', 'Asia/Seoul': 'KST-9', 'Asia/Shanghai': 'CST-8', 'Asia/Singapore': '<+08>-8', 'Asia/Srednekolymsk': '<+11>-11', 'Asia/Taipei': 'CST-8', 'Asia/Tashkent': '<+05>-5', 'Asia/Tbilisi': '<+04>-4', 'Asia/Tehran': '<+0330>-3:30', 'Asia/Thimphu': '<+06>-6', 'Asia/Tokyo': 'JST-9', 'Asia/Tomsk': '<+07>-7', 'Asia/Ulaanbaatar': '<+08>-8', 'Asia/Urumqi': '<+06>-6', 'Asia/Ust-Nera': '<+10>-10', 'Asia/Vientiane': '<+07>-7', 'Asia/Vladivostok': '<+10>-10', 'Asia/Yakutsk': '<+09>-9', 'Asia/Yangon': '<+0630>-6:30', 'Asia/Yekaterinburg': '<+05>-5', 'Asia/Yerevan': '<+04>-4', 'Atlantic/Azores': '<-01>1<+00>,M3.5.0/0,M10.5.0/1', 'Atlantic/Bermuda': 'AST4ADT,M3.2.0,M11.1.0', 'Atlantic/Canary': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Cape Verde': '<-01>1', 'Atlantic/Faroe': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Madeira': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Reykjavik': 'GMT0', 'Atlantic/South Georgia': '<-02>2', 'Atlantic/St Helena': 'GMT0', 'Atlantic/Stanley': '<-03>3', 'Australia/Adelaide': 'ACST-9:30ACDT,M10.1.0,M4.1.0/3', 'Australia/Brisbane': 'AEST-10', 'Australia/Broken Hill': 'ACST-9:30ACDT,M10.1.0,M4.1.0/3', 'Australia/Darwin': 'ACST-9:30', 'Australia/Eucla': '<+0845>-8:45', 'Australia/Hobart': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Australia/Lindeman': 'AEST-10', 'Australia/Lord Howe': '<+1030>-10:30<+11>-11,M10.1.0,M4.1.0', 'Australia/Melbourne': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Australia/Perth': 'AWST-8', 'Australia/Sydney': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Etc/GMT': 'GMT0', 'Etc/GMT+1': '<-01>1', 'Etc/GMT+10': '<-10>10', 'Etc/GMT+11': '<-11>11', 'Etc/GMT+12': '<-12>12', 'Etc/GMT+2': '<-02>2', 'Etc/GMT+3': '<-03>3', 'Etc/GMT+4': '<-04>4', 'Etc/GMT+5': '<-05>5', 'Etc/GMT+6': '<-06>6', 'Etc/GMT+7': '<-07>7', 'Etc/GMT+8': '<-08>8', 'Etc/GMT+9': '<-09>9', 'Etc/GMT-1': '<+01>-1', 'Etc/GMT-10': '<+10>-10', 'Etc/GMT-11': '<+11>-11', 'Etc/GMT-12': '<+12>-12', 'Etc/GMT-13': '<+13>-13', 'Etc/GMT-14': '<+14>-14', 'Etc/GMT-2': '<+02>-2', 'Etc/GMT-3': '<+03>-3', 'Etc/GMT-4': '<+04>-4', 'Etc/GMT-5': '<+05>-5', 'Etc/GMT-6': '<+06>-6', 'Etc/GMT-7': '<+07>-7', 'Etc/GMT-8': '<+08>-8', 'Etc/GMT-9': '<+09>-9', 'Europe/Amsterdam': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Andorra': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Astrakhan': '<+04>-4', 'Europe/Athens': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Belgrade': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Berlin': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Bratislava': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Brussels': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Bucharest': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Budapest': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Busingen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Chisinau': 'EET-2EEST,M3.5.0,M10.5.0/3', 'Europe/Copenhagen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Dublin': 'GMT0IST,M3.5.0/1,M10.5.0', 'Europe/Gibraltar': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Guernsey': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Helsinki': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Isle of Man': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Istanbul': '<+03>-3', 'Europe/Jersey': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Kaliningrad': 'EET-2', 'Europe/Kirov': 'MSK-3', 'Europe/Kyiv': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Lisbon': 'WET0WEST,M3.5.0/1,M10.5.0', 'Europe/Ljubljana': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/London': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Luxembourg': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Madrid': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Malta': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Mariehamn': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Minsk': '<+03>-3', 'Europe/Monaco': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Moscow': 'MSK-3', 'Europe/Oslo': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Paris': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Podgorica': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Prague': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Riga': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Rome': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Samara': '<+04>-4', 'Europe/San Marino': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Sarajevo': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Saratov': '<+04>-4', 'Europe/Simferopol': 'MSK-3', 'Europe/Skopje': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Sofia': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Stockholm': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Tallinn': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Tirane': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Ulyanovsk': '<+04>-4', 'Europe/Vaduz': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vatican': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vienna': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vilnius': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Volgograd': 'MSK-3', 'Europe/Warsaw': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Zagreb': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Zurich': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Indian/Antananarivo': 'EAT-3', 'Indian/Chagos': '<+06>-6', 'Indian/Christmas': '<+07>-7', 'Indian/Cocos': '<+0630>-6:30', 'Indian/Comoro': 'EAT-3', 'Indian/Kerguelen': '<+05>-5', 'Indian/Mahe': '<+04>-4', 'Indian/Maldives': '<+05>-5', 'Indian/Mauritius': '<+04>-4', 'Indian/Mayotte': 'EAT-3', 'Indian/Reunion': '<+04>-4', 'Pacific/Apia': '<+13>-13', 'Pacific/Auckland': 'NZST-12NZDT,M9.5.0,M4.1.0/3', 'Pacific/Bougainville': '<+11>-11', 'Pacific/Chatham': '<+1245>-12:45<+1345>,M9.5.0/2:45,M4.1.0/3:45', 'Pacific/Chuuk': '<+10>-10', 'Pacific/Easter': '<-06>6<-05>,M9.1.6/22,M4.1.6/22', 'Pacific/Efate': '<+11>-11', 'Pacific/Fakaofo': '<+13>-13', 'Pacific/Fiji': '<+12>-12', 'Pacific/Funafuti': '<+12>-12', 'Pacific/Galapagos': '<-06>6', 'Pacific/Gambier': '<-09>9', 'Pacific/Guadalcanal': '<+11>-11', 'Pacific/Guam': 'ChST-10', 'Pacific/Honolulu': 'HST10', 'Pacific/Kanton': '<+13>-13', 'Pacific/Kiritimati': '<+14>-14', 'Pacific/Kosrae': '<+11>-11', 'Pacific/Kwajalein': '<+12>-12', 'Pacific/Majuro': '<+12>-12', 'Pacific/Marquesas': '<-0930>9:30', 'Pacific/Midway': 'SST11', 'Pacific/Nauru': '<+12>-12', 'Pacific/Niue': '<-11>11', 'Pacific/Norfolk': '<+11>-11<+12>,M10.1.0,M4.1.0/3', 'Pacific/Noumea': '<+11>-11', 'Pacific/Pago Pago': 'SST11', 'Pacific/Palau': '<+09>-9', 'Pacific/Pitcairn': '<-08>8', 'Pacific/Pohnpei': '<+11>-11', 'Pacific/Port Moresby': '<+10>-10', 'Pacific/Rarotonga': '<-10>10', 'Pacific/Saipan': 'ChST-10', 'Pacific/Tahiti': '<-10>10', 'Pacific/Tarawa': '<+12>-12', 'Pacific/Tongatapu': '<+13>-13', 'Pacific/Wake': '<+12>-12', 'Pacific/Wallis': '<+12>-12', }; 07070100DC3C58000081A400000000000000000000000168F513D900000D28000000080000000100000000000000000000001C00000000usr/share/ucode/luci/sys.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { basename, readlink, readfile, open, popen, stat, glob } from 'fs'; export function process_list() { const top = popen('/bin/busybox top -bn1'); let line, list = []; for (let line = top.read('line'); length(line); line = top.read('line')) { let m = match(trim(line), /^([0-9]+) +([0-9]+) +(.+) +([RSDZTWI][ { const s = stat(path); return s?.type == 'file' && s?.perm?.user_exec; }), basename); }; export function init_index(name) { const src = readfile(`/etc/init.d/${basename(name)}`, 2048); const idx = []; for (let m in match(src, /^[[:space:]]*(START|STOP)=('[0-9][0-9]'|"[0-9][0-9]"|[0-9][0-9])[[:space:]]*$/gs)) { switch (m[1]) { case 'START': idx[0] = +trim(m[2], '"\''); break; case 'STOP': idx[1] = +trim(m[2], '"\''); break; } } return length(idx) ? idx : null; }; export function init_enabled(name) { for (let path in glob(`/etc/rc.d/[SK][0-9][0-9]${basename(name)}`)) { const ln = readlink(path); const s1 = stat(index(ln, '/') == 0 ? ln : `/etc/rc.d/${ln}`); const s2 = stat(`/etc/init.d/${basename(name)}`); if (s1?.inode == s2?.inode && s1?.type == 'file' && s1?.perm?.user_exec) return true; } return false; }; export function init_action(name, action) { const s = stat(`/etc/init.d/${basename(name)}`); if (s?.type != 'file' || s?.user_exec == false) return false; return system(`env -i /etc/init.d/${basename(name)} ${action} >/dev/null`); }; 07070100DC3C55000081A400000000000000000000000168F513D900001217000000080000000100000000000000000000002000000000usr/share/ucode/luci/runtime.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { access, basename, stat } from 'fs'; import { cursor } from 'uci'; const template_directory = '/usr/share/ucode/luci/template'; function cut_message(msg) { return trim(replace(msg, /\n--\n.*$/, '')); } function format_nested_exception(ex) { let msg = replace(cut_message(ex.message), /(\n+( \|[^\n]*(\n|$))+)/, (m, m1) => { m1 = replace(m1, /(^|\n) \| ?/g, '$1'); m = match(m1, /^(.+?)\n(In.*line \d+, byte \d+:.+)$/); return `
${cut_message(m ? m[1] : m1)}
${m ? `
${trim(m[2])}
` : ''}
`; }); return `
${cut_message(msg)}
${trim(ex.stacktrace[0].context)}
`; } function format_lua_exception(ex) { let m = match(ex.message, /^(.+)\nstack traceback:\n(.+)$/); return `
${cut_message(m ? m[1] : ex.message)}
${m ? trim(replace(m[2], /(^|\n)\t/g, '$1')) : ex.stacktrace[0].context}
`; } const Class = { init_lua: function(optional) { if (!this.L) { let bridge = this.env.dispatcher.load_luabridge(optional); if (bridge) { let http = this.env.http; this.L = bridge.create(); this.L.set('L', proto({ write: (...args) => http.closed || print(...args) }, this.env)); this.L.invoke('require', 'luci.ucodebridge'); this.env.lua_active = true; } } return this.L; }, is_ucode_template: function(path) { return access(`${template_directory}/${path}.ut`); }, is_lua_template: function(path) { let vm = this.init_lua(true); return vm && access(`${vm.get('_G', 'luci', 'template', 'viewdir')}/${path}.htm`); }, render_ucode: function(path, scope) { let tmplfunc = loadfile(path, { raw_mode: false }); if (this.env.http.closed) render(call, tmplfunc, null, scope ?? {}); else call(tmplfunc, null, scope ?? {}); }, render_lua: function(path, scope) { let vm = this.init_lua(); let render = vm.get('_G', 'luci', 'ucodebridge', 'render'); render.call(path, scope ?? {}); }, trycompile: function(path) { let ucode_path = `${template_directory}/${path}.ut`; if (access(ucode_path)) { try { loadfile(ucode_path, { raw_mode: false }); } catch (ucode_err) { return `Unable to compile '${path}' as ucode template: ${format_nested_exception(ucode_err)}`; } } else { try { let vm = this.init_lua(true); if (vm) vm.get('_G', 'luci', 'ucodebridge', 'compile').call(path); else return `Unable to compile '${path}' as Lua template: Unable to load Lua runtime`; } catch (lua_err) { return `Unable to compile '${path}' as Lua template: ${format_lua_exception(lua_err)}`; } } return true; }, render_any: function(path, scope) { let ucode_path = `${template_directory}/${path}.ut`; scope = proto(scope ?? {}, this.scopes[-1]); push(this.scopes, scope); try { if (access(ucode_path)) this.render_ucode(ucode_path, scope); else this.render_lua(path, scope); } catch (ex) { pop(this.scopes); die(ex); } pop(this.scopes); }, render: function(path, scope) { let self = this; this.env.http.write(render(() => self.render_any(path, scope))); }, call: function(modname, method, ...args) { let vm = this.init_lua(); let lcall = vm.get('_G', 'luci', 'ucodebridge', 'call'); return lcall.call(modname, method, ...args); } }; export default function(env) { const self = proto({ env: env ??= {}, scopes: [ proto(env, global) ], global }, Class); const uci = cursor(); // determine theme let media = uci.get('luci', 'main', 'mediaurlbase'); let status = self.trycompile(`themes/${basename(media)}/header`); if (status !== true) { media = null; self.env.media_error = status; for (let k, v in uci.get_all('luci', 'themes')) { if (substr(k, 0, 1) != '.') { status = self.trycompile(`themes/${basename(v)}/header`); if (status === true) { media = v; break; } } } if (!media) env.dispatcher.error500(`Unable to render any theme header template, last error was:\n${status}`); } self.env.media = media; self.env.theme = basename(media); self.env.resource = uci.get('luci', 'main', 'resourcebase'); self.env.pkgs_update_time = stat('/lib/apk/db/installed')?.mtime ?? stat('/usr/lib/opkg/status')?.mtime ?? 0; self.env.include = (...args) => self.render_any(...args); return self; }; 07070100DC3C5B000041ED00000000000000000000000468F513D900000000000000080000000100000000000000000000001E00000000usr/share/ucode/luci/template07070100DC3C71000081A400000000000000000000000168F513D9000000E7000000080000000100000000000000000000002600000000usr/share/ucode/luci/template/view.ut{% include('header') %}
{{ _('Loading view…') }}
{% include('footer') %} 07070100DC3C6F000081A400000000000000000000000168F513D90000088A000000080000000100000000000000000000002900000000usr/share/ucode/luci/template/sysauth.ut{# Copyright 2008 Steven Barth Copyright 2008-2012 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}
{% if (fuser): %}

{{ _('Invalid username and/or password! Please try again.') }}

{% endif %}

{{ _('Authorization Required') }}

{{ _('Please enter your username and password.') }}
{% let https_ports = uci.get('uhttpd', 'main', 'listen_https') ?? []; https_ports = uniq(filter( map( (type(https_ports) == 'string') ? split(https_port, /\s+/) : https_ports, e => +match(e, /\d+$/)?.[0] ), p => (p >= 0 && p <= 65535) )); %} {% include('footer') %} 07070100DC3C5E000081A400000000000000000000000168F513D90000025B000000080000000100000000000000000000002B00000000usr/share/ucode/luci/template/csrftoken.ut{# Copyright 2015-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

{{ _('Form token mismatch') }}


{{ _('The submitted security token is invalid or already expired!') }}

{{ _(` In order to prevent unauthorized access to the system, your request has been blocked. Click "Continue »" below to return to the previous page. `) }}

Continue »

{% include('footer') %} 07070100DC3C6B000081A400000000000000000000000168F513D9000004F7000000080000000100000000000000000000002800000000usr/share/ucode/luci/template/footer.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% const rollback = dispatcher.rollback_pending() %} {% if (rollback || trigger_apply || trigger_revert): %} {% endif %} {% if (media_error): %} {% endif %} {% include(`themes/${theme}/footer`) %} 07070100DC3C60000081A400000000000000000000000168F513D9000001B3000000080000000100000000000000000000002A00000000usr/share/ucode/luci/template/error404.ut{# Copyright 2008 Steven Barth Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

404 {{ _('Not Found') }}

{{ _('Sorry, the object you requested was not found.') }}

{{ message }}

{{ _('Unable to dispatch') }}: {{ dispatcher.build_url(...ctx.request_path) }} {% include('footer') %} 07070100DC3C62000081A400000000000000000000000168F513D900000467000000080000000100000000000000000000002A00000000usr/share/ucode/luci/template/error500.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#}

{{ title }}

{{ message }}
{% if (exception): %}
{{ exception.message }}
{{ exception.stacktrace[0].context }}
{% endif %}
07070100DC3F4A000041ED00000000000000000000000368F513D900000000000000080000000100000000000000000000002500000000usr/share/ucode/luci/template/themes07070100DC3F4F0000A1FF00000000000000000000000168F513D900000009000000080000000100000000000000000000003400000000usr/share/ucode/luci/template/themes/bootstrap-darkbootstrap07070100DC3F500000A1FF00000000000000000000000168F513D900000009000000080000000100000000000000000000003500000000usr/share/ucode/luci/template/themes/bootstrap-lightbootstrap07070100DC3F4B000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000002F00000000usr/share/ucode/luci/template/themes/bootstrap07070100DC3F4E000081A400000000000000000000000168F513D900000541000000080000000100000000000000000000003A00000000usr/share/ucode/luci/template/themes/bootstrap/sysauth.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header', { blank_page: true }) %}
{{ _('Loading view…') }}
{% include('footer', { blank_page: true }) %} 07070100DC3F4C000081A400000000000000000000000168F513D90000029F000000080000000100000000000000000000003900000000usr/share/ucode/luci/template/themes/bootstrap/footer.ut {% if (!blank_page): %} {% endif %} 07070100DC3F4D000081A400000000000000000000000168F513D900000E38000000080000000100000000000000000000003900000000usr/share/ucode/luci/template/themes/bootstrap/header.ut{# Copyright 2008 Steven Barth Copyright 2012 David Menting Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% import { getuid, getspnam } from 'luci.core'; const boardinfo = ubus.call('system', 'board'); const darkpref = (theme == 'bootstrap-dark' ? 'true' : (theme == 'bootstrap-light' ? 'false' : null)); http.prepare_content('text/html; charset=UTF-8'); -%} {{ striptags(`${boardinfo.hostname ?? '?'}${node ? ` - ${node.title}` : ''}`) }} - LuCI {% if (!darkpref): %} {% endif %} {% if (node?.css): %} {% endif %} {% if (css): %} {% endif %} {% if (!blank_page): %}
{{ striptags(boardinfo.hostname ?? '?') }}
{% if (getuid() == 0 && getspnam('root')?.pwdp === ''): %}

{{ _('No password set!') }}

{{ _('There is no password set on this router. Please configure a root password to protect the web interface.') }}

{% if (dispatcher.lookup("admin/system/admin")): %}
{{ _('Go to password configuration...') }}
{% endif %}
{% endif %} {% if (boardinfo.rootfs_type == "initramfs"): %}

{{ _('System running in recovery (initramfs) mode.') }}

{{ _('No changes to settings will be stored and are lost after rebooting. This mode should only be used to install a firmware upgrade') }}

{% if (dispatcher.lookup("admin/system/flash")): %}
{{ _('Go to firmware upgrade...') }}
{% endif %}
{% endif %} {% endif %} 07070100DC3E12000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000002B00000000usr/share/ucode/luci/template/admin_status07070100DC3E13000081A400000000000000000000000168F513D90000065A000000080000000100000000000000000000003400000000usr/share/ucode/luci/template/admin_status/index.ut{# Copyright 2008 Steven Barth Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

{{ _('Status') }}

{{ _('Loading view…') }}
{% include('footer') %} 07070100DC3C6E000081A400000000000000000000000168F513D90000041F000000080000000100000000000000000000002800000000usr/share/ucode/luci/template/header.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include(`themes/${theme}/header`); -%} 07070100DC3C51000081A400000000000000000000000168F513D9000055CC000000080000000100000000000000000000002300000000usr/share/ucode/luci/dispatcher.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { open, stat, glob, lsdir, unlink, basename } from 'fs'; import { striptags, entityencode } from 'html'; import { connect } from 'ubus'; import { cursor } from 'uci'; import { rand } from 'math'; import { hash, load_catalog, change_catalog, translate, ntranslate, getuid } from 'luci.core'; import { revision as luciversion, branch as luciname } from 'luci.version'; import { default as LuCIRuntime } from 'luci.runtime'; import { urldecode } from 'luci.http'; let ubus = connect(); let uci = cursor(); let indexcache = "/tmp/luci-indexcache"; let http, runtime, tree, luabridge; function error404(msg) { http.status(404, 'Not Found'); try { runtime.render('error404', { message: msg ?? 'Not found' }); } catch { http.header('Content-Type', 'text/plain; charset=UTF-8'); http.write(msg ?? 'Not found'); } return false; } function error500(msg, ex) { if (!http.eoh) { http.status(500, 'Internal Server Error'); http.header('Content-Type', 'text/html; charset=UTF-8'); } try { runtime.render('error500', { title: ex?.type ?? 'Runtime exception', message: replace( msg, /(\s)((\/[A-Za-z0-9_.-]+)+:\d+|\[string "[^"]+"\]:\d+)/g, '$1$2' ), exception: ex }); } catch { http.write('\n'); http.write(`

${trim(msg)}

\n`); if (ex) { http.write(`

${trim(ex.message)}

\n`); http.write(`
${trim(ex.stacktrace[0].context)}
\n`); } } exit(0); } function load_luabridge(optional) { if (luabridge == null) { try { luabridge = require('lua'); } catch (ex) { luabridge = false; if (!optional) error500('No Lua runtime installed'); } } return luabridge; } function determine_request_language() { let lang = uci.get('luci', 'main', 'lang') || 'auto'; if (lang == 'auto') { for (let tag in split(http.getenv('HTTP_ACCEPT_LANGUAGE'), ',')) { tag = split(trim(split(tag, ';')?.[0]), '-'); if (tag) { let cc = tag[1] ? `${tag[0]}_${lc(tag[1])}` : null; if (cc && uci.get('luci', 'languages', cc)) { lang = cc; break; } else if (uci.get('luci', 'languages', tag[0])) { lang = tag[0]; break; } } } } if (lang == 'auto') lang = 'en'; else lang = replace(lang, '_', '-'); if (load_catalog(lang, '/usr/lib/lua/luci/i18n')) change_catalog(lang); return lang; } function determine_version() { let res = { luciname, luciversion }; for (let f = open("/etc/os-release"), l = f?.read?.("line"); l; l = f.read?.("line")) { let kv = split(l, '=', 2); switch (kv[0]) { case 'NAME': res.distname = trim(kv[1], '"\' \n'); break; case 'VERSION': res.distversion = trim(kv[1], '"\' \n'); break; case 'HOME_URL': res.disturl = trim(kv[1], '"\' \n'); break; case 'BUILD_ID': res.distrevision = trim(kv[1], '"\' \n'); break; } } return res; } function read_jsonfile(path, defval) { let rv; try { rv = json(open(path, "r")); } catch (e) { rv = defval; } return rv; } function read_cachefile(file, reader) { let euid = getuid(), fstat = stat(file), fuid = fstat?.uid, perm = fstat?.perm; if (euid != fuid || perm?.group_read || perm?.group_write || perm?.group_exec || perm?.other_read || perm?.other_write || perm?.other_exec) return null; return reader(file); } function check_fs_depends(spec) { for (let path, kind in spec) { if (kind == 'directory') { if (!length(lsdir(path))) return false; } else if (kind == 'executable') { let fstat = stat(path); if (fstat?.type != 'file' || fstat?.user_exec == false) return false; } else if (kind == 'file') { let fstat = stat(path); if (fstat?.type != 'file') return false; } else if (kind == 'absent') { if (stat(path) != null) return false; } } return true; } function check_uci_depends_options(conf, s, opts) { if (type(opts) == 'string') { return (s['.type'] == opts); } else if (opts === true) { for (let option, value in s) if (ord(option) != 46) return true; } else if (type(opts) == 'object') { for (let option, value in opts) { let sval = s[option]; if (type(sval) == 'array') { if (!(value in sval)) return false; } else if (value === true) { if (sval == null) return false; } else { if (sval != value) return false; } } } return true; } function check_uci_depends_section(conf, sect) { for (let section, options in sect) { let stype = match(section, /^@([A-Za-z0-9_-]+)$/); if (stype) { let found = false; uci.load(conf); uci.foreach(conf, stype[1], (s) => { if (check_uci_depends_options(conf, s, options)) { found = true; return false; } }); if (!found) return false; } else { let s = uci.get_all(conf, section); if (!s || !check_uci_depends_options(conf, s, options)) return false; } } return true; } function check_uci_depends(conf) { for (let config, values in conf) { if (values == true) { let found = false; uci.load(config); uci.foreach(config, null, () => { found = true }); if (!found) return false; } else if (type(values) == 'object') { if (!check_uci_depends_section(config, values)) return false; } } return true; } function check_depends(spec) { if (type(spec?.depends?.fs) in ['array', 'object']) { let satisfied = false; let alternatives = (type(spec.depends.fs) == 'array') ? spec.depends.fs : [ spec.depends.fs ]; for (let alternative in alternatives) { if (check_fs_depends(alternative)) { satisfied = true; break; } } if (!satisfied) return false; } if (type(spec?.depends?.uci) in ['array', 'object']) { let satisfied = false; let alternatives = (type(spec.depends.uci) == 'array') ? spec.depends.uci : [ spec.depends.uci ]; for (let alternative in alternatives) { if (check_uci_depends(alternative)) { satisfied = true; break; } } if (!satisfied) return false; } return true; } function check_acl_depends(require_groups, groups) { if (length(require_groups)) { let writable = false; for (let group in require_groups) { let read = ('read' in groups?.[group]); let write = ('write' in groups?.[group]); if (!read && !write) return null; if (write) writable = true; } return writable; } return true; } function hash_filelist(files) { let hashval = 0x1b756362; for (let file in files) { let st = stat(file); if (st) hashval = hash(sprintf("%x|%x|%x", st.ino, st.mtime, st.size), hashval); } return hashval; } function build_pagetree() { let tree = { action: { type: 'firstchild' } }; let schema = { action: 'object', auth: 'object', cors: 'bool', depends: 'object', order: 'int', setgroup: 'string', setuser: 'string', title: 'string', wildcard: 'bool', firstchild_ineligible: 'bool' }; let files = glob('/usr/share/luci/menu.d/*.json', '/usr/lib/lua/luci/controller/*.lua', '/usr/lib/lua/luci/controller/*/*.lua'); let cachefile; if (indexcache) { cachefile = sprintf('%s.%08x.json', indexcache, hash_filelist(files)); let res = read_cachefile(cachefile, read_jsonfile); if (res) return res; for (let path in glob(indexcache + '.*.json')) unlink(path); } for (let file in files) { let data; if (substr(file, -5) == '.json') data = read_jsonfile(file); else if (load_luabridge(true)) data = runtime.call('luci.dispatcher', 'process_lua_controller', file); else warn(`Lua controller ${file} present but no Lua runtime installed.\n`); if (type(data) == 'object') { for (let path, spec in data) { if (type(spec) == 'object') { let node = tree; for (let s in match(path, /[^\/]+/g)) { if (s[0] == '*') { node.wildcard = true; break; } node.children ??= {}; node.children[s[0]] ??= { satisfied: true }; node = node.children[s[0]]; } if (node !== tree) { for (let k, t in schema) if (type(spec[k]) == t) node[k] = spec[k]; node.satisfied = check_depends(spec); } } } } } if (cachefile) { let fd = open(cachefile, 'w', 0600); if (fd) { fd.write(tree); fd.close(); } } return tree; } function apply_tree_acls(node, acl) { for (let name, spec in node?.children) apply_tree_acls(spec, acl); if (node?.depends?.acl) { switch (check_acl_depends(node.depends.acl, acl["access-group"])) { case null: node.satisfied = false; break; case false: node.readonly = true; break; } } } function menu_json(acl) { tree ??= build_pagetree(); if (acl) apply_tree_acls(tree, acl); return tree; } function ctx_append(ctx, name, node) { ctx.path ??= []; push(ctx.path, name); ctx.acls ??= []; push(ctx.acls, ...(node?.depends?.acl || [])); ctx.auth = node.auth || ctx.auth; ctx.cors = node.cors || ctx.cors; ctx.suid = node.setuser || ctx.suid; ctx.sgid = node.setgroup || ctx.sgid; return ctx; } function session_retrieve(sid, allowed_users) { let sdat = ubus.call("session", "get", { ubus_rpc_session: sid }); let sacl = ubus.call("session", "access", { ubus_rpc_session: sid }); if (type(sdat?.values?.token) == 'string' && (!length(allowed_users) || sdat?.values?.username in allowed_users)) { // uci:set_session_id(sid) return { sid, data: sdat.values, acls: length(sacl) ? sacl : {} }; } return null; } function randomid(num_bytes) { let bytes = []; while (num_bytes-- > 0) push(bytes, sprintf('%02x', rand() % 256)); return join('', bytes); } function syslog(prio, msg) { warn(sprintf("[%s] %s\n", prio, msg)); } function session_setup(user, pass, path) { let timeout = uci.get('luci', 'sauth', 'sessiontime'); let login = ubus.call("session", "login", { username: user, password: pass, timeout: timeout ? +timeout : null }); if (type(login?.ubus_rpc_session) == 'string') { ubus.call("session", "set", { ubus_rpc_session: login.ubus_rpc_session, values: { token: randomid(16) } }); syslog("info", sprintf("luci: accepted login on /%s for %s from %s", join('/', path), user || "?", http.getenv("REMOTE_ADDR") || "?")); return session_retrieve(login.ubus_rpc_session); } syslog("info", sprintf("luci: failed login on /%s for %s from %s", join('/', path), user || "?", http.getenv("REMOTE_ADDR") || "?")); } function check_authentication(method) { let m = match(method, /^([[:alpha:]]+):(.+)$/); let sid; switch (m?.[1]) { case 'cookie': sid = http.getcookie(m[2]); break; case 'param': sid = http.formvalue(m[2]); break; case 'query': sid = http.formvalue(m[2], true); break; } return sid ? session_retrieve(sid) : null; } function is_authenticated(auth) { for (let method in auth?.methods) { let session = check_authentication(method); if (session) return session; } return null; } function node_weight(node) { let weight = min(node.order ?? 9999, 9999); if (node.auth?.login) weight += 10000; return weight; } function clone(src) { switch (type(src)) { case 'array': return map(src, clone); case 'object': let dest = {}; for (let k, v in src) dest[k] = clone(v); return dest; default: return src; } } function resolve_firstchild(node, session, login_allowed, ctx) { let candidate, candidate_ctx; for (let name, child in node.children) { if (!child.satisfied) continue; if (!session) session = is_authenticated(node.auth); let cacl = child.depends?.acl; let login = !session && (login_allowed || child.auth?.login); if (login || check_acl_depends(cacl, session?.acls?.["access-group"]) != null) { if (child.title && type(child.action) == "object") { let child_ctx = ctx_append(clone(ctx), name, child); if (child.action.type == "firstchild") { if (!candidate || node_weight(candidate) > node_weight(child)) { let have_grandchild = resolve_firstchild(child, session, login, child_ctx); if (have_grandchild) { candidate = child; candidate_ctx = child_ctx; } } } else if (!child.firstchild_ineligible) { if (!candidate || node_weight(candidate) > node_weight(child)) { candidate = child; candidate_ctx = child_ctx; } } } } } if (!candidate) return false; for (let k, v in candidate_ctx) ctx[k] = v; return true; } function resolve_page(tree, request_path) { let node = tree; let login = false; let session = null; let ctx = {}; for (let i, s in request_path) { node = node.children?.[s]; if (!node?.satisfied) break; ctx_append(ctx, s, node); if (!session) session = is_authenticated(node.auth); if (!login && node.auth?.login) login = true; if (node.wildcard) { ctx.request_args = []; ctx.request_path = ctx.path ? [ ...ctx.path ] : []; while (++i < length(request_path)) { push(ctx.request_path, request_path[i]); push(ctx.request_args, request_path[i]); } break; } } if (node?.action?.type == 'firstchild') resolve_firstchild(node, session, login, ctx); ctx.acls ??= {}; ctx.path ??= []; ctx.request_args ??= []; ctx.request_path ??= request_path ? [ ...request_path ] : []; ctx.authsession = session?.sid; ctx.authtoken = session?.data?.token; ctx.authuser = session?.data?.username; ctx.authacl = session?.acls; node = tree; for (let s in ctx.path) { node = node.children[s]; assert(node, "Internal node resolve error"); } return { node, ctx, session }; } function require_post_security(target, args) { if (target?.type == 'arcombine') return require_post_security(length(args) ? target?.targets?.[1] : target?.targets?.[0], args); if (type(target?.post) == 'object') { for (let param_name, required_val in target.post) { let request_val = http.formvalue(param_name); if ((type(required_val) == 'string' && request_val != required_val) || (required_val == true && request_val == null)) return false; } return true; } return (target?.post == true); } function test_post_security(authtoken) { if (http.getenv("REQUEST_METHOD") != "POST") { http.status(405, "Method Not Allowed"); http.header("Allow", "POST"); return false; } if (http.formvalue("token") != authtoken) { http.status(403, "Forbidden"); runtime.render("csrftoken"); return false; } return true; } function build_url(...path) { let url = [ http.getenv('SCRIPT_NAME') ?? '' ]; for (let p in path) if (match(p, /^[A-Za-z0-9_%.\/,;-]+$/)) push(url, '/', p); if (length(url) == 1) push(url, '/'); return join('', url); } function lookup(...segments) { let node = menu_json(); let path = []; for (let segment in segments) for (let name in split(segment, '/')) push(path, name); for (let name in path) { node = node.children[name]; if (!node) return null; if (node.leaf) break; } return { node, url: build_url(...path) }; } function rollback_pending() { const now = time(); const rv = ubus.call('session', 'get', { ubus_rpc_session: '00000000000000000000000000000000', keys: [ 'rollback' ] }); if (type(rv?.values?.rollback?.token) != 'string' || type(rv?.values?.rollback?.session) != 'string' || type(rv?.values?.rollback?.timeout) != 'int' || rv.values.rollback.timeout <= now) return false; return { remaining: rv.values.rollback.timeout - now, session: rv.values.rollback.session, token: rv.values.rollback.token }; } let dispatch; function render_action(fn) { const data = render(fn); http.write_headers(); http.output(data); } function run_action(request_path, lang, tree, resolved, action) { switch ((type(action) == 'object') ? action.type : 'none') { case 'template': if (runtime.is_ucode_template(action.path)) runtime.render(action.path, {}); else render_action(() => { runtime.call('luci.dispatcher', 'render_lua_template', action.path); }); break; case 'view': runtime.render('view', { view: action.path }); break; case 'call': render_action(() => { runtime.call(action.module, action.function, ...(action.parameters ?? []), ...resolved.ctx.request_args ); }); break; case 'function': const mod = require(action.module); assert(type(mod[action.function]) == 'function', `Module '${action.module}' does not export function '${action.function}'`); render_action(() => { call(mod[action.function], mod, runtime.env, ...(action.parameters ?? []), ...resolved.ctx.request_args ); }); break; case 'cbi': render_action(() => { runtime.call('luci.dispatcher', 'invoke_cbi_action', action.path, null, ...resolved.ctx.request_args ); }); break; case 'form': render_action(() => { runtime.call('luci.dispatcher', 'invoke_form_action', action.path, ...resolved.ctx.request_args ); }); break; case 'alias': dispatch(http, [ ...split(action.path, '/'), ...resolved.ctx.request_args ]); break; case 'rewrite': dispatch(http, [ ...splice([ ...request_path ], 0, action.remove), ...split(action.path, '/'), ...resolved.ctx.request_args ]); break; case 'firstchild': if (!length(tree.children)) { error404("No root node was registered, this usually happens if no module was installed.\n" + "Install luci-mod-admin-full and retry. " + "If the module is already installed, try removing the /tmp/luci-indexcache file."); break; } /* fall through */ case 'none': error404(`No page is registered at '/${entityencode(join("/", resolved.ctx.request_path))}'.\n` + "If this url belongs to an extension, make sure it is properly installed.\n" + "If the extension was recently installed, try removing the /tmp/luci-indexcache file."); break; default: error500(`Unhandled action type ${action?.type ?? '?'}`); } } dispatch = function(_http, path) { http = _http; let version = determine_version(); let lang = determine_request_language(); runtime = runtime || LuCIRuntime({ http, ubus, uci, ctx: {}, version, config: { main: uci.get_all('luci', 'main') ?? {}, apply: uci.get_all('luci', 'apply') ?? {} }, dispatcher: { rollback_pending, is_authenticated, load_luabridge, lookup, menu_json, build_url, randomid, error404, error500, lang }, striptags, entityencode, _: (...args) => translate(...args) ?? args[0], N_: (...args) => ntranslate(...args) ?? (args[0] == 1 ? args[1] : args[2]), }); try { let menu = menu_json(); path ??= map(match(http.getenv('PATH_INFO'), /[^\/]+/g), m => urldecode(m[0])); let resolved = resolve_page(menu, path); runtime.env.ctx = resolved.ctx; runtime.env.dispatched = resolved.node; runtime.env.requested ??= resolved.node; if (length(resolved.ctx.auth)) { let session = is_authenticated(resolved.ctx.auth); if (!session && resolved.ctx.auth.login) { let user = http.getenv('HTTP_AUTH_USER'); let pass = http.getenv('HTTP_AUTH_PASS'); if (user == null && pass == null) { user = http.formvalue('luci_username'); pass = http.formvalue('luci_password'); } if (user != null && pass != null) session = session_setup(user, pass, resolved.ctx.request_path); if (!session) { resolved.ctx.path = []; http.status(403, 'Forbidden'); http.header('X-LuCI-Login-Required', 'yes'); let scope = { duser: 'root', fuser: user }; let theme_sysauth = `themes/${basename(runtime.env.media)}/sysauth`; if (runtime.is_ucode_template(theme_sysauth) || runtime.is_lua_template(theme_sysauth)) { try { return runtime.render(theme_sysauth, scope); } catch (e) { runtime.env.media_error = `${e}`; } } return runtime.render('sysauth', scope); } let cookie_name = (http.getenv('HTTPS') == 'on') ? 'sysauth_https' : 'sysauth_http', cookie_secure = (http.getenv('HTTPS') == 'on') ? '; secure' : ''; http.header('Set-Cookie', `${cookie_name}=${session.sid}; path=${build_url()}; SameSite=strict; HttpOnly${cookie_secure}`); http.redirect(build_url(...resolved.ctx.request_path)); return; } if (!session) { http.status(403, 'Forbidden'); http.header('X-LuCI-Login-Required', 'yes'); return; } resolved.ctx.authsession ??= session.sid; resolved.ctx.authtoken ??= session.data?.token; resolved.ctx.authuser ??= session.data?.username; resolved.ctx.authacl ??= session.acls; /* In case the Lua runtime was already initialized, e.g. by probing legacy * theme header templates, make sure to update the session ID of the uci * module. */ if (runtime.L) { runtime.L.invoke('require', 'luci.model.uci'); runtime.L.get('luci', 'model', 'uci').invoke('set_session_id', session.sid); } } if (length(resolved.ctx.acls)) { let perm = check_acl_depends(resolved.ctx.acls, resolved.ctx.authacl?.['access-group']); if (perm == null) { http.status(403, 'Forbidden'); return; } if (resolved.node) resolved.node.readonly = !perm; } let action = resolved.node.action; if (action?.type == 'arcombine') action = length(resolved.ctx.request_args) ? action.targets?.[1] : action.targets?.[0]; if (resolved.ctx.cors && http.getenv('REQUEST_METHOD') == 'OPTIONS') { http.status(200, 'OK'); http.header('Access-Control-Allow-Origin', http.getenv('HTTP_ORIGIN') ?? '*'); http.header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS'); return; } if (require_post_security(action) && !test_post_security(resolved.ctx.authtoken)) return; run_action(path, lang, menu, resolved, action); } catch (ex) { error500('Unhandled exception during request dispatching', ex); } }; export default dispatch; 07070100DC3C73000081A400000000000000000000000168F513D9000000CC000000080000000100000000000000000000001F00000000usr/share/ucode/luci/uhttpd.uc{% import dispatch from 'luci.dispatcher'; import request from 'luci.http'; global.handle_request = function(env) { let req = request(env, uhttpd.recv, uhttpd.send); dispatch(req); req.close(); }; 07070100DC3C54000081A400000000000000000000000168F513D900003392000000080000000100000000000000000000001D00000000usr/share/ucode/luci/http.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { urlencode as _urlencode, urldecode as _urldecode, urlencoded_parser, multipart_parser, header_attribute, ENCODE_IF_NEEDED, ENCODE_FULL, DECODE_IF_NEEDED, DECODE_PLUS } from 'lucihttp'; import { error as fserror, stdin, stdout, mkstemp } from 'fs'; // luci.http module scope export let HTTP_MAX_CONTENT = 1024*100; // 100 kB maximum content size // Decode a mime encoded http message body with multipart/form-data // Content-Type. Stores all extracted data associated with its parameter name // in the params table within the given message object. Multiple parameter // values are stored as tables, ordinary ones as strings. // If an optional file callback function is given then it is fed with the // file contents chunk by chunk and only the extracted file name is stored // within the params table. The callback function will be called subsequently // with three arguments: // o Table containing decoded (name, file) and raw (headers) mime header data // o String value containing a chunk of the file data // o Boolean which indicates whether the current chunk is the last one (eof) export function mimedecode_message_body(src, msg, file_cb) { let len = 0, maxlen = +msg.env.CONTENT_LENGTH; let err, header, field, parser; parser = multipart_parser(msg.env.CONTENT_TYPE, function(what, buffer, length) { if (what == parser.PART_INIT) { field = {}; } else if (what == parser.HEADER_NAME) { header = lc(buffer); } else if (what == parser.HEADER_VALUE && header) { if (lc(header) == 'content-disposition' && header_attribute(buffer, null) == 'form-data') { field.name = header_attribute(buffer, 'name'); field.file = header_attribute(buffer, 'filename'); field[1] = field.file; } field.headers = field.headers || {}; field.headers[header] = buffer; } else if (what == parser.PART_BEGIN) { return !field.file; } else if (what == parser.PART_DATA && field.name && length > 0) { if (field.file) { if (file_cb) { file_cb(field, buffer, false); msg.params[field.name] = msg.params[field.name] || field; } else { if (!field.fd) field.fd = mkstemp(field.name); if (field.fd) { field.fd.write(buffer); msg.params[field.name] = msg.params[field.name] || field; } } } else { field.value = buffer; } } else if (what == parser.PART_END && field.name) { if (field.file && msg.params[field.name]) { if (file_cb) file_cb(field, '', true); else if (field.fd) field.fd.seek(0); } else { let val = msg.params[field.name]; if (type(val) == 'array') push(val, field.value || ''); else if (val != null) msg.params[field.name] = [ val, field.value || '' ]; else msg.params[field.name] = field.value || ''; } field = null; } else if (what == parser.ERROR) { err = buffer; } return true; }, HTTP_MAX_CONTENT); while (true) { let chunk = src(); len += length(chunk); if (maxlen && len > maxlen + 2) die('Message body size exceeds Content-Length'); if (!parser.parse(chunk)) die(err); if (chunk == null) break; } }; // Decode an urlencoded http message body with application/x-www-urlencoded // Content-Type. Stores all extracted data associated with its parameter name // in the params table within the given message object. Multiple parameter // values are stored as tables, ordinary ones as strings. export function urldecode_message_body(src, msg) { let len = 0, maxlen = +msg.env.CONTENT_LENGTH; let err, name, value, parser; parser = urlencoded_parser(function (what, buffer, length) { if (what == parser.TUPLE) { name = null; value = null; } else if (what == parser.NAME) { name = _urldecode(buffer, DECODE_PLUS); } else if (what == parser.VALUE && name) { let val = msg.params[name]; if (type(val) == 'array') push(val, _urldecode(buffer, DECODE_PLUS) || ''); else if (val != null) msg.params[name] = [ val, _urldecode(buffer, DECODE_PLUS) || '' ]; else msg.params[name] = _urldecode(buffer, DECODE_PLUS) || ''; } else if (what == parser.ERROR) { err = buffer; } return true; }, HTTP_MAX_CONTENT); while (true) { let chunk = src(); len += length(chunk); if (maxlen && len > maxlen + 2) die('Message body size exceeds Content-Length'); if (!parser.parse(chunk)) die(err); if (chunk == null) break; } }; // This function will examine the Content-Type within the given message object // to select the appropriate content decoder. // Currently the application/x-www-urlencoded and application/form-data // mime types are supported. If the encountered content encoding can't be // handled then the whole message body will be stored unaltered as 'content' // property within the given message object. export function parse_message_body(src, msg, filecb) { if (msg.env.CONTENT_LENGTH || msg.env.REQUEST_METHOD == 'POST') { let ctype = header_attribute(msg.env.CONTENT_TYPE, null); // Is it multipart/mime ? if (ctype == 'multipart/form-data') return mimedecode_message_body(src, msg, filecb); // Is it application/x-www-form-urlencoded ? else if (ctype == 'application/x-www-form-urlencoded') return urldecode_message_body(src, msg); // Unhandled encoding // If a file callback is given then feed it chunk by chunk, else // store whole buffer in message.content let sink; // If we have a file callback then feed it if (type(filecb) == 'function') { let meta = { name: 'raw', encoding: msg.env.CONTENT_TYPE }; sink = (chunk) => { if (chunk != null) return filecb(meta, chunk, false); else return filecb(meta, null, true); }; } // ... else append to .content else { let chunks = [], len = 0; sink = (chunk) => { len += length(chunk); if (len > HTTP_MAX_CONTENT) die('POST data exceeds maximum allowed length'); if (chunk != null) { push(chunks, chunk); } else { msg.content = join('', chunks); msg.content_length = len; } }; } // Pump data... while (true) { let chunk = src(); sink(chunk); if (chunk == null) break; } return true; } return false; }; export function build_querystring(q) { let s = []; for (let k, v in q) { push(s, length(s) ? '&' : '?', _urlencode(k, ENCODE_IF_NEEDED | ENCODE_FULL) || k, '=', _urlencode(v, ENCODE_IF_NEEDED | ENCODE_FULL) || v ); } return join('', s); }; export function urlencode(value) { if (value == null) return null; value = '' + value; return _urlencode(value, ENCODE_IF_NEEDED | ENCODE_FULL) || value; }; export function urldecode(value, decode_plus) { if (value == null) return null; value = '' + value; return _urldecode(value, DECODE_IF_NEEDED | (decode_plus ? DECODE_PLUS : 0)) || value; }; // Extract and split urlencoded data pairs, separated bei either "&" or ";" // from given url or string. Returns a table with urldecoded values. // Simple parameters are stored as string values associated with the parameter // name within the table. Parameters with multiple values are stored as array // containing the corresponding values. export function urldecode_params(url, tbl) { let parser, name, value; let params = tbl || {}; parser = urlencoded_parser(function(what, buffer, length) { if (what == parser.TUPLE) { name = null; value = null; } else if (what == parser.NAME) { name = _urldecode(buffer); } else if (what == parser.VALUE && name) { params[name] = _urldecode(buffer) || ''; } return true; }); if (parser) { let m = match(('' + (url || '')), /[^?]*$/); parser.parse(m ? m[0] : ''); parser.parse(null); } return params; }; // Encode each key-value-pair in given table to x-www-urlencoded format, // separated by '&'. Tables are encoded as parameters with multiple values by // repeating the parameter name with each value. export function urlencode_params(tbl) { let enc = []; for (let k, v in tbl) { if (type(v) == 'array') { for (let v2 in v) { if (length(enc)) push(enc, '&'); push(enc, _urlencode(k), '=', _urlencode('' + v2)); } } else { if (length(enc)) push(enc, '&'); push(enc, _urlencode(k), '=', _urlencode('' + v)); } } return join(enc, ''); }; // Default IO routines suitable for CGI invocation let avail_len = +getenv('CONTENT_LENGTH'); const default_source = () => { let rlen = min(avail_len, 4096); if (rlen == 0) { stdin.close(); return null; } let chunk = stdin.read(rlen); if (chunk == null) die(`Input read error: ${fserror()}`); avail_len -= length(chunk); return chunk; }; const default_sink = (...chunks) => { for (let chunk in chunks) stdout.write(chunk); stdout.flush(); }; const Class = { formvalue: function(name, noparse) { if (!noparse && !this.parsed_input) this._parse_input(); if (name != null) return this.message.params[name]; else return this.message.params; }, formvaluetable: function(prefix) { let vals = {}; prefix = (prefix || '') + '.'; if (!this.parsed_input) this._parse_input(); for (let k, v in this.message.params) if (index(k, prefix) == 0) vals[substr(k, length(prefix))] = '' + v; return vals; }, content: function() { if (!this.parsed_input) this._parse_input(); return this.message.content; }, getcookie: function(name) { return header_attribute(`cookie; ${this.getenv('HTTP_COOKIE') ?? ''}`, name); }, getenv: function(name) { if (name != null) return this.message.env[name]; else return this.message.env; }, setfilehandler: function(callback) { if (type(callback) == 'resource' && type(callback.call) == 'function') this.filehandler = (...args) => callback.call(...args); else if (type(callback) == 'function') this.filehandler = callback; else die('Invalid callback argument for setfilehandler()'); if (!this.parsed_input) return; // If input has already been parsed then uploads are stored as unlinked // temporary files pointed to by open file handles in the parameter // value table. Loop all params, and invoke the file callback for any // param with an open file handle. for (let name, value in this.message.params) { while (value?.fd) { let data = value.fd.read(1024); let eof = (length(data) == 0); this.filehandler(value, data, eof); if (eof) { value.fd.close(); value.fd = null; } } } }, _parse_input: function() { parse_message_body( this.input, this.message, this.filehandler ); this.parsed_input = true; }, close: function() { this.write_headers(); this.closed = true; }, header: function(key, value) { this.headers ??= {}; this.headers[lc(key)] = value; }, prepare_content: function(mime) { if (!this.headers?.['content-type']) { if (mime == 'application/xhtml+xml') { if (index(this.getenv('HTTP_ACCEPT'), mime) == -1) { mime = 'text/html; charset=UTF-8'; this.header('Vary', 'Accept'); } } this.header('Content-Type', mime); } }, status: function(code, message) { this.status_code = code ?? 200; this.status_message = message ?? 'OK'; }, write_headers: function() { if (this.eoh) return; if (!this.status_code) this.status(); if (!this.headers?.['content-type']) this.header('Content-Type', 'text/html; charset=UTF-8'); if (!this.headers?.['cache-control']) { this.header('Cache-Control', 'no-cache'); this.header('Expires', '0'); } if (!this.headers?.['x-frame-options']) this.header('X-Frame-Options', 'SAMEORIGIN'); if (!this.headers?.['x-xss-protection']) this.header('X-XSS-Protection', '1; mode=block'); if (!this.headers?.['x-content-type-options']) this.header('X-Content-Type-Options', 'nosniff'); this.output('Status: '); this.output(this.status_code); this.output(' '); this.output(this.status_message); this.output('\r\n'); for (let k, v in this.headers) { this.output(k); this.output(': '); this.output(v); this.output('\r\n'); } this.output('\r\n'); this.eoh = true; }, // If the content chunk is nil this function will automatically invoke close. write: function(content) { if (content != null && !this.closed) { this.write_headers(); this.output(content); return true; } else { this.close(); } }, redirect: function(url) { this.status(302, 'Found'); this.header('Location', url ?? '/'); this.close(); }, write_json: function(value) { this.write(sprintf('%.J', value)); }, urlencode, urlencode_params, urldecode, urldecode_params, build_querystring }; export default function(env, sourcein, sinkout) { return proto({ input: sourcein ?? default_source, output: sinkout ?? default_sink, // File handler nil by default to let .content() work file: null, // HTTP-Message table message: { env, headers: {}, params: urldecode_params(env?.QUERY_STRING ?? '') }, parsed_input: false }, Class); }; 07070100DC3C47000041ED00000000000000000000000368F513D900000000000000080000000100000000000000000000002000000000usr/share/ucode/luci/controller07070100DC3C49000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000002600000000usr/share/ucode/luci/controller/admin07070100DC3C4A000081A400000000000000000000000168F513D900000FC1000000080000000100000000000000000000002F00000000usr/share/ucode/luci/controller/admin/index.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { load_catalog, change_catalog, get_translations } from 'luci.core'; const ubus_types = [ null, 'array', 'object', 'string', null, // INT64 'number', null, // INT16, 'boolean', 'double' ]; function ubus_reply(id, data, code, errmsg) { const reply = { jsonrpc: '2.0', id }; if (errmsg) reply.error = { code, message: errmsg }; else if (type(code) == 'object') reply.result = code; else if (data != null) reply.result = [ code, data ]; else reply.result = [ code ]; return reply; } function ubus_access(sid, obj, fun) { return (ubus.call('session', 'access', { ubus_rpc_session: sid, scope: 'ubus', object: obj, function: fun })?.access == true); } function ubus_request(req) { if (type(req?.method) != 'string' || req?.jsonrpc != '2.0' || req?.id == null) return ubus_reply(null, null, -32600, 'Invalid request'); if (req.method == 'call') { if (type(req?.params) != 'array' || length(req.params) < 3) return ubus_reply(null, null, -32600, 'Invalid parameters'); let sid = req.params[0], obj = req.params[1], fun = req.params[2], arg = req.params[3] ?? {}; if (type(arg) != 'object' || exists(arg, 'ubus_rpc_session')) return ubus_reply(req.id, null, -32602, 'Invalid parameters'); if (sid == '00000000000000000000000000000000' && ctx.authsession) sid = ctx.authsession; if (!ubus_access(sid, obj, fun)) return ubus_reply(req.id, null, -32002, 'Access denied'); arg.ubus_rpc_session = sid; // clear error ubus.error(); const res = ubus.call(obj, fun, arg); return ubus_reply(req.id, res, ubus.error(true) ?? 0); } if (req.method == 'list') { if (req?.params == null || (type(req.params) == 'array' && length(req.params) == 0)) { return ubus_reply(req.id, null, ubus.list()); } else if (type(req.params) == 'array') { const rv = {}; for (let param in req.params) { if (type(param) != 'string') return ubus_reply(req.id, null, -32602, 'Invalid parameters'); for (let m, p in ubus.list(param)?.[0]) { for (let pn, pt in p) { rv[param] ??= {}; rv[param][m] ??= {}; rv[param][m][pn] = ubus_types[pt] ?? 'unknown'; } } } return ubus_reply(req.id, null, rv); } else { return ubus_reply(req.id, null, -32602, 'Invalid parameters') } } return ubus_reply(req.id, null, -32601, 'Method not found') } return { action_ubus: function() { let request; try { request = json(http.content()); } catch { request = null; } http.prepare_content('application/json; charset=UTF-8'); if (type(request) == 'object') http.write_json(ubus_request(request)); else if (type(request) == 'array') http.write_json(map(request, ubus_request)); else http.write_json(ubus_reply(null, null, -32700, 'Parse error')) }, action_translations: function(reqlang) { if (reqlang != null && reqlang != dispatcher.lang) { load_catalog(reqlang, '/usr/lib/lua/luci/i18n'); change_catalog(reqlang); } http.prepare_content('application/javascript; charset=UTF-8'); http.write('window.TR={'); get_translations((key, val) => http.write(sprintf('"%08x":%J,', key, val))); http.write('};'); }, action_logout: function() { const url = dispatcher.build_url(); if (ctx.authsession) { ubus.call('session', 'destroy', { ubus_rpc_session: ctx.authsession }); if (http.getenv('HTTPS') == 'on') http.header('Set-Cookie', `sysauth_https=; expires=Thu, 01 Jan 1970 01:00:00 GMT; path=${url}`); else http.header('Set-Cookie', `sysauth_http=; expires=Thu, 01 Jan 1970 01:00:00 GMT; path=${url}`); } http.redirect(url); }, action_menu: function() { const session = dispatcher.is_authenticated({ methods: [ 'cookie:sysauth_https', 'cookie:sysauth_http' ] }); const menu = dispatcher.menu_json(session?.acls ?? {}) ?? {}; http.prepare_content('application/json; charset=UTF-8'); http.write_json(menu); } }; 07070100DC3C4F000081A400000000000000000000000168F513D900000CE8000000080000000100000000000000000000002D00000000usr/share/ucode/luci/controller/admin/uci.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { STATUS_NO_DATA, STATUS_PERMISSION_DENIED } from 'ubus'; let last_ubus_error; const ubus_error_map = [ 200, 'OK', 400, 'Invalid command', 400, 'Invalid argument', 404, 'Method not found', 404, 'Not found', 204, 'No data', 403, 'Permission denied', 504, 'Timeout', 500, 'Not supported', 500, 'Unknown error', 503, 'Connection failed', 500, 'Out of memory', 400, 'Parse error', 500, 'System error', ]; function ubus_call(object, method, args) { ubus.error(); // clear previous error let res = ubus.call(object, method, args); last_ubus_error = ubus.error(true); return res ?? !last_ubus_error; } function ubus_state_to_http(err) { let code = ubus_error_map[(err << 1) + 0] ?? 200; let msg = ubus_error_map[(err << 1) + 1] ?? 'OK'; http.status(code, msg); if (code != 204) { http.prepare_content('text/plain'); http.write(msg); } } function uci_apply(rollback) { if (rollback) { const timeout = +(config?.apply?.rollback ?? 90) || 0; const success = ubus_call('uci', 'apply', { ubus_rpc_session: ctx.authsession, timeout: max(timeout, 90), rollback: true }); if (success) { const token = dispatcher.randomid(16); ubus.call('session', 'set', { ubus_rpc_session: '00000000000000000000000000000000', values: { rollback: { token, session: ctx.authsession, timeout: time() + timeout } } }); return token; } return null; } else { let changes = ubus_call('uci', 'changes', { ubus_rpc_session: ctx.authsession })?.changes; for (let config in changes) if (!ubus_call('uci', 'commit', { ubus_rpc_session: ctx.authsession, config })) return false; return ubus_call('uci', 'apply', { ubus_rpc_session: ctx.authsession, rollback: false }); } } function uci_confirm(token) { const data = ubus.call('session', 'get', { ubus_rpc_session: '00000000000000000000000000000000', keys: [ 'rollback' ] })?.values?.rollback; if (type(data?.token) != 'string' || type(data?.session) != 'string' || type(data?.timeout) != 'int' || data.timeout < time()) { last_ubus_error = STATUS_NO_DATA; return false; } if (token != data.token) { last_ubus_error = STATUS_PERMISSION_DENIED; return false; } if (!ubus_call('uci', 'confirm', { ubus_rpc_session: data.session })) return false; ubus_call('session', 'set', { ubus_rpc_session: '00000000000000000000000000000000', values: { rollback: {} } }); return true; } return { action_apply_rollback: function() { const token = uci_apply(true); if (token) { http.prepare_content('application/json; charset=UTF-8'); http.write_json({ token }); } else { ubus_state_to_http(last_ubus_error); } }, action_apply_unchecked: function() { uci_apply(false); ubus_state_to_http(last_ubus_error); }, action_confirm: function() { uci_confirm(http.formvalue('token')); ubus_state_to_http(last_ubus_error); }, action_revert: function() { for (let config in ubus_call('uci', 'changes', { ubus_rpc_session: ctx.authsession })?.changes) if (!ubus_call('uci', 'revert', { ubus_rpc_session: ctx.authsession, config })) break; ubus_state_to_http(last_ubus_error); } }; 07070100DC3C74000081A400000000000000000000000168F513D900000056000000080000000100000000000000000000002000000000usr/share/ucode/luci/version.ucexport const revision = '25.292.66247~75e41cb', branch = 'LuCI openwrt-24.10 branch'; 07070100DC355F000081A400000000000000000000000168F513D9000137CC000000080000000100000000000000000000001700000000usr/share/ucode/fw4.ucconst fs = require("fs"); const uci = require("uci"); const ubus = require("ubus"); const STATEFILE = "/var/run/fw4.state"; const PARSE_LIST = 0x01; const FLATTEN_LIST = 0x02; const NO_INVERT = 0x04; const UNSUPPORTED = 0x08; const REQUIRED = 0x10; const DEPRECATED = 0x20; const ipv4_icmptypes = { "any": [ 0xFF, 0, 0xFF ], "echo-reply": [ 0, 0, 0xFF ], "pong": [ 0, 0, 0xFF ], /* Alias */ "destination-unreachable": [ 3, 0, 0xFF ], "network-unreachable": [ 3, 0, 0 ], "host-unreachable": [ 3, 1, 1 ], "protocol-unreachable": [ 3, 2, 2 ], "port-unreachable": [ 3, 3, 3 ], "fragmentation-needed": [ 3, 4, 4 ], "source-route-failed": [ 3, 5, 5 ], "network-unknown": [ 3, 6, 6 ], "host-unknown": [ 3, 7, 7 ], "network-prohibited": [ 3, 9, 9 ], "host-prohibited": [ 3, 10, 10 ], "TOS-network-unreachable": [ 3, 11, 11 ], "TOS-host-unreachable": [ 3, 12, 12 ], "communication-prohibited": [ 3, 13, 13 ], "host-precedence-violation": [ 3, 14, 14 ], "precedence-cutoff": [ 3, 15, 15 ], "source-quench": [ 4, 0, 0xFF ], "redirect": [ 5, 0, 0xFF ], "network-redirect": [ 5, 0, 0 ], "host-redirect": [ 5, 1, 1 ], "TOS-network-redirect": [ 5, 2, 2 ], "TOS-host-redirect": [ 5, 3, 3 ], "echo-request": [ 8, 0, 0xFF ], "ping": [ 8, 0, 0xFF ], /* Alias */ "router-advertisement": [ 9, 0, 0xFF ], "router-solicitation": [ 10, 0, 0xFF ], "time-exceeded": [ 11, 0, 0xFF ], "ttl-exceeded": [ 11, 0, 0xFF ], /* Alias */ "ttl-zero-during-transit": [ 11, 0, 0 ], "ttl-zero-during-reassembly": [ 11, 1, 1 ], "parameter-problem": [ 12, 0, 0xFF ], "ip-header-bad": [ 12, 0, 0 ], "required-option-missing": [ 12, 1, 1 ], "timestamp-request": [ 13, 0, 0xFF ], "timestamp-reply": [ 14, 0, 0xFF ], "address-mask-request": [ 17, 0, 0xFF ], "address-mask-reply": [ 18, 0, 0xFF ] }; const ipv6_icmptypes = { /* "name": [ type-code, code-min, code-max ] */ "destination-unreachable": [ 1, 0, 0xFF ], "no-route": [ 1, 0, 0 ], "communication-prohibited": [ 1, 1, 1 ], "address-unreachable": [ 1, 3, 3 ], "port-unreachable": [ 1, 4, 4 ], "packet-too-big": [ 2, 0, 0xFF ], "time-exceeded": [ 3, 0, 0xFF ], "ttl-exceeded": [ 3, 0, 0xFF ], /* Alias */ "ttl-zero-during-transit": [ 3, 0, 0 ], "ttl-zero-during-reassembly": [ 3, 1, 1 ], "parameter-problem": [ 4, 0, 0xFF ], "bad-header": [ 4, 0, 0 ], "unknown-header-type": [ 4, 1, 1 ], "unknown-option": [ 4, 2, 2 ], "echo-request": [ 128, 0, 0xFF ], "ping": [ 128, 0, 0xFF ], /* Alias */ "echo-reply": [ 129, 0, 0xFF ], "pong": [ 129, 0, 0xFF ], /* Alias */ /* only code zero (0) */ "multicast-listener-query": [ 130, 0, 0xFF ], "multicast-listener-report": [ 131, 0, 0xFF ], "multicast-listener-done": [ 132, 0, 0xFF ], "router-solicitation": [ 133, 0, 0xFF ], "router-advertisement": [ 134, 0, 0xFF ], "neighbour-solicitation": [ 135, 0, 0xFF ], "neighbor-solicitation": [ 135, 0, 0xFF ], /* Alias */ "neighbour-advertisement": [ 136, 0, 0xFF ], "neighbor-advertisement": [ 136, 0, 0xFF ], /* Alias */ "redirect": [ 137, 0, 0xFF ], /* codes 0, 1, 255 */ "router-renumbering": [ 138, 0, 0xFF ], /* codes 0, 1, 2 */ "node-info-query": [ 139, 0, 0xFF ], /* codes 0, 1, 2 */ "node-info-response": [ 140, 0, 0xFF ], "inverse-neighbour-discovery-solicitation-message": [ 141, 0, 0xFF ], "inverse-neighbor-discovery-solicitation-message": [ 141, 0, 0xFF ], /* Alias */ "inverse-neighbour-discovery-advertisement-message": [ 142, 0, 0xFF ], "inverse-neighbor-discovery-advertisement-message": [ 142, 0, 0xFF ], /* Alias */ "v2-multicast-listener-report": [ 143, 0, 0xFF ], "home-agent-address-discovery-request-message": [ 144, 0, 0xFF ], "home-agent-address-discovery-reply-message": [ 145, 0, 0xFF ], "mobile-prefix-solicitation": [ 146, 0, 0xFF ], "mobile-prefix-advertisement": [ 147, 0, 0xFF ], /* SEND */ "certification-path-solicitation-message": [ 148, 0, 0xFF ], "certification-path-advertisement-message": [ 149, 0, 0xFF ], "seamoby-protocol-message": [ 150, 0, 0xFF ], /* IPv6 multicast: FF02:0:0:0:0:0:0:6A, no code fields */ "multicast-router-advertisement": [ 151, 0, 0xFF ], "multicast-router-solicitation": [ 152, 0, 0xFF ], "multicast-router-termination": [ 153, 0, 0xFF ], /* codes 0-5, 6-255 */ "fmipv6-message": [ 154, 0, 0xFF ], "rpl-control-message": [ 155, 0, 0xFF ], "ilnpv6-locator-update-message": [ 156, 0, 0xFF ], /* codes 0-4, 5-15 */ "duplicate-address-request": [ 157, 0, 0xFF ], /* codes 0-4, 5-15 */ "duplicate-address-confirmation": [ 158, 0, 0xFF ], /* Multicast Protocol for Low-Power */ "mpl-control-message": [ 159, 0, 0xFF ], /* codes 0, 1-255 */ "extended-echo-request": [ 160, 0, 0xFF ], "extended-ping": [ 160, 0, 0xFF ], /* Alias */ /* codes 0-4, 5-255 */ "extended-echo-reply": [ 161, 0, 0xFF ], "extended-pong": [ 161, 0, 0xFF ] /* Alias */ }; const dscp_classes = { "CS0": 0x00, "CS1": 0x08, "CS2": 0x10, "CS3": 0x18, "CS4": 0x20, "CS5": 0x28, "CS6": 0x30, "CS7": 0x38, "BE": 0x00, "LE": 0x01, "AF11": 0x0a, "AF12": 0x0c, "AF13": 0x0e, "AF21": 0x12, "AF22": 0x14, "AF23": 0x16, "AF31": 0x1a, "AF32": 0x1c, "AF33": 0x1e, "AF41": 0x22, "AF42": 0x24, "AF43": 0x26, "EF": 0x2e }; function to_mask(bits, v6) { let m = [], n = false; if (bits < 0) { n = true; bits = -bits; } if (bits > (v6 ? 128 : 32)) return null; for (let i = 0; i < (v6 ? 16 : 4); i++) { let b = (bits < 8) ? bits : 8; m[i] = (n ? ~(0xff << (8 - b)) : (0xff << (8 - b))) & 0xff; bits -= b; } return arrtoip(m); } function to_bits(mask) { let a = iptoarr(mask); if (!a) return null; let bits = 0; for (let i = 0, z = false; i < length(a); i++) { z ||= !a[i]; while (!z && (a[i] & 0x80)) { a[i] = (a[i] << 1) & 0xff; bits++; } if (a[i]) return null; } return bits; } function apply_mask(addr, mask) { let a = iptoarr(addr); if (!a) return null; if (type(mask) == "int") { for (let i = 0; i < length(a); i++) { let b = (mask < 8) ? mask : 8; a[i] &= (0xff << (8 - b)) & 0xff; mask -= b; } } else { let m = iptoarr(mask); if (!m || length(a) != length(m)) return null; for (let i = 0; i < length(a); i++) a[i] &= m[i]; } return arrtoip(a); } function to_array(x) { if (type(x) == "array") return x; if (x == null) return []; if (type(x) == "object") return [ x ]; x = trim("" + x); return (x == "") ? [] : split(x, /[ \t]+/); } function filter_pos(x) { let rv = filter(x, e => !e.invert); return length(rv) ? rv : null; } function filter_neg(x) { let rv = filter(x, e => e.invert); return length(rv) ? rv : null; } function null_if_empty(x) { return length(x) ? x : null; } function subnets_split_af(x) { let rv = {}; for (let ag in to_array(x)) { for (let a in filter(ag.addrs, a => (a.family == 4))) push(rv[0] ||= [], { ...a, invert: ag.invert }); for (let a in filter(ag.addrs, a => (a.family == 6))) push(rv[1] ||= [], { ...a, invert: ag.invert }); } if (rv[0] || rv[1]) rv.family = (!rv[0] ^ !rv[1]) ? (rv[0] ? 4 : 6) : 0; return rv; } function subnets_group_by_masking(x) { let groups = [], plain = [], nc = [], invert_plain = [], invert_masked = []; for (let a in to_array(x)) { if (a.bits == -1 && !a.invert) push(nc, a); else if (!a.invert) push(plain, a); else if (a.bits == -1) push(invert_masked, a); else push(invert_plain, a); } for (let a in nc) push(groups, [ null, null_if_empty(invert_plain), [ a, ...invert_masked ] ]); if (length(plain)) { push(groups, [ plain, null_if_empty(invert_plain), null_if_empty(invert_masked) ]); } else if (!length(groups)) { push(groups, [ null, null_if_empty(invert_plain), null_if_empty(invert_masked) ]); } return groups; } function ensure_tcpudp(x) { if (length(filter(x, p => (p.name == "tcp" || p.name == "udp")))) return true; let rest = filter(x, p => !p.any), any = filter(x, p => p.any); if (length(any) && !length(rest)) { splice(x, 0); push(x, { name: "tcp" }, { name: "udp" }); return true; } return false; } let is_family = (x, v) => (!x.family || x.family == v); let family_is_ipv4 = (x) => (!x.family || x.family == 4); let family_is_ipv6 = (x) => (!x.family || x.family == 6); function infer_family(f, objects) { let res = f; let by = null; for (let i = 0; i < length(objects); i += 2) { let objs = to_array(objects[i]), desc = objects[i + 1]; for (let obj in objs) { if (!obj || !obj.family || obj.family == res) continue; if (!res) { res = obj.family; by = obj.desc; continue; } return by ? `references IPv${obj.family} only ${desc} but is restricted to IPv${res} by ${by}` : `is restricted to IPv${res} but referenced ${desc} is IPv${obj.family} only`; } } return res; } function map_setmatch(set, match, proto) { if (!set || (('inet_service' in set.types) && proto != 'tcp' && proto != 'udp')) return null; let fields = []; for (let i, t in set.types) { let dir = ((match.dir?.[i] || set.directions[i] || 'src') == 'src' ? 's' : 'd'); switch (t) { case 'ipv4_addr': fields[i] = `ip ${dir}addr`; break; case 'ipv6_addr': fields[i] = `ip6 ${dir}addr`; break; case 'ether_addr': if (dir != 's') return NaN; fields[i] = 'ether saddr'; break; case 'inet_service': fields[i] = `${proto} ${dir}port`; break; } } return fields; } function resolve_lower_devices(devstatus, devname) { let dir = fs.opendir(`/sys/class/net/${devname}`); let devs = []; if (dir) { switch (devstatus[devname]?.devtype) { case 'vlan': case 'bridge': let e; while ((e = dir.read()) != null) if (index(e, "lower_") === 0) push(devs, ...resolve_lower_devices(devstatus, substr(e, 6))); break; default: push(devs, devname); break; } dir.close(); } return devs; } function nft_json_command(...args) { let cmd = [ "/usr/sbin/nft", "--terse", "--json", ...args ]; let nft = fs.popen(join(" ", cmd), "r"); let info; if (nft) { try { info = filter(json(nft.read("all"))?.nftables, item => (type(item) == "object" && !item.metainfo)); } catch (e) { warn(`Unable to parse nftables JSON output: ${e}\n`); } nft.close(); } else { warn(`Unable to popen() ${cmd}: ${fs.error()}\n`); } return info || []; } function nft_try_hw_offload(devices) { let nft_test = ` add table inet fw4-hw-offload-test; add flowtable inet fw4-hw-offload-test ft { hook ingress priority 0; devices = { "${join('", "', devices)}" }; flags offload; } `; let rc = system(`/usr/sbin/nft -c '${replace(nft_test, "'", "'\\''")}' 2>/dev/null`); return (rc == 0); } return { read_kernel_version: function() { let fd = fs.open("/proc/version", "r"), v = 0; if (fd) { let m = match(fd.read("line"), /^Linux version ([0-9]+)\.([0-9]+)\.([0-9]+)/); v = m ? (+m[1] << 24) | (+m[2] << 16) | (+m[3] << 8) : 0; fd.close(); } return v; }, resolve_hw_offload_devices: function() { if (!this.default_option("flow_offloading_hw")) return null; let devstatus = null; let devices = null; let bus = ubus.connect(); if (bus) { devstatus = bus.call("network.device", "status") || {}; bus.disconnect(); } for (let zone in this.zones()) for (let device in zone.related_physdevs) push(devices ||= [], ...resolve_lower_devices(devstatus, device)); if (!devices) return null; devices = sort(uniq(devices)); if (!nft_try_hw_offload(devices)) { this.warn('Hardware flow offloading unavailable, falling back to software offloading'); this.state.defaults.flow_offloading_hw = false; return null; } return devices; }, resolve_offload_devices: function() { if (!this.default_option("flow_offloading")) return []; let devices = this.resolve_hw_offload_devices(); if (!devices) { devices = []; for (let zone in this.zones()) for (let device in zone.related_physdevs) if (fs.access(`/sys/class/net/${device}`)) push(devices, device); devices = sort(uniq(devices)); } return devices; }, check_set_types: function() { let sets = {}; for (let item in nft_json_command("list", "sets", "inet")) if (item.set?.table == "fw4") sets[item.set.name] = (type(item.set.type) == "array") ? item.set.type : [ item.set.type ]; return sets; }, check_flowtable: function() { for (let item in nft_json_command("list", "flowtables", "inet")) if (item.flowtable?.table == "fw4" && item.flowtable?.name == "ft") return true; return false; }, read_state: function() { let fd = fs.open(STATEFILE, "r"); let state = null; if (fd) { try { state = json(fd.read("all")); } catch (e) { warn(`Unable to parse '${STATEFILE}': ${e}\n`); } fd.close(); } return state; }, read_ubus: function() { let self = this, ifaces, services, rules = [], networks = {}, bus = ubus.connect(); if (bus) { ifaces = bus.call("network.interface", "dump"); services = bus.call("service", "get_data", { "type": "firewall" }); bus.disconnect(); } else { warn(`Unable to connect to ubus: ${ubus.error()}\n`); } // // Gather logical network information from ubus // if (type(ifaces?.interface) == "array") { for (let ifc in ifaces.interface) { let net = { up: ifc.up, device: ifc.l3_device ?? ifc.device, physdev: ifc.device, zone: ifc.data?.zone }; if (type(ifc["ipv4-address"]) == "array") { for (let addr in ifc["ipv4-address"]) { push(net.ipaddrs ||= [], { family: 4, addr: addr.address, mask: to_mask(addr.mask, false), bits: addr.mask }); } } if (type(ifc["ipv6-address"]) == "array") { for (let addr in ifc["ipv6-address"]) { push(net.ipaddrs ||= [], { family: 6, addr: addr.address, mask: to_mask(addr.mask, true), bits: addr.mask }); } } if (type(ifc["ipv6-prefix-assignment"]) == "array") { for (let addr in ifc["ipv6-prefix-assignment"]) { if (addr["local-address"]) { push(net.ipaddrs ||= [], { family: 6, addr: addr["local-address"].address, mask: to_mask(addr["local-address"].mask, true), bits: addr["local-address"].mask }); } } } if (type(ifc.data?.firewall) == "array") { let n = 0; for (let rulespec in ifc.data.firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${ifc.interface}[${ifc.proto}] ${rulespec.type || 'rule'} ${n}` : rulespec.name, device: rulespec.device ?? ifc.l3_device ?? ifc.device }); n++; } } networks[ifc.interface] = net; } } // // Gather firewall rule definitions from ubus services // if (type(services) == "object") { for (let svcname, service in services) { if (type(service?.firewall) == "array") { let n = 0; for (let rulespec in services[svcname].firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${svcname} ${rulespec.type || 'rule'} ${n}` : rulespec.name }); n++; } } for (let svcinst, instance in service) { if (type(instance?.firewall) == "array") { let n = 0; for (let rulespec in instance.firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${svcname}[${svcinst}] ${rulespec.type || 'rule'} ${n}` : rulespec.name }); n++; } } } } } return { networks: networks, ubus_rules: rules }; }, load: function(use_statefile) { let self = this; this.state = use_statefile ? this.read_state() : null; this.cursor = uci.cursor(); this.cursor.load("firewall"); this.cursor.load("/usr/share/firewall4/helpers"); if (!this.state) this.state = this.read_ubus(); this.kernel = this.read_kernel_version(); // // Read helper mapping // this.cursor.foreach("helpers", "helper", h => self.parse_helper(h)); // // Read default policies // this.cursor.foreach("firewall", "defaults", d => self.parse_defaults(d)); if (!this.state.defaults) this.parse_defaults({}); // // Build list of ipsets // if (!this.state.ipsets) { map(filter(this.state.ubus_rules, n => (n.type == "ipset")), s => self.parse_ipset(s)); this.cursor.foreach("firewall", "ipset", s => self.parse_ipset(s)); } // // Build list of logical zones // if (!this.state.zones) this.cursor.foreach("firewall", "zone", z => self.parse_zone(z)); // // Build list of rules // map(filter(this.state.ubus_rules, r => (r.type == "rule")), r => self.parse_rule(r)); this.cursor.foreach("firewall", "rule", r => self.parse_rule(r)); // // Build list of forwardings // this.cursor.foreach("firewall", "forwarding", f => self.parse_forwarding(f)); // // Build list of redirects // map(filter(this.state.ubus_rules, r => (r.type == "redirect")), r => self.parse_redirect(r)); this.cursor.foreach("firewall", "redirect", r => self.parse_redirect(r)); // // Build list of snats // map(filter(this.state.ubus_rules, n => (n.type == "nat")), n => self.parse_nat(n)); this.cursor.foreach("firewall", "nat", n => self.parse_nat(n)); // // Build list of includes // this.cursor.foreach("firewall", "include", i => self.parse_include(i)); // // Discover automatic includes // if (this.default_option("auto_includes")) { for (let position in [ 'ruleset-pre', 'ruleset-post', 'table-pre', 'table-post', 'chain-pre', 'chain-post' ]) for (let chain in (position in [ 'chain-pre', 'chain-post' ]) ? fs.lsdir(`/usr/share/nftables.d/${position}`) : [ null ]) for (let path in fs.glob(`/usr/share/nftables.d/${position}${chain ? `/${chain}` : ''}/*.nft`)) if (fs.access(path)) this.parse_include({ type: 'nftables', position, chain, path }); } if (use_statefile) { let fd = fs.open(STATEFILE, "w"); if (fd) { fd.write({ zones: this.state.zones, ipsets: this.state.ipsets, networks: this.state.networks, ubus_rules: this.state.ubus_rules, includes: this.state.includes }); fd.close(); } else { warn(`Unable to write '${STATEFILE}': ${fs.error()}\n`); } } }, warn: function(fmt, ...args) { if (getenv("QUIET")) return; let msg = sprintf(fmt, ...args); if (getenv("TTY")) warn(`\033[33m${msg}\033[m\n`); else warn(`[!] ${msg}\n`); }, get: function(sid, opt) { return this.cursor.get("firewall", sid, opt); }, get_all: function(sid) { return this.cursor.get_all("firewall", sid); }, parse_options: function(s, spec) { let rv = {}; for (let key, val in spec) { let datatype = `parse_${val[0]}`, defval = val[1], flags = val[2] || 0, parsefn = (flags & PARSE_LIST) ? "parse_list" : "parse_opt"; let res = this[parsefn](s, key, datatype, defval, flags); if (res !== res) return false; if (type(res) == "object" && res.invert && (flags & NO_INVERT)) { this.warn_section(s, `option '${key}' must not be negated`); return false; } if (res != null) { if (flags & DEPRECATED) this.warn_section(s, `option '${key}' is deprecated by fw4`); else if (flags & UNSUPPORTED) this.warn_section(s, `option '${key}' is not supported by fw4`); else rv[key] = res; } } for (let opt in s) { if (index(opt, '.') != 0 && opt != 'type' && !exists(spec, opt)) { this.warn_section(s, `specifies unknown option '${opt}'`); } } return rv; }, parse_subnet: function(subnet) { let parts = split(subnet, "/"); let a, b, m, n; switch (length(parts)) { case 2: a = iptoarr(parts[0]); m = iptoarr(parts[1]); if (!a) return null; if (m) { if (length(a) != length(m)) return null; b = to_bits(parts[1]); /* allow non-contiguous masks such as `::ffff:ffff:ffff:ffff` */ if (b == null) { b = -1; for (let i, x in m) a[i] &= x; } m = arrtoip(m); } else { b = +parts[1]; if (type(b) != "int") return null; m = to_mask(b, length(a) == 16); b = max(-1, b); } return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), mask: m, bits: b }]; case 1: parts = split(parts[0], "-"); switch (length(parts)) { case 2: a = iptoarr(parts[0]); b = iptoarr(parts[1]); if (a && b && length(a) == length(b)) { return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), addr2: arrtoip(b), range: true }]; } break; case 1: a = iptoarr(parts[0]); if (a) { return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), mask: to_mask(length(a) * 8, length(a) == 16), bits: length(a) * 8 }]; } n = this.state.networks[parts[0]]; if (n) return [ ...(n.ipaddrs || []) ]; } } return null; }, parse_enum: function(val, choices) { if (type(val) == "string") { val = lc(val); for (let i = 0; i < length(choices); i++) if (lc(substr(choices[i], 0, length(val))) == val) return choices[i]; } return null; }, section_id: function(sid) { let s = this.get_all(sid); if (!s) return null; if (s[".anonymous"]) { let c = 0; this.cursor.foreach("firewall", s[".type"], function(ss) { if (ss[".name"] == s[".name"]) return false; c++; }); return `@${s['.type']}[${c}]`; } return s[".name"]; }, warn_section: function(s, msg) { if (s[".name"]) { if (s.name) this.warn("Section %s (%s) %s", this.section_id(s[".name"]), s.name, msg); else this.warn("Section %s %s", this.section_id(s[".name"]), msg); } else { if (s.name) this.warn("ubus %s (%s) %s", s.type || "rule", s.name, msg); else this.warn("ubus %s %s", s.type || "rule", msg); } }, parse_policy: function(val) { return this.parse_enum(val, [ "accept", "reject", "drop" ]); }, parse_bool: function(val) { if (val == "1" || val == "on" || val == "true" || val == "yes") return true; else if (val == "0" || val == "off" || val == "false" || val == "no") return false; else return null; }, parse_family: function(val) { if (val == 'any' || val == 'all' || val == '*') return 0; else if (val == 'inet' || index(val, '4') > -1) return 4; else if (index(val, '6') > -1) return 6; return null; }, parse_zone_ref: function(val) { if (val == null) return null; if (val == '*') return { any: true }; for (let zone in this.state.zones) { if (zone.name == val) { return { any: false, zone: zone }; } } return null; }, parse_device: function(val) { let rv = this.parse_invert(val); if (!rv) return null; if (rv.val == '*') rv.any = true; else rv.device = rv.val; return rv; }, parse_direction: function(val) { if (val == 'in' || val == 'ingress') return false; else if (val == 'out' || val == 'egress') return true; return null; }, parse_setmatch: function(val) { let rv = this.parse_invert(val); if (!rv) return null; rv.val = trim(replace(rv.val, /^[^ \t]+/, function(m) { rv.name = m; return ''; })); let dir = split(rv.val, /[ \t,]/); for (let i = 0; i < 3 && i < length(dir); i++) { if (dir[i] == "dst" || dir[i] == "dest") (rv.dir ||= [])[i] = "dst"; else if (dir[i] == "src") (rv.dir ||= [])[i] = "src"; } return length(rv.name) ? rv : null; }, parse_cthelper: function(val) { let rv = this.parse_invert(val); if (!rv) return null; let helper = filter(this.state.helpers, h => (h.name == rv.val))?.[0]; return helper ? { ...rv, ...helper } : null; }, parse_protocol: function(val) { let p = this.parse_invert(val); if (!p) return null; p.val = lc(p.val); switch (p.val) { case 'all': case 'any': case '*': p.any = true; break; case '1': case 'icmp': p.name = 'icmp'; break; case '58': case 'icmpv6': case 'ipv6-icmp': p.name = 'ipv6-icmp'; break; case 'tcpudp': return [ { invert: p.invert, name: 'tcp' }, { invert: p.invert, name: 'udp' } ]; case '6': p.name = 'tcp'; break; case '17': p.name = 'udp'; break; default: p.name = p.val; } return (p.any || length(p.name)) ? p : null; }, parse_mac: function(val) { let mac = this.parse_invert(val); let m = mac ? match(mac.val, /^([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})$/i) : null; if (!m) return null; mac.mac = sprintf('%02x:%02x:%02x:%02x:%02x:%02x', hex(m[1]), hex(m[2]), hex(m[3]), hex(m[4]), hex(m[5]), hex(m[6])); return mac; }, parse_port: function(val) { let port = this.parse_invert(val); let m = port ? match(port.val, /^([0-9]{1,5})([-:]([0-9]{1,5}))?$/i) : null; if (!m) return null; if (m[3]) { let min_port = +m[1]; let max_port = +m[3]; if (min_port > max_port || min_port < 0 || max_port < 0 || min_port > 65535 || max_port > 65535) return null; port.min = min_port; port.max = max_port; } else { let pn = +m[1]; if (pn != pn || pn < 0 || pn > 65535) return null; port.min = pn; port.max = pn; } return port; }, parse_network: function(val) { let rv = this.parse_invert(val); if (!rv) return null; let nets = this.parse_subnet(rv.val); if (nets === null) return null; if (length(nets)) rv.addrs = [ ...nets ]; return rv; }, parse_icmptype: function(val) { let rv = {}; if (exists(ipv4_icmptypes, val)) { rv.family = 4; rv.type = ipv4_icmptypes[val][0]; rv.code_min = ipv4_icmptypes[val][1]; rv.code_max = ipv4_icmptypes[val][2]; } if (exists(ipv6_icmptypes, val)) { rv.family = rv.family ? 0 : 6; rv.type6 = ipv6_icmptypes[val][0]; rv.code6_min = ipv6_icmptypes[val][1]; rv.code6_max = ipv6_icmptypes[val][2]; } if (!exists(rv, "family")) { let m = match(val, /^([0-9]+)(\/([0-9]+))?$/); if (!m) return null; if (m[3]) { rv.type = +m[1]; rv.code_min = +m[3]; rv.code_max = rv.code_min; } else { rv.type = +m[1]; rv.code_min = 0; rv.code_max = 0xFF; } if (rv.type > 0xFF || rv.code_min > 0xFF || rv.code_max > 0xFF) return null; rv.family = 0; rv.type6 = rv.type; rv.code6_min = rv.code_min; rv.code6_max = rv.code_max; } return rv; }, parse_invert: function(val) { if (val == null) return null; let rv = { invert: false }; rv.val = trim(replace(val, /^[ \t]*!/, () => (rv.invert = true, ''))); return length(rv.val) ? rv : null; }, parse_limit: function(val) { let rv = this.parse_invert(val); let m = rv ? match(rv.val, /^([0-9]+)(\/([a-z]+))?$/) : null; if (!m) return null; let n = +m[1]; let u = m[3] ? this.parse_enum(m[3], [ "second", "minute", "hour", "day" ]) : "second"; if (!u) return null; rv.rate = n; rv.unit = u; return rv; }, parse_int: function(val) { let n = +val; return (n == n) ? n : null; }, parse_date: function(val) { let d = match(val, /^([0-9]{4})(-([0-9]{1,2})(-([0-9]{1,2})(T([0-9:]+))?)?)?$/); if (d == null || d[1] < 1970 || d[1] > 2038 || d[3] > 12 || d[5] > 31) return null; let t = this.parse_time(d[7] ?? "0"); if (t == null) return null; return { year: +d[1], month: +d[3] || 1, day: +d[5] || 1, ...t }; }, parse_time: function(val) { let t = match(val, /^([0-9]{1,2})(:([0-9]{1,2})(:([0-9]{1,2}))?)?$/); if (t == null || t[1] > 23 || t[3] > 59 || t[5] > 59) return null; return { hour: +t[1], min: +t[3], sec: +t[5] }; }, parse_weekdays: function(val) { let rv = this.parse_invert(val); if (!rv) return null; for (let day in to_array(rv.val)) { day = this.parse_enum(day, [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ]); if (!day) return null; (rv.days ||= {})[day] = true; } rv.days = keys(rv.days); return rv.days ? rv : null; }, parse_monthdays: function(val) { let rv = this.parse_invert(val); if (!rv) return null; for (let day in to_array(rv.val)) { day = +day; if (day < 1 || day > 31) return null; (rv.days ||= [])[day] = true; } return rv.days ? rv : null; }, parse_mark: function(val) { let rv = this.parse_invert(val); let m = rv ? match(rv.val, /^(0?x?[0-9a-f]+)(\/(0?x?[0-9a-f]+))?$/i) : null; if (!m) return null; let n = +m[1]; if (n != n || n > 0xFFFFFFFF) return null; rv.mark = n; rv.mask = 0xFFFFFFFF; if (m[3]) { n = +m[3]; if (n != n || n > 0xFFFFFFFF) return null; rv.mask = n; } return rv; }, parse_dscp: function(val) { let rv = this.parse_invert(val); if (!rv) return null; rv.val = uc(rv.val); if (exists(dscp_classes, rv.val)) { rv.dscp = dscp_classes[rv.val]; } else { let n = +rv.val; if (n != n || n < 0 || n > 0x3F) return null; rv.dscp = n; } return rv; }, parse_target: function(val) { return this.parse_enum(val, [ "accept", "reject", "drop", "notrack", "helper", "mark", "dscp", "dnat", "snat", "masquerade", "accept", "reject", "drop" ]); }, parse_reject_code: function(val) { return this.parse_enum(val, [ "tcp-reset", "port-unreachable", "admin-prohibited", "host-unreachable", "no-route" ]); }, parse_reflection_source: function(val) { return this.parse_enum(val, [ "internal", "external" ]); }, parse_ipsettype: function(val) { let m = match(val, /^(src|dst|dest)_(.+)$/); let t = this.parse_enum(m ? m[2] : val, [ "ip", "port", "mac", "net", "set" ]); return t ? [ (!m || m[1] == 'src') ? 'src' : 'dst', t ] : null; }, parse_ipsetentry: function(val, set) { let values = split(val, /[ \t]+/); if (length(values) != length(set.types)) return null; let rv = []; let ip, mac, port; for (let i, t in set.types) { switch (t) { case 'ipv4_addr': ip = filter(this.parse_subnet(values[i]), a => (a.family == 4)); switch (length(ip) ?? 0) { case 0: return null; case 1: break; default: this.warn("Set entry '%s' resolves to multiple addresses, using first one", values[i]); } rv[i] = ("net" in set.fw4types) ? `${ip[0].addr}/${ip[0].bits}` : ip[0].addr; break; case 'ipv6_addr': ip = filter(this.parse_subnet(values[i]), a => (a.family == 6)); switch (length(ip) ?? 0) { case 0: return null; case 1: break; case 2: this.warn("Set entry '%s' resolves to multiple addresses, using first one", values[i]); } rv[i] = ("net" in set.fw4types) ? `${ip[0].addr}/${ip[0].bits}` : ip[0].addr; break; case 'ether_addr': mac = this.parse_mac(values[i]); if (!mac || mac.invert) return null; rv[i] = mac.mac; break; case 'inet_service': port = this.parse_port(values[i]); if (!port || port.invert || port.min != port.max) return null; rv[i] = port.min; break; default: rv[i] = values[i]; } } return length(rv) ? rv : null; }, parse_includetype: function(val) { return this.parse_enum(val, [ "script", "nftables" ]); }, parse_includeposition: function(val) { return replace(this.parse_enum(val, [ "ruleset-prepend", "ruleset-postpend", "ruleset-append", "table-prepend", "table-postpend", "table-append", "chain-prepend", "chain-postpend", "chain-append" ]), "postpend", "append"); }, parse_identifier: function(val) { return match(val, /^[a-zA-Z_.][a-zA-Z0-9\/_.-]*$/)?.[0]; }, parse_string: function(val) { return "" + val; }, parse_opt: function(s, opt, fn, defval, flags) { let val = s[opt]; if (val === null) { if (flags & REQUIRED) { this.warn_section(s, `option '${opt}' is mandatory but not set`); return NaN; } val = defval; } if (type(val) == "array") { this.warn_section(s, `option '${opt}' must not be a list`); return NaN; } else if (val == null) { return null; } let res = this[fn](val); if (res === null) { this.warn_section(s, `option '${opt}' specifies invalid value '${val}'`); return NaN; } return res; }, parse_list: function(s, opt, fn, defval, flags) { let val = s[opt]; let rv = []; if (val == null) { if (flags & REQUIRED) { this.warn_section(s, `option '${opt}' is mandatory but not set`); return NaN; } val = defval; } for (val in to_array(val)) { let res = this[fn](val); if (res === null) { this.warn_section(s, `option '${opt}' specifies invalid value '${val}'`); return NaN; } if (flags & FLATTEN_LIST) push(rv, ...to_array(res)); else push(rv, res); } return length(rv) ? rv : null; }, quote: function(s, force) { if (force === true || !match(s, /^([0-9A-Fa-f:.\/-]+)( \. [0-9A-Fa-f:.\/-]+)*$/)) return `"${replace(s, '"', "'")}"`; return s; }, cidr: function(a) { if (a.range) return `${a.addr}-${a.addr2}`; if ((a.family == 4 && a.bits == 32) || (a.family == 6 && a.bits == 128)) return a.addr; if (a.bits >= 0) return `${apply_mask(a.addr, a.bits)}/${a.bits}`; return `${a.addr}/${a.mask}`; }, host: function(a, v6brackets) { return a.range ? `${a.addr}-${a.addr2}` : (a.family == 6 && v6brackets) ? `[${apply_mask(a.addr, a.bits)}]` : apply_mask(a.addr, a.bits); }, port: function(p) { if (p.min == p.max) return `${p.min}`; return `${p.min}-${p.max}`; }, set: function(v, force) { let seen = {}; v = filter(to_array(v), item => !seen[item]++); if (force || length(v) != 1) return `{ ${join(', ', map(v, this.quote))} }`; return this.quote(v[0]); }, concat: function(v) { return join(' . ', to_array(v)); }, ipproto: function(family) { switch (family) { case 4: return "ip"; case 6: return "ip6"; } }, nfproto: function(family, human_readable) { switch (family) { case 4: return human_readable ? "IPv4" : "ipv4"; case 6: return human_readable ? "IPv6" : "ipv6"; default: return human_readable ? "IPv4/IPv6" : null; } }, l4proto: function(family, proto) { switch (proto.name) { case 'icmp': switch (family ?? 0) { case 0: return this.set(['icmp', 'ipv6-icmp']); case 6: return 'ipv6-icmp'; } default: return proto.name; } }, datetime: function(stamp) { return sprintf('"%04d-%02d-%02d %02d:%02d:%02d"', stamp.year, stamp.month, stamp.day, stamp.hour, stamp.min, stamp.sec); }, date: function(stamp) { return sprintf('"%04d-%02d-%02d"', stamp.year, stamp.month, stamp.day); }, datestamp: function(stamp) { return exists(stamp, 'hour') ? this.datetime(stamp) : this.date(stamp); }, time: function(stamp) { return sprintf('"%02d:%02d:%02d"', stamp.hour, stamp.min, stamp.sec); }, hex: function(n) { return sprintf('0x%x', n); }, is_loopback_dev: function(dev) { return !!(+fs.readfile(`/sys/class/net/${dev}/flags`) & 0x8); }, is_loopback_addr: function(addr) { return (index(addr, "127.") == 0 || addr == "::1" || addr == "::1/128"); }, filter_loopback_devs: function(devs, invert) { return null_if_empty(filter(devs, d => (this.is_loopback_dev(d) == invert))); }, filter_loopback_addrs: function(addrs, invert) { return null_if_empty(filter(addrs, a => (this.is_loopback_addr(a) == invert))); }, input_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.input != 'reject') ? this.state.defaults.input : 'drop'; }, output_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.output != 'reject') ? this.state.defaults.output : 'drop'; }, forward_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.forward != 'reject') ? this.state.defaults.forward : 'drop'; }, default_option: function(flag) { return this.state.defaults[flag]; }, helpers: function() { return this.state.helpers; }, zones: function() { return this.state.zones; }, rules: function(chain) { return filter(this.state.rules, r => (r.chain == chain)); }, redirects: function(chain) { return filter(this.state.redirects, r => (r.chain == chain)); }, ipsets: function() { return this.state.ipsets; }, includes: function(position, chain) { let stmts = []; let pad = ''; let pre = ''; switch (position) { case 'table-prepend': case 'table-append': pad = '\t'; pre = '\n'; break; case 'chain-prepend': case 'chain-append': pad = '\t\t'; break; default: pre = '\n'; } push(stmts, pre); for (let inc in this.state.includes) if (inc.type == 'nftables' && inc.position == position && (!chain || inc.chain == chain)) push(stmts, `${pad}include "${inc.path}"\n`); print(length(stmts) > 1 ? join('', stmts) : ''); }, parse_setfile: function(set, cb) { let fd = fs.open(set.loadfile, "r"); if (!fd) { warn(`Unable to load file '${set.loadfile}' for set '${set.name}': ${fs.error()}\n`); return; } let count = 0; for (let line = fd.read("line"); length(line); line = fd.read("line")) { line = trim(line); if (length(line) == 0 || ord(line) == 35) continue; let v = this.parse_ipsetentry(line, set); if (!v) { this.warn(`Skipping invalid entry '${line}' in file '${set.loadfile}' for set '${set.name}'`); continue; } cb(v); count++; } fd.close(); return count; }, print_setentries: function(set) { let first = true; let printer = (entry) => { if (first) { print("\t\telements = {\n"); first = false; } print("\t\t\t", join(" . ", entry), ",\n"); }; map(set.entries, printer); if (set.loadfile) this.parse_setfile(set, printer); if (!first) print("\t\t}\n"); }, parse_helper: function(data) { let helper = this.parse_options(data, { name: [ "string", null, REQUIRED ], description: [ "string" ], module: [ "string" ], family: [ "family" ], proto: [ "protocol", null, PARSE_LIST | FLATTEN_LIST | NO_INVERT ], port: [ "port", null, NO_INVERT ] }); if (helper === false) { this.warn("Helper definition '%s' skipped due to invalid options", data.name || data['.name']); return; } else if (helper.proto.any) { this.warn("Helper definition '%s' must not specify wildcard protocol", data.name || data['.name']); return; } else if (length(helper.proto) > 1) { this.warn("Helper definition '%s' must not specify multiple protocols", data.name || data['.name']); return; } helper.available = (fs.stat(`/sys/module/${helper.module}`)?.type == "directory"); push(this.state.helpers ||= [], helper); }, parse_defaults: function(data) { if (this.state.defaults) { this.warn_section(data, ": ignoring duplicate defaults section"); return; } let defs = this.parse_options(data, { input: [ "policy", "drop" ], output: [ "policy", "drop" ], forward: [ "policy", "drop" ], drop_invalid: [ "bool" ], tcp_reject_code: [ "reject_code", "tcp-reset" ], any_reject_code: [ "reject_code", "port-unreachable" ], syn_flood: [ "bool" ], synflood_protect: [ "bool" ], synflood_rate: [ "limit", "25/second" ], synflood_burst: [ "int", "50" ], tcp_syncookies: [ "bool", "1" ], tcp_ecn: [ "int" ], tcp_window_scaling: [ "bool", "1" ], accept_redirects: [ "bool" ], accept_source_route: [ "bool" ], auto_helper: [ "bool", "1" ], custom_chains: [ "bool", null, UNSUPPORTED ], disable_ipv6: [ "bool", null, UNSUPPORTED ], flow_offloading: [ "bool", "0" ], flow_offloading_hw: [ "bool", "0" ], auto_includes: [ "bool", "1" ] }); if (defs.synflood_protect === null) defs.synflood_protect = defs.syn_flood; delete defs.syn_flood; this.state.defaults = defs; }, parse_zone: function(data) { let zone = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "identifier", null, REQUIRED ], family: [ "family" ], network: [ "device", null, PARSE_LIST ], device: [ "device", null, PARSE_LIST ], subnet: [ "network", null, PARSE_LIST ], input: [ "policy", this.state.defaults ? this.state.defaults.input : "drop" ], output: [ "policy", this.state.defaults ? this.state.defaults.output : "drop" ], forward: [ "policy", this.state.defaults ? this.state.defaults.forward : "drop" ], masq: [ "bool" ], masq_allow_invalid: [ "bool" ], masq_src: [ "network", null, PARSE_LIST ], masq_dest: [ "network", null, PARSE_LIST ], masq6: [ "bool" ], extra: [ "string", null, UNSUPPORTED ], extra_src: [ "string", null, UNSUPPORTED ], extra_dest: [ "string", null, UNSUPPORTED ], mtu_fix: [ "bool" ], custom_chains: [ "bool", null, UNSUPPORTED ], log: [ "int" ], log_limit: [ "limit" ], auto_helper: [ "bool", "1" ], helper: [ "cthelper", null, PARSE_LIST ], counter: [ "bool", "1" ] }); if (zone === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!zone.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } for (let helper in zone.helper) { if (!helper.available) { this.warn_section(data, `uses unavailable ct helper '${zone.helper.name}'`); } } if (zone.mtu_fix && this.kernel < 0x040a0000) { this.warn_section(data, "option 'mtu_fix' requires kernel 4.10 or later"); return; } if (this.state.defaults?.auto_helper === false) zone.auto_helper = false; let match_devices = []; let related_physdevs = []; let related_subnets = []; let related_ubus_networks = []; let match_subnets, masq_src_subnets, masq_dest_subnets; for (let name, net in this.state.networks) { if (net.zone === zone.name) push(related_ubus_networks, { invert: false, device: name }); } zone.network = [ ...to_array(zone.network), ...related_ubus_networks ]; for (let e in zone.network) { if (exists(this.state.networks, e.device)) { let net = this.state.networks[e.device]; if (net.device) { push(match_devices, { invert: e.invert, device: net.device }); } if (net.physdev && !e.invert) push(related_physdevs, net.physdev); push(related_subnets, ...(net.ipaddrs || [])); } } push(match_devices, ...to_array(zone.device)); match_subnets = subnets_split_af(zone.subnet); masq_src_subnets = subnets_split_af(zone.masq_src); masq_dest_subnets = subnets_split_af(zone.masq_dest); push(related_subnets, ...(match_subnets[0] || []), ...(match_subnets[1] || [])); let match_rules = []; let add_rule = (family, devices, subnets, zone) => { let r = {}; r.family = family; r.devices_pos = null_if_empty(devices[0]); r.devices_neg = null_if_empty(devices[1]); r.devices_neg_wildcard = null_if_empty(devices[2]); r.subnets_pos = map(subnets[0], this.cidr); r.subnets_neg = map(subnets[1], this.cidr); r.subnets_masked = subnets[2]; push(match_rules, r); }; let family = infer_family(zone.family, [ match_subnets, "subnet list" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); return; } // group non-inverted device matches into wildcard and non-wildcard ones let devices = [], plain_devices = [], plain_invert_devices = [], wildcard_invert_devices = []; for (let device in match_devices) { let m = match(device.device, /^([^+]*)(\+)?$/); if (!m) { this.warn_section(data, `skipping invalid wildcard pattern '${device.device}'`); continue; } // filter `+` (match any device) since nftables does not support // wildcard only matches if (!device.invert && m[0] == '+') continue; // replace inverted `+` (match no device) with invalid pattern if (device.invert && m[0] == '+') { device.device = '/never/'; device.invert = false; } // replace "name+" matches with "name*" else if (m[2] == '+') device.device = m[1] + '*'; device.wildcard = !!m[2]; if (!device.invert && device.wildcard) push(devices, [ [ device.device ], plain_invert_devices, wildcard_invert_devices ]); else if (!device.invert) push(plain_devices, device.device); else if (device.wildcard) push(wildcard_invert_devices, device.device); else push(plain_invert_devices, device.device); } if (length(plain_devices)) push(devices, [ plain_devices, plain_invert_devices, wildcard_invert_devices ]); else if (!length(devices)) push(devices, [ null, plain_invert_devices, wildcard_invert_devices ]); // emit zone jump rules for each device group if (length(match_devices) || length(match_subnets[0]) || length(match_subnets[1])) { for (let devgroup in devices) { // check if there's no AF specific bits, in this case we can do AF agnostic matching if (!family && !length(match_subnets[0]) && !length(match_subnets[1])) { add_rule(0, devgroup, [], zone); } // we need to emit one or two AF specific rules else { if (!family || family == 4) for (let subnets in subnets_group_by_masking(match_subnets[0])) add_rule(4, devgroup, subnets, zone); if (!family || family == 6) for (let subnets in subnets_group_by_masking(match_subnets[1])) add_rule(6, devgroup, subnets, zone); } } } zone.family = family; zone.match_rules = match_rules; zone.masq4_src_subnets = subnets_group_by_masking(masq_src_subnets[0]); zone.masq4_dest_subnets = subnets_group_by_masking(masq_dest_subnets[0]); zone.masq6_src_subnets = subnets_group_by_masking(masq_src_subnets[1]); zone.masq6_dest_subnets = subnets_group_by_masking(masq_dest_subnets[1]); zone.sflags = {}; zone.sflags[zone.input] = true; zone.dflags = {}; zone.dflags[zone.output] = true; zone.dflags[zone.forward] = true; zone.match_devices = map(filter(match_devices, d => !d.invert), d => d.device); zone.match_subnets = map(filter(related_subnets, s => !s.invert && s.bits != -1), this.cidr); zone.related_subnets = related_subnets; zone.related_physdevs = related_physdevs; if (zone.masq || zone.masq6) zone.dflags.snat = true; if ((zone.auto_helper && !(zone.masq || zone.masq6)) || length(zone.helper)) { zone.dflags.helper = true; for (let helper in (length(zone.helper) ? zone.helper : this.state.helpers)) { if (!helper.available) continue; for (let proto in helper.proto) { push(this.state.rules ||= [], { chain: `helper_${zone.name}`, family: helper.family, name: helper.description || helper.name, proto: proto, src: zone, dports_pos: [ this.port(helper.port) ], target: "helper", set_helper: helper }); } } } push(this.state.zones ||= [], zone); }, parse_forwarding: function(data) { let fwd = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string" ], family: [ "family" ], src: [ "zone_ref", null, REQUIRED ], dest: [ "zone_ref", null, REQUIRED ] }); if (fwd === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!fwd.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } let add_rule = (family, fwd) => { let f = { ...fwd, family: family, proto: { any: true } }; f.name ||= `Accept ${fwd.src.any ? "any" : fwd.src.zone.name} to ${fwd.dest.any ? "any" : fwd.dest.zone.name} ${family ? `${this.nfproto(family, true)} ` : ''}forwarding`; f.chain = fwd.src.any ? "forward" : `forward_${fwd.src.zone.name}`; if (fwd.dest.any) f.target = "accept"; else f.jump_chain = `accept_to_${fwd.dest.zone.name}`; push(this.state.rules ||= [], f); }; /* inherit family restrictions from related zones */ let family = infer_family(fwd.family, [ fwd.src?.zone, "source zone", fwd.dest?.zone, "destination zone" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); return; } add_rule(family, fwd); if (fwd.dest.zone) fwd.dest.zone.dflags.accept = true; }, parse_rule: function(data) { let rule = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], _name: [ "string", null, DEPRECATED ], family: [ "family" ], src: [ "zone_ref" ], dest: [ "zone_ref" ], device: [ "device", null, NO_INVERT ], direction: [ "direction" ], ipset: [ "setmatch" ], helper: [ "cthelper" ], set_helper: [ "cthelper", null, NO_INVERT ], proto: [ "protocol", "tcpudp", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network", null, PARSE_LIST ], src_mac: [ "mac", null, PARSE_LIST ], src_port: [ "port", null, PARSE_LIST ], dest_ip: [ "network", null, PARSE_LIST ], dest_port: [ "port", null, PARSE_LIST ], icmp_type: [ "icmptype", null, PARSE_LIST ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], set_mark: [ "mark", null, NO_INVERT ], set_xmark: [ "mark", null, NO_INVERT ], dscp: [ "dscp" ], set_dscp: [ "dscp", null, NO_INVERT ], counter: [ "bool", "1" ], log: [ "string" ], log_limit: [ "limit" ], target: [ "target" ] }); if (rule === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!rule.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (rule.target in ["helper", "notrack"] && (!rule.src || !rule.src.zone)) { this.warn_section(data, `must specify a source zone for target '${rule.target}'`); return; } else if (rule.target == "dscp" && !rule.set_dscp) { this.warn_section(data, "must specify option 'set_dscp' for target 'dscp'"); return; } else if (rule.target == "mark" && !rule.set_mark && !rule.set_xmark) { this.warn_section(data, "must specify option 'set_mark' or 'set_xmark' for target 'mark'"); return; } else if (rule.target == "helper" && !rule.set_helper) { this.warn_section(data, "must specify option 'set_helper' for target 'helper'"); return; } else if (rule.device?.any) { this.warn_section(data, "must not specify '*' as device"); return; } switch (this.parse_bool(rule.log)) { case true: rule.log = `${rule.name}: `; break; case false: delete rule.log; } let ipset; if (rule.ipset) { ipset = filter(this.state.ipsets, s => (s.name == rule.ipset.name))?.[0]; if (!ipset) { this.warn_section(data, `references unknown set '${rule.ipset.name}'`); return; } if (('inet_service' in ipset.types) && !ensure_tcpudp(rule.proto)) { this.warn_section(data, "references named set with port match but no UDP/TCP protocol, ignoring section"); return; } } let need_src_action_chain = (rule) => (rule.src?.zone?.log && rule.target != "accept"); let add_rule = (family, proto, saddrs, daddrs, sports, dports, icmptypes, icmpcodes, ipset, rule) => { let r = { ...rule, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(length(sports) || length(dports)), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(sports), this.port), sports_neg: map(filter_neg(sports), this.port), dports_pos: map(filter_pos(dports), this.port), dports_neg: map(filter_neg(dports), this.port), smacs_pos: map(filter_pos(rule.src_mac), m => m.mac), smacs_neg: map(filter_neg(rule.src_mac), m => m.mac), icmp_types: map(icmptypes, i => (family == 4 ? i.type : i.type6)), icmp_codes: map(icmpcodes, ic => `${(family == 4) ? ic.type : ic.type6} . ${(family == 4) ? ic.code_min : ic.code6_min}`) }; if (!length(r.icmp_types)) delete r.icmp_types; if (!length(r.icmp_codes)) delete r.icmp_codes; if (r.set_mark) { r.set_xmark = { invert: r.set_mark.invert, mark: r.set_mark.mark, mask: r.set_mark.mark | r.set_mark.mask }; delete r.set_mark; } let set_types = map_setmatch(ipset, rule.ipset, proto.name); if (set_types !== set_types) { this.warn_section(data, "destination MAC address matching not supported"); return; } else if (set_types) { r.ipset = { ...r.ipset, fields: set_types }; } if (r.target == "notrack") { r.chain = `notrack_${r.src.zone.name}`; r.src.zone.dflags.notrack = true; } else if (r.target == "helper") { r.chain = `helper_${r.src.zone.name}`; r.src.zone.dflags.helper = true; } else if (r.target == "mark" || r.target == "dscp") { if ((r.src?.any && r.dest?.any) || (r.src?.zone && r.dest?.zone)) r.chain = "mangle_forward"; else if (r.src?.any && r.dest?.zone) r.chain = "mangle_postrouting"; else if (r.src?.zone && r.dest?.any) r.chain = "mangle_prerouting"; else if (r.src && !r.dest) r.chain = "mangle_input"; else r.chain = "mangle_output"; if (r.src?.zone) { r.src.zone.dflags[r.target] = true; r.iifnames = null_if_empty(r.src.zone.match_devices); } if (r.dest?.zone) { r.dest.zone.dflags[r.target] = true; r.oifnames = null_if_empty(r.dest.zone.match_devices); } } else { r.chain = "output"; if (r.src) { if (!r.src.any) r.chain = `${r.dest ? "forward" : "input"}_${r.src.zone.name}`; else r.chain = r.dest ? "forward" : "input"; } if (r.dest && !r.src) { if (!r.dest.any) r.chain = sprintf("output_%s", r.dest.zone.name); else r.chain = "output"; } if (r.target && r.dest && !r.dest.any) { r.jump_chain = `${r.target}_to_${r.dest.zone.name}`; r.dest.zone.dflags[r.target] = true; } else if (r.target && need_src_action_chain(r)) { r.jump_chain = `${r.target}_from_${r.src.zone.name}`; r.src.zone.sflags[r.target] = true; } else if (r.target == "reject") r.jump_chain = "handle_reject"; } if (r.device) r[r.direction ? "oifnames" : "iifnames"] = [ r.device.device ]; push(this.state.rules ||= [], r); }; for (let proto in rule.proto) { let sip, dip, sports, dports, itypes4, itypes6; let family = rule.family; switch (proto.name) { case "icmp": itypes4 = filter(rule.icmp_type || [], family_is_ipv4); itypes6 = filter(rule.icmp_type || [], family_is_ipv6); break; case "ipv6-icmp": family = 6; itypes6 = filter(rule.icmp_type || [], family_is_ipv6); break; case "tcp": case "udp": sports = rule.src_port; dports = rule.dest_port; break; } sip = subnets_split_af(rule.src_ip); dip = subnets_split_af(rule.dest_ip); family = infer_family(family, [ ipset, "set match", sip, "source IP", dip, "destination IP", rule.src?.zone, "source zone", rule.dest?.zone, "destination zone", rule.helper, "helper match", rule.set_helper, "helper to set" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } let has_ipv4_specifics = (length(sip[0]) || length(dip[0]) || length(itypes4) || rule.dscp !== null); let has_ipv6_specifics = (length(sip[1]) || length(dip[1]) || length(itypes6) || rule.dscp !== null); /* if no family was configured, infer target family from IP addresses */ if (family === null) { if (has_ipv4_specifics && !has_ipv6_specifics) family = 4; else if (has_ipv6_specifics && !has_ipv4_specifics) family = 6; else family = 0; } /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && rule.target != "dscp" && !has_ipv4_specifics && !has_ipv6_specifics) { add_rule(0, proto, [], [], sports, dports, null, null, null, rule); } /* we need to emit one or two AF specific rules */ else { if (family == 0 || family == 4) { let icmp_types = filter(itypes4, i => (i.code_min == 0 && i.code_max == 0xFF)); let icmp_codes = filter(itypes4, i => (i.code_min != 0 || i.code_max != 0xFF)); for (let saddrs in subnets_group_by_masking(sip[0])) { for (let daddrs in subnets_group_by_masking(dip[0])) { if (length(icmp_types) || (!length(icmp_types) && !length(icmp_codes))) add_rule(4, proto, saddrs, daddrs, sports, dports, icmp_types, null, ipset, rule); if (length(icmp_codes)) add_rule(4, proto, saddrs, daddrs, sports, dports, null, icmp_codes, ipset, rule); } } } if (family == 0 || family == 6) { let icmp_types = filter(itypes6, i => (i.code_min == 0 && i.code_max == 0xFF)); let icmp_codes = filter(itypes6, i => (i.code_min != 0 || i.code_max != 0xFF)); for (let saddrs in subnets_group_by_masking(sip[1])) { for (let daddrs in subnets_group_by_masking(dip[1])) { if (length(icmp_types) || (!length(icmp_types) && !length(icmp_codes))) add_rule(6, proto, saddrs, daddrs, sports, dports, icmp_types, null, ipset, rule); if (length(icmp_codes)) add_rule(6, proto, saddrs, daddrs, sports, dports, null, icmp_codes, ipset, rule); } } } } } }, parse_redirect: function(data) { let redir = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], _name: [ "string", null, DEPRECATED ], family: [ "family" ], src: [ "zone_ref" ], dest: [ "zone_ref" ], ipset: [ "setmatch" ], helper: [ "cthelper", null, NO_INVERT ], proto: [ "protocol", "tcpudp", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network" ], src_mac: [ "mac", null, PARSE_LIST ], src_port: [ "port" ], src_dip: [ "network" ], src_dport: [ "port" ], dest_ip: [ "network" ], dest_port: [ "port" ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], reflection: [ "bool", "1" ], reflection_src: [ "reflection_source", "internal" ], reflection_zone: [ "zone_ref", null, PARSE_LIST ], counter: [ "bool", "1" ], log: [ "string" ], log_limit: [ "limit" ], target: [ "target", "dnat" ] }); if (redir === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!redir.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!(redir.target in ["dnat", "snat"])) { this.warn_section(data, "has invalid target specified, defaulting to dnat"); redir.target = "dnat"; } switch (this.parse_bool(redir.log)) { case true: redir.log = `${redir.name}: `; break; case false: delete redir.log; } let ipset; if (redir.ipset) { ipset = filter(this.state.ipsets, s => (s.name == redir.ipset.name))?.[0]; if (!ipset) { this.warn_section(data, `references unknown set '${redir.ipset.name}'`); return; } if (('inet_service' in ipset.types) && !ensure_tcpudp(redir.proto)) { this.warn_section(data, "references named set with port match but no UDP/TCP protocol, ignoring section"); return; } } let resolve_dest = (redir) => { for (let zone in this.state.zones) { for (let zone_addr in zone.related_subnets) { for (let dest_addr in redir.dest_ip.addrs) { if (dest_addr.family != zone_addr.family) continue; let a = apply_mask(dest_addr.addr, zone_addr.mask); let b = apply_mask(zone_addr.addr, zone_addr.mask); if (a != b) continue; redir.dest = { any: false, zone: zone }; return true; } } } return false; }; if (redir.target == "dnat") { if (!redir.src) return this.warn_section(data, "has no source specified"); else if (redir.src.any) return this.warn_section(data, "must not have source '*' for dnat target"); else if (redir.dest_ip && redir.dest_ip.invert) return this.warn_section(data, "must not specify a negated 'dest_ip' value"); else if (redir.dest_ip && length(filter(redir.dest_ip.addrs, a => a.bits == -1))) return this.warn_section(data, "must not use non-contiguous masks in 'dest_ip'"); if (!redir.dest && redir.dest_ip && resolve_dest(redir)) this.warn_section(data, `does not specify a destination, assuming '${redir.dest.zone.name}'`); if (!redir.dest_port) redir.dest_port = redir.src_dport; if (redir.reflection && redir.dest?.zone && redir.src.zone.masq) { redir.dest.zone.dflags.accept = true; redir.dest.zone.dflags.dnat = true; redir.dest.zone.dflags.snat = true; } if (redir.helper) redir.src.zone.dflags.helper = true; redir.src.zone.dflags[redir.target] = true; } else { if (!redir.dest) return this.warn_section(data, "has no destination specified"); else if (redir.dest.any) return this.warn_section(data, "must not have destination '*' for snat target"); else if (!redir.src_dip) return this.warn_section(data, "has no 'src_dip' option specified"); else if (redir.src_dip.invert) return this.warn_section(data, "must not specify a negated 'src_dip' value"); else if (length(filter(redir.src_dip.addrs, a => a.bits == -1))) return this.warn_section(data, "must not use non-contiguous masks in 'src_dip'"); else if (redir.src_mac) return this.warn_section(data, "must not use 'src_mac' option for snat target"); else if (redir.helper) return this.warn_section(data, "must not use 'helper' option for snat target"); redir.dest.zone.dflags[redir.target] = true; } let add_rule = (family, proto, saddrs, daddrs, raddrs, sport, dport, rport, ipset, redir) => { let r = { ...redir, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(sport || dport || rport), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(to_array(sport)), this.port), sports_neg: map(filter_neg(to_array(sport)), this.port), dports_pos: map(filter_pos(to_array(dport)), this.port), dports_neg: map(filter_neg(to_array(dport)), this.port), smacs_pos: map(filter_pos(redir.src_mac), m => m.mac), smacs_neg: map(filter_neg(redir.src_mac), m => m.mac), raddr: raddrs ? raddrs[0] : null, rport: rport }; let set_types = map_setmatch(ipset, redir.ipset, proto.name); if (set_types !== set_types) { this.warn_section(data, "destination MAC address matching not supported"); return; } else if (set_types) { r.ipset = { ...r.ipset, fields: set_types }; } switch (r.target) { case "dnat": r.chain = `dstnat_${r.src.zone.name}`; r.src.zone.dflags.dnat = true; if (!r.raddr) r.target = "redirect"; break; case "snat": r.chain = `srcnat_${r.dest.zone.name}`; r.dest.zone.dflags.snat = true; break; } push(this.state.redirects ||= [], r); }; let to_hostaddr = (a) => { let bits = (a.family == 4) ? 32 : 128; return { family: a.family, addr: apply_mask(a.addr, bits), bits: bits }; }; for (let proto in redir.proto) { let sip, dip, rip, iip, eip, refip, sport, dport, rport; let family = redir.family; if (proto.name == "ipv6-icmp") family = 6; switch (redir.target) { case "dnat": sip = subnets_split_af(redir.src_ip); dip = subnets_split_af(redir.src_dip); rip = subnets_split_af(redir.dest_ip); switch (proto.name) { case "tcp": case "udp": sport = redir.src_port; dport = redir.src_dport; rport = redir.dest_port; break; } break; case "snat": sip = subnets_split_af(redir.src_ip); dip = subnets_split_af(redir.dest_ip); rip = subnets_split_af(redir.src_dip); switch (proto.name) { case "tcp": case "udp": sport = redir.src_port; dport = redir.dest_port; rport = redir.src_dport; break; } break; } family = infer_family(family, [ ipset, "set match", sip, "source IP", dip, "destination IP", rip, "rewrite IP", redir.src?.zone, "source zone", redir.dest?.zone, "destination zone", redir.helper, "helper match" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } /* build reflection rules */ if (redir.target == "dnat" && redir.reflection && (length(rip[0]) || length(rip[1])) && redir.src?.zone && redir.dest?.zone) { let refredir = { name: `${redir.name} (reflection)`, helper: redir.helper, // XXX: this likely makes no sense for reflection rules //src_mac: redir.src_mac, limit: redir.limit, limit_burst: redir.limit_burst, start_date: redir.start_date, stop_date: redir.stop_date, start_time: redir.start_time, stop_time: redir.stop_time, weekdays: redir.weekdays, mark: redir.mark }; let eaddrs = length(dip) ? dip : subnets_split_af({ addrs: map(redir.src.zone.related_subnets, to_hostaddr) }); let rzones = length(redir.reflection_zone) ? redir.reflection_zone : [ redir.dest ]; for (let rzone in rzones) { if (!is_family(rzone, family)) { this.warn_section(data, `is restricted to IPv${family} but referenced reflection zone is IPv${rzone.family} only, skipping`); continue; } let iaddrs = subnets_split_af({ addrs: rzone.zone.related_subnets }); let refaddrs = (redir.reflection_src == "internal") ? iaddrs : eaddrs; for (let i = 0; i <= 1; i++) { if (redir.src.zone[i ? "masq6" : "masq"] && length(rip[i])) { let snat_addr = refaddrs[i]?.[0]; /* For internal reflection sources try to find a suitable candiate IP * among the reflection zone subnets which is within the same subnet * as the original DNAT destination. If we can't find any matching * one then simply take the first candidate. */ if (redir.reflection_src == "internal") { for (let zone_addr in rzone.zone.related_subnets) { if (zone_addr.family != rip[i][0].family) continue; let r = apply_mask(rip[i][0].addr, zone_addr.mask); let a = apply_mask(zone_addr.addr, zone_addr.mask); if (r != a) continue; snat_addr = zone_addr; break; } } if (!snat_addr) { this.warn_section(data, `${redir.reflection_src || "external"} rewrite IP cannot be determined, disabling reflection`); } else if (!length(iaddrs[i])) { this.warn_section(data, "internal address range cannot be determined, disabling reflection"); } else if (!length(eaddrs[i])) { this.warn_section(data, "external address range cannot be determined, disabling reflection"); } else { refredir.src = rzone; refredir.dest = null; refredir.target = "dnat"; for (let saddrs in subnets_group_by_masking(iaddrs[i])) for (let daddrs in subnets_group_by_masking(eaddrs[i])) add_rule(i ? 6 : 4, proto, saddrs, daddrs, rip[i], sport, dport, rport, null, refredir); refredir.src = null; refredir.dest = rzone; refredir.target = "snat"; for (let daddrs in subnets_group_by_masking(rip[i])) for (let saddrs in subnets_group_by_masking(iaddrs[i])) add_rule(i ? 6 : 4, proto, saddrs, daddrs, [ to_hostaddr(snat_addr) ], null, rport, null, null, refredir); } } } } } if (length(rip[0]) > 1 || length(rip[1]) > 1) this.warn_section(data, "specifies multiple rewrite addresses, using only first one"); let has_ip4_addr = length(sip[0]) || length(dip[0]) || length(rip[0]), has_ip6_addr = length(sip[1]) || length(dip[1]) || length(rip[1]), has_any_addr = has_ip4_addr || has_ip6_addr; /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && !has_any_addr) { /* for backwards compatibility, treat unspecified family as IPv4 unless user explicitly requested any (0) */ if (family == null) family = 4; add_rule(family, proto, [], [], null, sport, dport, rport, null, redir); } /* we need to emit one or two AF specific rules */ else { if ((!family || family == 4) && (!has_any_addr || has_ip4_addr)) { for (let saddrs in subnets_group_by_masking(sip[0])) for (let daddrs in subnets_group_by_masking(dip[0])) add_rule(4, proto, saddrs, daddrs, rip[0], sport, dport, rport, ipset, redir); } if ((!family || family == 6) && (!has_any_addr || has_ip6_addr)) { for (let saddrs in subnets_group_by_masking(sip[1])) for (let daddrs in subnets_group_by_masking(dip[1])) add_rule(6, proto, saddrs, daddrs, rip[1], sport, dport, rport, ipset, redir); } } } }, parse_nat: function(data) { let snat = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], family: [ "family" ], src: [ "zone_ref" ], device: [ "string" ], ipset: [ "setmatch", null, UNSUPPORTED ], proto: [ "protocol", "all", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network" ], src_port: [ "port" ], snat_ip: [ "network", null, NO_INVERT ], snat_port: [ "port", null, NO_INVERT ], dest_ip: [ "network" ], dest_port: [ "port" ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], connlimit_ports: [ "bool" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], counter: [ "bool", "1" ], log: [ "string" ], target: [ "target", "masquerade" ] }); if (snat === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!snat.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!(snat.target in ["accept", "snat", "masquerade"])) { this.warn_section(data, "has invalid target specified, defaulting to masquerade"); snat.target = "masquerade"; } if (snat.target == "snat" && !snat.snat_ip && !snat.snat_port) { this.warn_section(data, "needs either 'snat_ip' or 'snat_port' for target snat, ignoring section"); return; } else if (snat.target != "snat" && snat.snat_ip) { this.warn_section(data, "must not use 'snat_ip' for non-snat target, ignoring section"); return; } else if (snat.target != "snat" && snat.snat_port) { this.warn_section(data, "must not use 'snat_port' for non-snat target, ignoring section"); return; } if ((snat.snat_port || snat.src_port || snat.dest_port) && !ensure_tcpudp(snat.proto)) { this.warn_section(data, "specifies ports but no UDP/TCP protocol, ignoring section"); return; } if (snat.snat_ip && length(filter(snat.snat_ip.addrs, a => a.bits == -1 || a.invert))) { this.warn_section(data, "must not use inversion or non-contiguous masks in 'snat_ip', ignoring section"); return; } switch (this.parse_bool(snat.log)) { case true: snat.log = `${snat.name}: `; break; case false: delete snat.log; } let add_rule = (family, proto, saddrs, daddrs, raddrs, sport, dport, rport, snat) => { let n = { ...snat, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(sport || dport), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(to_array(sport)), this.port), sports_neg: map(filter_neg(to_array(sport)), this.port), dports_pos: map(filter_pos(to_array(dport)), this.port), dports_neg: map(filter_neg(to_array(dport)), this.port), raddr: raddrs ? raddrs[0] : null, rport: rport, chain: snat.src?.zone ? `srcnat_${snat.src.zone.name}` : "srcnat" }; push(this.state.redirects ||= [], n); }; for (let proto in snat.proto) { let sip, dip, rip, sport, dport, rport; let family = snat.family; sip = subnets_split_af(snat.src_ip); dip = subnets_split_af(snat.dest_ip); rip = subnets_split_af(snat.snat_ip); switch (proto.name) { case "tcp": case "udp": sport = snat.src_port; dport = snat.dest_port; rport = snat.snat_port; break; } if (length(rip[0]) > 1 || length(rip[1]) > 1) this.warn_section(data, "specifies multiple rewrite addresses, using only first one"); family = infer_family(family, [ sip, "source IP", dip, "destination IP", rip, "rewrite IP", snat.src?.zone, "source zone" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } if (snat.src?.zone) snat.src.zone.dflags.snat = true; /* if no family was configured, infer target family from IP addresses */ if (family === null) { if ((length(sip[0]) || length(dip[0]) || length(rip[0])) && !length(sip[1]) && !length(dip[1]) && !length(rip[1])) family = 4; else if ((length(sip[1]) || length(dip[1]) || length(rip[1])) && !length(sip[0]) && !length(dip[0]) && !length(rip[0])) family = 6; else family = 4; /* default to IPv4 only for backwards compatibility, unless an explict family any was configured */ } /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && !length(sip[0]) && !length(sip[1]) && !length(dip[0]) && !length(dip[1]) && !length(rip[0]) && !length(rip[1])) { add_rule(0, proto, [], [], null, sport, dport, rport, snat); } /* we need to emit one or two AF specific rules */ else { if (family == 0 || family == 4) for (let saddr in subnets_group_by_masking(sip[0])) for (let daddr in subnets_group_by_masking(dip[0])) add_rule(4, proto, saddr, daddr, rip[0], sport, dport, rport, snat); if (family == 0 || family == 6) for (let saddr in subnets_group_by_masking(sip[1])) for (let daddr in subnets_group_by_masking(dip[1])) add_rule(6, proto, saddr, daddr, rip[1], sport, dport, rport, snat); } } }, parse_include: function(data) { let inc = this.parse_options(data, { enabled: [ "bool", "1" ], path: [ "string", null, REQUIRED ], type: [ "includetype", "script" ], fw4_compatible: [ "bool", data.path != "/etc/firewall.user" ], family: [ "family", null, UNSUPPORTED ], reload: [ "bool", null, UNSUPPORTED ], position: [ "includeposition" ], chain: [ "identifier" ] }); if (!inc.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (inc.type == "script" && !inc.fw4_compatible) { this.warn_section(data, "is not marked as compatible with fw4, ignoring section"); this.warn_section(data, "requires 'option fw4_compatible 1' to be considered compatible"); return; } for (let opt in [ "table", "chain", "position" ]) { if (inc.type != "nftables" && inc[opt]) { this.warn_section(data, `must not specify '${opt}' for non-nftables includes, ignoring section`); return; } } switch (inc.position ??= 'table-append') { case 'ruleset-prepend': case 'ruleset-append': case 'table-prepend': case 'table-append': if (inc.chain) this.warn_section(data, `specifies 'chain' which has no effect for position ${inc.position}`); delete inc.chain; break; case 'chain-prepend': case 'chain-append': if (!inc.chain) { this.warn_section(data, `must specify 'chain' for position ${inc.position}, ignoring section`); return; } break; } let path = fs.readlink(inc.path) ?? inc.path; if (!fs.access(path)) { this.warn_section(data, `specifies unreachable path '${path}', ignoring section`); return; } if (!data['.name']) this.warn(`Automatically including '${path}'`); push(this.state.includes ||= [], { ...inc, path }); }, parse_ipset: function(data) { let ipset = this.parse_options(data, { enabled: [ "bool", "1" ], reload_set: [ "bool" ], counters: [ "bool" ], comment: [ "string" ], name: [ "identifier", null, REQUIRED ], family: [ "family", "4" ], storage: [ "string", null, UNSUPPORTED ], match: [ "ipsettype", null, PARSE_LIST ], iprange: [ "string", null, UNSUPPORTED ], portrange: [ "string", null, UNSUPPORTED ], netmask: [ "int", null, UNSUPPORTED ], maxelem: [ "int" ], hashsize: [ "int", null, UNSUPPORTED ], timeout: [ "int", "-1" ], external: [ "string", null, UNSUPPORTED ], entry: [ "string", null, PARSE_LIST ], loadfile: [ "string" ] }); if (ipset === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!ipset.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (ipset.family == 0) { this.warn_section(data, "must not specify family 'any'"); return; } else if (!length(ipset.match)) { this.warn_section(data, "has no datatypes assigned"); return; } let dirs = map(ipset.match, m => m[0]), types = map(ipset.match, m => m[1]), interval = false; if ("set" in types) { this.warn_section(data, "match type 'set' is not supported"); return; } if ("net" in types) { if (this.kernel < 0x05060000) { this.warn_section(data, "match type 'net' requires kernel 5.6 or later"); return; } interval = true; } let s = { ...ipset, fw4types: types, types: map(types, (t) => { switch (t) { case 'ip': case 'net': return (ipset.family == 4) ? 'ipv4_addr' : 'ipv6_addr'; case 'mac': return 'ether_addr'; case 'port': return 'inet_service'; } }), directions: dirs, interval: interval }; if (s.interval) push(s.flags ??= [], 'interval'); if (s.timeout >= 0) push(s.flags ??= [], 'timeout'); s.entries = filter(map(ipset.entry, (e) => { let v = this.parse_ipsetentry(e, s); if (!v) this.warn_section(data, `ignoring invalid ipset entry '${e}'`); return v; }), (e) => (e != null)); push(this.state.ipsets ||= [], s); } }; 07070100DC354C000041ED00000000000000000000000368F513D900000000000000080000000100000000000000000000001400000000usr/share/firewall407070100DC354F000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001E00000000usr/share/firewall4/templates07070100DC3555000081A400000000000000000000000168F513D900000168000000080000000100000000000000000000002B00000000usr/share/firewall4/templates/zone-jump.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress: (direction in ["output", "srcnat"]), rule }) -%} jump {{ direction }}_{{ zone.name }} comment "!fw4: Handle {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} {{ direction }} {{ (direction == 'helper') ? "assignment" : "traffic" }}" 07070100DC3552000081A400000000000000000000000168F513D9000014D3000000080000000100000000000000000000002600000000usr/share/firewall4/templates/rule.uc{%+ if (rule.family && !rule.has_addrs): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (!rule.proto.any && !rule.has_ports && !rule.icmp_types && !rule.icmp_codes): -%} meta l4proto {{ fw4.l4proto(rule.family, rule.proto) }} {%+ endif -%} {%+ if (rule.iifnames): -%} iifname {{ fw4.set(rule.iifnames) }} {%+ endif -%} {%+ if (rule.oifnames): -%} oifname {{ fw4.set(rule.oifnames) }} {%+ endif -%} {%+ if (rule.saddrs_pos): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(rule.saddrs_pos) }} {%+ endif -%} {%+ if (rule.saddrs_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.saddrs_neg) }} {%+ endif -%} {%+ for (let a in rule.saddrs_masked): -%} {{ fw4.ipproto(rule.family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (rule.daddrs_pos): -%} {{ fw4.ipproto(rule.family) }} daddr {{ fw4.set(rule.daddrs_pos) }} {%+ endif -%} {%+ if (rule.daddrs_neg): -%} {{ fw4.ipproto(rule.family) }} daddr != {{ fw4.set(rule.daddrs_neg) }} {%+ endif -%} {%+ for (let a in rule.daddrs_masked): -%} {{ fw4.ipproto(rule.family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (rule.sports_pos): -%} {{ rule.proto.name }} sport {{ fw4.set(rule.sports_pos) }} {%+ endif -%} {%+ if (rule.sports_neg): -%} {{ rule.proto.name }} sport != {{ fw4.set(rule.sports_neg) }} {%+ endif -%} {%+ if (rule.dports_pos): -%} {{ rule.proto.name }} dport {{ fw4.set(rule.dports_pos) }} {%+ endif -%} {%+ if (rule.dports_neg): -%} {{ rule.proto.name }} dport != {{ fw4.set(rule.dports_neg) }} {%+ endif -%} {%+ if (rule.smacs_pos): -%} ether saddr {{ fw4.set(rule.smacs_pos) }} {%+ endif -%} {%+ if (rule.smacs_neg): -%} ether saddr != {{ fw4.set(rule.smacs_neg) }} {%+ endif -%} {%+ if (rule.icmp_types): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type {{ fw4.set(rule.icmp_types) }} {%+ endif -%} {%+ if (rule.icmp_codes): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type . {{ (rule.family == 4) ? "icmp" : "icmpv6" }} code {{ fw4.set(rule.icmp_codes, true) }} {%+ endif -%} {%+ if (rule.helper): -%} ct helper{% if (rule.helper.invert): %} !={% endif %} {{ fw4.quote(rule.helper.name, true) }} {%+ endif -%} {%+ if (rule.limit): -%} limit rate {{ rule.limit.rate }}/{{ rule.limit.unit }} {%- if (rule.limit_burst): %} burst {{ rule.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (rule.start_date && rule.stop_date): -%} meta time {{ fw4.datestamp(rule.start_date) }}-{{ fw4.datestamp(rule.stop_date) }} {%+ elif (rule.start_date): -%} meta time >= {{ fw4.datestamp(rule.start_date) }} {%+ elif (rule.stop_date): -%} meta time <= {{ fw4.datestamp(rule.stop_date) }} {%+ endif -%} {%+ if (rule.start_time && rule.stop_time): -%} meta hour {{ fw4.time(rule.start_time) }}-{{ fw4.time(rule.stop_time) }} {%+ elif (rule.start_time): -%} meta hour >= {{ fw4.time(rule.start_time) }} {%+ elif (rule.stop_time): -%} meta hour <= {{ fw4.time(rule.stop_time) }} {%+ endif -%} {%+ if (rule.weekdays): -%} meta day{% if (rule.weekdays.invert): %} !={% endif %} {{ fw4.set(rule.weekdays.days) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(rule.mark.mask) }} {{ rule.mark.invert ? '!=' : '==' }} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (rule.mark.invert): %} !={% endif %} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.dscp): -%} {{ fw4.ipproto(rule.family) }} dscp{% if (rule.dscp.invert): %} !={% endif %} {{ fw4.hex(rule.dscp.dscp) }} {%+ endif -%} {%+ if (rule.ipset): -%} {{ fw4.concat(rule.ipset.fields) }}{{ rule.ipset.invert ? ' !=' : '' }} @{{ rule.ipset.name }} {%+ endif -%} {%+ if (rule.log && rule.log_limit): -%} limit rate {{ rule.log_limit.rate }}/{{ rule.log_limit.unit }} log prefix {{ fw4.quote(rule.log, true) }} {%+ include("rule.uc", { fw4, zone, rule: { ...rule, log: 0 } }) %} {%+ elif (rule.log && zone?.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix {{ fw4.quote(rule.log, true) }} {%+ include("rule.uc", { fw4, zone, rule: { ...rule, log: 0 } }) %} {%+ else -%} {%+ if (rule.counter): -%} counter {%+ endif -%} {%+ if (rule.log): -%} log prefix {{ fw4.quote(rule.log, true) }} {%+ endif -%} {%+ if (rule.target == "mark"): -%} meta mark set {{ (rule.set_xmark.mask == 0xFFFFFFFF) ? fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mark == 0) ? `mark and ${fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF)}` : (rule.set_xmark.mark == rule.set_xmark.mask) ? `mark or ${fw4.hex(rule.set_xmark.mark)}` : (rule.set_xmark.mask == 0) ? `mark xor ${fw4.hex(rule.set_xmark.mark)}` : `mark and ${fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF)} xor ${fw4.hex(rule.set_xmark.mark)}` }} {%+ elif (rule.target == "dscp"): -%} {{ fw4.ipproto(rule.family) }} dscp set {{ fw4.hex(rule.set_dscp.dscp) }} {%+ elif (rule.target == "notrack"): -%} notrack {%+ elif (rule.target == "helper"): -%} ct helper set {{ fw4.quote(rule.set_helper.name, true) }} {%+ elif (rule.jump_chain): -%} jump {{ rule.jump_chain }} {%+ elif (rule.target): -%} {{ rule.target }} {%+ endif -%} comment {{ fw4.quote(`!fw4: ${rule.name}`, true) }} {%+ endif -%} 07070100DC3553000081A400000000000000000000000168F513D900003ABD000000080000000100000000000000000000002900000000usr/share/firewall4/templates/ruleset.uc{% let flowtable_devices = fw4.resolve_offload_devices(); let available_helpers = filter(fw4.helpers(), h => h.available); let defined_ipsets = fw4.ipsets(); let zones_with_limits = filter(fw4.zones(), z => z.log_limit); -%} table inet fw4 flush table inet fw4 {% if (fw4.check_flowtable()): %} delete flowtable inet fw4 ft {% endif %} {% fw4.includes('ruleset-prepend') %} table inet fw4 { {% if (length(flowtable_devices) > 0): %} # # Flowtable # flowtable ft { hook ingress priority 0; devices = {{ fw4.set(flowtable_devices, true) }}; counter; {% if (fw4.default_option("flow_offloading_hw")): %} flags offload; {% endif %} } {% endif %} {% if (length(available_helpers)): %} # # CT helper definitions # {% for (let helper in available_helpers): %} {% for (let proto in helper.proto): %} ct helper {{ helper.name }} { type {{ fw4.quote(helper.name, true) }} protocol {{ proto.name }}; } {% endfor %} {% endfor %} {% endif %} {% if (length(defined_ipsets)): %} # # Set definitions # {% for (let set in defined_ipsets): %} set {{ set.name }} { {% if (set.comment): %} comment {{ fw4.quote(set.comment, true) }} {% endif %} type {{ fw4.concat(set.types) }} {% if (set.maxelem > 0): %} size {{ set.maxelem }} {% endif %} {% if (set.timeout > 0): %} timeout {{ set.timeout }}s {% endif %} {% if (set.interval): %} auto-merge {% endif %} {% if (set.flags): %} flags {{ join(',', set.flags) }} {% endif %} {% fw4.print_setentries(set) %} } {% endfor %} {% endif %} # # Defines # {% for (let zone in fw4.zones()): %} define {{ replace(zone.name, /^[0-9]/, '_$&') }}_devices = {{ fw4.set(zone.match_devices, true) }} define {{ replace(zone.name, /^[0-9]/, '_$&') }}_subnets = {{ fw4.set(zone.match_subnets, true) }} {% endfor %} {% if (length(zones_with_limits)): %} # # Limits # {% for (let zone in zones_with_limits): %} limit {{ zone.name }}.log_limit { comment "{{ zone.name }} log limit" rate {{ zone.log_limit.rate }}/{{ zone.log_limit.unit }} } {% endfor %} {% endif %} # # User includes # include "/etc/nftables.d/*.nft" {% fw4.includes('table-prepend') %} # # Filter rules # chain input { type filter hook input priority filter; policy {{ fw4.input_policy(true) }}; iif "lo" accept comment "!fw4: Accept traffic from loopback" {% fw4.includes('chain-prepend', 'input') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle inbound flows" {% if (fw4.default_option("synflood_protect") && fw4.default_option("synflood_rate")): %} tcp flags & (fin | syn | rst | ack) == syn jump syn_flood comment "!fw4: Rate limit TCP syn packets" {% endif %} {% for (let rule in fw4.rules("input")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "input" }) %} {% endfor; endfor %} {% if (fw4.input_policy() == "reject"): %} jump handle_reject {% endif %} {% fw4.includes('chain-append', 'input') %} } chain forward { type filter hook forward priority filter; policy {{ fw4.forward_policy(true) }}; {% if (length(flowtable_devices) > 0): %} meta l4proto { tcp, udp } flow offload @ft; {% endif %} {% fw4.includes('chain-prepend', 'forward') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle forwarded flows" {% for (let rule in fw4.rules("forward")): %} {%+ include("rule.uc", { fw4, zone: (rule.src?.zone?.log_limit ? rule.src.zone : rule.dest?.zone), rule }) %} {% endfor %} {% for (let zone in fw4.zones()): for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "forward" }) %} {% endfor; endfor %} {% fw4.includes('chain-append', 'forward') %} {% if (fw4.forward_policy() == "reject"): %} jump handle_reject {% endif %} } chain output { type filter hook output priority filter; policy {{ fw4.output_policy(true) }}; oif "lo" accept comment "!fw4: Accept traffic towards loopback" {% fw4.includes('chain-prepend', 'output') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle outbound flows" {% for (let rule in fw4.rules("output")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% for (let rule in zone.match_rules): %} {% if (zone.dflags.helper): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, true); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, true); %} {% if (devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "helper" }) %} {% endif %} {% endif %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "output" }) %} {% endfor %} {% endfor %} {% fw4.includes('chain-append', 'output') %} {% if (fw4.output_policy() == "reject"): %} jump handle_reject {% endif %} } chain prerouting { type filter hook prerouting priority filter; policy accept; {% for (let zone in fw4.zones()): %} {% if (zone.dflags.helper): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, false); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, false); %} {% if (rule.devices_neg || rule.subnets_neg || devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "helper" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} } chain handle_reject { meta l4proto tcp reject with {{ (fw4.default_option("tcp_reject_code") != "tcp-reset") ? `icmpx type ${fw4.default_option("tcp_reject_code")}` : "tcp reset" }} comment "!fw4: Reject TCP traffic" reject with {{ (fw4.default_option("any_reject_code") != "tcp-reset") ? `icmpx type ${fw4.default_option("any_reject_code")}` : "tcp reset" }} comment "!fw4: Reject any other traffic" } {% if (fw4.default_option("synflood_protect") && fw4.default_option("synflood_rate")): let r = fw4.default_option("synflood_rate"); let b = fw4.default_option("synflood_burst"); %} chain syn_flood { limit rate {{ r.rate }}/{{ r.unit }} {%- if (b): %} burst {{ b }} packets{% endif %} return comment "!fw4: Accept SYN packets below rate-limit" drop comment "!fw4: Drop excess packets" } {% endif %} {% for (let zone in fw4.zones()): %} chain input_{{ zone.name }} { {% fw4.includes('chain-prepend', `input_${zone.name}`) %} {% for (let rule in fw4.rules(`input_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% if (zone.dflags.dnat): %} ct status dnat accept comment "!fw4: Accept port redirections" {% endif %} {% fw4.includes('chain-append', `input_${zone.name}`) %} jump {{ zone.input }}_from_{{ zone.name }} } chain output_{{ zone.name }} { {% fw4.includes('chain-prepend', `output_${zone.name}`) %} {% for (let rule in fw4.rules(`output_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% fw4.includes('chain-append', `output_${zone.name}`) %} jump {{ zone.output }}_to_{{ zone.name }} } chain forward_{{ zone.name }} { {% fw4.includes('chain-prepend', `forward_${zone.name}`) %} {% for (let rule in fw4.rules(`forward_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% if (zone.dflags.dnat): %} ct status dnat accept comment "!fw4: Accept port forwards" {% endif %} {% fw4.includes('chain-append', `forward_${zone.name}`) %} jump {{ zone.forward }}_to_{{ zone.name }} {% if (fw4.forward_policy() != "accept" && (zone.log & 1)): %} {%+ if (zone.log_limit): %}limit name "{{ zone.name }}.log_limit" {%+ endif -%} log prefix "{{ fw4.forward_policy() }} {{ zone.name }} forward: " {% endif %} } {% if (zone.dflags.helper): %} chain helper_{{ zone.name }} { {% for (let rule in fw4.rules(`helper_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} } {% endif %} {% for (let verdict in ["accept", "reject", "drop"]): %} {% if (zone.sflags[verdict]): %} chain {{ verdict }}_from_{{ zone.name }} { {% for (let rule in zone.match_rules): %} {%+ include("zone-verdict.uc", { fw4, zone, rule, egress: false, verdict }) %} {% endfor %} } {% endif %} {% if (zone.dflags[verdict]): %} chain {{ verdict }}_to_{{ zone.name }} { {% for (let rule in zone.match_rules): %} {% if (!fw4.default_option("drop_invalid") && verdict == "accept" && (zone.masq || zone.masq6) && !zone.masq_allow_invalid): %} {%+ include("zone-drop-invalid.uc", { fw4, zone, rule }) %} {% endif %} {%+ include("zone-verdict.uc", { fw4, zone, rule, egress: true, verdict }) %} {% endfor %} } {% endif %} {% endfor %} {% endfor %} # # NAT rules # chain dstnat { type nat hook prerouting priority dstnat; policy accept; {% fw4.includes('chain-prepend', 'dstnat') %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags.dnat): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "dstnat" }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'dstnat') %} } chain srcnat { type nat hook postrouting priority srcnat; policy accept; {% fw4.includes('chain-prepend', 'srcnat') %} {% for (let redirect in fw4.redirects("srcnat")): %} {%+ include("redirect.uc", { fw4, zone: null, redirect }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags.snat): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "srcnat" }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'srcnat') %} } {% for (let zone in fw4.zones()): %} {% if (zone.dflags.dnat): %} chain dstnat_{{ zone.name }} { {% fw4.includes('chain-prepend', `dstnat_${zone.name}`) %} {% for (let redirect in fw4.redirects(`dstnat_${zone.name}`)): %} {%+ include("redirect.uc", { fw4, zone, redirect }) %} {% endfor %} {% fw4.includes('chain-append', `dstnat_${zone.name}`) %} } {% endif %} {% if (zone.dflags.snat): %} chain srcnat_{{ zone.name }} { {% fw4.includes('chain-prepend', `srcnat_${zone.name}`) %} {% for (let redirect in fw4.redirects(`srcnat_${zone.name}`)): %} {%+ include("redirect.uc", { fw4, zone, redirect }) %} {% endfor %} {% if (zone.masq): %} {% for (let saddrs in zone.masq4_src_subnets): %} {% for (let daddrs in zone.masq4_dest_subnets): %} {%+ include("zone-masq.uc", { fw4, zone, family: 4, saddrs, daddrs }) %} {% endfor %} {% endfor %} {% endif %} {% if (zone.masq6): %} {% for (let saddrs in zone.masq6_src_subnets): %} {% for (let daddrs in zone.masq6_dest_subnets): %} {%+ include("zone-masq.uc", { fw4, zone, family: 6, saddrs, daddrs }) %} {% endfor %} {% endfor %} {% endif %} {% fw4.includes('chain-append', `srcnat_${zone.name}`) %} } {% endif %} {% endfor %} # # Raw rules (notrack) # chain raw_prerouting { type filter hook prerouting priority raw; policy accept; {% for (let zone in fw4.zones()): %} {% if (zone.dflags["notrack"]): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, false); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, false); %} {% if (rule.devices_neg || rule.subnets_neg || devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "notrack" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'raw_prerouting') %} } chain raw_output { type filter hook output priority raw; policy accept; {% fw4.includes('chain-prepend', 'raw_output') %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags["notrack"]): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, true); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, true); %} {% if (devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "notrack" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'raw_output') %} } {% for (let zone in fw4.zones()): %} {% if (zone.dflags.notrack): %} chain notrack_{{ zone.name }} { {% for (let rule in fw4.rules(`notrack_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} } {% endif %} {% endfor %} # # Mangle rules # chain mangle_prerouting { type filter hook prerouting priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_prerouting') %} {% for (let rule in fw4.rules("mangle_prerouting")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_prerouting') %} } chain mangle_postrouting { type filter hook postrouting priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_postrouting') %} {% for (let rule in fw4.rules("mangle_postrouting")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.mtu_fix): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-mssfix.uc", { fw4, zone, rule, egress: true }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'mangle_postrouting') %} } chain mangle_input { type filter hook input priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_input') %} {% for (let rule in fw4.rules("mangle_input")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_input') %} } chain mangle_output { type route hook output priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_output') %} {% for (let rule in fw4.rules("mangle_output")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_output') %} } chain mangle_forward { type filter hook forward priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_forward') %} {% for (let rule in fw4.rules("mangle_forward")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.mtu_fix): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-mssfix.uc", { fw4, zone, rule, egress: false }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'mangle_forward') %} } {% fw4.includes('table-append') %} } {% fw4.includes('ruleset-append') %} 07070100DC3551000081A400000000000000000000000168F513D90000125C000000080000000100000000000000000000002A00000000usr/share/firewall4/templates/redirect.uc{%+ if (redirect.family && !redirect.has_addrs): -%} meta nfproto {{ fw4.nfproto(redirect.family) }} {%+ endif -%} {%+ if (!redirect.proto.any && !redirect.has_ports): -%} meta l4proto {{ (redirect.proto.name == 'icmp' && redirect.family == 6) ? 'ipv6-icmp' : redirect.proto.name }} {%+ endif -%} {%+ if (redirect.device): -%} oifname {{ fw4.quote(redirect.device, true) }} {%+ endif -%} {%+ if (redirect.saddrs_pos): -%} {{ fw4.ipproto(redirect.family) }} saddr {{ fw4.set(redirect.saddrs_pos) }} {%+ endif -%} {%+ if (redirect.saddrs_neg): -%} {{ fw4.ipproto(redirect.family) }} saddr != {{ fw4.set(redirect.saddrs_neg) }} {%+ endif -%} {%+ for (let a in redirect.saddrs_masked): -%} {{ fw4.ipproto(redirect.family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (redirect.daddrs_pos): -%} {{ fw4.ipproto(redirect.family) }} daddr {{ fw4.set(redirect.daddrs_pos) }} {%+ endif -%} {%+ if (redirect.daddrs_neg): -%} {{ fw4.ipproto(redirect.family) }} daddr != {{ fw4.set(redirect.daddrs_neg) }} {%+ endif -%} {%+ for (let a in redirect.daddrs_masked): -%} {{ fw4.ipproto(redirect.family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (redirect.sports_pos): -%} {{ redirect.proto.name }} sport {{ fw4.set(redirect.sports_pos) }} {%+ endif -%} {%+ if (redirect.sports_neg): -%} {{ redirect.proto.name }} sport != {{ fw4.set(redirect.sports_neg) }} {%+ endif -%} {%+ if (redirect.dports_pos): -%} {{ redirect.proto.name }} dport {{ fw4.set(redirect.dports_pos) }} {%+ endif -%} {%+ if (redirect.dports_neg): -%} {{ redirect.proto.name }} dport != {{ fw4.set(redirect.dports_neg) }} {%+ endif -%} {%+ if (redirect.smacs_pos): -%} ether saddr {{ fw4.set(redirect.smacs_pos) }} {%+ endif -%} {%+ if (redirect.smacs_neg): -%} ether saddr != {{ fw4.set(redirect.smacs_neg) }} {%+ endif -%} {%+ if (redirect.helper): -%} ct helper{% if (redirect.helper.invert): %} !={% endif %} {{ fw4.quote(redirect.helper.name, true) }} {%+ endif -%} {%+ if (redirect.limit): -%} limit rate {{ redirect.limit.rate }}/{{ redirect.limit.unit }} {%- if (redirect.limit_burst): %} burst {{ redirect.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (redirect.start_date && redirect.stop_date): -%} meta time {{ fw4.datestamp(redirect.start_date) }}-{{ fw4.datestamp(redirect.stop_date) }} {%+ elif (redirect.start_date): -%} meta time >= {{ fw4.datestamp(redirect.start_date) }} {%+ elif (redirect.stop_date): -%} meta time <= {{ fw4.datestamp(redirect.stop_date) }} {%+ endif -%} {%+ if (redirect.start_time && redirect.stop_time): -%} meta hour {{ fw4.time(redirect.start_time) }}-{{ fw4.time(redirect.stop_time) }} {%+ elif (redirect.start_time): -%} meta hour >= {{ fw4.time(redirect.start_time) }} {%+ elif (redirect.stop_time): -%} meta hour <= {{ fw4.time(redirect.stop_time) }} {%+ endif -%} {%+ if (redirect.weekdays): -%} meta day{% if (redirect.weekdays.invert): %} !={% endif %} {{ fw4.set(redirect.weekdays.days) }} {%+ endif -%} {%+ if (redirect.mark && redirect.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(redirect.mark.mask) }} {{ redirect.mark.invert ? '!=' : '==' }} {{ fw4.hex(redirect.mark.mark) }} {%+ endif -%} {%+ if (redirect.mark && redirect.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (redirect.mark.invert): %} !={% endif %} {{ fw4.hex(redirect.mark.mark) }} {%+ endif -%} {%+ if (redirect.ipset): -%} {{ fw4.concat(redirect.ipset.fields) }}{{ redirect.ipset.invert ? ' !=' : '' }} @{{ redirect.ipset.name }} {%+ endif -%} {%+ if (redirect.log && redirect.log_limit): -%} limit rate {{ redirect.log_limit.rate }}/{{ redirect.log_limit.unit }} log prefix {{ fw4.quote(redirect.log, true) }} {%+ include("redirect.uc", { fw4, zone, redirect: { ...redirect, log: 0 } }) %} {%+ elif (redirect.log && zone?.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix {{ fw4.quote(redirect.log, true) }} {%+ include("redirect.uc", { fw4, zone, redirect: { ...redirect, log: 0 } }) %} {%+ else -%} {%+ if (redirect.counter): -%} counter {%+ endif -%} {%+ if (redirect.log): -%} log prefix {{ fw4.quote(redirect.log, true) }} {%+ endif -%} {% if (redirect.target == "redirect"): -%} redirect{% if (redirect.rport): %} to {{ fw4.port(redirect.rport) }}{% endif %} {%- elif (redirect.target == "accept" || redirect.target == "masquerade"): -%} {{ redirect.target }} {%- else -%} {{ redirect.target }} {{ redirect.raddr ? fw4.host(redirect.raddr, redirect.rport != null) : '' }} {%- if (redirect.rport): %}:{{ fw4.port(redirect.rport) }}{% endif %} {% endif %} comment {{ fw4.quote(`!fw4: ${redirect.name}`, true) }} {% endif -%} 07070100DC3556000081A400000000000000000000000168F513D9000003A5000000080000000100000000000000000000002B00000000usr/share/firewall4/templates/zone-masq.ucmeta nfproto {{ fw4.nfproto(family) }} {%+ if (saddrs && saddrs[0]): -%} {{ fw4.ipproto(family) }} saddr {{ fw4.set(map(saddrs[0], fw4.cidr)) }} {%+ endif -%} {%+ if (saddrs && saddrs[1]): -%} {{ fw4.ipproto(family) }} saddr != {{ fw4.set(map(saddrs[1], fw4.cidr)) }} {%+ endif -%} {%+ for (let a in (saddrs ? saddrs[2] : [])): -%} {{ fw4.ipproto(family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (daddrs && daddrs[0]): -%} {{ fw4.ipproto(family) }} daddr {{ fw4.set(map(daddrs[0], fw4.cidr)) }} {%+ endif -%} {%+ if (daddrs && daddrs[1]): -%} {{ fw4.ipproto(family) }} daddr != {{ fw4.set(map(daddrs[1], fw4.cidr)) }} {%+ endif -%} {%+ for (let a in (daddrs ? daddrs[2] : [])): -%} {{ fw4.ipproto(family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} masquerade comment "!fw4: Masquerade {{ fw4.nfproto(family, true) }} {{ zone.name }} traffic" 07070100DC3559000081A400000000000000000000000168F513D900000360000000080000000100000000000000000000002E00000000usr/share/firewall4/templates/zone-notrack.uc{%+ let devs = fw4.filter_loopback_devs(fw4.devices_pos, output), nets = fw4.filter_loopback_addrs(fw4.subnets_pos, output); if (!((output && (length(devs) || length(nets))) || (!output && (rule.devices_neg || rule.subnets_neg || length(devs) || length(nets))))) return; -%} {%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (length(devs)): -%} iifname {{ fw4.set(devs) }} {%+ endif -%} {%+ if (rule.devices_neg): -%} iifname != {{ fw4.set(rule.devices_neg) }} {%+ endif -%} {%+ if (length(nets)): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(nets) }} {%+ endif -%} {%+ if (rule.subnets_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.subnets_neg) }} {%+ endif -%} jump notrack_{{ zone.name }} comment "!fw4: {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} CT bypass" 07070100DC355A000081A400000000000000000000000168F513D90000038B000000080000000100000000000000000000002E00000000usr/share/firewall4/templates/zone-verdict.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress, rule }) -%} {%+ if (verdict != "accept" && (zone.log & 1) && zone.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix "{{ verdict }} {{ zone.name }} {{ egress ? "out" : "in" }}: " {%+ include("zone-verdict.uc", { fw4, zone: { ...zone, log: 0 }, rule, egress, verdict }) %} {%+ else -%} {%+ if (zone.counter): -%} counter {%+ endif -%} {%+ if (verdict != "accept" && (zone.log & 1)): -%} log prefix "{{ verdict }} {{ zone.name }} {{ egress ? "out" : "in" }}: " {%+ endif -%} {% if (verdict == "reject"): -%} jump handle_reject comment "!fw4: reject {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} traffic" {% else -%} {{ verdict }} comment "!fw4: {{ verdict }} {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} traffic" {% endif -%} {% endif -%} 07070100DC3558000081A400000000000000000000000168F513D900000194000000080000000100000000000000000000002D00000000usr/share/firewall4/templates/zone-mssfix.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress, rule }) -%} tcp flags syn / syn,fin,rst tcp option maxseg size set rt mtu {%+ if (zone.log & 2): -%} log prefix "MSSFIX {{ zone.name }} out: " {%+ endif -%} comment "!fw4: Zone {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} {{ egress ? "egress" : "ingress" }} MTU fixing" 07070100DC3554000081A400000000000000000000000168F513D900000266000000080000000100000000000000000000003300000000usr/share/firewall4/templates/zone-drop-invalid.uc{%+ if (zone.masq ^ zone.masq6): -%} meta nfproto {{ fw4.nfproto(zone.masq ? 4 : 6) }} {%+ endif -%} {%+ include("zone-match.uc", { egress: true, rule }) -%} ct state invalid {%+ if ((zone.log & 1) && zone.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix "drop {{ zone.name }} invalid ct state: " {%+ include("zone-drop-invalid.uc", { fw4, zone: { ...zone, log: 0 }, rule }) %} {%+ else -%} {%+ if (zone.counter): -%} counter {%+ endif -%} {%+ if (zone.log & 1): -%} log prefix "drop {{ zone.name }} invalid ct state: " {%+ endif -%} drop comment "!fw4: Prevent NAT leakage" {%+ endif -%} 07070100DC3550000081A400000000000000000000000168F513D9000010F7000000080000000100000000000000000000002D00000000usr/share/firewall4/templates/mangle-rule.uc{%+ for (let src_devices in rule.src?.zone) } {%+ if (rule.family && !rule.has_addrs): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (!rule.proto.any && !rule.has_ports && !rule.icmp_types && !rule.icmp_codes): -%} meta l4proto {{ (rule.proto.name == 'icmp' && rule.family == 6) ? 'ipv6-icmp' : rule.proto.name }} {%+ endif -%} {%+ if (rule.saddrs_pos): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(rule.saddrs_pos) }} {%+ endif -%} {%+ if (rule.saddrs_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.saddrs_neg) }} {%+ endif -%} {%+ if (rule.daddrs_pos): -%} {{ fw4.ipproto(rule.family) }} daddr {{ fw4.set(rule.daddrs_pos) }} {%+ endif -%} {%+ if (rule.daddrs_neg): -%} {{ fw4.ipproto(rule.family) }} daddr != {{ fw4.set(rule.daddrs_neg) }} {%+ endif -%} {%+ if (rule.sports_pos): -%} {{ rule.proto.name }} sport {{ fw4.set(rule.sports_pos) }} {%+ endif -%} {%+ if (rule.sports_neg): -%} {{ rule.proto.name }} sport != {{ fw4.set(rule.sports_neg) }} {%+ endif -%} {%+ if (rule.dports_pos): -%} {{ rule.proto.name }} dport {{ fw4.set(rule.dports_pos) }} {%+ endif -%} {%+ if (rule.dports_neg): -%} {{ rule.proto.name }} dport != {{ fw4.set(rule.dports_neg) }} {%+ endif -%} {%+ if (rule.smacs_pos): -%} ether saddr {{ fw4.set(rule.smacs_pos) }} {%+ endif -%} {%+ if (rule.smacs_neg): -%} ether saddr != {{ fw4.set(rule.smacs_neg) }} {%+ endif -%} {%+ if (rule.icmp_types): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type {{ fw4.set(rule.icmp_types) }} {%+ endif -%} {%+ if (rule.icmp_codes): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type . {{ (rule.family == 4) ? "icmp" : "icmpv6" }} code {{ fw4.set(rule.icmp_codes, true) }} {%+ endif -%} {%+ if (rule.helper): -%} ct helper{% if (rule.helper.invert): %} !={% endif %} {{ fw4.quote(rule.helper.name, true) }} {%+ endif -%} {%+ if (rule.limit): -%} limit rate {{ rule.limit.rate }}/{{ rule.limit.unit }} {%- if (rule.limit_burst): %} burst {{ rule.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (rule.start_date): -%} meta time >= {{ exists(rule.start_date, "hour") ? fw4.datetime(rule.start_date) : fw4.date(rule.start_date) }} {%+ endif -%} {%+ if (rule.stop_date): -%} meta time <= {{ exists(rule.stop_date, "hour") ? fw4.datetime(rule.stop_date) : fw4.date(rule.stop_date) }} {%+ endif -%} {%+ if (rule.start_time): -%} meta hour >= {{ fw4.time(rule.start_time) }} {%+ endif -%} {%+ if (rule.stop_time): -%} meta hour <= {{ fw4.time(rule.stop_time) }} {%+ endif -%} {%+ if (rule.weekdays): -%} meta day{% if (rule.weekdays.invert): %} !={% endif %} {{ fw4.set(rule.weekdays.days) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(rule.mark.mask) }} {{ rule.mark.invert ? '!=' : '==' }} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (rule.mark.invert): %} !={% endif %} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.dscp): -%} dscp{% if (rule.dscp.invert): %} !={% endif %} {{ fw4.hex(rule.dscp.dscp) }} {%+ endif -%} {%+ if (rule.ipset): -%} {{ fw4.concat(rule.ipset.fields) }}{{ rule.ipset.invert ? ' !=' : '' }} @{{ rule.ipset.name }} {%+ endif -%} {%+ if (rule.counter): -%} counter {%+ endif -%} {%+ if (rule.log): -%} log prefix {{ fw4.quote(rule.log, true) }} {%+ endif -%} {%+ if (rule.target == "mark"): -%} meta mark set {{ (rule.set_xmark.mask == 0xFFFFFFFF) ? fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mark == 0) ? 'mark and ' + fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF) : (rule.set_xmark.mark == rule.set_xmark.mask) ? 'mark or ' + fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mask == 0) ? 'mark xor ' + fw4.hex(rule.set_xmark.mark) : 'mark and ' + fw4.hex(~r.set_xmark.mask & 0xFFFFFFFF) + ' xor ' + fw4.hex(r.set_xmark.mark) }} {%+ elif (rule.target == "dscp"): -%} {{ fw4.ipproto(rule.family) }} dscp set {{ fw4.hex(rule.set_dscp.dscp) }} {%+ elif (rule.target == "notrack"): -%} notrack {%+ elif (rule.target == "helper"): -%} ct helper set {{ fw4.quote(rule.set_helper.name, true) }} {%+ elif (rule.jump_chain): -%} jump {{ rule.jump_chain }} {%+ elif (rule.target): -%} {{ rule.target }} {%+ endif -%} comment {{ fw4.quote(`!fw4: ${rule.name}`, true) }} 07070100DC3557000081A400000000000000000000000168F513D900000358000000080000000100000000000000000000002C00000000usr/share/firewall4/templates/zone-match.uc{%+ if (rule.devices_pos): -%} {{ egress ? "oifname" : "iifname" }} {{ fw4.set(rule.devices_pos) }} {%+ endif -%} {%+ if (rule.devices_neg): -%} {{ egress ? "oifname" : "iifname" }} != {{ fw4.set(rule.devices_neg) }} {%+ endif -%} {%+ for (let wcndev in rule.devices_neg_wildcard): -%} {{ egress ? "oifname" : "iifname" }} != {{ fw4.quote(wcndev) }} {%+ endfor -%} {%+ if (rule.subnets_pos): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} {{ fw4.set(rule.subnets_pos) }} {%+ endif -%} {%+ if (rule.subnets_neg): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} != {{ fw4.set(rule.subnets_neg) }} {%+ endif -%} {%+ for (let subnet in rule.subnets_masked): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} & {{ subnet.mask }} {{ subnet.invert ? '!=' : '==' }} {{ subnet.addr }} {%+ endfor -%} 07070100DC354E000081A400000000000000000000000168F513D900000BC8000000080000000100000000000000000000001C00000000usr/share/firewall4/main.uc{% let fw4 = require("fw4"); function read_state() { let state = fw4.read_state(); if (!state) { warn("Unable to read firewall state - do you need to start the firewall?\n"); exit(1); } return state; } function reload_sets() { let state = read_state(), sets = fw4.check_set_types(); for (let set in state.ipsets) { if (!set.loadfile && !length(set.entries)) continue; if (!exists(sets, set.name)) { warn(`Named set '${set.name}' does not exist - do you need to restart the firewall?\n`); continue; } else if (fw4.concat(sets[set.name]) != fw4.concat(set.types)) { warn(`Named set '${set.name}' has a different type - want '${fw4.concat(set.types)}' but is '${fw4.concat(sets[set.name])}' - do you need to restart the firewall?\n`); continue; } let first = true; let printer = (entry) => { if (first) { print(`add element inet fw4 ${set.name} {\n`); first = false; } print(` ${join(" . ", entry)},\n`); }; print(`flush set inet fw4 ${set.name}\n`); map(set.entries, printer); if (set.loadfile) fw4.parse_setfile(set, printer); if (!first) print("}\n\n"); } } function render_ruleset(use_statefile) { fw4.load(use_statefile); include("templates/ruleset.uc", { fw4, type, exists, length, include }); } function lookup_network(net) { let state = read_state(); for (let zone in state.zones) { for (let network in (zone.network || [])) { if (network.device == net) { print(zone.name, "\n"); exit(0); } } } exit(1); } function lookup_device(dev) { let state = read_state(); for (let zone in state.zones) { for (let rule in (zone.match_rules || [])) { if (dev in rule.devices_pos) { print(zone.name, "\n"); exit(0); } } } exit(1); } function lookup_zone(name, dev) { let state = read_state(); for (let zone in state.zones) { if (zone.name == name) { let devices = []; map(zone.match_rules, (r) => push(devices, ...(r.devices_pos || []))); if (dev) { if (dev in devices) { print(dev, "\n"); exit(0); } exit(1); } if (length(devices)) print(join("\n", devices), "\n"); exit(0); } } exit(1); } function run_includes() { let state = read_state(), paths = []; for (let inc in state.includes) { if (inc.type != 'script') continue; let path = replace(inc.path, "'", "'\\''"); let rc = system([ 'sh', '-c', `exec 1000>&-; config() { echo "You cannot use UCI in firewall includes!" >&2; exit 1; }; . '${path}'` ], 30000); if (rc != 0) warn(`Include '${inc.path}' failed with exit code ${rc}\n`); } } switch (getenv("ACTION")) { case "start": return render_ruleset(true); case "print": return render_ruleset(false); case "reload-sets": return reload_sets(); case "network": return lookup_network(getenv("OBJECT")); case "device": return lookup_device(getenv("OBJECT")); case "zone": return lookup_zone(getenv("OBJECT"), getenv("DEVICE")); case "includes": return run_includes(); } 07070100DC354D000081A400000000000000000000000168F513D900000893000000080000000100000000000000000000001C00000000usr/share/firewall4/helpersconfig helper option name 'amanda' option description 'Amanda backup and archiving proto' option module 'nf_conntrack_amanda' option family 'any' option proto 'udp' option port '10080' config helper option name 'ftp' option description 'FTP passive connection tracking' option module 'nf_conntrack_ftp' option family 'any' option proto 'tcp' option port '21' config helper option name 'RAS' option description 'RAS proto tracking' option module 'nf_conntrack_h323' option family 'any' option proto 'udp' option port '1719' config helper option name 'Q.931' option description 'Q.931 proto tracking' option module 'nf_conntrack_h323' option family 'any' option proto 'tcp' option port '1720' config helper option name 'irc' option description 'IRC DCC connection tracking' option module 'nf_conntrack_irc' option family 'ipv4' option proto 'tcp' option port '6667' config helper option name 'netbios-ns' option description 'NetBIOS name service broadcast tracking' option module 'nf_conntrack_netbios_ns' option family 'ipv4' option proto 'udp' option port '137' config helper option name 'pptp' option description 'PPTP VPN connection tracking' option module 'nf_conntrack_pptp' option family 'ipv4' option proto 'tcp' option port '1723' config helper option name 'sane' option description 'SANE scanner connection tracking' option module 'nf_conntrack_sane' option family 'any' option proto 'tcp' option port '6566' config helper option name 'sip' option description 'SIP VoIP connection tracking' option module 'nf_conntrack_sip' option family 'any' option proto 'udp' option port '5060' config helper option name 'snmp' option description 'SNMP monitoring connection tracking' option module 'nf_conntrack_snmp' option family 'ipv4' option proto 'udp' option port '161' config helper option name 'tftp' option description 'TFTP connection tracking' option module 'nf_conntrack_tftp' option family 'any' option proto 'udp' option port '69' config helper option name 'rtsp' option description 'RTSP connection tracking' option module 'nf_conntrack_rtsp' option family 'ipv4' option proto 'tcp' option port '554' 07070100DC3B05000041ED00000000000000000000000368F513D900000000000000080000000100000000000000000000000F00000000usr/share/luci07070100DC3B13000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001600000000usr/share/luci/menu.d07070100DC3B15000081A400000000000000000000000168F513D9000009FD000000080000000100000000000000000000002500000000usr/share/luci/menu.d/luci-base.json{ "admin": { "title": "Administration", "order": 10, "action": { "type": "firstchild", "recurse": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ], "login": true } }, "admin/status": { "title": "Status", "order": 10, "action": { "type": "firstchild", "preferred": "overview", "recurse": true } }, "admin/system": { "title": "System", "order": 20, "action": { "type": "firstchild", "preferred": "system", "recurse": true } }, "admin/services": { "title": "Services", "order": 40, "action": { "type": "firstchild", "recurse": true } }, "admin/network": { "title": "Network", "order": 50, "action": { "type": "firstchild", "recurse": true } }, "admin/vpn": { "title": "VPN", "order": 70, "action": { "type": "firstchild", "recurse": true } }, "admin/translations/*": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_translations" }, "auth": {} }, "admin/ubus/*": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_ubus" }, "auth": {} }, "admin/logout": { "title": "Log out", "order": 999, "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_logout" }, "depends": { "acl": [ "luci-base" ] }, "firstchild_ineligible": true }, "admin/uci": { "action": { "type": "firstchild" } }, "admin/uci/revert": { "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_revert", "post": true } }, "admin/uci/apply_rollback": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_apply_rollback", "post": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ] } }, "admin/uci/apply_unchecked": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_apply_unchecked", "post": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ] } }, "admin/uci/confirm": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_confirm" }, "auth": {} }, "admin/menu": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_menu" }, "auth": {} } } 07070100DC3E4C000081A400000000000000000000000168F513D900000AFF000000080000000100000000000000000000002B00000000usr/share/luci/menu.d/luci-mod-system.json{ "admin/system/system": { "title": "System", "order": 1, "action": { "type": "view", "path": "system/system" }, "depends": { "acl": [ "luci-mod-system-config" ] } }, "admin/system/admin": { "title": "Administration", "order": 2, "action": { "type": "firstchild" }, "depends": { "acl": [ "luci-mod-system-config", "luci-mod-system-ssh" ] } }, "admin/system/admin/password": { "title": "Router Password", "order": 1, "action": { "type": "view", "path": "system/password" }, "depends": { "acl": [ "luci-mod-system-config" ] } }, "admin/system/admin/dropbear": { "title": "SSH Access", "order": 2, "action": { "type": "view", "path": "system/dropbear" }, "depends": { "acl": [ "luci-mod-system-ssh" ], "fs": { "/usr/sbin/dropbear": "executable" } } }, "admin/system/admin/sshkeys": { "title": "SSH-Keys", "order": 3, "action": { "type": "view", "path": "system/sshkeys" }, "depends": { "acl": [ "luci-mod-system-ssh" ], "fs": { "/usr/sbin/dropbear": "executable" } } }, "admin/system/admin/uhttpd": { "title": "HTTP(S) Access", "order": 4, "action": { "type": "view", "path": "system/uhttpd" }, "depends": { "acl": [ "luci-mod-system-uhttpd" ], "fs": { "/usr/sbin/uhttpd": "executable" } } }, "admin/system/admin/repokeys": { "title": "Repo Public Keys", "order": 5, "action": { "type": "view", "path": "system/repokeys" }, "depends": { "acl": [ "luci-mod-system-repokeys" ] } }, "admin/system/startup": { "title": "Startup", "order": 45, "action": { "type": "view", "path": "system/startup" }, "depends": { "acl": [ "luci-mod-system-init" ] } }, "admin/system/crontab": { "title": "Scheduled Tasks", "order": 46, "action": { "type": "view", "path": "system/crontab" }, "depends": { "acl": [ "luci-mod-system-cron" ] } }, "admin/system/mounts": { "title": "Mount Points", "order": 50, "action": { "type": "view", "path": "system/mounts" }, "depends": { "acl": [ "luci-mod-system-mounts" ], "fs": { "/sbin/block": "executable" } } }, "admin/system/leds": { "title": "LED Configuration", "order": 60, "action": { "type": "view", "path": "system/leds" }, "depends": { "acl": [ "luci-mod-system-config" ], "fs": { "/sys/class/leds": "directory" } } }, "admin/system/flash": { "title": "Backup / Flash Firmware", "order": 70, "action": { "type": "view", "path": "system/flash" }, "depends": { "acl": [ "luci-mod-system-flash" ] } }, "admin/system/reboot": { "title": "Reboot", "order": 90, "action": { "type": "view", "path": "system/reboot" }, "depends": { "acl": [ "luci-mod-system-reboot" ] } } } 07070100DC3EBF000081A400000000000000000000000168F513D90000061E000000080000000100000000000000000000002C00000000usr/share/luci/menu.d/luci-mod-network.json{ "admin/network/switch": { "title": "Switch", "order": 20, "action": { "type": "view", "path": "network/switch" }, "depends": { "acl": [ "luci-mod-network-config" ], "fs": { "/sbin/swconfig": "executable" }, "uci": { "network": { "@switch": true } } } }, "admin/network/wireless": { "title": "Wireless", "order": 15, "action": { "type": "view", "path": "network/wireless" }, "depends": { "acl": [ "luci-mod-network-config" ], "uci": { "wireless": { "@wifi-device": true } } } }, "admin/network/remote_addr/*": { "action": { "type": "call", "module": "luci.controller.admin.network", "function": "remote_addr" } }, "admin/network/network": { "title": "Interfaces", "order": 10, "action": { "type": "view", "path": "network/interfaces" }, "depends": { "acl": [ "luci-mod-network-config" ] } }, "admin/network/routes": { "title": "Routing", "order": 30, "action": { "type": "view", "path": "network/routes" }, "depends": { "acl": [ "luci-mod-network-config" ] } }, "admin/network/dhcp": { "title": "DHCP and DNS", "order": 40, "action": { "type": "view", "path": "network/dhcp" }, "depends": { "acl": [ "luci-mod-network-dhcp" ], "fs": { "/usr/sbin/dnsmasq": "executable" }, "uci": { "dhcp": true } } }, "admin/network/diagnostics": { "title": "Diagnostics", "order": 50, "action": { "type": "view", "path": "network/diagnostics" }, "depends": { "acl": [ "luci-mod-network-diagnostics" ] } } } 07070100DC3DE7000081A400000000000000000000000168F513D9000004D9000000080000000100000000000000000000002D00000000usr/share/luci/menu.d/luci-app-firewall.json{ "admin/network/firewall": { "title": "Firewall", "order": 60, "action": { "type": "alias", "path": "admin/network/firewall/zones" }, "depends": { "acl": [ "luci-app-firewall" ], "fs": { "/sbin/fw3": "executable" }, "uci": { "firewall": true } } }, "admin/network/firewall/zones": { "title": "General Settings", "order": 10, "action": { "type": "view", "path": "firewall/zones" } }, "admin/network/firewall/forwards": { "title": "Port Forwards", "order": 20, "action": { "type": "view", "path": "firewall/forwards" } }, "admin/network/firewall/rules": { "title": "Traffic Rules", "order": 30, "action": { "type": "view", "path": "firewall/rules" } }, "admin/network/firewall/snats": { "title": "NAT Rules", "order": 40, "action": { "type": "view", "path": "firewall/snats" } }, "admin/network/firewall/ipsets": { "title": "IP Sets", "order": 45, "action": { "type": "view", "path": "firewall/ipsets" } }, "admin/network/firewall/custom": { "title": "Custom Rules", "order": 50, "action": { "type": "view", "path": "firewall/custom" }, "depends": { "fs": { "/usr/share/fw3/helpers.conf": "file" } } } } 07070100DC3F7B000081A400000000000000000000000168F513D9000000CF000000080000000100000000000000000000003400000000usr/share/luci/menu.d/luci-app-package-manager.json{ "admin/system/package-manager": { "title": "Software", "order": 30, "action": { "type": "view", "path": "package-manager" }, "depends": { "acl": [ "luci-app-package-manager" ] } } } 07070100DC3E0E000081A400000000000000000000000168F513D900000B6C000000080000000100000000000000000000002B00000000usr/share/luci/menu.d/luci-mod-status.json{ "admin/status/overview": { "title": "Overview", "order": 1, "action": { "type": "template", "path": "admin_status/index" }, "depends": { "acl": [ "luci-mod-status-index" ] } }, "admin/status/routes": { "title": "Routing", "order": 2, "action": { "type": "view", "path": "status/routes" }, "depends": { "acl": [ "luci-mod-status-routes" ] } }, "admin/status/iptables": { "title": "Firewall", "order": 3, "action": { "type": "view", "path": "status/iptables" }, "depends": { "acl": [ "luci-mod-status-firewall" ], "fs": [ { "/usr/sbin/nft": "absent", "/usr/sbin/iptables": "executable" }, { "/usr/sbin/nft": "absent", "/usr/sbin/ip6tables": "executable" } ] } }, "admin/status/nftables": { "title": "Firewall", "order": 3, "action": { "type": "view", "path": "status/nftables" }, "depends": { "acl": [ "luci-mod-status-firewall" ], "fs": { "/usr/sbin/nft": "executable" } } }, "admin/status/nftables/iptables": { "action": { "type": "view", "path": "status/iptables" } }, "admin/status/logs": { "title": "System Log", "order": 4, "action": { "type": "alias", "path": "admin/status/logs/syslog" }, "depends": { "acl": [ "luci-mod-status-logs" ] } }, "admin/status/logs/syslog": { "title": "System Log", "order": 1, "action": { "type": "view", "path": "status/syslog" } }, "admin/status/logs/dmesg": { "title": "Kernel Log", "order": 2, "action": { "type": "view", "path": "status/dmesg" } }, "admin/status/processes": { "title": "Processes", "order": 6, "action": { "type": "view", "path": "status/processes" }, "depends": { "acl": [ "luci-mod-status-processes" ] } }, "admin/status/channel_analysis": { "title": "Channel Analysis", "order": 7, "action": { "type": "view", "path": "status/channel_analysis" }, "depends": { "acl": [ "luci-mod-status-channel_analysis" ], "uci": { "wireless": { "@wifi-device": true } } } }, "admin/status/realtime": { "title": "Realtime Graphs", "order": 7, "action": { "type": "alias", "path": "admin/status/realtime/load" }, "depends": { "acl": [ "luci-mod-status-realtime" ] } }, "admin/status/realtime/load": { "title": "Load", "order": 1, "action": { "type": "view", "path": "status/load" } }, "admin/status/realtime/bandwidth": { "title": "Bandwidth", "order": 2, "action": { "type": "view", "path": "status/bandwidth" } }, "admin/status/realtime/wireless": { "title": "Wireless", "order": 3, "action": { "type": "view", "path": "status/wireless" }, "depends": { "uci": { "wireless": { "@wifi-device": true } } } }, "admin/status/realtime/connections": { "title": "Connections", "order": 4, "action": { "type": "view", "path": "status/connections" } } } 07070100DC3DEA000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001300000000usr/share/ucitrack07070100DC3EC4000081A400000000000000000000000168F513D900000048000000080000000100000000000000000000003400000000usr/share/ucitrack/luci-mod-network-interfaces.json{ "config": "network", "init": "network", "affects": [ "dhcp" ] } 07070100DC3EC7000081A400000000000000000000000168F513D900000038000000080000000100000000000000000000003200000000usr/share/ucitrack/luci-mod-network-wireless.json{ "config": "wireless", "affects": [ "network" ] } 07070100DC3EC2000081A400000000000000000000000168F513D900000047000000080000000100000000000000000000003100000000usr/share/ucitrack/luci-mod-network-dnsmasq.json{ "config": "dhcp", "init": "dnsmasq", "affects": [ "odhcpd" ] } 07070100DC3E50000081A400000000000000000000000168F513D900000035000000080000000100000000000000000000002F00000000usr/share/ucitrack/luci-mod-system-mounts.json{ "config": "fstab", "exec": "/sbin/block mount" } 07070100DC3EC5000081A400000000000000000000000168F513D90000002B000000080000000100000000000000000000003000000000usr/share/ucitrack/luci-mod-network-odhcpd.json{ "config": "odhcpd", "init": "odhcpd" } 07070100DC3E4F000081A400000000000000000000000168F513D90000002F000000080000000100000000000000000000003100000000usr/share/ucitrack/luci-mod-system-dropbear.json{ "config": "dropbear", "init": "dropbear" } 07070100DC3DEB000081A400000000000000000000000168F513D900000069000000080000000100000000000000000000002A00000000usr/share/ucitrack/luci-app-firewall.json{ "config": "firewall", "init": "firewall", "affects": [ "luci-splash", "qos", "miniupnpd" ] } 07070100DC3E51000081A400000000000000000000000168F513D90000007B000000080000000100000000000000000000002F00000000usr/share/ucitrack/luci-mod-system-system.json{ "config": "system", "init": "led", "exec": "/etc/init.d/log reload", "affects": [ "luci_statistics", "dhcp" ] } 07070100DC280A000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001100000000usr/share/udhcpc07070100DC2815000081ED00000000000000000000000168F513D900000544000000080000000100000000000000000000002000000000usr/share/udhcpc/default.script#!/bin/sh [ -z "$1" ] && echo "Error: should be run by udhcpc" && exit 1 set_classless_routes() { local max=128 local type while [ -n "$1" -a -n "$2" -a $max -gt 0 ]; do [ ${1##*/} -eq 32 ] && type=host || type=net echo "udhcpc: adding route for $type $1 via $2" route add -$type "$1" gw "$2" dev "$interface" max=$(($max-1)) shift 2 done } setup_interface() { echo "udhcpc: ip addr add $ip/${subnet:-255.255.255.0} broadcast ${broadcast:-+} dev $interface" ip addr add $ip/${subnet:-255.255.255.0} broadcast ${broadcast:-+} dev $interface [ -n "$router" ] && [ "$router" != "0.0.0.0" ] && [ "$router" != "255.255.255.255" ] && { echo "udhcpc: setting default routers: $router" local valid_gw="" for i in $router ; do route add default gw $i dev $interface valid_gw="${valid_gw:+$valid_gw|}$i" done eval $(route -n | awk ' /^0.0.0.0\W{9}('$valid_gw')\W/ {next} /^0.0.0.0/ {print "route del -net "$1" gw "$2";"} ') } # CIDR STATIC ROUTES (rfc3442) [ -n "$staticroutes" ] && set_classless_routes $staticroutes [ -n "$msstaticroutes" ] && set_classless_routes $msstaticroutes } applied= case "$1" in deconfig) ip -4 addr flush dev "$interface" ;; renew) setup_interface update ;; bound) setup_interface ifup ;; esac # user rules [ -f /etc/udhcpc.user ] && . /etc/udhcpc.user exit 0 07070100DC32DC000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001400000000usr/share/libiwinfo07070100DC32DD000081A400000000000000000000000168F513D900004559000000080000000100000000000000000000002000000000usr/share/libiwinfo/devices.txt# libiwinfo hardware database # vendor id | device id | subsystem vendor id | subsystem device id | # txpower offset | frequency offset | "vendor name" | "device name" 0x0777 0x11ac 0x0777 0xe7f9 0 0 "Ubiquiti" "LiteBeam 5AC" 0xffff 0xffff 0xffff 0xb102 0 0 "Ubiquiti" "PowerStation2 (18V)" 0xffff 0xffff 0xffff 0xb202 0 0 "Ubiquiti" "PowerStation2 (16D)" 0xffff 0xffff 0xffff 0xb302 0 0 "Ubiquiti" "PowerStation2 (EXT)" 0xffff 0xffff 0xffff 0xb105 0 0 "Ubiquiti" "PowerStation5 (22V)" 0xffff 0xffff 0xffff 0xb305 0 0 "Ubiquiti" "PowerStation5 (EXT)" 0xffff 0xffff 0xffff 0xc302 0 0 "Ubiquiti" "PicoStation2" 0xffff 0xffff 0xffff 0xc3a2 10 0 "Ubiquiti" "PicoStation2 HP" 0xffff 0xffff 0xffff 0xa105 0 0 "Ubiquiti" "WispStation5" 0xffff 0xffff 0xffff 0xa002 10 0 "Ubiquiti" "LiteStation2" 0xffff 0xffff 0xffff 0xa005 5 0 "Ubiquiti" "LiteStation5" 0xffff 0xffff 0xffff 0xc002 10 0 "Ubiquiti" "NanoStation2" 0xffff 0xffff 0xffff 0xc005 5 0 "Ubiquiti" "NanoStation5" 0xffff 0xffff 0xffff 0xc102 10 0 "Ubiquiti" "NanoStation Loco2" 0xffff 0xffff 0xffff 0xc105 5 0 "Ubiquiti" "NanoStation Loco5" 0xffff 0xffff 0xffff 0xc202 10 0 "Ubiquiti" "Bullet2" 0xffff 0xffff 0xffff 0xc205 5 0 "Ubiquiti" "Bullet5" 0x168c 0xffff 0x0777 0xe002 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe003 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe005 5 0 "Ubiquiti" "NanoStation M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe006 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe009 6 0 "Ubiquiti" "NanoStation Loco M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe012 10 0 "Ubiquiti" "NanoStation M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe035 3 0 "Ubiquiti" "NanoStation M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe0a2 2 0 "Ubiquiti" "NanoStation Loco M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe0a5 1 0 "Ubiquiti" "NanoStation Loco M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe102 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe105 5 0 "Ubiquiti" "Rocket M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe112 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe115 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1a3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1a5 5 0 "Ubiquiti" "PowerBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1b2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b5 5 0 "Ubiquiti" "Rocket M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1b6 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b9 6 0 "Ubiquiti" "Rocket M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1c3 3 0 "Ubiquiti" "Rocket M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c5 5 0 "Ubiquiti" "Rocket M5 GPS" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1d2 10 0 "Ubiquiti" "Rocket M2 Titanium" /* airOS XM/XW */ 0x168c 0xffff 0x0777 0xe1d3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1d5 5 0 "Ubiquiti" "airOS XM/XW" 0x168c 0xffff 0x0777 0xe1d9 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1e3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1e5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe202 12 0 "Ubiquiti" "Bullet M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe205 6 0 "Ubiquiti" "Bullet M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe212 1 0 "Ubiquiti" "AirGrid M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe215 1 0 "Ubiquiti" "AirGrid M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe232 2 0 "Ubiquiti" "NanoBridge M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe233 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe235 1 0 "Ubiquiti" "NanoBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe239 6 0 "Ubiquiti" "NanoBridge M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe242 9 0 "Ubiquiti" "AirGrid M2 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe243 3 0 "Ubiquiti" "NanoBridge M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe245 6 0 "Ubiquiti" "AirGrid M5 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe252 9 0 "Ubiquiti" "AirGrid M2 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe255 6 0 "Ubiquiti" "AirGrid M5 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2a3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2a5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2b2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2b5 1 0 "Ubiquiti" "NanoBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2b9 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2c2 10 0 "Ubiquiti" "NanoBeam M2 Int" /* airOS XW */ 0x168c 0xffff 0x0777 0xe2c3 6 0 "Ubiquiti" "Bullet M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe2c4 6 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe2d2 12 0 "Ubiquiti" "Bullet M2 Titanium HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2d4 6 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe2d5 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2e5 4 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe302 12 0 "Ubiquiti" "PicoStation M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe305 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe345 6 0 "Ubiquiti" "WispStation M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe3a5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe3b5 6 0 "Ubiquiti" "airOS XM/XW" 0x168c 0xffff 0x0777 0xe3e5 4 0 "Ubiquiti" "PowerBeam M5 300" /* airOS XW */ 0x168c 0xffff 0x0777 0xe402 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe405 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe4a2 1 0 "Ubiquiti" "AirRouter" /* airOS XM */ 0x168c 0xffff 0x0777 0xe4a5 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe4b2 9 0 "Ubiquiti" "AirRouter HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe4d5 5 0 "Ubiquiti" "Rocket M5 Titanium" /* airOS XW */ 0x168c 0xffff 0x0777 0xe4e5 4 0 "Ubiquiti" "PowerBeam M5 400" /* airOS XW */ 0x168c 0xffff 0x0777 0xe5e5 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe6a2 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6b2 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6b5 5 0 "Ubiquiti" "Rocket M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe6c2 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6e5 4 0 "Ubiquiti" "PowerBeam M5 400 ISO" /* airOS XW */ 0x168c 0xffff 0x0777 0xe7f8 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe805 5 0 "Ubiquiti" "airOS XM" /* e.g. NanoStation M5, Bullet M5 */ 0x168c 0xffff 0x0777 0xe812 6 0 "Ubiquiti" "NanoBeam M2 13" /* airOS XW */ 0x168c 0xffff 0x0777 0xe815 4 0 "Ubiquiti" "NanoBeam M5 16" /* airOS XW */ 0x168c 0xffff 0x0777 0xe825 4 0 "Ubiquiti" "NanoBeam M5 19" /* airOS XW */ 0x168c 0xffff 0x0777 0xe835 6 0 "Ubiquiti" "AirGrid M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe845 1 0 "Ubiquiti" "NanoStation Loco M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe855 5 0 "Ubiquiti" "NanoStation M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe865 6 0 "Ubiquiti" "LiteBeam M5" /* airOS XW */ 0x168c 0xffff 0x0777 0xe866 6 0 "Ubiquiti" "NanoStation M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe867 2 0 "Ubiquiti" "NanoStation Loco M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe868 7 0 "Ubiquiti" "Rocket M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe869 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe875 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe879 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe885 4 0 "Ubiquiti" "PowerBeam M5 620 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe895 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe8a5 1 0 "Ubiquiti" "NanoStation Loco M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe8b5 5 0 "Ubiquiti" "airOS XM" 0x168c 0x001b 0x0777 0x3002 10 0 "Ubiquiti" "XR2" 0x168c 0x001b 0x7777 0x3002 10 0 "Ubiquiti" "XR2" 0x168c 0x001b 0x0777 0x3b02 10 0 "Ubiquiti" "XR2.3" 0x168c 0x001b 0x0777 0x3c02 10 0 "Ubiquiti" "XR2.6" 0x168c 0x001b 0x0777 0x3b03 10 0 "Ubiquiti" "XR3-2.8" 0x168c 0x001b 0x0777 0x3c03 10 0 "Ubiquiti" "XR3-3.6" 0x168c 0x001b 0x0777 0x3003 10 0 "Ubiquiti" "XR3" 0x168c 0x001b 0x0777 0x3004 10 0 "Ubiquiti" "XR4" 0x168c 0x001b 0x0777 0x3005 10 0 "Ubiquiti" "XR5" 0x168c 0x001b 0x7777 0x3005 10 0 "Ubiquiti" "XR5" 0x168c 0x001b 0x0777 0x3007 10 0 "Ubiquiti" "XR7" 0x168c 0x001b 0x0777 0x3009 10 -1520 "Ubiquiti" "XR9" 0x168c 0x001b 0x168c 0x2063 0 0 "Atheros" "AR5413" 0x168c 0x0013 0x168c 0x1042 1 0 "Ubiquiti" "SRC" 0x168c 0x0013 0x0777 0x2041 10 0 "Ubiquiti" "SR2" 0x168c 0x0013 0x0777 0x2004 6 0 "Ubiquiti" "SR4" 0x168c 0x0013 0x7777 0x2004 6 0 "Ubiquiti" "SR4" 0x168c 0x0013 0x0777 0x1004 6 0 "Ubiquiti" "SR4C" 0x168c 0x0013 0x7777 0x1004 6 0 "Ubiquiti" "SR4C" 0x168c 0x0013 0x168c 0x2042 7 0 "Ubiquiti" "SR5" 0x168c 0x0013 0x7777 0x2009 12 -1500 "Ubiquiti" "SR9" 0x168c 0x0027 0x168c 0x2082 7 0 "Ubiquiti" "SR71A" 0x168c 0x0027 0x0777 0x4082 7 0 "Ubiquiti" "SR71" 0x168c 0x0029 0x0777 0x4005 7 0 "Ubiquiti" "SR71-15" 0x168c 0x002a 0x0777 0xe302 12 0 "Ubiquiti" "PicoStation M2" /* ToDo: confirm offset - Correct! */ 0x168c 0x002a 0x0777 0xe012 12 0 "Ubiquiti" "NanoStation M2" /* ToDo: confirm offset - Wrong! */ 0x168c 0x002a 0x0777 0xe005 5 0 "Ubiquiti" "NanoStation M5" /* ToDo: confirm offset - Correct! */ 0x168c 0x002a 0x0777 0xe202 12 0 "Ubiquiti" "Bullet M2" 0x168c 0x002a 0x0777 0xe805 5 0 "Ubiquiti" "Bullet M5" 0x168c 0x002a 0x0777 0xe345 0 0 "Ubiquiti" "WispStation M5" /* ToDo: confirm offset - Wrong! */ 0x168c 0x0029 0x168c 0xa094 0 0 "Atheros" "AR9220" 0x168c 0x0029 0x168c 0xa095 0 0 "Atheros" "AR9223" 0x168c 0x002a 0x168c 0xa093 0 0 "Atheros" "AR9280" 0x168c 0x002b 0x168c 0xa091 0 0 "Atheros" "AR9285" 0x168c 0x002d 0x168c 0x209a 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x1a3b 0x1121 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x0777 0xe0a2 8 0 "Ubiquiti" "NanoStation Loco M2 (XM)" /* wrong offset! */ 0x168c 0x002e 0x168c 0x30a4 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x168c 0xa199 0 0 "Atheros" "AR9287" 0x168c 0x0030 0x168c 0x3112 0 0 "Atheros" "AR9380" 0x168c 0x0030 0x168c 0x3114 0 0 "Atheros" "AR9390" 0x168c 0x0033 0x168c 0xa120 0 0 "Atheros" "AR9580" 0x168c 0x0033 0x168c 0xa136 0 0 "Atheros" "AR9580" 0x168c 0x0033 0x168c 0x3123 0 0 "Atheros" "AR9590" 0x168c 0x0033 0x19b6 0xd014 0 0 "MikroTik" "R11e-5HnD" 0x168c 0x0033 0x19b6 0xd057 0 0 "MikroTik" "R11e-5HnDr2" 0x168c 0x0033 0x19b6 0xd016 0 0 "MikroTik" "R11e-2HPnD" 0x168c 0x0034 0x17aa 0x3214 0 0 "Atheros" "AR9462" 0x168c 0x003c 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9880" 0x168c 0x003c 0x168c 0x3223 0 0 "Qualcomm Atheros" "QCA9880" 0x168c 0x003c 0x1a56 0x1420 0 0 "Qualcomm Atheros" "QCA9862" 0x168c 0x003c 0x19b6 0xd03c 0 0 "Mikrotik" "R11e-5HacT" 0x168c 0x003c 0x19b6 0xd075 0 0 "Mikrotik" "R11e-5HacD" 0x168c 0x003e 0x168c 0x3361 0 0 "Qualcomm Atheros" "QCA6174" 0x168c 0x0040 0x168c 0x0002 0 0 "Qualcomm Atheros" "QCA9990" 0x168c 0x0046 0x168c 0xcafe 0 0 "Qualcomm Atheros" "QCA9984" 0x168c 0x0050 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9887" 0x168c 0x0056 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9886" 0x17cb 0x1104 0x17cb 0x1104 0 0 "Qualcomm Atheros" "QCN6024/9024/9074" 0x1814 0x3051 0x1814 0x0007 0 0 "Ralink" "Rt3051" /* needs fixing */ 0x1814 0x3052 0x1814 0x0008 0 0 "Ralink" "Rt3052" /* needs fixing */ 0x1814 0x3091 0x1814 0x3091 0 0 "Ralink" "RT5592" 0x1814 0x3350 0x1814 0x000b 0 0 "Ralink" "Rt3350" /* needs fixing */ 0x1814 0x3662 0x1814 0x000d 0 0 "Ralink" "Rt3662" /* needs fixing */ 0x11ab 0x2a55 0x11ab 0x0000 0 0 "Marvell" "88W8864" 0x02df 0x9135 0x0000 0x0000 0 0 "Marvell" "88W8887" 0x11ab 0x2b40 0x11ab 0x0000 0 0 "Marvell" "88W8964" 0x02df 0x9141 0x0000 0x0000 0 0 "Marvell" "88W8997" 0x14c3 0x0608 0x14c3 0x0608 0 0 "AMD" "RZ608" 0x14c3 0x7603 0x14c3 0x7603 0 0 "MediaTek" "MT7603E" 0x14c3 0x7610 0x14c3 0x7610 0 0 "MediaTek" "MT7610E" 0x14c3 0x7612 0x14c3 0x7612 0 0 "MediaTek" "MT7612E" 0x14c3 0x7663 0x14c3 0x7663 0 0 "MediaTek" "MT7613BE" 0x14c3 0x7615 0x7615 0x14c3 0 0 "MediaTek" "MT7615E" 0x14c3 0x7628 0x14c3 0x0004 0 0 "MediaTek" "MT76x8" 0x14c3 0x7650 0x14c3 0x7650 0 0 "MediaTek" "MT7610E" 0x14c3 0x7662 0x14c3 0x7662 0 0 "MediaTek" "MT76x2E" 0x14c3 0x7915 0x14c3 0x7915 0 0 "MediaTek" "MT7915E" 0x14c3 0x7906 0x14c3 0x7906 0 0 "MediaTek" "MT7916AN" 0x14c3 0x7925 0x1a3b 0x6002 0 0 "MediaTek" "MT7925E" 0x14c3 0x7990 0x14C3 0x6639 0 0 "MediaTek" "MT7996E" 0x14e4 0xaa52 0x14e4 0xaa52 0 0 "Broadcom" "BCM43602" 0x02d0 0xa9a6 0x0000 0x0000 0 0 "Cypress" "CYW43455" 0x02d0 0x4345 0x0000 0x0000 0 0 "Cypress" "CYW43455" 0x1ae9 0x0310 0x1ae9 0x0000 0 0 "Wilocity" "Wil6210" # USB devices # 0x0000 | 0x0000 | vendor id | product id | ... # mt7601u/usb.c 0x0000 0x0000 0x148f 0x7601 0 0 "MediaTek" "MT7601U" # mt7921/usb.c 0x0000 0x0000 0x0e8d 0x7961 0 0 "MediaTek" "MT7921AU" # mt76x2/usb.c 0x0000 0x0000 0x0b05 0x1833 0 0 "ASUS" "USB-AC54" 0x0000 0x0000 0x0b05 0x17eb 0 0 "ASUS" "USB-AC55" 0x0000 0x0000 0x0b05 0x180b 0 0 "ASUS" "USB-N53 B1" 0x0000 0x0000 0x0e8d 0x7612 0 0 "Aukey" "USBAC1200" /* Alfa AWUS036ACM */ 0x0000 0x0000 0x057c 0x8503 0 0 "AVM" "FRITZ!WLAN AC860" 0x0000 0x0000 0x7392 0xb711 0 0 "Edimax" "EW-7722UAC" 0x0000 0x0000 0x0e8d 0x7632 0 0 "High Cloud" "HC-M7662BU1" 0x0000 0x0000 0x2c4e 0x0103 0 0 "Mercury" "UD13" 0x0000 0x0000 0x0846 0x9053 0 0 "Netgear" "A6210" 0x0000 0x0000 0x045e 0x02e6 0 0 "Microsoft" "XBox One Wireless Adapter" 0x0000 0x0000 0x045e 0x02fe 0 0 "Microsoft" "XBox One Wireless Adapter" # mt76x0/usb.c 0x0000 0x0000 0x148f 0x7610 0 0 "MediaTek" "MT7610U" 0x0000 0x0000 0x13b1 0x003e 0 0 "Linksys" "AE6000" 0x0000 0x0000 0x0e8d 0x7610 0 0 "Sabrent" "NTWLAC" 0x0000 0x0000 0x7392 0xa711 0 0 "Edimax" "7711MAC" 0x0000 0x0000 0x148f 0x761a 0 0 "TP-Link" "TL-WDN5200" 0x0000 0x0000 0x0b05 0x17d1 0 0 "ASUS" "USB-AC51" 0x0000 0x0000 0x0b05 0x17db 0 0 "ASUS" "USB-AC50" 0x0000 0x0000 0x0df6 0x0075 0 0 "Sitecom" "WLA-3100" 0x0000 0x0000 0x2019 0xab31 0 0 "Planex" "GW-450D" 0x0000 0x0000 0x2001 0x3d02 0 0 "D-Link" "DWA-171 rev B1" 0x0000 0x0000 0x0586 0x3425 0 0 "Zyxel" "NWD6505" 0x0000 0x0000 0x07b8 0x7610 0 0 "AboCom" "AU7212" 0x0000 0x0000 0x04bb 0x0951 0 0 "I-O DATA" "WN-AC433UK" 0x0000 0x0000 0x057c 0x8502 0 0 "AVM" "FRITZ!WLAN AC430" 0x0000 0x0000 0x293c 0x5702 0 0 "Comcast" "Xfinity KXW02AAA" 0x0000 0x0000 0x20f4 0x806b 0 0 "TRENDnet" "TEW-806UBH" 0x0000 0x0000 0x7392 0xc711 0 0 "Devolo" "WiFi Stick ac" 0x0000 0x0000 0x0df6 0x0079 0 0 "Sitecom" "WL-356" 0x0000 0x0000 0x2357 0x0123 0 0 "TP-Link" "T2UHP US v1" 0x0000 0x0000 0x2357 0x010b 0 0 "TP-Link" "T2UHP UN v1" 0x0000 0x0000 0x2357 0x0105 0 0 "TP-Link" "Archer T1U" 0x0000 0x0000 0x0e8d 0x7630 0 0 "MediaTek" "MT7630U" 0x0000 0x0000 0x0e8d 0x7650 0 0 "MediaTek" "MT7650U" # mt7615/usb.c 0x0000 0x0000 0x0e8d 0x7663 0 0 "MediaTek" "MT7663U" 0x0000 0x0000 0x043e 0x310c 0 0 "LG" "LGSBWAC02" # rtl8xxxu/rtl8xxxu_core.c 0x0000 0x0000 0x0bda 0x8176 0 0 "Realtek" "RTL8188CU" 0x0000 0x0000 0x0bda 0xf179 0 0 "Realtek" "RTL8188FTV" # FDT compatible strings # "compatible" | txpower offset | frequency offset | ... "qca,ar9130-wmac" 0 0 "Atheros" "AR9130" "qca,ar9330-wmac" 0 0 "Atheros" "AR9330" "qca,ar9340-wmac" 0 0 "Atheros" "AR9340" "qca,qca9530-wmac" 0 0 "Qualcomm Atheros" "QCA9530" "qca,qca9550-wmac" 0 0 "Qualcomm Atheros" "QCA9550" "qca,qca9560-wmac" 0 0 "Qualcomm Atheros" "QCA9560" "qcom,ipq4019-wifi" 0 0 "Qualcomm Atheros" "IPQ4019" "qcom,ipq6018-wifi" 0 0 "Qualcomm Atheros" "IPQ6018" "qcom,ipq8074-wifi" 0 0 "Qualcomm Atheros" "IPQ8074" "mediatek,mt7622-wmac" 0 0 "MediaTek" "MT7622" "mediatek,mt7628-wmac" 0 0 "MediaTek" "MT7628" "mediatek,mt7981-wmac" 0 0 "MediaTek" "MT7981" "mediatek,mt7986-wmac" 0 0 "MediaTek" "MT7986" "ralink,rt2880-wmac" 0 0 "Ralink" "Rt2880" "ralink,rt3050-wmac" 0 0 "Ralink" "Rt3050" "ralink,rt3352-wmac" 0 0 "Ralink" "Rt3352" "ralink,rt3883-wmac" 0 0 "Ralink" "Rt3883" "ralink,rt5350-wmac" 0 0 "Ralink" "Rt5350" "ralink,rt7620-wmac" 0 0 "MediaTek" "MT7620" 07070100DC33BF000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001100000000usr/share/hostap07070100DC33C4000081A400000000000000000000000168F513D9000016BA000000080000000100000000000000000000002000000000usr/share/hostap/wifi-detect.uc#!/usr/bin/env ucode 'use strict'; import { readfile, writefile, realpath, glob, basename, unlink, open, rename } from "fs"; import { is_equal } from "/usr/share/hostap/common.uc"; let nl = require("nl80211"); let board_file = "/etc/board.json"; let prev_board_data = json(readfile(board_file)); let board_data = json(readfile(board_file)); function phy_idx(name) { return +rtrim(readfile(`/sys/class/ieee80211/${name}/index`)); } function phy_path(name) { let devpath = realpath(`/sys/class/ieee80211/${name}/device`); devpath = replace(devpath, /^\/sys\/devices\//, ""); if (match(devpath, /^platform\/.*\/pci/)) devpath = replace(devpath, /^platform\//, ""); let dev_phys = map(glob(`/sys/class/ieee80211/${name}/device/ieee80211/*`), basename); sort(dev_phys, (a, b) => phy_idx(a) - phy_idx(b)); let ofs = index(dev_phys, name); if (ofs > 0) devpath += `+${ofs}`; return devpath; } function cleanup() { let wlan = board_data.wlan; for (let name in wlan) if (substr(name, 0, 3) == "phy") delete wlan[name]; else delete wlan[name].info; } function wiphy_get_entry(phy, path) { board_data.wlan ??= {}; let wlan = board_data.wlan; for (let name in wlan) if (wlan[name].path == path) return wlan[name]; wlan[phy] = { path: path }; return wlan[phy]; } function freq_to_channel(freq) { if (freq < 1000) return 0; if (freq == 2484) return 14; if (freq == 5935) return 2; if (freq < 2484) return (freq - 2407) / 5; if (freq >= 4910 && freq <= 4980) return (freq - 4000) / 5; if (freq < 5950) return (freq - 5000) / 5; if (freq <= 45000) return (freq - 5950) / 5; if (freq >= 58320 && freq <= 70200) return (freq - 56160) / 2160; return 0; } function freq_range_match(ranges, freq) { freq *= 1000; for (let range in ranges) { if (freq >= range[0] && freq <= range[1]) return true; } return false; } function wiphy_detect() { let phys = nl.request(nl.const.NL80211_CMD_GET_WIPHY, nl.const.NLM_F_DUMP, { split_wiphy_dump: true }); if (!phys) return; for (let phy in phys) { if (!phy) continue; let name = phy.wiphy_name; let path = phy_path(name); let info = { antenna_rx: phy.wiphy_antenna_avail_rx, antenna_tx: phy.wiphy_antenna_avail_tx, bands: {}, radios: [] }; for (let radio in phy.radios) { // S1G is not supported yet radio.freq_ranges = filter(radio.freq_ranges, (range) => range.end > 2000000 ); if (!length(radio.freq_ranges)) continue; push(info.radios, { index: radio.index, freq_ranges: map(radio.freq_ranges, (range) => [ range.start, range.end ] ), bands: {} }); } let bands = info.bands; for (let band in phy.wiphy_bands) { if (!band || !band.freqs) continue; let freq = band.freqs[0].freq; let band_info = {}; let band_name; if (freq > 50000) band_name = "60G"; else if (freq > 5900) band_name = "6G"; else if (freq > 4000) band_name = "5G"; else if (freq > 2000) band_name = "2G"; else continue; bands[band_name] = band_info; if (band.ht_capa > 0) band_info.ht = true; if (band.vht_capa > 0) band_info.vht = true; let he_phy_cap = 0; let eht_phy_cap = 0; for (let ift in band.iftype_data) { if (!ift.he_cap_phy) continue; band_info.he = true; he_phy_cap |= ift.he_cap_phy[0]; if (!ift.eht_cap_phy) continue; band_info.eht = true; eht_phy_cap |= ift.eht_cap_phy[0]; } if (band_name != "2G" && (he_phy_cap & 0x18) || ((band.vht_capa >> 2) & 0x3)) band_info.max_width = 160; else if (band_name != "2G" && (he_phy_cap & 4) || band.vht_capa > 0) band_info.max_width = 80; else if ((band.ht_capa & 0x2) || (he_phy_cap & 0x2)) band_info.max_width = 40; else band_info.max_width = 20; let modes = band_info.modes = [ "NOHT" ]; if (band_info.ht) push(modes, "HT20"); if (band_info.vht) push(modes, "VHT20"); if (band_info.he) push(modes, "HE20"); if (band_info.eht) push(modes, "EHT20"); if (band.ht_capa & 0x2) { push(modes, "HT40"); if (band_info.vht) push(modes, "VHT40") } if (he_phy_cap & 2) push(modes, "HE40"); if (eht_phy_cap && he_phy_cap & 2) push(modes, "EHT40"); for (let radio in info.radios) { let freq_match = filter(band.freqs, (freq) => freq_range_match(radio.freq_ranges, freq.freq) ); if (!length(freq_match)) continue; let radio_band = {}; radio.bands[band_name] = radio_band; freq_match = filter(freq_match, (freq) => !freq.disabled ); let freq = freq_match[0]; if (freq) radio_band.default_channel = freq_to_channel(freq.freq); } for (let freq in band.freqs) { if (freq.disabled) continue; let chan = freq_to_channel(freq.freq); if (!chan) continue; band_info.default_channel = chan; break; } if (band_name == "2G") continue; if (he_phy_cap & 4) push(modes, "HE40"); if (eht_phy_cap && he_phy_cap & 4) push(modes, "EHT40"); if (band_info.vht) push(modes, "VHT80"); if (he_phy_cap & 4) push(modes, "HE80"); if (eht_phy_cap && he_phy_cap & 4) push(modes, "EHT80"); if ((band.vht_capa >> 2) & 0x3) push(modes, "VHT160"); if (he_phy_cap & 0x18) push(modes, "HE160"); if (eht_phy_cap && he_phy_cap & 0x18) push(modes, "EHT160"); if (eht_phy_cap & 2) push(modes, "EHT320"); } let entry = wiphy_get_entry(name, path); entry.info = info; } } cleanup(); wiphy_detect(); if (!is_equal(prev_board_data, board_data)) { let new_file = board_file + ".new"; unlink(new_file); let f = open(new_file, "wx"); if (!f) exit(1); f.write(sprintf("%.J\n", board_data)); f.close(); rename(new_file, board_file); } 07070100DC360E000081A400000000000000000000000168F513D9000020B9000000080000000100000000000000000000002300000000usr/share/hostap/wpa_supplicant.uclet libubus = require("ubus"); import { open, readfile } from "fs"; import { wdev_create, wdev_set_mesh_params, wdev_remove, is_equal, wdev_set_up, vlist_new, phy_open } from "common"; let ubus = libubus.connect(); wpas.data.config = {}; wpas.data.iface_phy = {}; wpas.data.macaddr_list = {}; function iface_stop(iface) { let ifname = iface.config.iface; if (!iface.running) return; delete wpas.data.iface_phy[ifname]; wpas.remove_iface(ifname); wdev_remove(ifname); iface.running = false; } function iface_start(phydev, iface, macaddr_list) { let phy = phydev.name; if (iface.running) return; let ifname = iface.config.iface; let wdev_config = {}; for (let field in iface.config) wdev_config[field] = iface.config[field]; if (!wdev_config.macaddr) wdev_config.macaddr = phydev.macaddr_next(); wpas.data.iface_phy[ifname] = phy; wdev_remove(ifname); let ret = phydev.wdev_add(ifname, wdev_config); if (ret) wpas.printf(`Failed to create device ${ifname}: ${ret}`); wdev_set_up(ifname, true); wpas.add_iface(iface.config); iface.running = true; } function iface_cb(new_if, old_if) { if (old_if && new_if && is_equal(old_if.config, new_if.config)) { new_if.running = old_if.running; return; } if (new_if && old_if) wpas.printf(`Update configuration for interface ${old_if.config.iface}`); else if (old_if) wpas.printf(`Remove interface ${old_if.config.iface}`); if (old_if) iface_stop(old_if); } function prepare_config(config, radio) { config.config_data = readfile(config.config); return { config }; } function set_config(config_name, phy_name, radio, num_global_macaddr, macaddr_base, config_list) { let phy = wpas.data.config[config_name]; if (radio < 0) radio = null; if (!phy) { phy = vlist_new(iface_cb, false); phy.name = phy_name; wpas.data.config[config_name] = phy; } phy.radio = radio; phy.num_global_macaddr = num_global_macaddr; phy.macaddr_base = macaddr_base; let values = []; for (let config in config_list) push(values, [ config.iface, prepare_config(config) ]); phy.update(values); } function start_pending(phy_name) { let phy = wpas.data.config[phy_name]; let ubus = wpas.data.ubus; if (!phy || !phy.data) return; let phydev = phy_open(phy.name, phy.radio); if (!phydev) { wpas.printf(`Could not open phy ${phy_name}`); return; } let macaddr_list = wpas.data.macaddr_list[phy_name]; phydev.macaddr_init(macaddr_list, { num_global: phy.num_global_macaddr, macaddr_base: phy.macaddr_base, }); for (let ifname in phy.data) iface_start(phydev, phy.data[ifname]); } function phy_name(phy, radio) { if (!phy) return null; if (radio != null && radio >= 0) phy += "." + radio; return phy; } let main_obj = { phy_set_state: { args: { phy: "", radio: 0, stop: true, }, call: function(req) { let name = phy_name(req.args.phy, req.args.radio); if (!name || req.args.stop == null) return libubus.STATUS_INVALID_ARGUMENT; let phy = wpas.data.config[name]; if (!phy) return libubus.STATUS_NOT_FOUND; try { if (req.args.stop) { for (let ifname in phy.data) iface_stop(phy.data[ifname]); } else { start_pending(name); } } catch (e) { wpas.printf(`Error chaging state: ${e}\n${e.stacktrace[0].context}`); return libubus.STATUS_INVALID_ARGUMENT; } return 0; } }, phy_set_macaddr_list: { args: { phy: "", radio: 0, macaddr: [], }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; wpas.data.macaddr_list[phy] = req.args.macaddr; return 0; } }, phy_status: { args: { phy: "", radio: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; phy = wpas.data.config[phy]; if (!phy) return libubus.STATUS_NOT_FOUND; for (let ifname in phy.data) { try { let iface = wpas.interfaces[ifname]; if (!iface) continue; let status = iface.status(); if (!status) continue; if (status.state == "INTERFACE_DISABLED") continue; status.ifname = ifname; return status; } catch (e) { continue; } } return libubus.STATUS_NOT_FOUND; } }, config_set: { args: { phy: "", radio: 0, num_global_macaddr: 0, macaddr_base: "", config: [], defer: true, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; wpas.printf(`Set new config for phy ${phy}`); try { if (req.args.config) set_config(phy, req.args.phy, req.args.radio, req.args.num_global_macaddr, req.args.macaddr_base, req.args.config); if (!req.args.defer) start_pending(phy); } catch (e) { wpas.printf(`Error loading config: ${e}\n${e.stacktrace[0].context}`); return libubus.STATUS_INVALID_ARGUMENT; } return { pid: wpas.getpid() }; } }, config_add: { args: { driver: "", iface: "", bridge: "", hostapd_ctrl: "", ctrl: "", config: "", }, call: function(req) { if (!req.args.iface || !req.args.config) return libubus.STATUS_INVALID_ARGUMENT; if (wpas.add_iface(req.args) < 0) return libubus.STATUS_INVALID_ARGUMENT; return { pid: wpas.getpid() }; } }, config_remove: { args: { iface: "" }, call: function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; wpas.remove_iface(req.args.iface); return 0; } }, bss_info: { args: { iface: "", }, call: function(req) { let ifname = req.args.iface; if (!ifname) return libubus.STATUS_INVALID_ARGUMENT; let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; let status = iface.ctrl("STATUS"); if (!status) return libubus.STATUS_NOT_FOUND; let ret = {}; status = split(status, "\n"); for (let line in status) { line = split(line, "=", 2); ret[line[0]] = line[1]; } return ret; } }, }; wpas.data.ubus = ubus; wpas.data.obj = ubus.publish("wpa_supplicant", main_obj); wpas.udebug_set("wpa_supplicant", wpas.data.ubus); function iface_event(type, name, data) { let ubus = wpas.data.ubus; data ??= {}; data.name = name; wpas.data.obj.notify(`iface.${type}`, data, null, null, null, -1); ubus.call("service", "event", { type: `wpa_supplicant.${name}.${type}`, data: {} }); } function iface_hostapd_notify(phy, ifname, iface, state) { let ubus = wpas.data.ubus; let status = iface.status(); let msg = { phy: phy }; switch (state) { case "DISCONNECTED": case "AUTHENTICATING": case "SCANNING": msg.up = false; break; case "INTERFACE_DISABLED": case "INACTIVE": msg.up = true; break; case "COMPLETED": msg.up = true; msg.frequency = status.frequency; msg.sec_chan_offset = status.sec_chan_offset; break; default: return; } ubus.call("hostapd", "apsta_state", msg); } function iface_channel_switch(phy, ifname, iface, info) { let msg = { phy: phy, up: true, csa: true, csa_count: info.csa_count ? info.csa_count - 1 : 0, frequency: info.frequency, sec_chan_offset: info.sec_chan_offset, }; ubus.call("hostapd", "apsta_state", msg); } return { shutdown: function() { for (let phy in wpas.data.config) set_config(phy, []); wpas.ubus.disconnect(); }, iface_add: function(name, obj) { iface_event("add", name); }, iface_remove: function(name, obj) { iface_event("remove", name); }, state: function(ifname, iface, state) { let phy = wpas.data.iface_phy[ifname]; if (!phy) { wpas.printf(`no PHY for ifname ${ifname}`); return; } iface_hostapd_notify(phy, ifname, iface, state); if (state != "COMPLETED") return; let phy_data = wpas.data.config[phy]; if (!phy_data) return; let iface_data = phy_data.data[ifname]; if (!iface_data) return; let wdev_config = iface_data.config; if (!wdev_config || wdev_config.mode != "mesh") return; wdev_set_mesh_params(ifname, wdev_config); }, event: function(ifname, iface, ev, info) { let phy = wpas.data.iface_phy[ifname]; if (!phy) { wpas.printf(`no PHY for ifname ${ifname}`); return; } if (ev == "CH_SWITCH_STARTED") iface_channel_switch(phy, ifname, iface, info); } }; 07070100DC33C3000081A400000000000000000000000168F513D90000105E000000080000000100000000000000000000001900000000usr/share/hostap/wdev.uc#!/usr/bin/env ucode 'use strict'; import { vlist_new, is_equal, wdev_set_mesh_params, wdev_remove, wdev_set_up, phy_open } from "/usr/share/hostap/common.uc"; import { readfile, writefile, basename, readlink, glob } from "fs"; let libubus = require("ubus"); let keep_devices = {}; let phy_name = shift(ARGV); let command = shift(ARGV); let phy, phydev; function iface_stop(wdev) { if (keep_devices[wdev.ifname]) return; wdev_remove(wdev.ifname); } function iface_start(wdev) { let ifname = wdev.ifname; if (readfile(`/sys/class/net/${ifname}/ifindex`)) { wdev_set_up(ifname, false); wdev_remove(ifname); } let wdev_config = {}; for (let key in wdev) wdev_config[key] = wdev[key]; if (!wdev_config.macaddr && wdev.mode != "monitor") wdev_config.macaddr = phydev.macaddr_next(); phydev.wdev_add(ifname, wdev_config); wdev_set_up(ifname, true); let htmode = wdev.htmode || "NOHT"; if (wdev.freq) system(`iw dev ${ifname} set freq ${wdev.freq} ${htmode}`); if (wdev.mode == "adhoc") { let cmd = ["iw", "dev", ifname, "ibss", "join", wdev.ssid, wdev.freq, htmode, "fixed-freq" ]; if (wdev.bssid) push(cmd, wdev.bssid); for (let key in [ "beacon-interval", "basic-rates", "mcast-rate", "keys" ]) if (wdev[key]) push(cmd, key, wdev[key]); system(cmd); } else if (wdev.mode == "mesh") { let cmd = [ "iw", "dev", ifname, "mesh", "join", wdev.ssid, "freq", wdev.freq, htmode ]; for (let key in [ "basic-rates", "mcast-rate", "beacon-interval" ]) if (wdev[key]) push(cmd, key, wdev[key]); system(cmd); wdev_set_mesh_params(ifname, wdev); } } function iface_cb(new_if, old_if) { if (old_if && new_if && is_equal(old_if, new_if)) return; if (old_if) iface_stop(old_if); if (new_if) iface_start(new_if); } function drop_inactive(config) { for (let key in config) { if (!readfile(`/sys/class/net/${key}/ifindex`)) delete config[key]; } } function add_ifname(config) { for (let key in config) config[key].ifname = key; } function delete_ifname(config) { for (let key in config) delete config[key].ifname; } function add_existing(phydev, config) { phydev.for_each_wdev((wdev) => { if (config[wdev]) return; if (trim(readfile(`/sys/class/net/${wdev}/operstate`)) == "down") config[wdev] = {}; }); } function usage() { warn(`Usage: ${basename(sourcepath())} [] Commands: set_config [ - get phy MAC address for vif index `); exit(1); } const commands = { set_config: function(args) { let statefile = `/var/run/wdev-${phy_name}.json`; let new_config = shift(args); for (let dev in ARGV) keep_devices[dev] = true; if (!new_config) usage(); new_config = json(new_config); if (!new_config) { warn("Invalid configuration\n"); exit(1); } let old_config = readfile(statefile); if (old_config) old_config = json(old_config); let config = vlist_new(iface_cb); if (type(old_config) == "object") config.data = old_config; add_existing(phydev, config.data); add_ifname(config.data); drop_inactive(config.data); let ubus = libubus.connect(); let data = ubus.call("hostapd", "config_get_macaddr_list", { phy: phydev.name, radio: phydev.radio ?? -1 }); let macaddr_list = []; if (type(data) == "object" && data.macaddr) macaddr_list = data.macaddr; ubus.disconnect(); phydev.macaddr_init(macaddr_list); add_ifname(new_config); config.update(new_config); drop_inactive(config.data); delete_ifname(config.data); writefile(statefile, sprintf("%J", config.data)); }, get_macaddr: function(args) { let data = {}; for (let arg in args) { arg = split(arg, "=", 2); data[arg[0]] = arg[1]; } let macaddr = phydev.macaddr_generate(data); if (!macaddr) { warn(`Could not get MAC address for phy ${phy_name}\n`); exit(1); } print(macaddr + "\n"); }, }; if (!phy_name || !command | !commands[command]) usage(); let phy_split = split(phy_name, ":"); phydev = phy_open(phy_split[0], phy_split[1]); phy = phydev.phy; if (!phydev) { warn(`PHY ${phy_name} does not exist\n`); exit(1); } commands[command](ARGV); 07070100DC35BE000081A400000000000000000000000168F513D900005D03000000080000000100000000000000000000001C00000000usr/share/hostap/hostapd.uclet libubus = require("ubus"); import { open, readfile } from "fs"; import { wdev_remove, is_equal, vlist_new, phy_is_fullmac, phy_open, wdev_set_radio_mask } from "common"; let ubus = libubus.connect(null, 60); hostapd.data.config = {}; hostapd.data.pending_config = {}; hostapd.data.file_fields = { vlan_file: true, wpa_psk_file: true, sae_password_file: true, accept_mac_file: true, deny_mac_file: true, eap_user_file: true, ca_cert: true, server_cert: true, server_cert2: true, private_key: true, private_key2: true, dh_file: true, eap_sim_db: true, }; hostapd.data.iface_fields = { ft_iface: true, upnp_iface: true, snoop_iface: true, bridge: true, iapp_interface: true, }; hostapd.data.bss_info_fields = { // radio hw_mode: true, channel: true, ieee80211ac: true, ieee80211ax: true, // bss bssid: true, ssid: true, wpa: true, wpa_key_mgmt: true, wpa_pairwise: true, auth_algs: true, ieee80211w: true, }; function iface_remove(cfg) { if (!cfg || !cfg.bss || !cfg.bss[0] || !cfg.bss[0].ifname) return; for (let bss in cfg.bss) wdev_remove(bss.ifname); } function iface_gen_config(config, start_disabled) { let str = `data: ${join("\n", config.radio.data)} channel=${config.radio.channel} `; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; let type = i > 0 ? "bss" : "interface"; let nasid = bss.nasid ?? replace(bss.bssid, ":", ""); str += ` ${type}=${bss.ifname} bssid=${bss.bssid} ${join("\n", bss.data)} nas_identifier=${nasid} `; if (start_disabled) str += ` start_disabled=1 `; } return str; } function iface_freq_info(iface, config, params) { let freq = params.frequency; if (!freq) return null; let sec_offset = params.sec_chan_offset; if (sec_offset != -1 && sec_offset != 1) sec_offset = 0; let width = 0; for (let line in config.radio.data) { if (!sec_offset && match(line, /^ht_capab=.*HT40/)) { sec_offset = null; // auto-detect continue; } let val = match(line, /^(vht_oper_chwidth|he_oper_chwidth)=(\d+)/); if (!val) continue; val = int(val[2]); if (val > width) width = val; } if (freq < 4000) width = 0; return hostapd.freq_info(freq, sec_offset, width); } function iface_add(phy, config, phy_status) { let config_inline = iface_gen_config(config, !!phy_status); let bss = config.bss[0]; let ret = hostapd.add_iface(`bss_config=${phy}:${config_inline}`); if (ret < 0) return false; if (!phy_status) return true; let iface = hostapd.interfaces[phy]; if (!iface) return false; let freq_info = iface_freq_info(iface, config, phy_status); return iface.start(freq_info) >= 0; } function iface_config_macaddr_list(config) { let macaddr_list = {}; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (!bss.default_macaddr) macaddr_list[bss.bssid] = i; } return macaddr_list; } function iface_update_supplicant_macaddr(phydev, config) { let macaddr_list = []; for (let i = 0; i < length(config.bss); i++) push(macaddr_list, config.bss[i].bssid); ubus.defer("wpa_supplicant", "phy_set_macaddr_list", { phy: phydev.name, radio: phydev.radio ?? -1, macaddr: macaddr_list }); } function __iface_pending_next(pending, state, ret, data) { let config = pending.config; let phydev = pending.phydev; let phy = pending.phy; let bss = config.bss[0]; if (pending.defer) pending.defer.abort(); delete pending.defer; switch (state) { case "init": iface_update_supplicant_macaddr(phydev, config); return "create_bss"; case "create_bss": let err = phydev.wdev_add(bss.ifname, { mode: "ap", radio: phydev.radio, }); if (err) { hostapd.printf(`Failed to create ${bss.ifname} on phy ${phy}: ${err}`); return null; } pending.call("wpa_supplicant", "phy_status", { phy: phydev.phy, radio: phydev.radio ?? -1, }); return "check_phy"; case "check_phy": let phy_status = data; if (phy_status && phy_status.state == "COMPLETED") { if (iface_add(phy, config, phy_status)) return "done"; hostapd.printf(`Failed to bring up phy ${phy} ifname=${bss.ifname} with supplicant provided frequency`); } pending.call("wpa_supplicant", "phy_set_state", { phy: phydev.phy, radio: phydev.radio ?? -1, stop: true }); return "wpas_stopped"; case "wpas_stopped": if (!iface_add(phy, config)) hostapd.printf(`hostapd.add_iface failed for phy ${phy} ifname=${bss.ifname}`); pending.call("wpa_supplicant", "phy_set_state", { phy: phydev.phy, radio: phydev.radio ?? -1, stop: false }); return null; case "done": default: delete hostapd.data.pending_config[phy]; break; } } function iface_pending_next(ret, data) { let pending = true; let cfg = this; while (pending) { try { this.next_state = __iface_pending_next(cfg, this.next_state, ret, data); if (!this.next_state) { __iface_pending_next(cfg, "done"); return; } } catch(e) { hostapd.printf(`Exception: ${e}\n${e.stacktrace[0].context}`); return; } pending = !this.defer; } } function iface_pending_abort() { this.next_state = "done"; this.next(); } function iface_pending_ubus_call(obj, method, arg) { let ubus = hostapd.data.ubus; let pending = this; this.defer = ubus.defer(obj, method, arg, (ret, data) => { delete pending.defer; pending.next(ret, data) }); } const iface_pending_proto = { next: iface_pending_next, call: iface_pending_ubus_call, abort: iface_pending_abort, }; function iface_pending_init(phydev, config) { let phy = phydev.name; let pending = proto({ next_state: "init", phydev: phydev, phy: phy, config: config, next: iface_pending_next, }, iface_pending_proto); hostapd.data.pending_config[phy] = pending; pending.next(); } function iface_macaddr_init(phydev, config, macaddr_list) { let macaddr_data = { num_global: config.num_global_macaddr ?? 1, macaddr_base: config.macaddr_base, mbssid: config.mbssid ?? 0, }; return phydev.macaddr_init(macaddr_list, macaddr_data); } function iface_restart(phydev, config, old_config) { let phy = phydev.name; let pending = hostapd.data.pending_config[phy]; if (pending) pending.abort(); hostapd.remove_iface(phy); iface_remove(old_config); iface_remove(config); if (!config.bss || !config.bss[0]) { hostapd.printf(`No bss for phy ${phy}`); return; } iface_macaddr_init(phydev, config, iface_config_macaddr_list(config)); for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (bss.default_macaddr) bss.bssid = phydev.macaddr_next(); } iface_pending_init(phydev, config); } function array_to_obj(arr, key, start) { let obj = {}; start ??= 0; for (let i = start; i < length(arr); i++) { let cur = arr[i]; obj[cur[key]] = cur; } return obj; } function find_array_idx(arr, key, val) { for (let i = 0; i < length(arr); i++) if (arr[i][key] == val) return i; return -1; } function bss_reload_psk(bss, config, old_config) { if (is_equal(old_config.hash.wpa_psk_file, config.hash.wpa_psk_file)) return; old_config.hash.wpa_psk_file = config.hash.wpa_psk_file; if (!is_equal(old_config, config)) return; let ret = bss.ctrl("RELOAD_WPA_PSK"); ret ??= "failed"; hostapd.printf(`Reload WPA PSK file for bss ${config.ifname}: ${ret}`); } function remove_file_fields(config) { return filter(config, (line) => !hostapd.data.file_fields[split(line, "=")[0]]); } function bss_remove_file_fields(config) { let new_cfg = {}; for (let key in config) new_cfg[key] = config[key]; new_cfg.data = remove_file_fields(new_cfg.data); new_cfg.hash = {}; for (let key in config.hash) new_cfg.hash[key] = config.hash[key]; delete new_cfg.hash.wpa_psk_file; delete new_cfg.hash.sae_password_file; delete new_cfg.hash.vlan_file; return new_cfg; } function bss_ifindex_list(config) { config = filter(config, (line) => !!hostapd.data.iface_fields[split(line, "=")[0]]); return join(",", map(config, (line) => { try { let file = "/sys/class/net/" + split(line, "=")[1] + "/ifindex"; let val = trim(readfile(file)); return val; } catch (e) { return ""; } })); } function bss_config_hash(config) { return hostapd.sha1(remove_file_fields(config) + bss_ifindex_list(config)); } function bss_find_existing(config, prev_config, prev_hash) { let hash = bss_config_hash(config.data); for (let i = 0; i < length(prev_config.bss); i++) { if (!prev_hash[i] || hash != prev_hash[i]) continue; prev_hash[i] = null; return i; } return -1; } function get_config_bss(config, idx) { if (!config.bss[idx]) { hostapd.printf(`Invalid bss index ${idx}`); return null; } let ifname = config.bss[idx].ifname; if (!ifname) hostapd.printf(`Could not find bss ${config.bss[idx].ifname}`); return hostapd.bss[ifname]; } function iface_reload_config(name, phydev, config, old_config) { let phy = phydev.name; if (!old_config || !is_equal(old_config.radio, config.radio)) return false; if (is_equal(old_config.bss, config.bss)) return true; if (hostapd.data.pending_config[name]) return false; if (!old_config.bss || !old_config.bss[0]) return false; let iface = hostapd.interfaces[name]; let iface_name = old_config.bss[0].ifname; if (!iface) { hostapd.printf(`Could not find previous interface ${iface_name}`); return false; } let first_bss = hostapd.bss[iface_name]; if (!first_bss) { hostapd.printf(`Could not find bss of previous interface ${iface_name}`); return false; } let macaddr_list = iface_config_macaddr_list(config); let bss_list = []; let bss_list_cfg = []; let prev_bss_hash = []; for (let bss in old_config.bss) { let hash = bss_config_hash(bss.data); push(prev_bss_hash, bss_config_hash(bss.data)); } // Step 1: find (possibly renamed) interfaces with the same config // and store them in the new order (with gaps) for (let i = 0; i < length(config.bss); i++) { let prev; // For fullmac devices, the first interface needs to be preserved, // since it's treated as the master if (!i && phy_is_fullmac(phy)) { prev = 0; prev_bss_hash[0] = null; } else { prev = bss_find_existing(config.bss[i], old_config, prev_bss_hash); } if (prev < 0) continue; let cur_config = config.bss[i]; let prev_config = old_config.bss[prev]; let prev_bss = get_config_bss(old_config, prev); if (!prev_bss) return false; // try to preserve MAC address of this BSS by reassigning another // BSS if necessary if ((cur_config.default_macaddr || cur_config.random_macaddr) && cur_config.random_macaddr == prev_config.random_macaddr && cur_config.default_macaddr == prev_config.default_macaddr && !macaddr_list[prev_config.bssid]) { macaddr_list[prev_config.bssid] = i; cur_config.bssid = prev_config.bssid; } bss_list[i] = prev_bss; bss_list_cfg[i] = old_config.bss[prev]; } if (config.mbssid && !bss_list_cfg[0]) { hostapd.printf("First BSS changed with MBSSID enabled"); return false; } // Step 2: if none were found, rename and preserve the first one if (length(bss_list) == 0) { // can't change the bssid of the first bss if (config.bss[0].bssid != old_config.bss[0].bssid) { if (!config.bss[0].default_macaddr) { hostapd.printf(`BSSID of first interface changed: ${lc(old_config.bss[0].bssid)} -> ${lc(config.bss[0].bssid)}`); return false; } config.bss[0].bssid = old_config.bss[0].bssid; } let prev_bss = get_config_bss(old_config, 0); if (!prev_bss) return false; macaddr_list[config.bss[0].bssid] = 0; bss_list[0] = prev_bss; bss_list_cfg[0] = old_config.bss[0]; prev_bss_hash[0] = null; } // Step 3: delete all unused old interfaces for (let i = 0; i < length(prev_bss_hash); i++) { if (!prev_bss_hash[i]) continue; let prev_bss = get_config_bss(old_config, i); if (!prev_bss) return false; let ifname = old_config.bss[i].ifname; hostapd.printf(`Remove bss '${ifname}' on phy '${name}'`); prev_bss.delete(); wdev_remove(ifname); } // Step 4: rename preserved interfaces, use temporary name on duplicates let rename_list = []; for (let i = 0; i < length(bss_list); i++) { if (!bss_list[i]) continue; let old_ifname = bss_list_cfg[i].ifname; let new_ifname = config.bss[i].ifname; if (old_ifname == new_ifname) continue; if (hostapd.bss[new_ifname]) { new_ifname = "tmp_" + substr(hostapd.sha1(new_ifname), 0, 8); push(rename_list, i); } hostapd.printf(`Rename bss ${old_ifname} to ${new_ifname}`); if (!bss_list[i].rename(new_ifname)) { hostapd.printf(`Failed to rename bss ${old_ifname} to ${new_ifname}`); return false; } bss_list_cfg[i].ifname = new_ifname; } // Step 5: rename interfaces with temporary names for (let i in rename_list) { let new_ifname = config.bss[i].ifname; if (!bss_list[i].rename(new_ifname)) { hostapd.printf(`Failed to rename bss to ${new_ifname}`); return false; } bss_list_cfg[i].ifname = new_ifname; } // Step 6: assign BSSID for newly created interfaces macaddr_list = iface_macaddr_init(phydev, config, macaddr_list); for (let i = 0; i < length(config.bss); i++) { if (bss_list[i]) continue; let bsscfg = config.bss[i]; let mac_idx = macaddr_list[bsscfg.bssid]; if (mac_idx < 0) macaddr_list[bsscfg.bssid] = i; if (mac_idx == i) continue; // statically assigned bssid of the new interface is in conflict // with the bssid of a reused interface. reassign the reused interface if (!bsscfg.default_macaddr) { // can't update bssid of the first BSS, need to restart if (!mac_idx < 0) return false; bsscfg = config.bss[mac_idx]; } let addr = phydev.macaddr_next(i); if (!addr) { hostapd.printf(`Failed to generate mac address for phy ${name}`); return false; } bsscfg.bssid = addr; } let config_inline = iface_gen_config(config); // Step 7: fill in the gaps with new interfaces for (let i = 0; i < length(config.bss); i++) { let ifname = config.bss[i].ifname; let bss = bss_list[i]; if (bss) continue; hostapd.printf(`Add bss ${ifname} on phy ${name}`); bss_list[i] = iface.add_bss(config_inline, i); if (!bss_list[i]) { hostapd.printf(`Failed to add new bss ${ifname} on phy ${name}`); return false; } } // Step 8: update interface bss order if (!iface.set_bss_order(bss_list)) { hostapd.printf(`Failed to update BSS order on phy '${name}'`); return false; } // Step 9: update config for (let i = 0; i < length(config.bss); i++) { if (!bss_list_cfg[i]) continue; let ifname = config.bss[i].ifname; let bss = bss_list[i]; if (is_equal(config.bss[i], bss_list_cfg[i])) continue; if (is_equal(bss_remove_file_fields(config.bss[i]), bss_remove_file_fields(bss_list_cfg[i]))) { hostapd.printf(`Update config data files for bss ${ifname}`); if (bss.set_config(config_inline, i, true) < 0) { hostapd.printf(`Could not update config data files for bss ${ifname}`); return false; } else { bss.ctrl("RELOAD_WPA_PSK"); continue; } } bss_reload_psk(bss, config.bss[i], bss_list_cfg[i]); if (is_equal(config.bss[i], bss_list_cfg[i])) continue; hostapd.printf(`Reload config for bss '${config.bss[0].ifname}' on phy '${name}'`); if (bss.set_config(config_inline, i) < 0) { hostapd.printf(`Failed to set config for bss ${ifname}`); return false; } } return true; } function iface_set_config(name, config) { let old_config = hostapd.data.config[name]; hostapd.data.config[name] = config; if (!config) { hostapd.remove_iface(name); return iface_remove(old_config); } let phy = config.phy; let phydev = phy_open(phy, config.radio_idx); if (!phydev) { hostapd.printf(`Failed to open phy ${phy}`); return false; } try { let ret = iface_reload_config(name, phydev, config, old_config); if (ret) { iface_update_supplicant_macaddr(phydev, config); hostapd.printf(`Reloaded settings for phy ${name}`); return 0; } } catch (e) { hostapd.printf(`Error reloading config: ${e}\n${e.stacktrace[0].context}`); } hostapd.printf(`Restart interface for phy ${name}`); let ret = iface_restart(phydev, config, old_config); return ret; } function config_add_bss(config, name) { let bss = { ifname: name, data: [], hash: {} }; push(config.bss, bss); return bss; } function iface_load_config(phy, radio, filename) { let f = open(filename, "r"); if (!f) return null; if (radio < 0) radio = null; let config = { phy, radio_idx: radio, radio: { data: [] }, bss: [], orig_file: filename, }; let bss; let line; while ((line = rtrim(f.read("line"), "\n")) != null) { let val = split(line, "=", 2); if (!val[0]) continue; if (val[0] == "interface") { bss = config_add_bss(config, val[1]); break; } if (val[0] == "channel") { config.radio.channel = val[1]; continue; } if (val[0] == "#num_global_macaddr") config[substr(val[0], 1)] = int(val[1]); else if (val[0] == "#macaddr_base") config[substr(val[0], 1)] = val[1]; else if (val[0] == "mbssid") config[val[0]] = int(val[1]); push(config.radio.data, line); } while ((line = rtrim(f.read("line"), "\n")) != null) { if (line == "#default_macaddr") bss.default_macaddr = true; if (line == "#random_macaddr") bss.random_macaddr = true; let val = split(line, "=", 2); if (!val[0]) continue; if (val[0] == "bssid") { bss.bssid = lc(val[1]); continue; } if (val[0] == "nas_identifier") bss.nasid = val[1]; if (val[0] == "bss") { bss = config_add_bss(config, val[1]); continue; } if (hostapd.data.file_fields[val[0]]) bss.hash[val[0]] = hostapd.sha1(readfile(val[1])); push(bss.data, line); } f.close(); return config; } function ex_wrap(func) { return (req) => { try { let ret = func(req); return ret; } catch(e) { hostapd.printf(`Exception in ubus function: ${e}\n${e.stacktrace[0].context}`); } return libubus.STATUS_UNKNOWN_ERROR; }; } function phy_name(phy, radio) { if (!phy) return null; if (radio != null && radio >= 0) phy += "." + radio; return phy; } function bss_config(bss_name) { for (let phy, config in hostapd.data.config) { if (!config) continue; for (let bss in config.bss) if (bss.ifname == bss_name) return [ config, bss ]; } } let main_obj = { reload: { args: { phy: "", radio: 0, }, call: ex_wrap(function(req) { let phy_list = req.args.phy ? [ phy_name(req.args.phy, req.args.radio) ] : keys(hostapd.data.config); for (let phy_name in phy_list) { let phy = hostapd.data.config[phy_name]; let config = iface_load_config(phy.phy, phy.radio_idx, phy.orig_file); iface_set_config(phy_name, config); } return 0; }) }, apsta_state: { args: { phy: "", radio: 0, up: true, frequency: 0, sec_chan_offset: 0, csa: true, csa_count: 0, }, call: ex_wrap(function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (req.args.up == null || !phy) return libubus.STATUS_INVALID_ARGUMENT; let config = hostapd.data.config[phy]; if (!config || !config.bss || !config.bss[0] || !config.bss[0].ifname) return 0; let iface = hostapd.interfaces[phy]; if (!iface) return 0; if (!req.args.up) { iface.stop(); return 0; } if (!req.args.frequency) return libubus.STATUS_INVALID_ARGUMENT; let freq_info = iface_freq_info(iface, config, req.args); if (!freq_info) return libubus.STATUS_UNKNOWN_ERROR; let ret; if (req.args.csa) { freq_info.csa_count = req.args.csa_count ?? 10; ret = iface.switch_channel(freq_info); } else { ret = iface.start(freq_info); } if (!ret) return libubus.STATUS_UNKNOWN_ERROR; return 0; }) }, config_get_macaddr_list: { args: { phy: "", radio: 0, }, call: ex_wrap(function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; let ret = { macaddr: [], }; let config = hostapd.data.config[phy]; if (!config) return ret; ret.macaddr = map(config.bss, (bss) => bss.bssid); return ret; }) }, config_set: { args: { phy: "", radio: 0, config: "", prev_config: "", }, call: ex_wrap(function(req) { let phy = req.args.phy; let radio = req.args.radio; let name = phy_name(phy, radio); let file = req.args.config; let prev_file = req.args.prev_config; if (!phy) return libubus.STATUS_INVALID_ARGUMENT; if (prev_file && !hostapd.data.config[name]) { let config = iface_load_config(phy, radio, prev_file); if (config) config.radio.data = []; hostapd.data.config[name] = config; } let config = iface_load_config(phy, radio, file); hostapd.printf(`Set new config for phy ${name}: ${file}`); iface_set_config(name, config); if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("reload", { phy, radio }); return { pid: hostapd.getpid() }; }) }, config_add: { args: { iface: "", config: "", }, call: ex_wrap(function(req) { if (!req.args.iface || !req.args.config) return libubus.STATUS_INVALID_ARGUMENT; if (hostapd.add_iface(`bss_config=${req.args.iface}:${req.args.config}`) < 0) return libubus.STATUS_INVALID_ARGUMENT; return { pid: hostapd.getpid() }; }) }, config_remove: { args: { iface: "" }, call: ex_wrap(function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; hostapd.remove_iface(req.args.iface); return 0; }) }, bss_info: { args: { iface: "" }, call: ex_wrap(function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; let config = bss_config(req.args.iface); if (!config) return libubus.STATUS_NOT_FOUND; let bss = config[1]; config = config[0]; let ret = {}; for (let line in [ ...config.radio.data, ...bss.data ]) { let fields = split(line, "=", 2); let name = fields[0]; if (hostapd.data.bss_info_fields[name]) ret[name] = fields[1]; } return ret; }) }, }; hostapd.data.ubus = ubus; hostapd.data.obj = ubus.publish("hostapd", main_obj); let auth_obj = {}; hostapd.data.auth_obj = ubus.publish("hostapd-auth", auth_obj); hostapd.udebug_set("hostapd", hostapd.data.ubus); function bss_event(type, name, data) { let ubus = hostapd.data.ubus; data ??= {}; data.name = name; hostapd.data.obj.notify(`bss.${type}`, data, null, null, null, -1); ubus.call("service", "event", { type: `hostapd.${name}.${type}`, data: {} }); } return { shutdown: function() { for (let phy in hostapd.data.config) iface_set_config(phy); hostapd.udebug_set(null); hostapd.ubus.disconnect(); }, bss_create: function(phy, name, obj) { phy = hostapd.data.config[phy]; if (!phy) return; if (phy.radio_idx != null && phy.radio_idx >= 0) wdev_set_radio_mask(name, 1 << phy.radio_idx); }, bss_add: function(phy, name, obj) { bss_event("add", name); }, bss_reload: function(phy, name, obj, reconf) { bss_event("reload", name, { reconf: reconf != 0 }); }, bss_remove: function(phy, name, obj) { bss_event("remove", name); }, sta_auth: function(iface, sta) { let msg = { iface, sta }; let ret = {}; let data_cb = (type, data) => { ret = { ...ret, ...data }; }; if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("sta_auth", msg, data_cb, null, null, 1000); return ret; }, sta_connected: function(iface, sta, data) { let msg = { iface, sta, ...data }; let ret = {}; let data_cb = (type, data) => { ret = { ...ret, ...data }; }; if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("sta_connected", msg, data_cb, null, null, 1000); return ret; }, }; 07070100DC33C1000081A400000000000000000000000168F513D90000246E000000080000000100000000000000000000001B00000000usr/share/hostap/common.ucimport * as nl80211 from "nl80211"; import * as rtnl from "rtnl"; import { readfile, glob, basename, readlink, open } from "fs"; const iftypes = { ap: nl80211.const.NL80211_IFTYPE_AP, mesh: nl80211.const.NL80211_IFTYPE_MESH_POINT, sta: nl80211.const.NL80211_IFTYPE_STATION, adhoc: nl80211.const.NL80211_IFTYPE_ADHOC, monitor: nl80211.const.NL80211_IFTYPE_MONITOR, }; const mesh_params = { mesh_retry_timeout: "retry_timeout", mesh_confirm_timeout: "confirm_timeout", mesh_holding_timeout: "holding_timeout", mesh_max_peer_links: "max_peer_links", mesh_max_retries: "max_retries", mesh_ttl: "ttl", mesh_element_ttl: "element_ttl", mesh_auto_open_plinks: "auto_open_plinks", mesh_hwmp_max_preq_retries: "hwmp_max_preq_retries", mesh_path_refresh_time: "path_refresh_time", mesh_min_discovery_timeout: "min_discovery_timeout", mesh_hwmp_active_path_timeout: "hwmp_active_path_timeout", mesh_hwmp_preq_min_interval: "hwmp_preq_min_interval", mesh_hwmp_net_diameter_traversal_time: "hwmp_net_diam_trvs_time", mesh_hwmp_rootmode: "hwmp_rootmode", mesh_hwmp_rann_interval: "hwmp_rann_interval", mesh_gate_announcements: "gate_announcements", mesh_sync_offset_max_neighor: "sync_offset_max_neighbor", mesh_rssi_threshold: "rssi_threshold", mesh_hwmp_active_path_to_root_timeout: "hwmp_path_to_root_timeout", mesh_hwmp_root_interval: "hwmp_root_interval", mesh_hwmp_confirmation_interval: "hwmp_confirmation_interval", mesh_awake_window: "awake_window", mesh_plink_timeout: "plink_timeout", mesh_fwding: "forwarding", mesh_power_mode: "power_mode", mesh_nolearn: "nolearn" }; function wdev_remove(name) { nl80211.request(nl80211.const.NL80211_CMD_DEL_INTERFACE, 0, { dev: name }); } function __phy_is_fullmac(phyidx) { let data = nl80211.request(nl80211.const.NL80211_CMD_GET_WIPHY, 0, { wiphy: phyidx }); return !data.software_iftypes.monitor; } function phy_is_fullmac(phy) { let phyidx = int(trim(readfile(`/sys/class/ieee80211/${phy}/index`))); return __phy_is_fullmac(phyidx); } function find_reusable_wdev(phyidx) { if (!__phy_is_fullmac(phyidx)) return null; let data = nl80211.request( nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP, { wiphy: phyidx }); for (let res in data) if (trim(readfile(`/sys/class/net/${res.ifname}/operstate`)) == "down") return res.ifname; return null; } function wdev_set_radio_mask(name, mask) { nl80211.request(nl80211.const.NL80211_CMD_SET_INTERFACE, 0, { dev: name, vif_radio_mask: mask }); } function wdev_create(phy, name, data) { let phyidx = int(readfile(`/sys/class/ieee80211/${phy}/index`)); wdev_remove(name); if (!iftypes[data.mode]) return `Invalid mode: ${data.mode}`; let req = { wiphy: phyidx, ifname: name, iftype: iftypes[data.mode], }; if (data["4addr"]) req["4addr"] = data["4addr"]; if (data.macaddr) req.mac = data.macaddr; if (data.radio != null && data.radio >= 0) req.vif_radio_mask = 1 << data.radio; nl80211.error(); let reuse_ifname = find_reusable_wdev(phyidx); if (reuse_ifname && (reuse_ifname == name || rtnl.request(rtnl.const.RTM_SETLINK, 0, { dev: reuse_ifname, ifname: name}) != false)) { req.dev = req.ifname; delete req.ifname; nl80211.request(nl80211.const.NL80211_CMD_SET_INTERFACE, 0, req); } else { nl80211.request( nl80211.const.NL80211_CMD_NEW_INTERFACE, nl80211.const.NLM_F_CREATE, req); } let error = nl80211.error(); if (error) return error; if (data.powersave != null) { nl80211.request(nl80211.const.NL80211_CMD_SET_POWER_SAVE, 0, { dev: name, ps_state: data.powersave ? 1 : 0}); } return null; } function wdev_set_mesh_params(name, data) { let mesh_cfg = {}; for (let key in mesh_params) { let val = data[key]; if (val == null) continue; mesh_cfg[mesh_params[key]] = int(val); } if (!length(mesh_cfg)) return null; nl80211.request(nl80211.const.NL80211_CMD_SET_MESH_CONFIG, 0, { dev: name, mesh_params: mesh_cfg }); return nl80211.error(); } function wdev_set_up(name, up) { rtnl.request(rtnl.const.RTM_SETLINK, 0, { dev: name, change: 1, flags: up ? 1 : 0 }); } function phy_sysfs_file(phy, name) { return trim(readfile(`/sys/class/ieee80211/${phy}/${name}`)); } function macaddr_split(str) { return map(split(str, ":"), (val) => hex(val)); } function macaddr_join(addr) { return join(":", map(addr, (val) => sprintf("%02x", val))); } function wdev_macaddr(wdev) { return trim(readfile(`/sys/class/net/${wdev}/address`)); } const phy_proto = { macaddr_init: function(used, options) { this.macaddr_options = options ?? {}; this.macaddr_list = {}; if (type(used) == "object") for (let addr in used) this.macaddr_list[addr] = used[addr]; else for (let addr in used) this.macaddr_list[addr] = -1; this.for_each_wdev((wdev) => { let macaddr = wdev_macaddr(wdev); this.macaddr_list[macaddr] ??= -1; }); return this.macaddr_list; }, macaddr_generate: function(data) { let phy = this.phy; let radio_idx = this.radio; let idx = int(data.id ?? 0); let mbssid = int(data.mbssid ?? 0) > 0; let num_global = int(data.num_global ?? 1); let use_global = !mbssid && idx < num_global; let base_addr = phy_sysfs_file(phy, "macaddress"); if (!base_addr) return null; let base_mask = phy_sysfs_file(phy, "address_mask"); if (!base_mask) return null; if (base_mask == "00:00:00:00:00:00") base_mask = "ff:ff:ff:ff:ff:ff"; if (data.macaddr_base) base_addr = data.macaddr_base; else if (base_mask == "ff:ff:ff:ff:ff:ff" && (radio_idx > 0 || idx >= num_global)) { let addrs = split(phy_sysfs_file(phy, "addresses"), "\n"); if (radio_idx != null) { if (radio_idx && radio_idx < length(addrs)) base_addr = addrs[radio_idx]; else idx += radio_idx * 16; } else { if (idx < length(addrs)) return addrs[idx]; } } if (!idx && !mbssid) return base_addr; let addr = macaddr_split(base_addr); let mask = macaddr_split(base_mask); let type; if (mbssid) type = "b5"; else if (use_global) type = "add"; else if (mask[0] > 0) type = "b1"; else if (mask[5] < 0xff) type = "b5"; else type = "add"; switch (type) { case "b1": if (!(addr[0] & 2)) idx--; addr[0] |= 2; addr[0] ^= idx << 2; break; case "b5": if (mbssid) addr[0] |= 2; addr[5] ^= idx; break; default: for (let i = 5; i > 0; i--) { addr[i] += idx; if (addr[i] < 256) break; addr[i] %= 256; } break; } return macaddr_join(addr); }, macaddr_next: function(val) { let data = this.macaddr_options ?? {}; let list = this.macaddr_list; for (let i = 0; i < 32; i++) { data.id = i; let mac = this.macaddr_generate(data); if (!mac) return null; if (list[mac] != null) continue; list[mac] = val != null ? val : -1; return mac; } }, wdev_add: function(name, data) { let phydev = this; wdev_create(this.phy, name, { ...data, radio: this.radio, }); }, for_each_wdev: function(cb) { let wdevs = nl80211.request( nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP, { wiphy: this.idx } ); let mac_wdev = {}; for (let wdev in wdevs) { if (wdev.iftype == nl80211.const.NL80211_IFTYPE_AP_VLAN) continue; if (this.radio != null && wdev.vif_radio_mask != null && !(wdev.vif_radio_mask & (1 << this.radio))) continue; mac_wdev[wdev.mac] = wdev; } for (let wdev in wdevs) { if (!mac_wdev[wdev.mac]) continue; cb(wdev.ifname); } } }; function phy_open(phy, radio) { let phyidx = readfile(`/sys/class/ieee80211/${phy}/index`); if (!phyidx) return null; let name = phy; if (radio === "" || radio < 0) radio = null; if (radio != null) name += "." + radio; return proto({ phy, name, radio, idx: int(phyidx), }, phy_proto); } const vlist_proto = { update: function(values, arg) { let data = this.data; let cb = this.cb; let seq = { }; let new_data = {}; let old_data = {}; this.data = new_data; if (type(values) == "object") { for (let key in values) { old_data[key] = data[key]; new_data[key] = values[key]; delete data[key]; } } else { for (let val in values) { let cur_key = val[0]; let cur_obj = val[1]; old_data[cur_key] = data[cur_key]; new_data[cur_key] = val[1]; delete data[cur_key]; } } for (let key in data) { cb(null, data[key], arg); delete data[key]; } for (let key in new_data) cb(new_data[key], old_data[key], arg); } }; function is_equal(val1, val2) { let t1 = type(val1); if (t1 != type(val2)) return false; if (t1 == "array") { if (length(val1) != length(val2)) return false; for (let i = 0; i < length(val1); i++) if (!is_equal(val1[i], val2[i])) return false; return true; } else if (t1 == "object") { for (let key in val1) if (!is_equal(val1[key], val2[key])) return false; for (let key in val2) if (val1[key] == null) return false; return true; } else { return val1 == val2; } } function vlist_new(cb) { return proto({ cb: cb, data: {} }, vlist_proto); } export { wdev_remove, wdev_create, wdev_set_mesh_params, wdev_set_radio_mask, wdev_set_up, is_equal, vlist_new, phy_is_fullmac, phy_open }; 07070100DC3593000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001200000000usr/share/dnsmasq07070100DC35950000818000000000000000000000000168F513D900000137000000080000000100000000000000000000001F00000000usr/share/dnsmasq/rfc6761.conf# RFC6761 included configuration file for dnsmasq # # includes a list of domains that should not be forwarded to Internet name servers # to reduce burden on them, asking questions that they won't know the answer to. server=/bind/ server=/invalid/ server=/local/ server=/localhost/ server=/onion/ server=/test/ 07070100DC35940000818000000000000000000000000168F513D900000154000000080000000100000000000000000000002900000000usr/share/dnsmasq/dhcpbogushostname.conf# dhcpbogushostname.conf included configuration file for dnsmasq # # includes a list of hostnames that should not be associated with dhcp leases # in response to CERT VU#598349 # file included by default, option dhcpbogushostname 0 to disable dhcp-name-match=set:dhcp_bogus_hostname,localhost dhcp-name-match=set:dhcp_bogus_hostname,wpad 07070100DC355B000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001500000000usr/share/nftables.d07070100DC355D000081A400000000000000000000000168F513D9000003DF000000080000000100000000000000000000001C00000000usr/share/nftables.d/READMEThis directory may contain partial nftables files which are automatically included into the nftables ruleset generated by the fw4 program. Only accessible files (no broken symlinks, no files with insufficient permissions) with an `*.nft` file extension are considered. The include position of each file within the overall ruleset is derived from the file path: - Files in ./ruleset-pre/ and ./ruleset-post/ are included before and after the `table inet fw4 { ... }` declaration respectively - Files in ./table-pre/ and ./table-post/ are included before the first chain and after the last chain declaration within the fw4 table respectively - Files in ./chain-pre/${chain}/ and ./chain-post/${chain}/ are included before the first and after the last rule within the mentioned chain of the fw4 table respectively Automatic inclusion of these files can be disabled by setting the global `auto_includes` option to `0` within the defaults section of /etc/config/firewall. 07070100DC2686000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001200000000usr/share/libubox07070100DC2688000081A400000000000000000000000168F513D900001782000000080000000100000000000000000000001A00000000usr/share/libubox/jshn.sh# functions for parsing and generating json _json_get_var() { # dest=$1 # var=$2 eval "$1=\"\$${JSON_PREFIX}$2\"" } _json_set_var() { # var=$1 local ___val="$2" eval "${JSON_PREFIX}$1=\"\$___val\"" } __jshn_raw_append() { # var=$1 local value="$2" local sep="${3:- }" eval "export -- \"$1=\${$1:+\${$1}\${value:+\$sep}}\$value\"" } _jshn_append() { # var=$1 local _a_value="$2" eval "${JSON_PREFIX}$1=\"\${${JSON_PREFIX}$1} \$_a_value\"" } _get_var() { # var=$1 # value=$2 eval "$1=\"\$$2\"" } _set_var() { # var=$1 local __val="$2" eval "$1=\"\$__val\"" } _json_inc() { # var=$1 # dest=$2 let "${JSON_PREFIX}$1 += 1" "$2 = ${JSON_PREFIX}$1" } _json_add_generic() { # type=$1 # name=$2 # value=$3 # cur=$4 local var if [ "${4%%[0-9]*}" = "J_A" ]; then _json_inc "S_$4" var else var="${2//[^a-zA-Z0-9_]/_}" [[ "$var" == "$2" ]] || export -- "${JSON_PREFIX}N_${4}_${var}=$2" fi export -- \ "${JSON_PREFIX}${4}_$var=$3" \ "${JSON_PREFIX}T_${4}_$var=$1" _jshn_append "JSON_UNSET" "${4}_$var" _jshn_append "K_$4" "$var" } _json_add_table() { # name=$1 # type=$2 # itype=$3 local cur seq _json_get_var cur JSON_CUR _json_inc JSON_SEQ seq local table="J_$3$seq" _json_set_var "U_$table" "$cur" export -- "${JSON_PREFIX}K_$table=" unset "${JSON_PREFIX}S_$table" _json_set_var JSON_CUR "$table" _jshn_append "JSON_UNSET" "$table" _json_add_generic "$2" "$1" "$table" "$cur" } _json_close_table() { local _s_cur _json_get_var _s_cur JSON_CUR _json_get_var "${JSON_PREFIX}JSON_CUR" "U_$_s_cur" } json_set_namespace() { local _new="$1" local _old="$2" [ -n "$_old" ] && _set_var "$_old" "$JSON_PREFIX" JSON_PREFIX="$_new" } json_cleanup() { local unset tmp _json_get_var unset JSON_UNSET for tmp in $unset J_V; do unset \ ${JSON_PREFIX}U_$tmp \ ${JSON_PREFIX}K_$tmp \ ${JSON_PREFIX}S_$tmp \ ${JSON_PREFIX}T_$tmp \ ${JSON_PREFIX}N_$tmp \ ${JSON_PREFIX}$tmp done unset \ ${JSON_PREFIX}JSON_SEQ \ ${JSON_PREFIX}JSON_CUR \ ${JSON_PREFIX}JSON_UNSET } json_init() { json_cleanup export -n ${JSON_PREFIX}JSON_SEQ=0 export -- \ ${JSON_PREFIX}JSON_CUR="J_V" \ ${JSON_PREFIX}K_J_V= } json_add_object() { _json_add_table "$1" object T } json_close_object() { _json_close_table } json_add_array() { _json_add_table "$1" array A } json_close_array() { _json_close_table } json_add_string() { local cur _json_get_var cur JSON_CUR _json_add_generic string "$1" "$2" "$cur" } json_add_int() { local cur _json_get_var cur JSON_CUR _json_add_generic int "$1" "$2" "$cur" } json_add_boolean() { local cur _json_get_var cur JSON_CUR _json_add_generic boolean "$1" "$2" "$cur" } json_add_double() { local cur _json_get_var cur JSON_CUR _json_add_generic double "$1" "$2" "$cur" } json_add_null() { local cur _json_get_var cur JSON_CUR _json_add_generic null "$1" "" "$cur" } json_add_fields() { while [ "$#" -gt 0 ]; do local field="$1" shift local name="${field%%=*}" local val="${field#*=}" [ "$name" != "$val" ] || val="" local type="${name#*:}" [ "$type" != "$name" ] || type=string name="${name%%:*}" case "$type" in string|int|boolean|double) local cur _json_get_var cur JSON_CUR _json_add_generic "$type" "$name" "$val" "$cur" ;; esac done } # functions read access to json variables json_compact() { JSON_NONEWLINE=1 JSON_INDENT= } json_pretty() { JSON_NONEWLINE= JSON_INDENT=1 } json_load() { eval "`jshn -r "$1"`" } json_load_file() { eval "`jshn -R "$1"`" } json_dump() { jshn "$@" ${JSON_PREFIX:+-p "$JSON_PREFIX"} ${JSON_NONEWLINE:+-n} ${JSON_INDENT:+-i} -w } json_get_type() { local __dest="$1" local __cur _json_get_var __cur JSON_CUR local __var="${JSON_PREFIX}T_${__cur}_${2//[^a-zA-Z0-9_]/_}" eval "export -- \"$__dest=\${$__var}\"; [ -n \"\${$__var+x}\" ]" } json_get_keys() { local __dest="$1" local _tbl_cur if [ -n "$2" ]; then json_get_var _tbl_cur "$2" else _json_get_var _tbl_cur JSON_CUR fi local __var="${JSON_PREFIX}K_${_tbl_cur}" eval "export -- \"$__dest=\${$__var}\"; [ -n \"\${$__var+x}\" ]" } json_get_values() { local _v_dest="$1" local _v_keys _v_val _select= local _json_no_warning=1 unset "$_v_dest" [ -n "$2" ] && { json_select "$2" || return 1 _select=1 } json_get_keys _v_keys set -- $_v_keys while [ "$#" -gt 0 ]; do json_get_var _v_val "$1" __jshn_raw_append "$_v_dest" "$_v_val" shift done [ -n "$_select" ] && json_select .. return 0 } json_get_var() { local __dest="$1" local __cur _json_get_var __cur JSON_CUR local __var="${JSON_PREFIX}${__cur}_${2//[^a-zA-Z0-9_]/_}" eval "export -- \"$__dest=\${$__var:-$3}\"; [ -n \"\${$__var+x}\${3+x}\" ]" } json_get_vars() { while [ "$#" -gt 0 ]; do local _var="$1"; shift if [ "$_var" != "${_var#*:}" ]; then json_get_var "${_var%%:*}" "${_var%%:*}" "${_var#*:}" else json_get_var "$_var" "$_var" fi done } json_select() { local target="$1" local type local cur [ -z "$1" ] && { _json_set_var JSON_CUR "J_V" return 0 } [[ "$1" == ".." ]] && { _json_get_var cur JSON_CUR _json_get_var cur "U_$cur" _json_set_var JSON_CUR "$cur" return 0 } json_get_type type "$target" case "$type" in object|array) json_get_var cur "$target" _json_set_var JSON_CUR "$cur" ;; *) [ -n "$_json_no_warning" ] || \ echo "WARNING: Variable '$target' does not exist or is not an array/object" return 1 ;; esac } json_is_a() { local type json_get_type type "$1" [ "$type" = "$2" ] } json_for_each_item() { [ "$#" -ge 2 ] || return 0 local function="$1"; shift local target="$1"; shift local type val json_get_type type "$target" case "$type" in object|array) local keys key json_select "$target" json_get_keys keys for key in $keys; do json_get_var val "$key" eval "$function \"\$val\" \"\$key\" \"\$@\"" done json_select .. ;; *) json_get_var val "$target" eval "$function \"\$val\" \"\" \"\$@\"" ;; esac } 07070100DC3736000041ED00000000000000000000000468F513D900000000000000080000000100000000000000000000000F00000000usr/share/rpcd07070100DC3737000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001500000000usr/share/rpcd/acl.d07070100DC3B17000081A400000000000000000000000168F513D9000003B2000000080000000100000000000000000000002400000000usr/share/rpcd/acl.d/luci-base.json{ "unauthenticated": { "description": "Allow system feature probing", "read": { "ubus": { "luci": [ "getFeatures" ] } } }, "luci-base": { "description": "Grant access to basic LuCI procedures", "read": { "file": { "/": [ "list" ], "/*": [ "list" ] }, "ubus": { "file": [ "list" ], "uci": [ "changes", "get" ] } }, "write": { "cgi-io": [ "upload" ], "file": { "/etc/luci-uploads/*": [ "write" ] }, "ubus": { "file": [ "remove" ], "uci": [ "add", "apply", "confirm", "delete", "order", "rename", "set" ] } } }, "luci-base-network-status": { "description": "Grant access to network status information", "read": { "ubus": { "luci-rpc": [ "getBoardJSON", "getHostHints", "getNetworkDevices", "getWirelessDevices" ], "network": [ "get_proto_handlers" ], "network.interface": [ "dump" ] }, "uci": [ "luci", "network", "wireless" ] } } } 07070100DC3E4E000081A400000000000000000000000168F513D900001253000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/luci-mod-system.json{ "luci-mod-system-config": { "description": "Grant access to system configuration", "read": { "ubus": { "luci": [ "getLEDs", "getTimezones", "getUSBDevices" ], "rc": [ "list" ], "system": [ "info" ] }, "uci": [ "luci", "system" ] }, "write": { "ubus": { "luci": [ "setLocaltime", "setPassword" ], "rc": [ "init" ] }, "uci": [ "luci", "system" ] } }, "luci-mod-system-ssh": { "description": "Grant access to SSH configuration", "read": { "file": { "/etc/dropbear/authorized_keys": [ "read" ] }, "ubus": { "file": [ "read" ] }, "uci": [ "dropbear" ] }, "write": { "file": { "/etc/dropbear/authorized_keys": [ "write" ] }, "ubus": { "file": [ "write" ], "luci": [ "setLocaltime" ] }, "uci": [ "dropbear" ] } }, "luci-mod-system-repokeys": { "description": "Grant access to Software Repository Public Key management", "read": { "file": { "/etc/opkg/keys/*": [ "read" ], "/etc/apk/keys/*": [ "read" ] } }, "write": { "file": { "/etc/opkg/keys/*": [ "write" ], "/etc/apk/keys/*": [ "write" ] } } }, "luci-mod-system-uhttpd": { "description": "Grant access to uHTTPd configuration", "read": { "uci": [ "uhttpd" ] }, "write": { "uci": [ "uhttpd" ] } }, "luci-mod-system-init": { "description": "Grant access to startup configuration", "read": { "file": { "/etc/rc.local": [ "read" ] }, "ubus": { "file": [ "read" ], "rc": [ "list" ] } }, "write": { "file": { "/etc/rc.local": [ "write" ] }, "ubus": { "file": [ "write" ], "rc": [ "init" ] } } }, "luci-mod-system-cron": { "description": "Grant access to crontab configuration", "read": { "file": { "/etc/crontabs/root": [ "read" ] }, "ubus": { "file": [ "read" ] } }, "write": { "file": { "/etc/crontabs/root": [ "write" ], "/etc/init.d/cron reload": [ "exec" ] }, "ubus": { "file": [ "write" ] } } }, "luci-mod-system-mounts": { "description": "Grant access to mount configuration", "read": { "file": { "/etc/filesystems": [ "read" ], "/proc/filesystems": [ "read" ], "/usr/bin/btrfsck": [ "list" ], "/usr/bin/ntfsfix": [ "list" ], "/usr/sbin/e2fsck": [ "list" ], "/usr/sbin/fsck.f2fs": [ "list" ], "/usr/sbin/fsck.fat": [ "list" ] }, "ubus": { "file": [ "read", "stat" ], "luci": [ "getBlockDevices", "getMountPoints" ] }, "uci": [ "fstab" ] }, "write": { "file": { "/etc/crontabs/root": [ "write" ], "/bin/umount": [ "exec" ], "/sbin/block": [ "exec" ] }, "ubus": { "file": [ "exec", "write" ], "luci": [ "setBlockDetect" ] }, "uci": [ "fstab" ] } }, "luci-mod-system-flash": { "description": "Grant access to flash operations", "read": { "cgi-io": [ "backup", "download" ], "file": { "/dev/mtdblock[0-9]*": [ "read" ], "/etc/sysupgrade.conf": [ "read" ], "/lib/upgrade/platform.sh": [ "list" ], "/proc/mounts": [ "read" ], "/proc/mtd": [ "read" ], "/proc/partitions": [ "read" ], "/proc/sys/kernel/hostname": [ "read" ], "/sbin/sysupgrade --list-backup": [ "exec" ] }, "ubus": { "file": [ "exec", "read", "stat" ] } }, "write": { "cgi-io": [ "upload" ], "file": { "/bin/tar -tzf /tmp/backup.tar.gz": [ "exec" ], "/etc/sysupgrade.conf": [ "write" ], "/sbin/firstboot -r -y": [ "exec" ], "/sbin/reboot": [ "exec" ], "/sbin/sysupgrade --force /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -n --force /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -u /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -u -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -n /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -u /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -u -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --restore-backup /tmp/backup.tar.gz": [ "exec" ], "/sbin/sysupgrade --test /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade /tmp/firmware.bin": [ "exec" ], "/tmp/backup.tar.gz": [ "write" ], "/tmp/firmware.bin": [ "write" ] }, "ubus": { "file": [ "exec", "remove", "write" ], "system": [ "validate_firmware_image" ] } } }, "luci-mod-system-reboot": { "description": "Allow rebooting the device", "write": { "file": { "/sbin/reboot": [ "exec" ] }, "ubus": { "file": [ "exec" ], "system": [ "reboot" ] } } } } 07070100DC3EC1000081A400000000000000000000000168F513D900000733000000080000000100000000000000000000002B00000000usr/share/rpcd/acl.d/luci-mod-network.json{ "luci-mod-network-config": { "description": "Grant access to network configuration", "read": { "cgi-io": [ "exec" ], "file": { "/etc/iproute2/rt_tables": [ "read" ], "/proc/sys/net/ipv6/conf/*/mtu": [ "read" ], "/proc/sys/net/ipv6/conf/*/hop_limit": [ "read" ], "/usr/libexec/luci-peeraddr": [ "exec" ], "/proc/sys/net/ipv[46]/conf/*": [ "read" ], "/sys/class/net/*/brport/*": [ "read" ] }, "ubus": { "file": [ "exec" ], "iwinfo": [ "assoclist", "countrylist", "freqlist", "txpowerlist" ], "luci": [ "getSwconfigFeatures", "getSwconfigPortState" ] }, "uci": [ "dhcp", "firewall", "network", "wireless", "system" ] }, "write": { "cgi-io": [ "exec" ], "file": { "/sbin/ifup": [ "exec" ], "/sbin/ifdown": [ "exec" ], "/sbin/wifi": [ "exec" ] }, "ubus": { "file": [ "exec" ], "hostapd.*": [ "del_client" ], "iwinfo": [ "scan" ] }, "uci": [ "dhcp", "firewall", "network", "wireless" ] } }, "luci-mod-network-dhcp": { "description": "Grant access to DHCP configuration", "read": { "ubus": { "luci-rpc": [ "getDHCPLeases", "getDUIDHints", "getHostHints" ] }, "uci": [ "dhcp" ] }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-network-diagnostics": { "description": "Grant access to network diagnostic tools", "read": { "file": { "/bin/ping": [ "exec" ], "/bin/ping6": [ "exec", "list" ], "/bin/traceroute": [ "exec" ], "/bin/traceroute6": [ "exec", "list" ], "/usr/bin/nslookup": [ "exec" ], "/usr/bin/ping": [ "exec" ], "/usr/bin/ping6": [ "exec", "list" ], "/usr/bin/traceroute": [ "exec" ], "/usr/bin/traceroute6": [ "exec", "list" ], "/usr/bin/arp-scan": [ "exec", "list" ] }, "ubus": { "file": [ "exec", "stat" ] }, "uci": [ "luci" ] } } } 07070100DC3DE9000081A400000000000000000000000168F513D90000019B000000080000000100000000000000000000002C00000000usr/share/rpcd/acl.d/luci-app-firewall.json{ "luci-app-firewall": { "description": "Grant access to firewall configuration", "read": { "file": { "/etc/firewall.user": [ "read" ] }, "ubus": { "file": [ "read" ], "luci": [ "getConntrackHelpers" ] }, "uci": [ "firewall" ] }, "write": { "file": { "/etc/firewall.user": [ "write" ] }, "ubus": { "file": [ "write" ] }, "uci": [ "firewall" ] } } } 07070100DC3F7C000081A400000000000000000000000168F513D9000004FF000000080000000100000000000000000000003300000000usr/share/rpcd/acl.d/luci-app-package-manager.json{ "luci-app-package-manager": { "description": "Grant access to package management", "read": { "cgi-io": [ "exec" ], "file": { "/usr/libexec/package-manager-call list-installed": [ "exec" ], "/usr/libexec/package-manager-call list-available": [ "exec" ], "/etc/opkg.conf": [ "read" ], "/etc/opkg/*.conf": [ "read" ], "/etc/apk/repositories": [ "read" ], "/etc/apk/repositories.d/distfeeds.list": [ "read" ], "/etc/apk/repositories.d/customfeeds.list": [ "read" ] }, "ubus": { "luci": [ "getMountPoints" ] } }, "write": { "file": { "/usr/libexec/package-manager-call install": [ "exec" ], "/usr/libexec/package-manager-call install *": [ "exec" ], "/usr/libexec/package-manager-call remove *": [ "exec" ], "/usr/libexec/package-manager-call update": [ "exec" ], "/usr/libexec/package-manager-call upgrade": [ "exec" ], "/usr/libexec/package-manager-call upgrade *": [ "exec" ], "/etc/opkg.conf": [ "write" ], "/etc/opkg/*.conf": [ "write" ], "/etc/apk/repositories": [ "write" ], "/etc/apk/repositories.d/distfeeds.list": [ "write" ], "/etc/apk/repositories.d/customfeeds.list": [ "write" ], "/tmp/upload.ipk": [ "write" ], "/tmp/upload.apk": [ "write" ] } } } } 07070100DC3E11000081A400000000000000000000000168F513D9000007B1000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/luci-mod-status.json{ "luci-mod-status-realtime": { "description": "Grant access to realtime statistics", "read": { "ubus": { "luci": [ "getConntrackList", "getRealtimeStats" ], "network.rrdns": [ "lookup" ] } } }, "luci-mod-status-processes": { "description": "Grant access to process status", "read": { "ubus": { "luci": [ "getProcessList" ] } }, "write": { "file": { "/bin/kill": [ "exec" ] }, "ubus": { "file": [ "exec" ] } } }, "luci-mod-status-logs": { "description": "Grant access to system logs", "read": { "cgi-io": [ "exec" ], "file": { "/bin/dmesg -r": [ "exec" ], "/usr/libexec/syslog-wrapper": [ "exec" ] }, "ubus": { "file": [ "stat" ] } } }, "luci-mod-status-routes": { "description": "Grant access to routing status", "read": { "file": { "/sbin/ip -[46] neigh show": [ "exec" ], "/sbin/ip -[46] route show table all": [ "exec" ], "/sbin/ip -[46] rule show": [ "exec" ] }, "ubus": { "file": [ "exec" ] } } }, "luci-mod-status-channel_analysis": { "description": "Grant access to wireless channel status", "read": { "ubus": { "iwinfo": [ "info", "freqlist", "scan" ] } } }, "luci-mod-status-firewall": { "description": "Grant access to firewall status", "read": { "cgi-io": [ "exec" ], "file": { "/usr/sbin/nft --terse --json list ruleset": [ "exec" ], "/usr/sbin/iptables --line-numbers -w -nvxL -t *": [ "exec" ], "/usr/sbin/ip6tables --line-numbers -w -nvxL -t *": [ "exec" ], "/usr/sbin/ip6tables": [ "list" ], "/usr/sbin/iptables-save": [ "exec" ], "/usr/sbin/ip6tables-save": [ "exec" ] }, "ubus": { "file": [ "stat" ] } }, "write": { "cgi-io": [ "exec" ], "file": { "/etc/init.d/firewall restart": [ "exec" ], "/usr/sbin/iptables -Z": [ "exec" ], "/usr/sbin/ip6tables -Z": [ "exec" ] }, "ubus": { "file": [ "exec" ] } } } } 07070100DC3738000081A400000000000000000000000168F513D9000000B3000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/unauthenticated.json{ "unauthenticated": { "description": "Access controls for unauthenticated requests", "read": { "ubus": { "session": [ "access", "login" ] } } } } 07070100DC3E0F000081A400000000000000000000000168F513D9000005B7000000080000000100000000000000000000003000000000usr/share/rpcd/acl.d/luci-mod-status-index.json{ "luci-mod-status-index": { "description": "Grant access to main status display", "read": { "file": { "/etc/board.json": [ "read" ], "/proc/sys/net/netfilter/nf_conntrack_count": [ "read" ], "/proc/sys/net/netfilter/nf_conntrack_max": [ "read" ], "/www/luci-static/resources/view/status/include": [ "list" ] }, "ubus": { "luci": [ "getVersion" ], "file": [ "list", "read" ], "system": [ "board", "info" ] } }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-status-index-storage": { "description": "Grant access to Storage and Mount status display", "read": { "ubus": { "luci": [ "getMountPoints" ], "system": [ "info" ] } } }, "luci-mod-status-index-dhcp": { "description": "Grant access to DHCP status display", "read": { "ubus": { "luci-rpc": [ "getDHCPLeases" ] } } }, "luci-mod-status-index-dsl": { "description": "Grant access to DSL status display", "read": { "ubus": { "dsl": [ "metrics" ] } } }, "luci-mod-status-index-ports": { "description": "Grant access to port status display", "read": { "ubus": { "luci": [ "getBuiltinEthernetPorts" ] } } }, "luci-mod-status-index-wifi": { "description": "Grant access to wireless status display", "read": { "ubus": { "iwinfo": [ "assoclist" ] } }, "write": { "ubus": { "hostapd.*": [ "del_client", "wps_start", "wps_cancel", "wps_status" ] } } } } 07070100DC3B19000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000001500000000usr/share/rpcd/ucode07070100DC3C43000081A400000000000000000000000168F513D900003BD7000000080000000100000000000000000000001A00000000usr/share/rpcd/ucode/luci// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. 'use strict'; import { stdin, access, dirname, basename, open, popen, glob, lsdir, readfile, readlink, error } from 'fs'; import { cursor } from 'uci'; import { init_list, init_index, init_enabled, init_action, conntrack_list, process_list } from 'luci.sys'; import { revision, branch } from 'luci.version'; import { statvfs, uname } from 'luci.core'; import timezones from 'luci.zoneinfo'; function shellquote(s) { return `'${replace(s, "'", "'\\''")}'`; } function callPackageVersionCheck(pkg) { let version = ""; if ( access('/bin/opkg') ) { // <= v24.10 let fd = popen('opkg list-installed ' + pkg + ' 2>/dev/null'); if (fd) { const re = regexp('^' + pkg + ' - (.+)$', 's'); const m = match(fd.read('all'), re); version = m?.[1]; fd.close(); } } else if ( access('/usr/bin/apk') ) { // > v24.10 let fd = popen('apk list -I ' + pkg + ' 2>/dev/null'); if (fd) { const re = regexp('^' + pkg + '-(.+)$', 's'); const m = match(fd.read('all'), re); version = m?.[1]; fd.close(); } } return version; } const methods = { getVersion: { call: function(request) { return { revision, branch }; } }, getInitList: { args: { name: 'name' }, call: function(request) { let scripts = {}; for (let name in filter(init_list(), i => !request.args.name || i == request.args.name)) { let idx = init_index(name); scripts[name] = { index: idx?.[0], stop: idx?.[1], enabled: init_enabled(name) }; } return length(scripts) ? scripts : { error: 'No such init script' }; } }, setInitAction: { args: { name: 'name', action: 'action' }, call: function(request) { switch (request.args.action) { case 'enable': case 'disable': case 'start': case 'stop': case 'restart': case 'reload': const rc = init_action(request.args.name, request.args.action); if (rc === false) return { error: 'No such init script' }; return { result: rc == 0 }; default: return { error: 'Invalid action' }; } } }, getLocaltime: { call: function(request) { return { result: time() }; } }, setLocaltime: { args: { localtime: 0 }, call: function(request) { let t = localtime(request.args.localtime); if (t) { system(sprintf('date -s "%04d-%02d-%02d %02d:%02d:%02d" >/dev/null', t.year, t.mon, t.mday, t.hour, t.min, t.sec)); system('/etc/init.d/sysfixtime restart >/dev/null'); } return { result: request.args.localtime }; } }, getTimezones: { call: function(request) { let tz = trim(readfile('/etc/TZ')); let zn = cursor()?.get?.('system', '@system[0]', 'zonename'); let result = {}; for (let zone, tzstring in timezones) { result[zone] = { tzstring }; if (zn == zone) result[zone].active = true; }; return result; } }, getLEDs: { call: function() { let result = {}; for (let led in lsdir('/sys/class/leds')) { let s; result[led] = { triggers: [] }; s = trim(readfile(`/sys/class/leds/${led}/trigger`)); for (let trigger in split(s, ' ')) { push(result[led].triggers, trim(trigger, '[]')); if (trigger != result[led].triggers[-1]) result[led].active_trigger = result[led].triggers[-1]; } s = readfile(`/sys/class/leds/${led}/brightness`); result[led].brightness = +s; s = readfile(`/sys/class/leds/${led}/max_brightness`); result[led].max_brightness = +s; } return result; } }, getUSBDevices: { call: function() { let result = { devices: [], ports: [] }; for (let path in glob('/sys/bus/usb/devices/[0-9]*/manufacturer')) { let id = basename(dirname(path)); push(result.devices, { id, vid: trim(readfile(`/sys/bus/usb/devices/${id}/idVendor`)), pid: trim(readfile(`/sys/bus/usb/devices/${id}/idProduct`)), vendor: trim(readfile(path)), product: trim(readfile(`/sys/bus/usb/devices/${id}/product`)), speed: +readfile(`/sys/bus/usb/devices/${id}/speed`) }); } for (let path in glob('/sys/bus/usb/devices/*/*-port[0-9]*')) { let port = basename(path); let link = readlink(`${path}/device`); push(result.ports, { port, device: basename(link) }); } return result; } }, getConntrackHelpers: { call: function() { const uci = cursor(); let helpers = []; let package; if (uci.load('/usr/share/firewall4/helpers')) package = 'helpers'; else if (uci.load('/usr/share/fw3/helpers.conf')) package = 'helpers.conf'; if (package) { uci.foreach(package, 'helper', (s) => { push(helpers, { name: s.name, description: s.description, module: s.module, family: s.family, proto: s.proto, port: s.port }); }); } return { result: helpers }; } }, getFeatures: { call: function() { let result = { firewall: access('/sbin/fw3') == true, firewall4: access('/sbin/fw4') == true, opkg: access('/bin/opkg') == true, bonding: access('/sys/module/bonding'), mii_tool: access('/usr/sbin/mii-tool'), offloading: access('/sys/module/xt_FLOWOFFLOAD/refcnt') == true || access('/sys/module/nft_flow_offload/refcnt') == true, br2684ctl: access('/usr/sbin/br2684ctl') == true, swconfig: access('/sbin/swconfig') == true, odhcpd: access('/usr/sbin/odhcpd') == true, zram: access('/sys/class/zram-control') == true, sysntpd: readlink('/usr/sbin/ntpd') != null, ipv6: access('/proc/net/ipv6_route') == true, dropbear: access('/usr/sbin/dropbear') == true, cabundle: access('/etc/ssl/certs/ca-certificates.crt') == true, relayd: access('/usr/sbin/relayd') == true, apk: access('/usr/bin/apk') == true, wifi: access('/sbin/wifi') == true, vrf: access('/sys/module/vrf/refcnt') == true, // vrf.ko is loaded netifd_vrf: false, }; const wifi_features = [ 'eap', '11ac', '11ax', '11be', '11r', 'acs', 'sae', 'owe', 'suiteb192', 'wep', 'wps', 'ocv' ]; if (access('/usr/sbin/hostapd')) { result.hostapd = { cli: access('/usr/sbin/hostapd_cli') == true }; for (let feature in wifi_features) result.hostapd[feature] = system(`/usr/sbin/hostapd -v${feature} >/dev/null 2>/dev/null`) == 0; } if (access('/usr/sbin/wpa_supplicant')) { result.wpasupplicant = { cli: access('/usr/sbin/wpa_cli') == true }; for (let feature in wifi_features) result.wpasupplicant[feature] = system(`/usr/sbin/wpa_supplicant -v${feature} >/dev/null 2>/dev/null`) == 0; } let fd = popen('dnsmasq --version 2>/dev/null'); if (fd) { const m = match(fd.read('all'), /^Compile time options: (.+)$/s); for (let opt in split(m?.[1], ' ')) { let f = replace(opt, 'no-', '', 1); result.dnsmasq ??= {}; result.dnsmasq[lc(f)] = (f == opt); } fd.close(); } // This check can be removed after v25 release result.netifd_vrf = match(callPackageVersionCheck('netifd'), /^20[0-9][0-9]/s)?.[0] >= 2025; fd = popen('ipset --help 2>/dev/null'); if (fd) { for (let line = fd.read('line'), flag = false; length(line); line = fd.read('line')) { if (line == 'Supported set types:\n') { flag = true; } else if (flag) { const m = match(line, /^ +([\w:,]+)\t+([0-9]+)\t/); if (m) { result.ipset ??= {}; result.ipset[m[1]] ??= +m[2]; } } } fd.close(); } return result; } }, getSwconfigFeatures: { args: { switch: 'switch0' }, call: function(request) { // Parse some common switch properties from swconfig help output. const swc = popen(`swconfig dev ${shellquote(request.args.switch)} help 2>/dev/null`); if (swc) { let is_port_attr = false; let is_vlan_attr = false; let result = {}; for (let line = swc.read('line'); length(line); line = swc.read('line')) { if (match(line, /^\s+--vlan/)) { is_vlan_attr = true; } else if (match(line, /^\s+--port/)) { is_vlan_attr = false; is_port_attr = true; } else if (match(line, /cpu @/)) { result.switch_title = match(line, /^switch[0-9]+: \w+\((.+)\)/)?.[1]; result.num_vlans = match(line, /vlans: ([0-9]+)/)?.[1] ?? 16; result.min_vid = 1; } else if (match(line, /: (pvid|tag|vid)/)) { if (is_vlan_attr) result.vid_option = match(line, /: (\w+)/)?.[1]; } else if (match(line, /: enable_vlan4k/)) { result.vlan4k_option = 'enable_vlan4k'; } else if (match(line, /: enable_vlan/)) { result.vlan_option = 'enable_vlan'; } else if (match(line, /: enable_learning/)) { result.learning_option = 'enable_learning'; } else if (match(line, /: enable_mirror_rx/)) { result.mirror_option = 'enable_mirror_rx'; } else if (match(line, /: max_length/)) { result.jumbo_option = 'max_length'; } } swc.close(); if (!length(result)) return { error: 'No such switch' }; return result; } else { return { error: error() }; } } }, getSwconfigPortState: { args: { switch: 'switch0' }, call: function(request) { const swc = popen(`swconfig dev ${shellquote(request.args.switch)} show 2>/dev/null`); if (swc) { let ports = [], port; for (let line = swc.read('line'); length(line); line = swc.read('line')) { if (match(line, /^VLAN [0-9]+:/) && length(ports)) break; let pnum = match(line, /^Port ([0-9]+):/)?.[1]; if (pnum) { port = { port: +pnum, duplex: false, speed: 0, link: false, auto: false, rxflow: false, txflow: false }; push(ports, port); } if (port) { let m; if (match(line, /full[ -]duplex/)) port.duplex = true; if ((m = match(line, / speed:([0-9]+)/)) != null) port.speed = +m[1]; if ((m = match(line, /([0-9]+) Mbps/)) != null && !port.speed) port.speed = +m[1]; if ((m = match(line, /link: ([0-9]+)/)) != null && !port.speed) port.speed = +m[1]; if (match(line, /(link|status): ?up/)) port.link = true; if (match(line, /auto-negotiate|link:.*auto/)) port.auto = true; if (match(line, /link:.*rxflow/)) port.rxflow = true; if (match(line, /link:.*txflow/)) port.txflow = true; } } swc.close(); if (!length(ports)) return { error: 'No such switch' }; return { result: ports }; } else { return { error: error() }; } } }, setPassword: { args: { username: 'root', password: 'password' }, call: function(request) { const u = shellquote(request.args.username); const p = shellquote(request.args.password); return { result: system(`(echo ${p}; sleep 1; echo ${p}) | /bin/busybox passwd ${u} >/dev/null 2>&1`) == 0 }; } }, getBlockDevices: { call: function() { const block = popen('/sbin/block info 2>/dev/null'); if (block) { let result = {}; for (let line = block.read('line'); length(line); line = block.read('line')) { let dev = match(line, /^\/dev\/([^:]+):/)?.[1]; if (dev) { let e = result[dev] = { dev: `/dev/${dev}`, size: +readfile(`/sys/class/block/${dev}/size`) * 512 }; for (let m in match(line, / (\w+)="([^"]+)"/g)) e[lc(m[1])] = m[2]; } } block.close(); const swaps = open('/proc/swaps', 'r'); if (swaps) { for (let line = swaps.read('line'); length(line); line = swaps.read('line')) { let m = match(line, /^(\/\S+)\s+\S+\s+(\d+)/); if (m) { let dev = replace(m[1], /\\(\d\d\d)/g, (_, n) => chr(int(n, 8))); result[`swap:${m[1]}`] = { dev, type: 'swap', size: +m[2] * 1024 }; } } swaps.close(); } return result; } else { return { error: 'Unable to execute block utility' }; } } }, setBlockDetect: { call: function() { return { result: system('/sbin/block detect > /etc/config/fstab') == 0 }; } }, getMountPoints: { call: function() { const fd = open('/proc/mounts', 'r'); if (fd) { let result = []; for (let line = fd.read('line'); length(line); line = fd.read('line')) { const m = split(line, ' '); const device = replace(m[0], /\\([0-9][0-9][0-9])/g, (m, n) => char(int(n, 8))); const mount = replace(m[1], /\\([0-9][0-9][0-9])/g, (m, n) => char(int(n, 8))); const stat = statvfs(mount); if (stat?.blocks > 0) { push(result, { device, mount, size: stat.bsize * stat.blocks, avail: stat.bsize * stat.bavail, free: stat.bsize * stat.bfree }); } } fd.close(); return { result }; } else { return { error: error() }; } } }, getRealtimeStats: { args: { mode: 'interface', device: 'eth0' }, call: function(request) { let flags; if (request.args.mode == 'interface') flags = `-i ${shellquote(request.args.device)}`; else if (request.args.mode == 'wireless') flags = `-r ${shellquote(request.args.device)}`; else if (request.args.mode == 'conntrack') flags = '-c'; else if (request.args.mode == 'load') flags = '-l'; else return { error: 'Invalid mode' }; const fd = popen(`luci-bwc ${flags}`, 'r'); if (fd) { let result; try { result = { result: json(`[${fd.read('all')}]`) }; } catch (err) { result = { error: err }; } return result; } else { return { error: error() }; } } }, getConntrackList: { call: function() { return { result: conntrack_list() }; } }, getProcessList: { call: function() { return { result: process_list() }; } }, getBuiltinEthernetPorts: { call: function() { let fd = open('/etc/board.json', 'r'); let board = fd ? json(fd) : {}; let ports = []; for (let k in [ 'lan', 'wan' ]) { if (!board?.network?.[k]) continue; if (type(board.network[k].ports) == 'array') { for (let ifname in board.network[k].ports) { push(ports, { role: k, device: ifname }); } } else if (type(board.network[k].device) == 'string') { push(ports, { role: k, device: board.network[k].device }); } } /* Workaround for targets that do not enumerate all netdevs in board.json */ if (uname().machine in [ 'x86_64' ] && match(ports[0]?.device, /^eth\d+$/)) { let bus = readlink(`/sys/class/net/${ports[0].device}/device/subsystem`); for (let netdev in lsdir('/sys/class/net')) { if (!match(netdev, /^eth\d+$/)) continue; if (length(filter(ports, port => port.device == netdev))) continue; if (readlink(`/sys/class/net/${netdev}/device/subsystem`) != bus) continue; push(ports, { role: 'unknown', device: netdev }); } } return { result: ports }; } }, packageVersionCheck: { args: { name: 'netifd' }, call: function(request) { let version = ""; const pkg = request?.args?.name; version = callPackageVersionCheck(pkg); return { result: version }; } } }; return { luci: methods }; 07070100DC28A1000041ED00000000000000000000000268F513D900000000000000080000000100000000000000000000000900000000usr/sbin07070100DC39EC0000A1FF00000000000000000000000168F513D900000006000000080000000100000000000000000000001300000000usr/sbin/mkfs.ext3mke2fs07070100DC38740000A1FF00000000000000000000000168F513D900000006000000080000000100000000000000000000001300000000usr/sbin/mkfs.ext2mke2fs07070100DC35BA0000A1FF00000000000000000000000168F513D900000004000000080000000100000000000000000000001100000000usr/sbin/hostapdwpad07070100DC32D1000081ED00000000000000000000000168F513D900032828000000080000000100000000000000000000000C00000000usr/sbin/iwELF @@8 @@ @ @8 8 8pX X X  00` ` `GIp p p@@dtQdtR` ` `/lib/ld-musl-mips64-sf.so.1@    Y h p   @  p  p5` #ppp p 4p^p"poo oo C^O# :/ 07B(6 G;,.C? ' \8VR $9-!YEK14F+2Z>I)&H"*%53@=WL<UMA[JXTDNP]SQ     R  D  Y #   Y Y/ Yp Y` YP_ Y@ Y0| Y E Y Y X X X X XB X X XM Xp X`p XP  X@ X0T X h X Xm WX Ww W6 W W& W W W WpG W`f WPp W@z W0W W ? W W V VB V' V V V Vn V-"g Vpb V` VP V@w V0 V  V V U U U U U Ut U U~ Up U`i UP6 U@" U0 U  U] U_ T3 T T T T T T T__RLD_MAP_init_fini__register_frame_info__deregister_frame_info__libc_start_mainnla_putstrchrsscanfstrcmpstrtoulstrlenputchargenlmsg_attrdatagenlmsg_attrlennla_parseif_indextonamenl_socket_add_membershipsstderrfputsnl_cb_allocnl_cb_setnl_recvmsgsnl_cb_put__floatunsidf__muldf3nla_oknla_nextstrncmp__truncdfsf2__mulsf3__fixsfsistrtod__addsf3__fixunssfsi__floatsisf__nesf2__stack_chk_guard__stack_chk_failstrtok_rnlmsg_allocfprintfnlmsg_freeexitsnprintfopenreadcloseatoistrnlenstrtoll__errno_locationif_nametoindexgenlmsg_putnl_send_auto_completenl_cb_errcallocmemcpymemcmpstrtolmallocstrrchrmemsetgettimeofdaystrcpyclock_gettime__floatunsisf__divsf3__extendsfdf2localtimestrftimestdoutfflushnl_socket_allocgenl_connectnl_socket_set_buffer_sizenl_socket_freesetsockoptgenl_ctrl_resolvestrerrorsprintf__fixdfsistrcasecmp__ltdf2__gtdf2__adddf3__fixunsdfsilibnl-tiny.so.1libgcc_s.so.1libc.so__start___cmd__stop___cmdGCC_4.2.0GLIBC_2.0GCC_3.0 '`` ii y&Pg߼߿g g`<-gܢHߔX($0hXP@8d)(%߅Hߙ%D d@߂X$&pC(#fQ߅Hߙ$ d@߅H߅H߄Hߙ8d` d%߿h߼`߶XߵPߴH߳@߲8߱0%߰(gp߅Hߙ$ d(@ߙߙ`f%g9@ &% @ %@ ߂`߄HߙE d0$ߙX @Cߙ߂`߄HߙE dX$ߙ(ߤ @6߅Hߙd % ߒ`gg@GfR|*@E߅H@%f'&$@% ` %@%$z$߱ pߙ8߄Hޅ( d߅Pߙ`$dwg9>,  %߄Pߙ d^p߄Pߙ d^ߙ( ߤ߿hߤ$  $ $ߢߙD$g$  $߅Hߤߙ@ dA߂`߄HߙE d$߅Hߙ$d  %@߅H*@ߙ  %$C$#@%f'&$bߙ @% 8%0%$ߙd  %@ߙ *@@%f'&$  %@ ߙ`g9w $('/(@@% 8%0%$ߙ`(%g9@ %ߙ(ߙ ߂` # Q߅Hߙ88%@0%d  %%%wHx@^/ %(-<-$$ g<-gߙ߈ ߇(0%߄0H% d߿߼gg<-gpߐX(0@߂H@ߙH߄X d`$(0߿߼߰g g<-g߂@߅X߄Xߙd(8 d`߿߼g%%<y-dcb8Y b@ E%$$%%<gy-,dcT@#bH dB@D-BC-@bPdBY߼gbPdBYbPdBYbPdBYbPdBZbPdBZbPdBZbPdBZ bPdBZ(bPdBY< -d܂P܃8dBb܂@@%<(-dlܢX$C(ܣPܤ8dcܣ@dB(b%$$< - d܂P܃8dBPb܂X܃@dB(b%$< -d܂P܃8dBb܂@@%+< -d܂`܃8dBK0b܂@@%<y-$dcx,@ bPdBZX$ bPdBZbPdBZ`bPdBZ0bPdBZp< -d܂`܃8dBZhb܂@@%%%g<-gߙ8% $߿߼gg<-gߙ8% $߿߼gg<-g\ߙ8% $߿߼gg@<-g$ߙ%$-8$ $ %%% C gPgL@-ߙ߅PgH8%dZ  %$b%L$,B@%PHb(+WB(+UC+@Sd$%F  %$B$b +$߿߼ߵߴ߲߳߱߰g$ g`g\gXgTgtgpglgh'gd߅Pg|0 gx8%dZ %( ,C`"L$,c`d$B %$C(+$%fe%#+`f$߅P 8%dZ % ,C%<y-dcyh %(% 0%g<-g߅Pߙ dZ+߃`߄8߿dcIX߃@߼b%g$g <-g|%߅Pߙdd( %@ ߅P$ߙg$$S  %@ % ߿(ߙdZ  %@$߿(߼ ߱߰g0裠$F<y-dcy`g9#D $g<-g%߅PߙdZ %@$߅Pߙd[  %@ $߅Pߙd[  %@$$"%߿߼߱߰g $g0<-gߑX(f1 8%% %$ߙ$ `(%@<>P-B-߿8߼0ߴ(߳ ߲߱߰g@&f1(%(@1g <-g~TߒX$fP((@( ߅Pߙd[ ` %@߅PQ(߂P߃8߿(dBb߂@߳P߼ ߲߱߰%g0ߙd[ ` %@߂P$$F $$߿(߼ ߰g0g <-g}ߙ$%( gߣc`ߙg$$ % (C$| g <-g|ߙ$ %g( ߣc` ,C`%߿(߼ ߰g0$g <-g|xߙ$ %g( ߣc` ,C`%߿(߼ ߰g0$$F0g <-g|߄PߙdZ%(  (%@ $"@$ߙ$ g  %ߣc` ߙg$$? % (C$| $߿(߼ ߱߰g0$$F0g <-g{8߄PߙdZ%(  (%@ $"@$ߙ$ g  %ߣc` ߙg$$@ % (C$| $߿(߼ ߱߰g0$gpx<-ph`XPH@8gzh$߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8g$%%$$߂P%dB[ ߂P%dB[(g(%%%%ߣb-^ߙߥ  %@ߙ$$fRP*@ߣ-ߙ $ߙg($$> % (A,$|ߥ  %@ߙ $$ߥ % $ ߤ($C,c` $c$c@%fR@%$g($$= % (@ ߙ%$F $$߿(߼ ߰g0@g <-gxhߙ$ %( g,c`ߣc`ߙg$$Y % (C$| $F=g (<"-@0gw߄Pߙ%d[0  (%@ߙ8%0%$ߙ  %A%$|߿(߼ ߱߰g0$ g  %ߣc`<$B4cC+` $C`g$$Yݣ$$g0<-$ 8(gv%0%߅Pߙd[8  %@Aߙ0%g  %ߣc`%ߙg@8%$$i % @ ߙ@8%$$j % @%a%$|$߿8߼0߳(߲ ߱߰g@$$ߙg0% `(%@%ߢB@$ߙD0% `(%ߣc`$$$F $$߿8߼0߲(߱ ߰g@g0 8(<B-guP@%@$ߙ%$  gߣc`@@%1߄Pߙ (% d[@@ ߄Pg$$ ߙ  %@%ߙ (% d[H@߄Pg$$ ߙ (% d[X@g$$ $|$$gP<-gs0ߙ %X@8(H%% %ߙ0 8%$4 @ %@a&q ߙ9%$ g gߣc`9ߙfߙp  %@ ߅Pߙ8%$$ @ %@E&1 f߅Pߙ d[`@$$3߅Pߙd[h  %@#߅Pߙg $$5@ % @$$"%$߿X߼PߴH߳@߲8߱0߰(g`8%$$&@ % @&q %fߙd[p  %@$ߙg $$5@ % A$(@ $$߿H߼@߳8߲0߱(߰ gPg@<-gq(ߙ %H80 %% %ߙ0 8%$4  %@DߙpEg  %@$ߙ 8%$$  %@6߅PQߙd[h  %@ ߅Pߙg$$5 % %@%ߙD$  gߣc`ߙg $$& % @$$b %߿Hߙd[p  %@ߙ$g$$5 % $$$Fg<-gpLߙ % %ߙ 8% %0 $߿(C$|߼߱߰ g $$Fg<-goߙ % %ߙ0 8% %$ $߿(C$|߼߱߰ g $g<-go@ߙ8%@%߄Pdf ߄Pߙ8 (% d[߿$߼߱߰g ߄Pd[xg<-gn߄Hߙ8 dX߿߼gg<-gn߄Hߙ8 dX߿߼gg<-gnD߄Pߙ8 d[߿߼gg<-gn߄Pߙ8 d[߿߼gg<-gm̌߄Hߙ8 dX߿߼gg<-gm߄Pߙ8 d[߿߼gg<-gmT߄Pߙ8 d[߿߼gg<-gm߄Pߙ8 d[߿߼gg<-gl$ߙ8C$C$C߄P߄PdZ ߿߼g߄Pd[߄Pd[d[g<-gl`߄Pߙ8 d[߿߼g$F0g <-gl$%߅Pߙdd(  %@߅PߙdZ  %@%߄Pߙ8 (% d[$߿(߼ ߱߰g0$ߙg $$] % (C$| $g<-gkT,`ߙ8߃X%dc߄PC-0%E d[߿߼g߄H d߿g<-gj$ߙ8C$C$C߄P߄Pd\ ߿߼g߄Pd\߄Pd\d\(g <-gjd߄PߐXߙߑPd\0f(f f1\Pߙ8 % f(߿(߼ ߲߱߰g0g<- giߙ`g99\ $߿߼߰g $$ߙ`g9$  %@ ߃P߄Pߙ8(% d\Xߙ`g99\ $߄8dc߃@b%g<-gi0߄Pߙ d\߂P߃8߿dB͌b߂@߼@%gg<-gh߄Pߙ d\߂`߃8߿dBJߙ` $ ߙ % ߕPfs[-f^Hߙ % $ ߙ8" @(%` % @%(/ߙ80%( % fߙߙ` $ ߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gp߄P~d^ ߄P{d^0 %߄Pd^0ߙ` $ ߒPfR^gX<8-'h`PH@0( gbB*$@ܷܳ߂X߄PE(ߙ8d^P ߞ߄Pߙd^p ߑ߄Pߙd^ >/߅H߄Pߙ8d`d^ ߄Pߙd^ %߂PdBwP߂`dB>,<>Q*`߄Pߙ d^߄Pߙ d_@߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gp%%-P;8@8ߙ (%@1(@ % @ <߅Pߙ`0%dwPg9>,  %%<>-R@B8PB(@B @ `ߙD `(%@ߥ߹0% @ %&<>Q*@<&@g<-g`pߙ` $ ߿߼gg<-g`(ߙ`$  %߄Pߙ8 d`߃X0BdcC-߄PEߙ8 d`(߃X0Bdc߄PC-Eߙ8 d`P߿߼߰g g0<-g_x߂Pߙ`dB`p߂P$ dBY߂P(dBZ߂P%dBY8 @(%,B@߆PdB ]-F߄Pߙ8 d`߄Pߙ8 d`߄Pߙ8 d`߄Pߙ8 d`߿8߼0߰(g@dZ(g<-g^ߙ`$  %8C%*0B߄P(%ߙ80 da߄Pߙ8 da 8C%*0B߄P(%ߙ80 daH߿߼߰g gX<-g]0(ߓPߒ`@$ߕP h`PH8%%fRCPfsb."@ ߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gp8C%0B°%2&"*@%ߙ`gg9CP ߒP߄Pߙ8 (%db fRbQ!21ߙ8@ % f2Qߙ` $ ߿h$$ *.g@% f߄Pߙ8(%0%da %!ߙ8ߙ` $ &1@% g.@ߙ8߄Pdaxߙ &1f fa&1f7/-21@߄Pdaȓ` % &g2g<-g[ߙ`$ % % ߙ8߄P0db8 ߿߼߱߰g ߄P(%dbHgP < -ܐ0g[,ߙf(% %  ߙh(% % @%ߙ 0%@%@8%$M g ߦHߙ@%$d$ gߢ߄PEߙ8 dbh߿ ߼ ߱ ߰ $g g` < -ܑ0gZhߙf1 x %%(%  ߙh(% % @%ߙ@%@8%@0%$M  %ߢh@߿ Q߄Pߙ8 (% dbx21 ߿ ߙ߄P db߂X$C(߿ ߼ ߲ ߱ ߰ x$g g < -ܐ0gYߙf %(%  ߙh %(% @%ߙ 0%@%@8%gP$M ߒߥg8 %@%d g ߥ  %@%d gߢhߙHD @(%߄Pߙ8@8% 0%(% db߿ ߼ ߲ ߱ ߰ $g gp < p-ܐ0gXߙf(% %  xߙh(% % @%ߙ@%@8% 0%$M  %ߢ@ ߿ C$b߅P߅Pdd߄Pߙ8 db߿ ߼ ߱ x߰ p$g dZg <-gW߅Pߒ%܄@%( db@8@%ߙ$0% @(%@1@%߅H$@% dA#@(%߅P$@% dbA+@(%߅P$@% dbA,@(%߅P$@% dbA-@(%߅P$@% db@@(%ߙ$ 0%@%ߙ$ 0%@߅P@%߿(߼ ߲߱%߰g0ߙ$ 0%@߅P@%ߙ$ 0%@߅P@%ߙ$ 0%@߅P@%g0<-8(  gV,$߿8߼0߳(߲ ߱%߰g@ߙp%g` % %@ @%߂`߄PߙEdb $߿8$"ߙ`8%$$ @ %@߂P߃8dB$&fu$%%Q ߢ "8@ ߢ L"$Cߢ ߙߥ8 $" ߢ dB ߢdB{ߣ@b-Q ߢ"(@ߢ"8Wߢ"$8C$C$Bߢߙߥ  $@ߣ$b'"@'ߢdBdߙ @ @%߂`߄PEdkߙ !$ߕXߙ( +  x(ߙ + x @%@%@ߙ߂`߄PߙE dc$Xߙ  %ߙ  %ߙ8 ` %Xߢ*)GX%@%0%(% ` %$BP$BS$B gXX$$ߙ ` %@N߂`9(ߦߤ@%8% `(%@ԯXߢߙP 0ߙ($Bߢ`(%D 0@ߙ߆`gX$8%d{d$ % X߇`ߙ@%d$$  %߇`ߙ@%d$$  %߇`ߙ@%d$(%  %X@ߙ(ߢD (%XXgX$$XgX$$߄PEodk@@Ύ$fg`<8-$PH@0hX( g %%`Md߅Pߙdk`% %@%&3f$ߙ`g9K @ %@.@%ߙX&p$  %@<@%V߂Pf$dBkh"߂PdBkp"%s*`)ߙ`0%@% 8%(%g9| @ %ߙ % @% ߿h ߈Hߙ`ehg$0%$g9R @ %߿h߼`߷X߶PߵHߴ@߳8߲0߱(%߰ gp%-cdBd$g <-g߂Pߙ`dBk߂P@%%8%$(%g9|dBZ( @߂P߂XB(@ ߂Pߙ$  %0b4Bb߂P߃8߿(dBb߂@߰߼ @%g0gP<-g8߅Xߙhg$ %d %xp% %߅Xߒ`ߙg8$(d  % fR|ޢ8%@%$(%` %@% @ @%ߑXf1(В"@ߙ" @߿߄Pߙ dk߿߼߶ߵߴ߲߳x߱p%߰hg% (%  %" @߄Pߙ8(% dkޢ@%8%$(%` %@%P 8@%g<-g߂P%dBk߂P-dBk ߂`߃8dBZhb߂@@%߿߼g ߙ`@%8%$g9| (%$C@߿$g@<-(0 H8(g,%%%@_%ߑPߙf%[  %@ f1[ߑPߙf%[  %@Pf1[߂XQh$q #ߙX$$  %@^@%Bq#߂HfdB߂P%dBkB-&ss(*5dB0%ߔ`@%f|8%(%%  %ߙ % @%`߿Hߙ`g9K  %@ $#߆Hߙ`H%@%8%dX$g9R  %$#C߇X߄Pߙ dk߿H߼@߶8ߵ0ߴ(߲߱߰`%߳ gP$E$cdB߿H߼@߶8߳ ߲ 0%(%߱ߵ0 %%߰ߴ(P@%dP gP$gp < p-ܐ0gߙf(% %  xߙh(% % @%ߙ@%@8% 0%$M  %ߢ@@ߥ8߂`߄PEdkߙ $߿ ߼ ߱ x߰ pg ߐ߂`߄PEdl߄Pd$% dl ߥP%߂`߄PEdl(߄P$d dl@%g@<- H80(g7%ߙg%$  %ߙ0F$  %ߢB@ $$߿H߼@߳8߲0߱(߰ gPSߙp%g @ %@ߙ@8%$$  %@g ߙ$$7  %߂P߃8dBb߂@@%g$g<-g߅Xߙ$d %@-."@߂HdBC-B\-@߄PdlHߙ8 ߿߼߱߰g ߄Pdl`߄Pdlh߄Pdlp߄Pdlx߄Pߙ8 @%dl ߿߅Xߙ$d  %@ߙ8." @߂HdBC-B\-@߄Pdl߄Pdl߄Pdl߄P @%dlgX<-h`PH@80( g@ߖX$%%%$f*B@&B"*@ %߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gp,@$$V-C`BU$@  x - @%f 0% -ߙ`g9;8 $."@߄Pߙ8ߞPdl%0- g]83 ߙ8ߙ` $ $CdBC#-e % fs7d߅Xߙf$d  %@-߅X,@$߄Xd0D-C` BU$@ xE-&&@%f0 -ߙ8߄Pdl %߂P&sd^]8S*@-ߙ8E % f1ߙ$d  %@),@$߄XdxD-B@ %$b-BU$@xߙ8߄Pdm %߂P&sd^]8S*@-ߙ8E % f1ߙ8߄Pdm $߂Pd^bS*@~-ߙ8E % f11 ߄Pߙ dmHq,$@$߄Xd`D-C` BU$@xE-&&@%fYߙ8߄Pdm` %߂Pd^bf1S*@K-ߙ8E  %f1Fߙ8߄Pdm $߂PdSbf1$cb*@6-ߙ8E ` %f1g <-gߙp$ %g( ߣc` <C+`%߿(߼ ߰g04g <-g$ߙp$ %g( ߣc` (C`%߿(߼ ߰g0$$,B@_g@<-g8 %߅Pߙd[0 %(H0% %@߅Pߙdm  %@$߅Pߙd[@ % $@߄Pߙ8(% d[*$%ߙg8%$$a % @`&:$߄Pߙ dmߙpD$  (%ߣc`ߙg$$b % @%a%$|߿H߼@ߴ8߳0߲(߱ ߰gP+$g0<-(8(  g$$߿8߼0߳(߲ ߱%߰g@ߙp%%` % %@ ߙ߂`߄PEߙ db$߄P% dm@@%$ߙ g@ @%߂`߅PDߙ80% dmߙ`8%$$ @ %@ߙ  8%$3 @ %A߿8$|g <-g ߙP% p@ ߙ @ߙ8 ߤ$߿߼߷߶ߵߴ߲߳߱߰%߾g.@ߣXb-B\-@-Q߅Pߙdm  %@c$߅Pߙdm  %@_߅Pߙdn  %@V߅P6&ߢP*@`@uߴpߙ  -@@%` S+@aq+4-b3ߙ0%`(%  %@ 4 -+@ZD+-B3ߙ0% @(%ߙߤ0 8%0! $*@jߙ8ߢ0@N߇Pߢ(@ߢ8ߢߤF0ߙ $-ߢ8@LߢߤF0ߙ $,Gߙߢ@Nߙߤgh$$ h@Hߢ @IߙD%ߙdn  %@߅P6ߙdn  %@߅P6ߙdn   %@߅P6@ߙdn(  %@$߅Pߙ$ dn@  %@߅Pߙ$ dnP  %@P߅P" @($=߇Hߙߤd($ $@ ߇Hd0ߙߤ$ $A9%$|ߙ8 ߤߙ8 ߤ@ߙ @ %`ߙ ` % +ߙ  %(߿C?ߙf> $/  %@9@%(%ߞp@g`@ %% @@/ghf%@ %% H@(ߙߧ@ߤ$ $@ߧHߙ61%ߙdn`  %@$߅Pߙdnh  %@$߅Pߙdnp  %@$߅Pߙdnx  %@w%$-$ߙ$  gx1ߙ % @"-ߢxQߢ@&%ߤhgh$(%ߙ A%`ߙ ` %-Dߙ gp@@%}%-Qߙ  %ߤ0 8%(%-Qߙ  %ߙdW % @%@@%$rfDB+@V-"+@ߙ4$+@6-+ߙ0%  (%%-ߙD$  gx@%8$$ 0$($$߂H%dB8%%% 80(%%$|X@t-"3ߙ@W-3ߙ%ߙߤdw0% $Aߢ(ߙ86@ߙߤgh$$ hAߢߙ8ߢ @$ߤ8%0% $Aߙ8g`<-$x`XphPHg(%%%?8C%*0B߄Pߙ8(%0dn&sfR2s ?ߔ`g?fCP.b %@% ߄Pߙ8(% dn߄P(%dnߙ8 ߿߾߼߷߶xߵpߴh߳`߲X߱P߰Hg &p߄Pߙ8 dn߂P@ %dB@% ߙ`$  2.@fQ%  %߄PCB8C%0B°%2&P*@% %% fR߄Pߙ8dn %*@ߙ`$  &sb/2pf.@7-%  %߄Pߥdo$  &߹@ % fR*#"8C%0B%2@%&bP*@߄P %% f2߄Pߙ8do( %߂XdB߂X ߂HdBp(*@ߙ`$  fsߢ#2R&P2.@E3-cb8C% %%0B %߄Pߙ8dp` 22@2߄Pߙ8 dpx2@߄Pߙ8 dp0B$ߙ8C%$C$C ߄P߄Pdp 0B$C ߙ8$C $C߄P߄Pdp 2@@2߄Pߙ8 dq2@2߄Pߙ8 dq(2@2߄Pߙ8 dq82@2߄Pߙ8 dqP2@ߙ8߄P dqh2 ߄Pߙ8 dq߄Pߙ8 (%dq&P 2.@/fqcb8C%0Bb%2v8&bP*@$߄P %% &R߄P(%ߙ8dqV# 2Pfs.@3- %% &߄Pߙ8dq 2߹ % f1ߙ` $ ߿߄Pߙ8(%dq ߒPP!fRb2%ߙ8@ % f12"Pߙ` $  $ ߥߙ$ @ %@V$V߄P$V߄P߄PGFEߙ8@%dl 'fR߄PdoHߙ8 'fR*߄PdoXߢ ߙ$dE @ %@;߅X&0C,c`Cߙ8ߣ(0Bb-B\-@߄Pdo`߄Pdop߄Pdox߄Pdo߄Pdo߄Pdo߄Pdo߄Pdo߄Pdo߄Pdo߄Pdp߄Pdp߄Pdp(߄Pdp8߄PdpHߙ$d @ %@ߙ8$V $V ߄PGFE@%dl߄PdpP߄PdpXdp߄Pdp߄Pdpdp߄Pdp߄PdqV`%<Y-dBDPYP8%0%EP@%doHg9 dlh<Y-dBDPYP8%0%EP@%doHg9 dlpg<-g߄Pߙ8dq% %߅PߙP߿߼ 8%0%߱߰dpP$ %g9 g ܃0gb<-g($$BߙF$<48%0%> b-߿(B ߼%߰g (@$$߿߾߼߷߶xߵpߴh߳`߲X߱P߰Hgg`<-gߙXߒPph`PH%xfR% %4, %@% @%@ @%g<ߙ@8%$$ %< A4$|@%  %@@%&g4g8 ߂PߗdBrf1%(>ߙ$:  %@@%ߙ`$:  %ߙߧߦ ߥ(  %$b6@%  %@@%8ߙߧ$$ % <@ߙ4ߧ$$ % <@(%0 %% &ߢf1(%%  %`(%%  %y%gX<-gߙP0%` %4#g9 h`PH@8(% %@c ߖ`@%gf$7ߙ$= % @'d^@&f1%  %@-@%߄Pߙ8(% d\Xߙ`g99\ $@%ߙ`g99\ $߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ %߰gp*@߄Pߙ8(%dr $>&f1Y(%  %@@0%C$Ebߙ8߄Pdr(߄P drX$YE0% ` %@ߙd0 (%߿h$|g0<-gߗxh ($ߣhb߿ߙ ߙ% %%%% %ߙ08%$ @ %@$|'*@fq߅Pߙd dm@߅Pߙg0H%g$fg'(%  %@ߙ(%@ % $@fb&s#"-*@ߙP߅Pߙ$ dg@@ ߅PߔPg($ߙ@@0%fgP %@ %gHg0fgP$ V0ߙߧ$$ @ %@(&*@f1߅Pߙ$ dgX@M߅P$ߙP g0@ %ߢ0B@ߙ ߃Hߙpe @ %ߙ @ %ߙg$$$k@ % $A,{$| ߥߙ @ %ߙ@@(% @ %ߙ@ % @%0DߢS-Dߢ0B@ecߙ fsߙ@(%  %@[ߙ@ߦߥ %@ %~ߙP$ &*@7f1߅Pߙ$ dg0@߅Pߙ$$  g0ߣ0c`=ߙg$$$ @ % $@&*@f1߅Pߙ$ dr@ߙPߙ$$  g0ߣ0c`!ߙg$$$ @ % $@f1&ߙP4pg9 @ %@@%*@߅Pߙ$ dr@߅Pߙ$ ddg$@ߙ$$$$ @ %@}f1&D0ߙ `(%ߙ@% 8%0%@(%  %@%飠$߾߼߷߶ߵߴ߲߳߱%߰xgg <-gߙP% %4Eg9( @ ߙg $$ %@%$ Aߙ$|߿(߼ ߱߰g00  (%߂`߃8dBHb߂@@%$F $߿8߼0߳(߲ ߱߰g@g0<-gߙ0%%g 8( @%ߢB@$ߙP4Eg9  %@ @%ߙg`8%$$ % Aߙ$|`8%$$ % @ߙ0  (%߂`߃8dBHb߂@@%g0<-8( "gߙP% %4Eg9 %@ @%ߙg $$ %$ A ߙ$|߿8߼0߲(߱ %߰g@$0 @(%߿8$g0<-8( "gߙP% %4Eg9 %@ @%ߙg $$ %$ A ߙ$|߿8߼0߲(߱ %߰g@$0 @(%߿8$gP<-gdߙ8ߔ`0 %%$(%H@(X%gg f  %Q*@ $߿X߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`b-D$0%(%% f@엤 $B0BxB-Cd%ޤCgP<-gtߙ8ߔ`0 %%$(%H@(X%gg f  %Q*@ $߿X߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`b-D$0%(%% f@엤 $B0BxB-Cd%ޤCg<-gd$$( gC0 +@+-3+@ߙ-3ߙ, L ߿ߢ߼g g<-gߙ@%d $G߿߼gg`<-gh%߇Xߙ xp%%d$  %%  %@߄Pߙ8 dr%߿߼ߴ߲߳x߱p߰hg  %$b߂PdHr߆Pߙ8%dr@(%  %"-߆Pߙ(/ %8%ds0 E(/-$b ߆Hߙ(/ %`8%dƿX E(/-ߓPߙ(/ %ffwPE(/ ߴ -߆Pߙ(/ %ds8 E(/-ߙ(/ %ffwPE(/ ߴ -߆Pߙ(/ %ds8 E(/-ߙ(/ %ffwPE(/ ߴ -߆Pߙ(/ %ds8 E(/-ߙ(/ %ffwPE(/ ߴ  -߆Pߙ(/ %ds8 E(/-ߙ(/ %ffwPE(/ ߴ( -߆Pߙ(/ %ds8 E(/-ߙ(/ %ffwPE(/ ߴ0 -߆Pߙ(/ %ds8 E(/-ߙ(/ %ffwPE(/ ߴ@ -߆Pߙ(/ %ds8 E(/-ߙ(/ %ffwPE(/ ߴH -߆Pߙ(/ %ds8 E(/-߆Pߙ(/ %d^E(/ ߳P` -߆Pߙ(/g %ds8 E(/-//߂P;dHwg`<-gߙPH%ܐ0(%g(xXph `fߙ(% %߷( ߶0ߙh(% % @%ߙ@0%@%@8%$M g ߦ x߇X߂`߄PEdsPߙ ߿߾߼߷߶xߵpߴh߳`߲X߱P߰H$gߙ d$+ g@ߙ߂`߄PEdshߥ gPd % g8ߢ ߙHD @(%߄Pߙ8@0%(% dsߢ@߄Pߙ8E dsߤXߙPg9< ߄Pߙ8@(% dsߢ@߄Pߙ8E dsߤ`ߙPg9< ߄Pߙ8@(% dtߢ@ߙ8߄PE dt(ߢ@ߙ8߄PE dt@ߢ@ߙ8߄PE dtXߢ0@߄Pߙ8E dthߤ ߙPg9< ߄Pߙ8@(% dtߤ ߙPg9< ߄Pߙ8@(% dtߐ`fz@% ߤh@0%ߢ@߄Pߙ8E dt% ߤp@0%ߢ@ߙ8߄PE dtߢ@߄Pߙ8E dtߤ8 ߙPg9< ߄Pߙ8@(% duߤ ߙ(g (%߄Pߙ8(% duߤ ߙPg9< ߄Pߙ8@(% du0ߤ ߙ(g (%߄Pߙ8(% duHߤ ߙPg9< ߄Pߙ8@(% du`ߢ@ߙ8߄PE duxߢ@ߙ8߄PE duߢ@ߙ8߄PE duߣx` $fpF0߄Pߙ8du2@0 (ߢ@ߙ8߄PE duߢ@ߙ8߄PE dvߢ@)ߙPC,c`gC߂HdBC-B\-@ߢ@#ߙ8߄PE dsߢ@,ߙ8߄PE dt&߅Pdv  %߄Pߙ8(% dv`ߢ@ߙ8߄PE dvxߢ@ B@߅P߅Pds@߄Pߙ8 dvߢ@ B@߅P߅Pds@߄Pߙ8 dvߢ@@ߙ8߄P dvߙ`g98 ߤ@ߢH@ߙ8߄P dvߙ`g98 ߤHߢP@ߙ8߄P dwߙ`g98 ߤP߰(z߲0B@ ߄Pߙ8 dw0 0B@ߙ8߄Pds@ 0B @ ߄Pߙ8 dw@ 0B @ߙ8߄Pds@ 0B@ ߄Pߙ8 dwX 0B@ߙ8߄Pds@ 0B@ ߄Pߙ8 dwh 0B@ߙ8߄Pd[  0B@ ߄Pߙ8 dwx 0B@}ߙ8߄Pds@ 0B@ ߄Pߙ8 dw 0B@oߙ8߄Pds@ 0B@@߲߄Pߙ8 dw 0B@@`ߙ8߄Pds@ ߲@gߦ e߅Pߙdw  %@^@%ߙg$(%` % fQ߄Pߙ8dw ߞXBߒP$B߂P%dB`%fR<ߙ  %@8ߙ Aߦ߄Pߙ8`(% dx(9߅Pdv ߅P dv(߅P dv8߅PdvH߅PdvP߅PdvX߅Pd\(dsHdsH߄PLdsH߄PZdsH߄PhdsH߄Pvd[(߄PdsH߄PdsH߄PdsHgH 0%$ gh@ߙ8߄P dwߦA߇Xߙ dx$ g@ߢ ߄Pߙ8 dx8ߢ @ߙ8߄PE dxhߢ(@ߙ8߄PE dx߰ ߄Pߙ8 dx@ߙ8߄Pdx ߰ ߄Pߙ8 dx@ߙ8߄Pdx ߰ ߄Pߙ8 dxؖ@ߙ8߄Pds@ ߢ @ߙ8߄PE dx$@ߢ@'-ߙXg$ <;ߢ6PߙPߤߣg9<<f1B@ C-߄PPߙ8dy@%(  0S/Q ߄Pߙ8dy@( (/߄Pߙ8(%.dy`߄P(% dxߤp@% ߄Pߙ8@(% dxߤx@% ߄Pߙ8@(% dxߤ@% ߄Pߙ8@(% dxߤ@% ߄Pߙ8@(% dx ߦ /߉P߹$: %e)wP@%(# $-ߙ %g &@%߄Pedx߄Podx߄PydsHg` < -ܒ0gߙfR x p@ %%(%  ߙh(%@ % @%ߙ`0%@%@8%$M gߦx߇X߂`߄PEdyߙ ߿ ߼ ߳ ߲ ߱ x߰ p$g ߙPd$g9 g8@߂`߄PEdshߥ@ߙg d @ %߄Pߙ8@(% dyߢ@ ߙHDg @(%߄Pߙ8@(% dyߢ@E$ߙ8$߄Pdy ߙ` $ ߤߙPg9< <;4cC`<dcB@߄Pߙ8dy(C` 0ߤP*ߙPg9< $<@(%<dBB@@<4B߄Pߙ8dz H#`H@<54B@`@@$8@<4Bx8@ 0ߢH@ Eߢ@aߙ8߄PF dzPߢX@ߙ8߄PE dzpߢ`@ߙ8߄PR dz2B@2B߄Pߙ8 dz2B@ߙ8߄P dz߄Pߙ8@(% dqߢp@ ߄PF$d@ߙ8dz0 (ߢx@ߙ8߄PE dzߢ@ߙ8߄PE dz߲h@%ߢf1ߢ@5߿  3߄Pߙ d{0ߤߙP$g9 d$߄P\dy߄PYdy߄P dyV߄P dz`ߥ@fSFF ߄Pߙ$d ` %@߄Pߙ dzEߙP$g9 ` %ߢg < -ܐ0gߙf(% %  ߙh(% % @%ߙ@%@8% 0%$M g`ߢ@ߙ8߄PE d{`ߢ@ߙ8߄PE d{xߢ@ߙ8߄PE d{ߦ=߇XߙPd$ g9  %@ ߢX߄Pߙ8 dr%߿ ߼ ߱ ߰ g @ߙ8߄PE d{ߢ@ߙ8߄PE d{ߢ@ߙ8߄PE d{ߢ0@ߙ8߄PE d|ߢ8@ߙ8߄PE d| ߢ@@ߙ8߄PE d|@$g 0< -ܐ0g4ߙf(% % 8  (ߙh(% % @%ߙ 0%@%@8%$M gߦx߇X߂`߄PEd|Xߙ ߿ 8߼ 0߲ (߱ ߰ $g @ߙPd($ g9 gP@ߒ߂`߄PEdshߥg8@%d % g ߥp@%d % gߢߙHD @(%߄Pߙ8@8% 0%(% d|pߢ`@ߙ8߄PE d|ߢh@ߙ8߄PE d|ߢX@ߙ8߄PE d|ߢp@ߙ8߄PE d|ߢ@ߙ8߄PE d|ߢ@ߙ8߄PE d|ߢx@ߙ8߄PE d|ߢ@ߙ8߄PE d|ߢ@߄Pߙ8E d|ߙ` $ ߿ 8g` < x-ܑ0gߙf1 p %%(%  ߙh(% % @%ߙ@0%@%@8%$M gߦ ߙP$߿ ߼ ߳ ߲ ߱ x߰ pg 8%$g9  %@$ߒPߐXfffR|f" p]-"@ ߙ8 @ %  $ߙ` $ f($dB p]-D  ߙ` $ $g0 < -ܑ0gpߙf1  %%(%  ߙh(% % @%ߙ@0%@%@8%$M gߦ߇X߂`߄PEdyߙ ߿ ߼ ߶ ߵ ߴ ߳ ߲ ߱ ߰ $g ߙPd$g9 gH@@%߂`߄PEdshߥPߢ@ߒg0d %@% gߢ(ߙHD (%ߢ@$VߢPߣ`VdE@%  % @$ߥߙd$(%  %@ (%@%  %߄Pߙ8 (% d|ߒPfR^ߢ$BCL$C}ߙ8@߿ ߄Pߙ80% (% d}d@%  %$ ߢdE+`+f3ߙ$  %ߢC$b߄Pߙ80% (% d|ߤxߙP$0%$g9 d`dB 3ߙ+` +f3ߙߒP$ % fRwPߢ`dB 3ߙ @)ߙ8߄P0%(% d|ߤx$   ߙP$$C8 0%$g9 dߢ@SߢX@ߙ8߄PF`8%@(% d}8ߢ$BC@߿ =߄P0% (%d| ߤx߄P0% (%d} g P< @-ܐ0g΄ߙf(% % X Hߙh(% % @%ߙ 0%@%@8%$M gߦxߐP߂`߄PEdsPߙ ߿ X߼ P߱ H߰ @$g `߇Xfd$+% gp@ߢ߂`߄PEdsh@ߣ`ߙ8߄PfE d}Hߢ@ߣ`ߙ8߄PfE d}hߢ@߄Pߙ8E d}ߤ ߙ(g  (%߄Pߙ8 (% d}ߤ ߙ(g  (%߄Pߙ8 (% d}ߦ߇X$dh% g@ߙ8߂`߄PEd}߄P d}ߢ@%ߙ8߄P d~߅HdHߢ@ߙ8߄P d~߅HdHߢ @ߙ8߄P d~0ߢ(߄Pߙ8E d~Hߢ0߄PEߙ8 d~`ߙ` $ ߅Pdwg@<-ܐ0gߙf %%(%H 80 (ߙh(% % @%g ߙ@%@8%@0%$M ` % ߢ(@ߐPP"P(%߄Pߙ8 d~x0ߐPfwPߦ@ߙ8߄Pd(% d~ߢ8@߄Pߙ8F(% d~ߤ ߙPg9< ߄Pߙ8@0%(% d~ߥP ߙg d @ %߄Pߙ8@0%(% d~ߢ@ߙ8߄P(% d~ߥߙd$ 0ߙ` $ ߢH@ ߙ0 D߄Pߙ8@0%(% d~ ߢPߢ(@ߙ8߄PF(% dߢP@ ߙ8߄P(% dߙ`g9< ` %ߙ` $ ߢ0@ ߄PG$d@ߙ8(%d8 0ߦhߙPg H%$$$g9  %߄Pߙ8 0%(% d0ߢ@ B@ߢ ߄Pߙ8(% dHߢ @ߙ8߄P(%dX ߓPߢ ߔ`dQBߖP$Bfsf<ߙ  %@/g ߢ @߿HQ ߙ8߄PߒH(%d% fR82"@ߙ8(% @ %B &ߙ` $ ߿H߼@߶8ߵ0ߴ(߳ ߲߱߰$gPߐP+@ߙ-+@8 $ (ߥ($&1.# dg C +@+-+@$+@ߙ-+@  0%ߥ$ $, dgC0 +@+-+@ +@ߙ-+@ ߢ`ߐP0߂H߄HdB08߂Hߙ8dB8@߂HfwPdB@dH Hxߙ8(%fāh ߞPyߙ8 fāhߙ gq2@2߄Hߙ8fwP dp2@2߄Hߙ8fwP d2@ߙ8߄HfwP d2߄Hߙ8fwP d߄Hߙ8fwPd %-ߙ8Eߤh f$-ߙ gq2@8߄Hߙ8fwP d2@2߄Hߙ8fwP d82@2߄Hߙ8fwP dp2@2 ߄Hߙ8fwP d2 @2@߄Hߙ8fwP d2@@2߄Hߙ8fwP d2@ 2߄Hߙ810fwP d2@ 2߄Hߙ820fwP d2@ <߄Hߙ83B0fwP d8<T$@ <8߄Hߙ840fwP d`<8T$@ <߄Hߙ840fwP d<T$@ <߄Hߙ850fwP d<T$@<߄Hߙ8fwP d<T$@<߄Hߙ8fwP d <T$@<߄Hߙ8fwP d@<T$@< ߄Hߙ8fwP dh< T$@<@߄Hߙ8fwP d<@T$@߄Hߙ8fwP d߄Hߙ8fwP d2@2߄Hߙ8fwP d2@2߄Hߙ8fwP d82@2߄Hߙ8fwP dX2@2߄Hߙ8fwP d2@ 2߄Hߙ810fwP d2@ߐP߄Hߙ8fwP d2@2߄Hߙ8fwP d2@2߄Hߙ8fwP d 2@@߄Hߙ8fwP dP20@ <߄Hߙ830fwP dp<4B$@ <x߄Hߙ830fwP d<xT$@ <߄Hߙ840fwP d<T$@<߄Hߙ8fwP d<T$@<߄Hߙ8fwP d<T$@<߄Hߙ8fwP dH<T$@<߄Hߙ8fwP dp<T$@<߄Hߙ8fwP d<T$@< ߄Hߙ8fwP d< T$@<@߄Hߙ8fwP d<@T$@߄Hߙ8fwP d߄Hߙ8fwPd %g x fՁhߢ(T0-߄Pߙ dq2@/2g x(fwP0߂Hg0dB8%8$ߢ(ަT-Gߙ8ߥ0ߤ8A:0 ff eߢ@ߙ` % g@%^%vH%(%ߙ8E % fߢ(@!g x26g {ߣ0$bߢ8@g {(߂Hg0dBg xfwP0ަߙ8ߤ0A:(%0 fߢ(Tf(fwPP߂Hg0dBp%Xߢ(U-Gߙ8ߥPߤXA:0 f$g2(߂Hg0dBg xfwPPަߙ8ߤPA:(%0 fߢ(Tfߣ0@ߙ߄Hߙ8ߔHfwPd%g  f0-Eߙ8  %f0-ߙ` $ ߙ(@ߢ߄Hߙ d8$(ߢߓXdPBߑ`$BߕHfs`f14ߙ  %@_ߙ`@%$f$  gߢ@5Tߢ@7ߙ8߄HF(% dHߙx  %@@(%߄Hߙ8 dhߢ0@ߣ` ߙx D߃Hߙep @ %߄Hߙ8@(% dpߢ@߄Hgd % @ߙ` $)ߙ` $ ߙ % g@%߄H(% dXߙxߣ`ߢ @ g߄Hd % ߢ(@gf߄Hd@߄Hߙ`gdg94߄HE dߢ@e%Pߙ8߄Hd ߢ߄H d߄H(%ߙ8d 0?ߙ8@0% (% @ %ߙ % g0@%0%$@% g0@ߢ8@ߙ8߄HEd ߗHf$B߂Xd^0ߙ  %@ $ߙP$g9|  %ߙ % g@%"0B?C'ߙ8% 0%$@% g@ߵߢ@ߙ D(ߙ @ %ߙ  @ %ߙ @%ߙ @ %ߙ  @ %ߙ8`0%@(% fߙ % g@%߄H$$ d`߄HߙߓHd%fs8 $EB$Bb*@$BB-B2#b0B@&",CD` ߙ8<>b-B\-@߆H߅Hdƍd f&14ߢ߆HdƎ(%߆H߅HdƎd(߆H߅HdƎ@dX߆H߅HdƎhd߆H߅HdƎd߆H߅HdƎd߆H߅HdƎd߆H߅HdƏ d8߆H߅HdƏHdp߆H߅HdƏd߆H߅HdƏd߆H߅HdƐd0߆H߅HdƐPdp߆H߅HdƐd߆H߅HdƐd߆H߅HdƑd0߆H߅HdƑHd߆H߅HdƑd߆H߅HdƑd߆H߅Hdƒ0d`߆H߅Hdƒd߆H߅Hdƒd߆H߅Hdƒd߆H߅HdƓd߆H߅HdƓ0~d@߆H߅HdƓPydp߆H߅HdƓtd߆H߅HdƓod߆H߅HdƓjd ߆H߅HdƔ0ed`߆H߅HdƔx`d߆H߅HdƔ[d߆H߅HdƕVd ߆H߅Hdƕ8Qd`߆H߅HdƕxLd߆H߅HdƕGd߆H߅HdƖBd ߆H߅HdƖ0=dH߆H߅HdƖX8dp߆H߅HdƖ3d߆H߅HdƖ.d߆H߅HdƖ)d߆H߅HdƗ0$d`߆H߅HdƗpd߆H߅HdƗd߆H߅HdƗd߆H߅HdƘ0dP߆H߅HdƘ` d߆H߅HdƘd߆H߅Hdƙd(߆H߅Hdƙ@dp߆H߅Hdƙd߆H߅Hdƙd߆H߅Hdƚd@߆H߅HdƚPdx߆H߅Hdƚd߆H߅Hdƚd߆H߅Hdƛ d8߆H߅HdƛHd`߆H߅Hdƛxd߆H߅Hdƛd߆H߅Hdƛd߆H߅HdƜd(߆H߅HdƜ8d`߆H߅HdƜd߆H߅HdƜd߆H߅HdƜd(߆H߅HdƝ8dP߄Hߙ dhߢ߄HJIHG FEJߙ8IHGF E dx߰ ߢ@ߙ8߄HE dxߢ@ߙ߄H dߢ@ߙ߄H dߢ@߄HdQBߔH$B<&s?fg0ߙ  %@$ߢ X@ߙ8߄HE dpߢHߣ Bb߿(ߙ "S$Cߙߙ  %8% 0%$ @%  %@ߢX@#ߙ8߄HP d2@2߄Hߙ8 d2@2߄Hߙ8 d2@ߙ8߄H d2ߙ`߄Hߙ8 d ߙ` $ ߢ`@iߙ8߄HP d(2@2߄Hߙ8 d82@2߄Hߙ8 dH2@2߄Hߙ8 dP2@2߄Hߙ8 dX2@2 ߄Hߙ8 d`2 @2@߄Hߙ8 dh2@@2߄Hߙ8 dp2@2߄Hߙ8 dx2@2߄Hߙ8 d2@2߄Hߙ8 d2@2߄Hߙ8 d2@2߄Hߙ8 d2@ߙ8߄H d2 ߙ`߄Hߙ8 dߙ` $ ߢh@ߙ8߄HE dߢp@ߙ8߄HE dߢ8@ߙ߄H dߢ@@ߙ߄H dߢH@ߙ߄H dߢP@ߙ߄H dߢx@ߙ߄H d(ߢ@ߙ߄H d@ߙ % g@%|dX߾ ߼߷߶ߵߴ ߳ ߲ ߱ ߰ $g0g <-g߇Xߙ 0%%d$ ( g@ߣcߣ `$ߣ(`$߿(߼ ߰g0$<gܣ4B8 0 <ܑ0-b$   8 ( gf2@2g%ߙܴܵ % (%<dcB@CD-P$%`N<ߙ  %ߙ$(%` % @%߆Hߙ0dƠ$` % 8%߄H`(%dߙ8 ߙ(% @ %ߙh(%@ % @%ߙ@%@8%0%$M ` %ߢ@3ߣ`1ߙHDg( (%ߣ@#ߙ8߄Hf(%d %$$a,%@8$$g߄Hߙ8 dkC/T/dB@F߄Hd0(߄Hed ߤX߰ߙ@ ߄Hߙ8@(%dDߙHg( (%߄H(%dߙ8 $*cߐP$q߄H߄Hd(ߙ8 ߢ$BC=,C`ߙ`ߣ@g9H dߥ߄Hߙ8@0%d dpߢ@߄HEߙ8 d߄HdP$C.ߢ߄Hߙ8 d0 d߄Hߙ8@(% dߙ` $ ߂0ߙ D߿ 8߼ 0ߵ (ߴ ߳ ߲ ߱ ߰ $g @ߢߙ`Eߢg9H D߄Hߙ8@0% dߙ`g9H D߄Hߙ8@(% dߢߤ`f<ߢg%Q @߂0ߤh% (%@߂0P߄Hߙ dXߙx  %߄Hߙ8@8%0% (% dh ` `@ ߙؓ@߄Hd ߄Hd@߂0@߂0߄Hߙdߥgߙd  %߄H(%dߙ8 ߥߙd  %߄H(%d@7 ߄H@(%9d@/ߢ@߄HEߙ8dgܢ 0<- ܓ08(g8@"%%d*`!߿8߼0ߴ(߳ ߲߱߰$g@ D-cBb%  @ %f1b*@ߔP%%f(e-ceedB<(-d0ܢ8ܤHDܢ@C%(*g<-gܰ߅HߙdH  %@߅HߙdX  %@߅Hߙd  %@ ߅Hߙd`  %@߅Hߙdp  %@%%߂XdB ߿߼߰g ߂XdB @߂XdB $E$@.g<-g%(%߄Pߙ8 d^@$ *@$$߅H߅Hdx߄Hߙ8 d߿߼߰g $߅Hd߅Hd߅Hdg0<-gL ߓHߒH(8%%$%$fRXfs#-c2 d$`&e'$ߙ8 ` %ߙ8(% @ %(%%&$M@ߙ`߄Hߙ8 dXߙ` $ ߿8߼0ߴ(߳ ߲߱߰g@ߙ` $ @ߙ`(%$ $-(%g@<-g0(ߕHߔH8 H%%%%ffh$ߙxq -F(% &1fߙx߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gPP-F(% &1fgP<-gP0ߔHH@8( X%%%g f$$ߙ$: @ %@@%@dQߙ0%(% @ % ,C` p- bf %$*#$߿X߼P߷H߶@ߵ8ߴ0߳(߲ ߱߰g`g0<-8(  gP$߿8߼0߳(߲ ߱%߰g@ߙp%g` % %@ @%߂`߄PߙEdb $߿8$"ߙ`8%$$ @ %@߂8߃HC߂@@$|gP<-XH@80( gp$߿X߼PߴH߳@߲8߰( %߱0g`ߙp%g %% %@ ߙ߂`߄PߙEdb $߿X8%$$@ % &q@@*"@#߅Hߙ d@$ߙPf߅Hߙ d@ߙP g@ %ߢB@ߙP ߙg$$6@ % @&1 ߂8߃HC߂@@ g@ %ߢB@$ߙP ߙg$$)@ % A$|&q*"@f߅HgP<-(XH@80(g@ $߿X߼PߴH߳@߲8߱0%߰(g`ߙp%g %% %@ ߄H߂`߄PEdbߙ $߿Xߙ% dX@@%$ߙ0% g@%ߢ@ B@$߂`߄HEd$bߙ8%$$ @ %@ ߙg $$@ % A߿X$|gP<-(XH@80(g0@ $߿X߼PߴH߳@߲8߱0%߰(g`ߙp%g %% %@ ߄H߂`߄PEdbߙ $߿Xߙ% d`@@%$ߙ0% g@%ߢ@ B@$߂`߄HEd$bߙ8%$$ @ %@ ߙg$$@ % A߿X$|g`X<$-.hPH@80(g@$߿h߼`߶XߵPߴH߳@߲8߱0%߰(gpߙp%g %% %@ ߙ߂`߄PEߙdb $8%$$ @ %@%߄Hߙ% dp@@%5߅Pߙd[0  %@ ߅Pߙd[@ % $@߄Pߙ8(%d[%ߙg8%$$@ % A$|$bߙ߄Pߙ dm$0% gߙ8%$$@ % A߿h$|%g@<-gߙH( 80% %ߙX z$d `@@%@%gߙ$: @ %@@%@dPߙ$(% @ %ߣc` ,c` ߙbfdBb%ߙ % %߿H߼@ߵ8ߴ0߳(߲ ߰ %߱gPg<-, g@ 8%߃X<>dcC-B@ ߿ߐX߆HߙdƩ$d f)$B,BeLf)߿߼߰g (@$ $$$/!$( @$$$@,cG`(>$``4$x*`<$$e0!,B.i@$c$ !$p@g0<-gߓH( 8%%%fs $ $@%Q*@ ߿8߼0ߵ(ߴ ߲߳߱߰g@P-E$,B^@ $\ ߙ8 %ߙ` fߙ8$  ` %g<-g$߿߾߼߷߶ߵߴ߲߳߰ %߱g %$%ߙ%%g($   %q$#`ߢ(B@   %."@^$"$ Q!$B g@%$ ߓXޢfsH%`%ߙߥ d@R$<>xr-."-@Q$߅Hߙgp$Pd % gH߅Hߙ %$$d <$C$ e$u%$(+$cP<>+`g $BFf .1 {%%Q!&1J.1 $B$B$ &RBfs$."@%$ ``%& e@%ߗXޢf%ߙߥ @8$<ߢ>8S-b,C`4߃Hdcb-B\-@%$ (+$c<>+`g $BFf g0%$0+$c<>+`eg $BGd b Q!&sbf%%@&S$"ޤ@ ߙgp$  (%ߣpc`$`%ߢ@3߿$@%%$$ &S$C` $"ޤ@ߙ$  (%ߣpc`$C`&S%%ߢ@%ߢŬR$^%<>dBC-Q<&1<>dBC-Qp4&1<>dBC-Q,&1Fg0<-gߙ(g @8%%$$&8  %@ ߙ"@8%$$" % A ߙ$|߿8߼0߲(߱ ߰g@"@8%$$ % @$"C3$C2@ ߙ@8%$$' % @$|" @ ߙ@8%$$ % @$|"@ ߙ@8%$$# % @$|"@ ߙ@8%$$ % @%ӯ "$ +@ߙ @8%$$' %$ g<-g@,ߙ8@(%߃H0%xdc C-B@ ߄H@(% d(߿߼g߄H d`߿g<-,g@%0%߂HdBxC-B\-@߅Hd߄Hߙ8 d߿߼g߅Hd߅Hd߅Hd߅Hd߅Hd߅Hd߅Hd߅Hdg<-g(%%߄Hߙ8 dH2@2߄Hߙ d`2@Yߙ߄Hdp 0B@Tߙ߄Hd 2@2 ߄Hߙ d2 @2@߄Hߙ d2@@2߄Hߙ d2@߄Hߙ d0B@;ߙ߄Hd( 2@2߄Hߙ d2@6ߙ߄Hd 2@2ߙ߄Hd 2@@ߙ߄H d߿߄Hߙ d ߿߼߰g ߄Hdx$C$߄HdC2߄Hd$C $߄Hd8߄Hdh߄Hd߄HdC߄HdPg (  <0B-C%g~%@23߄Hߙ8@(% d@ߒPߙ8`5fR t2"@߄H d`߿(߼ ߳߱ %@%߲߰ g0߄H d@%  %2"@ߙ߄Hd ߄H(0ߙ8d d߄Hd(ߙ ߿(߼ ߲߳߱߰g0߄Hd߄H d@%  %߄HdXg@<-g}P%%(%߄Hߙ8dH80(  ߄Hߙ8 d2$Cߙ$C$C߄Hd ߄Hߙ8 d2$2$`ߓHfsC-S-C`%߄Hߙd 2@2 ߄Hߙ d`2 @2@߄Hߙ dh2@@2߄Hߙ d2@2߄Hߙ d2@2߄Hߙ d2@<߄Hߙ d<P$@<߄Hߙ d<P$@< ߄Hߙ d< P$@<@߄Hߙ d<@P$@<߄Hߙ d<P$@< ߄Hߙ d < P$@߄Hߙ dH߄Hߙdp ߕH#"8C%0BߓHB%ߖH2R$ffsߙ8(%  %@$BR0B$Cߙ$C$C߄H߄Hd &$ ߄H#"8C%*0Bߙ8(%0d ߓH߄Hߙd ߔH#"8C%0BB%ߖH2R$fsfߙ8(% f@$BR0B$Cߙ$C$Cfį߄Hd &$ ߙ8#"8C%*0B߄H(%0d0 2 m߅H߅Pdw߄Hߙ8 d߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gP߄Hd߄Hd߄Hd،E$ߒPCfF $Ff0$Bb$`$ ߙ$ 2߄Hd߄PdZ߄Hd ߄HfR @% d8$$`߄H@%d@C-b- e߄He @% dH߄He@% dP߄He@% dXߙ` $ RdP` %NfĬ` % %dg<-gwx%%%%@ %ߐPfwP߄Hߙ8(%dH ߓHEߙ8 fdhEߙ8 fdhEߙ8 fdh߄Pߙ dqB0B@ߙ8߄H(% dpB0B@ߙ8߄H(% dB0B@ߙ8߄H(% dF00ߙ8߄H(% dF1B0ߙ8߄H(% dF20ߙ8߄H(% dF20ߙ8߄H(% dHF30ߙ8߄H(% dxB0B@ߙ8߄H(% dB0B@ߙ8߄H(% dB0B@ߙ8߄H(% dB0B@ߙ8߄H(% dЖB0B @ߙ8߄H(% dB0B@@ߙ8߄H(% dB0B@ߙ8߄H(% dB0B@ߙ8߄H(% d8B0B@ߙ8߄H(% dPF20ߙ8߄H(% d`B0B @ߙ8߄H(% dB0B@@ߙ8߄H(% dBAߙ8߄H(% dЖB0B@ߙ8߄H(% dB0B@ߙ8߄H(% d B0B@ߙ8߄H(% d0B0B@ߙ8߄H(% d@B0B@ߙ8߄H(% d`B0B @ߙ8߄H(% dB0B@@߄Hߙ8(% dF10߄Hߙ8(% dB0B@߄Hߙ8(% dЖB0B@ߙ8߄H(% dB0B@߄Hߙ8(% d߄Hߙ8ߓH(%d@$fsh $ 2-ߙ8E` % fRT2-߄Pߙ dq"0B@߄Hߙ8(% d`"0B@߄Hߙ8(% dx"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d"0B @߄Hߙ8(% dȖ"0B@@߄Hߙ8(% d&0߄Hߙ8(% d"0B@߄Hߙ8$(% d "0B @߄Hߙ8(% d8"0B@@߄Hߙ8(% dX&10߄Hߙ8(% d"0B@߄Hߙ8(% d"0B@߄Hߙ8(% dЖ"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d"0B @߄Hߙ8(% d"0B@@߄Hߙ8(% d0"A߄Hߙ8(% d&0߄Hߙ8(% dP"0B@$߄Hߙ8(% dp&00߄Hߙ8(% d"0B @߄Hߙ8$(% d"0B@@߄Hߙ8(% dؖ"0B@߄Hߙ8(% d"0B@߄Hߙ8(% dؖ"0B@߄Hߙ8(% d&20߄Hߙ8(% d&3z߄Hߙ8(% d@&0߄Hߙ8(% dh&00߄Hߙ8(% d"0B@@߄Hߙ8(% d"0B@߄Hߙ8(% d "0B@߄Hߙ8(% d"0B@߄Hߙ8(% dؖ"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d"0B @߄Hߙ8(% d "0B@@߄Hߙ8(% d"A߄Hߙ8(% dH"0B@߄Hߙ8(% dh"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d&00߄Hߙ8(% dЖ"0B@@߄Hߙ8(% d"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d@"0B@߄Hߙ8(% dh"0B@߄Hߙ8(% d"0B@߄Hߙ8(% d"0B @߄Hߙ8(% d&3߄Hߙ8(% d" 0B@߄Hߙ8(% d " 0B@߄Hߙ8(% dȖ" 0B@߄Hߙ8(% dP" 0B@߄Hߙ8(% dh" 0B@߄Hߙ8(% d" 0B @߃H߄Hߙ8(% d߃H%dc ߃H%dc(߃Hdc0߃Hdc@`߃Hdc`h$p$rߣ gpxߣ(ߣ0dC d-c$d$dD`78U+`SfRߣr-gxb-߂Hߦ`dBX߂HdB8@߂HdBPH߂HdBPߢߙ8GߤX(% %Sߙ8ߤ@@'(%S% 2s$b>(xߙ ߤP$ߢߦh@2fRfߢ8$C+@ߢT-#߿"AߑH߄Hߙ8(%dh% f10V*@-ߙ` $ ߿߾߼߷߶ߵߴ߲߳߱߰gߐP*fw$ߤHߙ8 d$Eߙ8  %fg@<-ggx( ߒPߑP8$Bߔ00Hd $f1[xfR[ߙ   %@ ߿H߼@ߴ8߳0߲(߱ ߰gP`ߙ8  %%0? %ߙ8@(% @ %ߙ % g @%g0<-gf%%(%߄Hߙ8( ߕHߔHd8%ff %߄Pߙ dl߿8߼0ߵ(ߴ ߲߳߱߰g@2@p-ߙ8 (%  %p-ߙ8E % fg@<-geߙ0$H8( % @[ߙ % @%@@%$ ߙ8  % ߿H߼@߳8߲0߱(߰ gP߅Hߙ@d @ %ߙX%$ H%@%@8%0%(%  %߇Hߙd磀$$ %$| @ (%ߙ( @ %A߆P ߙ  %ߙ8ߙg `8%$ %$ ߇Xߙ`@%$$  %߇`ߙg$(%  % @ߙ(@Ꮲ߯ (% @ % $g<-gdߙd $F߿߼gg<-gcߙ8% 0%߿߼g(@!g<- gc%߅Hߙ d@ $ߙ$  %߂P߃8dBMxb߂@@%߿߼߰g $g<-gcߙg $߿߼g $$BC$<> - /gH<-gb߂ߙB(%$ %gxXP80( @(08@HPX`h pߙ$ (%g %ߙ$ (%g %ߙ$ (%g  %ߙ$ (%g  %߂H dB߂HdB߂Hph`XP@H8%%%( 0xߣC*@Kߙ` ߙhgx g8@$ߙpg  gH@$@ߙpg gX@$ߢXߙpg  gh@ߢX@ߢhߢP@ߢߢ`@$ߢ@߅Hߙd @ %@@%߅Hߙߤ d@߅Hߙߤ d@u$ߗx4Z%  %@t@%b$|ߣb-Wߥ  %@ ߙߢ@`$g0gx$fߥ  %@ ߢߢ@P$g0g8x$ߙdE  %@ ߅Hߢ @@$g8gX$ ߙd  %@ ߅Hߢ(@0$g8g$(ߙd  %@ ߅H!$g@g$ߙd  %@ ߅H`$g @gx$ߙd  %@ ߅H$gg H$ߙd  %@ ߅H@$ggH$ߙd   %@ ߅H$gg H$ߙd0  %@$߅Hߙd8  %@$߅Hߙd@  %@$߅HߙdH  %@$߅HߙdP  %@$߅Hߙd`  %@$߅Hߙdh  %@$߅Hߙdp  %@$߅Hߙd  %@$߅Hߙd  %@$&",C`߃H<>dcb-B\-@ߙP % g @%ߢ B@ߙ߂HEx  %@ߙ0߂HE  %@|ߤ0ߢ0CߙH$bߢx(%C- % ߙ @ %ߣbߙp0%g   %ߣ c`b,C``ߣ8ߥ8c$dߤ-bߢ@B(Cd`Sߤ@$Cߣb-WߢB(Cd`Gߤ$CߣHߙp %0% g ߤ 8@%,B@+${p$P$X$`$h$$$$$$ߙhg g(@Y$߃ߤc߿Xߙ @q$%$ߢ@ߢ @% 4 ߣ`ߢPC%ߣC%ߣC%@Kߢ%4  %@w@%ߢ@ߢ ߙg$  %ߢ @ߙgX$  %ߙg($$  %ߢPߙgH$$  %ߢP@ߢ`ߙ$$  %ߢ`@ߢߙ$$  %ߢ@ߢߙ2&$  %ߢ@wߙ$  %0ߙ (%ߢ@ߢ(@ߙx` @ ߣhߢXC%ߣC%ߣC%@Jߙx4  %@@%ߢ@ߢ(ߙg8$  %ߢ(@ߙg$  %`ߙg8$$  %@ߢXߙgX$$  %ߢX@ߢhߙ$$  %ߢh@ߢߙ$$  %ߢ@ߢߙ2&$  %ߢ@wߙ$  %0ߙ (%ߢߣC%@"ߙx4  %@@%ߢߙgh$$  %ߢ@ߢߙ2&$  %ߢ@wߙ$  %0ߙ @(%0ߙ (%%߾P߼H߷@߶8ߵ0ߴ(߳ ߲߱߰g`g < -ܐ0gVHߙf %(%  ߙh %(% @%ߙ 0%@%@8%$Mg %ߢߙHD (%߄Hߙ8(% dߦ ߇X߂`߄HEdߙ ߿ ߼ ߱ ߰ $g ߙ d($  g@ߢ ߂`߄PEdsh@ Eߢ0@J߆P߆HdƼ߄Hߙ8 dߢ(@߄Hߙ8E dߤ8ߙ@ ߄Hߙ8@(% d(ߤ@ߙ@ ߄Hߙ8@(% dHߤHߙ@ ߄Hߙ8@(% dhߤPߙ@ ߄Hߙ8@(% dߤpߙ@ ߄Hߙ8@(% dߤXߙ@ ߄H@(%ߙ8ddwg<-gS߇Xߙ 0%%dp$ % @ ߙ߆H$ddƾ  %߿߼߱߰gߢ(@H$ @߆H$ddƾ0 %@ 8"-ߢ@ ߆Hߙ0(/G %dƾP dd-ߢ0@ ߆Hߙ0(/G %dƾX dd-ߢ@߆Hߙ0(/ %dƾh dd-ߢ@@߆Hߙ0(/ %dƾp dd-ߢH@߆Hߙ0(/ %dƾx dd-ߢP@߆Hߙ0(/ %dƾ dd-ߢ@߆Hߙ0(/ %dƾ dd-ߢ@߆Hߙ0(/ %dƾ dd-ߢ@߆Hߙ0(/ %dƾ dd-ߢ@߆Hߙ0(/ %dƾ dd-ߢ@߆Hߙ0(/ %dƾ dd-ߢ@߆Hߙ0(/ %dƾ dd-ߢ @߆Hߙ0(/ %dƾ dd-ߢ8@ ߆Hߙ0(/G %dƾ dd-ߢh@ ߆Hߙ0(/G %dƾ dd-ߢp@ ߆Hߙ0(/G %dƾ dd-ߢx@ ߆Hߙ0(/G %dƿ dd-ߢ@ ߆Hߙ0(/G %dƿ dd-ߢ@ ߆Hߙ0(/G %dƿ  dd-ߢ@ ߆Hߙ0(/G %dƿ0 dd-ߢ@ ߆Hߙ0(/G %dƿ@ dd-ߢ@ ߆Hߙ0(/G %dƿP dd-ߢ@߆H0(/Gߙdƿ`dd  %ߢ@߆HH߆H$ddƾ@  %"-ߙx% d]ߙx% d\ߙx% d[ߙx% dZߙx% dYߙx% dXߙx% dVߙx% dUߙx% dTߙx% dSߙx% dRߙx% dQߙx% dNߙx% dMߙx% dLߙx% dKߙx% dJߙx% dIߙx% dHߙx% dGߙx% dFߙx% dEߙx% dDߙx% dCߙx% dBߙx% dAߙx% d@ߙx% d?ߙx% d>ߙx% d=ߙx% d<ߙx% d;ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dg߼߿g 20 MHz (no HT)20 MHz40 MHz80 MHz80+80 MHz160 MHz5 MHz10 MHz320 MHzunknownthe wireless core upon initializationa usera drivera country IEBUG%u:%u-%u%u:%u,%u,%u,%u,%u,%u,%u,%u,%u,%u,%u,%u%u:%u,%u,%u,%u,%u,%u,%u,%u,%u,%u-qoffactivelightdeep-u-bshortlongautoalllimitmemory_limitquantumauthopenshared, %s%d milliseconds%d TUs%u milliseconds%d secondsundefined%d dBmInvalid parameter: %s %s (%d) ACTIVELIGHT SLEEPDEEP SLEEPUNKNOWNPossible mesh parameters are: - %s Could not find the parameter %s. DEST ADDR NEXT HOP IFACE SN METRIC QLEN EXPTIME DTIM DRET FLAGS HOP_COUNT PATH_CHANGEDEST ADDR PROXY NODE IFACE %s: NO HTHT20HT40-HT40+channel %d (%d MHz), width: %s, center1: %d MHz, center2: %d MHz, punctured: 0x%x phy dev wdev %s %.*s Usage: %s [options] command Options: --debug enable netlink debugging --version show version (%s) Commands: Commands that use the netdev ('dev') can also be given the 'wdev' instead to identify the device. You can omit the 'phy' or 'dev' if the identification is unique, e.g. "iw wlan0 info" or "iw phy0 info". (Don't when scripting.) Do NOT screenscrape this tool, we don't consider its output stable. * primary channel: %d * secondary channel offset: %s * STA channel width: %s 20 or 40 MHz * channel width: %d (%s) * center freq segment 1: %d * center freq segment 2: %d * VHT basic MCS set: 0x%.2x%.2x * station count: %d * channel utilisation: %d/255 * available admission capacity: %d [*32us] * malformed capability * Group capa: 0x%.2x, Device capa: 0x%.2x * malformed device info * Unknown TLV (%#.2x, %d bytes): %.2x * bogus tail data (%d): DGAF: %i Unexpected length: %i HWSIM PS: %d nl80211 features: 0x%x * split wiphy dump%s %s %s Power save: %s configregulatorymlmevendornaninvalid mac address invalid destination mac address next_hopinvalid next hop mac address not a valid ISO/IEC 3166-1 alpha2 Special non-alpha2 usable entries: 00 World Regulatory domain failed to allocate netlink callbacks -f-t-T-rusableavailableunavailableBand %d: * %d MHz [%d] (disabled) Maximum TX power: %.1f dBm No IR Passive scan No IBSS Radar detection Channel widths: 20MHz HT40- HT40+ VHT80 VHT160 DFS state: %s (for %lu sec) DFS CAC time: %u ms (self-managed)DFS-UNSETDFS-FCCDFS-ETSIDFS-JPDFS-invalidNo alpha2No reg rulesphy#%d%s globalcountry %c%c: %s (%d - %d @ %d), (N/A, %d), (%u ms), (N/A)NO-OFDM, %sNO-CCKNO-INDOORNO-OUTDOORDFSPTP-ONLYAUTO-BWIR-CONCURRENTNO-HT40MINUSNO-HT40PLUSNO-80MHZNO-160MHZNO-HENO-320MHZ, NO-IRPASSIVE-SCANNO-IBSSfixed-freqbeacon-intervalbasic-rates,mcast-ratemumimo-groupidInvalid groupID: %s %2xFailed reading groupID mumimo-follow-macInvalid MAC address typeadhocibssocbmonitormasterapYou need to run a management daemon, e.g. hostapd, see http://wireless.kernel.org/en/users/Documentation/hostapd for more information on how to do that. __ap__ap_vlanwdsmanagedmgdstationmpmesh__p2pcl__p2pdev__p2pgo__naninvalid interface type %s mesh_idaddr4addr4addr error flagsflags error radiosInvalid radio list failed to allocate flags unknown flag %s BSSID: %s SSID: Band Info: %u Channel Info: %u /sys/class/ieee80211/%s/index/var/run/netns%s/%sInvalid parameter: pid(%s) nameInvalid parameter: nsname(%s) [%s%d] ERROR: received positive netlink error code %d kernel reports: %*s failed to allocate netlink message building message failed -wconnectestablishfeaturesNot connected.MLD %s stats: linkget_bssget_staregdumptriggerscan aborted!KEY_IDX missing! ATTR_KEY_DATA missing! KeyATTR_KEY_SEQ missing! Key seqUse group cipher suiteWEP-40TKIPCCMPWEP-104%.02x-%.02x-%.02x:%dAES-128-CMACNO-GROUPGCMP Vendor specific: data: MS/WiFi %#.2x, data: WFA %#.2x, data: Vendor specific: OUI %.2x:%.2x:%.2x, data: Extension IE: Unknown Extension ID (%d): Unknown IE (%d):fixedMissing TX power level argument.frameinvalid frame pattern: %p freqieslowpriflushap-forcecolocduration-mandatoryrandomiserandomizessidpassivemeshidduration * Version: %d * Group cipher: %s * Pairwise ciphers: %s * Group cipher: * Pairwise ciphers: * Authentication suites: %s * Authentication suites:IEEE 802.1XPSKFT/IEEE 802.1XFT/PSKIEEE 802.1X/SHA-256PSK/SHA-256TDLS/TPKSAEFT/SAEIEEE 802.1X/SUITE-BIEEE 802.1X/SUITE-B-192FT/IEEE 802.1X/SHA-384FILS/SHA-256FILS/SHA-384FT/FILS/SHA-256FT/FILS/SHA-384OWEOSENDPP * Capabilities: PreAuth NoPairwise 1-PTKSA-RC 2-PTKSA-RC 4-PTKSA-RC 16-PTKSA-RC 1-GTKSA-RC 2-GTKSA-RC 4-GTKSA-RC 16-GTKSA-RC MFP-required MFP-capable Peerkey-enabled SPP-AMSDU-capable SPP-AMSDU-required Extended-Key-ID (0x%.4x) * %d PMKIDs * Group mgmt cipher suite: * bogus tail data (%d): %u:%dMust specify a value for %s. %s must be set to active, light or deep. %s must be set to a number between 0 and %u dtim-periodvendor_syncTIDfailed to parse nested TXQ stats attributes! %s %s qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets %s %uyesnosta stats missing! failed to parse nested attributes! Station %s (on %s) inactive time: %u ms rx bytes: %llu rx bytes: %u rx packets: %u tx bytes: %llu tx bytes: %u tx packets: %u tx retries: %u tx failed: %u beacon loss: %u beacon rx: %llu rx drop misc: %llu signal: %d %sdBm signal avg: %d %sdBm beacon signal avg: %d dBm Toffset: %llu us tx bitrate: %s tx duration: %lld us rx bitrate: %s rx duration: %lld us last ack signal:%d dBm avg ack signal: %d dBm airtime weight: %d expected throughput: %u.%uMbps mesh llid: %d mesh plid: %dLISTENOPN_SNTOPN_RCVDCNF_RCVDESTABHOLDINGBLOCKED mesh plink: %s mesh airtime link metric: %d mesh connected to gate: %s mesh connected to auth server: %s mesh local PS mode: mesh peer PS mode: mesh non-peer PS mode: authorized: authenticated: associated: preamble: WMM/WME: MFP: TDLS peer: -v MSDU: TID rx tx tx retries tx failedfailed to parse nested stats attributes! %d %llu %llu TXQs:%sfailed to parse nested bss param attributes! DTIM period: %u beacon interval:%u CTS protection: yes no short preamble: short slot time: connected time: %u seconds associated at [boottime]: %llu.%.3llus associated at: %llu ms current time: %llu ms bss info missing! BSS %s(on %s) -- authenticated -- associated -- joined -- unknown status: %d last seen: %llu.%.3llus [boottime] TSF: %llu usec (%llud, %.2lld:%.2llu:%.2llu) freq: %d.%d freq: %d beacon interval: %d TUs capability: ESS IBSS signal: %d.%.2d dBm signal: %d/100 last seen: %d ms ago Information elements from Probe Response frame: Information elements from Beacon frame:Packet limit: %u pkts Memory limit: %u bytes Quantum: %u bytes Number of queues: %u Backlog: %u pkts Memory usage: %u bytes Packet limit overflows: %u Memory limit overflows: %u Hash collisions: %u mpath info missing! %s %s %s %u 0x%x%s = !! inconsistent MLD address information (%s) Connected to %s (on %s) Link %d BSSID %s Authenticated with %s (on %s) Joined IBSS %s (on %s) %sfreq: %d.%d RX: %u bytes (%u packets) TX: %u bytes (%u packets) signal: %d dBm rx bitrate: %s tx bitrate: %s failed to parse nested bss parameters! bss flags: CTS-protection%sshort-preamble%sshort-slot-time dtim period: %d beacon int: %dphy#%d %sInterface %s %sUnnamed/non-netdev interface %s ifindex %d %s wdev 0x%llx %s addr %s %s ssid %s type %s %s wiphy %d %s %s txpower %d.%.2d dBm %s multicast TXQ:%s %s 4addr: on %s MLD with links: %s - link ID %2d link addr %s %s %s Radios:, STA/AP BI must match %svalid interface combinations: %s * #{ } <= %u, %s total <= %d, #channels <= %d%s, radar detect widths: {%s %s } %sinterface combinations are not supported Wiphy %s wiphy index: %u Band %d: HE Iftypes: EHT Iftypes: 0-78-910-1112-13%s EHT MAC Capabilities (0x%02x%s NSEP priority access Supported %s EHT OM Control Supported %s Triggered TXOP Sharing Supported %s ARR Supported %s EHT PHY Capabilities: (0x%s 320MHz in 6GHz Supported %s 242-tone RU in BW wider than 20MHz Supported %s NDP With EHT-LTF And 3.2 µs GI %s Partial Bandwidth UL MU-MIMO %s SU Beamformer %s SU Beamformee %s Beamformee SS (80MHz): %d %s Beamformee SS (160MHz): %d %s Beamformee SS (320MHz): %d %s Number Of Sounding Dimensions (80MHz): %d %s Number Of Sounding Dimensions (160MHz): %d %s Number Of Sounding Dimensions (320MHz): %d %s Ng = 16 SU Feedback %s Ng = 16 MU Feedback %s Codebook size (4, 2) SU Feedback %s Codebook size (7, 5) MU Feedback %s Triggered SU Beamforming Feedback %s Triggered MU Beamforming Partial BW Feedback %s Triggered CQI Feedback %s Partial Bandwidth DL MU-MIMO %s PSR-Based SR Support %s Power Boost Factor Support %s EHT MU PPDU With 4 EHT-LTF And 0.8 µs GI %s Max Nc: %d %s Non-Triggered CQI Feedback %s Tx 1024-QAM And 4096-QAM < 242-tone RU %s Rx 1024-QAM And 4096-QAM < 242-tone RU %s PPE Thresholds Present %s Common Nominal Packet Padding: %d %s Maximum Number Of Supported EHT-LTFs: %d %s Support of MCS 15: %d %s Support Of EHT DUP In 6 GHz %s Support For 20MHz Rx NDP With Wider Bandwidth %s Non-OFDMA UL MU-MIMO (80MHz) %s Non-OFDMA UL MU-MIMO (160MHz) %s Non-OFDMA UL MU-MIMO (320MHz) %s MU Beamformer (80MHz) %s MU Beamformer (160MHz) %s MU Beamformer (320MHz) %s EHT MCS/NSS: (0x%s EHT bw=20 MHz, max NSS for MCS %s: Rx=%u, Tx=%u %s EHT bw <= 80 MHz, max NSS for MCS %s: Rx=%u, Tx=%u %s EHT bw=160 MHz, max NSS for MCS %s: Rx=%u, Tx=%u %s EHT bw=320 MHz, max NSS for MCS %s: Rx=%u, Tx=%u %s EHT PPE Thresholds 0x%02x Frequencies: * %d.%d MHz * %d MHz [%d] (%.1f dBm)disabledno IRpassive scanno ibssradar detection max # scan SSIDs: %d max scan IEs length: %d bytes max # sched scan SSIDs: %d max # match sets: %d max # scan plans: %d max scan plan interval: %d max scan plan iterations: %d Fragmentation threshold: %d RTS threshold: %d Retry short long limit: %d Retry short limit: %d Retry long limit: %d Coverage class: %d (up to %dm) Available Antennas: TX %#x RX %#x Configured Antennas: TX %#x RX %#x Supported interface modes%s: %s * %s wiphy radio %d: freq range: %.1f MHz - %.1f MHz Device supports roaming. Device supports AP-side u-APSD. HT Capability overrides: * MCS: %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx * maximum A-MSDU length * supported channel width * short GI for 40 MHz * max A-MPDU length exponent * min MPDU start spacing ERROR: capabilities mask is too short, expected: %d, received: %d Device supports T-DLS. Supported extended features:VHT-IBSSVHT_IBSS * [ %s ]: %s RRMMU-MIMO snifferMU_MIMO_AIR_SNIFFERscan start timestampSCAN_START_TIMEBSS last beacon/probe TSFBSS_PARENT_TSFscan dwell settingSET_SCAN_DWELLlegacy beacon rate settingBEACON_RATE_LEGACYHT beacon rate settingBEACON_RATE_HTVHT beacon rate settingBEACON_RATE_VHTSTA FILS (Fast Initial Link Setup)FILS_STArandomized TA while not associatedMGMT_TX_RANDOM_TArandomized TA while associatedMGMT_TX_RANDOM_TA_CONNECTEDsched_scan for BSS with better RSSI reportSCHED_SCAN_RELATIVE_RSSImultiple CQM_RSSI_THOLD recordsCQM_RSSI_LISTFILS shared key authentication offloadFILS_SK_OFFLOAD4-way handshake with PSK in station mode4WAY_HANDSHAKE_STA_PSK4-way handshake with 802.1X in station mode4WAY_HANDSHAKE_STA_1XFILS max channel attribute override with dwell timeFILS_MAX_CHANNEL_TIMEaccepts broadcast probe responseACCEPT_BCAST_PROBE_RESPprobe request TX at high rate (at least 5.5Mbps)OCE_PROBE_REQ_HIGH_TX_RATEprobe request tx deferral and suppressionOCE_PROBE_REQ_DEFERRAL_SUPPRESSIONMFP_OPTIONAL value in ATTR_USE_MFPMFP_OPTIONALlow span scanLOW_SPAN_SCANlow power scanLOW_POWER_SCANhigh accuracy scanHIGH_ACCURACY_SCANDFS offloadDFS_OFFLOADcontrol port over nl80211CONTROL_PORT_OVER_NL80211ack signal level supportACK_SIGNAL_SUPPORTFQ-CoDel-enabled intermediate TXQsTXQSuse random sequence numbers in scansSCAN_RANDOM_SNuse probe request with only rate IEs in scansSCAN_MIN_PREQ_CONTENTcan safely replace PTK 0 when rekeyingCAN_REPLACE_PTK0enable FTM (Fine Time Measurement) responderENABLE_FTM_RESPONDERairtime fairness schedulingAIRTIME_FAIRNESSPMKSA caching supported in AP modeAP_PMKSA_CACHINGband specific RSSI thresholds for scheduled scanSCHED_SCAN_BAND_SPECIFIC_RSSI_THOLDExtended Key ID supportEXT_KEY_IDTX power control per stationSTA_TX_PWRSAE offload supportSAE_OFFLOADVLAN offload supportVLAN_OFFLOADAirtime Queue Limits (AQL)AQLbeacon protection supportBEACON_PROTECTIONdisable pre-auth over nl80211 control port supportCONTROL_PORT_NO_PREAUTHprotected Target Wake Time (TWT) supportPROTECTED_TWTdeletion of IBSS station supportDEL_IBSS_STAmgmt frame registration for multicastMULTICAST_REGISTRATIONSbeacon prot. for clients supportBEACON_PROTECTION_CLIENTscan on kHz frequency supportSCAN_FREQ_KHZtx status for nl80211 control port supportCONTROL_PORT_OVER_NL80211_TX_STATUSOperating Channel Validation (OCV) supportOPERATING_CHANNEL_VALIDATIONAP mode PSK offload support4WAY_HANDSHAKE_AP_PSKAP mode SAE authentication offload supportSAE_OFFLOAD_APFILS discovery frame transmission supportFILS_DISCOVERYunsolicated broadcast probe response transmission supportUNSOL_BCAST_PROBE_RESPHE beacon rate support (AP/mesh)BEACON_RATE_HEsecure LTF measurement protocol supportSECURE_LTFsecure RTT measurement protocol supportSECURE_RTTsupport for MFP in range measurement negotiation/procedurePROT_RANGE_NEGO_AND_MEASUREBSS coloring supportBSS_COLORFILS crypto offloadFILS_CRYPTO_OFFLOADRadar background supportRADAR_BACKGROUNDcan change MAC address while upPOWERED_ADDR_CHANGEpreamble puncturing in AP modePUNCTsecure NAN supportSECURE_NANrandom auth/deauth transmitter addressAUTH_AND_DEAUTH_RANDOM_TAOWE DH element handling offload (client)OWE_OFFLOADOWE DH element handling offload (AP)OWE_OFFLOAD_APDFS channel use under concurrent DFS masterDFS_CONCURRENTSPP A-MSDU supportSPP_AMSDU_SUPPORT Coalesce support: * Maximum %u coalesce rules supported * Each rule contains up to %u patterns of %u-%u bytes, maximum packet offset %u bytes * Maximum supported coalescing delay %u msecs Peer measurement (PMSR) Malformed PMSR Max peers: %d REPORT_AP_TSF RANDOMIZE_MAC_ADDR FTM (Fine time measurement or Flight time measurement) Preambles: LEGACY HT VHT DMG Bandwidth: 20_NOHT 20 40 80 80P80 160 5 10 1 2 4 8 16 320 MAX_BURSTS_EXPONENT: %d MAX_FTMS_PER_BURST: %d ASAP NON_ASAP REQ_LCI REQ_CIVICLOC TRIGGER_BASED NON_TRIGGER_BASED PMSR type is missing Maximum associated stations in AP mode: %u %Y-%m-%d %H:%M:%S[%s.%06lu]: %llu.%06llu: %s (phy #%d): phy #%d: wdev 0x%llx (phy #%d): %s: wdev 0x%llx: regulatory domain change (phy): regulatory domain change: set to %s by %s request on phy%dset to world roaming by %s requestcustom world roaming rules in place on phy%d by %s requestintersection used due to a request made by %sunknown source (upgrade this utility)beacon hint:phy%d %d MHz [%d]: o Initiating radiation enabled o active scan enabled o ibss enablednew station %s del station %s unknown event %d --debug--versioniw version %s helpFailed to allocate netlink socket. Failed to connect to generic netlink. nl80211nl80211 not found. devphywdevUsage: %s [options] command failed: %s (%d) P2PHotSpot 2.0 IndicationHotSpot 2.0 OSENOWE Transition ModeWPAHE capabilitiesSSIDBSS LoadHT capabilitiesRSNHT operationSecondary Channel OffsetMESH IDVHT capabilitiesVHT operationanyno secondaryabove[reserved!]belowmesh_retry_timeoutmesh_confirm_timeoutmesh_holding_timeoutmesh_max_peer_linksmesh_max_retriesmesh_ttlmesh_element_ttlmesh_auto_open_plinksmesh_hwmp_max_preq_retriesmesh_path_refresh_timemesh_min_discovery_timeoutmesh_hwmp_active_path_timeoutmesh_hwmp_preq_min_intervalmesh_hwmp_net_diameter_traversal_timemesh_hwmp_rootmodemesh_hwmp_rann_intervalmesh_gate_announcementsmesh_fwdingmesh_sync_offset_max_neighormesh_rssi_thresholdmesh_hwmp_active_path_to_root_timeoutmesh_hwmp_root_intervalmesh_hwmp_confirmation_intervalmesh_power_modemesh_awake_windowmesh_plink_timeoutmesh_connected_to_gatemesh_nolearnmesh_connected_to_asnonefcsfailplcpfailcontrolotherbsscookplink_actionvlanairtime_weighttxpwr3/41/2x2undef(%s NSS) %d, :%02x%xsubtypereason-codeinvalid vlan id invalid airtime weight Unknown mode (%d)\x%.2x Maximum RX AMPDU length %d bytes (exponent: 0x0%02x) Maximum RX AMPDU length: unrecognized bytes (exponent: %d) No restriction1/4 usec1/2 usec1 usec2 usec4 usec8 usec16 usecBUG (spacing more than 3 bits!) Minimum RX AMPDU time spacing: %s (0x%02x) Capabilities: 0x%02x RX LDPC HT20 HT20/HT40 Static SM Power Save Dynamic SM Power Save SM Power Save disabled RX Greenfield RX HT20 SGI RX HT40 SGI TX STBC No RX STBC RX STBC 1-stream RX STBC 2-streams RX STBC 3-streams HT Delayed Block Ack Max AMSDU length: 3839 bytes Max AMSDU length: 7935 bytes No DSSS/CCK HT40 DSSS/CCK HT40 40 MHz Intolerant L-SIG TXOP protection HT Max RX data rate: %d Mbps HT TX/RX MCS rate indexes supported: HT RX MCS rate indexes supported: TX unequal modulation supported TX unequal modulation not supported HT TX Max spatial streams: %d HT TX MCS rate indexes supported may differ HT TX MCS rate indexes are undefinednot VHT Capabilities (0x%.8x): Max MPDU length: 3895799111454(reserved) Supported Channel Width: neither 160 nor 80+80160 MHz, 80+80 MHz20Mhz40Mhz80Mhz160Mhz80+80Mhz short GI (80 MHz) short GI (160/80+80 MHz) SU Beamformer SU Beamformee MU Beamformer MU Beamformee VHT TXOP PS +HTC-VHT RX antenna pattern consistency TX antenna pattern consistency VHT RX MCS set: %d streams: MCS 0-7MCS 0-8MCS 0-9 VHT RX highest supported: %d Mbps VHT TX MCS set: VHT TX highest supported: %d Mbps VHT extended NSS: %ssupported RX%s HE MAC Capabilities (0x%04x%s +HTC HE Supported %s TWT Requester %s TWT Responder %s Dynamic BA Fragementation Level: %d %s Maximum number of MSDUS Fragments: %d %s Minimum Payload size of 128 bytes: %d %s Trigger Frame MAC Padding Duration: %d %s Multi-TID Aggregation Support: %d %s All Ack %s TRS %s BSR %s Broadcast TWT %s 32-bit BA Bitmap %s MU Cascading %s Ack-Enabled Aggregation %s OM Control %s OFDMA RA %s Maximum A-MPDU Length Exponent: %d %s A-MSDU Fragmentation %s Flexible TWT Scheduling %s RX Control Frame to MultiBSS %s BSRP BQRP A-MPDU Aggregation %s QTP %s BQR %s SRP Responder Role %s NDP Feedback Report %s OPS %s A-MSDU in A-MPDU %s Multi-TID Aggregation TX: %d %s HE Subchannel Selective Transmission %s UL 2x996-Tone RU %s OM Control UL MU Data Disable RX %s HE PHY Capabilities: (0x%s HE40/2.4GHz %s HE40/HE80/5GHz %s HE160/5GHz %s HE160/HE80+80/5GHz %s 242 tone RUs/2.4GHz %s 242 tone RUs/5GHz %s Punctured Preamble RX: %d %s Device Class: %d %s LDPC Coding in Payload %s HE SU PPDU with 1x HE-LTF and 0.8us GI %s Midamble Rx Max NSTS: %d %s NDP with 4x HE-LTF and 3.2us GI %s STBC Tx <= 80MHz %s STBC Rx <= 80MHz %s Doppler Tx %s Doppler Rx %s Full Bandwidth UL MU-MIMO %s DCM Max Constellation: %d %s DCM Max NSS Tx: %d %s DCM Max Constellation Rx: %d %s DCM Max NSS Rx: %d %s Rx HE MU PPDU from Non-AP STA %s MU Beamformer %s Beamformee STS <= 80Mhz: %d %s Beamformee STS > 80Mhz: %d %s Sounding Dimensions <= 80Mhz: %d %s Sounding Dimensions > 80Mhz: %d %s Codebook Size SU Feedback %s Codebook Size MU Feedback %s Triggered MU Beamforming Feedback %s Partial Bandwidth Extended Range %s PPE Threshold Present %s SRP-based SR %s Power Boost Factor ar %s HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI %s Max NC: %d %s STBC Tx > 80MHz %s STBC Rx > 80MHz %s HE ER SU PPDU 4x HE-LTF 0.8us GI %s 20MHz in 40MHz HE PPDU 2.4GHz %s 20MHz in 160/80+80MHz HE PPDU %s 80MHz in 160/80+80MHz HE PPDU %s HE ER SU PPDU 1x HE-LTF 0.8us GI %s Midamble Rx 2x & 1x HE-LTF %s DCM Max BW: %d %s Longer Than 16HE SIG-B OFDM Symbols %s TX 1024-QAM %s RX 1024-QAM %s RX Full BW SU Using HE MU PPDU with Compression SIGB %s RX Full BW SU Using HE MU PPDU with Non-Compression SIGB <= 80160%s HE %s MCS and NSS set %s MHz %s %d streams: MCS 0-%d TX%s PPE Threshold %s: %02x nlctrl--radiolegacy-2.4legacy-5ht-mcs-2.4ht-mcs-5vht-mcs-2.4vht-mcs-5he-mcs-2.4he-mcs-5he-mcs-6sgi-2.4sgi-5lgi-2.4lgi-5he-gi-2.4he-gi-5he-gi-6he-ltf-2.4he-ltf-5he-ltf-60.81.63.2 [in use]Survey data from %s survey data missing! frequency: %u MHz%s noise: %d dBm channel active time: %llu ms channel busy time: %llu ms extension channel busy time: %llu ms channel receive time: %llu ms channel BSS receive time: %llu ms channel transmit time: %llu ms failed to parse nested rate attributes!%d.%d MBit/s(unknown) MCS %d VHT-MCS %d 40MHz 80MHz 80P80MHz 160MHz 320MHz 1MHz 2MHz 4MHz 8MHz 16MHz short GI VHT-NSS %d HE-MCS %d HE-NSS %d HE-GI %d HE-DCM %d HE-RU-ALLOC %d EHT-MCS %d EHT-NSS %d EHT-GI %d EHT-RU-ALLOC %dbitrates[legacy-<2.4|5> *] [ht-mcs-<2.4|5> *] [vht-mcs-<2.4|5> [he-mcs-<2.4|5|6> *] [sgi-2.4|lgi-2.4] [sgi-5|lgi-5] [he-gi-<2.4|5|6> <0.8|1.6|3.2>] [he-ltf-<2.4|5|6> <1|2|4>]Sets up the specified rate masks. Not passing any arguments would clear the existing mask (if any).disconnectDisconnect from the current network.[-w] [] [] [auth open|shared] [key 0:abcde d:1:6162636465] [mfp:req/opt/no]Join the network with the given SSID (and frequency, BSSID). With -w, wait for the connect to finish or fail. [key 0:abcde d:1:6162636465]Authenticate with the given network. event[-t|-T|-r] [-f]Monitor events from the kernel. -t - print timestamp -T - print absolute, human-readable timestamp -r - print relative timestamp -f - print full frame for auth/assoc etc.getpssetpsstopqueueshwsimwakequeuesleaveLeave the current IBSS cell.join [NOHT|HT20|HT40+|HT40-|5MHz|10MHz|80MHz] [fixed-freq] [] [beacon-interval ] [basic-rates ] [mcast-rate ] [key d:0:abcde]Join the IBSS cell with the given SSID, if it doesn't exist create it on the given frequency. When fixed frequency is requested, don't join/create a cell on a different frequency. When a fixed BSSID is requested use that BSSID and do not adopt another cell's BSSID even if it has higher TSF and the same SSID. If an IBSS is created, create it with the specified basic-rates, multicast-rate and beacon-interval.infoShow capabilities for the specified wireless device.listList all wireless devices and their capabilities.add type [mesh_id ] [4addr on|off] [flags *] [addr ] [radios all|[,...]]Add a new virtual interface with the given configuration. Valid interface types are: managed, ibss, monitor, mesh, wds. The flags are only used for monitor interfaces, valid flags are: none: no special flags fcsfail: show frames with FCS errors control: show control frames otherbss: show frames from other BSSes cook: use cooked mode active: use active mode (ACK incoming unicast packets) mumimo-groupid : use MUMIMO according to a group id mumimo-follow-mac : use MUMIMO according to a MAC address The mesh_id is used only for mesh mode.delRemove this virtual interfaceinterfaceShow information for this interface.*Set monitor flags. Valid flags are: none: no special flags fcsfail: show frames with FCS errors control: show control frames otherbss: show frames from other BSSes cook: use cooked mode active: use active mode (ACK incoming unicast packets) mumimo-groupid : use MUMIMO according to a group id mumimo-follow-mac : use MUMIMO according to a MAC addressList all network interfaces for wireless hardware.Set interface type/mode. Valid interface types are: managed, ibss, monitor, mesh, wds.Set interface 4addr (WDS) mode.noack_mapSet the NoAck map for the TIDs. (0x0009 = BE, 0x0006 = BK, 0x0030 = VI, 0x00C0 = VO)mcast_rateSet the multicast bitrate.[command]Print usage for all or a specific command, e.g. "help wowlan" or "help wowlan enable".keyget Retrieve a key and key sequence. Print information about the current connection, if any.mesh_param= [=]*Set mesh parameter (run command without any to see available ones).[]Retrieve mesh parameter (run command without any to see available ones).List all supported mesh parameters [[freq ] [basic-rates ]], [mcast-rate ] [beacon-interval