07070100E8067B000041ED00000000000000000000001069B8AF0D00000000000000080000000100000000000000000000000200000000.07070100E812A4000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000000500000000proc07070100E806A2000041ED00000000000000000000000769B8AF0D00000000000000080000000100000000000000000000000400000000usr07070100E80FED000041ED00000000000000000000000369B8AF0D00000000000000080000000100000000000000000000000C00000000usr/libexec07070100E816CF000081ED00000000000000000000000169B8AF0D00010025000000080000000100000000000000000000001900000000usr/libexec/logread-uboxELF@ 4t4 (4@4@4@@t@t@tp@@p¨@¨@¨@@$$ÿAÿAÿ˜À@À@ÀppdtåQdtåRÿAÿAÿøø/lib/ld-musl-mips-sf.so.1 òöB€¥¹ÍÜø @¨ @pAÿAÿ @0@ô@Ô  pBp5ýÀB @ °0ppp@p pBp(pB@ àÈp2Aÿoÿÿûoÿÿþ@ oÿÿÿoÿÿð@ %B"5#7:?8+<,@/6>;2-=&A*% 1    $)'03!4(9.ÓWEB0ç@ €"`> 7#žB4'B8"jx*1Ë@¨ ?/ý@ "6Å—B<@ù‡ÝBGœQOóWìfå^fvˆ˜ž@pmÞAÿu©¤¶{Á€…×ôÑæe__RLD_MAPuloop_doneuloop_fd_addblob_buf_initblobmsg_parseblobmsg_add_fieldustream_get_read_bufustream_consumeuloop_run_timeoutuloop_fd_deleteusock_finiuloop_timeout_setuloop_initustream_fd_initfputsstrlenstderrfclosememsetfopenunlinkopenlogfprintfwrite__stack_chk_failuloop_cancelledmallocmemcpy__stack_chk_guardsnprintfubus_freeubus_strerrorubus_lookup_idubus_invoke_async_fdubus_connectubus_complete_request_async__stat_time64__umoddi3__udivdi3__register_frame_info__deregister_frame_infogetpidsleepstrtoulsendrename__ctime64signalstrncatregcompgetoptregexecsyslogsprintffsyncexitatoi__libc_start_mainoptindoptarglibubox.so.20260213libubus.so.20251202libjson-c.so.5libblobmsg_json.so.20260213libgcc_s.so.1libc.soGLIBC_2.0ø iiB0~B4 ~B8~B<~Aÿ4~AÿAÿ Aÿ$Aÿ(Aÿ,Aÿ0Aÿ4Aÿ8 Aÿ< Aÿ@ AÿD AÿHAÿLAÿPAÿTAÿXAÿ\Aÿ`AÿdAÿhAÿlAÿpAÿtAÿxAÿ|Aÿ€Aÿ„ Aÿˆ!AÿŒ"Aÿ$Aÿ”%Aÿ˜&Aÿœ'Aÿ (Aÿ¤)Aÿ¨*Aÿ¬+Aÿ°,Aÿ´-Aÿ¸.Aÿ¼/AÿÀ0AÿÄ1AÿÈ3AÿÌ5AÿÐ6AÿÔ7AÿØ8AÿÜ9Aÿà:Aÿä;Aÿè<Aÿì=Aÿð>Aÿô?Aÿø@AÿüA'½ÿ௼¯¿¼¿à'½ ðdÿml „hjÒ•¶Æ¬”g"J*àeœ”Òð *²¿´Àøš Q{` QZ`qP`lQQ`;q0`JqF`^’µ¸išÀ²´|š€gQdè AHJ®Z!`ñ3D âm‹`âiê€eÙÿÕÿÕÿÕÿÕÿÕÿÕÿÕÿÕÿÕÿÕ÷©ÿÕïÿÕÿÕÿÕ­ÿÕÿÕÿÕ™ÿÕoi _ÿÕÿÕÿÕÿÕ¹qSaDz욀R`j2@³š2HÛ@˜²™k²˜ü²”š@³“›@BÛ€³•Û@³•›@BÛ€“2HãIš`²’Ú`²Šš`²ú²ˆš`²ö²†š`²Žò²ŽÚ²ƒ욀gk²€nš€TmkëLÓ ´‡jëDœ`êmÜ@[²xnš€TmkëLÓ ´€ï²sš`²˱qn´~¤™ ÷_*™`²{À²{¨’m B‡DL%²qÒ š@"²mš€$µu¨eg"" 8egµq|g‘¸g‘´nLmjið ÃD ¶jm´hlѲ]š@ ZgXð ÃD¶dÑ´alm jÒ ¶`m´\lÐ ²Qš@*ón°Ó4€˜€*8™`’B÷À4cìBaêŽ*0’CëC`-ð˜€HB…g"²Âüš˜À! µÅÐg‘˜€pg± g‘˜€mÿñ€nôM ³¶RÛA` ²»˜Àµ»|š€läì‹ì”š j3.ëL²´š@ðÀ"ëGkêlðà"’Ò "ìg‚Ò ²­š@ðÀ* óào씚aš@ng‚g£Ó”ÒÒ²¥gš@Ó"”•óào,nÓgð¶Ÿm 0‹xg‚ðÒ“°—ãIk÷ÿ²š@rð agñ¶”ô€m0“•nM˜“˜@" ð“ô`næ[‹˜“²‰š ð“ô`iá[g°˜“ð“á[µ˜“²€š ð“ô`iá[g°˜“ð“á[µy˜“씚@* ð“ô`næ[µr˜“ð“• ô`næ[˜“ð“g°j²Wš˜@"Ft“R`²fšÀ²fšà˜@"K²eµfÒÀl´LÈe²Jüšj³HêKóàm´^ÜÛA²Gš@ra’Ôš²Xš@÷?" ëGêO&j• Òo´T¼nr÷?a “öÀ’ ›`ên"`de²Mš@*ö°FHâ©k óÂ|oN`“­²F´˜@"‹óàhn¸µC]Ò<è,]šaC,°?²?ïë+šjnhµ<<éLšaC,·6Jçë.+šà씚@"²1“ Ò’×—Ó¶/ô€m“Ð0Òð“gÂ’“tšƒJÖ²&äðÐd|è eB0Blÿÿÿ@ B,B(BH@ìAÿ@ôBB0B@ @B4@ B<@$@(B$BDB@@@4BxBBLB@”@ð@Ô@\@¨@`@àdög$ g‘•g‚]a¤a¢@3`ö2@3`ëM¤B¤2@êmèM²èLía;eg°´g‘àdvè ÿÿÿee'½ÿ௼¯¿¼¿à'½ udptcpfailed to connect: %m Logread connected to %s:%s via %s kernel:%s.oldfailed to open %s: %m [%lu.%03u] <%u> : kernel: Failed to send log data to %s:%s via %s %s %s%s.%s%s %s authauthprivcrondaemonftpkernlprmailmarknewssecuritysysloguseruucplocal0local1local2local3local4local5local6local7alertcritdebugemergerrerrorinfononenoticepanicwarnwarningUsage: %s [options] Options: -s Path to ubus socket -l Got only the last 'count' messages -e Filter messages with a regexp -r Stream message to a server -F Log file -S Log size -p PID file -h Add hostname to the message -P Prefix custom text to streamed messages -z handle only messages with given facility (0-23), repeatable -Z ignore messages with given facility (0-23), repeatable -f Follow log messages -u Use UDP as the protocol -t Add an extra timestamp -0 Use \0 instead of \n as trailer when using TCP u0fcs:l:z:Z:r:F:p:S:P:h:e:tFailed to connect to ubus w+%dstreamoneshotlineslogFailed to find log object: %s logreadreadmsgidprioritysourcetime@t @|P@ˆH@@˜X@œ@¤0@¨@°À@¸8@À @Ì(@Ô@Ü@@ä€@ìˆ@ô@ü˜@ @ ¨@°@¸ÿÿÿÿ@$@,@4@<@D@H@P@X@`@h@p@xÿÿÿÿ@À@Ä@È@Ô@Ü<B™ÿ'œÿÀ#àx%À‚ ø 'ÿþ<Bùÿ$ %øÿ$<Bùÿh %øÿh<Bùÿè %øÿ貚`eëe;eAÿ²š`eëe;eAÿ ²š`eëe;eAÿ(²š`eëe;eAÿ,²š`eëe;eAÿ0²š`eëe;eAÿ4²š`eëe;eAÿ8²š`eëe;eAÿ<²š`eëe;eAÿ@²š`eëe;eAÿD²š`eëe;eAÿH²š`eëe;eAÿL²š`eëe;eAÿP²š`eëe;eAÿT²š`eëe;eAÿX²š`eëe;eAÿ\²š`eëe;eAÿ`²š`eëe;eAÿd²š`eëe;eAÿl²š`eëe;eAÿp²š`eëe;eAÿt²š`eëe;eAÿx²š`eëe;eAÿ|²š`eëe;eAÿ€²š`eëe;eAÿ„²š`eëe;eAÿˆ²š`eëe;eAÿŒ²š`eëe;eAÿ²š`eëe;eAÿ”²š`eëe;eAÿ˜²š`eëe;eAÿœ²š`eëe;eAÿ ²š`eëe;eAÿ¤²š`eëe;eAÿ¨²š`eëe;eAÿ¬²š`eëe;eAÿ°²š`eëe;eAÿ´²š`eëe;eAÿ¸²š`eëe;eAÿ¼²š`eëe;eAÿÀ²š`eëe;eAÿIJš`eëe;eAÿȲš`eëe;eAÿ̲š`eëe;eAÿвš`eëe;eAÿÔ²š`eëe;eAÿزš`eëe;eAÿܲš`eëe;eAÿಚ`eëe;eAÿ䲚`eëe;eAÿ첚`eëe;eAÿð²š`eëe;eAÿô²š`eëe;eAÿø²š`eëe;eAÿü@l@ @ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ `@ ` €07070100E80FEE000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001400000000usr/libexec/network07070100E80FEF000081ED00000000000000000000000169B8AF0D0000175C000000080000000100000000000000000000002700000000usr/libexec/network/packet-steering.uc#!/usr/bin/env ucode 'use strict'; import { glob, basename, dirname, readlink, readfile, realpath, writefile, error, open } from "fs"; let napi_weight = 1.0; let cpu_thread_weight = 0.75; let rx_weight = 0.75; let eth_bias = 2.0; let debug = 0, do_nothing = 0; let disable; let cpus; let all_cpus; let local_flows = 0; while (length(ARGV) > 0) { let arg = shift(ARGV); switch (arg) { case "-d": debug++; break; case "-n": do_nothing++; break; case '0': disable = true; break; case '2': all_cpus = true; break; case '-l': local_flows = +shift(ARGV); break; } } function task_name(pid) { let stat = open(`/proc/${pid}/status`, "r"); if (!stat) return; let line = stat.read("line"); stat.close(); return trim(split(line, "\t", 2)[1]); } function set_task_cpu(pid, cpu) { if (disable) cpu = join(",", map(cpus, (cpu) => cpu.id)); let name = task_name(pid); if (!name) return; if (debug || do_nothing) warn(`taskset -p -c ${cpu} ${name}\n`); if (!do_nothing) system(`taskset -p -c ${cpu} ${pid}`); } function cpu_mask(cpu) { let mask; if (cpu < 0) mask = (1 << length(cpus)) - 1; else mask = (1 << int(cpu)); return sprintf("%x", mask); } function set_netdev_cpu(dev, cpu, rx_queue) { rx_queue ??= "rx-*"; let queues = glob(`/sys/class/net/${dev}/queues/${rx_queue}/rps_cpus`); let val = cpu_mask(cpu); if (disable) val = 0; for (let queue in queues) { if (debug || do_nothing) warn(`echo ${val} > ${queue}\n`); if (!do_nothing) writefile(queue, `${val}`); } queues = glob(`/sys/class/net/${dev}/queues/${rx_queue}/rps_flow_cnt`); for (let queue in queues) { if (debug || do_nothing) warn(`echo ${local_flows} > ${queue}\n`); if (!do_nothing) writefile(queue, `${local_flows}`); } } function task_device_match(name, device) { let napi_match = match(name, /napi\/([^-]*)-\d+/); if (!napi_match) napi_match = match(name, /mt76-tx (phy\d+)/); if (napi_match && (index(device.phy, napi_match[1]) >= 0 || index(device.netdev, napi_match[1]) >= 0)) return true; if (device.driver == "mtk_soc_eth" && match(name, /napi\/mtk_eth-/)) return true; return false; } cpus = map(glob("/sys/bus/cpu/devices/*"), (path) => { return { id: int(match(path, /.*cpu(\d+)/)[1]), core: int(trim(readfile(`${path}/topology/core_id`))), load: 0.0, }; }); cpus = slice(cpus, 0, 64); if (length(cpus) < 2) exit(0); function cpu_add_weight(cpu_id, weight) { let cpu = cpus[cpu_id]; cpu.load += weight; for (let sibling in cpus) { if (sibling == cpu || sibling.core != cpu.core) continue; sibling.load += weight * cpu_thread_weight; } } function get_next_cpu(weight, prev_cpu) { if (disable) return 0; let sort_cpus = sort(slice(cpus), (a, b) => a.load - b.load); let idx = 0; if (prev_cpu != null && sort_cpus[idx].id == prev_cpu) idx++; let cpu = sort_cpus[idx].id; cpu_add_weight(cpu, weight); return cpu; } let phys_devs = {}; let netdev_phys = {}; let netdevs = map(glob("/sys/class/net/*"), (dev) => basename(dev)); for (let dev in netdevs) { let pdev_path = realpath(`/sys/class/net/${dev}/device`); if (!pdev_path) continue; if (length(glob(`/sys/class/net/${dev}/lower_*`)) > 0) continue; let pdev = phys_devs[pdev_path]; if (!pdev) { pdev = phys_devs[pdev_path] = { path: pdev_path, driver: basename(readlink(`${pdev_path}/driver`)), netdev: [], phy: [], tasks: [], rx_tasks: [], rx_queues: map(glob(`/sys/class/net/${dev}/queues/rx-*/rps_cpus`), (v) => basename(dirname(v))), }; } let phyidx = trim(readfile(`/sys/class/net/${dev}/phy80211/index`)); if (phyidx != null) { let phy = `phy${phyidx}`; if (index(pdev.phy, phy) < 0) push(pdev.phy, phy); } push(pdev.netdev, dev); netdev_phys[dev] = pdev; } for (let path in glob("/proc/*/exe")) { readlink(path); if (error() != "No such file or directory") continue; let pid = basename(dirname(path)); let name = task_name(pid); for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!task_device_match(name, dev)) continue; push(dev.tasks, pid); let napi_match = match(name, /napi\/([^-]*)-(\d+)/); if (napi_match && napi_match[2] > 0) push(dev.rx_tasks, pid); break; } } function assign_dev_queues_cpu(dev) { let num = length(dev.rx_queues); if (num < length(dev.rx_tasks)) num = length(dev.rx_tasks); for (let i = 0; i < num; i++) { let cpu; let task = dev.rx_tasks[i]; if (num >= length(cpus)) cpu = i % length(cpus); else if (task) cpu = get_next_cpu(napi_weight); else cpu = -1; set_task_cpu(task, cpu); let rxq = dev.rx_queues[i]; if (!rxq) continue; if (num >= length(cpus)) cpu = (i + 1) % length(cpus); else if (all_cpus) cpu = -1; else cpu = get_next_cpu(napi_weight, cpu); for (let netdev in dev.netdev) set_netdev_cpu(netdev, cpu, rxq); } } function assign_dev_cpu(dev) { if (length(dev.rx_queues) > 1 && length(dev.rx_tasks) > 1) return assign_dev_queues_cpu(dev); if (length(dev.tasks) > 0) { let cpu = dev.napi_cpu = get_next_cpu(napi_weight); for (let task in dev.tasks) set_task_cpu(task, cpu); } if (length(dev.netdev) > 0) { let cpu; if (all_cpus) cpu = -1; else cpu = get_next_cpu(rx_weight, dev.napi_cpu); for (let netdev in dev.netdev) set_netdev_cpu(netdev, cpu); } } // Assign ethernet devices first for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!length(dev.phy)) assign_dev_cpu(dev); } // Add bias to avoid assigning other tasks to CPUs with ethernet NAPI for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!length(dev.tasks) || dev.napi_cpu == null) continue; cpu_add_weight(dev.napi_cpu, eth_bias); } // Assign WLAN devices for (let devname in phys_devs) { let dev = phys_devs[devname]; if (length(dev.phy) > 0) assign_dev_cpu(dev); } if (debug > 1) warn(sprintf("devices: %.J\ncpus: %.J\n", phys_devs, cpus)); 07070100E812B0000081ED00000000000000000000000169B8AF0D00000122000000080000000100000000000000000000001500000000usr/libexec/login.sh#!/bin/sh [ -t 0 ] && { tty_dev=$(readlink /proc/self/fd/0) case "$tty_dev" in /dev/console|/dev/tty[0-9]*) export TERM=${TERM:-linux} ;; /dev/*) export TERM=vt102 ;; esac } [ "$(uci -q get system.@system[0].ttylogin)" = 1 ] || exec /bin/login -f root exec /bin/login 07070100E812B2000081ED00000000000000000000000169B8AF0D0000066F000000080000000100000000000000000000002400000000usr/libexec/validate_firmware_image#!/bin/sh . /lib/functions.sh . /lib/functions/system.sh . /usr/share/libubox/jshn.sh include /lib/upgrade VALID=1 FORCEABLE=1 ALLOW_BACKUP=1 # Mark image as invalid but still possible to install notify_firmware_invalid() { VALID=0 } # Mark image as broken (impossible to install) notify_firmware_broken() { VALID=0 FORCEABLE=0 } # Mark image as incompatible with preserving a backup notify_firmware_no_backup() { ALLOW_BACKUP=0 } # Add result of validation test notify_firmware_test_result() { local old_ns json_set_namespace validate_firmware_image old_ns json_add_boolean "$1" "$2" json_set_namespace $old_ns } err_to_bool() { [ "$1" -ne 0 ] && echo 0 || echo 1 } fwtool_check_signature "$1" >&2 FWTOOL_SIGNATURE=$? [ "$FWTOOL_SIGNATURE" -ne 0 ] && notify_firmware_invalid fwtool_check_image "$1" >&2 FWTOOL_DEVICE_MATCH=$? [ "$FWTOOL_DEVICE_MATCH" -ne 0 ] && notify_firmware_invalid json_set_namespace validate_firmware_image old_ns json_init json_add_object "tests" json_add_boolean fwtool_signature "$(err_to_bool $FWTOOL_SIGNATURE)" json_add_boolean fwtool_device_match "$(err_to_bool $FWTOOL_DEVICE_MATCH)" # Call platform_check_image() here so it can add its test # results and still mark image properly. json_set_namespace $old_ns platform_check_image "$1" >&2 case "$?" in 0) ;; 74) notify_firmware_broken ;; *) notify_firmware_invalid ;; esac json_set_namespace validate_firmware_image old_ns json_close_object json_add_boolean valid "$VALID" json_add_boolean forceable "$FORCEABLE" json_add_boolean allow_backup "$ALLOW_BACKUP" json_dump -i json_set_namespace $old_ns 07070100E812BA000081ED00000000000000000000000169B8AF0D00010045000000080000000100000000000000000000001300000000usr/libexec/cgi-ioELF@4t4 (4@4@4@@t@t@tp@@p¨@¨@¨@@1ð1ðþðAþðAþðUÀ@À@À``dtåQdtåRþðAþðAþð/lib/ld-musl-mips-sf.so.1 òöB€0\p„’ @ø @%ÐAþðAþô@ @ ˜@H ¤ pB0p5ýðB@@ èppp@p pEp)pE@ øp2Aþüoÿÿûoÿÿþ@ Èoÿÿÿoÿÿð@ <CE#$B%4 >,653 ;7C.2?:'"1/ -!A0@ =+D  &(*)9<8PæÞX×^AþøeÕÃBP¼"@."íµ nty~®†”œ£ª÷°¼Â$@ø ˘2‘8@."Ò?Ûáö}B0þv oD@%Ð!-5>^EWWPJò__RLD_MAPuloop_doneblob_buf_initblobmsg_parseblobmsg_add_field_finiclosestrchrstrlen__errno_locationstrcmpmemsetunlinkstrncmpreadcallocpipe__stack_chk_failmallocmemcpygetenv__stack_chk_guardsnprintfwaitpidstrcpyubus_freeubus_lookup_idubus_connectubus_invoke_fd__register_frame_info__deregister_frame_infoputcharioctlstdoutstrerrorexeclputsdup2tolower__localtime64strtoulsplicefflushlseekstrncasecmpchmodisxdigitstrtolsendfilechdir__stat_time64strstrstrncpyforkexecvlinkatisalnum__time64gethostnamesprintfstrftimefwrite__libc_start_mainopenlibubox.so.20260213libubus.so.20251202libgcc_s.so.1libc.soGLIBC_2.0„ iišAþø~BP ~AÿAÿAÿ AÿAÿAÿAÿAÿ Aÿ$ Aÿ( Aÿ, Aÿ0Aÿ4Aÿ8Aÿ<Aÿ@AÿDAÿHAÿLAÿPAÿTAÿXAÿ\Aÿ`AÿdAÿhAÿlAÿpAÿtAÿx!Aÿ|"Aÿ€#Aÿ„$Aÿˆ%AÿŒ&Aÿ'Aÿ”(Aÿ˜)Aÿœ*Aÿ +Aÿ¤,Aÿ¨-Aÿ¬.Aÿ°0Aÿ´1Aÿ¸2Aÿ¼3AÿÀ4AÿÄ5AÿÈ6AÿÌ7AÿÐ9AÿÔ:AÿØ;AÿÜ<Aÿà=Aÿä>Aÿè?Aÿì@AÿðAAÿôBAÿøCAÿüD'½ÿ௼¯¿¼¿à'½ ô ²ð0dð š@ô µg‘ Ò["øegô€³’[›`ênò@" ìeô€µ g‘g"eêô`µ g‘ð "n@mKÐGÐHÐI <ÐJô`²mÒ MДÒ,ô@¶mñ€lehè ” xeÁô ·ô ¶ô µÝe"ç g"  deô¶š ñàlÞ 0eg"J"!”!$ te LlÓ ÐÒgâ¶ûm XGm? PK"0¶÷m@ ¤KJZAa(è de¶òÐ Àm tl tl t” t”´ë eR` de¶ç¶µçÑ·ç¶è ¸g…“´æ ¼e´å ¼eG´ä œK²ã Üš€jÒ”ðjÒon ØmR`óJ* deš@r`ën ”g‘ t”fµÓ g‘ñ`" n(µÐ ° Mm”Ò ,¶Ìmñ€l(··¶Êµ¸Ýe"ô((%’"0‚`s1a-‚AZgX”Ò ,)¶À H€ !î Dg‘*ù´½ pg±*ô¶»mñ€lehè ” !H€ !Ù Dg‘*ù´³ pg±*ô¶²èjÔ˜eÒ"ÒšÀ·¨µ­Ý”Ò ’Jš`J+M’š@Ò "A hg‚” J Ò *“$ðjêlðr`>´Ÿ ¨eg¢*µg%@r:`*!’ á£â ðZ`ðX÷`´– (gЖ ²“µ” Tâ´‘ *“$ðjêlðr`A¡@I*Ø x”¶‰mñ€l‹l÷ÿ߬²ƒÒ ’ * – ·wµ}Ý”* x”¶K g"  x” de¶\š ñàlg 0eg"J">!K t”´^ ¼e•-µo´o œe•%´m œe´l ¼e²V Üš€jÒ”ðjÒon ØmR`óJ* deš@r`ën ”g‘ t” x”( x” t” t” de¶5ª´R lmRga,m Àg‚’ *m Àgg te” Àm’ "” Àm t” t”´" eR`  x” de¶w tllÚ• 4” Röß` x” de¶0chè ¸gPð0dpè eBP@+0@+<@+L@(T@+X@&Ø@+P@&à@+t@+ä@+ð@+Œ@+¤@+¨@+Ð@+¼@+À@'Ü@+ø@,Aþø@,`@-@,l@,d@,„@'`@'t@'”@'œ@*¬@, @+B€@,¨@,¬@,Ä@& @'ì@(@(P@,ä@,ðð%@˜@Ð@Àüüà#  %å¼(!ù<È!$ÿø¡è$ ø '½ÿð'½ÿØ<@¯¿$Œ…$†$B%Ð<@<@¯ ¯¢$çø  ˆ$„!¿$à'½('½ÿ௰<B¯¿’`@ <@$B.@$<@  „$„-À$¢`¿°à'½ <@$B.@ <B'½ÿà<@$¥d¯¿  €$„-À¿à'½ à&.d朦A¦`2@ö3`2@êm¦bFä3`ëM¦Cmêm³ êlJü´ øÒ’ "¢€Bd4ž$ ¢„¢E4€êlJì‹êŒãM£@êK÷À2BÀ@dfè è ÿÿÿ@-¸dÄg…µ èeZ²gxÂ`dDè je@%ðBÔð d÷g$ *= 0egJ"7( ´e”  Àm tl tl t” t” µ—ÐgÑ ¸g…*²dwè nA´ /dev/null | \ jsonfilter -e "@.interface[@.device='$1' || @.l3_device='$1'].interface" } function device_by_addr() { set -- $(ip route get "$1" ${2:+from "$2"} 2>/dev/null) echo "$5" } for inbound_device in $(device_by_addr "$REMOTE_ADDR" "$SERVER_ADDR"); do inbound_devices="$inbound_device" inbound_interfaces="" for iface in $(ifaces_by_device "$inbound_device"); do inbound_interfaces="${inbound_interfaces:+$inbound_interfaces$NL}$iface" for peeraddr in $(uci get "network.$iface.peeraddr"); do for ipaddr in $(resolveip -t 1 "$peeraddr" 2>/dev/null); do for peerdev in $(device_by_addr "$ipaddr"); do for iface in $(ifaces_by_device "$peerdev"); do inbound_devices="${inbound_devices:+$inbound_devices$NL}$peerdev" inbound_interfaces="${inbound_interfaces:+$inbound_interfaces$NL}$iface" done done done done done done inbound_devices="$(echo "$inbound_devices" | sort -u | sed ':a;N;$!ba;s/\n/", "/g')" inbound_interfaces="$(echo "$inbound_interfaces" | sort -u | sed ':a;N;$!ba;s/\n/", "/g')" cat </dev/null else cat /usr/lib/opkg/status fi ;; list-available) if [ $ipkg_bin = "apk" ]; then $ipkg_bin list --full 2>/dev/null else lists_dir=$(sed -rne 's#^lists_dir \S+ (\S+)#\1#p' /etc/opkg.conf /etc/opkg/*.conf 2>/dev/null | tail -n 1) find "${lists_dir:-/usr/lib/opkg/lists}" -type f '!' -name '*.sig' | xargs -r gzip -cd fi ;; install|update|upgrade|remove) ( cmd="$ipkg_bin" # APK have command renamed if [ $ipkg_bin = "apk" ]; then case "$action" in install) action="add" ;; update) action="update" ;; upgrade) action="upgrade" ;; remove) action="del" ;; esac fi # APK have --autoremove enabled by default and # --force-removal-of-dependent-packages as -r option if [ $ipkg_bin = "apk" ]; then while [ -n "$1" ]; do case "$1" in --force-removal-of-dependent-packages) cmd="$cmd -r" shift ;; --force-overwrite) cmd="$cmd $1" shift ;; -*) shift ;; *) break ;; esac done else while [ -n "$1" ]; do case "$1" in --autoremove|--force-overwrite|--force-removal-of-dependent-packages) cmd="$cmd $1" shift ;; -*) shift ;; *) break ;; esac done fi if flock -x 200; then pkmcmd="$cmd $action $@" $cmd $action "$@" /tmp/ipkg.out 2>/tmp/ipkg.err code=$? stdout=$(cat /tmp/ipkg.out) stderr=$(cat /tmp/ipkg.err) else code=255 stderr="Failed to acquire lock" fi json_init json_add_int code $code [ -n "$pkmcmd" ] && json_add_string pkmcmd "$pkmcmd" [ -n "$stdout" ] && json_add_string stdout "$stdout" [ -n "$stderr" ] && json_add_string stderr "$stderr" json_dump ) 200>/tmp/ipkg.lock rm -f /tmp/ipkg.lock /tmp/ipkg.err /tmp/ipkg.out ;; *) echo "Usage: $0 {list-installed|list-available|update}" >&2 echo " $0 {install|upgrade|remove} pkg[ pkg...]" >&2 exit 1 ;; esac 07070100E806A5000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000000800000000usr/bin07070100E81F750000A1FF00000000000000000000000169B8AF0D00000012000000080000000100000000000000000000000C00000000usr/bin/scp/usr/sbin/dropbear07070100E80F320000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000B00000000usr/bin/du../../bin/busybox07070100E80F95000081ED00000000000000000000000169B8AF0D00010025000000080000000100000000000000000000000D00000000usr/bin/jshnELF@@4t4 (4@4@4@@t@t@tp@@p¨@¨@¨@@PPÿAÿAÿ|À@À@ÀhhdtåQdtåRÿAÿAÿìì/lib/ld-musl-mips-sf.so.1 òöB€D`oƒ‘ @ @ÀAÿAÿ@(@Ä@Ä ® pBp5ýÈB @ 40ppp@p p@p)p@@ d¨p2Aÿ$oÿÿûoÿÿþ@ ôoÿÿÿoÿÿð@ r%@)(!2,'3=085>*#:7$+;9?<   &. -/%"6 41ª§ÞAÿ"ygB0°@"ir3B4å;B8!g:B8¯ Vz@  bì€[Æ@"<B8!'S~8‰NB¡û“š" GàD@ÀÊú™@Aÿ ê×PÁó‚O¢-9”›J__RLD_MAPblobmsg_format_json_with_cbblobmsg_add_json_from_string_finifreestrlen__stack_chk_fail__stack_chk_guardsnprintfjson_object_get_objectjson_object_new_int64json_object_to_json_stringjson_object_get_int64json_tokener_parsejson_object_new_booleanjson_object_new_doublejson_object_new_arrayjson_object_get_booleanjson_object_get_doublejson_object_new_stringjson_object_get_typejson_object_get_stringjson_object_object_addjson_object_array_addarray_list_get_idxjson_object_putjson_object_get_arrayarray_list_lengthjson_object_new_objectstrchrstderrstrcmpreadfprintfstrtodcallocavl_findblob_buf_initavl_initavl_insertfputsfclosefopenstrtok_r__register_frame_info__deregister_frame_infostdoutfflush__fstat_time64getoptisalnumputcfwriteatoi__libc_start_mainatolloptarg__environlibblobmsg_json.so.20260213libjson-c.so.5libubox.so.20260213libgcc_s.so.1libc.soGLIBC_2.0JSONC_0.14ƒ ii™`–é£Aÿ~B0~B4 ~B8~Aÿ /~Aÿ,Aÿ0Aÿ4Aÿ8Aÿ<Aÿ@AÿD AÿH AÿL AÿPAÿTAÿXAÿ\Aÿ`AÿdAÿhAÿlAÿpAÿtAÿxAÿ|Aÿ€Aÿ„AÿˆAÿŒ Aÿ"Aÿ”#Aÿ˜$Aÿœ%Aÿ &Aÿ¤'Aÿ¨(Aÿ¬)Aÿ°*Aÿ´,Aÿ¸-Aÿ¼.AÿÀ0AÿÄ1AÿÈ2AÿÌ3AÿÐ4AÿÔ5AÿØ6AÿÜ7Aÿà8Aÿä9Aÿè:Aÿì;Aÿð<Aÿô=Aÿø>Aÿü?'½ÿ௼¯¿¼¿à'½ ðdû±p´qoµqÈn™`l2ˆãIš@*/Àm Ò",gjÒ™@“âiš€,/hi•7¶eì”6Ba# roð `Rp`1rið `rnð `rR`>”Ph’7µZšÀ²ZÔš€ L˲Vhš€µVÔè gPðd{è Ø…Dm="JØG´Iàg°’H JÒ¼rr` rw`brpaѲHš€²H8Ú€³GÛ@´²Cfš€g ²@mšÔš€ Äg‘J*gе9²2Ôš€Lg‘hP”³’lB¡ÀÒ Ò*gе/é– •äg‘”÷À3CëŽ+“ên" ² gе'Ôš€P”Öf””PgLg‘ϲg°šÀ7g‘¦²µš@g‚èÒ Ò*– §–g°7g‘”ôgãh?i=eB8Bt@Q@”@LAÿ @àB4BB`@ä@ø@@4Aÿ@Hð%@H@€@Àüüà#  %å¼(!ù<È!$ÿø¡è$ ø '½ÿð'½ÿØ<@¯¿$Œ…$†$BÀ<@<@¯ ¯¢$ç ˆ$„1¿$à'½('½ÿ௰<B¯¿’@@ <@$B@$<@ „$„À$¢@¿°à'½ <@$B@ <B'½ÿà<@$¥D¯¿ €$„À¿à'½ à„@…`"êj`r=ajs=akè âkLMðdÄg¤´ e"šGdDè Btdø°˜@Ùƒ8ÙE³¶› g}MåUEG2N2LãKeºÙB™CÒ² ™‚œšàœ™‚™e˜€ëŽ#¸ee¹duè eB0B`@àB².dúš@gÙÃÙâÙ…8ÙIÙG˜@g‚8ÙD³'™‡›`¶&KããIÙFJ2Ng}2LãKeºÙG™DÒ™EÒ²™¦šàœ™‡œ™‡™c¶Û@˜@Ò™EÒ²™¦šàœ™‡œ™‡™b¶Û@˜@Ò™EÒ²™¦šàœ™‡œ™‡"Ø@³™I›`ên"¸ee¹dwè eB0B`@èB@ð@üð d÷¢g…" g‚’"µ;e*dwè ” »Ò‘! µ3g*”egng±ïg’"N”$g°µ(l×µ(g*øegnçµ$g*¬g‘gáµ g*@g‘g£g‚ñµg* g‘Ìmg£´g‚ãµg* 4g‘Zg˜j(ìNÔµg*¸h°•”Œgа@@ @@@$@(@0@8ð d÷øe"|-R |-o |-p |-w p:nir:R:o:w@8@0@(@$@@ @<B™ÿ$'œÿ$À#àx%À‚ ø 'ÿþ<Bùÿ@ %øÿ@<Bùÿt %øÿt<Bùÿà %øÿಚ`eëe;eAÿ,²š`eëe;eAÿ0²š`eëe;eAÿ4²š`eëe;eAÿ8²š`eëe;eAÿ<²š`eëe;eAÿD²š`eëe;eAÿH²š`eëe;eAÿL²š`eëe;eAÿP²š`eëe;eAÿT²š`eëe;eAÿX²š`eëe;eAÿ\²š`eëe;eAÿ`²š`eëe;eAÿd²š`eëe;eAÿh²š`eëe;eAÿl²š`eëe;eAÿp²š`eëe;eAÿx²š`eëe;eAÿ|²š`eëe;eAÿ€²š`eëe;eAÿ„²š`eëe;eAÿˆ²š`eëe;eAÿŒ²š`eëe;eAÿ²š`eëe;eAÿ”²š`eëe;eAÿ˜²š`eëe;eAÿœ²š`eëe;eAÿ ²š`eëe;eAÿ¤²š`eëe;eAÿ¨²š`eëe;eAÿ¬²š`eëe;eAÿ°²š`eëe;eAÿ´²š`eëe;eAÿ¸²š`eëe;eAÿ¼²š`eëe;eAÿÀ²š`eëe;eAÿIJš`eëe;eAÿȲš`eëe;eAÿ̲š`eëe;eAÿвš`eëe;eAÿÔ²š`eëe;eAÿزš`eëe;eAÿܲš`eëe;eAÿ䲚`eëe;eAÿ貚`eëe;eAÿ첚`eëe;eAÿð²š`eëe;eAÿô²š`eëe;eAÿø²š`eëe;eAÿü@ @À@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@à@Ô€07070100E80F460000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001100000000usr/bin/readlink../../bin/busybox07070100E80F330000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/env../../bin/busybox07070100E80FA9000081ED00000000000000000000000169B8AF0D00010015000000080000000100000000000000000000000E00000000usr/bin/ucodeELF@4t4 (4@4@4  T@T@Tpp@p@p@@, , þÜAþÜAþÜ9„ˆ@ˆ@ˆ``dtåQdtåRþÜAþÜAþÜ$$/lib/ld-musl-mips-sf.so.1 ›°¿Í @ @AþÜAþà@è@ ì@, ø pBp5ýøB@Ì8ppp@p pLp$pL@p2Aþðoÿÿûoÿÿþ@|oÿÿÿoÿÿð@ äCL AF?$<H/738%,6@!;B92K#I CG1.D=J0)   *'+" (&>:-E45  ²MAþäD2B "--@(€"+;”B$M%Ueú@ r ”£C@("B([Aþè¾üÏBah¿öïÝÚéoâì ÛþÔ$@ *ÍAþìî<ÆkµTQ_vj{®xj§¡—ytˆ__RLD_MAPucv_array_pushucv_putuc_vm_freeucv_from_jsonucv_object_deleteucv_getuc_vm_scope_getuc_vm_invokeucv_object_adduc_source_new_fileucv_string_newucv_to_stringbuf_formatteduc_program_writeuc_vm_executeuc_stdlib_loaduc_search_path_inituc_vm_initucv_typeuc_vm_trace_set_finiucv_string_lengthuc_source_new_bufferucv_array_newuc_compileucv_int64_get_ucv_string_getuc_vm_gc_startvasprintffputsstrchrstrlen__errno_locationfwritestderrstrcmpfclosememsetfopenstrdupfreadreallocfprintfstrrchr__stack_chk_failabortmemcpy__stack_chk_guardstrerrorstdoutjson_object_get_objectprintbuf_freejson_tokener_parse_exjson_tokener_newjson_tokener_freeprintbuf_newjson_tokener_get_parse_endjson_object_is_typejson_object_putjson_tokener_error_descjson_tokener_get_error__register_frame_info__deregister_frame_infostdinstrtokfdopengetoptatoi__libc_start_mainoptindoptarglibucode.so.20230711libjson-c.so.5libgcc_s.so.1libc.soGLIBC_2.0JSONC_PRIVATEJSONC_0.14¿ iiÕ° ê…ß–éíAþä~B ~B$~B(~Aþè~Aþì7~AþøAþüAÿAÿAÿAÿ Aÿ Aÿ Aÿ Aÿ Aÿ Aÿ$Aÿ(Aÿ,Aÿ0Aÿ4Aÿ8Aÿ<Aÿ@AÿDAÿHAÿLAÿPAÿTAÿXAÿ\ Aÿ`!Aÿd#Aÿh$Aÿl%Aÿp&Aÿt'Aÿx(Aÿ|)Aÿ€*Aÿ„+Aÿˆ,AÿŒ-Aÿ.Aÿ”/Aÿ˜0Aÿœ1Aÿ 2Aÿ¤3Aÿ¨5Aÿ¬6Aÿ°8Aÿ´9Aÿ¸:Aÿ¼;AÿÀ<AÿÄ=AÿÈ>AÿÌ?AÿÐ@AÿÔAAÿØBAÿÜCAÿàDAÿäEAÿèFAÿìGAÿðHAÿôIAÿøJAÿüK'½ÿ௼¯¿¼¿à'½ ñ²ðDdòš@nÿN Õ ô€³›€Ô , ô ²ôÀ´š  e¸Û@ @eÒ÷"jÒ — n€m œgÂ"6” ” ØÒ rg"`í ,” Ä” !& Ü” ô@²!5ô`·– š€ô`µhô`µ  ¬” Ò *Ê ìeô °  <š€– ˜€ô@µ €gâàiÓ”  ¨m"Õ €@"•  Ll”g lg° Ü” Éô·Ê ð” š ô˜¢˜ l L˜”g lg±ó d<³èg‚ T› ¬²åm=š@g‚ Ò g"JÀ Ò  x” gânµð< hÒ ”  Dg")’>ö_"  d info\n' + '\tiwinfo scan\n' + '\tiwinfo txpowerlist\n' + '\tiwinfo freqlist\n' + '\tiwinfo assoclist\n' + '\tiwinfo countrylist\n' + '\tiwinfo htmodelist\n' + '\tiwinfo nl80211 phyname
\n'); return 1; 07070100E80F490000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000F00000000usr/bin/resize../../bin/busybox07070100E80F3A0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000B00000000usr/bin/id../../bin/busybox07070100E80F350000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/find../../bin/busybox07070100E8183C000081ED00000000000000000000000169B8AF0D00011BC4000000080000000100000000000000000000000D00000000usr/bin/owut#!/usr/bin/ucode -S // owut - OpenWrt Upgrade Tool // Copyright (c) 2024-2026 Eric Fahlgren // SPDX-License-Identifier: GPL-2.0-only // vim: set noexpandtab softtabstop=8 shiftwidth=8 syntax=javascript: //------------------------------------------------------------------------------ let NAME = "owut"; let VERSION = "2026.01.13~2526d84b-r1"; let PROG = `${NAME}/${VERSION}`; import * as uloop from "uloop"; import * as uclient from "uclient"; import * as fs from "fs"; import * as mod_ubus from "ubus"; import * as ap from "utils.argparse"; import { cursor } from "uci"; let uci = cursor(); const default_sysupgrade = "https://sysupgrade.openwrt.org"; const default_upstream = "https://downloads.openwrt.org"; const issue_url = "https://github.com/efahl/owut/issues"; const forum_url = "https://forum.openwrt.org/t/owut-openwrt-upgrade-tool/200035"; const wiki_url = "https://openwrt.org/docs/guide-user/installation/sysupgrade.owut"; //------------------------------------------------------------------------------ const EXIT_OK = 0, EXIT_ERR = 1; const Logger = { _levels: [], _level: 0, set_level: function(lvl) { this._level = lvl; }, show: function(lvl) { return this._level >= lvl; }, push: function(new) { push(this._levels, this._level); this._level = new; }, pop: function() { this._level = pop(this._levels); }, stdout_is_pipe: ! fs.stdout.isatty(), GREEN: "0;255;0", YELLOW: "255;234;0", RED: "255;0;0", reset: "reset", clreol: function() { // Clear to end-of-line when appropriate. return this.stdout_is_pipe ? "" : "\033[K"; }, color: function(color_name) { // Suppress colorization when stdout is a pipe. if (this.stdout_is_pipe) return ""; return color_name == this.reset ? "\033[m" : `\033[38;2;${color_name}m`; }, colorize: function(color_name, text) { if (this.stdout_is_pipe) return text; return this.color(color_name) + text + this.color(this.reset); }, _n_lines: 0, mark: function() { this._n_lines = 0; }, backup: function() { // Reposition cursor up n lines and reset line counter. if (! this.stdout_is_pipe && this._n_lines > 0) { printf("\033[%dA\r", this._n_lines); fs.stdout.flush(); } this.mark(); }, _fmt: function(fmt, ...args) { let s = sprintf(fmt, ...args); this._n_lines += length(match(s, /\n/g)); return this.clreol() + s; }, _out: function(prefix, clr, fmt, ...args) { warn(sprintf("%s: ", this.colorize(clr, prefix)), this._fmt(fmt, ...args)); }, err: function(fmt, ...args) { this._out("ERROR", this.RED, fmt, ...args); }, wrn: function(fmt, ...args) { this._out("WARNING", this.YELLOW, fmt, ...args); }, log: function(level, fmt, ...args) { if (this.show(level)) { print(this._fmt(fmt, ...args)); fs.stdout.flush(); } }, die: function(fmt, ...args) { this.err(fmt, ...args); exit(EXIT_ERR); }, bug: function(fmt, ...args) { // Variant for errors indicating code issue, not a user error. this.err(fmt, ...args); assert(false, `This is a bug in '${PROG}', please report at\n` ` ${issue_url}\n`); }, }; let L = Logger; //------------------------------------------------------------------------------ let commands = { check: { help: "Collect all resources and report stats." }, list: { help: "Show all the packages installed by user." }, blob: { help: "Display the json blob for the ASU build request." }, download: { help: "Build, download and verify an image." }, verify: { help: "Verify the downloaded image." }, install: { help: "Install the specified local image." }, upgrade: { help: "Build, download, verify and install an image." }, versions: { help: "Show available versions." }, dump: { help: "Collect all resources and dump internal data structures." }, }; let _fstypes = ["squashfs", "ext4", "ubifs", "jffs2"]; let _fslo = 1; // See https://sysupgrade.openwrt.org/redoc#operation/api_v1_build_post_api_v1_build_post let _list_fmts = ["fs-user", "fs-all", "config"]; function parse_rev_code(version_code) { return match(version_code, /^r(\d+)-([[:xdigit:]]+)$/i); } // Add a custom validator for the '--rev-code' option value. ap.ArgActions["rc"] = function(self, params) { let rc = params.value; if (rc && rc != "none" && ! parse_rev_code(rc)) { this.usage_short(self, { exit: 1, prefix: `ERROR: invalid version code format '${params.value}'` }); } this.store(self, params); }; let arg_defs = proto([ ap.DEFAULT_HELP, ap.DEFAULT_VERSION, { name: "command", position: 0, one_of: commands, action: "store", help: "Sub-command to execute" }, { name: "version_to", short: "-V", long: "--version-to", action: "store", nargs: 1, default: null, help: "Specify the target version, defaults to installed version." }, { name: "rev_code", short: "-R", long: "--rev-code", action: "rc", nargs: 1, default: null, help: "Specify a 'version_code', literal 'none' allowed, defaults to latest build." }, { name: "verbosity", short: "-v", long: "--verbose", action: "inc", default: 0, help: "Print various diagnostics. Repeat for even more output." }, { name: "verbosity", short: "-q", long: "--quiet", action: "dec", default: 0, help: "Reduce verbosity. Repeat for total silence."}, { name: "keep", short: "-k", long: "--keep", action: "set", default: false, help: "Save all downloaded working files." }, { name: "force", long: "--force", action: "set", default: false, help: "Force a build even when there are downgrades or no changes." }, { name: "add", short: "-a", long: "--add", action: "storex", nargs: 1, help: "New packages to add to build list." }, { name: "remove", short: "-r", long: "--remove", action: "storex", nargs: 1, help: "Installed packages to remove from build list." }, { name: "clean_slate", long: "--clean-slate", action: "set", default: false, help: "Remove all but default packages (READ THE DOCS)." }, { name: "ignored_defaults", long: "--ignored-defaults", action: "storex", nargs: 1, help: "List of explicitly ignored default package names." }, { name: "ignored_changes", long: "--ignored-changes", action: "storex", nargs: 1, help: "List of explicitly ignored package changes." }, { name: "init_script", short: "-I", long: "--init-script", action: "store", nargs: 1, default: null, help: "Path to uci-defaults script to run on first boot ('-' use stdin)." }, { name: "fstype", short: "-F", long: "--fstype", action: "enum", nargs: 1, default: null, one_of: _fstypes, help: `Desired root file system type (${join(", ", _fstypes)}).` }, { name: "rootfs_size", short: "-S", long: "--rootfs-size", action: "store_int", nargs: 1, default: null, lower: _fslo, help: `DANGER: See wiki before using! Root file system size in MB (${_fslo}-[server-dependent]).` }, { name: "image", short: "-i", long: "--image", action: "file", nargs: 1, default: "/tmp/firmware.bin", help: "Image name for download, verify, install and upgrade." }, { name: "format", short: "-f", long: "--format", action: "enum", nargs: 1, default: null, one_of: _list_fmts, help: `Format for 'list' output (${join(", ", _list_fmts)}).` }, { name: "pre_install", short: "-p", long: "--pre-install", action: "store", nargs: 1, default: null, help: "Script to exec just prior to launching final sysupgrade." }, { name: "poll_interval", short: "-T", long: "--poll-interval", action: "store_int", nargs: 1, default: 2000, help: "Poll interval for build monitor, in milliseconds." }, { name: "progress_size", long: "--progress-size", action: "store_int", nargs: 1, default: 0, help: "Response content-length above which we report download progress." }, { name: "device", long: "--device", action: "store", nargs: 1, default: null }, // Undocumented: For testing foreign devices. ], ap.ArgParser); arg_defs.set_prog_info(`owut - OpenWrt Upgrade Tool ${VERSION} (${sourcepath()})`); arg_defs.set_bookends( "\nowut is an upgrade tool for OpenWrt.\n", `\nFull documentation\n` ` ${wiki_url}\n\n` `Questions and discussion\n` ` ${forum_url}\n\n` `Issues and bug reports\n` ` ${issue_url}\n\n` ); let options = arg_defs.parse(null, {attendedsysupgrade: "owut"}); L.set_level(options.verbosity); //------------------------------------------------------------------------------ let url; // See initialize_urls let build; // See collect_all for next three let device; let release; let server_limits; // Temporary and resource files. // We save them all with reasonably recognizable names to aid in debugging. let tmp_root = "/tmp/owut-"; let img_root = match(options.image, /(.*\/|)[^\.]*/)[0]; let tmp = { overview_json: `${tmp_root}overview.json`, pkg_arch_json: `${tmp_root}packages-arch.json`, pkg_platform_json: `${tmp_root}packages-plat.json`, platform_json: `${tmp_root}platform.json`, failed_html: `${tmp_root}failures`, req_json: `${tmp_root}build-request.json`, // The POST body we send. build_json: `${tmp_root}build-response.json`, // First response. build_status_json: `${tmp_root}build-status.json`, // Overwritten subsequent responses. rsp_header: `${tmp_root}rsp-header.txt`, firmware_sums: `${img_root}.sha256sums`, // Expected sha256sums from downloaded firmware. firmware_man: `${img_root}-manifest.json`, // Manifest of successful build. }; let packageDB = {}; // Dictionary of installed packages and much status. let pkg_name_len = 0; let packages = { // Dictionary of package lists. // Remove selected packages per // https://github.com/openwrt/openwrt/commit/451e2ce0 // https://github.com/openwrt/openwrt/commit/999ef827 non_upgradable: [ "kernel", "libgcc", "libc"], // Collected from this device. installed: {}, // All the name:version pairs. top_level: [], // Simple list of names. // Collected from upgrade servers based on to-version. default: [], // Another simple name list. available: {}, // The name:version pairs that are available for installation. changes: {}, // Changes extracted from overview; structure documented in apply_pkg_mods. // Logging of modifications replaced: {}, // Log of replacements and removals due to 'package_changes'. }; //------------------------------------------------------------------------------ const ubus = { init: function() { this._bus = mod_ubus.connect(); this.check(this._bus, "mod_ubus.connect"); }, term: function() { this._bus.disconnect(); }, check: function(result, fmt, ...args) { if (!result || mod_ubus.error()) L.bug("ubus: %s\n"+fmt+"\n", mod_ubus.error(), ...args); }, call: function(obj, func, args) { let result = this._bus.call(obj, func, args); this.check(result, " from: 'ubus call %s %s %s'", obj, func, args ?? ""); return result; }, raw_run: function(command, ...params) { // Dangerous: no error checking. return this._bus.call("file", "exec", { command, params }); }, run: function(command, ...params) { return this.call("file", "exec", { command, params }); }, }; //------------------------------------------------------------------------------ let sha256 = { cmd: [ "/bin/busybox", "sha256sum" ], save: function(file, sum) { // Create the checksum file from the image name and expected sum. let sums = fs.open(tmp.firmware_sums, "w"); if (sums) { sums.write(sprintf("%s %s\n", sum, file)); sums.close(); } }, saved_sum: function(file) { // Our saved sums is always just a single line let sums = fs.open(tmp.firmware_sums, "r"); if (sums) { let line = split(trim(sums.read("line")), /\s+/); sums.close(); if (line[1] == file) return line[0]; L.err("Invalid image: got '%s', but expected '%s' in sum file\n", line[1], file); } return null; }, sum: function(file) { // Return the checksum for the specified file. let data = ubus.run(...this.cmd, file); if (data?.code == 0) return substr(data.stdout, 0, 64); this._fatal("sum", data); }, verify: function() { // Run validation against the saved checksums. let data = ubus.run(...this.cmd, "-c", tmp.firmware_sums); if (! data) this._fatal("verify", data); return data; }, _fatal: function(where, data) { L.bug("Fatal error in sha256.%s:\n%.2J\n", where, data); }, }; //------------------------------------------------------------------------------ function sysupgrade(file, check, options) { // When sysupgrade performs the upgrade, it returns with shell status // of '10', so uc_ubus_call raises an error. '--test' is fine, it // returns proper status. return check ? ubus.run("sysupgrade", ...options, file) : ubus.raw_run("sysupgrade", ...(options ?? []), file); } //------------------------------------------------------------------------------ let dl_stats = { count: 0, // Number of files downloaded. time: 0, // Sum of wall time taken. bytes: 0, // Only includes content, not http headers. Mbits: (bytes) => (bytes * 8.0 / (1024*1024)), log: function(url, file, bytes, time) { this.bytes += bytes; this.time += time; this.count++; let Mbits = this.Mbits(bytes); L.log(2, "Downloaded %s to %s (%dB at %.3f Mbps)\n", url, file, bytes, Mbits/time); }, report: function() { if (this.count > 0) { let Mbps = this.Mbits(this.bytes) / this.time; L.log(2, "Downloaded %d files, %d bytes at %.3f Mbps\n", this.count, this.bytes, Mbps); } }, }; function _get_ca_files() { const cert_path = "/etc/ssl/certs"; try { return fs.glob(`${cert_path}/*.crt`); } catch (error) { L.wrn("Could not access SSL certificates: %s\n", error); return []; } } let _uc_uc = null; let _uc_cb = null; function _get_uclient(url, dst_file) { if (! _uc_uc) { _uc_cb = { url: "", // For error messages. dst_file: "", // Where to put result. output: null, // Handle for dst_file. rsp_headers: {}, _disconnect: (cb) => { if (cb.output) { cb.output.close(); cb.output = null; } this.disconnect(); uloop.end(); }, header_done: (cb) => { cb.output = fs.open(cb.dst_file, "w"); if (! cb.output) { L.err("opening %s: %s\n", cb.dst_file, fs.error()); cb._disconnect(cb); } cb.rsp_headers = this.get_headers(); cb.rsp_headers.status = this.status().status; cb.rsp_headers.content_length = int(cb.rsp_headers["content-length"] || 0); cb.rsp_headers.content_read = 0; }, data_read: (cb) => { // uc.read returns null on eof. let n_read = 0; while ((n_read = cb.output.write(this.read() ?? "")) > 0) { cb.rsp_headers.content_read += n_read; if (options.progress_size && cb.rsp_headers.content_length > options.progress_size) { let pct_read = 100.0 * cb.rsp_headers.content_read / cb.rsp_headers.content_length; L.log(0, "Download progress: %5.1f%% %8d/%d bytes" + (L.stdout_is_pipe ? "\n" : "\r"), pct_read, cb.rsp_headers.content_read, cb.rsp_headers.content_length); } } }, data_eof: (cb) => { cb._disconnect(cb); }, error: (cb, code) => { L.err("uclient error code=%s\n This could be due to the server being down or inaccessible, check\n %s\n", code, cb.url); cb._disconnect(cb); }, }; _uc_uc = uclient.new(url, null, _uc_cb); if (! _uc_uc.ssl_init({ca_files: _get_ca_files()})) { L.die("owut uses ucode-mod-uclient, which requires an SSL library to function:\n" + " Please install one of the libustream-*[ssl|tls] packages as well as\n" + " one of the ca-bundle or ca-certificates packages.\n"); } } _uc_uc.set_url(url); _uc_cb.url = url; _uc_cb.dst_file = dst_file; return _uc_uc; } function _del_uclient() { _uc_uc?.free(); _uc_uc = null; _uc_cb = null; gc(); } function _request(url, dst_file, params) { // uclient function for simple http requests // url = self explanatory // dst_file = result of request // params = dictionary of optional parameters: // 'type' = 'GET' (default), 'HEAD' or 'POST' // 'json_data' = json data, forces 'POST' implicitly let json_data = params?.json_data; let type = params?.type ?? "GET"; if (! (type in ["GET", "HEAD", "POST"])) { L.bug("Invalid request type '%s'\n", type); } let start = time(); let uc = _get_uclient(url, dst_file); if (! uc.connect()) { L.err("Failed to connect\n"); return null; } let headers = { "User-Agent": PROG, }; let args = { headers: headers, }; if (json_data) { type = "POST"; headers["Content-Type"] = "application/json"; args["post_data"] = json_data; } if (! uc.request(type, args)) { L.err("Failed to send request\n"); return null; } uloop.run(); if (_uc_cb.rsp_headers) { let elapsed = (time() - start) || 0.5; let bytes = fs.stat(dst_file).size; dl_stats.log(url, dst_file, bytes, elapsed); L.log(3, "Response headers = %.2J\n", _uc_cb.rsp_headers); if (options.keep) { let hdrs = fs.open(tmp.rsp_header, "w"); hdrs.write(sprintf("%.J\n", _uc_cb.rsp_headers)); hdrs.close(); } } return { ...uc.status(), type: type, headers: _uc_cb.rsp_headers }; } function read_tmp_file(file) { // Reads 'file', then optionally deletes it. // Return raw text. let fd = fs.open(file, "r"); let tx = fd.read("all"); fd.close(); if (! options.keep) { fs.unlink(file); } return tx; } function read_tmp_json(file) { // Read 'file' into a json object, then optionally delete the file. // Primarily used to parse downloads from /tmp. let txt = trim(read_tmp_file(file)); try { return json(txt); } catch (error) { L.err("Expected json, but '%s'\n", error); return txt; } } //------------------------------------------------------------------------------ //-- Source-specific downloaders ----------------------------------------------- function dl_json(url, json_file, keep_going) { let rsp = _request(url, json_file); if (rsp?.status == 200) { return read_tmp_json(json_file); } L.err("Response status %s while downloading\n %s\n", rsp?.status, url); return keep_going ? null : exit(EXIT_ERR); } function dl_platform() { // Get the starting point for the target build. return dl_json(url.platform, tmp.platform_json, true); } function dl_overview() { // Overview is the collection of information about the branches and their releases. // // Note that auc uses branches.json instead. Its content is all included // in overview.json at '$.branches', but we like overview as it has a few // more useful items. It can be found at: // url.api_root/branches.json return dl_json(url.overview, tmp.overview_json); } function dl_failures(feed) { // The build failures info is html that resides in odd, one-man-out URL // locations: // https://downloads.openwrt.org/snapshots/faillogs/mipsel_24kc// // https://downloads.openwrt.org/releases/faillogs-23.05/mipsel_24kc// let uri = feed ? `${url.failed}${feed}/` : url.failed; let htm = `${tmp.failed_html}-${feed ? feed : "feeds"}.html`; let rsp = _request(uri, htm); if (rsp?.status == 200) { return read_tmp_file(htm); } return null; // Expected result when no failures found. } function dl_package_versions() { // Download and consolidate the two sources of package versions into // a single object. let arch = dl_json(url.pkg_arch, tmp.pkg_arch_json, true); let plat = dl_json(url.pkg_plat, tmp.pkg_platform_json, true); return sort({ ...(arch ?? []), ...(plat?.packages ?? []) }); } function check_build_response(response, file) { // Check the build responses for errors and substitute appropriate // messages when the request has failed. if (! response) { return { status: -1, detail: "Error: unknown server error", }; } if (! (response.status in [200, 202])) { let txt = trim(read_tmp_file(file)); try { response = json(txt); } catch { response.detail = "Error: " + txt; } return response; } return null; } function dl_build(config) { // Start a build by POSTing the json build configuration. let rsp = _request(url.build, tmp.build_json, {json_data: config}); return check_build_response(rsp, tmp.build_json) || read_tmp_json(tmp.build_json); } let _use_HEAD = true; function dl_build_status() { // The response is considered valid even if status != 200 (usually 202), // as this is the ongoing status query. See switch cases in 'download' // function. let rsp = _use_HEAD && _request(url.build_status, tmp.build_status_json, {type: "HEAD"}); if (rsp?.status == 405) { _use_HEAD = false; } else if (rsp?.status == 202) { // Build a minimal response. let ib_queue = rsp.headers["x-queue-position"]; let ib_status = rsp.headers["x-imagebuilder-status"]; return { status: rsp.status, detail: ib_status ?? "queued", queue_position: ib_queue, imagebuilder_status: ib_status, }; } // Otherwise do a full GET. rsp = _request(url.build_status, tmp.build_status_json); return check_build_response(rsp, tmp.build_status_json) || read_tmp_json(tmp.build_status_json); } //------------------------------------------------------------------------------ function to_int(s) { // Must be an int or there's a bug in caller. if (! match(s, /^[0-9]+$/)) L.bug("Invalid int '%s'\n", s); return int(s); } function ck_int(s) { // If empty, NaN or not fully converted, return null. if (! s) return null; s = ltrim(s, "0") || "0"; let n = int(s); return n == s ? n : null; } const standard = regexp("^([0-9.]+)(~([0-9a-f]+)){0,1}(-r([0-9]+)){0,1}$", "i"); const pre_bits = regexp("^[-a-z.]+", "i"); const ver_bits = regexp("^[0-9.]+", "i"); const ver_splt = regexp("[^a-z0-9]", "i"); const rev_bits = regexp("-[r]{0,1}([0-9]+)$", "i"); const apk_bits = regexp("^_[a-z]+([0-9]+)$", "i"); function version_parse(version) { // Two forms are parsed incorrectly: // 1) Those with all dashes '-', no hash and no rev. The final number // is interpreted as the rev number: // ct-bugcheck: 2016-07-21 // ver=[2016, 7], hsh=null, rev=21 // 2) Those starting with a hash, and the initial digits are decimal: // open-plc-utils: 1ba7d5a0-6 // ver=[1], hsh="ba7d5a0", rev=6 // // #1 is only aesthetic and ends up working fine; #2 was fixed in // the apk version cleanup and only appears in 23.05 and earlier. let ver, hsh, rev, extra; let parts = match(version, standard); if (parts) { // Standard n.n.n~h-rn sequences with optional hash and rev. ver = map(split(parts[1], ver_splt), to_int); hsh = parts[3]; rev = ck_int(parts[5]); } else { // Some odd ones: // luasoap: 2014-08-21-raf1e100281cee4b972df10121e37e51d53367a98 // luci-app-advanced-reboot: 1.0.1-11-1 if (parts = match(version, pre_bits)) { // adb: android.5.0.2_r1-r3 // libinih: r58-r1 // luci-app-dockerman: v0.5.13-20240317-1 // luci-mod-status: git-24.141.29354-5cfe7a7 (23.05) version = substr(version, length(parts[0])); } if (rev = match(version, rev_bits)) { // Extract and strip rev number from version, in case // it's one of those with lots of dashes. version = substr(version, 0, -length(rev[0])); rev = to_int(rev[1]); } if (ver = match(version, ver_bits)) { version = substr(version, length(ver[0])); ver = map(split(rtrim(ver[0], "."), ver_splt), to_int); } if (length(ver) == 1 && index(version, "-") == 0) { // pservice: 2017-08-29-r3 for (let ns in split(substr(version, 1), /[-.]/)) { let n = ck_int(ns); if (n == null) break; push(ver, n); version = substr(version, length(ns)+1); } } if (extra = match(version, apk_bits)) { // For apk underscore-named versions: // openssh-ftp-server 9.9_p1-r3 9.9_p2-r1 push(ver, int(extra[1])); version = null; } // Anything left over must be the "hash" (if we can call it that). hsh = version || null; if (index(hsh, "-") == 0) hsh = substr(hsh, 1); } return { ver, hsh, rev }; } function pkg_ver_cmp(old, new, strict) { if (old == null) return -2; if (new == null) return 2; let v1 = version_parse(old); let v2 = version_parse(new); // Ensure format changes are respected: jansson 2.14-r3 2.14.1-r1 let len = max(length(v1.ver), length(v2.ver)); while (length(v1.ver) < len) push(v1.ver, 0); while (length(v2.ver) < len) push(v2.ver, 0); for (let i, n1 in v1.ver) { let n2 = v2.ver[i]; if (n1 < n2) return -1; if (n1 > n2) return 1; } if (v1.rev < v2.rev) return -1; if (v1.rev > v2.rev) return 1; // Ignore the hashes unless we're being strict if (strict && v1.hsh != v2.hsh) return 99; // 99 means "I don't know" return 0; } function _vmangle(v) { v = replace(v, "-SNAPSHOT", ".999"); v = replace(v, "SNAPSHOT", "999"); v = replace(v, "-rc", "-r"); if (substr(v, -2) == ".0") v += "-r999"; // After the -rcN return v; } function version_cmp(v1, v2) { // Compare two versions and return cmp value based on their relative // ordering. We want to make sure RCs are before any release, and // SNAPSHOTs are after, hence the string mangling. return pkg_ver_cmp(_vmangle(v1), _vmangle(v2)); } function version_older(new_version, base_version) { // Use version_cmp to see if new_version < base_version. Useful to detect // if the user is attempting to downgrade their installation. // // version_older('23.05.2', 'SNAPSHOT') -> true // version_older('23.05-SNAPSHOT', 'SNAPSHOT') -> true // version_older('23.05.0', '23.05.0-rc1') -> false return version_cmp(new_version, base_version) < 0; } function branch_of(version) { // Extract and return the branch for a given version. // SNAPSHOT -> SNAPSHOT // 23.05.0-rc1 -> 23.05 // 23.05.3 -> 23.05 // 23.05-SNAPSHOT -> 23.05 if (version == "SNAPSHOT") return "SNAPSHOT"; let m = match(version, /\d+\.\d+/); return m ? m[0] : ""; } //------------------------------------------------------------------------------ //-- Package management -------------------------------------------------------- function is_installed(pkg) { return pkg in packageDB; } function is_default(pkg) { // Return status if package is in the defaults for this device, i.e., it // will be present as part of the standard install. // Don't attempt to do the following, because we care about things that // may not be installed, e.g., 'dnsmasq' replaced by 'dnsmasq-full'. // return pkg in packageDB && packageDB[pkg].default; return pkg in packages.default; } function is_top_level(pkg) { // We only check in the installed packages. return is_installed(pkg) && packageDB[pkg].top_level; } function is_available(pkg) { // Search for a given package in the combined platform/arch package list. return pkg in packages.available; } //------------------------------------------------------------------------------ const SrcType = { ALL: 0, USER_ONLY: 1, DEFAULT_ONLY: 2, }; function what_provides(pkg) { // Attempt to find the package provider, if it exists. This is a // hacky workaround for https://github.com/efahl/owut/issues/10, see // that issue for current progress towards a proper solution. let result; result = ubus.raw_run("opkg", "whatprovides", pkg); if (result) { let m = match(trim(result.stdout), /What provides.*\n *(.*)/); if (m) return m[-1]; } result = ubus.raw_run("apk", "list", "--installed", "--providers", "--manifest", pkg); if (result && result.stdout) { // dnsmasq-full 2.90-r3 let m = split(result.stdout, /\s+/); if (m) return m[1]; } return null; } function top_level(src_type) { // Return only the installed top level packages, i.e., those upon which // no other package depends. 'src_type' specifies how the top-level list // is to be filtered. let tl; switch (src_type) { case SrcType.ALL: tl = is_top_level; break; case SrcType.DEFAULT_ONLY: tl = (pkg) => is_top_level(pkg) && is_default(pkg); break; case SrcType.USER_ONLY: tl = (pkg) => is_top_level(pkg) && ! is_default(pkg); break; } return filter(keys(packageDB), tl); } function with_versions(pkg_list) { let versioned = {}; for (let pkg in pkg_list) { let ver = packages.available[pkg]; if (! ver) { // Hackery because of packages historically missing from the indexes. if (pkg in ["kernel", "libc"]) continue; L.wrn("Package '%s' has no available current version\n", pkg); } versioned[pkg] = ver; } return versioned; } function removed_defaults() { // Return the list of default packages that have been removed. return filter(packages.default, (p) => ! is_installed(p)); } function add_package(pkg, force) { // 'force' is used during package_changes processing to ensure that // the replacement is added, irrespective of availability (e.g., a // broken build for the package being added would otherwise fail). if (is_installed(pkg)) { packageDB[pkg].top_level = true; return true; } if (! force && ! is_available(pkg)) { L.err("Package '%s' is not available on this platform\n", pkg); return false; } packageDB[pkg] = { version: null, new_version: packages.available[pkg], top_level: true, default: is_default(pkg), }; return true; } function remove_package(pkg, silent) { // pkg - the package to remove, if possible. if (! is_installed(pkg)) { if (! silent) L.err("Package '%s' is not installed and cannot be removed\n", pkg); } else { if (! is_top_level(pkg)) { if (! silent) L.wrn("Package '%s' is a dependency, removal will have no effect on the build\n", pkg); } else if (is_default(pkg)) { L.wrn("Package '%s' is a default package, removal may have unknown side effects\n", pkg); } delete packageDB[pkg]; return true; } return false; } function replace_package(old_pkg, new_pkg) { // Do optional replacements. If 'old_pkg' is not installed, then we // have nothing to do but report success. if (is_installed(old_pkg)) { remove_package(old_pkg, true); return add_package(new_pkg, true); } return true; } function clean_slate() { for (let pkg in keys(packageDB)) { if (! is_default(pkg)) { delete packageDB[pkg]; } } for (let pkg in packages.default) { if (is_available(pkg)) { add_package(pkg); } } return true; } //------------------------------------------------------------------------------ function collect_defaults(board, device) { // Use both board json for its defaults, then add the device-specific // defaults to make one big defaults list. let defaults = []; // Must filter out any device-specific removals. for (let pkg in board) { if (! ("-"+pkg in device)) { push(defaults, pkg); } } for (let pkg in device) { if (! match(pkg, /^-/)) { push(defaults, pkg); } } for (let pkg in packages.non_upgradable) { if (! (pkg in defaults)) push(defaults, pkg); } packages.default = sort(defaults); } function parse_package_list(opt) { // Return array and null as-is, parse strings into array of string. // String separators are any of comma, space or newline sequences. // Allows use of either "list" or "option" in config file. if (type(opt) == "string") { opt = split(opt, /[,[:space:]]+/); } return opt; } function apply_pkg_mods() { // 1) Handle 'overview.package_changes'. // 2) Generate any clean-slate request. // 3) Apply user-specified removals. // 4) Apply user-specified additions. // // Package names in changes are already in canonical form. // changes = [ // { // source: "name-from", // Required string - name of package in target version // target: "name-to", // Optional string - if present, name of replaced package in installed version // revision: 123, // Required int - revision at which package change was introduced // mandatory: false, // Optional bool - if true, then force add/remove of target/source, respectively // }, // ... // ]; // // For a case of simple removal, see 'kmod-nft-nat6', which was merged // into 'kmod-nft-nat' in rev 19160. let errors = 0; // TODO think about downgrades, i.e., when to.rev_num < from.rev_num... let ignored = parse_package_list(options.ignored_changes); let rev_num = build.to.rev_num(); for (let chg in packages.changes) { // Upgrades if (chg.source in ignored) { // Allow user to retain old packages on demand, but inform them when changes are skipped. L.log(1, "Ignoring package change %s to %s\n", chg.source, chg.target); continue; } if (chg.revision <= rev_num) { if (chg.target) { if (is_installed(chg.source)) packages.replaced[chg.source] = chg.target; if (! replace_package(chg.source, chg.target)) errors++; } else if (is_installed(chg.source)) { // No target, only source, so remove it. packages.replaced[chg.source] = null; if (! remove_package(chg.source)) errors++; } } } if (options.clean_slate) { clean_slate(); } // Do removals first, so any conflicts are suppressed. for (let pkg in parse_package_list(options.remove)) { if (! pkg) continue; if (! remove_package(pkg)) { errors++; } } for (let pkg in parse_package_list(options.add)) { if (! pkg) continue; if (! add_package(pkg)) { errors++; } } for (let pkg in ignored) { if (! add_package(pkg)) { errors++; } } return errors == 0; } function collect_packages() { // Using data from rpc-sys packagelist, build an object containing all // installed package data. // // packageDB = { // "pkg1": { // version: "version-string", // new_version: "version-string", // top_level: bool, // default: bool, // }, // "pkg2": { // ... // }, // }; let installed = ubus.call("rpc-sys", "packagelist", { all: true }); let top_level = ubus.call("rpc-sys", "packagelist", { all: false }); packages.installed = installed.packages; packages.top_level = sort(keys(top_level.packages)); packages.available = dl_package_versions() ?? {}; // Might be null in ancient versions. for (let pkg, ver in packages.installed) { packageDB[pkg] = { version: ver, new_version: packages.available[pkg], top_level: pkg in packages.top_level, default: is_default(pkg), }; } if (! apply_pkg_mods()) { L.die("Errors collecting package data, terminating.\n"); } } //------------------------------------------------------------------------------ function initialize_urls() { let sysupgrade = rtrim(uci.get_first("attendedsysupgrade", "server", "url"), "/") || default_sysupgrade; let api = sysupgrade + "/api/v1"; let build = api + "/build"; let status = build + "/{hash}"; let static = sysupgrade + "/json/v1"; let store = sysupgrade + "/store"; let overview = static + "/overview.json"; url = { sysupgrade_root: sysupgrade, // sysupgrade server base url api_root: api, // api for builds and other dynamic requests build: build, // build request build_status: status, // build status, same as build appended with hash static_root: static, // json static api root url store_root: store, // api database directory for build results platform: null, // release platform json overview: overview, // Top-level overview.json, contains branch info pkg_arch: null, // Generic arch package list, containing most of the items pkg_plat: null, // Platform packages, built specifically for this platform upstream: null, // upstream build server base url, from overview.json download: null, // upstream with directory at which the "to" build can be found failed: null, // Failure list html }; } function show_versions(check_version_to) { // Using the ASU overview to get all the available versions, scan that // for version-to and report. L.log(0, "Available 'version-to' values from %s:\n", url.sysupgrade_root); let branches = release.branches; let installed = build.from.version; let selected = build.to?.version ?? options.version_to; let found_to = false; for (let branch, details in branches) { L.log(0, " %s %s branch\n", branch, branch == "SNAPSHOT" ? "main" : "release"); for (let version in details.versions) { let suffix = []; if (version == details.latest) push(suffix, "latest"); if (version == installed ) push(suffix, "installed"); if (version == selected ) { push(suffix, "requested"); found_to = true; } suffix = length(suffix) == 0 ? "" : " (" + join(",", suffix) + ")"; L.log(0, " %s%s\n", version, suffix); } } if (! found_to) L.log(0, "\nYour specified version-to '%s' is not available. " + "Pick one from above.\n", selected); else if (check_version_to) L.log(0, "\nYour version-to '%s' appears valid, so either:\n" + " 1) This build has been removed from the server, or\n" + " 2) The ASU server is having issues.\n", selected); } //------------------------------------------------------------------------------ const BuildInfo = { is_snapshot: function() { return this.version == "SNAPSHOT"; }, is_rel_snapshot: function() { return match(this.version, /.*-SNAPSHOT/) != null; }, is_downgrade_from: function(from) { if (version_older(this.version, from.version)) return true; // Same or newer version, so check revision number. return this.rev_num() < from.rev_num(); }, rev_num: function() { // Extracts the revision number from the revision code: // "r23630-842932a63d" -> 23630 let m = parse_rev_code(this.rev_code); return m ? int(m[1]) : 0; }, }; function collect_device_info() { let sysb = ubus.call("system", "board"); let efi_check = null; if (options.device) { // Allow test cases (or "cross" downloads?), using '--device' // option. tegra is one with 'sdcard' sutype, use as follows: // owut ... --device tegra/generic:compulab_trimslice:squashfs let bv = split(options.device, ":"); sysb.release.target = bv[0]; sysb.board_name = bv[1]; sysb.rootfs_type = bv[2] || "squashfs"; efi_check = bv[3] || "no"; // Default to no, if unspecified. } let target = sysb.release.target; let platform = replace(sysb.board_name, /,/, "_"); let ver_from = sysb.release.version; let sutype; // Sysupgrade type: combined, combined-efi, sdcard or sysupgrade (or trx or lxl or ???) // Generic efi targets are: // armsr - EFI-boot only, see https://github.com/efahl/owut/issues/21 // loongarch - EFI-boot only // x86 - EFI- or BIOS-boot let efi_capable = match(target, /^(armsr|loongarch|x86)\//); if (efi_check == null) { efi_check = efi_capable ? "check" : "no"; // one of: force, no, check } // See also, auc.c:1657 'select_image' for changing installed fstype to requested one. // Wait, is there also "factory"??? See asu/build.py abt line 246 if (efi_capable) { // No distinction between "factory" and "sysupgrade" for the generic devices. sutype = "combined"; } else { // Could be that sutype = "sdcard" for some devices, but // assume it is "sysupgrade", which might be wrong. We'll // fix this after we get the profiles for the device, see // 'collect_all'. sutype = "sysupgrade"; } if (efi_check == "force" || (efi_check == "check" && fs.access("/sys/firmware/efi"))) { sutype = `${sutype}-efi`; } device = { arch: null, // "x86_64" or "mipsel_24kc" or "aarch64_cortex-a53", contained in platform_json target: target, // "x86/64" or "ath79/generic" or "mediatek/mt7622", from system board platform: platform, // "generic" (for x86) or "tplink,archer-c7-v4" or "linksys,e8450-ubi" fstype: sysb.rootfs_type, // "ext4" or "squashfs", what is actually present now sutype: sutype, // Sysupgrade type, combined, combined-efi or sysupgrade or sdcard }; build = { from: proto({ version: ver_from, // Full version name currently installed: "SNAPSHOT" or "22.03.1" rev_code: sysb.release.revision, // Kernel version that is currently running kernel: sysb.kernel, // Current build on device }, BuildInfo) }; } function collect_build_info() { let ver_to = options.version_to ? uc(options.version_to) : null; if (ver_to) { if (index(ver_to, "RC") > 0) ver_to = lc(ver_to); if (ver_to in release.branches) { // User specified a branch name, not a specific version, // so coerce to latest in that branch. ver_to = release.branches[ver_to].latest; } } else if (index(build.from.version, "SNAPSHOT") >= 0) // Any snapshot stays on the same branch. ver_to = build.from.version; else { // Any unspecified non-snapshot gets latest from same branch. let b = branch_of(build.from.version); ver_to = release.branches[b].latest; } let ver_to_branch = branch_of(ver_to); if (! (ver_to_branch in release.branches) || ! (ver_to in release.branches[ver_to_branch].versions)) { show_versions(true); exit(EXIT_ERR); } let fstype = options.fstype || device.fstype; build.to = proto({ version: ver_to, // Full version name of target: "22.03.0-rc4", "23.05.2" or "SNAPSHOT" rev_code: null, // Build number from target kernel: null, // Kernel version of target build, extracted from BOM fstype: fstype, // Requested root FS type img_prefix: null, // Prefix of image being built img_file: null, // Full image name to download and install date: null, // Build date of target }, BuildInfo); } function age(from) { let delta = time() - from; let hours = (delta+1800) / 3600; if (hours < 48) return sprintf("~%d hours ago", hours); return sprintf("~%.0f days ago", hours / 24.0); } function complete_build_info(profile, board) { let dt = gmtime(board.source_date_epoch); build.to.date = sprintf("%4d-%02d-%02dT%02d:%02d:%02dZ (%s)", dt.year, dt.mon, dt.mday, dt.hour, dt.min, dt.sec, age(board.source_date_epoch)); build.to.rev_code = board.version_code; build.to.img_prefix = profile.image_prefix; // First, only allow legitimate "sysupgrade" types through. let images = filter(profile.images, (img) => img.filesystem && img.filesystem != "initramfs" && ! match(img.type, /factory/)); let valid_fstypes = uniq(sort(map(images, (img) => img.filesystem))); if (! (build.to.fstype in valid_fstypes)) { L.die("File system type '%s' should be one of %s\n", build.to.fstype, valid_fstypes); } // Next, reduce candidate images to just those with desired fstype. images = filter(images, (img) => img.filesystem == build.to.fstype); // Here is where we fix our guess for 'sutype' made above in // 'collect_device_info' (look for "sdcard" there). let valid_sutypes = uniq(sort(map(images, (img) => img.type))); if (! (device.sutype in valid_sutypes)) { if (device.sutype == "sysupgrade" && length(valid_sutypes) == 1) device.sutype = valid_sutypes[0]; else L.bug("%s:%s Sysupgrade type '%s' should be one of %s\n", device.target, device.platform, device.sutype, valid_sutypes); } for (let img in images) { if (img.filesystem == build.to.fstype && img.type == device.sutype) { build.to.img_file = img.name; break; } } } function collect_overview() { // When building the versions list, refer to // https://openwrt.org/docs/guide-developer/security#support_status collect_device_info(); let overview = dl_overview(); url.upstream = overview.upstream_url ?? default_upstream; server_limits = { max_rootfs_size: overview.server?.max_custom_rootfs_size_mb || 1024, max_defaults_length: overview.server?.max_defaults_length || 20480, }; if (options.rootfs_size && options.rootfs_size > server_limits.max_rootfs_size) { L.die("%d is above this server's maximum rootfs partition size of %d MB\n", options.rootfs_size, server_limits.max_rootfs_size); } let bad_releases = [ "23.05.1", ]; release = { branch: null, // Release branch name: "SNAPSHOT" or "21.07" or "23.05" dir: null, // ASU and DL server release branch directory: "snapshots" or "release/23.05.0" branches: {}, }; for (let branch_id, data in overview.branches) { release.branches[branch_id] = { latest: null, // Determined below. versions: filter(data.versions, (v) => !(v in bad_releases)), }; } // Put everything in order, select 'latest'... release.branches = sort(release.branches, version_cmp); for (let data in values(release.branches)) { data.versions = sort(data.versions, version_cmp); for (let version in data.versions) { if (index(version, "-SNAPSHOT") >= 0) continue; if (data.latest == null || version_older(data.latest, version)) { data.latest = version; } } } collect_build_info(); release.branch = branch_of(build.to.version); let active_branch = overview.branches[release.branch]; if (! active_branch) { // TODO Should probably check: // || ! (build.to.version in release.branches[release.branch].versions) // but the versions list we got from the overview is incomplete // (i.e., ASU server will build a lot more than is shown) and // we catch that when trying to fetch board_json below. show_versions(true); exit(EXIT_ERR); } release.dir = replace(active_branch.path, "{version}", build.to.version); packages.changes = active_branch.package_changes; } function collect_platform() { // ASU platform.json often updates days after upstream profiles, so the // 'version_code' is wrong and build requests fail. As of 2024-06-09, // this appears to have been solved, see ASU commit 1e6484d. // // Previously, to solve this issue we'd look at the download server: // url.platform = `${url.upstream}/${release.dir}/targets/${device.target}/profiles.json`; // let profile = platform.profiles[device.platform]; // // Use upstream as much as possible, per @aparcar's comment: // https://github.com/efahl/owut/issues/2#issuecomment-2165021615 url.platform = `${url.upstream}/${release.dir}/targets/${device.target}/profiles.json`; let platform = dl_platform(); if (! platform) { L.die("Unsupported target '%s'\n", device.target); } if (! (device.platform in keys(platform.profiles))) { // This is a mapped profile, e.g.: raspberrypi,model-b-plus -> rpi let found = false; for (let real_platform, data in platform.profiles) { for (let alias in data.supported_devices) { alias = replace(alias, ",", "_"); if (device.platform == alias) { found = true; L.log(2, "Mapping platform %s to %s\n", device.platform, real_platform); device.platform = real_platform; break; } } if (found) break; } if (! found) { if ("generic" in keys(platform.profiles)) device.platform = "generic"; else L.die("Unsupported profile: %s\n Valid profiles are %s\n", device.platform, keys(platform.profiles)); } } let profile = platform.profiles[device.platform]; device.arch = platform.arch_packages; complete_build_info(profile, platform); collect_defaults(platform.default_packages, profile.device_packages); if ("linux_kernel" in platform) { build.to.kernel = platform.linux_kernel.version; } } function collect_all() { collect_overview(); collect_platform(); let location = build.to.is_snapshot() ? "snapshots/faillogs" : `releases/faillogs-${release.branch}`; url.failed = `${url.upstream}/${location}/${device.arch}/`; url.pkg_arch = `${url.static_root}/${release.dir}/packages/${device.arch}-index.json`; url.pkg_plat = `${url.static_root}/${release.dir}/targets/${device.target}/index.json`; let prefix = "openwrt-"; let starget = replace(device.target, /\//, "-"); if (! build.to.is_snapshot()) prefix = `${prefix}${build.to.version}-`; if (build.to.is_rel_snapshot()) prefix = lc(`${prefix}${build.to.rev_code}-`); url.download = `${url.upstream}/${release.dir}/targets/${device.target}`; collect_packages(); if (! build.to.kernel) { // Fall back to pre-"linux_kernel" scanning of packages. build.to.kernel = "unknown"; for (let pkg, data in packageDB) { if (data.new_version && index(pkg, "kmod-") == 0 && is_default(pkg)) { build.to.kernel = match(data.new_version, /^\d+\.\d+\.\d+/)[0]; break; } } } pkg_name_len = max(...map(keys(packageDB), length), ...map(packages.default, length)); } //------------------------------------------------------------------------------ function dump() { // Send forth a json representation of all the stuff we've collected. let comma = (l) => L.show(l) ? "," : ""; let inst = sort(packages.installed); let urls = sort(url); let tmps = sort(tmp); let pkgs = sort(packageDB); L.log(-1, '{\n'); L.log(-1, '"version": "%s",\n', PROG); L.log(-1, '"options": %.2J,\n', options); L.log(-1, '"server_limits": %.2J,\n', server_limits); L.log( 1, '"url": %.2J,\n', urls); L.log( 1, '"tmp": %.2J,\n', tmps); L.log( 1, '"build": %.2J,\n', build); L.log(-1, '"device": %.2J,\n', device); L.log( 0, '"release": %.2J%s\n', release, comma(2)); L.log( 2, '"packageDB": %.2J%s\n', pkgs, comma(3)); L.log( 3, '"packages": %.2J\n', packages); L.log(-1, '}\n'); } function list() { // Generate a list formatted for use with firmware-selector or // source build. let packages; switch (options.format) { case "config": packages = top_level(SrcType.USER_ONLY); let ctype = "y"; // "y" to install, "m" just build package. for (let pkg in sort(packages)) { L.log(0, "CONFIG_PACKAGE_%s=%s\n", pkg, ctype); } break; case "fs-all": packages = top_level(SrcType.ALL); L.log(0, "%s\n", join(" ", packages)); break; case "fs-user": default: packages = top_level(SrcType.USER_ONLY); push(packages, ...map(removed_defaults(), (pkg) => "-"+pkg)); L.log(0, "%s\n", join(" ", packages)); break; } } function show_config() { // Pretty-print the major configuration values. let downgrade = build.to.is_downgrade_from(build.from) ? L.colorize(L.RED, " DOWNGRADE") : ""; let hash = split(build.to.rev_code, "-")[1]; L.log(0, `ASU-Server ${url.sysupgrade_root}\n` `Upstream ${url.upstream}\n` `Target ${device.target}\n` `Profile ${device.platform}\n` `Package-arch ${device.arch}\n` ); L.log(1, `Root-FS-type ${device.fstype}\n` `Sys-type ${device.sutype}\n` ); L.log(0, `Version-from ${build.from.version} ${build.from.rev_code} (kernel ${build.from.kernel})\n` `Version-to ${build.to.version} ${build.to.rev_code} (kernel ${build.to.kernel})${downgrade}\n` ); if (hash) L.log(1, `Build-commit https://git.openwrt.org/?p=openwrt/openwrt.git;a=shortlog;h=${hash}\n`); L.log(1, `Build-FS-type ${build.to.fstype}\n` `Build-at ${build.to.date}\n` `Image-prefix ${build.to.img_prefix}\n` `Image-URL ${url.download}\n` `Image-file ${build.to.img_file}\n` ); L.log(1, "Installed %3d packages\n", length(packageDB)); L.log(1, "Top-level %3d packages\n", length(top_level(SrcType.ALL))); L.log(1, "Default %3d packages\n", length(packages.default)); L.log(1, "User-installed %3d packages (top-level only)\n", length(top_level(SrcType.USER_ONLY))); L.log(1, "\n"); } function check_updates() { // Scan the old and new package lists, return the number of changed // packages and the number of missing packages that would cause a // build failure. let changes = 0; let missing = 0; let downgrades = 0; L.log(1, "Package version changes:\n"); let w0 = pkg_name_len + 2; let w1 = max(...map(values(packageDB), (p) => length(p.version))); let f0 = ` %-${w0}s %s%-${w1}s %s%s%s\n`; let new = ''; for (let pkg, data in sort(packageDB)) { if (pkg in packages.non_upgradable) continue; let old = data.version; let new = data.new_version; if (old == new) continue; let cmp = pkg_ver_cmp(old, new, true); if (cmp == 0) continue; changes++; let c1 = ""; let c2 = ""; switch (cmp) { case -2: // Old is null. // This happens when you '--add' a new package. c1 = L.color(L.YELLOW); old = "not-installed"; // fallthrough case -1: c2 = L.color(L.GREEN); break; case 1: downgrades++; c2 = L.color(L.RED); break; case 2: // New is null. if (! is_top_level(pkg) && ! is_default(pkg)) c2 = L.color(L.YELLOW); else { missing++; c2 = L.color(L.RED); } new = "missing to-version"; break; case 99: // They are different (hashes usually), but we // can't tell if one is older than the other. c2 = L.color(L.YELLOW); break; } L.log(1, f0, pkg, c1, old, c2, new, L.color(L.reset)); } if (missing) { L.log(0, "%d packages missing in target version, %s\n", missing, L.colorize(L.RED, "cannot upgrade")); } if (downgrades) { L.log(0, "%d packages were downgraded\n", downgrades); } if (changes) { L.log(0, "%d packages are out-of-date\n", changes); } else { L.log(0, "All packages are up-to-date\n"); } if (length(packages.replaced)) { let f0 =` %-${w0}s %s\n`; L.log(1, "\nAutomatic package replacements/removals:\n"); L.log(1, f0, "Package", "Replaced-by"); for (let chg, to in sort(packages.replaced)) { L.log(1, f0, chg, to ?? L.colorize(L.YELLOW, "removed")); } L.log(1, "Details at %s\n", url.overview); } L.log(1, "\n"); return { missing, changes, downgrades }; } function check_missing() { // Mostly silent check for missing packages. Used when generating a // package list for external uses, 'list' or 'blob'. L.push(-1); let updates = check_updates(); L.pop(); if (updates.missing) { L.err("There are %s missing packages in the build package list, run 'owut check'\n", updates.missing); return false; } return true; } function check_defaults() { // Scan the package defaults to see if they are // 1) missing from the installation or // 2) modified/replaced by some other package. let ignored = parse_package_list(options.ignored_defaults); let changes = {}; let count = { ignored: 0, retained: 0, replaced: 0, removed: 0 }; for (let pkg in packages.default) { if (pkg in packages.non_upgradable) continue; if (pkg in ignored) { count.ignored++; changes[pkg] = L.colorize(L.GREEN, "user ignored"); } else if (is_installed(pkg)) count.retained++; else { changes[pkg] = what_provides(pkg); if (changes[pkg]) count.replaced++; else { count.removed++; changes[pkg] = L.colorize(L.YELLOW, "not installed"); } } } L.log(1, "Default package analysis:\n"); if (length(changes) == 0) { L.log(1, " No missing or modified default packages\n\n"); } else { if (! L.show(1)) L.log(0, "There are %d missing and %d modified default packages\n", count.removed, count.replaced); let wid = pkg_name_len + 2; let fmt = ` %-${wid}s %s\n`; L.log(1, fmt, "Default", "Provided-by"); for (let p, a in changes) { L.log(1, fmt, p, a); } L.log(1, "\n"); } return count; } function check_pkg_builds() { // Scraping the failures.html is a total hack. // Let me know if you have an API on downloads (or other build site) // that can give this info. // // The lines we're scraping look like: // gummiboot/-Tue Apr 23 07:05:36 2024 let info = regexp( '([^<]*)/' + '[^<]*' + '([^<]*)', 'g' ); let n_failed = 0; let n_broken = 0; let html_blob = dl_failures(); let feeds = map(match(html_blob, info), (f) => f[1]); if (! html_blob || ! feeds) { L.log(1, "No package build failures found for %s %s.\n\n", build.to.version, device.arch); } else { L.log(1, "There are currently package build failures for %s %s:\n", build.to.version, device.arch); for (let feed in feeds) { L.log(1, " Feed: %s\n", feed); html_blob = dl_failures(feed); if (html_blob) { let fails = match(html_blob, info); let fmt = ` %-${pkg_name_len}s %s - %s\n`; for (let fail in fails) { n_broken++; let pkg = fail[1]; let date = fail[2]; let msg; if (is_installed(pkg)) { n_failed++; msg = L.colorize(L.RED, "package installed locally, cannot upgrade"); } else { msg = "not installed"; } L.log(1, fmt, pkg, date, msg); } } } let prefix = n_failed ? L.colorize(L.RED, `${n_failed} of ${n_broken} package build failures affect this device:`) : L.colorize(L.GREEN, `${n_broken} package build failures don't affect this device,`); L.log(n_failed ? 0 : 1, "%s details at\n %s\n\n", prefix, url.failed); } return ! n_failed; } function check_init_script() { // If // 1) the user has an immutable image, and // 2) that image contains an ASU generated custom defaults file, and // 3) the user has not mentioned or overridden it, // then warn them and have them read the documentation. const asu_defaults = "/rom/etc/uci-defaults/99-asu-defaults"; if (options.init_script) { if (options.init_script != "-" && ! fs.access(options.init_script)) { L.die("The specified init-script '%s' does not exist\n", options.init_script); } } else if (fs.access(asu_defaults)) { L.wrn(`You have a custom uci-defaults script at\n` ` ${asu_defaults}\n` `and have not referenced it with the 'init-script' option.\n` `Please read:\n` ` ${wiki_url}#using_a_uci-defaults_script\n\n` ); } } function blob(report) { // Exclude default packages unless explicitly listed in 'packages'. When // moving between releases, default packages may be added, deleted or // renamed, which can result in bricks if something important is missed. let contains_defaults = true; let log_level = report ? 1 : 2; // We try to use 'packages_versions' in our server request, but can // only do so if all packages have valid versions. We fall back to // using 'packages' when any version is undefined. let package_list = { packages: top_level(SrcType.ALL) }; package_list["packages_versions"] = with_versions(package_list.packages); package_list["type"] = null in values(package_list.packages_versions) ? "packages" : "packages_versions"; let init_script; if (options.init_script) { let inits_file = options.init_script == "-" ? fs.stdin : fs.open(options.init_script); if (! inits_file) { L.err("Init script file '%s' does not exist\n", options.init_script); return null; } else { init_script = inits_file.read("all"); inits_file.close(); if (length(init_script) > server_limits.max_defaults_length) { L.err("'%s' is over the ASU server's %s byte maximum\n", options.init_script, server_limits.max_defaults_length); return null; } } } let rc = (options.rev_code == "none" ? "" : options.rev_code) ?? build.to.rev_code; L.log(log_level, "Request:\n Version %s %s (kernel %s)\n", build.to.version, rc || "none", build.to.kernel); if (build.to.fstype != device.fstype) { L.log(log_level, " Change file system type from '%s' to '%s'\n", device.fstype, build.to.fstype); } let blob = { client: PROG, target: device.target, profile: device.platform, // sanitized board name version: build.to.version, version_code: rc, filesystem: build.to.fstype, diff_packages: contains_defaults, }; blob[package_list.type] = package_list[package_list.type]; if (options.rootfs_size) { if (options.rootfs_size > server_limits.max_rootfs_size) { L.die("This server allows a maximum rootfs partition size of %d MB\n", server_limits.max_rootfs_size); } blob.rootfs_size_mb = options.rootfs_size; L.log(log_level, " ROOTFS_PARTSIZE set to %d MB\n", options.rootfs_size); } if (init_script) { blob.defaults = init_script; L.log(log_level, " Included init script '%s' (%d bytes) in build request\n", options.init_script, length(init_script)); } return blob; } function json_blob() { let b = blob(true); return b ? sprintf("%J", b) : null; } function show_blob() { let b = blob(); if (b) { L.log(0, "%.2J\n", b); } } function select_image(images) { for (let image in images) { if (image.filesystem == build.to.fstype && image.type == device.sutype) { return image; } } return null; } function verify_image() { // Verify the image with both the saved sha256sum and by passing it // to 'sysupgrade --test'. // // Failed images will be delete, unless '--keep' is set. let image = options.image; if (! fs.access(image)) { L.err("Image file '%s' does not exist\n", image); return false; } let info = fs.stat(image); L.log(1, "Verifying : %s (%d bytes) against %s\n", image, info.size, tmp.firmware_sums); let result = sha256.verify(); if (result?.code == 0) { L.log(1, " Saved sha256 matches\n"); } else { let file_sha = sha256.sum(image); let expected = sha256.saved_sum(image); L.err(`sha256 doesn't match:\n` ` calculated '${file_sha}'\n` ` saved '${expected}'\n`); if (! options.keep) { fs.unlink(image); } return false; } result = sysupgrade(image, true, ["--test"]); if (result?.code == 0) { L.log(1, " %s\n", join("\n ", split(trim(result.stderr), "\n"))); } else { L.err("sysupgrade validation failed:\n"); if (result.stdout) L.log(0, "stdout =\n%s\n", result.stdout); if (result.stderr) L.log(0, "stderr =\n%s\n", result.stderr); if (! options.keep) { fs.unlink(image); } return false; } L.log(1, "Checks complete, image is valid.\n"); return true; } function download() { // Use the json_blob to create a build request, run the request and // download the result. // // On success, return true. // // Certain failures often indicate that the ASU server has fallen // behind the build servers. For example, // // Error: Received incorrect version r26608-blah (requested r26620-blah) // // When we see one of these cases, we display one or more error // messages, increment an error counter and use the counter to fall // out of the main build-polling loop, and then generate a final // message "wait a bit and retry". // // Other inexplicable or better explained errors simply show the error // message and then immediately return false. let blob = json_blob(); if (! blob) return false; if (options.keep) { L.log(2, "Saving build blob to %s\n", tmp.req_json); let save = fs.open(tmp.req_json, "w"); if (save) { save.write(blob); save.close(); } } let response = dl_build(blob); let t_start = time(); let t_build_start = t_start; let hash = response?.request_hash; if (hash) { L.log(0, "Request hash:\n %s\n", hash); url.build_status = replace(url.build_status, "{hash}", hash); } let errors = 0; let prev_status = ""; let poll_interval = 500; // Check first response right away. while (response && !errors) { let status = response.status; if (response.detail == prev_status) { L.backup(); } else { L.log(0, "--\n"); L.mark(); prev_status = response.detail; } let t_now = time(); let highlight = substr(response.detail, 0, 6) == "Error:" ? L.RED : L.GREEN; L.log(0, "Status: %s", L.colorize(highlight, response.detail)); switch (response.detail) { case "queued": L.log(0, " - %d ahead of you", response.queue_position); t_build_start = t_now; break; case "started": L.log(0, " - %s", response.imagebuilder_status ?? "setup"); break; default: break; } L.log(0, "\n"); let t_total = t_now - t_start; let t_queue = t_build_start - t_start; let t_build = t_now - t_build_start; L.log(0, "Progress: %3ds total = %3ds in queue + %3ds in build\n", t_total, t_queue, t_build); switch (status) { case 202: // Build in-progress, update monitor at user-specified interval. sleep(poll_interval); poll_interval = options.poll_interval; response = dl_build_status(); break; case 200: // All done. let req_version_code = response.request.version_code; L.log(0, "\nBuild succeeded in %3ds total = %3ds in queue + %3ds to build:\n", t_total, t_queue, t_build); L.log(2, " build_at = %s\n", response.build_at); L.log(1, " version_number = %s\n", response.version_number); L.log(1, " version_code = %s (requested %s)\n", response.version_code, req_version_code); L.log(1, " kernel_version = %s\n", build.to.kernel); L.log(1, " rootfs_size_mb = %s\n", response.request.rootfs_size_mb ?? "default"); L.log(1, " init-script = %s\n", response.request.defaults ? options.init_script : "no-init-script"); L.log(3, " images = %.2J\n", response.images); L.log(4, " build_cmd = %.2J\n", response.build_cmd); L.log(4, " manifest = %.2J\n", response.manifest); L.log(1, "\n"); let image = select_image(response.images); if (! image) { L.err("Could not locate an image for '%s' and '%s'\n", build.to.fstype, device.sutype); return false; } let sha = image.sha256; // LuCI-ASU uses sha256_unsigned for something... let dir = response.bin_dir; let bin = `${url.store_root}/${dir}`; let img = `${bin}/${image.name}`; let dst = options.image; L.log(1, "Image source: %s\n", img); let rsp = _request(img, dst); if (rsp?.status != 200) { L.err("Couldn't download image %s\n", image.name); return false; } L.log(0, "Image saved : %s\n", dst); sha256.save(dst, sha); // Create the manifest, and validate against request. let manifest = response.manifest; let manifest_file = fs.open(tmp.firmware_man, "w"); if (manifest_file) { manifest_file.write(sprintf("%.2J\n", response)); manifest_file.close(); L.log(1, "Manifest : %s\n", tmp.firmware_man); } if (req_version_code && response.version_code != req_version_code) { L.err("Firmware revision mismatch: expected %s, but got %s\n" + "If you determine this is acceptable, simply 'owut verify' " + "and 'owut install'.\n", req_version_code, response.version_code); errors++; } for (let pkg in top_level(SrcType.ALL)) { if (pkg in packages.non_upgradable) continue; if (! (pkg in manifest)) { L.err("Firmware missing requested package: '%s'\n", pkg); errors++; continue; } let expected_version = packageDB[pkg].new_version; let received_version = manifest[pkg]; if (received_version != expected_version) { L.err("Firmware package version mismatch: '%s', expected %s, but got %s\n", pkg, expected_version, received_version); errors++; continue; } } return errors == 0; // Everything else is "failure - we're done" cases. case 400: // Invalid build request. case 422: // Unknown package. case 500: // Invalid build request. default: // ??? L.log(0, "\nBuild failed in %3ds total = %3ds in queue + %3ds to build:\n", t_total, t_queue, t_build); if (response.error ) L.log(0, "%s =\n%s\n", L.colorize(L.RED, "ASU server error"), response.error); if (response.stdout) L.log(0, "%s =\n%s\n", L.colorize(L.RED, "ASU server stdout"), response.stdout); if (response.stderr) L.log(0, "%s =\n%s\n", L.colorize(L.RED, "ASU server stderr"), response.stderr); L.err("Build failed with status %s (--version-to %s --device %s:%s:%s)\n", status, build.to.version, device.target, device.platform, build.to.fstype); errors++; break; } } if (errors) { L.log(0, "The above errors are often due to the upgrade server lagging behind the\n" + "build server, first suggestion is to wait a while and try again.\n"); } return false; } function run_pre_install_hook() { // Execute a user program just prior to doing the final installation. if (options.pre_install) { if (! fs.access(options.pre_install)) L.die(`Cannot access pre-install script '${options.pre_install}', aborting upgrade\n`); L.log(1, "Executing pre-install script '%s'...\n", options.pre_install); let result = ubus.run(options.pre_install); if (result?.stdout) L.log(0, result.stdout); if (result?.stderr) L.log(0, result.stderr); if (result.code != 0) L.die(`Pre-install script '${options.pre_install}' failed with status ${result.code}, aborting upgrade\n`); L.log(1, "Pre-install script successful, proceeding with upgrade\n"); } } function install() { // Run sysupgrade to install the image. // Probably need some more options reflected from sysupgrade itself. // '-n' = discard config comes to mind first, maybe '-f' = force, too. run_pre_install_hook(); // Run user's pre-install hook. sysupgrade(options.image, false); L.log(0, "Installing %s and rebooting...\n", options.image); } //------------------------------------------------------------------------------ if (options.verbosity > 0 && ! (options.command in ["dump", "blob", "list"])) { arg_defs.show_version(); } uloop.init(); ubus.init(); initialize_urls(); let updates, counts, details; let exit_status = EXIT_ERR; // Assume failure, until we know otherwise. function terminate() { // system("grep -E 'VmRSS|VmPeak' /proc/$PPID/status"); if (uloop.running()) uloop.end(); uloop.done(); ubus.term(); _del_uclient(); exit(exit_status); } signal("SIGINT", terminate); // Ensure ctrl-C works when inside build loop. switch (options.command) { case "versions": collect_overview(); show_versions(false); exit_status = EXIT_OK; break; case "dump": L.push(-1); collect_all(); L.pop(); dump(); L.push(-1); exit_status = EXIT_OK; break; case "list": collect_all(); list(); if (check_missing()) exit_status = EXIT_OK; break; case "check": collect_all(); show_config(); updates = check_updates(); counts = check_defaults(); if (check_pkg_builds() && ! updates.missing) exit_status = EXIT_OK; check_init_script(); if (counts.removed) L.wrn("There are %d missing default packages, confirm this is expected before proceeding\n", counts.removed); details = L.show(1) ? "\n" : " (re-run with '--verbose' for details)\n"; if (exit_status != EXIT_OK) L.err("Checks reveal errors, do not upgrade%s", details); else if (updates.downgrades) L.wrn("Checks reveal package downgrades, upgrade still possible with '--force'%s", details); else if (updates.changes == 0) L.log(0, "There are no changes, upgrade not necessary%s", details); else L.log(0, "It is safe to proceed with an upgrade%s", details); break; case "blob": collect_all(); check_init_script(); show_blob(); if (check_missing()) exit_status = EXIT_OK; break; case "download": case "upgrade": collect_all(); show_config(); updates = check_updates(); details = L.show(1) ? "\n" : " (run 'owut check --verbose' for details)\n"; if (updates.downgrades && ! options.force) { L.err("Update checks reveal package downgrades%s", details); break; } if (updates.missing) { L.err("Update checks reveal errors, can't proceed%s", details); break; } counts = check_defaults(); if (! check_pkg_builds()) { L.err("Package build checks reveal errors, can't proceed%s", details); break; } if (counts.removed) L.wrn("There are %d missing default packages, confirm this is expected before proceeding%s", counts.removed, details); if (updates.changes == 0) { if (options.force) L.wrn("Forcing build with no changes%s", details); else { L.log(0, "There are no changes to %s (see '--force')\n", options.command); exit_status = EXIT_OK; break; } } check_init_script(); if (! download()) break; // fallthrough case "verify": case "install": if (verify_image()) { exit_status = EXIT_OK; if (options.command in ["upgrade", "install"]) { install(); } } break; default: L.err("'%s' not implemented\n", options.command); break; } dl_stats.report(); terminate(); 07070100E80F290000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000A00000000usr/bin/[../../bin/busybox07070100E80F3C0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/less../../bin/busybox07070100E81774000081ED00000000000000000000000169B8AF0D00010118000000080000000100000000000000000000001100000000usr/bin/luci-bwcELF@ 4t4 (4@4@4@@t@t@tp@@p¨@¨@¨@@(p(pÿäAÿäAÿä4lÀ@À@À88dtåQdtåRÿäAÿäAÿä/lib/ld-musl-mips-sf.so.1 òöB€÷ @ P @$pAÿäAÿè@ø@l@Œ  pBp5ýàB ppp@p p>p'p@ 8p2Aÿìoÿÿûoÿÿþ@ oÿÿÿoÿÿð@ Œ%>0:#%7 $ * "5,' 6/8& .-!<(4+)=2;139$@(@" @ P Q@(P"B@$p½t@$PØ@$@Ï@$0g@$ :@$¸@$³@#ð¢@#à™@#Ð’A@#À‰@#°‚@# z@#@#€s@#pJ@#`l@#Pf@#@]@#0W@# M@#F@#A@"ð:@"à3@"ÐX@"À,@"°@" @"@"€ @"p@"`ô@"Pì@"@ç@"0ß@" ÞÙ@"Ò@"Í@!ði@!àÇ@!ÐÀ@!À¹@!°å²@! ©@!¢@!€š@!p‘@!`…@!P @!@v@!0p@! __RLD_MAP_init_fini__fixunssfsi__register_frame_infostrlen__mulsf3memset__deregister_frame_infomemcpypopen__dlsym_time64sigemptysetstrerrormemmovepclosesnprintfmunmapgetpidfscanffgetsglobperrorsleepreaddirmmapdlclose__stack_chk_failwritefprintfkillchdir__stat_time64strstrdlopenunlinkforksscanfsigactionfreadstrtoullfopengetoptfcloseopendirstrcmp__time64stderrglobfree__errno_locationexitatoi__libc_start_mainclosedirmkdiroptarg__stack_chk_guardlibgcc_s.so.1libc.soGCC_3.0GLIBC_2.0÷ y&P  iiAÿôAÿøAÿü'½ÿ௼¯¿¼¿à'½ ðjôŽ ô2@âiešðd÷gÒð˜X`g%ñ@ÚhjêKÒ jÒð˜X“ ñ@Úd’“êbaðp˜Pð˜Ü”÷¤Ng±ê@e:–Rež`"ðP˜P™Àð˜¼ð°˜š€ÖÖgæ÷¤Mè@e8j#’2HáIš€ð0˜\ê@e:“ –KãIÒ ’ežJÆrl`4Rm`rc`)riaÈðИ@š€$Äð˜ôCH è@e8dwè rr`rta¸ðИ@š€ðP˜@ê@e:ð˜x–ežðÛDªðИ@š€$¦ð˜õ£Háð˜öÃH è@e8Üð˜÷ãHøeð%@ ˜@ Ð@Àüüà#  %å¼(!ù<È!$ÿø¡è$ ø '½ÿð'½ÿØ<@¯¿$Œ…$†$B$p<@<@¯ ¯¢$ç P  $„ q¿$à'½('½ÿ௰<B¯¿’ @ <@$B(P@$<@  $„($¢ ¿°à'½ <@$B(@@ <B'½ÿà<@$¥$¯¿  $„(¿à'½ àðjòn ô2@âiešgœðœXðœ˜ðœdðÚ`è ðjòN ô2@âiešdýgÒðð˜@ÔÒš@ÕÒ Ò g‚ðp˜Ln(mê@e:–’ežB!@*ð0˜X”mÿñ€nMê@e:–RežÒi<`&jêK”“œ€ëŽ#5ð°˜è@e8k/ên*Á@ð0˜P”ñÀmê@e:–ež" ðP˜Hê@e:š@–režaÞj/Á@IÉð°˜L–• ”ê@e:–RežaIÿ)óð0˜L”ê@e:–ježÆd}è ðjñn ô2@âiðd÷ešÒjÞBg\hð0šXè ÞÞme:ê@g&–RežÙ@a“o5påw5¨Ù¡Òg\nð°šX×Öðonlê@e:ÙBâ ÷ÿZgXâ dwè gPüðjðî ô2@âidõg$œ‚ešÒDO÷ÿZg`ðð˜D™¡ê@e:–ež™€Tað0˜ è@e8duè eðjð® ô2@âiešð dùgÒð0˜Xg%e:ê@m–RežÒ aX’“2Pâk2HÒ jÒ’ kÒð°˜X• nÓðolê@e:Ò –Jÿ÷ÿZež`6“j;ëXè“ ã™`˜€ìc`#g\î“ ”ððšPã•e:ê@gƒ–è#ež`’àIéC`èé`’áIèCøg\–ðКPg±gê@e:–ežg\• ððšD” ê@e:–ežg\” ð0šLê@e:dyè eðj÷Í ô2@âiððdÿešg => return bytes from getrandom() Not outputting random to a tty Invalid param (must be > 0) getrandom() failed: %m write() failed: %m <B™ÿÐ'œÿÐÀ#àx%À‚ ø 'ÿþ<BùÿÜ %øÿÜ<Bùÿè %øÿè<Bùÿø %øÿø²š`eëe;eAÿزš`eëe;eAÿಚ`eëe;eAÿ䲚`eëe;eAÿ첚`eëe;eAÿð²š`eëe;eAÿô²š`eëe;eAÿü@¬@`@À@À@À@À@À@À@À@À@À@À€07070100E80F450000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000F00000000usr/bin/printf../../bin/busybox07070100E81F760000A1FF00000000000000000000000169B8AF0D00000012000000080000000100000000000000000000000C00000000usr/bin/ssh/usr/sbin/dropbear07070100E80F570000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000F00000000usr/bin/uptime../../bin/busybox07070100E81F740000A1FF00000000000000000000000169B8AF0D00000012000000080000000100000000000000000000001300000000usr/bin/ssh-keygen/usr/sbin/dropbear07070100E80F400000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000F00000000usr/bin/md5sum../../bin/busybox07070100E80F2C0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001100000000usr/bin/basename../../bin/busybox07070100E80F540000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/top../../bin/busybox07070100E80F370000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/free../../bin/busybox07070100E80F4B0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000F00000000usr/bin/setsid../../bin/busybox07070100E80F4C0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001200000000usr/bin/sha256sum../../bin/busybox07070100E80F8D000081ED00000000000000000000000169B8AF0D00010025000000080000000100000000000000000000000F00000000usr/bin/fwtoolELF@ 4t4 (4@4@4@@t@t@tp@@p¨@¨@¨@@€€ÿœAÿœAÿœ‰ÔÀ@À@ÀPPdtåQdtåRÿœAÿœAÿœdd/lib/ld-musl-mips-sf.so.1 òöB€ý @Ì @AÿœAÿ @@Œ@Ì  pBp5ýàB @8ppp@p pp(p@<p2Aÿ°oÿÿûoÿÿþ@äoÿÿÿoÿÿð@ª    XAÿ¤ëB0@`"QJäB4_fp @Ì 2@p"ÝB8‰Aÿ¨B•›¢©@°Aÿ¬·¾Å×__RLD_MAP_init_finifree__register_frame_info__deregister_frame_infomallocmemcpystdoutfflushftruncate__stack_chk_failfprintfstdinfreadfopengetoptfclosestrcmpstderrfwritefileno__libc_start_mainfputsoptindoptarg__stack_chk_guardlibgcc_s.so.1libc.soGLIBC_2.0ý iiAÿ¤~B0~B4~B8 ~Aÿ¨~Aÿ¬~Aÿ¸Aÿ¼AÿÀAÿÄAÿÈAÿÌ AÿÐ AÿÔ AÿØAÿÜAÿàAÿäAÿèAÿìAÿðAÿôAÿøAÿü'½ÿ௼¯¿¼¿à'½ dý@g$gµéÒlgdnjêl·çêKêì3fNÿëN.÷LñtÝ`Maï¶ág°Dg‘Ba+ ²ßš@ê"a2²Þ–µÞ8š€ri`!Rj` rS`rT`!rIaän²×´×š  rs`rt`rqaÙ²Ôn²Ð´Óš \e"Ïh*nõnæ²ÎkÂ`ŲÍû³Í›`ÓK#ɳǛ`#³Ä›`# ²Ã¢@*²¾´ÆXš hgPd}è 2HàA’˜€"Ðeg²ºš€$He²µš€$He²¹š€$åHeá“m±´ÓÓÓHÓÙ@* ²ª¢@*³²¤´¯š XeŒ³§£`# ³«›`ên*²¡¢@*¢²œ´¨š îðl(eÒ "—jÒ ÒJÿhÒ ²š¢@"D D²ŸðnšàmPg” ðnvg°Ò Йà”ðn” ðnvg¢g‚– v•ïN':²^¢@"0ih²^¢@ð€"’"²b”šàðnPm’"²]– šà”Pm!l²Y“š ðjëC`E” gñg£PngñnmPX” Dz@´Rš XiÊ’ðiê"a²>¢@*Á²9´Kš ð–• g’Ò’Ò’Ò ’Ò ²3¢@"i«²-´@š oð ¢@*1².šà÷_' ’ê#aè•” nPe²(¢ !’²*Tš€“ g‚÷À6c0gãRg`ײ¢@*²µ,8š€\” \”\”·r÷a²šà÷_'’ JèÒ’ š@÷*’ B‡’L÷ïZ`Áng¢ÂB`í¸ƒ @€B8Aÿ¬@ŒB4BhB`BlBbBaB@PBd@DAÿ¨@ŒAÿ¤@¼FWx0@à@ð@ü@@dð%@ @ P@Àüüà#  %å¼(!ù<È!$ÿø¡è$ ø '½ÿð'½ÿØ<@¯¿$Œ…$†$B<@<@¯ ¯¢$çÌ  $„ñ¿$à'½('½ÿ௰<B¯¿’@@ <@$Bp@$<@ $„($¢@¿°à'½ <@$B`@ <B'½ÿà<@$¥D¯¿ $„(¿à'½ àdõg%µ Lg*!² š@duè ² û! µ @g*ö)õµ@gðµô@´Aÿ¤Aÿ¨@¬@¸@°³dä›@gRg…` ÛÀ˜@"²¢@*²´š êÎ"õ² ¢@*² ´š Xejddè jîNmHíÌZØ@gXôeBB`Aÿ¬@ü@¼åÙgDîªaè ¥`´ëNë3hã2B›`MênòB`ð@dø²Ò š@ÔÕgg'Ò‹—ònm< e:"áGQa˜Cgyâi˜ØCgÙv ØAgYòZaè—ng¹P Þje:“ ’‹›`ên"4eð@dxè gYB0œ@*è jjdwè œbðd÷îbgg#`g&æ3Ô•”ä±ã7âµì£Ô`ä)íC`è”íƒ`âiìCø”$gјBâ+Ò ØB˜Câ'’ Ø#* \˜€˜AØ@’ ØAðjØB’Raǘ@"Å”˜bã—”âµì£`’íCaÓ–$”˜B“âg˜CØ"âkØC) \˜€˜AØ!Ø@ðjØBj¥”íƒ`æâiìCâð@dù²FÒš@µFÒjÒ Ò JÿÒ ²C±D@Ò Ù@*²B¢@*²A´BXš h“’›`ên"h4ejÒ™àònm< g" ’” â gÐ vÒÒ í²2š@"$” jð ÃDnj Ò Ð vЙànm PÒ ²&™ š€ðo *™ànmP ¼²š€$¹™ ð Âôoj Ò ™à"ê,™€T™€“g‚÷À6c0gãRg`œ² ¢@*™² µ8š€ÖgPð@dyè eB0@°FWx0BdB`Aÿ¬@DBhBl@deeeeee'½ÿ௼¯¿¼¿à'½ wr+-rError: mixing appending and extracting data is not supported Error: the same append/extract option cannot be used multiple times Failed to open firmware file Error during ftruncate: %m i:I:qs:S:tTUsage: %s Options: -S : Append signature file to firmware image -I : Append metadata file to firmware image -s : Extract signature file from firmware image -i : Extract metadata file from firmware image -t: Remove extracted chunks from firmare image (using -s, -i) -T: Output firmware image without extracted chunks to stdout (using -s, -i) -q: Quiet (suppress error messages) Cannot append/extract metadata and signature in one run Cannot truncate file when reading from stdin unable to extract trailer header Data not found CRC error Size error unable to extract trailer data <B™ÿ°'œÿ°À#àx%À‚ ø 'ÿþ<Bùÿ¸ %øÿ¸<BùÿÐ %øÿÐ<Bùÿô %øÿô²š`eëe;eAÿ¼²š`eëe;eAÿÀ²š`eëe;eAÿIJš`eëe;eAÿȲš`eëe;eAÿ̲š`eëe;eAÿÔ²š`eëe;eAÿزš`eëe;eAÿܲš`eëe;eAÿಚ`eëe;eAÿ䲚`eëe;eAÿ貚`eëe;eAÿ첚`eëe;eAÿð²š`eëe;eAÿø²š`eëe;eAÿü@ Ü@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ÿÿÿÿ€07070100E80F590000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000E00000000usr/bin/which../../bin/busybox07070100E80F520000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/test../../bin/busybox07070100E80F550000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000B00000000usr/bin/tr../../bin/busybox07070100E80F420000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000B00000000usr/bin/nc../../bin/busybox07070100E806A60000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/ldd../../lib/libc.so07070100E80F2E0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/cmp../../bin/busybox07070100E80F4A0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/seq../../bin/busybox07070100E812E30000A1FF00000000000000000000000169B8AF0D00000010000000080000000100000000000000000000001100000000usr/bin/dbclient../sbin/dropbear07070100E80F360000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000E00000000usr/bin/flock../../bin/busybox07070100E80F580000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000B00000000usr/bin/wc../../bin/busybox07070100E80F2A0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000B00000000usr/bin/[[../../bin/busybox07070100E80F2F0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001000000000usr/bin/crontab../../bin/busybox07070100E812E40000A1FF00000000000000000000000169B8AF0D00000010000000080000000100000000000000000000001400000000usr/bin/dropbearkey../sbin/dropbear07070100E80F92000081ED00000000000000000000000169B8AF0D00010085000000080000000100000000000000000000001300000000usr/bin/jsonfilterELF@4t4 (4@4@4@@t@t@tp@@p¨@¨@¨@@5Ð5Ðÿ Aÿ Aÿ y´À@À@À``dtåQdtåRÿ Aÿ Aÿ ôô/lib/ld-musl-mips-sf.so.1 òöB€p(7E @¨ @&`Aÿ Aÿ@ @¨@¸ b pBpp5þ0B€@ È(ppp@p p?p(p?@ ð¸p2Aÿoÿÿûoÿÿþ@ ˆoÿÿÿoÿÿð@ %?4  13(=)<7/9&- #8%+':>0;  !$.,*5"6 2¦À}xoX·¥Bx@2`"ž#—@2p B”Þ†® @¨ ·Ž@2€"wî¾Aÿ¿oBpibÄ)\ÌUNÓÛ@G@&`ùX@Aÿ0ã×i/éÇ¥îó("BŠ@5Á__RLD_MAP_init__calloc_a_finifputsstrlen__errno_locationstderrstrcmpfclosememsetfopenstrdupfreadstrncmpfprintfcalloc__stack_chk_failmallocmemcpy__stack_chk_guardsnprintfstrcpyjson_object_get_objectjson_object_to_json_stringjson_object_get_int64json_object_array_get_idxjson_object_array_lengthjson_tokener_parse_exjson_tokener_newjson_object_get_intjson_tokener_freejson_object_new_arrayjson_object_object_get_exjson_object_get_booleanjson_object_get_doublejson_object_get_typejson_object_get_stringjson_object_array_addjson_object_putjson_tokener_error_descjson_tokener_get_errorstrerror__register_frame_info__deregister_frame_infoputcharisxdigitstrtolstdinregcompgetoptregexecisalnumfputcexitatoi__libc_start_mainregfreeoptarglibubox.so.20260213libjson-c.so.5libgcc_s.so.1libc.soGLIBC_2.0JSONC_0.147 iiM(–éWB ~B”~Aÿ~Aÿ.~Aÿ$Aÿ(Aÿ,Aÿ0Aÿ4Aÿ8Aÿ<Aÿ@AÿD AÿH AÿL AÿP AÿTAÿXAÿ\Aÿ`AÿdAÿhAÿlAÿpAÿtAÿxAÿ|Aÿ€Aÿ„AÿˆAÿŒ Aÿ!Aÿ”"Aÿ˜#Aÿœ$Aÿ %Aÿ¤&Aÿ¨'Aÿ¬(Aÿ°)Aÿ´*Aÿ¸,Aÿ¼-AÿÀ/AÿÄ0AÿÈ1AÿÌ2AÿÐ3AÿÔ4AÿØ5AÿÜ6Aÿà7Aÿä8Aÿè9Aÿì:Aÿð;Aÿô<Aÿø=Aÿü>'½ÿ௼¯¿¼¿à'½ õ ²ðdôš@g}Ù]õ ² tš@gÙGjÙS2ˆJ2N2LãOe»Ùfg}ãKeºÙEð a õ´ÕÕgå ´gÅri`_Rj`;rað€`Rb`%r?ò@`rF`~ð€™ˆôÀ¶ g°Ba+é™Mð€"™ñ™°™ŽAÇ¥NEÙLð€*ô ²™Óô µ  蚀j~re` rhaܘ ô€´ÕÕgå ´gÅjð€ÙHzrq`TRr` rlaÉô`² \š€ÙKÂrs`:rta¾™j™…ô@µ3häq Ü ™†ämÛ@™JJÙJjÙM­ô ²ô µ š€ÙN*¤ô ² ô °š@ LÙQ ¼š€™Ñ˜€ôµ ègâj}ð€ÙH³ú™]›`ênñà" Øe²üš@ÙP‚²úš@÷"‚`÷#ÙOy²ó š€tjÙQq™GÙNjÙJ²òÙOjÙPÙM²ñÙKjñjÙLjÙIð€ÙH™J™iêja™L" 8g‚™N"Ä™G™nên"À gƒ<™I™f2HãM›`Ùh™eãIš@g‚þÙMÙP*²Õ´Û hš ™Pð€™hZgXëM™Ið€ÙhJÙIÍ™PšC"^²Ë´Òš@g¢ hÙQ™PšCBb#I÷ÿR`Bd#!J"?kh™PlšCèGêŒ" #<µÆ³Ç2âi™‘ èšÀkHp aí™± | -s "json..."] {-t | -e } -q Quiet, no errors are printed -h, --help Print this help -a Implicitly treat input as array; useful for JSON logs -i path Specify a JSON file to parse -s "json" Specify a JSON string to parse -l limit Specify max number of results to show -F separator Specify a field separator when using export -t Print the type of values matched by pattern -e Print the values matched by pattern -e VAR= Serialize matched value for shell "eval" == Patterns == Patterns are JsonPath: http://goessner.net/articles/JsonPath/ This tool implements $, @, [], * and the union operator ',' plus the usual expressions and literals. It does not support the recursive child search operator '..' or the '?()' or '()' filter expressions as those would require a complete JavaScript engine to support them. == Examples == Display the first IPv4 address on lan: # ifstatus lan | %s -e '@["ipv4-address"][0].address' Extract the release string from the board information: # ubus call system board | %s -e '@.release.description' Find all interfaces which are up: # ubus call network.interface dump | \ %s -e '@.interface[@.up=true].interface' Export br-lan traffic counters for shell eval: # devstatus br-lan | %s -e 'RX=@.statistics.rx_bytes' \ -e 'TX=@.statistics.tx_bytes' rFailed to open %s: %s ahi:s:e:t:F:l:qFailed to parse JSON data: %s Out of memory Syntax error: Unexpected character String or label literal too long Invalid escape sequence Unterminated string In expression %s Near here ----^ export %s=%s; %d%lld%fnullbooleandoubleintobjectarraystringtruefalseEnd of file'&&''||'',''=''!=''>''>=''<''<=''~''!'Label'$''@''.''*''['']'BoolNumberString/.../'('')' <=>=!=&&||.[](),$@<>=~!*'"_azAZ-09@-x@-€@-ˆ@-@-”@-œ@-¤@&¨@.P@.T @.X@.\@.`@.d@.h@.l@.p@.t@.x@.|@.€ @.„@.ˆ@.Œ@.@.” @.˜ @.œ@. @.D@!@.¤@y@.¨@y @.¬@Á @.°@Á @.´@Á@.¸@•@.¼@•  !""#$$%%%%%%%%&&&&&&&&]]]]]]]]]]]]]]>=<;]T]]JGD]]]:FSRQPON\[ZLIYXWVUMKHEC@BA?9ñ42.-,%è)'8850õõõõõõõõõõõõõ1111ù37LJ   & !"#$%& !"#$%&%&&!"#$%&#$%&  &&&&''&'& 8$)-,+*$.(' $2$$1('$/%$('0'^5$433$$$#$&$7"! _6__<B™ÿ'œÿÀ#àx%À‚ ø 'ÿþ<BùÿH %øÿH<BùÿT %øÿT<Bùÿl %øÿl<Bùÿè %øÿ貚`eëe;eAÿ$²š`eëe;eAÿ(²š`eëe;eAÿ,²š`eëe;eAÿ0²š`eëe;eAÿ4²š`eëe;eAÿ8²š`eëe;eAÿ<²š`eëe;eAÿ@²š`eëe;eAÿD²š`eëe;eAÿL²š`eëe;eAÿP²š`eëe;eAÿX²š`eëe;eAÿ\²š`eëe;eAÿ`²š`eëe;eAÿd²š`eëe;eAÿh²š`eëe;eAÿp²š`eëe;eAÿt²š`eëe;eAÿx²š`eëe;eAÿ|²š`eëe;eAÿ€²š`eëe;eAÿ„²š`eëe;eAÿˆ²š`eëe;eAÿŒ²š`eëe;eAÿ²š`eëe;eAÿ”²š`eëe;eAÿ˜²š`eëe;eAÿœ²š`eëe;eAÿ ²š`eëe;eAÿ¤²š`eëe;eAÿ¨²š`eëe;eAÿ¬²š`eëe;eAÿ°²š`eëe;eAÿ´²š`eëe;eAÿ¸²š`eëe;eAÿ¼²š`eëe;eAÿÀ²š`eëe;eAÿIJš`eëe;eAÿȲš`eëe;eAÿ̲š`eëe;eAÿвš`eëe;eAÿÔ²š`eëe;eAÿزš`eëe;eAÿܲš`eëe;eAÿಚ`eëe;eAÿ䲚`eëe;eAÿ첚`eëe;eAÿð²š`eëe;eAÿô²š`eëe;eAÿø²š`eëe;eAÿü@\@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@2@@-¼@-È@-Ð@-Ø@-Ü@-à@-è@-ì@-ô@-ø@.@.@.@.@.@.@.@. @.$@.(@.0@.8@.@@.H@.L€07070100E80F2B0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/awk../../bin/busybox07070100E80F310000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001000000000usr/bin/dirname../../bin/busybox07070100E80F300000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/cut../../bin/busybox07070100E80F390000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001000000000usr/bin/hexdump../../bin/busybox07070100E80F560000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/uniq../../bin/busybox07070100E80F4E0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001000000000usr/bin/strings../../bin/busybox07070100E80F480000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000E00000000usr/bin/reset../../bin/busybox07070100E80F4D0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/sort../../bin/busybox07070100E80FA40000A1FF00000000000000000000000169B8AF0D00000005000000080000000100000000000000000000000C00000000usr/bin/uccucode07070100E80F5B0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/yes../../bin/busybox07070100E81F860000A1FF00000000000000000000000169B8AF0D00000012000000080000000100000000000000000000000D00000000usr/bin/wget/bin/uclient-fetch07070100E80F430000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001100000000usr/bin/nslookup../../bin/busybox07070100E80F380000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/head../../bin/busybox07070100E80F410000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000F00000000usr/bin/mkfifo../../bin/busybox07070100E80F5A0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000E00000000usr/bin/xargs../../bin/busybox07070100E80F3B0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001000000000usr/bin/killall../../bin/busybox07070100E80F500000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000001000000000usr/bin/taskset../../bin/busybox07070100E80F440000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000E00000000usr/bin/pgrep../../bin/busybox07070100E81025000081ED00000000000000000000000169B8AF0D00010015000000080000000100000000000000000000000E00000000usr/bin/usignELF@ `4p4 (4@4@4@@t@t@tp@@p¨@¨@¨@@BðBðÿpAÿpAÿp¥À@À@ÀXXdtåQdtåRÿpAÿpAÿp/lib/ld-musl-mips-sf.so.1 òöB€@Tb @ ¤ @6àAÿpAÿt@@¬@L t pBp5ýÈB@Œ0ppp@p p&p(p&@¼èp2Aÿ„oÿÿûoÿÿþ@loÿÿÿoÿÿð@ %&$ %"! #   ”AÿxñWB @A@"ÔzÉì#B$ i @ ¤ ú-@AÐ"¢ˆAÿ|BÃŽ¼1@6à8›Aÿ€¯ªáE*Ú¶½__RLD_MAP_init_fini__register_frame_info__deregister_frame_info__libc_start_main__stack_chk_guard__stack_chk_failmemcpymemsetstdinfopenstdoutstderrfprintfexitfwritefputsfclosefreadb64_encodefgetsstrchrb64_decodefeofsnprintf__fstat_time64mmapmunmapperrorgetoptoptargstrlenstrcmpsprintflibubox.so.20260213libgcc_s.so.1libc.soGLIBC_2.0T iijAÿx~B ~B$ ~Aÿ|~Aÿ€~AÿŒAÿAÿ”Aÿ˜AÿœAÿ Aÿ¤ Aÿ¨ Aÿ¬ Aÿ° Aÿ´Aÿ¸Aÿ¼AÿÀAÿÄAÿÈAÿÌAÿÐAÿÔAÿØAÿÜAÿàAÿäAÿè Aÿì!Aÿð"Aÿô#Aÿø$Aÿü%'½ÿ௼¯¿¼¿à'½ '½ÿ¸¯µ8<B¯¾@Ž¢  ð%¯´4¯±(<@<@¯¶<¯³0¯²,¯°$¯¿D€% €%¯Â°%&1;T$ÿÿ&”;à 0%(% „@ %S$Bÿº,C3`€‚!ŒB@<BŽ"\@[<B$ŒBdCŒ,C`h$C~$Cq<B<BŽŒDÿ€<@ x$¥78$ÄŽ£ ƒªÀè%¿D¾@¶<µ8´4³0²,±(°$à'½H<BŒC$<BÿɬC\<BŒC$<BÿĬCP<B$ÿÀ Ch<BŒC$<Bÿ»¬CX<Bÿ¸ŒV$<BŒC$<Bÿ³¬C`<BŒCd`}$ÿ­¬Cd<BŒCd`w$ÿ§¬Cd<BŒC$<Bÿ¢¬CT<BŒCd`l$ÿœ¬Cd<BŒCd`f$ÿ–¬CdÀÿ¦<B ¨À %$B |<@¢è#$¥;h À %@N'²<@À0%$¥;¤ ”@ %ÿ“®2\$Cÿ›<BŒBP@ÿ˜<BŒBX@ÿ•  wÿ˜ŒBP@ÿ<BÀÿŒŽ"\@ÿŠ  8À %ÿ<BŒBX@&<BÀÿ€  }À %ÿƒ<B<BŒdXŒBPŽ#\+ ++D!C!$C<@<BŒQÿ€$( 8%$ ˜$„;¬Ž<@$¥78 x %ÿh$  ~ÿdŒBT@ÿÙ<BÿZŽ<B<@ŒGÿ€$4$ ˜$„;lÿV$  =Ž lð%@ h@  @Àüüà#  %å¼(!ù<È!$ÿø¡è$ ø '½ÿð'½ÿØ<@¯¿$Œ…$†$B6à<@<@¯ ¯¢$ç ¤ ¤$„ À¿$à'½('½ÿ௰<B¯¿’0@ <@$BAÐ@$<@ t$„@ð$¢0¿°à'½ <@$BA@@ <B'½ÿà<@$¥4¯¿ P$„@ð¿à'½ à'½ÿ¸< B¯¿DƒE |byÀ#0c¯¥< ƒ0B€(%$‡ €%f$cF! bÿÿgÿû|Bz'£'©;`0%€8%$è$ÆH! Âÿÿ$çÉÿú|Bz„$g $„ÿ€D!0Bÿÿ£¢;¤f$c  ¤ãÿú$¥£Ã€ ¤+@°˜!“30% X@(%Ž"À!0C`6®"À #`%.‚€@&•ÿ€ ˜%|0&s€S˜!@€%(% , %Ž"À&€$B€ÿù®"À&R€|02”U!€&$@’+@”!D+@T!‚3€0% X@(%Ž"ÀT!®"À¿4µ0´,³(²$± °à'½8B3ÿð€0%!¢3ÿÄ°˜!&%@ , % #ÿÈ`%'½ÿØ$ÿ€¯±€ˆ%Œ„À¯² 0„$!$’$€¯°¯¿$ €%F  C@$„AÒ0#(%$ ! ˆ.Rq@ &2@&2@@(% , %@ %$x ˆ(%Ž"À%|D=@|ƒþ|D{@|ƒ¼|D¹@|ƒzÀ|C8 %®#¼® ¸ ,@(% %& @Œ‚Œƒ:RLF4.¢¢ ¢ ¢¢¢¢¢& ÿî$„¿$² ±°à'½('½ÿ<@¯²ð<B$B@ŽF '£b+¯±ì¯°è¯¿ô€€% ˆ%¯¦ä`'£'£XC+n'£C+`$@<@$c@P'¤ƒ3$@@(% X'¤ (%$ '¤ ̯ Ø'¤  )(%’’|¢¤ä0BŽC 4B@ƒ¢¿ô²ð±ì°èà'½ø l'½ÿЯ³$¯° ˜%À€%(%$ ¯² ¯±€%¯¿, ˆ¯´(&ÿáˆÀb!p(!@%D$B d¢ÿü$c&P @%%d$c ÀD%0Bÿÿ bÿÿÿù¢ÿà’CCC%¢B&1ÿ$ÿÿÃb!2$B@%‚0E%d$c @D%0Bÿÿ bÿÿÿù’B@ %¢%¢B Ê&1ÿÿ4ÿêÿ,´(³$² ±°à'½0'½ÿد°$@¯±  ˆ%¯¿$  )(%¿$(% %°± $@ «'½('½ÿد± ¯°¯¿$‚€€%$BÿÓ@  ˆ%‚@ <B ŒBÿ| <@<@$¥7 € %@ ¿$± °à'½(ÿö$¥7<Bÿ÷ŒBÿx<BBh@<B<B$Œcdb <B ŒDÿ€<@$ç7<@0% x$¥7 œ$<@ÿø$ç7<B'½ÿà€0%<@ŒDÿ€¯¿ x$¥78 œ$'½ÿȯ², %(%¯¿4¯³0¯±(¯°$À˜%  àˆ%<@$„9 @8%$$ ˜@€%<BŒD`€ ´(%<@ % 0% x$¥9À¿4³0²,±( %°$Œ'½8 '@ %<@¯£¯¢`0%$¥9´ x %ÿê<@'½üh$d¯²Œ<B(%ŽB '¤L¯¿”¯³¯±ˆ¯°„¯¢| ˆ<Ed$((%'¤$BBK ˆ¯¢H<@<@$Ed$¥7$„9È €§¢@©@8%$$'¤h |@€%@ˆ%$"8%<B<@ŒGÿ€$"$ ˜$„9ô Œ %$¤|ŽC ƒ›¿”³²Œ±ˆ°„à'½˜$$ |'¤pQÿç@˜%8%$$ |'¤PSÿá<B Œ %“¢“£p0B4B@|'¥p'¤°'±£¢  r££p'¥° ± %<@$¥@'¢°E+@'¢°'¢ð¢+N'¢°¢+@$@<@$B@P'£°b3$@ X'¤°'°ð'¥p$@'¤° ̯ p(%  )'¤°'¢`P+@'¢`'¢h3'¢`€+¢ð'¢ø'£`b3¢ð$¯¢`¢ô'¦$h'¤H `¯¢d@ÿ¤<B<@ŒDP'§$Æ:  G'¥h'¢'£hC+@'¢'¢&b3'¢'£hb+@$'¢'£pC3$'¥h X'¤'¢&Q+@'¢&'¢F"3'¢&"+@$ '¢&'£°C3$  (% X'¤&'¦$$* `'¤@ÿs<B<@ŒDX'§$Æ:$  G'¥ÿl%<B<@ŒGÿ€$$ ˜$„9Øÿc$ l'½ÿЯ³( ˜%$¯²$¯± ¯°¯¿,À%  à€%@ˆ% 0%$ÿ T %@$ ° %@ÿø 0% 8%$þ$ | %! % Œ @@0%`(%   %¿,B&³(²$± °,Bà'½0<B<@ŒGÿ€$„:0$ ˜$ œ$'½û($¯±Ì<B¯¿ÔŽ" ¯²Я°ȯ¢Ä  @„'§ @€%<BŒD\$J  H'¥¬@—£¬$Edb<BŽDX€<B'§ $*  H'¥€@—£€$Edb'¢ø<B<@ŒGÿ€$$$„:Œ<B<@ŒGÿ€$$$„:d ˜ Œ %$¤ÄŽ# ƒ€¿Ô²бÌ°Èà'½Ø<@$¥@E+@'¢ø'¢8¢+N'¢ø¢+@$@<@$B@P'£øb3$@ X'¤ø$ '¥¶'¤ø ̯ ¸$ '¥Š Ì'¤ø $$ |'¤ @0%'¥ Ì'¤ø d %@ÿõ8% Œ %'¥`  ô'¤ø'¥Ö ±'¤ '¥Š  '¤ø'¥ø'¦`  % õ@€%'¥¶  '¤x'¥ø'¦x  % ~€$'¥ø À'¤@'¥@'¤ Ò2ÿ€$<BBh@$<@ÿ§%<B<@ŒGÿ€$$ ˜$„:Hÿž$'¤®ŒGT '<@¯£'¤ ¯¢$Æ:€ H$'¢ ®BXÿu@ %@ÿ<B<@ŒGÿ€$$ ˜$„:¬ÿ†$<BŒGÿ€$$ ˜$„:Äÿ~% l'½ùÈ$H¯·,<B¯°Žã (%€€%'¤Ư¿4¯£ ¯¾0¯¶(¯µ$¯´ ¯³¯² ˆ¯±<B'§äŒDP$h$Ed'¥  H§¢Ä@—£$Edbý¢@0%(% ¬ %@¯¢4'¥@ p@ %@%%¯¢¢4¥|¯£¯¢$$ h %@%¯¢8$ÿÿb£|'¥0'¢ÆE+@¯£<'¢΢3'¢Æ¢+@'°8'¢ÆP3$ X'¤Æ(%'¤@  r'³„'¥@ ±'¤ä(%` %<@  r&@'¢@P+@'¢@'¢€+N'¢@+@$@<@$B@P'£@b3$@(% X'¤@'¥¤$ '¤@ ̯ ¦<¥8'¤@ Ì'±$ (%  ô'¤@ (% ±'¤Î'¢xP+@'¢x'¢¸+N'¢x+@$@<@$B@P'£xb3$@(% X'¤x'¥Î$ '¤x ̯ 8'¥ä$ Ì'¤x¦<¥8 Ì'¤x'¥D'¤x  ô'µ`(%$  «'¤ä$ (% ˆ  %'¢dU+¯¢(³+¯¢,'¢d¢ð+Q+$ü¯¢0Ã}!2Ârä  %R %%d$c @D%0Bÿÿ bÿÿ#ÿù Ê  %¢(@¢,@À (%¢0@z$ '¤d X'°d'¥D%%d¦$c† !D!0Bÿÿ bÿÿ$¥cÿ÷ Ê'¤d2R %D’$B’  Cÿÿ"ÿú&&Öÿÿ$ÿÿÂÿÆà %%’ƒ…&”e!C!0Bÿÿ¢‚ÿÿ$„4ÿ÷ Ê  %'¤î•+@¤+'¢¢3¤+@$ ‘ˆ+.$ X (%¥< L¤8 ¸¤4'¦ä$$J `'¤Ä@<B<@ŒD\'§ä$Æ;8  G'¥Æ %<B<@ŒGÿ€$$ ˜$„:È$¤ Žã ƒ¿4¾0·,¶(µ$´ ³²±°à'½8<B<@ŒGÿ€$1$ ˜$„:èÿé$ ¸¤4<@ \$„;ÿâ$ l4'½üø<B¯°<BŒdPŽ ¯¿¯¢ü€'§$h  H'¥”@<B'¤´<BŒDX€'§$*  H'¥@<B '¤<BŒD\€'§$J  H'¥H@'¤J<B<@ 'ŒHÿx`8%@0%$¥;H x %%¤üŽ ƒ¿°à'½ÿø$ l'½ÿ௼¯¿¼¿à'½ rwreadingwritingCannot open file '%s' for %s Usage: %s Commands: -V: verify (needs at least -m and -p|-P) -S: sign (needs at least -m and -s) -F: print key fingerprint of public/secret key or signature -G: generate a new keypair (needs at least -p and -s) Options: -c : add comment to keys -m : message file -p : public key file (verify/fingerprint only) -P : public key directory (verify only) -q: quiet (do not print verification result, use return code only) -s : secret key file (sign/fingerprint only) -x : signature file (defaults to .sig) untrusted comment: %s %016llx %s /dev/urandomCan't open /dev/urandom Can't read data from /dev/urandom private keypublic keyPremature end of file Cannot open message file Failed to decode signature %s/%016llxFailed to decode public key verification failed OK Failed to decode secret key Password protected secret keys are not supported Cannot open message filesigned by key%016llx FGSVc:m:P:p:qs:x:-Need signature file when reading message from stdin %s.sigNeed one secret/public key or signature @ ¬@ ”@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ €@ ˆ@ ˆ@ h@ ˆ@ ˆ@ P@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ <@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ ˆ@ 0@ ˆ@ ˆ@ @ @ ˆ@ ø@ ˆ@ ˆ@ ˆ@ ˆ@ äBŠ/˜×(®"q7D‘#ïe͵ÀûÏìM;/éµÛ¥‰Û¼9VÂ[óHµ8Yññ¶Ð’?‚¤¯O›«^ÕÚmت˜£Bƒ[Epo¾$1…¾N䲌U }ÃÕÿ´âr¾]tò{‰o€Þ±þ;–±›Ü§%Ç5Á›ñtÏi&”ä›iÁžñJÒï¾G†8O%ãÁÆ‹ŒÕµ$ ¡Ìw¬œe-é,oY+uJt„ªn¦äƒ\°©Ü½AûÔvùˆÚƒSµ˜>QRîfß«¨1Æm-´2°'Șû!?¿YǾïäÆà ó=¨ÂÕ§‘G“ §%ÊcQà‚o))g np'· …FÒ/ü.!8\&É&M,müZÄ*íS8 •³ße sT‹¯cÞvj »Îê&aœÑ†¸Ç!ÀÂêÚ}ÖÍàëõ}OînÑxðgªroº c}ŢȘ¦?˜¾ù ®q 5G(Ûwõ#}„2Ê«{@Ç$“<ž¾ ɾ¼CgÄœ LLÅÔ¾Ë>B¶Y)œüe~*_Ëo«:ÖúìlDŒJGXíÓõ\cXÖœ÷¢ÞùÞÕ%`-Vɲ§%•`Ç,i\ÜÖý1â¤ÀþSnÍÓ6i!Xfffffffffffffffffffffffffffffff£Ý·¥³ŠÞmõRQw€Ÿð }ã«dŽNêfev‹×_‡g£xYÊMëu«ØAAM p˜èywy@ÇŒsþo+îlRj ægó¼É»g®…„ʧ;lƒÙ«ûA½k[àÍ~!yYñ²&”›ÖëV±ƒ‚šà0Ñóîò€ŽçüßVÜÙ$<B™ÿ„'œÿ„À#àx%À‚ ø 'ÿþ<BùÿŒ %øÿŒ<Bùÿ %øÿ<Bùÿ” %øÿ”<Bùÿ˜ %øÿ˜<Bùÿœ %øÿœ<Bùÿ  %øÿ <Bùÿ¤ %øÿ¤<Bùÿ¨ %øÿ¨<Bùÿ¬ %øÿ¬<Bùÿ° %øÿ°<Bùÿ´ %øÿ´<Bùÿ¸ %øÿ¸<Bùÿ¼ %øÿ¼<BùÿÀ %øÿÀ<BùÿÄ %øÿÄ<BùÿÈ %øÿÈ<BùÿÌ %øÿÌ<BùÿÐ %øÿÐ<BùÿÔ %øÿÔ<BùÿØ %øÿØ<BùÿÜ %øÿÜ<Bùÿà %øÿà<Bùÿä %øÿä<Bùÿè %øÿè<Bùÿì %øÿì<Bùÿð %øÿð<Bùÿô %øÿô<Bùÿø %øÿø<Bùÿü %øÿü@,@ à@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A@A€07070100E80736000081ED00000000000000000000000169B8AF0D00030520000000080000000100000000000000000000000C00000000usr/bin/apkELF@,à4t4 (4@4@4``”@”@”p°@°@°pÈ@È@È@@QQý\Cý\Cý\Ä"”à@à@àhhdtåPGBGBGdtåQdtåRý\Cý\Cý\¤¤/lib/ld-musl-mips-sf.so.1 òöD…eyƒ‘ @  Aã`Cý\Cýd@H@¸@ ¬ pDp5 D@Ü0ppp@p p«p)p«@ p2Cýtoÿÿûoÿÿþ@¼oÿÿÿoÿÿð@d£ƒ«!‹{Qk¤&8…˜ POzŠ0q;t’e¡?m\<}£œMv‚š‡¥H›uŽ€x]¦—-Il@ žˆ‰cD”%j„~N–sC r§“©o•_¨Wb™ªŒƒ(¢5Y ‘   $)#47B"3R/S:>JG*.VEFZ'a,9=T1LdwKy|hifp†^2UAngŸ+6X`[Ì# YC?Cýh®Å´¨% â¬×ù¾õéP‡„i†¿a6 Aã`NÔ.< +ðg`RÏ¿WewÝl5-½Ôþ¤g"QÛþ @  ¬~ #z7BG€"EŠËÞè3å¬t¿±=ø$D0ÍÆòŸš&D0!÷<¦D8èØEÌr#…ÎŽYÜ™`ÆF¸CýlMBG "G™êל5¸”÷óì5B¡K@DÆú-œ¸Çýô-LCýpÎ^¾Û£âY ßJr‘56uYlð__RLD_MAP_fini__libc_start_mainstrchrnulstrncmpstrtolstrcmpmemcmpstrlenstrnlengetenvmemsetinflateInit2___stack_chk_failinflateinflateEndfputcfwrite__stack_chk_guardstdoutstrchrfnmatchunlinkat__errno_locationputchargetuidopenatuncompressmemmemmemcpy__assert_failreallocqsort_rvsnprintfqsortstrptime__mktime64strtoulreadlinkatstrcasecmpmallocstrdupmemrchrcallocisalnumatoiatexitpsa_crypto_initisattyaccessumasksetvbufsignalfclosemkdirat__time64fputs__gmtime64_rstrftimestrstrfdopenstderr__environgetpidfflushfgetcsyncreadstdinputenvexecvpmbedtls_md_info_from_typegetrandommbedtls_psa_crypto_freebsearchstrrchr__fstatat_time64fchownatfchmodat__fstat_time64munmap__futimens_time64mbedtls_mdmbedtls_md_initmbedtls_md_setupmbedtls_md_startsmbedtls_md_freembedtls_md_updatembedtls_md_finishrenameatmbedtls_pk_write_pubkeymbedtls_pk_freembedtls_pk_verifydeflatedeflateEndstrlcpymemchrstrerror_exitforkfchdirgetgidunsharemountchrootmkdirexecvelseekfdopendirclosedirreaddirfgetpwentendpwentfgetgrentendgrentmmapdeflateInit2_memmove__utimensat_time64symlinkatmknodatfsetxattrflistxattrfgetxattrfcntlfilenoioctlvfprintfstrcpymemfd_createfaccessatwaitpidpipe2pollstrpbrkmbedtls_pk_initmbedtls_platform_zeroizembedtls_pk_parse_keymbedtls_pk_parse_public_key__gmtime64posix_spawn_file_actions_initposix_spawn_file_actions_adddup2posix_spawnpposix_spawn_file_actions_destroyreallocarrayrealpathfstatfs_Exitflocksigactionalarmsetmntentgetmntentendmntent__register_frame_info__deregister_frame_infolibmbedcrypto.so.16libz.so.1libgcc_s.so.1libc.soGLIBC_2.0XXXXXXXXƒ ii™Cýh~D0W~D8c~Cýlv~Cýp–~Cý|Cý€Cý„CýˆCýŒCýCý”Cý˜ Cýœ Cý  Cý¤ Cý¨ Cý¬Cý°Cý´Cý¸Cý¼CýÀCýÄCýÈCýÌCýÐCýÔCýØCýÜCýàCýäCýèCýìCýð Cýô!Cýø"Cýü#Cþ$Cþ%Cþ&Cþ 'Cþ(Cþ)Cþ*Cþ+Cþ ,Cþ$-Cþ(.Cþ,/Cþ00Cþ41Cþ82Cþ<3Cþ@4CþD5CþH6CþL7CþP8CþT9CþX:Cþ\;Cþ`<Cþd=Cþh?Cþl@CþpACþtBCþxCCþ|DCþ€ECþ„FCþˆGCþŒHCþICþ”JCþ˜KCþœLCþ MCþ¤NCþ¨OCþ¬PCþ°QCþ´RCþ¸SCþ¼TCþÀUCþÄVCþÈXCþÌYCþÐZCþÔ[CþØ\CþÜ]Cþà^Cþä_CþèaCþìbCþðdCþôeCþøfCþügCÿhCÿiCÿjCÿ kCÿlCÿmCÿnCÿoCÿ pCÿ$qCÿ(rCÿ,sCÿ0tCÿ4uCÿ8wCÿ<xCÿ@yCÿDzCÿH{CÿL|CÿP}CÿT~CÿXCÿ\€Cÿ`Cÿd‚CÿhƒCÿl„Cÿp…Cÿt†Cÿx‡Cÿ|ˆCÿ€‰Cÿ„ŠCÿˆ‹CÿŒCÿŽCÿ”Cÿ˜Cÿœ‘Cÿ ’Cÿ¤“Cÿ¨”Cÿ¬•Cÿ°—Cÿ´˜Cÿ¸™Cÿ¼šCÿÀ›CÿÄœCÿÈCÿÌžCÿПCÿÔ CÿØ¡CÿÜ¢Cÿà£Cÿä¤Cÿè¥Cÿì¦Cÿð§Cÿô¨Cÿø©Cÿüª'½ÿ௼¯¿¼¿à'½ ²ÜšaÚÜ@Üaè Û€D¸ò²ðdúÚ€ò²ò´Ú Ò ò²ò±Ò “àÒ’eñànm’ˆg‘ñáµ ©g‘ñá²Ù_ð€Ù@ð€ÙDð€ÙHð€ÙLjmñÁ´ð€Ù\ð Ù@ð ÙDð ÙHð ÙLð ÙPð ÙT2 gñ¡²ð ÙDð ÙHñ¡²ð ÙLð ÙPñ¡²Ù š@HÿÙNñ¡²ð Ùš@ñ´Ò ÙOjÙIðGj<»ÙHñ´<»eñà©Pò`këkêlò@kêmñàÉPña² ÙXjÙYña²ÙZjÙ[ña²Ù\j Ù]ñA²mñàÙñA´2 Ù^”l3\ñà¡PlêŒêmñ!´ñàÁP’TmZgXk2@êmñ€lñà©pì‹ëŒêmñàÉPð ¡Pk?êlk€ëkêmð ÁP“”l” oÈðᵑìnðáµ’hlm’hl ðá²ðá³Ú`j<ðá·nðáµÒæ’5ðÁ°R¥š€g‚nðÁµ ’°Ò " jØ@’5kB„’4Ó'JÿR`|j’”  HLkØ@Ó "î˜ ð²ñàÙ@¨©˜EÙF%“˜lð³Û@˜F" ða³ða¶›€oðµê@e:jða³ ÒÓÒða³Òða´ða²Ó”,Òg¢*ðAµldŒì‹gJ*ldðAµŒì‹gðX` •–qg"C»g“5’4KÓ%ð!³JÿÒ&Ó'Rð€`’Ò ÷à²Ò š@ñ@*’ š@ñ "’ ÷à¶÷àµ÷ ´RÌšâjðdzè Ô%%iÒ&“%rÓ “&Ó `” ’ LJÿq’  Hš€Ø@"õjÒ tÒ'Ò(Ò)Ò*Ò+Ò,–—”•Ò³Ò%•–g‚o e:Ò–gY—”%•&³Ò"•%–&o ’•Ò%–’öÀ´ jÒ&Ò'jð€ÃY’%÷"%rg‚`ra ’(–+•*ö€´ê@e:g‚÷" ö€² šIR÷a÷¶ ÷µ gh%[lði%Ò ð€" R`mJzð€"’ Jð€"’ JJð€"ö ²š€$“èeö °ð€˜$»eö@´25eö ´=ÚejêKð ØXö´eJeö´eJeõà´25eö€´¥eö`´¥eö`´¥eö`´¥eö`´ ¥eñà˜ˆTa“„e˜$’Ðeõ ´ùe”’ RaRd÷ajc’ ra2’%š’ "õÀ²gš@’tš¢"/€@*õ ²š@"¢Pkêl*g°jÕ’%JÒ%’&JÿÒ&Òõ€´õà¶RÌmõ€²õ`µ ôš€jÒ j” õÀ¶õ€µghôjÒ Üõ ¶ õ@´RÌmõ@²õ µ ôš€¿õ€°õbnm’ˆgô mõ€´ ©Ø ðmõ`´ ©eômõ`´ ©eômõ`´ ©eö)nõ@µõ@´D†e÷nõ@µõ@´D†eö)nõ@µõ@´D†eõ@¶õ@µõ@´D†e˜@÷nôØ@õ µõ ´D†e’ ð€ØDõ ´QÑg°’ ôâØDôâØHôâØLõ²õ"ØDõ"ØHõ² õ"ØLõ"ØP’ õµð€ØLôØPð€ØPõØDõ"Ø@jð€ØXð€Ø\ð Ø@ð ØHð ØLô²ð€ØTôÀ²ð ØDôÀ´ D†n jêKØQØRóßJô ¶ØSmjô ´Ö&9Ò%ØXô µ’hlð ¡PkÀëLs€añà¡ph?3~3xê êmô€´ð ÁP”,eg‚" ô`µ’te*ð ¡Pê ð ÁP°Òð  PZ@aô`´”,eðÀ"ØMñà¨Pñ€këLñsa ñà pñ€l3~ì‹3|êŒêmñàÈPñà QkëLsa ñà pl3~ì‹3dêŒêmñàÀQ˜$lgQêŒ" ˜FkëL#këkêlêØFjê,"ð  Tk€ëkêmð ÀT˜Uð *²öØU˜“,´õØ“ñà PkëL#kêmñàÀPµï’te˜wð€*ðjéMØ$+²êØW˜—ð\`„@r/ð€`ô jêKØW±ä˜³ldgÑ“Pì‹RñàØHð€` ˜fjêl"˜³ldñàn ”(싘³ldgÑ“Pì‹RñàØH`v“¬eš€R™g"gâ¶Ñµ¥´•RÌe™ ê+Ò ’ õß*’ l“¨š ˜°ÓÒ%´Ç“Ðe²ÆÒ ™ÀðÀ.%’0%¶Âm “옵À“dm¶˜´~RÌí«˜Fð "q/eÒ ð "R™g‚¶¶µ†´uRÌgâ›´´”,eg‚"µ²’ôe"²°²uñà Pk êmñàÀPTñà Pl@êñàÀP÷+ô jêKb’Tm÷*i˜fñàØLjêl"”`e˜fðlìl$ * ¶›µg´VRÌejêKô"¶—õjëL#3˜dðjêl*.±“ñà˜ˆñ oµ’“PgÑRg‚`ñà˜ˆñàn µf™eñà˜ˆñ oµˆ“PgÑRg‚` “¬eš€R™g"gⶃGµƒ‘øeØP˜dðjêl*µ´KjÕeB” µ|’°n"´FjÕ• I’ š@â)š@Ò *ï0²uiÒ õ™A˜"·/µr“dI2— ù’ ³&– š@›€µ šGê@e:ml’hÒ ´4EQeGeD¨D¤@µ B3èDhDD DCýlCýhD$D¨AíAí(Aí Aí@DüAídDÜ@.DdDŒAñHDÌD°Aí|B0D¬ÿÿBÈAí„AíˆAçAíAí”Aí¼AäHAí¤AæüD DôDèDäDìDðAìàAí¬D`DdDtD”D„B0€DhB0dDtB0HD” @B0,D DÜDdDxD„DŒDÀB0(DøAíìD`@6ýAíôAíüAîAî,Aý\Aî< AîLAïAð(Aê0Aï(Aï4AîAî Aî(AîdAî„ Aî¼AîÌAîÔAîìAîøAîðD0B¨dÄ´( e´' e´& e´% e´$ e´# e´" e´! e´  e´ e´ e´ e´ e´ e´ e´ e´ e´ e´ edDè eD DÀDàDD D@D`D€D DÀDàDD D@D`D€D DÀDàð%@,è@- @àüüà#  %å¼(!ù<È!$ÿø¡è$ ø '½ÿð'½ÿØ<B¯¿$Œ…$†$Bã`<@<@¯ ¯¢$ç  ‘ä$„ E¿$à'½('½ÿ௰<D¯¿’@@ <B$BG @$<B ‘è$„G$¢@¿°à'½ <B$BG€@ <D'½ÿà<B$¥D¯¿ ‘à$„G¿à'½ àu`5U`u`u`!% jzè êKu`,uaùvœDa.kvœDakêmÜDè jkëkêlùœD.ôkóôkõœfjêmœdÜFôjêmœeÜDjêmÜEäœdj€ßœDkÿ.KÚKÝkÛe²³š@gægÅšFg¤›€dÄê@e:dDè eD°D¬²kè ÚkDhv`V`v`v`& jzè êKv`v`va÷¬BkjfêmÝF¬BkêmÌBè j¬BkùðjðÜàöv`$V`v`v`&jzè êKv`vaùwDakêmÝD¤Bk€ëkêmÄBè j¬@kêmÌ@ù¬@kú¬@k÷¬@kôkëkêlågF.¤dm€í«ë­è Ädjzè êKe&v`jzè êKÜàè jœajêmÜAùè jv`V`& v`jzè êKv`vaù¤Fk@k€¤FëkêmÄFè j¤Fk ù¬BkêmÌBö¬Bkúe¤Dk?êl^ÄD`S2ÄæIŠ@æYwOq!e!ƒSWim{?7¤Dk@êmfÄDójêmÝFè jk€¤DëkóðjñÀ|êmñÀÝ\ò²ø²öjñÀxêmñÀÝXç²íjö²éjÿJæ²ä²â²àôjÝñÀxjêmñÀÝXjêK×jzè êK@ kMgDÜ`è Ü¡v` V` v`0v`*&v`$jzè êKv`:V` va2ðkjñÀÝtñÀÝPvaíñÀ¥Ik¤XkêmÄXñÀ¥Ik@êmñÀÅIè j¤Xk@ò¤Xk êmÄX¤XkêmÄXñÀ¥Ik êmñÀÅIfjÿJêmÝFçñÀ¥Ikàk€¤XëkÖ²îN.ÝÈè jjzè êKeÿÿdäŸg¤e8è@g‡ddè v`¡@= v`V`& jîN&è J…v`jîN&è J‚¤Lk€ëkêmÄLè j²Ü@ÝÆú²Ü@jÝFõÜáó²ôe@Tõ@3Ñ@T‘è jgFdäžàžÁœ š€è@e8ddè eagDÜ`bè ÜajÜ@ÜBÜCè Ü¡œAœÀêÊa¤koëì#"šršSÀäIêƒg˜æmämÝ`ÝACJÝCBJè ÝBžržS÷4`2Rê3rèœB¬d2J÷ïlêŒ3fên*èè eœAZè gXœ@Zè gX¤Kk2Fè êleœA"šAk¢P2Rêlè ênè jedÄ Êe" œAk.šAð ¢\ênêK÷À2BdDè dúEGJÒñÀDõBšxõbše;õBš<õ"BlõBšôõBšÐõ"š¬eûkgŸìªaôšŒmÔ õšœÔ õšP”Ò gYÓ×ÖÒgð¶RÌÑdzè j KâeAã€døDGñÀœ$JñÀAÒ ™t2pâi2LñÀJáIèCadxè jð@ Rkêl" ˜Z˜õÒ˜Y” Ò˜V¶ÒRÌmHH àAäð dùgg%%u`Mizé+gQdyè ”“lm:“Ò âkra.nµ/’°gƒ*2“ ð@ÀHƒ`#“ ƒa#*2P³)ãIÒ ¢EÒ "#” n ”HLg"’ ‚@*’ ¢DéBa’ ê"að@ H*ið@À)iÆra”µ’°n*jÎjð@ÀHð@ÀIi´•ldndðì‹ðZa g‚R™g"—@‡Ò¶ µ RÌLŸð ˜pð ØPHH-ÚÚaÛ@ÍAäB3ÈAäAä$AäHðdõ±™à+*hgPduè ˜¢’t” "ø˜óeD¸ð dúœ@gÒœAg%Ò ’Ra#” µZ’nZgXÒ jÒ ’JÒ@"A˜BÒjÒÒ Ò¡@Z ` €\">”@!™AšC“;#ð ¤dœÈlìl$" šv+ kÚvšaVC‡L5`” eðd}è jæšHg¤´CšášÀ“4eò’g&g‚"gðnSmñ˜€gÍg±úeAæpAäH²dõšg$è¢`g! ™A´B§“4M5p`™H´ šÁ“4š p`™N´šÁ“4š “Xl duè D`Aû@Aæ„AæŒAdõg$gB§´“4M5™BRa˜H´ šÁ“4š ™BRa˜N´šÁ“4š “Xl duè Aû@Aæ„AæŒKdõgš g$%´ “4šÁ™BRa˜H´ šÁ“4š “Xl duè ˜A´B§“4M5ëeBAæ„Aû@ž`# gEdÄñÀš„g¦¶hkodDè jè j@’mðdög’ g¦ñÀš$¬BÜ *jÌB@*Gõ"™DJüÒõ"ADÒ’“Jên*˜B* Fk êl";µ!õ2A„7øgЙ_"3’ ¶B‡µRÌLjêKdvè ’ð@ª~ñ€jêl* ’k@ð@¢_êl" Fêl" ’¨¢š@š€FRa nW¸e’šAJüÒÂgÅögð¶ hÉg‘¿ð€™Äm@bg‘Ï@BùAæ”AäH@9©ð d÷ñÀDgÒ j'ÜBœAg%" ‚@*ØA˜@"•g‘ê@e:dwè ’š@*õIraò²ï•” ¶hÉgð™IRa ² Ò² Ò˜BA‡ïK¶ mRÌL•” ¶ hkgðjÙeAæ¸@DAæÈAæÔAæ¼@Cmðdøœ*gAGJÒ ™IRaàA‡¶mRÌLjÒÒÒ Ò ’0–2g°÷ÿšü7»šŠRa™iSa ˜ f¾g‚” Ò¶ µ RÌgðjðdxè BgK +ú˜ˆðkëŒðs`òòAû@AæàAæüð dùEGJܬgg%”`Ò "˜ajêmØA™ejêl*˜ajêmØA˜ -µ/Ø ¶/ld“Pì‹RñàÙL`“¬eš ˜ê+g‚R™Ò ” Ò¶%µ&RÌgð’ dyè @GJn(mg‚’ˆÒ ²ØC’Ø"Bš@H2HàIÒ ’ èC`%˜@” gâ¶mRÌÒ • ldp"ì‹” K3g¢Ò "R™” — ” ¶µ RÌÒñà™Œ“„eÅHØjÒ õeAíè AçAäHBLAç,AëXðdí°oÿ˜@¶ôÀÒOô j’ÔÒ–ô ^aèl’ “ênZkgXênôÀ“˜€ëŽ#”Teðdmè D8D¬d÷g%¥g-"œ@™ Ò™Ao¶g‚’àÒ "“ âkR`’šIRa ™A”Ò™à¶mRÌL$˜CJØCdwè jœdœ…gCê" TÕgâïÍ'ëBaên*ïìÃ`í˜ySÒãI˜˜êcäÑgxã@‡ØxØYjºLIÝeAç@AçD¬O",¬Ndög"%@g¤Òš œC”šÅ4ñgæð  @kêl*™IRa@çA‡O¶ mRÌLð  @kêm˜£”ð À@5pedvè jè jAç|dÄg…a»g¦dDè e&LžFðdýg"œ`g$C‡›iLSÔ` FçO5¶ RÌmd}è jšašHK<Ó”š`šAÓ”<Ò¨‘eWÒ˜g¨°—›ˆ3¨ã­3háe¶ò™hmÓ ò™dÓ œaÓ œ`Ò² Ò’Ó “šB”Jÿâk“âkÒ’Ò’RÌÒÇè jeAû@AçAð(ð€&ðdüg†>g&Ò "sšBð@¢~3j2hâi“2HãIòš@Ò™ABgš@K2LãIÒ’ Ó Ò jÒ ’“ ëCa’ š’ ˜€šH˜¡ÔšÀšájÒÕÖe†×Ò ’šAÒ *:’òÒBdšµjê£a>jB’ š˜AéJa˜[Ò "’‚LRa’“ êlê1"’ ˜hšH›€›¡šÀšájÒÔÕÖe†×r`r` ’ JÒ ¶’ “ êmÒ ÷’ Ð Ò óeW” ‚ “” *¾d|è j›À” KìÌ$ê1ÉP’ “ ÉQ’ Ùf“ šÙg”vmdDè è ðdågœ$gŘ  “Ø×Ra ˜`ëBa˜ãOäQØØ`deè jØ@ØAúedµœaÕÕ Ö ð€# gEJmêº-èåê2HÒ•œ@ê¢am’ÖJþæIÒgF¶=mÖ–êÃa/uÿ`_•–åÕêª`c°7åWnoe8ãág9 á áåOwÁî aôvÿ`GU¦å¦Ä0ò6Èî ÂÀa;7ð¦Æu0Êï Âáa:£Cr=`<2£À—£#çÙ¦Àà%e>£ÁJçÙK¦à÷ÿ£ÞàÙ¡¦ÀБgè-í gèíí 0òeg0e8g9gè-‘÷ÿÂ7ð0Ê6Øï éÍ÷ÿÂþ÷ÿÂ?Ÿ£Br=`ÊjÜ@ÜA 6Ø£gîmÂÂœA“âiÜAœ@âkÜ@d5è eBäœA" œ`# ›¨šˆdÄgÅe2FkdDè êlè jè jedõœ œ !™¨gŘˆkêl"è.XgXkênduè jüedÇjÒ²Ò²ÒÔ œ‘Õ ·µE  dGè eAçìAè@°}@€]ðd÷nX’ˆm’.š@Ò ’/šDB'š`I2dâi2HáIÒ’éCaL—'ñ' ggjl [ `qÒ)’ “ šIK$RÓa¶€mRÌgƒ’'“%2@2@âaèC’$g8n m’ˆáE’Ò²vÒ’ ÑÑÚq’/ÐКDB'š`I2dâi2HáIÒjÒ’éCaB—–T’kÚh’ðÀ"êKðdwè ’0™"™@èJ`% $ð` Tkêl*’.˜{šZêl*˜P˜qêm"”.6Íg°"“%˜S˜’ãIêcÒ%’'•$JÒ'’&gxå‘ãJÓ$Ò&I „ë›,èåJ뇒0™"™@èJð€`ð€ ð` Tkêl*{’.˜{šZêl*v˜P˜qêm"r”.6Íg°Ò"l’ šIRa˜H—)”ša¶8Óš@mÒ˜AJ<Ò’'Ò’#JRÌÒ’#“!2@2@ãIêc” gxãÓÒ˜s˜RonÓTÒ”.•KœgÐg‚"ôJ"˜AJ<Ò˜Hš`šAÓR™ÒÒ’—Ò’”¶µRÌÒ’JÒ—–T“’ÓÒkjÓÒ“!˜S• ãIêcÒ!’#˜’JÒ#’"gxå‘ãJÓ Ò"I 0’#=j;eAèAè8AèDAèdAäH¤Gkêl"dÄ“èedDè è edýEGJÒ ñÀDk€ÒñÀ¥IëkêmñÀÅIg…²KñÀMfÒR`g‚R™g” ¶EµERÌgâ”gPd}è ’Bgš@K2HãIÓ ³>ÒÓj“ ”ëƒ`k›˜aênÓ"’” BçO5¶6RÌm˜H” ¶4šàšAmRÌÒ˜B" ð` Tl60ìL” gâ¶-RÌm’ò JÒjÒ ’“ šTëCa’ JÒ ’È– ˜»tæljêl" ’òÂB jÒ’“šUëCa’ JÒ ’JJ ÒÜ™@˜{êl"’™á™b*²”¶mœÔ”œ€ÒÔ” RÌÓ’IJÒØ’ìh~B3èAèpAäHAçAè„AèAè˜Að(Aè¬ñÀDð d÷gš@g%šIÜÄRiÜBk êmØC˜A*²ØA˜@*˜AØ@ñÀ™t²–êmñÀÙT ²ñÀA¨g‘fÒ RÒa’ B'š@I2HáIÒ’éC`˜à™ gï@e?IöR™”A‡gⶠµ RÌL” ’dwè @>U B3èAèpAäHdägœ€²Ø@ddè eB3èð dùEGJÒ ñÀDgÒ œGg%Ü *YÜFZÜG˜ajêl" ’ l?š@ð ¢pëŒð ÂpkÚi’š@ra’µD’tš‚Ò*’ š@šE"eÒ™IRa” ¶<RÌm’dyè ²9–ØT·9ÐñÀA¨`…g‘˜C*\˜”·5nœ ’L@GJÒ ˜T˜yÒ š@@‡Ò 2@2@âmëCÓ˜xgXâin0mL’ˆÒ AGJØH²&ØI’ ØN’ØO’ ØR’ØS@GJÙQ’ B'’ I2HáIÒ’éC`™ phgI÷˜ï˜ÎT” ˜HkÚh˜C*’ š@šdjêl"˜ajêl* ˜‚Ta² Ògð¶ <~m@‡¥LI˜C…Aè¼AèÄB3è@Ba@²µAèä@°}@V!ð dûñÀDÜ ÒIð‚kÜEñÀ­Hg$êmñÀÍHñÀtñÀPgêm* ¤Xk@ëLð€#³Â²ÁñÀØtñÀØPADg‚ndµ D†Ò –²žÙD·žñÀ@¨g`…Ñ™„·›nœ ’L™DBgš@K2HãIÒ²–Ó Ò ’ “êcñ`š@xSš`š ´“4M<¡X˜kD§ëLM5ð #´‹“4e˜H´‰šÁ“4š ˜Cš@*?˜Eš@"´…“4e˜EBgKÓ š`2dâi“ 2HãIÒjÒ ²}Ò’“ ëCaS˜B*h˜N"šÁ´y“4š ˜J´wšÁ“4š ˜ñ´u“4˜Ð˜ó´t“4˜Ò“Xl g2^"³‚²€zk jw´m“4e˜CBgKÓ š`2dâi“ 2HãIÒjÒ ²_Ò’“ ëC`ª’ JÒ ’ “ š@B§˜CM5š@ëC` – ´\“4e’ J Ò ç–ö’ JÒ ’ “ š@B§˜EM5š@ëC` – ´P“4e’ J Ò ”–ö¡Xkêl"”ð` Tk@êl"µH´H“4e‰µGùk êl" ˜H´Ešá“4šÀ’ JÒ :™ER`” g…õ˜h˜I´=›á›ÀšaÓš@“4Ò˜Kš %%´8“4šÁ˜J´6šÁ“4š ˜B" ´4“4e™ER÷a˜N´0šÁ“4š ™ER÷_a˜M´,šÁ“4š W˜A´*B§“4M5Ø”>¦g°"ßšhš¡´$›á›À“4M<ÖA‡¥L EG” d{è jeDB3è@t]@d AèìAèøAéAéAé,BÈAéPAédAétAéŒAé B¨AèðAé8Aæ<Aé˜Aé¤Aé´Aê(AéÄAéðAéüAé¼AéÔee dõgg%%”BçO5mTD@„™¡jfêl" M<Ü • – T[@„™EBgKÓš`2dâi“2HãIÒ’“êca˜¦g‘¶,Rmgð™DB'š`I2dâi2HáIÒ’éCadyè ’š jfêl" M<Ü • – T[@„’J ÒÕ™@šABgš@K2LãIÓÒ ’“ êcaI Ù’k@š€ð`¤Têl"˜FößKêl"œzëC` ÜZ˜H*œAšfjêl"gðn°m’JÒÚAêPAê”@VÁ&6žfd÷jêlg&Ò*œ@ßÅgRiÒk"êmØF@DÒ ’ØBØCØD’J$ØA™AB'š@I2LáIÒ’éCaTS” dwè j™€k@ð`¤Têl"gðn°mIêè jegDÕg†ÖUgÅaMÿä­ƒ`ëî#ø“ÚÀè Úaðd÷gœ¥g&DÇNo/ÕÖ •– 9 ˜ØBð ¢`lëð Â`”jgðg±¶<~Ò˜¢˜g"5:ndDè dþEGJÒ ž@FH2HàIÒ jg%Ò ’ èC`7˜@n$m’ˆÒ • ldì‹ŒÑg¢K3g‚™IRgXTgxÓ " ’ "— ” ¶RÌm’ "R™e— ” Ò¶ RÌm’ "’ JÒ HȲð’ d~è Aû@AëXAêÜœGdÄšBê@e:dDè evðdög`XVg%` v`)v`+&v`hzè gPdvè v`lV`vaGð ¤Dkvaïð ¤Dk?êlk@ ð ¤Dk?êlð ÀDhãð ¤Dkêm÷ð ¤Dkúð ¤Dk?êlk€ëkêmð ÄDn ’ˆm²!Ø@ØBjSØCð€™j³ØDØE²ØaØG$»eðXa&jð€ÙPÏð ¤DkЕldŒì‹ð€™g$»eðXajð€ÙPR™g—A‡Ò¶ µ RÌL’ð€Ùªð ¤Dk «AêàAë3BdAë4AäHdõ¶"µ" Rg*/²!š ) ˜Dra, ~+1 }#-j+™£-¡02>"¶µ Rg*j ê,"¶µ Rg*j@ê,"ඵ Rg"Ú¶ Rg"ßraÔZgXZgXJduè ˜b+üjú@{ÅB1D°@-ñB10Au-B0¸@4%B0œ@.ydägœ€>ân Ø@ddè eñÀDð dýÒž@ð€"žµW’tg"bµU’tg" µT’tg*Q’š`j›„êÛDi6”g*NjéLjéL!µJh9” 8’š@J$ÒjÒÒÒÒ²DÒ ÒÒ ’š@r`’‚BR`’ð€š¤3 ’hB'I’š@èCa3’‘ ”ª XÙgÑg‘g’ PÒ `D¶0µ0RÌ”gPd}è µ.’tg*-i¯i­hè, ´’ª@*’‚BRah¨6å”"úhâ™ Ü •oP¹ ’ I* “@B2HãI”¶µRÌšàh•–—jÆ H¨”n‚”gPah´ô hè °Aë`AëhAëp@<B3èAëŒAäHAè8Aëx¤`ëª`è åkðdÅgD– — ¤ ¶B¢dEè õ²ð(dÿš@g$ÒYœEg§Ò DGJÒÜ×’Ò “ ’ âiJðZðÀ` ’ B‡L’á‘ìCÒ`äi“ëC`è’êƒ`“ âiìC÷™@– Ò ™A•Ò™B”4Ò™e’ •âiÙEÒ ’”_ôJÒô€²"Ò’–I§ÒR`’ —Ò’• –”81Ò"¢ll€ì‹ëÂlkAç– ÓÒÓOme˜” u“*ðjêlðrðÀa ’ ð ¢D2Zr`r`rð€*’ ”ÒAGJ• gÂ9 Ògð ¢@k4RìlZ@Ô`j%’ • ÒAGJÒgÂ’õ2B„8*eg"?ªNJÈNjÒð  @kêmð À@¨NraT’ k ð ¢Dêlð€"jdÒ ™E– BaáIÙek/Âx"Ò• j” AçÒÐN˜O’ rD` ’" j•”_Ùgñ¶ß<~Ò’ÙB™EJÿÙEñ (™E“ âkÙE³Õ’Y›`ênñ€"”Te’ • ÒAGJ”gÂ9 Ògð ¢@Z jÒa¨‘jÒh¬’ kð ¢Dêl"‡˜CšE¢a¢€3`ö4€3`뢂4€ìm¢cë”*ëŽ÷álëŒ+¢…¢d4€ö3`4€ìm¢f3`뢇ë”(ëŽ+¢‰¢h4€ö3`4€ìm¢j¢K3`ëêm“)ên÷"jmyjDw•ó”g’ —Ò’• –”81ÒÒ "¢Lk€ëkêm“ ÃL’ ð ¢D2Zr`er`"’ h"8dp` P`HÿX`õtpaòq“*ðjêlðr÷p` P`X÷ap` ’ *Fh“*ðjêlðrðhA™Ã’ êÂaâÓ’™¤’â‘÷_"’ ðà* ’ kð ¢Dêl"“*ðjêlðra•”_o’Xr aFn µr’÷?" (1’ kð ¢Dêl"+jÒj’ ÷"X÷`’ k?¢Lêl“ ›b£ls `/s@`/sa/kÓ“6`“îm*j“•”_Ó"I§îMð€*’ *hA"Ò’ AçÒg°j– ÒOí‘qr an µO·raºnµM²kÔkÒk¶KÓÓ’ ¢ j?èL1ÄggÂÒ’ g°Bç"B‡OLEœ×g*_’*Ò“ðjêlðr’ `QšAk@šCšBð@¢_êl":’ kð ¢Dêl"µ’ šB¢a¢€3`ö4€3`뢂4€ìm¢cë”ëŽ÷álëŒ+¢…¢d4€ö3`4€ìm¢f3`뢇ë”(ëŽ+¢‰¢h4€ö3`4€ìm¢j¢K3`ëêm“)ên"ƒhM’ •ñšâO ÷ÿ§ßלÖ"¹hxr¢Lk?êl*³hUlhej”n5:Ò m‘g‚l>gÒ —˜À” g¢Ò "R™” Ò’— B‡¶µ RÌL’ dxè IÕjÒ øeBˆAëXAäHdÄe³"êl³"ëN#³!ëN#'³!ên*2” ong¹".¢ngð” g¹ÙAÙgQduè ” ong¹"ª@ngè102@èMè1gðæ” ong¹"  š€ggânØhjÙh×eð €dä¢ggPddè edúg'ggÅg¤¢gÑg°¢ j– — ”• e†Òr`kênZgXdzè jêKûðdõe“ˆecœCg%ëCÓ `Ò jÒ’rgXÒ ’ “ëC`F•þgÒ’"’"V™¤@JþêZa·-ò n̘AìJ`·*ò nÐiú•¢`[`[`'·$ò@nµ´#ÄKü[`÷šC•Ò ˜@g‘e:™@þÒ gâ’ – •g™ê@e:* ’ *’"’ “ªBëBajd~è •g•g‘–%ã’*æ’JÒ’ ßBÔAç¨AìLAìBÈAì¨dûgžBg%œ ˜€ gâßÒ—™ ˜ß˜Ã% d{è ðdögœÀ˜ ¢ ‘ ’  n mÑÒ ’ˆÒ²– Òjog± ÐÒ“-˜¡ ¢›À‘ “ n mÑÓ ’ˆÓ³– jÓog±ÐÒ˜"gÑj  gÑj ˜Ã%ðdvè e@2}dõgœ‚˜Cm6H’ˆœ ˜BÚ jØCduè eð dü²6ÙBš@cþgÙMjÒÒÒ ÙL˜@ÙH²0lÙIjÔÙjÙK™“,j™‚™mœ€ëŽ#J”Te˜@™hêj`·&ô nµ%´&:A‡eèLg¢i¡gâAGJEÒ™´o3Än™CAçÙDAGJEÒ™“™´O 3ân™DÙC"Í™CA‡ÙF™EL¤ÙG™I™¦™ÇšCA‡Lê@e:*½˜A¢@r`Á·ônµ´ “ˆee¹dyè eD8BTB@Aç¨AìÈAëäœ@dögg‚jÒ"˜£ª˜‚g"gj”àOècgXáKdvè ” i°èLð?ÿÿÿdõgœ€$öt`“èœ g‘÷gn’ˆmduè eð döêËœbÒgFJÿâi“gêlœƒâ­ìc`˜!é£`g%’ A„˜`+ökÚ`“â%KØ@ãI“Ø#êl“ âmØbdvè dùdEÓÒ ":g$+šAÒ™jmgÐÒ jÐ Ò—jmgÐA„Ò 8 Ð *"™€nm g’–ØA’ g°ØB8…A„™„HœAœ`2FëCa?+mg‚ÙDœ@BaJ2HÜ`äQÜdyè jeð d÷œgjg&PÒ a5!4’— J•–g‚8 Ò"Jdwè ’@§nš€MÒJ ê#Ò`â éC`è’éC`“á ëC÷”gД4g±’“– ”ÚÚb8…g¢’Ö²ÕeD°ðdõg&g…ng±• gê£`â)íC`èíC`å)èCùgÑ”4g’ Ú Úduè ð dög%nM•gê£â)Ò`íC`èí`å)èCùgÑ”4g“jÃ@gPdvè ed÷ÔÔÕ,´’ÜeggPdwè ‘’áIÒ÷ÿ‚_*g‘ð’’ Bgê#’àIÒ `éC`èé`’èCù–g±”4g“ jÃ@ÙeAð(ð dõg…’ g%g"• ê£`â)íC`èíC`å)èCùgÑ”4g’ Ú Úduè iùedög%g¦ÔgÄg‘“pg" â/Ø`Ø!“#“BKÿámãK“Û@Ûjdvè jüedögÖgÇ—g¤g$’àg"â R`jdvè “”Û@Û“âiáOàIÜAÜ`jòejðd÷e:²7g%Ò²7gæÒ²60ªÒ “gY2Hâigyëa’0àAjê,r`Rr`;r`Pï.2â³,2Bêîêxëdw2b2Vên³(êxê3B3bè ên¢a¢€3`ö4€3`뢂¢C4€ìm ìM“êxêô@3B2@2\êm“êxêêîôÀ3B2@2Têm7Hç]’ ç]gYJe:µ b3`3` A2@ên `ên³ êxêô@3B2@2\êm³êxêïN²kìjíeÌž-Q‡5“æTkd…ëÊk²®5ðdûg$¤x2Ì#geåIo›KëJçaû’–•Ò–g‘Ò’d{è “ãIÒjÒ õjgÒ ˜A˜€– g¢ÂÒÒ “’ HâiÒ ’ê að’ ™dê{+èå™gê2LãIÒ š@Ò “ ’ êjañàm“˜l“ ÚA” ›aBÜAHÚ€ÚaÛ@1’ BñàJHÒ˜B")˜`” ëŠa4“ ên*1˜AÒ“™BâiÒ’Ò ’ ”šAÒgÂ’ ’š *’“âiÒ’ JÒ “ ’êjaë’“Jÿêl"“’ — Ø@’ –ØB’•Ò–g‘ÒØA„’H èJaÂ’ ¤dûÒjžaÒ ž@ue›€"šdnC‡› L3¤ã­3hämìc`œ ˜áíêa¤¨íÌ-šhš¡’ ›á›ÀM<´E“4Ò’ JÒ زBÒ ˜A´1B§“4M5Ʋ<öL Ü´.” e²;“êl"˜B” ·9šÖ rg°“ôjëL#˜Jµ4gšÀj!šá’ JÒ O”’ õ¿*’.k ¢DêlõŸ"ñÀ™XrõŸañÀ™\JõŸ*j‘a»g‘D`B0B3è| ƒßÿÿAð4Að@AðHAðtAð€AæTAð,@:)Að(AðŒAðTAý\Að Að¨Að¼@AðÌAðäBÈAåàAç Añ Añee! ð,dð÷ÿœ\g%gg…éÒ g‘Ò Ó rÒ `\rðÀ`ðÀ* ˜c²oÒ ’ š@"ên*I”BG‹mðZg"`>¡a¢@l – — ÔÓÔÒµd’˜£Ò ’” Ò ’ š@šCê@e:“ ’ âi<ên*%’ âwgÃ’ ” Õš@ÖšFê@e:’ š¡% ¡@* ˜AZa˜BšAÒ – jž@Œj2” jð dpè ’ J®nmÜ• HÌ”Bg"’ @Çg°š‚’ NgâÑÒtÑÒ ¡áj ¡ÀÒµ;Ò’g’Ò jÒ “ ’ P)g˜ëCgX*.$jÒ’ ¶1mÐÒ `Ö’g’Ò ’ ".R™g‚gÂ’ µ(ÐÒ’•<åIên*7å×’ ” Õš@ÖšFê@e:Ÿ,Ò’ “ áIµ¢ÀÐÓ’g’Ò ’ J¸¶Ôj – — ÒµÒÐj ÒÒ’ – Ò’ µ ÒÂnmÇeBœAñ AñLAõÌAè|Añ`AêÜAñhAñ€gFêíðdñ* j¶!ÒÖm `eðdqè ð`Ò’&g÷À2CÒ²g'Ò ’–—&gg±Ò Jÿv6ÒgC“ –ãI—&¢@ggb’g±ÐÂauÑ g#g“’ëCagC“ên*Ý’&“ ëC`Ù“ ”"âwgÃÂAñ Añ¤uð d÷g8g)cj¶4mÒ `Ö ˜¡%˜@R`Ø Ø!dwè —l12ì-â‘g8¤€÷ÿÆ÷ÿ£ž4ˆì,÷ÿ£?1:ì-â‘i?¤€÷ÿÆž÷ÿ£Ÿì,⑤€÷ÿÆŸ”ìn,Ó§Ó§r4Ègøìì7jâý3p§à6ÒÅøo0ëìëÍâ‘âi„€¢@ÅšÅYj=Å[˜AJØA˜@JäØ@«jÜ@ÜA§eAñÌBä²÷ðpdðš@ñÀ$ÒÛgEJ$Ô Õ 4g±gQÑÒ ð€™¤²ï3Ò’ š ð %Üog±P¹’"kð@¢Lêl*ð@‚MRa ’ð ‚\r.að@¢LrðÀ`r`’ ” ¶ÙµÙRÌšà[g‘"ìhè ³Ñ’Û›`ênñ€"”Te“²ÐãK*åjð@ÃL“¨l$Ó’0Ò$¶Èm “ì”<g¢ÒgÂôA€9ÒÒ’peÒ’¶¾Ò7’mÒ>ôA€jÖ%9Ò$ÒD™XkÒ?mñ ¢Lêmñ ÃL2 n2<’J¥ Méìgñ‘ç=§à÷ÿÆÿÚè eAñ¤hðjêlðra:ðdü÷ÿœ\g@ÇÒ ð@¥­j‚Òg$NG#ÿÒ“’âqðÀëŽ+âkg£ð@ l™ê[™Ë`3h´ äm›`˜€ÕÔ” ÒÓÖ¶ RÌmðd|è jmjä³ìè jeB4AòˆAò€ððdÿ²Sö~cgÒ š@g…ñ‚Ò÷ÿ˜\)mÒ jÒ ’,*g“ ñ‚’›`ênð€"”Te³E÷À6£jkÖœà'œÁ†(d3è èg9á è¢`ø‘Néxéê¸êíyëOÿÜÁáIeêÓ“g8àmÒ’ëáIgàIÜàÚBäð dägm %Q gÂ’ *gãgddè ²üðð dägm%Q gÂ’ *gãgddè ²üðð dý g…Òg¦Ð· ³nÒ*•–%i”d}è g%Qm Ò ’ Ò’ Ó Ò²±Ò ™ Ü–—” ¶•"’ I0éJ0aï“ ÷À2êx“ êëëâi“ èyìíâ™”gåËAçB€Blðdüg±2Õ Ð ™À™á”•Ð³Ò*•– ` m¶) ` ’ " “âkJÿ •– ` ’ *j„êKd|è ²šÀšá”•Ó³Ð*ô jï’  Ò’ ”Ò ²•šÀšáÓ³Ð*’“ âa’•–” ê@e:RaÕ• è£`®’ ååU¨m  %Q ’ àa"èÒeB(Að(B8B0œa#<ð d³gEœ 5¤íBa1mÕµÖgãne=îBaRgÂ`n•6ÄuÿãÍ`Üaœ`2DãKÜ@d3è §g¹åO  ÷ÿ§å  Õí-è­•10åÕe•Ðå!g¸NÅÖjÜ@ÜAâè eBäð$dùg…kg¦Ñ n=¤Ó "!“jêl"²ð dyè jëZ*èåíñ]`g‘ Õ %ÛÖ ’ "ë”RH mLÐ ä²â²àð*ððjê¬"²è ²ð dwè jíZ*èåð,d÷èñX` g°gÑ%ÛO’P"ê”NmÐLÑ ã²áeððœ@döê¢ÕÖÒaœ!gÅ•g’g‘* ’“áE’Ø!âkØ@jdvè jüedøœAg$gÒ" œ@RÒa’‚Ar1`r2`>jÙ@ÙAÀ@ÀA61Älg¢íj“ƒ`À@’À¡JÙA’sQJþÙ@`-sXaæ@Âg‘Õ%ÛÖ  @ra™@ra™A¢`² âi¢@rÿ`jl1ÄÀ@@ÇÀANj m g‘Ò %ÛÖ dxè 1Älg¢íjÇ@Âg‘ÕÖ  @raî™@raë™A¢`² âi¢@rÿ`äjÀ@1Äl@ÇÀANj m g‘Ò Ö ÔBäBäð’ˆÒ’|* õ¡·ñ€nõ¡µõ¡´“ˆe•|6–g‘Ò"õ¡¶õ¡µRÌ”jêKÒ’ð0d}è ’{šDe:ôà" š`B2dâiH2HàIÒjÒÒÒÒÒ’èCñ@a“Pjl [ ñ€` ÒS’šIRgñ€ ™@ñàªpñ€jêlñ€*™@kñà¢Pêlò@*mug‘J"Àð€¡Akêmð€ÁA’Q“O2@2@âaèC“NgXâin m@’ˆÒ’“Ò>ôá²Ò?’ÐEÒDÒH>ÛQ’{ÐIšDBgKÓš`2dâi“2HãIÒjÒ’“êcò a—E–DT>’>kgÑÚhð€¡AKýêlð€ÁA’™ôµâiõ2A„7øÒ™\ô@"’{šDBgKÓš`2dâi“2HãIÒjÒ’“ëCô a“’âiÒ•|A‡3L}™@kš„ëŒõ`+šsõ`# BgKÓšfjêlô@"ñàn ô!µf™™‘ñàn ô!µf™™‘ð€¡@kêlô`"ôµ gW™‘ðZÒô an m&’ˆÒ&ÒÒjÒÒ–™¾tæljêlô@* “JÿÛ@’“JKÓrkÓaëD g‘Bgš@K2HãIÓÒ’“ëCôÀ`›@Òð`¢tjêl2Pñ€Jâaöߘ@Rô a’öߘÄg‘k蚢’öߘ¨k2š‚öߘLðZÒô `’š˜Tš@ô€"˜@mBÇjÒ$j‚NoÒ""UÖ%"¾Ò#’"–#æMñÀênô`*Uæ[g¢4~”˜TBš@H2HàIÒ’èCô``˜@”nòáµ4~Ò””B§M9 ¬g˜A˜`" ”š±šð䱕Ô죕”gØåõæµLêjÕÔ`š›™ºì¬, •š’šS–åIê£g¸æ‘å‘ÔÒ#›‚mð@¤_ê­ð@Ä_››Q“•ãKëCÒ’gxå“äoJÿÓÒH jë›,èåJëkpgXg¹n òA´>âÒB‡š ò!·n L’Òð (ò!¶ •ò!² og‘ãÒ—•ò²ò¶g‘ãÒg—ò²•Òò¶ ãg‘àA( ™@ñàªpñ€jêl*’šIRac—•ñá²ñá¶g‘ãÒÒ—•ñÁ²ñÁ¶g‘ãÒÒ—ñÁ²•ÒñÁ¶ ãg‘Ò“’êm"j–Ògã.fM’šIRa ’—”Òñ¶RÌm–—V`jïëêãgXîËæ[jÒ.fM’šIRa’R`Cña²Ò’—”ÒñA¶RÌm’“àIâi“âa”õß ™`ñ€jñà«êŒõß" ›djêlõß*ñ!´“4eñ!²’¬š€ñ²“Tš€k!ëkëLsYõ¿`r õ¿`Jõ¿" yðá¶Bðá²¼6g‘õ¿"•{n‚g‘RõaõŸ"’šIRõŸa”ðÁ¶ RÌm’’š@Ò".šBñ€kð@ª^êlêK÷À2BÒ™@ð¡·ÒJ$Ò’n Uš’P Ò’LJÒ’SæÒ’!Ò*ð²Ò ˜AÒ’ð *˜Hða³ jÙ’ða³šAÒ’šH”œ‰ðà" Ta”÷ïm—œ‚ðA¶4Šì¬š¡Õ š@mÒ2ˆâ‰2HáIòšˆÔòšD”Ò’ÓJ<RÌÒ’“šA› ðà"gbêªÓRa“l£këŒñ #ð`¢tlëŒ+ð`ªr+š{™›ëŒñ # “M”K3`3`ã‘ìc“JgØæyðÀ"šršSÖFÔGon>ÓHTÒI™@šdjêlñ*“›`Ó“›aÒUÒVÒWÒX÷ ²Ò&’Óñ"ð #›Hš€zš¡ÒV’šHš€zš¡ÒW•>ùg‘ÒóÀkð@ª^ëkêlòkêm“›ð@Ë^˜@Òðà"gCJ g‚3þÒ’“HÚcÚd’2HàIÒ’èCðÀ`˜€“èH÷’ê a'’k¢Kêl"ð` tjëL˜H+ ð`¨r+˜{™›ëŒ+öà³=öà³:“’÷ïl›bªD3j2FëŒên"˜HöÀ³+’˜ˆgÅš¨r`r`“E’DÓIÒHkjÓGÒF’šA÷"š‚÷$ ’÷ïkmšB2Jêlð@¤~2Hë¬êmð@Ä^^’§’mhaš”’“šP›qêm*’*?n”URâg±’ñ€hð@ª^èLè ÷À0°’•ZUgØÒj>îNLg‘•g5ég‘’ “ên"•on6óg‘•DŽg‘" &n•gðB¶g‘rgÂaøÁhô’“ên" ›¢% —&n6óg‘•DŽg‘n±’šA"š ˜Uš@"@GJMg‚mjÕÒ˜UnBçOg±RâgZgXr’gx”âi¥Ò’J Òe"²êgA@›ojÒe"²êgA@›yjÒÒÒÒe"²êgAe@›™RRóß`ô ¶µãRÌ”’JÒð€™PBš@H2HàIÒ’èC`˜@”HšÀ4~š¡”ôµ4~nï4©”e"²êgA@›éje"²êgAe@›é”60™¶ôg“Pg¢g’PÚ`’ó¿* “¬eš@êKÒ’"ÒD%g‘RðÀ`“ðà#R™””¶äµ¶RÌg⥵âgWg“µàggWÛA“ÛCð€¡Akêl"µÛgWg“ÛB’*!™‘µØgWeðZga’ó*Ðe"²êgAe@œµÏgWgðZ`ánm>vg‚Ûµ•gÞjÒU²¿ÒV’oÒ²½Òð€™¤gÐk¢g‘nµ¸4~g4©g“#gCÒe"²êgAe@œnme"²êgA@œÏ”µ«4~n’JÒe"²êgA@œ?–™¾tælgCkêl",’šð\`14©eÒ’"Ò’šðX` gnk m4©gg’"g’šƒð\`4©eÒ Ð’“„š€’“JKÓrkÓaÂ6ÔÑÔì’÷?*g‘umð€¡`l@gCêŒñß*™j˜¤ê¬*ñà Qmê¬" r`@‡µ}RªL“Üe’":Ra6²yÒ’·xÒn Uæ&'(-°u+Òñà PêŒl ëŒêmê*ä´p’èmRÒaÝn U“ g‚r an µi’UZgX”“„Ò’*ÁÈj÷²cÉ°cõb™@õB™ÐÒ™@õB™ôšdjêl" ’”çIêãgxæ™ãÙgâ“’âiÒjÒfM.’“”šIRaÔÓõB™X”ÒõB™\gðÒ’¶LÒRÌme"²êgA@š7rñ_a’Ô”ÒÓgð¶CRÌmìBÀAó¤AöŒAó´AäHAù¨@¹¹Aö AöAöLAçB3è@cé@3)AóìAôt@3 Aôœ@IAôÈ@3Aôø@I©Aõ @3AõLAòÜAõpAõ”CýlCýp@3AAòøAõ´AõÐAóAó Aó,AõÜAóXAó4AóDAó˜AõðAóŒAó€Aö BÈ Aö”Aæ<Aö\AöhAö„AötAöÔAò¤AöøAï`AöèB°Að(Aï\A÷A÷,ð dþñÀ$gAÇ™`jC‡›iLSgxsÔð€™„gxN-m ÓÒÒÒÒÒÒÒÒ Ò Ò Ò 1•ÒÒ²DÒ RiÒØB²AØ@ð€™¤3g’š@"•gð¶<hÉg‘˜CÒ*K˜À mXÙg‘Ò*a™@šIRa1’nBgš€K2„â‰2HãIoëCa6˜@nBgš€K2„â‰2HãIoëCa3’n@Bgš€K2„â‰2HãIëCa1’š@"•¶ hkg‘’"“Xl ˜À &yg‘Ò”˜€’ Ø@’d~è £ˆìÌ$› †ìí݆K ¿£ˆìÌ,› †ìí݆K ›$ð`¤´íÍð`Ä´K ĘÀ ?kg‘ÔB3è@=±@Wåðüdÿœ@÷~c"ÒJ$Ò jÒÒÒÒ²µÒÒhêg$’!" šAÒ²‹Ò²‹P©Ò’J|šDBš@H2HàIÒ ’ èC`(˜@g¢ÜÒ jog±P¹’"P©’R`ñ’ " ’šIRa— ¶tµuRÌ” HØjÒ ì’Bš`H2dâi2HàIÒjÒ ’èCa-’ "ð€¡@k@êmð€™Äð€Á@mXÙg‘"S’šIRa¶`µ_RÌ” h””ð€¡@kAëkêlð€Á@ð¡cgPððdè ˜@g‚>Ò g¢gQ6Ò "%’ šABgš@K2LãIÓ Ò’ “êc`’ š@š{#“ šHn›h›Ô›àš€eÙš¡" ð‚•” W¸njÒ H ž’ JÒ Þ’"´’šið¢’* ™@š„jêŒ" Sa¨¶3¢ð€¡@lAì‹êŒð€Á@Sa” ¶.RÌmð€™Ä&yg‘Rgað¢’*EQg‘’šIRa” ¶#RÌm´"’Œe´!’Œe² šH0’ g³@ˆ› ê£å`â‰íC`èíC`êcúå²Û@j÷ÿØ\‘ü€¶µRÌ” “\leB3èA÷DD°A÷TAæüA÷ˆA÷ÐAøAø$AøTAø|D¨D¤Aø¤Aø¸AäHð døñÀDgÒ²aÒ ’g$ð€š¤6–g‚" @‡¶]µ]RÌLhè gPdxè 6å”Ò*ö©@¡ÂÒ“jêmÒ k@gFêl* ñà Pêl"¡Bk@ëL#hã2Þ"ø’š@*õj• ”6Ú*‰îLg"ìÔ“hð€›¤“èlkêl* x3 ('¡Bkêl*6’š@"¡Bk êl*“JþëLÓ •”¶6hÉgñ™(¯‘ • ”@bgÑg’J|šBê."£g‘Ÿ’ mBgš€K2„â‰2HãI¶'ëC`Í£ˆtaèÛÁK ÷• nEg€KîŠa ’ìC`+·µ´“ˆnÉ›@šABš@H2LàIe:gYèC`˜à’Ÿûš[ïL'’—2Dâé2H›àåIÚâ›áÚã›âÚä’JÒNK ÒHã’ìN$’Ý@Õ ŽB3èAøäAäH@9éD°BAù Aù8œ@dö0DàAD'² I0áÒéadvè ¡Hkêl*•+©™€I ò€œAðd÷B'š@I2LáIÒ²<Ò ’éCadwè ™`l@ð`£TêŒ*Ióð`«P*U’›êŠ`Q›E¶1B‡š L2¤â©2HäIìCa=°-›Vg‚ì ,çê ÛV›a– ›Fîê ÛF™@šEBgš€K2„â‰2H´"ãIe<ëCa.™@+œšƒ²ê"²èN(È™@+íš™@šEBgš@K0DàA0Óã’ê`·’+횀’J Òõ•œàíêaœ¡å×-L ¸¹.›g¹ä³$g› K æìí݆Ä´øD° €œCdøBgš@K2HãIÒ ²,ÓÒ ’“ êc`Nš@šAB'š@I2LáIÒ ™€k@ð`¤Têl*I’ éCaö’JÒåœDš %õ3¤ã­J3hâmmêca²œg¢+©Ò™@šEBgš@K0DàA0ÓãšÀ— žÆîì^¢Ègøw6Òî¬gøïÊ`ÏJ Þ’•+©š€’J Ò’êaõÁdxè e„@k.ênZè gXkMvgDÜ`è Ü¡­oM"gDÜ`è Ü¡gäg…Ÿ`›¤kë¬+3¦¡¦`5 ö3`5 ím¦bgF3`ë­¦£n ímð€§`däëÌ#kÀím¢i¢È¢ê3`ö6À3`ëÍ7àïm¢e¢Ä3`ö6À3`ë͢Ƣ 6Àîm¢gœAï îmšAê@e:ddè è j² åK"ð€œPBgš@K2HãIëCaœXíN]è gX›ÀíÊ`Kôè jè jD°è e’"ð`¢tlëð`Âtè eœbjêKêlra œ\* ¤tjëLj+óÿJè è jjè è jè jè jè jè jè jè jè jô jè êKdÄí@e=dDè jjÝ@ÝAÝBè ÝCè jœDRajè eœmœLÝaÝ@Ýcè ÝBeœjdäœKg+êÃ`gÂ&˜ˆœGšAê@e:R`*j‚êK˜«˜ÊåS÷À3Cíƒg¸æoã¯Øjð  xØ‹âmð Àxddè jüè jœÆdõgg%& Lµ T>LjØF˜GJØG˜C*@‡gñ¶mTDLduè Aû4Aû“0n"´< ´<’€e"ðñà¡Pk@êl"9´8’¼e"4´7’ð€¢jèL(ñàm ´3“¸eÐð oµ/´0“0nR`¶,Ðog¦“0g†’ð€‚BRaÒñàm ´'“¸ejÒð oµ#´#“0nÂð€™È” • ‘ôN´Tõ cgPððdè D8AþÀAþÔAäHAþìAþøAÿAÿAÿ Aÿ$Aÿ,Aÿ@AÿHAÿ`@Aý\AäAÿAíèAÿ˜AÿtAÿ|Aÿ„AÿˆAÿ œARaœÅdäg&D§œ‚:ÐM˜eëN# RajêK˜a+ØAddè Øejûè ððdÿö¾c;Æg \Ò "h˜B·9Ònÿæ ’peg"ôJÒ ˜¤gÑgN*ôjÒ˜ÃldN’œì‹Ò "“¬eš@ra’ IéJaä’ R` ˜A*“¬eš@êKØAjÒ ˜‚Ta “„eR`˜A*“¬eš@êKØA˜¤˜!% \*˜ÆgN)˜Ã˜äN’Lg†R`“¬eš é+“ègñAcgQððdè jÍ’ "ó˜ƒn“xNíAþÀœEðdõæIôZg$ga;Æe*òXa• ™‚:ÐgÐèN "RajêK™a+ÙAduè ™EB‡L’ á‘ìC`“ ä ëC`è’ êƒ`â ìCø• ”4gЙEâÙjãej÷ÿTðdúg&Þ@ÞA`DGJ]*<¶ “PeRga'’g‚Ra’g‚’ ÒÒ"–g“ g¢”÷À3CëŽ+“ëJ`Ra“¬ekÚ`“蔓„g“¬eš€ì‹“„g’lÙ@’ÙAðdzè gDjÆ@ÆAœ@"Dð døg$2  *AH™ ·n ’g™`2dâi2HàIÒ’èCa •2Y 25 dxè ˜@H g‚”<Òn  g"2<Ò •gÑ2< ÷ÿ˜8÷ÿ˜\n  Ò2<Ñ •gÑ2< Ñè @º¡÷ÿTðd÷g`DGJ]*’"¶&g¢“PgRg"`“¬ešè gPdwè ’`gRg"aò’oÒn’lg‘“Èg‘Ò *#“„g‘â‚sBs.H a‚t#s.a‚U"’* ’”gðng±ê@e:g" ’È” Í’gê@e:"î’|” *Ýhñ ðþdïcúð!gÅgðm“Ø×ðZa ˜A*j„êKØAj„êKcððdoè gÂ4~göedän€gm’ˆLjØ@ddè edöDGJ=gD$Ò™€$ öt`œ@“èÒ”ö’IéJañ<»gdvè ]dõga„@r/`ug%aY ai IþjàMƒ€gbt:J`ê#aøµ ’°n*HgPduè nµ ’°g*ãõàI‚@r/aòàmƒBr/aîhìAÿ¨Aÿ°ðüdÿö¼c÷oDLñd•ñd–g$g‚g6=ÒÒ añD•ñD–o/$’$·ÞÒ÷ÿ™\ðnPšBÐ"šaÓš@Ò’%Ò’æÒ’"Ò’#Ò ÷™Lš{š\ÓÒ’ Ò’Ò÷¿™|ñ A 2pâi2LñÀJ÷oAlãIÒ’èCaK–— ÷™¬[’oÒ Ò"’• ¶¿g‚÷™ Ò’àÒ#ñ`"“âkRñ@aJm“ êbaP’ÒgCÒsñD”ñD•jÐ$n/Ò$¤Ò%"’$Ò’%ÒñD’ÒñD’Ò ÷™LšyšZÓÒ’Òª²¤ÒjÒì’˜×Ò$’˜ø”g¢ ¶Ò%*˜Û˜ü” ¶• *–mtúlgCð@¨pêmð@ÈPjñCcððdè HH Œ“ãQ„`s:ðà`s@`s/ðà`J ðà%“ ÔãKÒ’ÕÒ·„ðnñBæ&–&—'g°[ ’ Ò’!Ò“²zãK"’Ò’“ âk“âiÒ÷¿™\Z ÒðÀ`J÷¿Ù\’“2Pâi2L“–ÒñÀJãImltúÒgC• ”ê1<ÎÒð "’ Rð a”µc’nZgXÒ’ nBŒ’µ^’â‘ZgXÒ’“2Pâa0 ánˆmñ @Œ’ˆÒ’kñ`È\’— ên“2L3xêmñ`À^’“ñ€ØH’–âi“”ò Ú`’“ñ€ØP’mñ€ØT’ ñ€ØX’ñ€Ø\’ñ Ø@’ñ ØD’ò JãI“Ú`“1þÚa÷ÿ¡Lkêl÷_"ñ` ^k@êl÷?"÷™Lšh#6šejêl*2÷¿™XRÒ a-”ñB7²nÿRa%” oñB’Ø(Ò *“G’Fñ`Øxñ`ØT“¨lgƒ“G•Fäoìcg˜â«â‹• ÷™ŒíBœˆa÷*ìc÷`“’l âi2LáIñ`¢~ëñ`Â~õ÷-B¡’Ò’ ©jÒ’ R÷_`jZj÷jêKáeAÿ¸Aþ„AíèAÿÈAÿ°Bxdäg<ÁLð€@ˆ<Áeddè ð œXdöRð°D(` ñàœHgg‘=ÚÒ’ð ØXgQdvè ðdøDDÒœA"jÜAµ0–œ€g"“gg"" š Ü ™â• – -F”ð’Ðg“(e•–-~”"šBdxè ”•· ¶n"÷’õAÿÔAÿàðdøð€DHÒð€œH"jð€ÜHµ0–œ€g"“œgg"" š Ü ™â• – -F”ð’Ðg’@e•–-~”"šBdxè ”•· ¶n"÷’õeAÿèAÿàðdõ´’ e*“„” j êKduè n(mg‚g’ˆB'²I!ØC²ØG’ Ø ØHØ!Ø"gPëe(B44ðdüg¶*“PeRÒ `“¬eš@êKðd|è  )” ’ R` “¬eš@êKðZ`íjÒ’ k•ÓÒon”Xlg"J"è’ l(g’Ò (g¢“g‘>&” Ïn(m’ˆg’ Ø áIØA’ Ø"ØCjØDØE²ØG’ ØHgPÉeB4(dõg$ô l’ e*“„g‘j êKduè gô nm’ˆg‚²Ø@Ø"gPòeB4ð d÷g$’ lD"!gmg‚’ˆnD²Ø@Ø"•@‡L-m ’"oïëj8Ò²ÒjÒjÒ”n" “èg4©g‘j êKoégPdwè eB4A䨜`ë£`dÄ·µ´“ˆnÉë®gD#Ü è eB3ðAù Aù8œAB§š`M3låmícajè @šÁìÊašÂ.ùMôdög$>gåg"šBð@¢~3j2hâi2HáEŸ{ò©Bêl" Ÿh˜Hn›Ô›àš€eÙš¡*hgPdvè dägœ²@‡ØA¥L@‡¥Lddè eB3èðdög/°egPdvè îãg'×`Ö˜@kÒ Gêl"˜A2Fê.*’1$Ø@jéM“’Ø!êc`ägC“mâk“ êx’îêxìL’ˆà‘Õh’ géXí’MgÝeB3èìªð dõg`%œá@7æïC`gâ• >Âng"˜@"“ A‡@§LMëXì£î`äÉíC`èíƒ`åÉìCù”4e˜@Ù@ggPduè eðdõgôâL-¥e’ š")6m`“˜lg"’ Ù@Ú"²ÙTÙUÙVÙE’ šA"&ð€ Ak ëkêlð€ÀAõb˜@õB˜tJõbØ@’ õB˜°ššQå‘ãIêcgxãõBØpõ"˜hõBØTõ"@„ADõ"ØHÙÙbÛ@™¥ô☄>ânôâØDgQduè B3èôâœ@dõíJg%` 1¯g™¢ô☈ôâØ >ânôâØHgQduè œAdÄ2FZ>œÀ`Bâ>ÂâýdDè o@ùðdõg$Ÿ€œAœ`2FëCag?+mg‚Ø@œ@JÜ@2LäQ’ Ü ÜAduè evðdøg$ga7²%Ò²%Ò ™AÙRiÒk èmê Ò ’ÐBš`H2dâi2HàIÒ’èCa– •,±g‘Rie•” ¶RmíM– •,±g‘A‡TSL” dxè ² È–g°QDl“ êl"– g°?2lH ÎeAÿôB3è@üÉBœ@ðð0duè ›$ð`¤´íÍð`Ä´K ¿’š!ð€!šB÷ïk2JêlÒ™Hnÿ·¸šaNÓš@&Ò™AJ<æÒ’k Ò#ð`¡Têl"3µ¯,‘g@GJµ­Txg‚@‡TSL™©,F”*µ§,‘g™I@‡µ¥šášÀTxL@‡TSL™£¶¡- g™¥¶Ÿ- g™¤¶ž- g™B*™[Ò “ ˜[gêlð`¡tð Ä*D“jêl*@ð`©R*=µ’,‘gµ‘TxTS™AšABš@H2LàIÒ ’ èCaz™EBš`H2dâi2HàIÒ’èCð€a@‡TSLng±??g’#*ng±??g™£1~g’J ÒE’˜¾nîLtælgCkêl*µn,‘gµn·’ * “jëL#µg,‘gµhª–mtúlg£jíMí16¸g“ ëL+¡òÂ@@ÒjÒ ’ ˜uêc`•’™{š@êl"µV,‘’ “ 2Hâi2HàIòš¤òšÈT[’ JÒ ’JÒߘ@éJ`ð`¢Tk@êl"µJ,‘˜`µ;›H›ÁšàšAN<TxÒHj˜@šABgš@K2LãIÒjÓ Ò’“ ëCaH e’ l@š`ð`£TêŒ"A˜A´6â—-• ¡å“$9”$ë.+“ ›aên"9µ-,‘’  ˆš@šašHK<Óš`šAÓÒjêŒ"#²&Ò˜@J<Ò˜AÒšAÒ"eWe“—Ó “–µ›`Ò’ÓÒ’Ò’TxÒ’ JÒ ®²ܲæjÒõBAäHBB ÐB$B,B<BBDBPB\BhBtAú„B ŒB„D°Aï°Aû\Að(ð døjg¦œg$ÒÒÒ Ò 6–Ò " @‡h¶µLRÌè gPdxè –•²g‘XÙÒ g–g‘*&yeg” è?keøAó´AäHB3èðd÷g@§LnMLg"Ò "Jmg‚’ˆn$•A‡Lì£`ä íC`èíƒ`å ìCù”4gÐá kð Âb’Á ÙA²š@ÙB’ô⚘@Ò’ôâšT* ’" B¡5¨àµ-­ “÷À2BôâÛT˜A“2FëCag?+mg’ôâÚ˜@BaJ2HØ`àAØ gQdwè DÀðdùg%× ™DÖ g¦ªošÁÓ BgKgg‡ÂÓ Ò—õB@@m 8 g‚*–—g±@~g–g¢õB@€8…gâõB˜XJõBØXdyè gGgâûðd÷ôâœg$ ôâD -ÄÒ*gPdwè jÒ•–.=g‘g*MA‡nmLg"ì•–9 g‘ØD’ØØC²!Øš@ØE² ØBôâ™PÒ ôâ™DÒš@Ò’ *’" B¡’5¨âµôâ™@`êj`-ÄÒ’R`’ JôâÙP’“šA2FëCa”?+mÒôâÙD’”š@BaJ2HäIÜ`Úg°? g‘g¡DÄB3èö€²ð dÿš@ÔÒYgDJèÖš@g%Ò š@ ÒJ$ÒgDJì š@Ò šBÜÒ’ Ò’!Ò’÷ÿ‚\R`’k• ÷ÿ¢\êl“÷ÿ›ø÷ÿ›Ô÷ÿ›÷ÿÃ\Râe™€@r/`gp£@*Cnö µ’°g"nöµ’°g" öµ’ôg*öµ ’ôgÒ".’šIRa’ “ ”šH›áКaO<Óš@õà¶õàµRÌÒ’kð@¢^êm“ð@Ã^hõ ³’Y›`ênòÀ" ”TeZ aÖr`ÔKµ™hðjêlðrò€`jÒÒ” •!Ò¤n/Ò"2’Ò’Ò’Ò(’Ò)’ ôâš ôâB -Ä(ð€" •(–).=” gð€*’"“ ’ ”›á“šHÓ“O<Óšaõ ¶Óš@õ µRÌÒ ’Ò’ÒjË’— Ò•’” n@ÅÒ™hÒðjêlðrg(l™AÒ"ig¢Ü"”"•#$Ò&n/Ð&Ð'Ô$¤Õ%’&Ò(’'Ò)’ ôâš ôâB -Ä("•(–).=” g"’ ôâš@êÒ"+˜˜Àô€²@§ÒoM“°$"š@Ò*/“ ’ ”›á™ašHÓ“O<Ó“ô`¶Óšaô@µÓš@RÌÒ3” ? g°ž’ ôâšôâšT"И @‡ô ·n’L’ “ôâÚtÃ’—Ò’•Ò’–” 81ÒÒð€*–—•@~” Ò’šIRa™à”¶üRÌmðA@Òð€¡O” Ò™ç™Æ4Ι¨“ÛB’ š]Ò ’ šABH5”{’*•’ra’”4•5j·:nÒ, ¶×-*ð€˜ˆ=Úe‚”4•5j·3nÒ0 ¶×1"ðw’"5ðâÒ’7–5•4šG—%Õ0Ö16ê@e:*'ñ"’ñ"“ Òñ"’ÓÒ’ñ"“š€ÓœAœ`2FëCa?+mg‚’Ú€œ@Ba2PJÜ`äQ“’ÜaÜ@“’ÜcÜBõB˜XJõBØXP³ñÂ’ ›`ên"”Te’ñácððdè D8€BüAý\B AäHBAð(AÿØAÿìdøœBgÒ ²ÒœCœÀB§× Mo“° *’Ü” ˜ƒÒ g"’ œ`Ò œA2FëCa?+mg‚ØCœ@JÜ@2LäQ’ Ü!Ü@dxè je@º±ðdô÷ÿœH÷ÿœg$”)mÒ m• @‡gÂ[ÌLQ”)mð@ _ð@È|k êmð@À_”)m@GJÒjÒ’³<2HâišÀ–&$•” ’ Ò ’ Ò " ’š$“èe’“ Ú`“ Úa“÷ÿ™TênZ÷ÿ¡\g˜3^ël3|êŒêm÷ÿÁ\’JÒ’JÒ’raÈ”)m@G—JIÒ'Oÿ˜”n>ÂmØTjÒ’"“Jÿêc`÷ÿ™PšTš@"@§M4g…*’ õ"J šaÚ¡ØCØdÛ ðdtè j–”z•”jÕg¢’JÒB5ð€¤AkëLdög+#kêmð€ÄAõbœàõ"D@õ"œ€nm>ÂÒõ"Ø@õ"˜DB,õ"@DÒ“ADên* õ"˜€· nœ ’Lõ"˜@dvè ™ jº”™!Iüée@²µð€¤@kêl"Od÷6g"HD eBgš@K2HãIÒ jÓÒ’“ êc`,š ˜[™{êl*#ð`¡Tkêl*ð`©R*™P™qêm*’*µgW˜“ðZÒ`•b+g‘Ra ”µ4~nRa’JÒÐ’"4©g‚dwè ˜“µ“xnj÷è jAæ<BÈðdðg%gmg‘Øhng±•–÷ÿo=ê”"ØFng±•–÷ÿo>”"ØGmg‘—ðÐ@@Ò 'OÿðÀ˜n>Âm ðÀØPi’*ðÀ˜ð€@ÎÂmØAjØBddè B3èd÷ eAg%" gä3þ@„'ð€§Ak ëkêlð€ÇAõbŸ@qJÿõbß@õBŸT°âoêcõBŸPg˜â«â‹õBßPõBßt˜´à'@‡3þLEGJÒ“2èãI؃؄Ò’“êc`“蚀’JÒõ@‡¥L @‡¥LI@GJMg‚¥Ò ˜–@GJÒ’š€$“èe’JÒ“’ ênÒ*ò“èg’ÙBdwè ð dù²€œÒ š@ÔÒMð€˜HÒ*&jð€ØHð€ØL@GJg¢¶xj @„’”@§šAMšCê@e:Rg"ð€a @Ç@‡N1mL’šAšE*ižé+{ð€˜L˜›B!ð€Ø,i‘eê#`’Jð€ØHjð€ØLð€˜H˜‘i‘Ò“êc`i^ð€˜L@'rIEa •@‡gÑL1@ÇNYmg‘ð@@ng± Ò’ ð@€Ò’•Ò–jð€ÈPReð€¨P"uð€˜Lraq’nÔmš(’ˆðABA‡mÒLE²=ÒJg"’=àš€gÂg±DR*“ðjêmÒ’”nšAšEê@e:g"”J!B“ ’M›`ên"K”Teô i é+ð@'Im•@‡gÑLYng±•–R”ng± Òmg‘êm"’ ""”m·mg"*Î’Rað€ÈPg]ªOê1àIð€Â2ð€˜LJð€ØLð€˜L˜›i‘Ò“êc`Áð€˜HCi°gQð dyè eD8BhB3èœ@dägšÆ&µ7øe˜²ØAddè @±¹B3èõ"œdd÷CL› õ"DdgIüÓ ” BdëŽÓð€+ð€˜Œ±Eeð@€ð€Ø,¥eô@€¥eô@ˆ\™eôâ@„¥eôâ@ˆ¥eô☌eð€˜„ôâØ,eð@ˆð€Ø$EGeõ@„¥eõ"@€¥eõ@„EGeõ@ˆEGeõB@€EGeõ2@„EGeô@„EGeù@„@‡ùL @‡ùL@‡ùL-˜·%’o Ò˜YnïM“0l“蘗’ØW˜“Ta“„e˜’Ta“„edwè š DŽl™agQC,nB3èðdòjÒ Ò Ò(Ò ²=Ò²=g'Ò ’ BdšÓ (’Bš@H2LàEE’Za·5óÀnµ5´5“ˆe’”$– š@g°“PÒ Rg‚Ò aÝ’2LJxâim÷ßÚ€÷ßÚ ¶)<~ÑÒ’”JÒ’œ *·$n’LÀ˜@2LJxâi˜á÷ßšÄ÷ßš ’%”&ê@e:Ò*Hè#aíjÒ’B'šI0 áéa h’èBa ”’ðdrè ™“èIí2 áIH“„š€êB3è B4DBHBTAu@º±ñà¤Pkêld÷ðD,*œ´gñàœˆ-²Ò²ÕÒ· µE gÑñà PkêmñàÀPgQdwè ²Ò¶<~gñðeBtB„@°}@´Á²õð0dýš@kð]Ó³òÒuÔ œ@Õ Ö|Óa gE´í“uœ€ëŽñÀ#”Te• J$BgQÑÒkèlgPêëLÒ lñ@¢Tì‹êŒêm ñ@ÃTjÒÒÒ h•–” qÒ "’ šDR`“ ô jêKÛD\™B»” Ã’–JVÒ`C’E"à’ "” 5´g¢’|BRagÂmtúlgC“_êmÒ_((” 9™g±"Ó kñ@¢Tëkêl“êm ñ@ÃTj¸’|J*  kñ@¢Têm ñ@ÃTá’|J*Þ(” A§>ùMg” 5ég°Ó—‡@Ò ‡Ar:a¥• BONþg‘×QÜÖ"r’|Ja#*Š(” A§>ùMg‘ qf`Qg`]qRðÀ`QS`qFð `qM`’ š@šejêlð€"  jñ@ËRh÷*(âdqZðÀ` qaaë’ñ"’ ð€" m %Qm:%HÓ m %Qm:%HÓm%Qj¶}mÓÒ&-Öð€" &; JÒ —ð@¢Q– •” 4ÎÒ“ sMa“ ÛEQqrð `Qs` qg`geðZg÷?`ñ$’ðZ`1™DÒ™EÒjÒ Ò ²aÒ’“ ëCaêja"’“ ëC`’“ ” âw꣒gxâ‹âk*U`•ñ$”G—""ôBa+“+“K#˜a+ØA4©gRg÷?`• ” “xnû’"•#gÂg4~ÒRaê“ ”’ã‘• ÷À2CìcgxåIãIÒ Ô ´’ "$ñ’m/JJg’ÀÒ "&â BagPg°ÓÜÒ"Ò’—Ò’ñ$•Ò’ñ$– ” 2mÒg– j— Òg°’œg†Röß`gkÛñ$“jêl*-™m™L• ” Ó”DÒìhã’ ñ$“š@Òjêl"”µ’°n* ’ •”šášÂj“ŒÒR`jèM’ J Ò åjèMêô h"eBôeeÿÿÿðdøð\Ö×a&gDdxè ’â꣒gxâ+âk*U`• ”G— *î’ ÷À3CàIêg˜áeä%g’éCaäê*a’èCaßgPÛ²ihÒ ñeeÿÿÿ& däågÄHšg»gddè è jedägœˆœ@*ð  Xkêl˜bãIÜAÜ@˜Ê˜ëgFêí"Hše˜DRajddè eðdõG‹gðZg"`˜@“ âiØ@gQduè g¢8gøe@ð d÷gg‚g%jÒ” Ò“#³+êlraI²*˜cên*G÷ÿ˜\ÒšAšC"Dég‘”Ò DÃÓ" Raô j êK ÷€2Bâ”HÌmðZg"adwè  š€ð€˜dên*è ™ð€˜hên*á@‡mLi”• DÈîƒg˜Mÿä±êŽ*ÓëÎ+Ñ•m·”ÛjÙô j Éô jÆ?ÿÿÿgkcpdþ±g™@ÒœI"œLœmêm*L2YL!˜©g]¢x¥@ëJ`âk"ô mí«8gjØI@‡25L!˜DRaj“™€ëŽ# ”Teg]Mð’¢Ùàd~è eD8œWdåg"œû' œÚœ˜mê@e:g¢"8gdeè jØZØ[˜D*˜HšD"˜j+ØD˜W"˜d˜˜# mnoê@e:Rg¢aãmží«àmôjßedåmgœˆG—í«" g¢ôJ" 8gdeè ’ØJ’ØIØYj÷ed÷DGJgg&ÜÍܬÒ˜M"`˜DRa]˜[*˜J"”’Pm"òr`(J"Pô mí«I)g"ídwè ˜D*ë˜W"˜ù'˜ÉïÊ`˜˜mæûê@e:Rg¢`8gé˜IØYIBg"Òâ˜W"˜y˜IØ{âsØšØY˜J" “|””o8¶’„m/"j êKËIBg*ǘJ*í˜Mê*aêI)g"潘W"¡˜MéJ`ž˜MáKµeAä¨dägg…Œg§g¢¶Ggddè j@¹ðd÷œ@gÒ jð Üèð ÜL”g§Œg'g¢¶ Ggg"’Jd*R™g” Ògñ¶µRÌL$gPdwè hûe@» BüAäHðüdÿg$nØòÞcmg‡’ˆg÷ÿQ`AGJ]ð *õ"’õ"•÷À7B7à’Øg‘"“¬eš é+õ"’“+2BÒ’*Ó Ò’$“;Ò ’%Ó Ò ’"“'Ò’:ÓÒ ’&“Ò’ÓÒ’ “!Ò’#nØmgÓ’ˆÒ’“ ØD’ ØeØF’ “ ØG’ØkØH’ “ØJ’ØmØL’“ØN’ØoØP’“ØRg]Øqð@¢Sê"z“ðjëLðs`sðs`p¶kõ"•“Pg‘RÒaaônD”$g‚RÒ aU²cÒjÒÒ “ Dâi”g¢ôoõ’Ò Rg¢`-“¬eš@r=Òa ”<” “ KãI“ Ò êbaà’ð€@ÎÒ g]” ð@¢³cÒ J$Ò jdêKg°Ò6ÍÒðà" g¢ñ”ðjnÒÑ5ÀgÐ*8ñ”6e"*ð` Tkêl*%œZ˜{êlZgX”g±p"Ò ðZg"a!J"Ñ ˜A” J<Ò ˜Hš`š!R™g— ” ÒѶ]µ]RÌÐwjÞð`¨Rð " jêKÒ âñÂ’"™c™€™A™¢ÓkÓÓÓ³QÒÓâ‹ñ“Ò÷À2CÑÔÕÓÒ’ *VÑ n4m’ˆ!ñÂ’n ÒñÂ’ mÒñÂ’$2HÒñÂ’ÐÒ ñÂ’’ˆš ð` µ²:g…Ñ"1ÄÒ#Ò&ð€Ã¥@G• Jo"K3Ò'Ò ’ "P’ *‘ð` Tkêmð`ÀTð`‚TR`kð`¢T— êl–•”ð`ÃTRâejÒ ’ ñÁcððdè jÿÒ.ÒñÂ’gÐñ0B¨5Àg‚"’ šIRa˜˜H˜á” šaO<Óš@¶µRÌÒ‹”g^.g¢nJÕg‘ê*Ò a€â’ "¶@ô jXô jUeAèdAäHB50B4ÜB0Aæüå—gD% u¤``s*a¤as aè Js*aJè eè eœ¡œZeëC` dÄÝEŸCg‡šàï@e?dDè è eŸCdäg¤šg‡è@e8ddè eè jè jè j¥mMgDÜ`è Ü¡è jè jœAœ`ÛAÚ`jÜ@è ÜAð …ZRñ`aðdúœ@kÒ ð ¥Zëkêmð ÅZABgš@K2LãIÒjÓÒ ’“êca’šCBš H1(à%è#ðà` ˜ ”L¯H÷’šð`€DR` ’lð ¢zð` E2ZêlêŒlì‹ëŒëM’ð Âz’“š@šAênZgXr’ gxâiÒ ’JÒÆð` Dk€ëkêmð`ÀD²–ØWð`¨RÒ ˜[Ò ’ ð *’ “ š[êlZgXkênð` d1XlAð` Tì‹ëŒÒém“jêlÒ˜Bð`À$Ò j êlð€*’ nîlš¾tæljêl"|’ *|j@“éLjëLémé)t˜P˜qêm"p’ kZgXênð` dl!ì‹2TëŒêmð`ÀD˜Dš@"a’kšKêl"^ð` Dk2Zêlênð` elAì‹2XëŒêmð`ÀE’ "Oð@¢~3j2hâi“ 2HãIòš@“ +E˜p˜‘ë#A“ êm“›mêlZgXkênð` dl ì‹ëŒ”2LìMëMê‹” ÷À2B\g˜tg˜êlì‹2PëŒëM˜Cð`ÀdB'š@I3DãI2HáIÒ’éC÷?`™ ”L¯I öjdj•j“j¨j¦j¹jÆ’šABgš@K2LãIÓÒ ’“ êca#’k¢P2Zêlên“÷À2@›“ œ ë®#³,êm“•D'›nIKÝnëM’Úlœ@2LáIÒ’éCa)dzè ’š@ÒšAšCBš H1(à%è#`˜ ”L¯Hø’šEB'š@I0DàA0áéa’JÒ¸™ ”L¯I ô™@šDBgš@K0DàA0Óã’êaIÅ’”L¯š ’J Òòè e@%7Að dög%šCBš@H2HàIÒ’èC`’˜ ” ê@e:Hö™EBš`H2dâi2HàIÒ’èCadvè ˜@šCB'š@I2HáIÒ’éC`’™ ” ê@e:IöH çè ejÜIÜHè ÌZeðd÷²±hÑÒ“2âig±ª ’ì¯â%–—ä1Ô ¶Õ *@Odwè Hp$aêjêKøB9 B8PdögÔg%g圀˜¡3ân И€˜¡o3Än ™@kRgXdvè ênžKš@"œKdõg$š šÁŸ€8gg¢™ZeëC`ÝE˜Cgšàï@e?duè è dÄn$m’ˆLdDè jedÄnm’ˆLXdDè jeTa däm“Àgn€gîM“Àmddè è œBdåg*j2ÜB”œ…µ’ g‚*g]ªMZaØB˜Bdeè e@thdùœ k¤Lg$Z@agœBZgXíMMÑÕ JúÒ ˜FÒ˜GÒ “ ’êm"X˜D” Ò ˜EÒ ’ “ ÷À2Cêx“ êë˜ëâigd” ë™îïg†g§–— uâ‘Ó“ jdêx“ ìêyïîg§gF— –uäQgÃ’ *˜B“êja˜CêÊ`!™EµÒ’”ØB“dØÃjÒ ’ “êbaSg`h’ èBa’¬”´“Е¡Lk êmÁLdyè jnÒИ@•“К„’ JÛ•“¤l HÞBTB`EO÷ÿZð dõgg'`…@g…"“Ðg°• gÑ’ügg°“¤l ’¬gduè œ@ðdõgš‡g&$’üe˜c˜@#š†• ’ügÑduè š…øðdÅ N/ÖdEè däg“蜂“ègddè ðdújÖ× n·Ò ¶×*hiè gQgpdzè ’iÒ ’hÒ j·n  ÒfÚ×"ì” M”• ÒJ*ihâ–”tæ• gCkêl"ô–mtúléMèmÛAù¬Bhðdù Ò× g&Ò·³n"” M”• gJ"gÐð!mtæljêl"’”— •NCgÑ”ÜaëMÜ@j+jêKdyè eAÿ¬Hððdï÷ÞcšaœÓš@· ÒA J<Òðnæ • – i˜gðAcððdoè B Ðð„düg%œ j6A™`H2dâi2HàIÒô`’šAÒ’èCaj2”ð€d|è  ˆjêŒ"#²˜!Ò˜@J<Ò™AÒ "eWe“ ·Ó™`Ò’ÓÒ’ônÒæ•–”i˜H ̲ܲåeAï°Aû˜Að(gDdÄšmg…#s` jdDè ’tš¢ZgXøš‚“8nøeð døœð  I*`@HJèÒ 2dE'âiI2HáIÒ @GJ%Ò ’ éCajØOdxè ™@” B§N´M5"!’" ™a÷ÿ˜X÷ÿ Ü›Ô›àš€eÙš¡"™@• ØO˜F˜ˆê@e:jð ÀH÷ÿ˜D¢AêOê2^ð ÀII ÏeœMðüdï÷Þc"r`jð!cððdo蠜Üäð"•ð"” ¶eZgXïð"’œÒð"’ ·ðnæÒ• n“8géBð ¤I*ð dägLøNâLè"˜F˜ˆ@§M%ê@e:jð ÀH÷ÿ˜D¢AêOê2^ð ÀIddè jè jedøœLê `g$*Ù dxè j˜b+úšH˜¨šÀ€šá¡ÓÔÕ e†Ö raíë¥%ð`…TRað`¥Tk€ëkêmdÄð`ÅTjºedDè jè jð`…TRadägjºL(ð` Tk€ëkêmð`ÀTddè è eF* däL$iWgjØFddè è %ð dägLì8œ€@ˆg¢O.Lôddè jè j@ðdõ0DE'àAI0áéaduè ¡Hkêl*™ O.” I òe…@r/`ðdägog¤¶’àg"â RgXkênddè è jAþ„dågœ¶kÆm Xk?êlÀXdeè eBÈœDZ adÄ·µ ´ “ˆn "œeKÜeJÜDäQè ĹeB6PBlB„döœ@gÒ˜B»";ð@¢~3j2hâi“2HãIòš@íMÕð`¨@ð`¨¢ð@¨<&*ð`®bêmð`È@ð@®\ë­éMð`Èbð@È<”6¸g±“lêlZð` dgXr2rêŒg¸íMgEêŒlì‹2PëŒëMð`Àddvè jͬwêmë­¬¹”é­ð`Èbð`È@ð@È<ð@Ⱦ6¸e“l êlZgxjëNð` Dì‹3lêŒêmð`ÀDÂeíÊ`>ð „\Ra:AðdöBš@H2LàIÒ²g&Ò’èCadvè ˜ AéJ`ð`¥Dk êl"’"˜A“âk" EBgš€K2„â‰2HãIëCag±” HÝ›€éŠ`û”$›–äÓ$õK îè eD°ð døœ!%^Bð@¢^2JÒ’"mð@ª\œ€Ò ’š»šB"Qð@¢~3j2hâi2HäIòš@íMœUÕ Ò jòÂDÒ’“ êja>jÒ’÷ïhê g’ð`¢A3JjëLÓ™„œAœ`2FëCa?+m g‚ÙDœ`•CAÜ@2dâi2HBgKämäQ’Û ô@2@•0èM’Û¡œd2DèMjêlèMÜ-™AJÙAdxè j¤j¶–• tælgCkêl"’ ˜`êl*·’HJÒ¬jÒhº’*™@JÙ@Þ’“ên* ¤Skêl*¬H00ô@02FèN ΙBJÙBÊ œ€dÄòedDè œˆdÄ:ÀedDè eœ¤œˆdÄ=edDè EGdöJg$g‚g4Ò*ð  Zk@ëL+¨z+kêl" @g™CKÙc“IØ(ØIÚ`dvè eCðdõBš H1(à%è#`˜ ð ¥Z3^# këL+kêm” ð ÅZPeHìduè ð ¥Zk@êl*oð dõE'I!g‘4g"(ð  [këL+!k@ëL#¨z#kpëkëLsakêmð À[L«g‘ð  [këL#-“ ’ K šIÛ!ØjØKÚ ’ *íduè ¨º-¨òkëŒ#÷ð  {l@ìl$%jpêKëLjëN[gXkëLlð  [ì‹3hêŒêmð À[Îkêl"’ Jš`KØC‡L!êŠa šaÚ!ØJØkÛ Í’ Jñ˜¬›ÌíÂ`›jì›KÛ+ØŠ»è edõngP5g%g±P&gg±Pgduè ðdøg‘%6¶.jmÖ &-Ò ZgXrgX2PÒ ” •Ògð3ân"4” • Ñ 3Än"• – jlì¢` æƒ`s>`S?`s<`s=`j“ ëMjêKêl*jØ@ØAkÙ@ÙAóßJs~aîk kêmLÜkûkù“” Ø`“ØakìmgdÙ@ÙAj”Ü`dxè eAï°gEœ EgÀK5ÄåÕ5¨ãµë£a š šÁšâdÄjÆedDè šÀ›àïÊ`K ïÛÀšÛšBè ÛBðdþœ¡gg&%XÔœ€3ânИ€˜¡o3Än”•Ò PxÒ*A’ Ò “ jêlr`”ez•ZgXÒÒ”•Ò·³nÒ "’"%•–6=”Ò •–8”Ò "’•ôB€9–kÙb“ ÙA’ Ù`“ ÁHj?ëL2d“3|êmÁId~è jÙ@ÙAÙBØ@ØA÷eB¨ðd÷gi˜@R`gQdwè —•P¹g˜A"’"g]ð ‚ER`ô ié+•–— jÆ”áô ié+Ýegf¥ÈjêÌ#gå› -è 2RdÅ"íŽ- jvagÝŸdEè Ÿ›AœaÓœàš¡eÙš€ôeð dök¦Hžêl"ð „|Sa¨zZgXâiê1rÈZa ’k¢Hêl*” Ppg°˜ABš@H2LàIÒ’èCadvè ˜ ” •QgÐZ™vÒgXâið`¡dl ëŒÙV#"” g±g±’"– ” Ojg±HÜe¤È%œ@aêj`2Òkè êlvdÅagÝœdEè œaH›Ô›àš€eÙš¡ô&)gežA›àdåïJg¦a Q6gƒ"jdeè jüžEBÇšN2â 2HæIîCajðžï `N ÷žAÕg£QÒáè jðdúj êÌÒ jêÌñ^Ò a"2ÞkêlrgX“Ò jêlÒ @E'I2HáIÒ jÿJêKêlÒ’ éC`Y™@šABgš@K2LãIÓÒ já’š’ " ˜B*D’JÒ’“êcaóIâ’ " ð` Tk@êl"ð’"˜zëC`ëØZ(ø˜CBgKÓš`2dâi“2HãIÒ’“êc`Ù’ " ’k¢Hêl"’J Òñ–•QDg“êl"ô’—–•e:ê@g’ "ë¼’ *ÅÉdzè ðdõh± 2â)š€$’t• "HpaõHøgPduè eBB˜œ@døgœ…Ò k¤Gêl"B>’mg"˜†k¤Gêl";>’m˜‡Òk¤Gêl"4>’m˜ˆÒk¤Gêl"->’m˜‰Ò k¤Gêl"&>’mgnÈm’ˆÒ ’ Ø%Ø@’ØF’ØG’ ØH’ ØI² ØKØLØMØNØOØPØQdxè ±À²ƲͲÔ²ÛeD°B3èdõnÄgg%L’ˆm²ØEØFØGØHØIgQ¤Ø duè B3èEHJÇZ4ðdõœ gðÀ`3D âm‹`âiê€e¿­Ï­Õ­­!­­¯Õ­­i­ÕŸ­­­Õ­­­­­­Õ­­­ÕÕ­G­Ÿ­q­a/ÕÕÕ• – 8g‘ØC’ ð "jB• ôA€9– ØJó• ôA€9– ØPë• ôA€9– ØOã• ôA€9– ØLÛ• ôA€9– ØKÓDÇoN g±Pí "Ëð€¡Ak êmð€ÁAð` \êmð`À\ð€¡Ak@êmð€ÁAjduè D§My&; ±m %Q ØuØTªm %Q ØsØR£DÇoNg±Pí "›ð€¡Ak ÚDÇoNg±Pí "˜†>’mï• ôA€9– ØM‚• ôA€9– ØNzm %Q ØwØVs• ôA€9– ØQkm %Q ð`ÈxdMŸ]a ð` \k êmð`À\ð€¡Ak@êmð€ÁAk€ð€¡Aëk“j•ô jêK‘gDgeœ¡dÄìª`òedDè ›¨gÅšˆr`kênZgXójêKð³›@ñJè Û@DÐœAðd÷gš¢×gæQZ–˜EB'š`I2dâi2HáIÒ ’ éCadwè ™@—–š¢’gQZÒI ðedögE¬Jâ ðZÕÖÐ`&g$ ä k/Âb@AÒ’•B‚á‘ì£`’äIíC`èíƒ`’åIìCø”4–’“âiê1É@áEjÁBgPdvè jNêKûT`ì‹ôD@ZB`³2DãI³ª@è âidÄ”edDè BAŒB9ødäm/’Àg"BgPddè ðNd÷MÑgÒ LZ@a“˜%+k êl"’¬g‘ Lk!ëkêlÀLð@dwè –òm “Ø× “Küêba” Lùµ ’¸â‘ µ “dg‘’¬g‘´“Ðg± Lk êmÙeB¬B°B`EAðdögg%"Ò-œ…—–N!g± Lk!ëkêlÀLmMÞg˜‡$–g±N!×dvè ¤Lk êl"’¬œ…˜†ßeðþdÿ^÷žcñ€`2ÌäIÒšGñ`"@gÒšDgbjÿJêlñ`*’œ J$ÒQ6ÈÒ²¸âÉ™hš@··ÒÒ›AðnÒ›@Ò™AJ<Ò²±æÒ’*l„Òì‹JÿÒ °­i”Tñ@aðb’Ú`ð€€@RaJm” gƒRÒ `ð€ @k€ëkêmð€À@ð€ @kêlð *’ Ra7ð€ BZ@ð `˜‘oµ˜“nð€"ñàn µ””(˜‘R`T’šIRð€a™AJ<Ò™Hš`šAÓ“¬ÒR™š€Ò’—Ò’”¶†µ†RÌÒyjêKÒ ÀñÀnµ}f™”R`ÁjÒ°~“¬eš€™AJ<Ò™Hš`š!R™ÓÒ’—Ò’”ÐѶtµtRÌÒðb’k€ëkð@¢_hêmðb“ð@Ã_›kÿKjÓÒñ¤nµi”D˜‘RaŸkÿKjÓÒñ¤nµd”D˜‘Ra’kÿK jÓÒñ¤nµ^”D˜‘Ra…kÿK jÓÒñ¤nµY”D˜‘R÷aõkjÓÒñ„nµS”D˜‘R÷a ð€ @kêmð€À@’ R`b”ñào ón“PRÒ adjÒ’” šÆ’ š§Ra\’"M“„” jêKÒ ’šIRað€ Akêl"E·9™H“”Óša¶7Óš@mÒ™AJ<RÌÒð€ A™ÁkêlN<"0²/Òðb’— •Ò:ígR÷_að€˜ˆ=Úh’ Ra“„g‚’"”n“xðacgPððdè j¨” ôm “Àn?²·º²ÏjÒ°jÒ®häeBB˜BBBBðAÿ„BPAæüBÄBœAäHBB B,B8BDB¸B„B¼Að(Aððdùgóàn¨@g…B¢æ[“ àµRÒ a¨@“ ãIÈ@¨@JàIÒ @BÒ g"’ m â+gÂg‘”Ò Ò *’ Ra#’ ” È@g]g±ª×’¨î1jdyè • LŒg‘“ ÒãKÒ’•”¶RÌšè’šGgb’Úh’ B!Ð’ éJ`g¢LŒg‘“ ÒãKÒ’•”¶RÌšèjÓAûœdùgLg&Õ ÕÖ×Õ 8*Ö * ˜€œ@R` ô@jêKdyè š¡šÂ `”j÷’ ÑÒ˜F¶ÒµR̘åéB°AæüœJð dûîCœkgaêÊaïc`gFgg˜‰ã…˜ˆécgxâ‰ãIÒ“˜Dêja˜Eê*`/˜@šAÒ "$˜AnÿÒ˜F˜gÒ’ÓÒÑ·Næ’" ’RÒa” gÂ:Гên"“„” ˜@kÚa’˜€ØDØ%MÞmð d{è BÐðdõœëgg&œÊTœ‰²˜ˆê#`gÂœG• šAê@e:Ra ˜k˜ÊãU÷À4Cícgxæ‘ãØjØ«duè gÑêðdå gN/ÖjØBØAdeè ðdög•N/Ög"ØA’ *AA””<ØB“ãI÷ÿ‚_r aiØ!dvè jðeœA" däµN:gjØBØAddè è eBÈd÷œAÖœÂgîCg%a “ÕÓ·µN:æ[˜aâiEaœ€ãIMÑÒ “ ëCa’ÑҘ· µ N:gJÿØAdwè j—gѵN:gßeAð(BàBèBôð.d÷ gÅmÿPgMg‘“Ø×g¢gÑgÒT[Ñ ð dwè dägœ€Ta“„ejêKØ@ddè eœFðd÷g"]œ‹$»eTƒ@„@‡LTƒ@'@‡L TƒI1˜†n“i˜”j– ˜»tæljêl"’ “ 2Pâi“ 2LãIò š¤ò šÈi˜”’ JÒ ’ “ šTëCaâj2”“ jêl"%” 6Íg°g¢"ðjÒ” [Òo5ÀgÐ*m Us?•?–@i””<[g¢ÒA”[gÂi˜ÒB“ jêl"m!UsC–D•Ci””mj6í«Rim “™ÄêmgñíMRmgj2”“ jêl"oRim"EUsÒ •E–Fi””mj6í«˜AšCBgš@K2HãIÓ Ò’ “êc`Nš@šABgš@K2LãIÓ Ò’ š@šDBgKÓ š`2dâi“ 2HãIÒ’ “êca ’ JÒ ’ “êcaè’ JÒ Ö’ k¢Hêl*’ š€’"œB"• QDgÐkêl"’ š€$ ’ öÿKêl"œzëC`ÜZ™D• gñgÐê@e:’ J Ò Éj2”˜BÒ * ³º’ êlgbêKêm÷À2Bñcððdè ²µ“ êl"_mUsG•G–Hi””mj6í«’ šEBgš@K2HãIÓ Ò ’ “ êc`Aš j˜Ä[N"÷ÿ®¼ñ@ËDÕYRÖZ˜BBš@H2HàIÒ’èC`%˜À[N"÷ÿ¦«ÖZRÕYÒ  ”ñ@ª¤[BÂÕIi˜ÖJ’ Ra “  ñ@ÊdgCñBJ âik÷ýÂ~HØ’ JÒ »j2”²„“ êl",’ šTš@"(mUsK•K–Li”’ ”šTj6š ’ šTBš@H2HàIÒ ’ èC` ˜ ÜM•M–N”i˜Hòj2”²m“ êl"<’ kJÒ ’ B’ HIš€$KJê aú#-mUsO•O–Pi”’ mš`#MJê aú°\j6”²[Ò ’ š@" ˜ ÜQ•Q–Ri˜”’ HJÒ ’ ê aíj2”’ ð@ª\"²N“ êl"mUsS•S–Ti”’ ”nð@ªüji“Ò’ šVš@"²B“ êl"mUsU•U–Vi”™Cng‘šâ’ e?ï@š¶²9“ êl"BmUsW–X•Wi””mj6í«”j ¶0m ÒYi˜ÖZ’ kð@¢^êl"”j ¶*m Ò[i˜Ö\’ ð@‚_R`”j ¶$m Ò[i˜Ö\’ k@ð@¢_êl"”j ¶m Ò[i˜Ö\j2”’ k2^êlª@€€Aèœ| €BB˜BB´ @Aæ<B„B”B¤dDz Ò ¦BÕr×Ö ` r ` ²]ËÒ dGè ²ø²öB8DA2YA2yA6Éðdñ!gn ’ˆm™B™cÒj!êKêlÒ˜@lÒ @GJÒ Ò ²JÒ²JÒ¡AêŒ"’"¢PêŒ"jðdqè j êl"2’"gB§N´M5™cÒ™Bêm"’*’“êm"èjØL’"ØEšABgš@K2LãIÓÒ ’“ êca˜l#ÖjÒÒÒ˜C˜ïÒ˜D˜‘ÒÓï@e?ÈjÒ’š@ÒšAgb’"êja9¡Ak ëL#“›b#2k@ëL#˜`”›{œ›ëŒ#)kêl"•>¦˜€"!’™cØX™Bêm*jð@ÀH’"˜ØW˜N@§MEê@e:*”ARa ’* jØWð@ÀI’ ]Ëš€’JÒ¤–@§M Ql*ÚëeB88A2YgD…$dÄ]Ëg¢dDè è jeðþdÿñÀœD÷>cgg&mn\’ˆÒ’˜cÒ²ÄÒ!ðâ’ÐÒ'Ò(ðâ’Ò)Ò*˜Bg‚ìm,k jØcØB @këL#™`+”kjØcØBµ¶õL7øg"ðácgQððdè ´°ëŒêm"äizé+ó3^ð€#kÓÓÓÓ³ªÓÓk@êl"’ð€š¤3AGJÒ™@“2HãIÒ ðÂ’“ñÀš$’ ëC`5›@g¢ÜÒ o2g±P¹’"’R`ðÀ‚AR`ðÂ’— B‡ô i¶µLRÌé+””²‰Ò¤•2–3—4jÆ’JÒàAk@êl*mg‘XÙgÐg"*&’Bgš@K0DàA0Óã’ê`Ô’ša+’J ÒömãjÒ2Ò3Ò4Ò5Ò6ðâ’ðâ”Ó72ê@e:"ëg"ºðÂ’gÐñÀš„?k±€ARa²eÒ'Ò)AGJÒ ™@“ 2HãIÒ i’ “ êc÷_` š@Ò jð€Ã\˜cjêl"’ ‚@r/a• ”2hê’" ðâ’ðâ”ê@e:÷?* jð€Ã\ @k êl"HjÒ&’ ·HÒðn2æ ’ Ò’ ÒÒjð`ÃP²@Ò’õBˆ˜B*b˜Cr a_’&*]•–Õ8*Ög‚Ò"`'ð€¢\*ÒÒÒÒ’ðâ”Ò’Òðâ’ê@e:öÿ*’&*I’ JÒ Œµ'“$” ZgXr• gX ÜÒ&’ ” • ÒÒÔPxÕ"’Ò’Ò’•Ò’–Ò’ôB€9eÒ𠣋kÓ Óð`™µ7ø"ªŸeDtA€ùÀ‡B3èB´AäHA<-BD°Bðþdÿ÷žcjÒÒÒñÀœDÒAGJ Ò²OÒ¥Be>rÕ`Fr `F²KÒ²KÒEBïïCgØ@oæmèjgØëÃêîa(~ïC`|²DÑ·DgÙÒ`…Ò”Ò œ %)·@n’L’ð‚”j6š ’Bš@H2HàIÒ ’ èC`J˜ A§ÜM5•–ð‚”i˜HjÙFí².»².¹”œ %8·-n’L’ð‚”j6š ’B'š@I2HáIÒ ’ éC`™·#ðn˜H šaIÓš@Ò˜AJ<æÒ• ð‚”i˜–ð` Tkêlð`ÀTßð‚”j2e””’ ðcððdè jêKÒ öeB8,A2YDLB3èAý@ÃAA2yA6É@²µB Ðdú²UÙCš@gÙKñàœ@lÙ¨>gÙIgÂñà˜@š`ô[`K3ng]3lâkeº™©WgðZÙIa ÙH™c™K›`ên"~”TeoíñÀ@HÙFñÀ Hkêl"™é™ÈñÀ@¨a[gÙH™HR` R™g‚@‡gâ¶4µ4RÌLW™‰ÕñÀ˜XñÀ˜|êm*³1²0ñÀØ|ñÀØX™ÈAç²*O!ñÀ@¨gfÙJRÙHa;™J™‰j6š ™JBgš@K2HãIÙEjÙhÙG™E™hëC`›@™‰j:ÙD™é™ÆñÀ˜¤`™„™g™‰ëMj2Ùg™HJÙHæj2™‰ñÀ˜XrñÀ˜\gxêOêmëKêm™g÷À2BëLÙh™Š—™He¹dxè D8AèpAäHB3èee/cž@"d÷g&n4~gRjêKaÒ² ÒogÐg±k¢lRanµ4~g÷À2Cdwè è jAçBÈððdÿcçðjÒ,g¶’Ò jg%mÒ  `Ö @ÇjNomÒ "¾Ö j¶‰mÒ `Ö˜aC§ÜM5•– `j¶mÒ `Ö˜Hš  `šÁ˜Iš@"j¶ymÒ `Ö˜Iš  `šÁj¶smÒ `Ök Ó˜ó˜Ò"˜j¶mmÒ `Ök Ó˜ñ˜Ð"˜j¶fmÒ `Ö˜Nš  `šÁj¶`mÒ `Ö˜Mš  `šÁj¶ZmÒ `Ö˜Jš  `šÁ˜Kš@"j¶SmÒ  `Ö!˜Kš  `šÁ˜Lš@"j¶KmÒ" `Ö#˜Lš  `šÁ˜T˜uêm"j¶CmÒ$ `Ö%j Ò˜õ˜Ô"˜˜Oš@"j¶;mÒ& `Ö'˜Oš  `šÁð`¨P" m¶4 `j Òð`¨ðn"˜¶/m `– .™A*j„êKÙAj„êK)’ð¡æIên*,æ[g¢g‘Ö4~Õ R`™A"jêmnò˜Ãµbg‘*ó˜Åµbg‘*í˜Äµbg‘*çcððdè jêKÙAáeB BBBBB B$B(B,B0B4B8B<B@BÈBDBHBLdåg¤T3^# ˜j¶mÒkÆÖ% k@êl"œj¶mÒkÆÖ Tk êl"ç˜D6D^#a· µ ´ “ˆn˜µ 4~N TkêlÀTdeè eAçBhB7ôBPBhD(ð dæk ¤TgêmÄTbÓm˜¶ kÆm• –kƘ˜¶kÆm Tk@ëkêmÀTdfè jeB„Bˆdök ¤TgêmÄTmg&bÓ×—˜µ<ªgÑ Tk@êmÀTdvè jAñ˜dõg]𠬜DZ a·µ´“ˆn!gœg& 4~n˜DkaJØDàIëkÂ5 Têlk êmÀTduè B7ÜBPBŒœDdäg"bÓmgn}cm{ddè jeœDdäg"bÓmgn]cm[ddè jedäk ¤TgêmÄTœDmJÿbÓÜD˜D˜B§Mn4~൘dlài– Tlaì‹êŒl@êÀT+˜µ4~nddè jBÈðdùô+jËN¤Tk êmgÄTg%mÖbÓÖ˜¶#jmÖ kÆÒ nmî"aí"`’˜á»4~ⵘ¶kÆm Tk@êmÀTdyè j’FaâÉÓ‚@r"` R#`r `r `–Ûr\aüíÊÃ]`’˜æ»4~ⵘ 4~n•ëjtíjnëeB„œddääiKÿ¢^ÜdkëLg#œeKÿÜekêl* \"˜µ4~njØFÀ\ ]kêlÀ]ddè jeBÈð dûgg%n!µ”4  X3^+$˜E6D^"a·µ´“ˆn˜4~ !˜DkàI¢Yêl"j¶ÒÖmkƘ Xk€ëkêmÀXd{è k@êl"ö’"ôj¶ÒÖmëeBXB6hBlB¬BÈAçdõngg%c‹mmO]g!˜µ<ªgÑOUgduè jeBÌUdõga g%nc‹m˜µ<ªgÑOUggO]mduè jBÜ„XdåRg` nc‹m˜¶ kÆmOUg˜DJÿØD"˜EJÿØEdeè jeBèð dågnc‹m˜¶kÆm• – kƘOUgdeè jeBø¤Xk@êlð dåg"OUegnc‹m• – kƘ˜¶kÆm Xk@êmÀXdeè jAÿ¬ðdñgmÖ nc‹g'˜AÒ ’&g°Ò’  Òf|Ñ• – kÆ” OUgðdqè jeð dúnmgc‹g'’Ò"LRP`)’´9Ò“‚ ZgXkênl“ìba˜"9r`B˜¶1kÆmOUg˜EJØE’Ò’Ò n·* fÚ*;˜EJÿØE%“ãƒ`s ` S!`s `s a jÕs#` s'ùm:é®Yg¸ê­g#LÆq `ðjù•–kƘOUgdzè jµ4~n•–kƘ˜µ 4~nënmc‹g• – kƘOUg°eBüBBÈBeedöAg%gm g‘%QÒØcØB“™AØeâkØD*jØ@dvè edÄ·ò€nµ´“ˆeeBF0Aç¨Bdðdõgð€Ä¼‘&g¦’”nd™¢ñ@‰-µ(’”n ™£ñ @‰-µ$’”n – @‡om [¿Lu™Æ@‡om[¿Le™Ç@‡om[¿Lm™H÷án@‡îLom[¿L]™Ëoð€@ˆð@$[¿m µñ@’¸enm ’ˆg‘ò@@n `HèJæyaûg‘o[¿mduè eAÿàBtdøg€,jØ@2g%¡…@r_`LR``r.`>R/`r-ð€`jîJÐêZ `ú˜@Za8raõjØ@g±dLgR{`r``ê˜@Z`çjØDØ¥jØ@™AJÙA™@JÿÙ@dxè r~aؘ@Z`ÕMLÿ@ç١ـO Ñ3Än˜D"Éj·˜@Z`ÄMLÿ١ـÅjɘ@Z`ºLÿM@çـ١O Ñ3Än˜„,ج˜¥…@rh`/Ri`rc`-Rd`ra`+rb`+jØA›rgaûi rr`$rs`$rpaóTa"i²3$âm«àAa3dâiªÀ²æûNÿî1ç]Ö  ¶× *ÞØ!jii éiçiåiãiáißi ݘ@Z÷`j¶mg‘Ò &-Ö ÷_"jgBFèBFÀB|ðdþgm “˜lð "ml“˜g"Òð€"’xg‚’¶M•=ÙF“PgRÒ ` “¬ešjè Ò Ò L” ’"“„” í’BoÒ òjëCa ôhè A‡3*L“èg‘g0`’ lJg¢“˜ÒÒ "D– ” “ g¢ èN “¬e” “„š• ” “ è “è” Á“„” ’ “ ” âiµ"’ôÂ"’Ò ’>"™†j³– • ÒÓÒ”Po• ” “ g“è” A‡ôh3*Lè ®h §– • “ä”çA‡3L*ë”=Ù ’ÜÙ!ÙGgQðd~è h åi é+÷eB€@´ýðdõœ˜ ’ èJaduè 3þg@‡3*L“蘇g“èg™ ëejêKìLLÿ\ `%2„ äIŠ@äQì€'C3+7;##??/² è ² è ² è ² è ² è ² è ² è ² è ² è ² è ² è eAæ¸BB”Aò¼B˜BœB B¤Að(B¨BŒðdÇjdLÒ’ZakênZdGè gXdÒñeðdþð`¢KÒ %/j@/ýj=jiÒÒdLÑ’Ò jÒ Ò dLÑ ’ Ò’‘Ò ’èJabX`àp`'X`(•“”’íƒ`*p`#jêKê r`ò’–”gñg¢ÒÓÑR`#jd~è ’‚@r0`î@r0aÝê’‚`@÷À5c÷À4CØ“’ mlgÄî®.ëCaäì£a.êc`jÞ*ý’Ò’ÐdÒ’Ò’ Ò’Ò ’ ÑÒ ’ dÒ’ Ò’ Ò ˜’ra’ ÷*pa’Z pa’Za®’ra’ ZaÉ’êa¥ÅejêÌrðdåg`k2ÏêlgÇ—e†Òê ZgXkênkèl kêndeè j÷ed÷œ"g™@ÒœA"š¤%í@e=˜ƒ\a#2ˆÒáIJüš@" eÙ@˜€’onÑÒ ´  ìMg"¤g˜B“Ú`gQdwè LÿÛióeàdög'×·`…eRga™€·nœ ’L™@nBgš@K2HãIëC`› Kð`¥”ìÌð`Å”ögPdvè eAg†Ò ² iÒ ² Ò • wB” Ra• ” w‚I“ Ò 3bõ€23jêm0qÒ 0 aé3(²âiQš`a’J* ’ •”ÓÐÒ·æn@È” xžÓ•”ÓÒ·æn@»eAñ˜F@:€BlBäBìd÷g&’—r–g` r`ra#×Ö·n@g±æg¥Lg±2^fMÒ…LR`× ’ÄÖgⶠm@“ìg‘Ø@Ø!gPdwè ×Ö·ÜeBôAê0Añ˜ð dõong$“g*jduè – g°”(g‘"÷– g°f¥g‘òðüdÿ÷Þcg$“¬gš@r`jêKð!cððdè m/’Àg"ôèJ`òâ BÁð^`íg°’”ñàn f™g‘Raáð"–g°”(g‘ÜejêŒdÇ"³jêŒ"¶jêŒ"²oìì$´ÔÒÖÓ·n€æ ’ ‚`# JdGè ³ 㶠å²ç´é²ôBüB B B AþTAð(Aò€ðdögg%˜¡%ÐÑ–—³˜€*˜`Ù`˜aÙaØ@ØA™@"îjdvè jüeðdðg “hg&˜  “Dn˜£ “Dn˜¥ “Dn²•!š@@‡ oÑÒ“ L ’4g"Tƒg@‡TƒL@‡TƒL ê+dpè eD0dÆ&ÖÕ·g¤ðnæ’ "’Ra jdFè Õ·g¤ðnæïjNêKòeB B ,²;ðôdÿš@g%÷¾cg*@´8’Tm*³4jÛ@m/’Àg‘"ZéJ`Xâ+Bað[a/jNêKðAcððdè ³)jÛ@(J²)Òô@@Ò gÐg±g *êðB”–ñ o“P Rg‚`6“¬eš@raÚ“ HèjaåÕr`ÜÅ ÑÒ·ðnæ • ðB”¶ñ o“PeRg‚aÆj>gÒðZ`·ðB“Ú$Úc“ÚÂ|¯µä²µjìDàB 4BIAíè÷ÿT`DGJ]"è gDdÄgndDè dõg’pg%÷ÿPgÂ`@GJ]"gPduè g±ggùtdæŸ@Ÿa`'T` hè èŒp`L$(gæÓÒ¶t`ta÷Ÿ‚gæÔÓÒ¶´RÌedfè gæÓÒ¶´RÌeõgæÓÒ¶ ögæÓÒ¶ ñŸ‚gæÔÓÒ¶àeB B €DŒB DB dB ¸B à% ð`¥Ek ëL+k êmð`ÅEœJJÜJè @ðdõ1DEáEH1(à%è#aduè  Hkêl*˜@šh# «ZJÿê1ËZ*˜@š©%X)” H èeDgœ€K2„â‰2HãInëCaè £ˆìÌ,›€œˆ$¬ºM̺K òð`¥Dk!ëkêlðdögð`ÅDWÅ¡˜EBgš@K1DáE1(Óã%’ê#a” WÔg°dvè ’” WÅš ’J Òîìª` dÇgDkÓÀᜀe†š¡dGè è jœÀDg2ÄâÉK2HãIëCaè ›àíê`K øF¯2¤â©2HäIdÄšÂÛÀšÃÛÁšD>’ÛBdDè eðdñ±g™@ Òœ@ÒœA&;Òg]@ç𠢑nð  ¶Oo“™€ëŽ#”TeZðdqè gXD8jðdõg…Þ@ÞA’ g" – ” g¢Geg"R`“èg‘duè ’ Ø!Ø@úeðd÷g…’•*²ê£aggð’Ò’ Ò"Xa“èg‚dwè ’1 â%™‡$“èe’H0 â’Ø@’ÙGíðdägœ€œAœ`2FëCa?+m g‚Ø@œ`CAÜ@2dâi2HäQ’ ÜB’ ÜC’ ÜDddè e$(¤Tk@ëkêlr€ðdæga—gŵ ¶l*¨JñkëkêlðkêmÈJjl1ÄÀVg¢@ÇÀWíN%Ûdfè è B 4ð0dñ¶$gÔ œ‘Õ jµ"“PÒ R`˜“jTÒ `/ð0dqè g‚’g""jg‘“„Ò ’ "ë’6*ó’“6êja ’“7êja’“:êja’“;êj`ãjÒ ¶ m<~g‘ÛÒ ¶<~mÊe B @A)9œ@ê£`dÄ·µ´“ˆnÉê®"Ü è BFdAù Aù8ðNdúgg%%N@"KEgK2HãIÒ jÓÒÒ’ “ëC`3›@g¢ÜÒ •õ@ˆ8*–” m*“Ò *’ * ’–——• ngê@e:’JÒÝ’*ú’Z€` 2Hò Jâi“ öÚ`’JÒëjÒè’* •·7n’Ò -ið€ Akêl* õ˜ðõ˜„n>ÂmõØDõ@ĵ+õ@ˆ7øeõ˜„·&nœ ’Lð€ Akêmð€ÀAõ˜DBgš@KÓ ÒjÒ’“êjað@dzè ’“ 2HãIš@Ò !&J<Ò AGJÒ™@Ag2HKãIÒ ’ “ëC`›@• ng‚“8Ò * ’–——– • gê@e:*×’JÏ’JÒåjÒ î@ÃA@¸­ðdùjÒ Ô Ö × %.@",EH2HàIÕ Òg0’éCa’õJÒ’èC`˜ Üg±•– 8*”gÂ’—”g±ê@e:"dyè Ià™€“m*"ù’µõBˆ7ø ïHØ@¶AðdögÜg'•–U}” kØbØcØd“ØEØ`“Øa*’ • ðoš‘’XgÑg¢Jÿ÷áZ` @r/a ” Ø¢Ø#U}gÑØE*ØBØCdvè œadüSœ@g$gašaÓ ¡i+~š …@r-az…A"xr-`EBÒ @GJÒ ’ Ò ÷ÿ‚_Ò *8 ^"Qkå…B*jÁIj+MÜn m’ˆg’ ”•ØB؀ءnÒ·)³Ð"jÀ]’ØBg¡h#ÕBo[`˜C˜Æ˜¥´ ê@e:R`Êd|è ’ ‚@*’ Ò n m’ˆgjØ@’ gØA’ ØB’ À\¡h+’ JÒ  ^"¦˜F“ ëN+±™@JÙ@™AJÿÙAªBo[`Ô˜C˜Æ˜¥´ê@e:R`åËjÉeAò¼Dhdõgœ€g%œAœ`2FëCa?+mg‚Ø@œ@BaJ2HÜ`äQÜ duè edõgœ€g%œAœ`2FëCa?+mg‚Ø@œ@BaJ2HÜ`äQÜ duè eð dägœ€œAœ`2FëCa?+mg‚Ø@œ@JÜ@2LäQ’ Ü@’ ÜAddè eð dägœ€œAœ`2FëCa?+mg‚Ø@œ@JÜ@2LäQ’ Ü@’ ÜAddè eu gE`u@`u`jÄ@è ÄAkð dÄL• ÷ÿÄ~÷ÿÄ_ì£`äMíc` èkðkîíƒ`åMìcõ”4gÂdDè gD$Jÿè dÅœ@“ÓšIê@e:dEè eœ@ð dÄošHê@e:dDè eœ@ð dÄšGê@e:dDè œAðd÷¢@r`·-ôn µ-´-“ˆeg$ ”³*êlên*dWe’"B™˜@Ò“™Cêca4PRah’g2Dng¢”8Òg"æ’2HÒPR’àIÒ a™¢è£`íC`èí`’åIèCø–”4g–” ’ˆm’ÙØ@¡Pk€ëkêmÁP™CBa2HàA’ÙcØ@dwè eBFTAç¨AëäðœBð döÒš@íCadWeg$” g³ êlên"ô’"™CèCa@AÙC’0â’Ø@dvè eðœAðdö¢@r`· óànµ ´ “ˆe’gÒœ€’g%mLÒgÂg±iÕgdvè BFHAç¨B P¤@këkêlr` %¬AíCa dÄ·ònµ´“ˆemœE5¬â©Jüè š@BF<Aç¨B tœadÄ[gEgæaœb›¡ßgÂdDè mùedÄ e÷€2BkênZdDè gXdÄje"jdDè jüœBdÄg…e:ê@g¦dDè ðdægµ gF ggUœ¡Mr`ið dè r`uraù’^g±tB„gã a” 3rgÂi“ÓS’^g±gðßB„‘!Iÿ” j6g±jÒ ’ éC`j2” <˜E• šAþÒ – ”^gâj>m’ Jè’^gÑJg¢¢Ò ’“” • ÔÒâqÒjÔÒÒn ²&Ó”4Ò²$˜ÁÒ’ ” Ò²"îMCo” n ”4—˜B* j:” ”^gÑjžg°´”^gÑjžg°î˜Ae`jÿJÒ’^gÑB¤gX ê@e:• – “  A” ›`2No›ÕÖïLè@e8Ѷm ðè eBd@ˆQ€B ¬ð$dúœ@g%Ò©Ag¦gñ LßÒ™(h’èC`!g°þ gâ" ’èC` ™e2 JøãIšÁ&š j>”THèoÿO  è@e8• – i˜”ð dzè edõgœ€g%œAœ`2FëCa?+mg‚Ø@œ@BaJ2HÜ`äQÜ duè eðdägœ€œAœ`2FëCa?+m g‚Ø@œ`CAÜ@2dâi2HäQ’ ÜB’ ÜC’ ÜDddè edõgœ€g%œAœ`2FëCa?+mg‚Ø@œ@BaJ2HÜ`äQÜ duè eñàjíLònæ»òv` dĵ4~edD÷À2Cè è jDäð@d÷gònmg$’ˆ ”<˜€gâ¶mL d_Ðòn 4~g‘R`jð@dwè êK˜@g‚”<Ò • BÁ4~g‘Raï”<˜€B¡jág‘JZgXåB ¸ðLdög$gònm’ˆ ˜hðjêlðr`jêKð@dvè ˜€,Иå˜Àm0d_òn4~g‘Raê(òn4~g‘÷À2Câ”jéL!œFRP`j¶ mÒW)Öîj¶ mÒW)ÖjØFÚj¶mÒW)ÖØ&ÑAçB ÐBÈðüdÿócôjð^Ò 8 Ò ñÀ`gg‘b+g¦Rñ`a™'™@ñ@* ˜Vš@"j¶ãm Ò4 `Ö5˜Vñ`*j¶ßm Ò6 `Ö7ð@¨\"j¶Úm Ò2 `Ö3j Òð@¨ün"˜ j¶Ñm Ò0 `Ö1ð@ ^Za j¶Ím Ò. `Ö/ð@ ~3j2hâiôâ“2HãIòš¬òšÐ ` j¶¿m Ò, `Ö-ð@¨~ñàjêl"Cj¶»m Ò* `Ö+ð@ ^kêl"j¶¶m Ò( `Ö)ð@€_R`j¶±m Ò& `Ö'ð@ _k@êl"j¶«m Ò$ `Ö%ð@ _k êl"j¶¦m Ò" `Ö#j¶›m Ò  `Ö!˜EB'š@I2HáIÒ ’ éCñ`™j¶™m Ò `Ö˜Ä N"÷ÿ®¼Ö `Õj¶ˆm Ò `Ö²Ž˜Åš@êÎ"mM5ü – ’ ôâæIênðÀ*8æ[g¢Ö Õ %nôâ”4~eRð€aôjÒ 8Ò ˜BBgš@K2HãIÓ Ò ’ “ ëCðÀ`›€LRð aj¶sm Ò `Ö ­@ÇN Õ `Öj¶am Ò `Ö²i˜Âš@êÎ"ma5ü  Lk?êl"¶cjm Ö `Ò Œj?1ÄìL@Çg¢N Ò"¾Öj¶Lm Ò `Ö– ’ ôâæIên*f8æ[g¢Ö Õ -cj„êKI2HáIÒ ²LµLnÒ ’ éC`#™@ôâ”4~Ò R`ôâ’šARöŸ`ôâ“›a+]ôâ“ÛAY’ ô┚À4~š¡Raé• InÚô┵)4~nÞBgKÓ š`2dâi“ 2HãIÒ ².g#Ò ’ éCö`’ ê*` jÒ6’ m¶'  `Ò7ôâ•gÑ\Õ I èmn/mnšôâ”4~eRa²ôjÒ 8Ò ’ JÒ 4Ièô┵4~nRaŸôácððdè B(BÈB ØB B ÜB ØAò¤B\Aê@B èDÄB àDÀB äAçB Ôððdÿ²›œ÷|cš@Ù†ðdÙLñà˜@Ù©ÙK™k²•ãKð "ñÀ˜XñÀ˜|êm*k'jñÀØ|ñÀØX>glgÂñà˜@š`ô[`K3ng]3lâkeº™«WgðZÙKa ÙG³ðd™L›`ênðà"”Teoë™I™‹j6š @GJÙEñÀ@HÙD²vÙL™IJÙH™I™hš@2HãIÙCjÙG™C™hëCð `›@ÙI‚@r/` ™‰A§“ÔMe"AGJeÙI™J™©™†AÇðbAìNMhêÙZ™ZÙJ™K"Rj:g‚ñÀ˜\ÙI™U"™ijêl"A‡mUsL-™­™Îi™‹™µ™Öi˜™‹™W"™ijêl"A‡mUsL5™¯™Ði™‹™·™Øi˜™‹™J" ™ë™Ä™¦`g‚j2™‹!jÙKA‡mUsL=™±™Òi™‹™‹j¶:mÙSi˜ÙÔæ™J* ™é¶6µ7RÌ™…™GJÙG™HJÙH~²2š@Ra™X"¶0™J™j´0šH›ášaO<Óš@Ò“4™©Ŷ+ð™Jk@ð`¢TëL+ßk@êm™jA‡g£ð`ÃTjºL)²™LÙJš %BH·n’g™Jš@2HàIÙI™IèC`˜@Hš” L<ö™Š² ÙL™K÷"j2g‚W™‹ ™GðƒIe¹ððdè D8B0B3èB üB AäHD`B ìB 0Að(@²µdög}jð\gËN`)G‹mðZg"ag¢=gnµ’g‚"ô mí«ò¡Crc`rd`r.a!g}jËNg]¢\Z`"ýgggPdvè mHÌgg}jÃ\ìmHÌgnGegâô mÓeB ð0dò²£œš@nÔً٪ðA„mñ`ÙL’ˆeð@BHtmð€ÙPgmð Ùdð Ù@gAÇN=mð ÙX²’ð Ù|ñ`Ù@gÙI™K=àš€™©ðA€DRgÂ*gA‡ng°L5ðA@JL™¯™Ðg‚i}ÙHA‡ng°L-™N"™íWaM¢€¢a4€ë5`4‚ì­ì1s€Ù‰GÎ`S™©ðlíƒ`:ðlì‹ì¬ðt`sa3va1¢g¢†¢¨3`ö4€3`ë5 ím¢c¢‚3`ö4€3`뢄¢É4€¢EìmìMªíÍðÀÙdðÀÙ@ð ™p™I™Êêmð ÙP™K™‹ðA šAšEê@e:gs `ô h è ñ`™€e³Oñ`™L›`ênð€"”TeGf3nB¢3lg]âkeºàÉè£ÙH`íC`èí`åÉèCù”4g™hjð€ÙÃ@¾ðÀ¡\ÙI"Íð ™pðjêmð ÙP™KšAš™J*™‹nðA è@e8¶ð ™@ð ™dÙF™JA‡n š@mÙE™JLaÙgšAÙD™JšBÙC™JšC’ˆÙB™E™gÙV™D™©ÙW™Cð€ÙlÙX™BÙY² Ù]™JÙ^™HÙ_™Fð€ÙHAGJQJ(g‚2 ÙJ™¶™×íÊ`™Š2<æ»™v™Wâkð€™l÷À5CãKëCð€™hg˜ã¯ãð€Ùhð€ÙL™‹AÇðA NQè@e8A‡g¢=LQ[e¹gPð0dpè D8B3èBFxö€²ð dõš@ð\Ô ÕÖ×õÒa gDö`´õ“œ€ëŽó #”TenÔô ’ˆmö@²õÒŽô ÒjÒ ÒÒ ÒÒÒ” ònG%ŽòrgÒ"`ò (“è” “è” õ”e” õà²õÒ=g°ÀñÀ‚X*’òÀ*jÕõÀµó ’n"ô jêKÒ"ô ’"ÒŽB‡m [°Lum ó@Ó’ÌÒÒ#ó@Ò$ŽB‡"m[°Le–$•#”=êgãm ó`’ÌÒÒ%ó`Ò&ŽB‡"m[°Lm•%–&”>gãÒŽB‡"m[°L]"m °[°Ó"mó€Ò [°Ó!"mó€[°ggCðkëkèlõ³ 2@êl"mó€ Ð[°Ò"mó€ g[°Òõ’ô nÔmg#’ˆÒ’÷álô Òó@ô@Òó`ô@Ò’“ô@Ò’3`ô@Ò ’3pô@Ò’éô@Ò’êŒô@Ò’ ô`Ò’!ô`Òõ2êm0ô€³0èl“êŒém“è-êmô`Ò’ô`Ð õÒ’"ñ@*ó ‚Q"$ò`‚Trx`rg`ŽÒjdÒó€ÒMj›nÿÒô ·Ng°æ9’:*j„$’9RÒ"ñ aô Ðjò Ã\òÀÃYõ’š`#kÚ`ô@’Rñ `*²ûô@“ êcña’ð " Ò’ Ò’m Ò'’'%QÒ(m '%Hg#jÒ7'”'Ò•()·ìÒn³×8”'(ð€"’àKBaéca}AoãWì£Õaxâ‰âkà¥'m Ò'%HÑ(’'Ò’(Ò"jj”)•*Á@·ÚinÑ5 ¶×6*ô л”)•*j·ÔnÒ3 ¶×4*ô Юj ¶Ïm )Ò1&-Ö2"•*’)kåIgðÂ`’õgÂÕ9Ò:hÐ;•j¶Äm)Ò/&-Ö0"Œ”)•*·ÀnÑ- ¶×.*ƒô ¢DZ÷`jô ÃD1Älg¢ô€ô Â¥’í+Ò+Õ9Ö:%ÛÐ,’,÷*ô ËD`õ”ôÀ’ÓIÒ?²?ÒC’ Ð=ÒD’ÒH’àO÷À2cìCaêŽ*8’êc`5’“âaÐ=gP“ ”<Û@’“àC÷À2ãëgxäKâkÒF’”ÐGô ê@e:Ò"÷* »<Žô Òô@’ áGjÒõ!” nHšgñRÒ"õ` V’àKðÀÃH“ jÛAÇñÀ‚X÷_*” ònG%ŽòrgÒ"`ðüð duè D8B3èB LÿÿðB TÿýþAò¼B dB `B lB |B Büdögœ€$%»egn ’ˆmdvè 2,Ò˜G3,âiš€œ@“Ò˜GâiêŽ*I˜DéCaï“蘂ä“èe”œ@ìiñedÿgg$ðm<Îg"g¢Œg‘dè ²3Ò ²3Ò ²3Ò ²3Ò ²3¢@"O²2Òj3HK`ã÷ßÛBa3hK`ã´-÷ßÛ€Bb3hK`ãJ´)2H÷ßÛ€J`âik÷ßÚ`²%´&š@’ Ò g"".ðanmðaB’ˆg‚²ÙÙC²ÙÙ´R¥ÙGk— A‡Ó¶g¢TâLg* • A‡ fèLg*gQ¤j²“èg‘gPj êKšeB ˜B  B ¤DÌDÈB ¨B ÀB ÈDd`BF„²¡ððdÿš@ö|cgñdÒœ@˜wÒ J$Ò ’ g%˜ÖñÀšD™’Ò ˜U³2@2@ãIêcgxãÍØ’@‡ØpØQسonTL” 6Íg±Ò ñ" ²‹ÑÒ˜Æð‚ðm%¤˜çRg‚a˜ajêl"'ðj” Ò• &Ò5ÀgÑRg‚`V™AJ<Ò ™Hš`šAÓ R™Ò Ò’ — Ò’ ” ¶tµuRÌÒ˜CJØC’ ð„ôJÒ˜‚ð‚I§n*Ì𤒙rêjaÇ𤒠™sêja˜w™S™’ãI˜¶êcØW˜Uå‘gxãJ˜ó˜Ò@‡ØvØUTL˜o˜NØsØRkjØqØP³Tñd’›`ênð€"”Te’ ˜šijêŒS"a” &¶NRÌm’ kš@šDêl*â˜AëL#>glÒ ”p"&ðZa5g‚†aé™H” ¶AšamÓš@Ò™ABçRÌO5Ûkêl* ð‚g^˜‚ðZÒ aÜ” i’RÒ añðm<Î&"ëôjҘ” ð‚’œ&*àƒšƒšaš šÂÒ"@GÔJlÔÔÔ Õ´#Ò#ã«• ÖÔ!Ò%n÷À2CÓJÕÒ$Ò ’ n$mš@’ˆÒ ’ Òð`¡Ug‚1ÄÒ ” Ò• AGð ÃJoK3Òg‚÷*Fô lì‹ñƒcððdè eD8Ar©AèdAäHAû@B ÄB50œDð dùgg'" œ`œëŽ+ Rß`ßaaôjêKdyè  ˜ ÒјA–—³â³Ò "’ “ Ø@âiØAjëGngg¢"èR`’ gÙ@8ÙAݘ`˜AÙaâkÙ@˜BØAØ@çeð@døõ±h™@oÒ nJ$ñàm g‘ÐÐ4ÎÒõa³oÛ@nÐÐñ m4Îg‘õA³Û@’ šFö€" ðkêlra ’ k@šDêl*ð€¡@kêmð€Á@’ "Üšµ’"nˆÒ ’#mõ´’ˆÒ õ´nˆm’ˆ™j€êKñ€ÁJ’ ñ€ÙT’ ñ€ÙX’ ñ€Ù\’ ñ Ù@˜]ñ ÙT˜^ñ ÙXjÙU’ ñà¢qñàšˆj`êlr@Ù‘a_’8L*Y“Lô¡²ênZgx’ m3pš†2‚2Vê¬2Têmm1ð€¡`í«ë¬êmð€Á@jìL,™‘oôµ’ØL*’T"ð€¡@k êmð€Á@ð€¡@k êl"™}j êmÙ]’ ð€š˜€ðÀ$ñà¢Pk@êl*’ šFgbðjêlð "H2ˆàIÒ ’ èC`˜ Ü • –!ô´4kHñk«’ ñà¢qj3vëL¤’ klñà¢Pì‹2Zêlð€¡`2HëŒêmð€Á@ð€™Pš@*hóÁ¶mó¡´Ð4kÖð€¡@èMð€ÁjÒð€™Pk󡶚BÓmšaó¡´ ÓšàU£Öð€¡@k êló°*’ k@ñà¢Pêlðà" ’ šDgbðjêlðà*™‘oóaµ“nZlð€¡Aì‹gxêŒêm™‘ð€ÁAoóAµ“nZð€¡Bgxl3|êŒêmð€ÁBð€™€ó!³ëŒë[gxlëŽL¾3xêŒêmð€ÁBð€™`ó!²êlðraG’€lRa5’¤egJ"/(ó´’€e÷À4B”eòᵌ™‘ðZg¢÷` òá¶ò´GecnL“Âm™`ôâÙLòj›„êŒð€*›µñ°™‘Ù¶“PgÐg‚ÙS™@TÒ ñ€añà¢Pkêm“ ñàÃP’8("3“¬ešè P`}ˆðÁ¶jmðA´Ö0®ÒðÁ¶j m ð!´Ö0®Òð¡¶jmð!´Ö0®Òð¡²Òð·ð¡¶ð¡µ<~™‘¡“9lg£jíŒêl%êlg£íŒ%êlg£íŒ%êôlg£íŒ%êðlg£íŒ%êðlìl$ðA´êlg£íŒ%êl@ëŒ#ê“ ÙY›fgƒôkëŒ#kêl"™Q™¶oLg‚’ØÒ ðÀ" jÙW’ šIRa” ð¶ðµRÌL$÷@²k€š€œDëL#7këkêlÜD>&lgjÒ$ðX÷À²Ò%`'÷Àµ÷ ´>ùeÒ •$–%&qg*L”&•'Ò(¤n/ñ*ô mí«8göà´ 5é• »g™@kpšFêlrpñ€`jÒ ÷@² Ò™@” ™šF60Ò –g¢“PgRÒ ñ`“¬ešè ’ *@Bó *’ kšFêló "– mtúlgC™~êmÙ^’ kJrÓ aÐ’ šFgbòjêl*ö@°kð€ @êl"6g" öൌ˜“noîËg¢Fg’ šFgbðjêlñ`*ð ÙL’ öÀ³ð Ùhš_Bš@H2HàIÒ ’ èCñ `˜ Ü&•&–'oö ´UÊHï’Lö€µÒ’Mö€´“´Òg÷?"‘ðgÒ "’ ö`µ’tš€"ô’ ” oš¡’ØL*ì’L“êjaè’M“êjaä’ ’ÜšÒ ”gõ`°’ ØWöÿ"˜Yo"ïëïLjÒ• j ïMn“0löÿ"“蘗jØWhè ö±À“¬eš`’ l ñà¢PêŒ*s`èkdõൠ™‘Ù¶“PgÐRÙSöß`™¶ñàn f™™‘™¶™‘“PgÐRÙSöß` ™@šfjêl*Îô jêKÙS¿•(õ€·ôÀ´@Å–)–Lg¢.šdlð £@êð Ã@Ëô ´@¬—MÅ“ j@êl*q’ L*e™‘õ`µ<1eg*a•L–M4a’oÒ(’õ@¶ô`µ(PíÒ)”M“èg“ jêl*!õµŒ” — nîËô@´Fg¢(Bb#gõµ Œ” õ¶ô ´Gg¢(Bb#g“ j ëL+ôൠŒ” g‚J""³ÿmð€£Aê­ð€ÃAð€™è¶úôÀµ n^e(Bb#g“„” ™” ô µš’ *²hè ¯h­ô µŒ” g‚onKmg‚ØjêKÙ^˜’ J|šABš@H2HàIÒ ’ èC`˜ Ü(•$–%ô ´UÊojô· n$(ÒLfÚ×M*îHä’ šFgbjÿJêl*’ š(™±ô ·´ÌInô²Òô²ÐÒ·ë¶ÆôµE ™‘ô² Ò jÒ  mdgðn´¿Ií«ò˜@– ÒmJ$ltúÒ’Óšdj@êlð€"jÒ’ ” 2Pâ‰2LàIl@ò¢RìLð $ òlëŒ+vk êl"• o´©KœnÒ ôJ"’ *ôâ˜\JôâØ\’ “ 2Pâi2L³ŸãIl!ò¢rì‹ëŒòÂrjÒ ²™šPð€a ” nÿ7²Lgg²ÔÒPa\p"Lg“ jÒ4ðX²Ò(Ó3`Oš n m’ˆ+²Êg°)Ñ)K3Ò*g*@’ *>“ ” 3pã²€3lâmmò£’ì­òÃ’š›“mëÚ{“ ð@«p#pgƒì¬$òš€–ìÍòÂÚ€3fJó’y’ ”µ²šþRªšÝ²±Ò’ ·°nÿš\LÒ’ (š[æÒ’)*#h„Ò è ’ ” 2P≳a2LãIl@ò¢RêŒ" õ›@JõÛ@’ "ð€ ²žÒ˜Z“êmØZÓ²›Îldj(ì‹Ò |²‘Ò×ôâ›XJôâÛXãÐ ’šIRa’ ” š]Ò’ R™š>Ò’—”Ѷ‹µkRÌÒ÷ ’ JÒ ’ JJ Ò °<“ ˜TëCöÿa”Rªm’ šFgbjÿJêl*ôâ˜\"D%g¶0µy´y7øe´-6e" ’ šFgbójêl*µr´'h9eð€ @kêmð€À@ð€ A3^# “ ›iSa k@êl""·h¶iµDRÌ”ð€ Ak ëL# “ ›iSa k@êl"·_¶aµ;RÌ”’ ñÀÚhgPð@dxè ²[g·[Ý·Zíhè ±Ye"²êgAeAÈ‹±Ve"²êgAeAÈ‹D`DÄDÀDD˜”Aö AìØB ÄDø€B ÐB € @AöL@Ñ­ÿ¿ÿB èB B ¬AëXAäHB ÜÿþÿB Að(@±Q€@¹ B 0B 8B D@ºmA&B P B „AæüBÈD€Aæ<B °DôB PB lB |B xB @Aö„DäAö\@àõAöh@áYAöŒAötB ÀB ØB ðA&=D B ìBFB$B ØBB B äB@·UDh@±UB $BB@B B 8B TB ”<B'9Ó À€%$ f#`Å(Ä( %€%à %bÄ ÿú¢(%<B'9ÓðÀ€%$ f#`Å Å %€(%à %Âe(ÿúE%<B'9Ô@€€%#d$pc $ C#à<B'9Ô€À% @%À¶€%‡0+À<pä €4(#¨(ƒ‡8£%ˆ@4fÀô0åÿÿ$Hp©Pd%j +€"g!gX+`%$ÿÿjX+`%$ÿþg!j#fÀô1ÿÿ0p¦(h%e@+ã!g8+à$Èÿÿe(+ $Èÿþh%àÿç %ÿùÀ@%à=pâ $Gàô8pâ $ b#G8D@Ld ‰ ôe0È0%E@0åÿÿ p¤Pb%j+@Tg!gX+`$‚ÿÿjX+`$‚ÿþg!j#i ô0ÆÿÿHp© f%d(+ Ag!g0+À%%ÿÿd0+À%%ÿþg!d#E%@ÿÉ$ ‡#$Li ô0æÿÿPpÊX$ƒ %‹+`%‡ !‡+`%Eÿÿ‹+`%Eÿþ‡ !‹ #‰ ô1ÿÿHpÉ h%d0+Àã!g8+à%&ÿÿd +€%&ÿþÿŒf%ÿµ€%ÿÈ (%ÿä@(%ÿö 0%†+`Q%pÈ@ $ Ä +€M§+8cÿw%H#G0f0%\D ‹`ô0ÉÿÿEPCP% ` q,hC%M+`.8F!F +€%ƒÿÿM +€%ƒÿþF!M#K`ô1JÿÿXq+ J%DH+ F!FP+@%iÿÿDP+@%iÿþF!i%g0D#FH+ 8FÿÂ(§(+ ÿ¿ÿ½$cÿÿÿÛ€%ÿî`H%ÿ/%%ÿ,$<B'9ØàÀ@% %À €%‡0+À7pè@  #… 8‚%,E ô0æÿÿL p† I%DH+ G!GH+ DH+ G!D#E ô0cÿÿ p† C%d+@ g!g+@d+@g!d#%àà7pâ $Gàô8pè@ $ H#E08D Ã0%,… ô0éÿÿT pI$Š %‚P+@‡ !‡P+@‚P+@‡ !‚ #… ô0Æÿÿ pI$† %‚(+ ‡ !‡(+ ‚(+ ‡ !‚ #@+‡ #,… ô0æÿÿL pF$‰ %‚H+ ‡ !‡H+ ‚H+ ‡ !‚ #… ô0cÿÿ pF$ƒ%b +€g!g +€b +€g!ÿ™b#ÿ¢@@%†@+ÿ–pÉH  $ Ä@+§@+ÿ§8#†0#§+Â#ÿ‰à% @#&0F%$\ ‹`ô0Fÿÿ'P8ã8%` pÌh$ƒ%m +€:%(b!bp+À%„ÿÿmp+À%„ÿþb!m#k`ô0çÿÿXpË0g%f8+à'b!b`+€%gÿÿf`+€%gÿþb!$‡ %Šf#08f`+ÀX%€à %f§`+€¤ #ê #Â#äX+KX#¤ #k#¤(+E#$ "ÿ:d%ÿÏ€ %ÿâ`8%<B'9Ý|†=À$ÿ|ƒ°|§°|¢=À'ÂÈ/Â`HàÀ#@`!à $àÂ0*Àÿúã+@g+`ÿôà%à$ÿþ`ÿî¤ F *€ÿí  à$ÿÿ@ÿöàÿô€ÿùà$<B'9Þ|‡=À|‚°à#'Â$ÿã'<ÀC%$çÿ@%|¦=À|£°À(/Â$ ÿÉ-< Ài%$ÆÿH%æ8!0€É0%(Ê @8$ë(Ê@)… &$Æÿÿ,ÆÀAC`%3 @%@ pC $fÿû$ÿŠÂÿÞã8#@$ÿÿÛ$8%ÿØ$ÿÖ$` piH %&ÿûÃ$ÿŠÿØÉ0#`$ÿÿÕ$ 0%ÿÒ$ ÿÐ$ $ Ê00Ê0@ 0È@g0ƈÀCÿÑ  %$Ç5$ Çÿú$Y$2$%"%H@ ‚)€¢(% €+¢%|¥À 'B0Bb%%c`$0E |EÀ0E$¦|EÀ$B|EÀ (eÿ|ÞÄ%c€(eÿ 1Â'ÀÀd%|B°àb%C%<@e$`!|B¨@$ÿñ$ÿÿÛàX%`$£(#(£`ÿÅ%cž¢(b+¢%0C`|C€0C$e|C€$B|C€`ÿØ%ÿÖ$$¢ÿÿ$ÿÿÒ %ÿÞ%<?ÿù4Bÿÿ<B'9á<'œ¤™à!'½ÿÐ…%¯¼¯¿,¯´(¯³$¯² ¯±¯°@G€˜%€% €%p’ $¾2ˆ#™€&F` %ü¥(%¼$%C%™€(%Ò0#` %üˆ +ƒ(% %0£`-|Ö„0¥$£)$B|D€€%Â<$¿4Bÿÿ2ˆ# b$p£ $r $¾2ˆ#*$—€ %$(D$cÿøe¿,À|B°´(³$² °Q%±à'½0*"š@ÿÈ™€$%BÿÓ$cÿûÿÑe(ÿìÂ%ÿéˆ%ÿç$–<B'9â€|†=À$Â0Bþ|…°@ 'ÂÂ$Æ€/@'À5Ä0%|c˜Ã %€%à %À ÿõ%p¢ (C ` $ b#$FeÅ($‰ÿéÂ0#$Cÿõeÿú(% %Â|c/@£%@ÿÛ$ÿÿý%< %4cÿÿÿø$ÿÿ'½ÿ௼¯¿¼¿à'½ installed: packages: %d dirs: %d files: %d bytes: %llu triggers: %d available: names: %d packages: %d atoms: num: %d %.*s [%.*s]nonedeflateFailed to load signing key: %s: %sERROR: no-yesnoautoAPK_PREUPGRADE_TOKENAPK_SELFUPGRADE_TOKENlaiNgeiThu6ip1Te1.3.1Help decompression failedAPKGLOBALGENERATIONCOMMITQUERYHelp not foundYou tried to add a non-repository package to system, but it would be lost on next reboot. Enable package caching (apk cache --help) or use --force-non-repository if you know what you are doing.Package '%s' not found%s-%.*s%s%s-%.*s - mode=%o uid=%d gid=%d%s + mode=%o uid=%d gid=%d%s %c %.*s installeddeleting %s%s-%.*s is required by: No such package: %s-%.*s - %.*sFailed to fix directory permissions<%*s %sAvailable:Installed:failed to preserve %s: %sWARNING: Error opening destination '%s': %sExtracting %s...*%.*s: unable to select package (or its dependencies)fixing directory %s%s-%.*s%*s %s %.*s %.*s../src/adb.cdb->num_bucketsptrschema->kind == ADB_KIND_ARRAYlib/apk/commit_hooks.detc/apk/commit_hooks.dDownloading %d packages...download(%*i/%i) Downloading %s-%.*s%s-%.*s: %squery failed: %s%s policy: %.*s: %s/installed %.*s%s%.*scoffeeGo and fetch your own coffee.fetch, hold<%s> Package: %s Version: %.*s Depends: Provides: Status: install ok %s Description: %.*s License: %.*s Installed-Size: %llu Size: %llu %s %.*s %s-%.*s %.*s {%.*s}{%s} [installed] [upgradable from: %s-%.*s] %.*s <%.*s> %s%.*s (%.*s -> %.*s) %s%.*s (%.*s)%Y-%m-%d %H:%M:%SPurging %sWorld updated, but the following packages are not removed due to: %s:audit does not support usermode!%s: relative path skipped.OK+etc @etc/init.d -dev -home -lib/apk -lib/rc/cache -proc -root -run -sys -tmp -var unable to read protected path file: %s: %ssynccleanpurgebad dependency: %sUnable to select packages. Run apk fix./bin/busybox/bin/bbsuid/bin/busybox-extraso->schema->kind == ADB_KIND_ARRAY(schema->kind == ADB_KIND_OBJECT || schema->kind == ADB_KIND_ARRAY)schema->kind == ADB_KIND_OBJECT || schema->kind == ADB_KIND_ARRAYschema == tmpl->schema!"invalid object field kind"o->db == no->dbmipsapk-tools 3.0.5, compiled for mips./etc/apk/config.apk-new${arch}/${name}-${version}.apk${name}-${version}.${hash:8}.apk/etc/apk/interactiveapk_#APK_CONFIG/lib/apk/configconfigcommand line'%s' is not an apk command. See 'apk --help'.noarchTERMdumbAPK_PROGRESS_CHARLANGUTF-8â–ˆetc/apk/cache/usr/sbin/uvolUnable to open root: %s--usermode not allowed as rootUse --usermode to allow creating database as non-rootvar/log/apk.logvar/logUnable to open log: %saAPK_PATH=/usr/sbin:/usr/bin:/sbin:/bin Running `` at %s Failed to open apk database: %s%s%s%sOK:ERRORS;%d unavailable, %d stale;%s %d distinct packages available%llo!!%.*s%s%.*s%s%.*s%s/%sSkipping: %s %sExecuting /%s %sexecuting %s %sExecuting %s %s * %s-%.*s %s: %s: descriptionwebpage%s: %.*s %s-%.*s installed size: %.*s depends onprovides%s-%.*s contains: %s%s%s %s-%.*s triggers: %s: trigger has auto-install rule%s-%.*s affects auto-installation of: replaceslicenseADB block, size: %llu, compat: %d, ver: %dsig v%02x h%02x %02xdata block, size: %lluunknown block %d, size: %llu00123456789abcdefghijklmnopqrstuvwxyzQ1packagename([<>~=]version)%Y%m%d.%H%M%S%s: bad package specifiervirtual meta packagecreating empty virtual package'%s' is not a valid %s dependency, format is %sunknown%s%s%s:%.*s %s%s%s%s:%s %s%s%s%s:%.*s %s%s%s=%.*s=(%d bytes)(%ld bytes)disk space will be freedadditional disk space will be used(?)InstallingPurgingReinstallingUpdating pinning[APK unavailable, skipped] ReinstallingReplacingUpgradingDowngrading../src/commit.cNot committing changes due to missing repository tags.NOTE: Consider running apk upgrade with --prune and/or --available. The following packages are no longer available from a repositoryThe following packages will be REMOVEDThe following packages will be DOWNGRADEDThe following NEW packages will be installedThe following packages will be upgradedThe following packages will be reinstalledNeed to download %.*s of packages.After this operation, %.*s of %s.Do you want to continue [Y/n]? Proceeding with upgrade...(%*i/%i)%s %s %s%.*s (%.*s)%s %s %s%.*s (%.*s -> %.*s)lib/apk/dbetc/apkRefusing to write db without write lock!etc/apk/archtriggersscripts.tarscripts.tar.gzetc/apk/worldSystem state may be inconsistent: failed to write database: %ssyncing disks.../proc/2/stat%d error%s;%s %d packages, %d dirs, %d files, %.*s%s %.*s in %d packages/proc/self/exeIgnored invalid preupgrade dependencies from: %sFailed to perform initial preupgrade, continuing with a full upgrade.This simulation might not reliable as a preupgrade is available.Preupgrading:Continuing with the main upgrade transaction:APK_PREUPGRADE_TOKEN=laiNgeiThu6ip1TeAPK_SELFUPGRADE_TOKEN=laiNgeiThu6ip1Te--no-self-upgradePANIC! Failed to re-execute new apk-tools!Not continuing with upgrade due to missing repository tags.../src/apk_defines.hnum <= hdr->numnameaclsizemtimetargetmodeuserxattrsversionmatchfilestriggerpre-installpost-installpre-deinstallpost-deinstallpre-upgradepost-upgradehashesoriginmaintainerurlrepo-commitbuild-timeinstalled-sizefile-sizeprovider-prioritydependsinstall-ifrecommendslayertagsinfopathsscriptsreplaces-prioritypackagespkgname-specpre-commitpost-commit${}BKiBMiBGiBTiBsha1sha256sha512sha256-160 %s: %sworld[%s%s%s%.*s%.*s]%s-%.*s[%s%s%s%.*s]../src/crypto_mbedtls.c!"valid alg"%s%s%s%.*s.listuvol = .SIGN..PKGINFO.INSTALLDESCRIPTIONAPKINDEXuvol(%s)uvol(%s): %s: uvol run exec error: %screaterowriteremoveupdown%s (virtual)note:please select one of the 'provided by' packages explicitlyprovided by:%s (no such package)required by:alg != APK_DIGEST_NONEdctx->alg != APK_DIGEST_NONE/.apk..apk.replaces_priorityfailed to update directory %s: %s%.*s/tmp/run/uvol/.meta/apk../src/database.c!"invalid layer"The repository tag for world dependency '%s%.*s' does not existNot continuing due to stale/unavailable repositories. Use --force-missing-repositories to continue. (not removing)%s%s%s%sAPKINDEX.${hash:8}.tar.gz${name}://Repository %.*s has %d packages without hash%s: %s /proc/self/fd/%d%s: process init: %sAPK_SCRIPT%s=%sAPK_PACKAGE%s: fork: %sfchdir0 %d 1/proc/self/uid_mapdeny/proc/self/setgroups/proc/self/gid_mapproc/procdev/devunsharechrootexecvefile:test:%.*s/%.*s/%s%.*s*%.*setc/passwdrootetc/groupsatisfies:breaks:unable to select packages:error:uninstallablearch:depends:provides:install_if:masked in:--no-networkconflicts:Huh? Error reporter did not find the broken constraints. %s-%.*s: ignoring malicious file %s%s-%.*s: %.*s: no dirent in archive%s-%.*s: %.*s: no hard link target (%s) in archive%s-%.*s: overwriting %s owned by %s-%.*s.%s-%.*s: trying to overwrite %s owned by %s-%.*s.%s-%.*s: failed to preserve %s: %s%s-%.*s: failed to extract %s: %s%s (dir)etc Installing file to %s%s%s%s%s-%.*s: failed to commit %s%s%s: %s../src/io.cctx.index < ARRAY_SIZE(source)lib/apk/keysetc/apk/keysThis apk-tools is too old to handle installed packagesFDB format error (line %d, entry '%c')user.failed to read repositories: %s: %sADBfetch %.*s%s-%.*s: unable to cache package7%3i%% 8,../src/serialize_yaml.cdt->nest < ARRAY_SIZE(dt->flags)@...7[%s] * failed to prepare dirs for hook scripts: failed to execute: %s/%s-%.*s.%sdev/nulldev/zerodev/randomdev/urandomdev/console%s-%.*s: failed to create initial device nodes: %s%sExecuting %s-%.*s.%s%s-%.*s.%s: %s%s%s:%d: undefined variable: %.*s%llu/%llu %s %*s%.*s %*s%.*s %.*sexited with error %dkilled by signal %dstopped by signal %dcontinuedstatus unknown %xAPKINDEX.tar.gzPackages.adbset-default%s:%d: invalid option: %.*s%s:%d: invalid variable definition: %.*sndxv2v3%s:%d: unrecogized keyword: %.*s%s:%d: invalid url: %.*sjsonyamldefault../src/serialize_query.c systembroken-filesbroken-scriptbroken-xattr'%s' is not a valid world dependency, format is name(@tag)([<>~=]version)*%s*?*C: P: V: A: S: I: T: U: L: o: m: t: c: k:D:p:i:../src/serialize_json.csizeof pad >= 2*dt->nest"":dt->nest < ARRAY_SIZE(dt->end)sizeof pad >= 2*dt->indent- #%%SCHEMA: %08X# %d items# empty object# -?:,[]{}#&*!|>'"%@`'|pkgnamepkgverpkgdescdependinstall_ifbuilddateprovider_priority!"adb error"ustar -r-----BEGIN <=<~~>=>~>><? hash=../src/hash.ch->ops->compare_item != NULL%llu %s%.1f %s%#llo owner permission mtime xattrs%s.tmp.%d%s.tmp/proc/self/fd%s: unrecognized option '%.*s'%s: ambiguous option '%.*s'%s: option '%.*s' does not expect argument (got '%s')%s: option '%.*s' expects an argument%s: invalid argument for option '%.*s': '%s'%s: setting option '%.*s' faileddatahashvar/cache/apko->schema->kind == ADB_KIND_OBJECTi > 0 && i < o->schema->num_fields%s-%.*s %s: %.*s (unknown)././@LongLink-X1 g:q:f:R:Z:F:symlink target owner not found%s: Could not find owner package%s %sis owned by %s-%.*s ustar%.*s/%.*slinkpathSCHILY.xattr.APK-TOOLS.checksum.SHA1wget-q-T--no-check-certificate-ODownloading %s-%.*sfetchingopeningopening from cacheupdating and openingupdatingare not installablemight not function properlyInvalid open flags (internal error)Unable to setup the cacheUnable to read databaseUnable to lock databaseAPK_ARCHproc/self/proc/self/proc/sys/vm/memfd_noexeclib/apk/db/lockWaiting for repository lock+etc@etc/init.d!etc/apketc/apk/protected_paths.d/proc/mountsrootfsUnable to find cache directory mount pointetc/apk/repositorieslib/apk/repositories.detc/apk/repositories.d%s %.*s: %sThis apk-tools is OLD! Some packages %s.The indexes contain broken packages which %s.verifystatssearchupdatequerypolicymanifestlistfixextractdelauditaddadbdump@”=@—ñ@{mAùHD€AùPBÌAùTDpAù\D0Aþ°D@AùdD@BäBô@GB,B4AùlDAùtD€AÿìD€Aù|BLAùHD€Aù„DPAùŒDp€@GBdBlAùHD€AùPBÌAù”B´D€BTBä @eQB @r±@G¹B gkcpBhD€AùœDAù¤DAù°DAùÀDAùÐDAùàDAùìDBAùHD`Aù„DPAùüD@Að4D€AöTD€AñD€AúD€Aú D€AúD€AúD@Aú(D0Aú4D AúDD AúPDpAúdBDAð€BDAñ BDAúlBDAúxBDAú„DpAúŒB,B\BÀ BhBp€@GB°B¸€@GBh€@GBpAú”BÀAúœB¨Aú¤BAö\BxAú¬DpAúÀBØAð4D€AúÀBðAúÌD€BB8BH2 (kthreadd) apk_solver_commit_changesetAúÜAúèÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ>ÿÿÿ?456789:;<=ÿÿÿÿÿÿ ÿÿÿÿÿÿ !"#$%&'()*+,-./0123ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ>ÿÿÿÿ ÿÿÿÿÿÿÿ ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/AúôAÿ¬Aúøadb_wa_append_obj@¹@zµB”AúüAûAûAûAû adb_wa_append_fromstringxdniB˜bdiB€gkcpBhadb_wa_sortadb_ro_cmpadb_ro_cmpobjadb_ro_objadb_w_raw@±á@±ñA"ù_apk_array_truncate@¼@‘ @uAäAûAûAû Aû(@¼@/@@u@±Å@±Ñ@±ÕAséAr9<AŽ½AŽñA%AaA•AAÙ‹lºiÍ\moÛH’ögÿ "_ÆÞ›,°fÐزcĉ¼²“ì d)±%õš"9lÒ¶ûã¯ÞºÙM‘’s·w83‘É~©®®—§ªº5¾}wôÑ$+õ&JʇèËOW7Ó_Æ7Ñôöþzúáîç³³³ß¢óéû÷ãð6xüå§ñìêãûɇ{~p||›,`¬Hç¦N²,©u‘GIžF•ÚIöæ8Š’4ä3†¯EmŠT/·Ñ¢€^U¢óÚÀÑçéìæ‚:/ŠÍF×Ñbä+e`ˆTevˆ¬‚¾ËªØ ÷>¾ÛšZm¢ 6Vy’/RµÔÏvÈKý<‚e H`S®ª$UQÉË3Ñ“®×ES å:_ñ|0NS¦I­hœüµReat]T[XUªživDø\Ë<òÈDÉc¢³dž)^‰ë¯©ç"Y¬yüè}’#³kø;+Iféã6ÇÇkTEÄ•n[–Eµ¡]Á5ÿŽïy(jê¿’9.Эx¾“J‰•®U¥!Ó¦®ÝàW×Y¬qêžÕÐ@jå÷/‹L/˜„»uñäóJ^AnTè`TR-ÖÜ¿ú Ê<Ù(œ 8 •¸è‡+B¯4ÈKªj`²J÷- xçŦL*§„öíS©*ÜƨŽÁƒÜõ£RhÈìÌÓfSÒ¶à¿?cÈÔÔÀ½6È©”6ÑüÇÇ÷kmÈ,®ûb¹T¸Û$×séÈ>;¾$V…ê…ý;ÉÔ¾µÔt,êåõÍä¾_´âKüöúV â9XÙ‘Y>«4Ÿ¢j`[?Îþ4¤=Ýñçðõ~6¾Wð¯¯Èׯ¿ /#Åÿ V4‘Fö8ÐÄ&üÄÓ¡_üTTYzòçÓS4„]Ç©6gmZc`%Z´Ç"{¤]¦ãÖåêÉ)ä(š75©È|f 0QÖPµC#§Ï\oä JÀR‡.®g“óûéìzÏîR?ú¿¡éD£€K¦T ½Ô0±µ¨.žª!/P7-B¬ÕybJ^Á'•]I‡ÔE¦´˜0ñžV©µl_.&·““ç¿8Ô±lª•:ØÊlóÅÎÐ]®‰ûëq}èqàvsSdªVÞž£{@ Ü~m µ­P:TÕ1ØÈPßT3‚ø¬DDÒYƒ§C{Ž½ˆNÚÂ^Ó/þ"ü„^&ÿŽMž+•zBL*€ €DýwT@\Ïë¾Å¼Ù>dÞTLJY÷…Ö­U‡ÀÃ1‰È‘¦ª -n&:×+Kèø±«JÛ³h2Óú@c''u²Hü/ò/U¥+š/4C擵ÂÀòÿ>3tXq;>7¾æw²RjD±QH{Ä´Ô+pÖî% ¸W'IþS¨>‚r¤,+‘EÅË· "’2˜.aâoÕ:g Õ6jrp±&ŠÁà °ìG>éç€KÀ»^ÅcÒoý\‚NI »K^&ºB.e%ÐjQTHJ¤ªª¨Øׯ;áI±D«‰·+Wl)›ïÊ}¤—Q^äÀÑJËBோçžÍ÷L!5?“šô.—”•DH-p}ÈANRQ4 )9‹~ÙÂþ,“&«ÁõãvÊ ²qvžQô¤æ%tù`L!üC¡êyž9yÔÕ¡²¡ ¹%¤OæXñ ¶æhg!(W¯Aº_Cû×ØÄÿWLVÙÌAi#jð´Ö  Èéºjhi`àZ‘»<»¨¶e]@ UB뼚 Bª9þQ ³³A÷÷“Ù‡!å¤.ŠÀø-zNõBw&l#!\㉈•bÁ{‘äÛ¶±G¯|š]tðVÅõóö?ˆ,ZHÜ'FÓœm-"IÃcà{°¬@hüá ae@Ü–E–O²e )ÉB¤ çb±!këbp|XµLÚ/>¸}Yü‹.ܧ àÉ£kbš9˜‡fAA 3ßµ¡*T–"÷9 õy/é7r^zƒ(¤øÎ »ý–è,ºöÔvGL,CÁþ¹°¨“FhÄ‹Ã(2SÈÖA˜#Z² oª¢Vè'¿âö¨ú¥•¦×“ûó×ãÛw¯ogÓ{@“‹¯ boïÎ.^ÿéìæúî>Ry³Qh¹E)Ò³ãË^á³¼Ç${$çóm&Z:¹u¢¤¾ßHƒX@ühbÄ–´½½Kei‰XÑ™’•äñ[lw0Ù‹Uî,»Yˆ(F0 f"(ýgT VNåÐ$Žl/¦Dòs0;ñA?Ï(]#6f'W³‹Fn.#ÑV¶¨Lb8Þ÷©á'½äH*úƒðñ_Þ2%•Á…Ü?ˆ€%4ÂЉÐ!c"ÑlYŽ„fQQ*± o+LE±pM¼¶³S°’4uK\PÈU©% Ž5 „-kŒ¢z£(WWâ1ÄÊù† áÌðN®Ýz˜ŸÑ°íê2É=°U¼l†i—ڥɜ¯Àüeè-z÷xŸF¿ž¤=Ö;ùyê ¾‚SuÎh „tŽ€ôV·PB!”Mq¤"ÏÐPF ˜dðƒ8Ùhª´ìÁã»–l=þq„!ÉS‚!`37ÛwÆE¦è,7-I–Š¶`”êž‘ëu¥èÏE‚¹d4»«?t‰áŒJ6¤TŒ‚â*Ò,Jx:‚ê"0u`xïAgJ£/È¿a/çÈY»UWEf[9¸1ˆâ§`v§Ì}½šÝ_E'ðØ EÿݽÚŽ0fŠ¯%ª„Î@£‡œ7:KO¾G÷øøcï~üø» ºpŠyŠù?aÅfÔæEÙ\5†h´eoEðmƒ¸‚ò3d÷È^=*á(FˆÉ¢[E†$l•¨•);„Fÿ¹„ •‘ òNþõϧh–^%éüÕ&¨•Md{]1u‹\IYðÏ#½ ô[0ä#äÙB¡OAf M2Ç‚ÁŽ ®RFz ƒ¶òý³†À -ǘ|ª8I9¯”Ê+Xb³Xã–R„æ[9‰Ù¾%?$]è-Ab[°è8?‘­ÍÁRB’iq!aØCûÕ<2íh";Ä“ÕÜ›®ð`›m/¢O“Ùöè;×¢¶-¾·_~èmw=Ä"z-é`æQ['Yö9„d…ò^{>s(‚x©¸®Ááå„‹a4@Õ”&Â@w@Ù &•s:•à8e:{l@ݦ ¨ÉHBZíÅ}”41¾× ³‰u!~~Uò=VVç" è"ÈE.› $(b¸~t•sÂl6a„8N0°›Üæ$übnP)ŽÚ6­9ÄT3ò§ÿÓÖÞh&„²ãÙù[¯Å½Ú”EÑ+(-š˜Š,|Œ™Ð¶QWʇùë/ÓéÍo¶+yèTÜZà"ؤGÊ­6FTZ’œK§Ø®+SÏßN.®gd~Qg¿¤iØ$Ï1òT…ŠØÏzÓlè¯0«`3°@§Ð f¡±•´¾‚‡jiº¦¨šàyz;£Ý áÃàw˜~Š0•Pn½:«Á° È¢Ñ9ˆ ð`È%•{ˆW3î¤é)›éqzÅÖl\#Cg– ý )‡]hþâ…‚!–1Ç!º:BSllÊÚU.=â“·÷÷·wâ­ªGÄÄíÔDÁüQ/½¦“œ¬ D¥Uü'«ˆÑIŠNIOÛabvȱ©Ó‚Ê{ýŸspö m*BùGì)~œ`!û¹rY.W^èÿÌÉM2ŸˆªxP9n`_Ç®&³éÇ»7Ñ…¢z¿ðë>`'t† ¦ÈÙ©þ«JÌÈ49jŒh›<õæ—¢VÜ9@òB^P’ Ý=‚({p, «üˆÂ” vUQðÁ –¥H¡º³½7A—¼¥ûrê½È~‹»˜ÓÃJæ0™7A‘¥1º‘Cã`I¬ÉMS–œ[ª¤5²2”¤¥øtÎÔýårª{§YlO2Z @ÄIá%7°U>‘;†(èyËB¿VY ª³öYr‹rëÒ¸¸“$Sð+~ÉKý39(êXú‚ áË_Çï§à3.˶B~PŠ4]<061˜.Ûo˜åx+Tûya£lžÓüäYÞM~½#ÇÂtîDÊ6#gýiP?ÐÂÔL­’Å6ÆÔƒó|ÌЙÔ†ø÷ ß¿’è·‡»Y]TÃò­ž¢W”G{%­yÚb…8[ˆaALíËåÈÚO6œ(^BºÛäzçªÆŠÛÞ± eœ àÒ‡úS¤v6Vùã!Ë>FbÉ%p F¬ ŠxÔU‘SZÀVAû?'êÙF˜Xçµ:G5¾}÷µ­å "¤‹A‡•Ôõ6&3,29ì;}Q•½6`(3”P c›é?\®wÝl’|6Zó4HF!æä‰.&{\\x®±í¤ddXVìδyškžÞ!`VϺ–>¨(cœ†¶ž6ˆYµ­¢yRÝâe]^ˆS'åšJ¬×–(°´V¢qðGQÞâ³6{&Ý í³! lßïVÆ¿ïX-ª{™Cjî»±˜›Mn§T+ÚgAÄjiJ€Ã2ØÙ„Dlð¿Ãh’ظÅÃN”üöN©.Í5fÖÑÀçÓ—×Wÿ³áíàÉÀñe4›Nï£à$)qÕÖCS!>G|tý~â&y&f9“KŒ‹ù­hÄ éž@#ç‘‚AR–fÎV3Þö~d˪®4|× ~þó;îõXdð ¹_E?Mo<Î"[§`/>Ïîù´m0¥%͇-šZŒTÿƒÛxP†ya¸ÇŽ¾uO/F'âÝ[KP?é…:µãJÅŸ:ã“M›VöÍÖS¢Ã AûƒÏ?>;q'Wªæ“;àN¨²õ‹}°ÁÑÐ'í:£ë×÷Gçñ;t‹]‘ñ›÷Û3/°Ð'±¦cñí‰Ë|ÙÅ/,ëñº(Ì7Qet)õïJ½.óâ ÖmG'ó=ÑUV ¡JóS„“Íá™y@Ë „îÿ|4\>uýÀã#–æØœÙX€0?™š±s–lcDf¶†E3pÁ¼Ja-×'±[&¸‹–z¶‹uFö ±r½i²6F:wÒ¶s0«-¹+r^8\{`úèjòa2cJñˆ‹ÙLi ´Å±(ày4¾¹šÎ®ïß¾ÿòæfòi²GRÎ¥§;eÁ1IqÃÎÒHÂ’UŽàq9ºZ^ú*ï ‚‰mýˆìÀ¶RþtÆc$ôøˆŠÝG| ¡›c‹mÔ±žÒ´{üªƒ+Ú´eû¹ÔâÚTfã]»0$££Ñåõäæâî˛ٱ“¯ô÷Í¡ÌP&•o¬äÊx”ÆGp¬„?ƒC1pµá!Æ"—ÓÙûñýÝíäÜs6–á&¤îŒ×6ÙP øO#¶Ÿ^_ΦïeïEPôcÝÿ )—úÿéhZöSÃø§Eí)äSïäù¡ BÙ‚¬?ø)çM/œH(‹'^F ­M³„í—Ýt9u'©ù–ýç~¨<ƒONÉ 4´g;ÚϬÉ1E„Y´$[ÁâêõÆWfïȾä /5\ši`žö£å½Xüo«"m˜;å\AÆ%€®\?8’h»`* ›BUîÛ'¯]°I½…S”Ð?SêÕy§Xî©*ÁFòÒKˆkçÈp—?Ær{#0o~wp=r/ÔñÛ—ôšµüôøÐý“X(à{šú$ ŸNç]AD‘`° ê]—pzÌù:C^(ós OÉPÀÉJÈI;Â|kÑ!ç90%ˆÉ… Š'Ê9]‹ A „ Eª<Ñ@0Û´ÐC¢l[‡óNÅíÞv°ÀC"8áì½²«eݲ¬b ¬+¼+3Š݇1cZé.¯ÜŠéµ§)/ؼÔ^2á‹VÁæÍaŽ¦ìx"jÖsîOKœˆ“8õÊ%Æ`†‹~°|ÆÎÝQuá«s&˜SÒhn+›ÓâvˆùŠJb¤e“e;@ ïëÁc|ˆÞ†¯#`}]âZUÎâ¤éÏá_Á½·Gô`ëVàLT3N•F{d®Uw É09»m—6ŒKK:E#>À‹£¸¦§ {zªJøµgkðèŸ"a“Óí1a{ãȯÿ¿ˆ(*ªé6Û…êœo¨$×íÙ ˆÉÅ€dx¬—ʘ|¶©Œ3X4÷¸½Ã|ô¥hD>å 0O{ÉÌ^n(õïá¹rÿ4»>PG|1Œ9¸æfË&ìý ªÓ'¤Ù›_—ts+tÓ `Řςb¦ ƒ°á¤5z ¾þÕZ<ϲNÑéè,¥ãDž;χ“1$âÞŒ ´àÎB•uÀeTµ »óÎa²SzXáqâÑ|tûî 1Í×½«üE`ý“Éâÿ^4–Ä^*“qñï•I±ÐÖ2¨VèY]ØÇCWÜ aŸNþ¯éÍEPí=Q³7·Ý©C!ÐV³Xe=!–-èŒú8»!¿Ëߨ=‰_Á»ÔÏ]e²ZŸzfÝtÙ.¼ýØs“×íŽýøÐrc3P:FíM°°"1®ž5š¹ßèpŠ¢Û}AýN„D (ïÀ[¥SÏ|¤ðY÷fLç ;»¾ñ9©ë æ}Æçúã"5~É®ég¹_xךº‰2x?ÉÁׇï ú° =;߃؄6…ΩMðù][©™…ósñ>”šÝÎÞD»VÜ]ðü¢Gó6ü|ü1ìz8®)ߨÁ3yuR7ÆO Åzí®¢=c,;B³ª ˜IåF ¨¬õîöâï‘m ¸#Ç3PÊhñX;®è6˜ü ­¿?Šm9覩›¸â}Üç4eý‡1TˆÀx49k½/UæÓ(NäšõžÝþÎt®Ðrm²Ò«l å‚®D¶»èOì.èÆO=[§Ñ”|‹ÀÞîåÖE –Éø<,¯¼EØ®çdÀa‹…åÆ-oG`²z©sã/dèû :]¸èÄMu×µõ(ò[ZΟøÔ?ã™F%{Ô®%àÌ!ðr£Y覷“þ#Zt<ÓR¨BŠFÎ2r‚Xº1a®»Çè6žŠ_O;¸QV¶Žþ }{ÿaPR@A]-A]=AåA2©A]aA^A^©@ó¥@µ‘@µ­@µÅ@°•@{9@6Ù@°‰@Â@6Ù@ÆE@{9@6Ù@úᯠccompression¯sign-keyall-matchesavailable¯ Ffields¯format¯frominstalled¯match Rrecursivesearch¯summarizeupgradableworldorphaned«clean-protected«commit-hooksinitramfs-diskless-bootoverlay-from-stdin«scripts« ssimulateallow-untrusted¯arch«cache¯cache-dir¯cache-max-age«cache-packages«cache-predownload«check-certificate fforceforce-binary-stdoutforce-broken-worldforce-missing-repositoriesforce-no-chrootforce-non-repositoryforce-old-apkforce-overwriteforce-refresh hhelpª iinteractive¯keys-dir«legacy-info«logfile«network«preserve-envªpretty-print¯preupgrade-dependsprint-archªprogress¯progress-fd«purge qquiet¯repositories-file¯ Xrepository¯repository-config¯ prootªroot-tmpfsªsync¯timeout Uupdate-cache¯uvol-manager vverbose Vversion¯waitAäAä @H@Gõ_apk_array_truncate@Ò @Ò½@ëA%=A,%@Â@ðM@ïQ@Áµ@²A@ÁÕ@ÁÅ@Áý@»apk_dir_foreach_config_file@ë1@ÒyA+@¾Á@»‘@»½@¿A©@ÊMA)­@±¡@±¥@±©@±­@À5@Àù@±±@±‘@¼@±•@±™@±A"Ù@ЉAÕ@¹}Aõ/..//./apk_db_layer_nameA@9AP­A@IJHJJHkkkkkkkkkkHPjjjjjjjjjjjjjjjjjjjjjjjjjjHHjoooooonnnnnnnnnnnnnnnnnnnnapk_digest_ctx_finalapk_digest_ctx_updateapk_digest_ctx_reset_algapk_digest_alg_to_mbedtls_type @ser_yaml_start_indentser_yaml_indentQueryErrorPath-TargetOwnerPackageNameVersionHashDescriptionArchLicenseOriginMaintainerURLCommitBuild-TimeInstalled-SizeFile-SizeProvider-PriorityDependsProvidesReplacesInstall-IfRecommendsLayerTagsContentsTriggersScriptsReplaces-PriorityStatusRepositoriesDownload-URLReverse-DependsReverse-Install-Ifser_q_start_indentser_json_start_indentser_json_indent8AŒAŒ½AŒÝA2¥A‹ÍA1AŒA<¹A<‘A<õAwA9õA:ýAwA9õA:5queryerrorpath-targetownerpackagenameversionhashdescriptionarchlicenseoriginmaintainerurlcommitbuild-timeinstalled-sizefile-sizeprovider-prioritydependsprovidesreplacesinstall-ifrecommendslayertagscontentstriggersscriptsreplaces-prioritystatusrepositoriesdownload-urlreverse-dependsreverse-install-if &+38DIQXcgnyˆ’¤¬µ¾ÉÔÚßèñù ,<OûÃûÃÿûÿ€ÿóÿóÿ¹file is unchangedunexpected end of fileDNS: non-recoverable failureDNS: address family for host not supportedDNS: transient error (try again later)DNS: no address for hostDNS: name does not existTLS: unspecified errorTLS: server hostname mismatchTLS: server certificate not trustedTLS: client certificate not trustedTLS: handshake failed (client cert needed?)invalid URL (check your repositories file)HTTP 400: Bad RequestHTTP 401: UnauthorizedHTTP 403: ForbiddenHTTP 404: Not FoundHTTP 405: Method Not AllowedHTTP 406: Not AcceptableHTTP 407: Proxy Authentication RequiredHTTP 408: TimeoutHTTP 500: Internal Server ErrorHTTP 501: Not ImplementedHTTP 502: Bad GatewayHTTP 503: Service UnavailableHTTP 504: Gateway TimeoutHTTP: unrecognized server errorcrypto errorcryptographic algorithm not supportedcryptographic key format not recognizedsigning failureUNTRUSTED signatureBAD signaturefile format is invalid or inconsistentfile format is obsolete (e.g. missing embedded checksum)file format not supported (in this applet)package name is invalidpackage version is invaliddependency format is invalidADB compression not supportedADB header errorincompatible ADB versionADB schema errorADB block errorADB signature block errorADB integrity errorADB schema error (no fromstring)ADB schema limit reachedADB package formatv2 database format errorv2 package format errorv2 package integrity errorv2 index format errorcould not find a repo which provides this package (check repositories file and run 'apk update')package name specification is invalidpackage mentioned in index not found (try 'apk update')file integrity errorcache not availableuvol manager not availableuvol erroruvol not supported with --rootremote server returned error (try 'apk update')file not extractedrepositories file syntax errorunsupported repositories file keywordundefined repositories file variable)Fq˜±Êáÿ#Gsž´Ëßó)Qcƒ³Ñë >fvŠ˜¿ø#;Vs‘¢»ÌÜö +DWpˆ£¹@x¡¼Çæ)Hnlib/apk/execBPB VB(TAúUAùTIAñLAöTAB0DB8iAð€pAúoAú mBDtAúàcBPkAù¤Aù°AùÀAùÐAùàAùìAùœ aall ccheck Iindexes¯ llimit ttest aall ddescription e xexacthas-origin oorigin rrdepends aavailableignore llatest«preupgradepreupgrade-onlyprune«self-upgradeself-upgrade-only a ddepends Imanifestfull oorigin O Pproviders uupgradeable aall Lcontents Rdepends ddescription eexistsinstall-ifinstalledlicense Pprovides rrdependsreplacesrinstall-if ssize ttriggers wwebpage Wwho-owns ddependsdirectory-permissions rreinstall uupgrade xxattr¯built-after llink¯pkgname-spec¯ ooutput«simulate sstdouturl¯destinationno-chown rrdependsadd-dependencies aavailableignore-conflict llatest uupgrade« ssimulatebackupcheck-permissionsdetailsfullignore-busybox-symlinkspackages¯protected-paths rrecursivesysteminitdb llatestno-chownforce-reinstall uupgradeusermode¯ tvirtual¯formatadb_w_erroradb_ro_kindadb_wo_blobadb_wa_append_apk_array_truncate@ë!@É%A$-A2UAUmAS5Añ@éapk_hash_delete_hashedalphabetaprerccvssvngithgp  #%;ÿÿ€0ÿÿ‘àDzR| AÔ€D,AØà<D™ýt'œýtÀ#àx%À‚ ø 'ÿþ<Dùþ€ %øþ€<DùþÜ %øþÜ<Dùÿ8 %øÿ8²š`eëe;eCý|²š`eëe;eCý€²š`eëe;eCý„²š`eëe;eCýˆ²š`eëe;eCýŒ²š`eëe;eCý²š`eëe;eCý”²š`eëe;eCý˜²š`eëe;eCýœ²š`eëe;eCý ²š`eëe;eCý¤²š`eëe;eCý¨²š`eëe;eCý¬²š`eëe;eCý°²š`eëe;eCý´²š`eëe;eCý¸²š`eëe;eCý¼²š`eëe;eCýÀ²š`eëe;eCýIJš`eëe;eCýȲš`eëe;eCý̲š`eëe;eCýвš`eëe;eCýÔ²š`eëe;eCýزš`eëe;eCýܲš`eëe;eCýಚ`eëe;eCý䲚`eëe;eCý貚`eëe;eCý첚`eëe;eCýð²š`eëe;eCýô²š`eëe;eCýø²š`eëe;eCýü²š`eëe;eCþ²š`eëe;eCþ²š`eëe;eCþ²š`eëe;eCþ ²š`eëe;eCþ²š`eëe;eCþ²š`eëe;eCþ²š`eëe;eCþ²š`eëe;eCþ ²š`eëe;eCþ$²š`eëe;eCþ(²š`eëe;eCþ,²š`eëe;eCþ0²š`eëe;eCþ4²š`eëe;eCþ8²š`eëe;eCþ<²š`eëe;eCþ@²š`eëe;eCþD²š`eëe;eCþH²š`eëe;eCþL²š`eëe;eCþP²š`eëe;eCþT²š`eëe;eCþX²š`eëe;eCþ\²š`eëe;eCþ`²š`eëe;eCþd²š`eëe;eCþh²š`eëe;eCþl²š`eëe;eCþp²š`eëe;eCþt²š`eëe;eCþx²š`eëe;eCþ|²š`eëe;eCþ„²š`eëe;eCþˆ²š`eëe;eCþŒ²š`eëe;eCþ²š`eëe;eCþ”²š`eëe;eCþ˜²š`eëe;eCþœ²š`eëe;eCþ ²š`eëe;eCþ¤²š`eëe;eCþ¨²š`eëe;eCþ¬²š`eëe;eCþ°²š`eëe;eCþ´²š`eëe;eCþ¸²š`eëe;eCþ¼²š`eëe;eCþÀ²š`eëe;eCþIJš`eëe;eCþȲš`eëe;eCþ̲š`eëe;eCþвš`eëe;eCþÔ²š`eëe;eCþزš`eëe;eCþಚ`eëe;eCþ䲚`eëe;eCþ貚`eëe;eCþ첚`eëe;eCþð²š`eëe;eCþô²š`eëe;eCþø²š`eëe;eCþü²š`eëe;eCÿ²š`eëe;eCÿ²š`eëe;eCÿ²š`eëe;eCÿ ²š`eëe;eCÿ²š`eëe;eCÿ²š`eëe;eCÿ²š`eëe;eCÿ²š`eëe;eCÿ ²š`eëe;eCÿ$²š`eëe;eCÿ(²š`eëe;eCÿ,²š`eëe;eCÿ0²š`eëe;eCÿ4²š`eëe;eCÿ<²š`eëe;eCÿ@²š`eëe;eCÿD²š`eëe;eCÿH²š`eëe;eCÿL²š`eëe;eCÿP²š`eëe;eCÿT²š`eëe;eCÿX²š`eëe;eCÿ\²š`eëe;eCÿ`²š`eëe;eCÿd²š`eëe;eCÿh²š`eëe;eCÿl²š`eëe;eCÿp²š`eëe;eCÿt²š`eëe;eCÿx²š`eëe;eCÿ|²š`eëe;eCÿ€²š`eëe;eCÿ„²š`eëe;eCÿˆ²š`eëe;eCÿŒ²š`eëe;eCÿ²š`eëe;eCÿ”²š`eëe;eCÿ˜²š`eëe;eCÿœ²š`eëe;eCÿ ²š`eëe;eCÿ¤²š`eëe;eCÿ¨²š`eëe;eCÿ¬²š`eëe;eCÿ°²š`eëe;eCÿ´²š`eëe;eCÿ¸²š`eëe;eCÿ¼²š`eëe;eCÿÀ²š`eëe;eCÿIJš`eëe;eCÿȲš`eëe;eCÿ̲š`eëe;eCÿвš`eëe;eCÿÔ²š`eëe;eCÿزš`eëe;eCÿܲš`eëe;eCÿಚ`eëe;eCÿ䲚`eëe;eCÿ貚`eëe;eCÿ첚`eëe;eCÿð²š`eëe;eCÿô²š`eëe;eCÿø²š`eëe;eCÿü@-¬@+õ@-`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`BG`@‘@•Í@nI@o-@yý@{m @i@•õ@nI0@i@•¥@nI@”Õ@˜a@{m@o-@z@o=@o-@y¹@{m@i@•¥@nI@o-@yý@{m@0­@{9@6Ùxœ”=ŽÄ …ûœÂrCFŠM?g‰dw+m»m?Æ„M„UÖ¢àï{6á€nÌS>ÅëÏ "ÌíB¬BCŒ @@0¹@P%Aú”BCÔ @@/Ù@‚™B´BDx @/‘@?AèäBD¸ h@q@UQ@N­B¸BDü4@/q@@ýBÀBE@/Y@¨ÁB ŒBE !@.ù@\áBÄBEp(!@Zý@XÑBÌBEÜ@.©@‹ÝBÐBF$@9A@mM€AÓðAÓ 07070100E810220000A1FF00000000000000000000000169B8AF0D00000005000000080000000100000000000000000000001000000000usr/bin/signifyusign07070100E80F4F0000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000D00000000usr/bin/tail../../bin/busybox07070100E80FAA0000A1FF00000000000000000000000169B8AF0D00000005000000080000000100000000000000000000000D00000000usr/bin/utplucode07070100E80F510000A1FF00000000000000000000000169B8AF0D00000011000000080000000100000000000000000000000C00000000usr/bin/tee../../bin/busybox07070100E807A8000041ED00000000000000000000000F69B8AF0D00000000000000080000000100000000000000000000000A00000000usr/share07070100E80F6C000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001000000000usr/share/acl.d07070100E816E8000081A400000000000000000000000169B8AF0D0000005B000000080000000100000000000000000000001F00000000usr/share/acl.d/luci-base.json{ "user": "nobody", "access": { "system": { "methods": [ "board", "info" ] } } } 07070100E812D5000081A400000000000000000000000169B8AF0D000000D9000000080000000100000000000000000000002100000000usr/share/acl.d/dnsmasq_acl.json{ "user": "dnsmasq", "publish": [ "dnsmasq" ], "access": { "hotplug.dhcp": { "methods": [ "call" ] }, "hotplug.neigh": { "methods": [ "call" ] }, "hotplug.tftp": { "methods": [ "call" ] } } } 07070100E816D0000081A400000000000000000000000169B8AF0D0000002B000000080000000100000000000000000000001A00000000usr/share/acl.d/logd.json{ "user": "logd", "publish": [ "log" ] } 07070100E80F6D000081A400000000000000000000000169B8AF0D00000054000000080000000100000000000000000000001A00000000usr/share/acl.d/ntpd.json{ "user": "ntp", "access": { "hotplug.ntp": { "methods": [ "call" ] } } } 07070100E81572000081A400000000000000000000000169B8AF0D000001C1000000080000000100000000000000000000001E00000000usr/share/acl.d/wpad_acl.json{ "user": "network", "access": { "service": { "methods": [ "event" ] }, "wpa_supplicant": { "methods": [ "phy_set_state", "phy_set_macaddr_list", "phy_status" ] }, "hostapd": { "methods": [ "apsta_state" ] }, "udebug": { "methods": [ "get_config" ] } }, "subscribe": [ "udebug" ], "publish": [ "hostapd", "hostapd.*", "wpa_supplicant", "wpa_supplicant.*", "hostapd-auth" ], "send": [ "bss.*", "wps_credentials" ] } 07070100E81529000041ED00000000000000000000000569B8AF0D00000000000000080000000100000000000000000000001000000000usr/share/ucode07070100E816F1000041ED00000000000000000000000469B8AF0D00000000000000080000000100000000000000000000001500000000usr/share/ucode/luci07070100E816FA000081A400000000000000000000000169B8AF0D00003E54000000080000000100000000000000000000002100000000usr/share/ucode/luci/zoneinfo.uc// Autogenerated by zoneinfo2ucode.pl export default { 'Africa/Abidjan': 'GMT0', 'Africa/Accra': 'GMT0', 'Africa/Addis_Ababa': 'EAT-3', 'Africa/Algiers': 'CET-1', 'Africa/Asmara': 'EAT-3', 'Africa/Bamako': 'GMT0', 'Africa/Bangui': 'WAT-1', 'Africa/Banjul': 'GMT0', 'Africa/Bissau': 'GMT0', 'Africa/Blantyre': 'CAT-2', 'Africa/Brazzaville': 'WAT-1', 'Africa/Bujumbura': 'CAT-2', 'Africa/Cairo': 'EET-2EEST,M4.5.5/0,M10.5.4/24', 'Africa/Casablanca': '<+01>-1', 'Africa/Ceuta': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Africa/Conakry': 'GMT0', 'Africa/Dakar': 'GMT0', 'Africa/Dar_es_Salaam': 'EAT-3', 'Africa/Djibouti': 'EAT-3', 'Africa/Douala': 'WAT-1', 'Africa/El_Aaiun': '<+01>-1', 'Africa/Freetown': 'GMT0', 'Africa/Gaborone': 'CAT-2', 'Africa/Harare': 'CAT-2', 'Africa/Johannesburg': 'SAST-2', 'Africa/Juba': 'CAT-2', 'Africa/Kampala': 'EAT-3', 'Africa/Khartoum': 'CAT-2', 'Africa/Kigali': 'CAT-2', 'Africa/Kinshasa': 'WAT-1', 'Africa/Lagos': 'WAT-1', 'Africa/Libreville': 'WAT-1', 'Africa/Lome': 'GMT0', 'Africa/Luanda': 'WAT-1', 'Africa/Lubumbashi': 'CAT-2', 'Africa/Lusaka': 'CAT-2', 'Africa/Malabo': 'WAT-1', 'Africa/Maputo': 'CAT-2', 'Africa/Maseru': 'SAST-2', 'Africa/Mbabane': 'SAST-2', 'Africa/Mogadishu': 'EAT-3', 'Africa/Monrovia': 'GMT0', 'Africa/Nairobi': 'EAT-3', 'Africa/Ndjamena': 'WAT-1', 'Africa/Niamey': 'WAT-1', 'Africa/Nouakchott': 'GMT0', 'Africa/Ouagadougou': 'GMT0', 'Africa/Porto-Novo': 'WAT-1', 'Africa/Sao_Tome': 'GMT0', 'Africa/Tripoli': 'EET-2', 'Africa/Tunis': 'CET-1', 'Africa/Windhoek': 'CAT-2', 'America/Adak': 'HST10HDT,M3.2.0,M11.1.0', 'America/Anchorage': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Anguilla': 'AST4', 'America/Antigua': 'AST4', 'America/Araguaina': '<-03>3', 'America/Argentina/Buenos_Aires': '<-03>3', 'America/Argentina/Catamarca': '<-03>3', 'America/Argentina/Cordoba': '<-03>3', 'America/Argentina/Jujuy': '<-03>3', 'America/Argentina/La_Rioja': '<-03>3', 'America/Argentina/Mendoza': '<-03>3', 'America/Argentina/Rio_Gallegos': '<-03>3', 'America/Argentina/Salta': '<-03>3', 'America/Argentina/San_Juan': '<-03>3', 'America/Argentina/San_Luis': '<-03>3', 'America/Argentina/Tucuman': '<-03>3', 'America/Argentina/Ushuaia': '<-03>3', 'America/Aruba': 'AST4', 'America/Asuncion': '<-03>3', 'America/Atikokan': 'EST5', 'America/Bahia': '<-03>3', 'America/Bahia_Banderas': 'CST6', 'America/Barbados': 'AST4', 'America/Belem': '<-03>3', 'America/Belize': 'CST6', 'America/Blanc-Sablon': 'AST4', 'America/Boa_Vista': '<-04>4', 'America/Bogota': '<-05>5', 'America/Boise': 'MST7MDT,M3.2.0,M11.1.0', 'America/Cambridge_Bay': 'MST7MDT,M3.2.0,M11.1.0', 'America/Campo_Grande': '<-04>4', 'America/Cancun': 'EST5', 'America/Caracas': '<-04>4', 'America/Cayenne': '<-03>3', 'America/Cayman': 'EST5', 'America/Chicago': 'CST6CDT,M3.2.0,M11.1.0', 'America/Chihuahua': 'CST6', 'America/Ciudad_Juarez': 'MST7MDT,M3.2.0,M11.1.0', 'America/Costa_Rica': 'CST6', 'America/Coyhaique': '<-03>3', 'America/Creston': 'MST7', 'America/Cuiaba': '<-04>4', 'America/Curacao': 'AST4', 'America/Danmarkshavn': 'GMT0', 'America/Dawson': 'MST7', 'America/Dawson_Creek': 'MST7', 'America/Denver': 'MST7MDT,M3.2.0,M11.1.0', 'America/Detroit': 'EST5EDT,M3.2.0,M11.1.0', 'America/Dominica': 'AST4', 'America/Edmonton': 'MST7MDT,M3.2.0,M11.1.0', 'America/Eirunepe': '<-05>5', 'America/El_Salvador': 'CST6', 'America/Fort_Nelson': 'MST7', 'America/Fortaleza': '<-03>3', 'America/Glace_Bay': 'AST4ADT,M3.2.0,M11.1.0', 'America/Goose_Bay': 'AST4ADT,M3.2.0,M11.1.0', 'America/Grand_Turk': 'EST5EDT,M3.2.0,M11.1.0', 'America/Grenada': 'AST4', 'America/Guadeloupe': 'AST4', 'America/Guatemala': 'CST6', 'America/Guayaquil': '<-05>5', 'America/Guyana': '<-04>4', 'America/Halifax': 'AST4ADT,M3.2.0,M11.1.0', 'America/Havana': 'CST5CDT,M3.2.0/0,M11.1.0/1', 'America/Hermosillo': 'MST7', 'America/Indiana/Indianapolis': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Knox': 'CST6CDT,M3.2.0,M11.1.0', 'America/Indiana/Marengo': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Petersburg': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Tell_City': 'CST6CDT,M3.2.0,M11.1.0', 'America/Indiana/Vevay': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Vincennes': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Winamac': 'EST5EDT,M3.2.0,M11.1.0', 'America/Inuvik': 'MST7MDT,M3.2.0,M11.1.0', 'America/Iqaluit': 'EST5EDT,M3.2.0,M11.1.0', 'America/Jamaica': 'EST5', 'America/Juneau': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Kentucky/Louisville': 'EST5EDT,M3.2.0,M11.1.0', 'America/Kentucky/Monticello': 'EST5EDT,M3.2.0,M11.1.0', 'America/Kralendijk': 'AST4', 'America/La_Paz': '<-04>4', 'America/Lima': '<-05>5', 'America/Los_Angeles': 'PST8PDT,M3.2.0,M11.1.0', 'America/Lower_Princes': 'AST4', 'America/Maceio': '<-03>3', 'America/Managua': 'CST6', 'America/Manaus': '<-04>4', 'America/Marigot': 'AST4', 'America/Martinique': 'AST4', 'America/Matamoros': 'CST6CDT,M3.2.0,M11.1.0', 'America/Mazatlan': 'MST7', 'America/Menominee': 'CST6CDT,M3.2.0,M11.1.0', 'America/Merida': 'CST6', 'America/Metlakatla': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Mexico_City': 'CST6', 'America/Miquelon': '<-03>3<-02>,M3.2.0,M11.1.0', 'America/Moncton': 'AST4ADT,M3.2.0,M11.1.0', 'America/Monterrey': 'CST6', 'America/Montevideo': '<-03>3', 'America/Montserrat': 'AST4', 'America/Nassau': 'EST5EDT,M3.2.0,M11.1.0', 'America/New_York': 'EST5EDT,M3.2.0,M11.1.0', 'America/Nome': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Noronha': '<-02>2', 'America/North_Dakota/Beulah': 'CST6CDT,M3.2.0,M11.1.0', 'America/North_Dakota/Center': 'CST6CDT,M3.2.0,M11.1.0', 'America/North_Dakota/New_Salem': 'CST6CDT,M3.2.0,M11.1.0', 'America/Nuuk': '<-02>2<-01>,M3.5.0/-1,M10.5.0/0', 'America/Ojinaga': 'CST6CDT,M3.2.0,M11.1.0', 'America/Panama': 'EST5', 'America/Paramaribo': '<-03>3', 'America/Phoenix': 'MST7', 'America/Port-au-Prince': 'EST5EDT,M3.2.0,M11.1.0', 'America/Port_of_Spain': 'AST4', 'America/Porto_Velho': '<-04>4', 'America/Puerto_Rico': 'AST4', 'America/Punta_Arenas': '<-03>3', 'America/Rankin_Inlet': 'CST6CDT,M3.2.0,M11.1.0', 'America/Recife': '<-03>3', 'America/Regina': 'CST6', 'America/Resolute': 'CST6CDT,M3.2.0,M11.1.0', 'America/Rio_Branco': '<-05>5', 'America/Santarem': '<-03>3', 'America/Santiago': '<-04>4<-03>,M9.1.6/24,M4.1.6/24', 'America/Santo_Domingo': 'AST4', 'America/Sao_Paulo': '<-03>3', 'America/Scoresbysund': '<-02>2<-01>,M3.5.0/-1,M10.5.0/0', 'America/Sitka': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/St_Barthelemy': 'AST4', 'America/St_Johns': 'NST3:30NDT,M3.2.0,M11.1.0', 'America/St_Kitts': 'AST4', 'America/St_Lucia': 'AST4', 'America/St_Thomas': 'AST4', 'America/St_Vincent': 'AST4', 'America/Swift_Current': 'CST6', 'America/Tegucigalpa': 'CST6', 'America/Thule': 'AST4ADT,M3.2.0,M11.1.0', 'America/Tijuana': 'PST8PDT,M3.2.0,M11.1.0', 'America/Toronto': 'EST5EDT,M3.2.0,M11.1.0', 'America/Tortola': 'AST4', 'America/Vancouver': 'PST8PDT,M3.2.0,M11.1.0', 'America/Whitehorse': 'MST7', 'America/Winnipeg': 'CST6CDT,M3.2.0,M11.1.0', 'America/Yakutat': 'AKST9AKDT,M3.2.0,M11.1.0', 'Antarctica/Casey': '<+08>-8', 'Antarctica/Davis': '<+07>-7', 'Antarctica/DumontDUrville': '<+10>-10', 'Antarctica/Macquarie': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Antarctica/Mawson': '<+05>-5', 'Antarctica/McMurdo': 'NZST-12NZDT,M9.5.0,M4.1.0/3', 'Antarctica/Palmer': '<-03>3', 'Antarctica/Rothera': '<-03>3', 'Antarctica/Syowa': '<+03>-3', 'Antarctica/Troll': '<+00>0<+02>-2,M3.5.0/1,M10.5.0/3', 'Antarctica/Vostok': '<+05>-5', 'Arctic/Longyearbyen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Asia/Aden': '<+03>-3', 'Asia/Almaty': '<+05>-5', 'Asia/Amman': '<+03>-3', 'Asia/Anadyr': '<+12>-12', 'Asia/Aqtau': '<+05>-5', 'Asia/Aqtobe': '<+05>-5', 'Asia/Ashgabat': '<+05>-5', 'Asia/Atyrau': '<+05>-5', 'Asia/Baghdad': '<+03>-3', 'Asia/Bahrain': '<+03>-3', 'Asia/Baku': '<+04>-4', 'Asia/Bangkok': '<+07>-7', 'Asia/Barnaul': '<+07>-7', 'Asia/Beirut': 'EET-2EEST,M3.5.0/0,M10.5.0/0', 'Asia/Bishkek': '<+06>-6', 'Asia/Brunei': '<+08>-8', 'Asia/Chita': '<+09>-9', 'Asia/Colombo': '<+0530>-5:30', 'Asia/Damascus': '<+03>-3', 'Asia/Dhaka': '<+06>-6', 'Asia/Dili': '<+09>-9', 'Asia/Dubai': '<+04>-4', 'Asia/Dushanbe': '<+05>-5', 'Asia/Famagusta': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Asia/Gaza': 'EET-2EEST,M3.4.4/50,M10.4.4/50', 'Asia/Hebron': 'EET-2EEST,M3.4.4/50,M10.4.4/50', 'Asia/Ho_Chi_Minh': '<+07>-7', 'Asia/Hong_Kong': 'HKT-8', 'Asia/Hovd': '<+07>-7', 'Asia/Irkutsk': '<+08>-8', 'Asia/Jakarta': 'WIB-7', 'Asia/Jayapura': 'WIT-9', 'Asia/Jerusalem': 'IST-2IDT,M3.4.4/26,M10.5.0', 'Asia/Kabul': '<+0430>-4:30', 'Asia/Kamchatka': '<+12>-12', 'Asia/Karachi': 'PKT-5', 'Asia/Kathmandu': '<+0545>-5:45', 'Asia/Khandyga': '<+09>-9', 'Asia/Kolkata': 'IST-5:30', 'Asia/Krasnoyarsk': '<+07>-7', 'Asia/Kuala_Lumpur': '<+08>-8', 'Asia/Kuching': '<+08>-8', 'Asia/Kuwait': '<+03>-3', 'Asia/Macau': 'CST-8', 'Asia/Magadan': '<+11>-11', 'Asia/Makassar': 'WITA-8', 'Asia/Manila': 'PST-8', 'Asia/Muscat': '<+04>-4', 'Asia/Nicosia': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Asia/Novokuznetsk': '<+07>-7', 'Asia/Novosibirsk': '<+07>-7', 'Asia/Omsk': '<+06>-6', 'Asia/Oral': '<+05>-5', 'Asia/Phnom_Penh': '<+07>-7', 'Asia/Pontianak': 'WIB-7', 'Asia/Pyongyang': 'KST-9', 'Asia/Qatar': '<+03>-3', 'Asia/Qostanay': '<+05>-5', 'Asia/Qyzylorda': '<+05>-5', 'Asia/Riyadh': '<+03>-3', 'Asia/Sakhalin': '<+11>-11', 'Asia/Samarkand': '<+05>-5', 'Asia/Seoul': 'KST-9', 'Asia/Shanghai': 'CST-8', 'Asia/Singapore': '<+08>-8', 'Asia/Srednekolymsk': '<+11>-11', 'Asia/Taipei': 'CST-8', 'Asia/Tashkent': '<+05>-5', 'Asia/Tbilisi': '<+04>-4', 'Asia/Tehran': '<+0330>-3:30', 'Asia/Thimphu': '<+06>-6', 'Asia/Tokyo': 'JST-9', 'Asia/Tomsk': '<+07>-7', 'Asia/Ulaanbaatar': '<+08>-8', 'Asia/Urumqi': '<+06>-6', 'Asia/Ust-Nera': '<+10>-10', 'Asia/Vientiane': '<+07>-7', 'Asia/Vladivostok': '<+10>-10', 'Asia/Yakutsk': '<+09>-9', 'Asia/Yangon': '<+0630>-6:30', 'Asia/Yekaterinburg': '<+05>-5', 'Asia/Yerevan': '<+04>-4', 'Atlantic/Azores': '<-01>1<+00>,M3.5.0/0,M10.5.0/1', 'Atlantic/Bermuda': 'AST4ADT,M3.2.0,M11.1.0', 'Atlantic/Canary': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Cape_Verde': '<-01>1', 'Atlantic/Faroe': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Madeira': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Reykjavik': 'GMT0', 'Atlantic/South_Georgia': '<-02>2', 'Atlantic/St_Helena': 'GMT0', 'Atlantic/Stanley': '<-03>3', 'Australia/Adelaide': 'ACST-9:30ACDT,M10.1.0,M4.1.0/3', 'Australia/Brisbane': 'AEST-10', 'Australia/Broken_Hill': 'ACST-9:30ACDT,M10.1.0,M4.1.0/3', 'Australia/Darwin': 'ACST-9:30', 'Australia/Eucla': '<+0845>-8:45', 'Australia/Hobart': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Australia/Lindeman': 'AEST-10', 'Australia/Lord_Howe': '<+1030>-10:30<+11>-11,M10.1.0,M4.1.0', 'Australia/Melbourne': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Australia/Perth': 'AWST-8', 'Australia/Sydney': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Etc/GMT': 'GMT0', 'Etc/GMT+1': '<-01>1', 'Etc/GMT+10': '<-10>10', 'Etc/GMT+11': '<-11>11', 'Etc/GMT+12': '<-12>12', 'Etc/GMT+2': '<-02>2', 'Etc/GMT+3': '<-03>3', 'Etc/GMT+4': '<-04>4', 'Etc/GMT+5': '<-05>5', 'Etc/GMT+6': '<-06>6', 'Etc/GMT+7': '<-07>7', 'Etc/GMT+8': '<-08>8', 'Etc/GMT+9': '<-09>9', 'Etc/GMT-1': '<+01>-1', 'Etc/GMT-10': '<+10>-10', 'Etc/GMT-11': '<+11>-11', 'Etc/GMT-12': '<+12>-12', 'Etc/GMT-13': '<+13>-13', 'Etc/GMT-14': '<+14>-14', 'Etc/GMT-2': '<+02>-2', 'Etc/GMT-3': '<+03>-3', 'Etc/GMT-4': '<+04>-4', 'Etc/GMT-5': '<+05>-5', 'Etc/GMT-6': '<+06>-6', 'Etc/GMT-7': '<+07>-7', 'Etc/GMT-8': '<+08>-8', 'Etc/GMT-9': '<+09>-9', 'Europe/Amsterdam': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Andorra': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Astrakhan': '<+04>-4', 'Europe/Athens': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Belgrade': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Berlin': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Bratislava': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Brussels': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Bucharest': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Budapest': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Busingen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Chisinau': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Copenhagen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Dublin': 'IST-1GMT0,M10.5.0,M3.5.0/1', 'Europe/Gibraltar': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Guernsey': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Helsinki': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Isle_of_Man': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Istanbul': '<+03>-3', 'Europe/Jersey': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Kaliningrad': 'EET-2', 'Europe/Kirov': 'MSK-3', 'Europe/Kyiv': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Lisbon': 'WET0WEST,M3.5.0/1,M10.5.0', 'Europe/Ljubljana': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/London': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Luxembourg': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Madrid': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Malta': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Mariehamn': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Minsk': '<+03>-3', 'Europe/Monaco': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Moscow': 'MSK-3', 'Europe/Oslo': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Paris': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Podgorica': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Prague': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Riga': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Rome': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Samara': '<+04>-4', 'Europe/San_Marino': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Sarajevo': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Saratov': '<+04>-4', 'Europe/Simferopol': 'MSK-3', 'Europe/Skopje': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Sofia': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Stockholm': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Tallinn': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Tirane': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Ulyanovsk': '<+04>-4', 'Europe/Vaduz': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vatican': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vienna': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vilnius': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Volgograd': 'MSK-3', 'Europe/Warsaw': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Zagreb': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Zurich': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Indian/Antananarivo': 'EAT-3', 'Indian/Chagos': '<+06>-6', 'Indian/Christmas': '<+07>-7', 'Indian/Cocos': '<+0630>-6:30', 'Indian/Comoro': 'EAT-3', 'Indian/Kerguelen': '<+05>-5', 'Indian/Mahe': '<+04>-4', 'Indian/Maldives': '<+05>-5', 'Indian/Mauritius': '<+04>-4', 'Indian/Mayotte': 'EAT-3', 'Indian/Reunion': '<+04>-4', 'Pacific/Apia': '<+13>-13', 'Pacific/Auckland': 'NZST-12NZDT,M9.5.0,M4.1.0/3', 'Pacific/Bougainville': '<+11>-11', 'Pacific/Chatham': '<+1245>-12:45<+1345>,M9.5.0/2:45,M4.1.0/3:45', 'Pacific/Chuuk': '<+10>-10', 'Pacific/Easter': '<-06>6<-05>,M9.1.6/22,M4.1.6/22', 'Pacific/Efate': '<+11>-11', 'Pacific/Fakaofo': '<+13>-13', 'Pacific/Fiji': '<+12>-12', 'Pacific/Funafuti': '<+12>-12', 'Pacific/Galapagos': '<-06>6', 'Pacific/Gambier': '<-09>9', 'Pacific/Guadalcanal': '<+11>-11', 'Pacific/Guam': 'ChST-10', 'Pacific/Honolulu': 'HST10', 'Pacific/Kanton': '<+13>-13', 'Pacific/Kiritimati': '<+14>-14', 'Pacific/Kosrae': '<+11>-11', 'Pacific/Kwajalein': '<+12>-12', 'Pacific/Majuro': '<+12>-12', 'Pacific/Marquesas': '<-0930>9:30', 'Pacific/Midway': 'SST11', 'Pacific/Nauru': '<+12>-12', 'Pacific/Niue': '<-11>11', 'Pacific/Norfolk': '<+11>-11<+12>,M10.1.0,M4.1.0/3', 'Pacific/Noumea': '<+11>-11', 'Pacific/Pago_Pago': 'SST11', 'Pacific/Palau': '<+09>-9', 'Pacific/Pitcairn': '<-08>8', 'Pacific/Pohnpei': '<+11>-11', 'Pacific/Port_Moresby': '<+10>-10', 'Pacific/Rarotonga': '<-10>10', 'Pacific/Saipan': 'ChST-10', 'Pacific/Tahiti': '<-10>10', 'Pacific/Tarawa': '<+12>-12', 'Pacific/Tongatapu': '<+13>-13', 'Pacific/Wake': '<+12>-12', 'Pacific/Wallis': '<+12>-12', }; 07070100E816F5000081A400000000000000000000000169B8AF0D00000D73000000080000000100000000000000000000001C00000000usr/share/ucode/luci/sys.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { basename, readlink, readfile, open, popen, stat, glob } from 'fs'; export function process_list() { const top = popen('/bin/busybox top -bn1'); let line, list = []; for (let line = top.read('line'); length(line); line = top.read('line')) { let m = match(trim(line), /^([0-9]+) +([0-9]+) +(.+) +([RSDZTWI][ { const s = stat(path); return s?.type == 'file' && s?.perm?.user_exec; }), basename); }; export function init_index(name) { const src = readfile(`/etc/init.d/${basename(name)}`, 2048); const idx = []; for (let m in match(src, /^[[:space:]]*(START|STOP)=('[0-9][0-9]'|"[0-9][0-9]"|[0-9][0-9])[[:space:]]*$/gs)) { switch (m[1]) { case 'START': idx[0] = +trim(m[2], '"\''); break; case 'STOP': idx[1] = +trim(m[2], '"\''); break; } } return length(idx) ? idx : null; }; export function init_enabled(name) { for (let path in glob(`/etc/rc.d/[SK][0-9][0-9]${basename(name)}`)) { const ln = readlink(path); const s1 = stat(index(ln, '/') == 0 ? ln : `/etc/rc.d/${ln}`); const s2 = stat(`/etc/init.d/${basename(name)}`); if (s1?.inode == s2?.inode && s1?.type == 'file' && s1?.perm?.user_exec) return true; } return false; }; export function init_action(name, action) { const s = stat(`/etc/init.d/${basename(name)}`); if (s?.type != 'file' || s?.user_exec == false) return false; return system(`env -i /etc/init.d/${basename(name)} ${action} >/dev/null`); }; 07070100E816F4000081A400000000000000000000000169B8AF0D00001217000000080000000100000000000000000000002000000000usr/share/ucode/luci/runtime.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { access, basename, stat } from 'fs'; import { cursor } from 'uci'; const template_directory = '/usr/share/ucode/luci/template'; function cut_message(msg) { return trim(replace(msg, /\n--\n.*$/, '')); } function format_nested_exception(ex) { let msg = replace(cut_message(ex.message), /(\n+( \|[^\n]*(\n|$))+)/, (m, m1) => { m1 = replace(m1, /(^|\n) \| ?/g, '$1'); m = match(m1, /^(.+?)\n(In.*line \d+, byte \d+:.+)$/); return `
${cut_message(m ? m[1] : m1)}
${m ? `
${trim(m[2])}
` : ''}
`; }); return `
${cut_message(msg)}
${trim(ex.stacktrace[0].context)}
`; } function format_lua_exception(ex) { let m = match(ex.message, /^(.+)\nstack traceback:\n(.+)$/); return `
${cut_message(m ? m[1] : ex.message)}
${m ? trim(replace(m[2], /(^|\n)\t/g, '$1')) : ex.stacktrace[0].context}
`; } const Class = { init_lua: function(optional) { if (!this.L) { let bridge = this.env.dispatcher.load_luabridge(optional); if (bridge) { let http = this.env.http; this.L = bridge.create(); this.L.set('L', proto({ write: (...args) => http.closed || print(...args) }, this.env)); this.L.invoke('require', 'luci.ucodebridge'); this.env.lua_active = true; } } return this.L; }, is_ucode_template: function(path) { return access(`${template_directory}/${path}.ut`); }, is_lua_template: function(path) { let vm = this.init_lua(true); return vm && access(`${vm.get('_G', 'luci', 'template', 'viewdir')}/${path}.htm`); }, render_ucode: function(path, scope) { let tmplfunc = loadfile(path, { raw_mode: false }); if (this.env.http.closed) render(call, tmplfunc, null, scope ?? {}); else call(tmplfunc, null, scope ?? {}); }, render_lua: function(path, scope) { let vm = this.init_lua(); let render = vm.get('_G', 'luci', 'ucodebridge', 'render'); render.call(path, scope ?? {}); }, trycompile: function(path) { let ucode_path = `${template_directory}/${path}.ut`; if (access(ucode_path)) { try { loadfile(ucode_path, { raw_mode: false }); } catch (ucode_err) { return `Unable to compile '${path}' as ucode template: ${format_nested_exception(ucode_err)}`; } } else { try { let vm = this.init_lua(true); if (vm) vm.get('_G', 'luci', 'ucodebridge', 'compile').call(path); else return `Unable to compile '${path}' as Lua template: Unable to load Lua runtime`; } catch (lua_err) { return `Unable to compile '${path}' as Lua template: ${format_lua_exception(lua_err)}`; } } return true; }, render_any: function(path, scope) { let ucode_path = `${template_directory}/${path}.ut`; scope = proto(scope ?? {}, this.scopes[-1]); push(this.scopes, scope); try { if (access(ucode_path)) this.render_ucode(ucode_path, scope); else this.render_lua(path, scope); } catch (ex) { pop(this.scopes); die(ex); } pop(this.scopes); }, render: function(path, scope) { let self = this; this.env.http.write(render(() => self.render_any(path, scope))); }, call: function(modname, method, ...args) { let vm = this.init_lua(); let lcall = vm.get('_G', 'luci', 'ucodebridge', 'call'); return lcall.call(modname, method, ...args); } }; export default function(env) { const self = proto({ env: env ??= {}, scopes: [ proto(env, global) ], global }, Class); const uci = cursor(); // determine theme let media = uci.get('luci', 'main', 'mediaurlbase'); let status = self.trycompile(`themes/${basename(media)}/header`); if (status !== true) { media = null; self.env.media_error = status; for (let k, v in uci.get_all('luci', 'themes')) { if (substr(k, 0, 1) != '.') { status = self.trycompile(`themes/${basename(v)}/header`); if (status === true) { media = v; break; } } } if (!media) env.dispatcher.error500(`Unable to render any theme header template, last error was:\n${status}`); } self.env.media = media; self.env.theme = basename(media); self.env.resource = uci.get('luci', 'main', 'resourcebase'); self.env.pkgs_update_time = stat('/lib/apk/db/installed')?.mtime ?? stat('/usr/lib/opkg/status')?.mtime ?? 0; self.env.include = (...args) => self.render_any(...args); return self; }; 07070100E816FF000041ED00000000000000000000000469B8AF0D00000000000000080000000100000000000000000000001E00000000usr/share/ucode/luci/template07070100E81706000081A400000000000000000000000169B8AF0D000000E7000000080000000100000000000000000000002600000000usr/share/ucode/luci/template/view.ut{% include('header') %}
{{ _('Loading view…') }}
{% include('footer') %} 07070100E81705000081A400000000000000000000000169B8AF0D00000830000000080000000100000000000000000000002900000000usr/share/ucode/luci/template/sysauth.ut{# Copyright 2008 Steven Barth Copyright 2008-2012 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}
{% if (fuser): %}

{{ _('Invalid username and/or password! Please try again.') }}

{% endif %}

{{ _('Authorization Required') }}

{{ _('Please enter your username and password.') }}
{% let https_ports = uci.get('uhttpd', 'main', 'listen_https') ?? []; https_ports = uniq(filter( map( (type(https_ports) == 'string') ? split(https_port, /\s+/) : https_ports, e => +match(e, /\d+$/)?.[0] ), p => (p >= 0 && p <= 65535) )); %} {% include('footer') %} 07070100E81700000081A400000000000000000000000169B8AF0D0000025B000000080000000100000000000000000000002B00000000usr/share/ucode/luci/template/csrftoken.ut{# Copyright 2015-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

{{ _('Form token mismatch') }}


{{ _('The submitted security token is invalid or already expired!') }}

{{ _(` In order to prevent unauthorized access to the system, your request has been blocked. Click "Continue »" below to return to the previous page. `) }}

Continue »

{% include('footer') %} 07070100E81703000081A400000000000000000000000169B8AF0D000004F7000000080000000100000000000000000000002800000000usr/share/ucode/luci/template/footer.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% const rollback = dispatcher.rollback_pending() %} {% if (rollback || trigger_apply || trigger_revert): %} {% endif %} {% if (media_error): %} {% endif %} {% include(`themes/${theme}/footer`) %} 07070100E81701000081A400000000000000000000000169B8AF0D000001B3000000080000000100000000000000000000002A00000000usr/share/ucode/luci/template/error404.ut{# Copyright 2008 Steven Barth Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

404 {{ _('Not Found') }}

{{ _('Sorry, the object you requested was not found.') }}

{{ message }}

{{ _('Unable to dispatch') }}: {{ dispatcher.build_url(...ctx.request_path) }} {% include('footer') %} 07070100E81702000081A400000000000000000000000169B8AF0D00000467000000080000000100000000000000000000002A00000000usr/share/ucode/luci/template/error500.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#}

{{ title }}

{{ message }}
{% if (exception): %}
{{ exception.message }}
{{ exception.stacktrace[0].context }}
{% endif %}
07070100E817E8000041ED00000000000000000000000369B8AF0D00000000000000080000000100000000000000000000002500000000usr/share/ucode/luci/template/themes07070100E817EA0000A1FF00000000000000000000000169B8AF0D00000009000000080000000100000000000000000000003400000000usr/share/ucode/luci/template/themes/bootstrap-darkbootstrap07070100E817EB0000A1FF00000000000000000000000169B8AF0D00000009000000080000000100000000000000000000003500000000usr/share/ucode/luci/template/themes/bootstrap-lightbootstrap07070100E817ED000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000002F00000000usr/share/ucode/luci/template/themes/bootstrap07070100E817F2000081A400000000000000000000000169B8AF0D00000541000000080000000100000000000000000000003A00000000usr/share/ucode/luci/template/themes/bootstrap/sysauth.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header', { blank_page: true }) %}
{{ _('Loading view…') }}
{% include('footer', { blank_page: true }) %} 07070100E817F0000081A400000000000000000000000169B8AF0D0000029F000000080000000100000000000000000000003900000000usr/share/ucode/luci/template/themes/bootstrap/footer.ut {% if (!blank_page): %} {% endif %} 07070100E817F1000081A400000000000000000000000169B8AF0D00000E79000000080000000100000000000000000000003900000000usr/share/ucode/luci/template/themes/bootstrap/header.ut{# Copyright 2008 Steven Barth Copyright 2012 David Menting Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% import { getuid, getspnam } from 'luci.core'; const boardinfo = ubus.call('system', 'board'); const darkpref = (theme == 'bootstrap-dark' ? 'true' : (theme == 'bootstrap-light' ? 'false' : null)); http.prepare_content('text/html; charset=UTF-8'); -%} {{ striptags(`${boardinfo.hostname ?? '?'}${dispatched?.title ? ` | ${_(dispatched.title)}` : ''}`) }} {% if (!darkpref): %} {% endif %} {% if (node?.css): %} {% endif %} {% if (css): %} {% endif %} {% if (!blank_page): %}
{{ striptags(boardinfo.hostname ?? '?') }}
{% if (getuid() == 0 && getspnam('root')?.pwdp === ''): %}

{{ _('No password set!') }}

{{ _('There is no password set on this router. Please configure a root password to protect the web interface.') }}

{% if (dispatcher.lookup("admin/system/admin")): %}
{{ _('Go to password configuration...') }}
{% endif %}
{% endif %} {% if (boardinfo.rootfs_type == "initramfs"): %}

{{ _('System running in recovery (initramfs) mode.') }}

{{ _('No changes to settings will be stored and are lost after rebooting. This mode should only be used to install a firmware upgrade') }}

{% if (dispatcher.lookup("admin/system/flash")): %}
{{ _('Go to firmware upgrade...') }}
{% endif %}
{% endif %} {% endif %} 07070100E81779000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000002B00000000usr/share/ucode/luci/template/admin_status07070100E8177A000081A400000000000000000000000169B8AF0D0000065A000000080000000100000000000000000000003400000000usr/share/ucode/luci/template/admin_status/index.ut{# Copyright 2008 Steven Barth Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

{{ _('Status') }}

{{ _('Loading view…') }}
{% include('footer') %} 07070100E81704000081A400000000000000000000000169B8AF0D0000041F000000080000000100000000000000000000002800000000usr/share/ucode/luci/template/header.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include(`themes/${theme}/header`); -%} 07070100E816F2000081A400000000000000000000000169B8AF0D00005A0A000000080000000100000000000000000000002300000000usr/share/ucode/luci/dispatcher.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { open, stat, glob, lsdir, unlink, basename } from 'fs'; import { striptags, entityencode } from 'html'; import { connect } from 'ubus'; import { cursor } from 'uci'; import { rand } from 'math'; import { openlog, syslog, closelog, LOG_INFO, LOG_WARNING, LOG_AUTHPRIV } from 'log'; import { hash, load_catalog, change_catalog, translate, ntranslate, getuid } from 'luci.core'; import { revision as luciversion, branch as luciname } from 'luci.version'; import { default as LuCIRuntime } from 'luci.runtime'; import { urldecode } from 'luci.http'; let ubus = connect(); let uci = cursor(); let indexcache = "/tmp/luci-indexcache"; let http, runtime, tree, luabridge; function error404(msg) { http.status(404, 'Not Found'); try { runtime.render('error404', { message: msg ?? 'Not found' }); } catch { http.header('Content-Type', 'text/plain; charset=UTF-8'); http.write(msg ?? 'Not found'); } return false; } function error500(msg, ex) { if (!http.eoh) { http.status(500, 'Internal Server Error'); http.header('Content-Type', 'text/html; charset=UTF-8'); } try { runtime.render('error500', { title: ex?.type ?? 'Runtime exception', message: replace( msg, /(\s)((\/[A-Za-z0-9_.-]+)+:\d+|\[string "[^"]+"\]:\d+)/g, '$1$2' ), exception: ex }); } catch { http.write('\n'); http.write(`

${trim(msg)}

\n`); if (ex) { http.write(`

${trim(ex.message)}

\n`); http.write(`
${trim(ex.stacktrace[0].context)}
\n`); } } exit(0); } function load_luabridge(optional) { if (luabridge == null) { try { luabridge = require('lua'); } catch (ex) { luabridge = false; if (!optional) error500('No Lua runtime installed'); } } return luabridge; } function determine_request_language() { let lang = uci.get('luci', 'main', 'lang') || 'auto'; if (lang == 'auto') { for (let tag in split(http.getenv('HTTP_ACCEPT_LANGUAGE'), ',')) { tag = split(trim(split(tag, ';')?.[0]), '-'); if (tag) { let cc = tag[1] ? `${tag[0]}_${lc(tag[1])}` : null; if (cc && uci.get('luci', 'languages', cc)) { lang = cc; break; } else if (uci.get('luci', 'languages', tag[0])) { lang = tag[0]; break; } } } } if (lang == 'auto') lang = 'en'; else lang = replace(lang, '_', '-'); if (load_catalog(lang, '/usr/lib/lua/luci/i18n')) change_catalog(lang); return lang; } function determine_version() { let res = { luciname, luciversion }; for (let f = open("/etc/os-release"), l = f?.read?.("line"); l; l = f.read?.("line")) { let kv = split(l, '=', 2); switch (kv[0]) { case 'NAME': res.distname = trim(kv[1], '"\' \n'); break; case 'VERSION': res.distversion = trim(kv[1], '"\' \n'); break; case 'HOME_URL': res.disturl = trim(kv[1], '"\' \n'); break; case 'BUILD_ID': res.distrevision = trim(kv[1], '"\' \n'); break; } } return res; } function read_jsonfile(path, defval) { let rv; try { rv = json(open(path, "r")); } catch (e) { rv = defval; } return rv; } function read_cachefile(file, reader) { let euid = getuid(), fstat = stat(file), fuid = fstat?.uid, perm = fstat?.perm; if (euid != fuid || perm?.group_read || perm?.group_write || perm?.group_exec || perm?.other_read || perm?.other_write || perm?.other_exec) return null; return reader(file); } function check_fs_depends(spec) { for (let path, kind in spec) { if (kind == 'directory') { if (!length(lsdir(path))) return false; } else if (kind == 'executable') { let fstat = stat(path); if (fstat?.type != 'file' || fstat?.user_exec == false) return false; } else if (kind == 'file') { let fstat = stat(path); if (fstat?.type != 'file') return false; } else if (kind == 'absent') { if (stat(path) != null) return false; } } return true; } function check_uci_depends_options(conf, s, opts) { if (type(opts) == 'string') { return (s['.type'] == opts); } else if (opts === true) { for (let option, value in s) if (ord(option) != 46) return true; } else if (type(opts) == 'object') { for (let option, value in opts) { let sval = s[option]; if (type(sval) == 'array') { if (!(value in sval)) return false; } else if (value === true) { if (sval == null) return false; } else { if (sval != value) return false; } } } return true; } function check_uci_depends_section(conf, sect) { for (let section, options in sect) { let stype = match(section, /^@([A-Za-z0-9_-]+)$/); if (stype) { let found = false; uci.load(conf); uci.foreach(conf, stype[1], (s) => { if (check_uci_depends_options(conf, s, options)) { found = true; return false; } }); if (!found) return false; } else { let s = uci.get_all(conf, section); if (!s || !check_uci_depends_options(conf, s, options)) return false; } } return true; } function check_uci_depends(conf) { for (let config, values in conf) { if (values == true) { let found = false; uci.load(config); uci.foreach(config, null, () => { found = true }); if (!found) return false; } else if (type(values) == 'object') { if (!check_uci_depends_section(config, values)) return false; } } return true; } function check_depends(spec) { if (type(spec?.depends?.fs) in ['array', 'object']) { let satisfied = false; let alternatives = (type(spec.depends.fs) == 'array') ? spec.depends.fs : [ spec.depends.fs ]; for (let alternative in alternatives) { if (check_fs_depends(alternative)) { satisfied = true; break; } } if (!satisfied) return false; } if (type(spec?.depends?.uci) in ['array', 'object']) { let satisfied = false; let alternatives = (type(spec.depends.uci) == 'array') ? spec.depends.uci : [ spec.depends.uci ]; for (let alternative in alternatives) { if (check_uci_depends(alternative)) { satisfied = true; break; } } if (!satisfied) return false; } return true; } function check_acl_depends(require_groups, groups) { if (length(require_groups)) { let writable = false; for (let group in require_groups) { let read = ('read' in groups?.[group]); let write = ('write' in groups?.[group]); if (!read && !write) return null; if (write) writable = true; } return writable; } return true; } function hash_filelist(files) { let hashval = 0x1b756362; for (let file in files) { let st = stat(file); if (st) hashval = hash(sprintf("%x|%x|%x", st.ino, st.mtime, st.size), hashval); } return hashval; } function build_pagetree() { let tree = { action: { type: 'firstchild' } }; let schema = { action: 'object', auth: 'object', cors: 'bool', depends: 'object', order: 'int', setgroup: 'string', setuser: 'string', title: 'string', wildcard: 'bool', firstchild_ineligible: 'bool' }; let files = glob('/usr/share/luci/menu.d/*.json', '/usr/lib/lua/luci/controller/*.lua', '/usr/lib/lua/luci/controller/*/*.lua'); let cachefile; if (indexcache) { cachefile = sprintf('%s.%08x.json', indexcache, hash_filelist(files)); let res = read_cachefile(cachefile, read_jsonfile); if (res) return res; for (let path in glob(indexcache + '.*.json')) unlink(path); } for (let file in files) { let data; if (substr(file, -5) == '.json') data = read_jsonfile(file); else if (load_luabridge(true)) data = runtime.call('luci.dispatcher', 'process_lua_controller', file); else warn(`Lua controller ${file} present but no Lua runtime installed.\n`); if (type(data) == 'object') { for (let path, spec in data) { if (type(spec) == 'object') { let node = tree; let has_wildcard = false; for (let s in match(path, /[^\/]+/g)) { if (s[0] == '*') { node.wildcard = true; has_wildcard = true; break; } node.children ??= {}; node.children[s[0]] ??= { satisfied: true }; node = node.children[s[0]]; } if (node !== tree) { for (let k, t in schema) if (type(spec[k]) == t) node[k] = spec[k]; /* Preserve distinct actions for wildcard vs. base path */ if (has_wildcard && type(spec.action) == 'object') node.wildcardaction = spec.action; else if (type(spec.action) == 'object') node.action = spec.action; node.satisfied = check_depends(spec); } } } } } if (cachefile) { let fd = open(cachefile, 'w', 0600); if (fd) { fd.write(tree); fd.close(); } } return tree; } function apply_tree_acls(node, acl) { for (let name, spec in node?.children) apply_tree_acls(spec, acl); if (node?.depends?.acl) { switch (check_acl_depends(node.depends.acl, acl["access-group"])) { case null: node.satisfied = false; break; case false: node.readonly = true; break; } } } function menu_json(acl) { tree ??= build_pagetree(); if (acl) apply_tree_acls(tree, acl); return tree; } function ctx_append(ctx, name, node) { ctx.path ??= []; push(ctx.path, name); ctx.acls ??= []; push(ctx.acls, ...(node?.depends?.acl || [])); ctx.auth = node.auth || ctx.auth; ctx.cors = node.cors || ctx.cors; ctx.suid = node.setuser || ctx.suid; ctx.sgid = node.setgroup || ctx.sgid; return ctx; } function session_retrieve(sid, allowed_users) { let sdat = ubus.call("session", "get", { ubus_rpc_session: sid }); let sacl = ubus.call("session", "access", { ubus_rpc_session: sid }); if (type(sdat?.values?.token) == 'string' && (!length(allowed_users) || sdat?.values?.username in allowed_users)) { // uci:set_session_id(sid) return { sid, data: sdat.values, acls: length(sacl) ? sacl : {} }; } return null; } function randomid(num_bytes) { let bytes = []; while (num_bytes-- > 0) push(bytes, sprintf('%02x', rand() % 256)); return join('', bytes); } function session_setup(user, pass, path) { let timeout = uci.get('luci', 'sauth', 'sessiontime'); let login = ubus.call("session", "login", { username: user, password: pass, timeout: timeout ? +timeout : null }); openlog('dispatcher.uc'); if (type(login?.ubus_rpc_session) == 'string') { ubus.call("session", "set", { ubus_rpc_session: login.ubus_rpc_session, values: { token: randomid(16) } }); syslog(LOG_INFO|LOG_AUTHPRIV, sprintf("luci: accepted login on /%s for %s from %s", join('/', path), user || "?", http.getenv("REMOTE_ADDR") || "?")); return session_retrieve(login.ubus_rpc_session); } syslog(LOG_WARNING|LOG_AUTHPRIV, sprintf("luci: failed login on /%s for %s from %s", join('/', path), user || "?", http.getenv("REMOTE_ADDR") || "?")); closelog(); } function check_authentication(method) { let m = match(method, /^([[:alpha:]]+):(.+)$/); let sid; switch (m?.[1]) { case 'cookie': sid = http.getcookie(m[2]); break; case 'param': sid = http.formvalue(m[2]); break; case 'query': sid = http.formvalue(m[2], true); break; } return sid ? session_retrieve(sid) : null; } function is_authenticated(auth) { for (let method in auth?.methods) { let session = check_authentication(method); if (session) return session; } return null; } function node_weight(node) { let weight = min(node.order ?? 9999, 9999); if (node.auth?.login) weight += 10000; return weight; } function clone(src) { switch (type(src)) { case 'array': return map(src, clone); case 'object': let dest = {}; for (let k, v in src) dest[k] = clone(v); return dest; default: return src; } } function resolve_firstchild(node, session, login_allowed, ctx) { let candidate, candidate_ctx; for (let name, child in node.children) { if (!child.satisfied) continue; if (!session) session = is_authenticated(node.auth); let cacl = child.depends?.acl; let login = !session && (login_allowed || child.auth?.login); if (login || check_acl_depends(cacl, session?.acls?.["access-group"]) != null) { if (child.title && type(child.action) == "object") { let child_ctx = ctx_append(clone(ctx), name, child); if (child.action.type == "firstchild") { if (!candidate || node_weight(candidate) > node_weight(child)) { let have_grandchild = resolve_firstchild(child, session, login, child_ctx); if (have_grandchild) { candidate = child; candidate_ctx = child_ctx; } } } else if (!child.firstchild_ineligible) { if (!candidate || node_weight(candidate) > node_weight(child)) { candidate = child; candidate_ctx = child_ctx; } } } } } if (!candidate) return false; for (let k, v in candidate_ctx) ctx[k] = v; return true; } function resolve_page(tree, request_path) { let node = tree; let login = false; let session = null; let ctx = {}; for (let i, s in request_path) { node = node.children?.[s]; if (!node?.satisfied) break; ctx_append(ctx, s, node); if (!session) session = is_authenticated(node.auth); if (!login && node.auth?.login) login = true; /* If this node is marked as wildcard, check if the next segment * matches a child node. Only apply wildcard behaviour (capturing * remaining segments as args) if no child matches, allowing * deeper routes like foo/bar/* to work alongside * foo/* */ if (node.wildcard) { let next_segment = request_path[i + 1]; let has_matching_child = next_segment && node.children?.[next_segment]?.satisfied; if (!has_matching_child) { ctx.request_args = []; ctx.request_path = ctx.path ? [ ...ctx.path ] : []; while (++i < length(request_path)) { push(ctx.request_path, request_path[i]); push(ctx.request_args, request_path[i]); } break; } } } if (node?.action?.type == 'firstchild') resolve_firstchild(node, session, login, ctx); ctx.acls ??= {}; ctx.path ??= []; ctx.request_args ??= []; ctx.request_path ??= request_path ? [ ...request_path ] : []; ctx.authsession = session?.sid; ctx.authtoken = session?.data?.token; ctx.authuser = session?.data?.username; ctx.authacl = session?.acls; node = tree; for (let s in ctx.path) { node = node.children[s]; assert(node, "Internal node resolve error"); } return { node, ctx, session }; } function require_post_security(target, args) { if (target?.type == 'arcombine') return require_post_security(length(args) ? target?.targets?.[1] : target?.targets?.[0], args); if (type(target?.post) == 'object') { for (let param_name, required_val in target.post) { let request_val = http.formvalue(param_name); if ((type(required_val) == 'string' && request_val != required_val) || (required_val == true && request_val == null)) return false; } return true; } return (target?.post == true); } function test_post_security(authtoken) { if (http.getenv("REQUEST_METHOD") != "POST") { http.status(405, "Method Not Allowed"); http.header("Allow", "POST"); return false; } if (http.formvalue("token") != authtoken) { http.status(403, "Forbidden"); runtime.render("csrftoken"); return false; } return true; } function build_url(...path) { let url = [ http.getenv('SCRIPT_NAME') ?? '' ]; for (let p in path) if (match(p, /^[A-Za-z0-9_%.\/,;-]+$/)) push(url, '/', p); if (length(url) == 1) push(url, '/'); return join('', url); } function lookup(...segments) { let node = menu_json(); let path = []; for (let segment in segments) for (let name in split(segment, '/')) push(path, name); for (let name in path) { node = node.children[name]; if (!node) return null; if (node.leaf) break; } return { node, url: build_url(...path) }; } function rollback_pending() { const now = time(); const rv = ubus.call('session', 'get', { ubus_rpc_session: '00000000000000000000000000000000', keys: [ 'rollback' ] }); if (type(rv?.values?.rollback?.token) != 'string' || type(rv?.values?.rollback?.session) != 'string' || type(rv?.values?.rollback?.timeout) != 'int' || rv.values.rollback.timeout <= now) return false; return { remaining: rv.values.rollback.timeout - now, session: rv.values.rollback.session, token: rv.values.rollback.token }; } let dispatch; function render_action(fn) { const data = render(fn); http.write_headers(); http.output(data); } function run_action(request_path, lang, tree, resolved, action) { switch ((type(action) == 'object') ? action.type : 'none') { case 'template': if (runtime.is_ucode_template(action.path)) runtime.render(action.path, {}); else render_action(() => { runtime.call('luci.dispatcher', 'render_lua_template', action.path); }); break; case 'view': runtime.render('view', { view: action.path }); break; case 'call': render_action(() => { runtime.call(action.module, action.function, ...(action.parameters ?? []), ...resolved.ctx.request_args ); }); break; case 'function': const mod = require(action.module); assert(type(mod[action.function]) == 'function', `Module '${action.module}' does not export function '${action.function}'`); render_action(() => { call(mod[action.function], mod, runtime.env, ...(action.parameters ?? []), ...resolved.ctx.request_args ); }); break; case 'cbi': render_action(() => { runtime.call('luci.dispatcher', 'invoke_cbi_action', action.path, null, ...resolved.ctx.request_args ); }); break; case 'form': render_action(() => { runtime.call('luci.dispatcher', 'invoke_form_action', action.path, ...resolved.ctx.request_args ); }); break; case 'alias': dispatch(http, [ ...split(action.path, '/'), ...resolved.ctx.request_args ]); break; case 'rewrite': dispatch(http, [ ...splice([ ...request_path ], 0, action.remove), ...split(action.path, '/'), ...resolved.ctx.request_args ]); break; case 'firstchild': if (!length(tree.children)) { error404("No root node was registered, this usually happens if no module was installed.\n" + "Install luci-mod-admin-full and retry. " + "If the module is already installed, try removing the /tmp/luci-indexcache file."); break; } /* fall through */ case 'none': error404(`No page is registered at '/${entityencode(join("/", resolved.ctx.request_path))}'.\n` + "If this url belongs to an extension, make sure it is properly installed.\n" + "If the extension was recently installed, try removing the /tmp/luci-indexcache file."); break; default: error500(`Unhandled action type ${action?.type ?? '?'}`); } } dispatch = function(_http, path) { http = _http; let version = determine_version(); let lang = determine_request_language(); runtime = runtime || LuCIRuntime({ http, ubus, uci, ctx: {}, version, config: { main: uci.get_all('luci', 'main') ?? {}, apply: uci.get_all('luci', 'apply') ?? {} }, dispatcher: { rollback_pending, is_authenticated, load_luabridge, lookup, menu_json, build_url, randomid, error404, error500, lang }, striptags, entityencode, _: (...args) => translate(...args) ?? args[0], N_: (...args) => ntranslate(...args) ?? (args[0] == 1 ? args[1] : args[2]), }); try { let menu = menu_json(); path ??= map(match(http.getenv('PATH_INFO'), /[^\/]+/g), m => urldecode(m[0])); let resolved = resolve_page(menu, path); runtime.env.ctx = resolved.ctx; runtime.env.dispatched = resolved.node; runtime.env.requested ??= resolved.node; if (length(resolved.ctx.auth)) { let session = is_authenticated(resolved.ctx.auth); if (!session && resolved.ctx.auth.login) { let user = http.getenv('HTTP_AUTH_USER'); let pass = http.getenv('HTTP_AUTH_PASS'); if (user == null && pass == null) { user = http.formvalue('luci_username'); pass = http.formvalue('luci_password'); } if (user != null && pass != null) session = session_setup(user, pass, resolved.ctx.request_path); if (!session) { resolved.ctx.path = []; http.status(403, 'Forbidden'); http.header('X-LuCI-Login-Required', 'yes'); let scope = { duser: 'root', fuser: user }; let theme_sysauth = `themes/${basename(runtime.env.media)}/sysauth`; if (runtime.is_ucode_template(theme_sysauth) || runtime.is_lua_template(theme_sysauth)) { try { return runtime.render(theme_sysauth, scope); } catch (e) { runtime.env.media_error = `${e}`; } } return runtime.render('sysauth', scope); } let cookie_name = (http.getenv('HTTPS') == 'on') ? 'sysauth_https' : 'sysauth_http', cookie_secure = (http.getenv('HTTPS') == 'on') ? '; secure' : ''; http.header('Set-Cookie', `${cookie_name}=${session.sid}; path=${build_url()}; SameSite=strict; HttpOnly${cookie_secure}`); http.redirect(build_url(...resolved.ctx.request_path)); return; } if (!session) { http.status(403, 'Forbidden'); http.header('X-LuCI-Login-Required', 'yes'); return; } resolved.ctx.authsession ??= session.sid; resolved.ctx.authtoken ??= session.data?.token; resolved.ctx.authuser ??= session.data?.username; resolved.ctx.authacl ??= session.acls; /* In case the Lua runtime was already initialized, e.g. by probing legacy * theme header templates, make sure to update the session ID of the uci * module. */ if (runtime.L) { runtime.L.invoke('require', 'luci.model.uci'); runtime.L.get('luci', 'model', 'uci').invoke('set_session_id', session.sid); } } if (length(resolved.ctx.acls)) { let perm = check_acl_depends(resolved.ctx.acls, resolved.ctx.authacl?.['access-group']); if (perm == null) { http.status(403, 'Forbidden'); return; } if (resolved.node) resolved.node.readonly = !perm; } let action = resolved.node.action; /* If this node matched a wildcard and we have request args, * prefer the wildcard-specific action when defined. */ if (length(resolved.ctx.request_args) && type(resolved.node.wildcardaction) == 'object') action = resolved.node.wildcardaction; if (action?.type == 'arcombine') action = length(resolved.ctx.request_args) ? action.targets?.[1] : action.targets?.[0]; if (resolved.ctx.cors && http.getenv('REQUEST_METHOD') == 'OPTIONS') { http.status(200, 'OK'); http.header('Access-Control-Allow-Origin', http.getenv('HTTP_ORIGIN') ?? '*'); http.header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS'); return; } if (require_post_security(action) && !test_post_security(resolved.ctx.authtoken)) return; run_action(path, lang, menu, resolved, action); } catch (ex) { error500('Unhandled exception during request dispatching', ex); } }; export default dispatch; 07070100E816F7000081A400000000000000000000000169B8AF0D000000CC000000080000000100000000000000000000001F00000000usr/share/ucode/luci/uhttpd.uc{% import dispatch from 'luci.dispatcher'; import request from 'luci.http'; global.handle_request = function(env) { let req = request(env, uhttpd.recv, uhttpd.send); dispatch(req); req.close(); }; 07070100E816F3000081A400000000000000000000000169B8AF0D00003392000000080000000100000000000000000000001D00000000usr/share/ucode/luci/http.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { urlencode as _urlencode, urldecode as _urldecode, urlencoded_parser, multipart_parser, header_attribute, ENCODE_IF_NEEDED, ENCODE_FULL, DECODE_IF_NEEDED, DECODE_PLUS } from 'lucihttp'; import { error as fserror, stdin, stdout, mkstemp } from 'fs'; // luci.http module scope export let HTTP_MAX_CONTENT = 1024*100; // 100 kB maximum content size // Decode a mime encoded http message body with multipart/form-data // Content-Type. Stores all extracted data associated with its parameter name // in the params table within the given message object. Multiple parameter // values are stored as tables, ordinary ones as strings. // If an optional file callback function is given then it is fed with the // file contents chunk by chunk and only the extracted file name is stored // within the params table. The callback function will be called subsequently // with three arguments: // o Table containing decoded (name, file) and raw (headers) mime header data // o String value containing a chunk of the file data // o Boolean which indicates whether the current chunk is the last one (eof) export function mimedecode_message_body(src, msg, file_cb) { let len = 0, maxlen = +msg.env.CONTENT_LENGTH; let err, header, field, parser; parser = multipart_parser(msg.env.CONTENT_TYPE, function(what, buffer, length) { if (what == parser.PART_INIT) { field = {}; } else if (what == parser.HEADER_NAME) { header = lc(buffer); } else if (what == parser.HEADER_VALUE && header) { if (lc(header) == 'content-disposition' && header_attribute(buffer, null) == 'form-data') { field.name = header_attribute(buffer, 'name'); field.file = header_attribute(buffer, 'filename'); field[1] = field.file; } field.headers = field.headers || {}; field.headers[header] = buffer; } else if (what == parser.PART_BEGIN) { return !field.file; } else if (what == parser.PART_DATA && field.name && length > 0) { if (field.file) { if (file_cb) { file_cb(field, buffer, false); msg.params[field.name] = msg.params[field.name] || field; } else { if (!field.fd) field.fd = mkstemp(field.name); if (field.fd) { field.fd.write(buffer); msg.params[field.name] = msg.params[field.name] || field; } } } else { field.value = buffer; } } else if (what == parser.PART_END && field.name) { if (field.file && msg.params[field.name]) { if (file_cb) file_cb(field, '', true); else if (field.fd) field.fd.seek(0); } else { let val = msg.params[field.name]; if (type(val) == 'array') push(val, field.value || ''); else if (val != null) msg.params[field.name] = [ val, field.value || '' ]; else msg.params[field.name] = field.value || ''; } field = null; } else if (what == parser.ERROR) { err = buffer; } return true; }, HTTP_MAX_CONTENT); while (true) { let chunk = src(); len += length(chunk); if (maxlen && len > maxlen + 2) die('Message body size exceeds Content-Length'); if (!parser.parse(chunk)) die(err); if (chunk == null) break; } }; // Decode an urlencoded http message body with application/x-www-urlencoded // Content-Type. Stores all extracted data associated with its parameter name // in the params table within the given message object. Multiple parameter // values are stored as tables, ordinary ones as strings. export function urldecode_message_body(src, msg) { let len = 0, maxlen = +msg.env.CONTENT_LENGTH; let err, name, value, parser; parser = urlencoded_parser(function (what, buffer, length) { if (what == parser.TUPLE) { name = null; value = null; } else if (what == parser.NAME) { name = _urldecode(buffer, DECODE_PLUS); } else if (what == parser.VALUE && name) { let val = msg.params[name]; if (type(val) == 'array') push(val, _urldecode(buffer, DECODE_PLUS) || ''); else if (val != null) msg.params[name] = [ val, _urldecode(buffer, DECODE_PLUS) || '' ]; else msg.params[name] = _urldecode(buffer, DECODE_PLUS) || ''; } else if (what == parser.ERROR) { err = buffer; } return true; }, HTTP_MAX_CONTENT); while (true) { let chunk = src(); len += length(chunk); if (maxlen && len > maxlen + 2) die('Message body size exceeds Content-Length'); if (!parser.parse(chunk)) die(err); if (chunk == null) break; } }; // This function will examine the Content-Type within the given message object // to select the appropriate content decoder. // Currently the application/x-www-urlencoded and application/form-data // mime types are supported. If the encountered content encoding can't be // handled then the whole message body will be stored unaltered as 'content' // property within the given message object. export function parse_message_body(src, msg, filecb) { if (msg.env.CONTENT_LENGTH || msg.env.REQUEST_METHOD == 'POST') { let ctype = header_attribute(msg.env.CONTENT_TYPE, null); // Is it multipart/mime ? if (ctype == 'multipart/form-data') return mimedecode_message_body(src, msg, filecb); // Is it application/x-www-form-urlencoded ? else if (ctype == 'application/x-www-form-urlencoded') return urldecode_message_body(src, msg); // Unhandled encoding // If a file callback is given then feed it chunk by chunk, else // store whole buffer in message.content let sink; // If we have a file callback then feed it if (type(filecb) == 'function') { let meta = { name: 'raw', encoding: msg.env.CONTENT_TYPE }; sink = (chunk) => { if (chunk != null) return filecb(meta, chunk, false); else return filecb(meta, null, true); }; } // ... else append to .content else { let chunks = [], len = 0; sink = (chunk) => { len += length(chunk); if (len > HTTP_MAX_CONTENT) die('POST data exceeds maximum allowed length'); if (chunk != null) { push(chunks, chunk); } else { msg.content = join('', chunks); msg.content_length = len; } }; } // Pump data... while (true) { let chunk = src(); sink(chunk); if (chunk == null) break; } return true; } return false; }; export function build_querystring(q) { let s = []; for (let k, v in q) { push(s, length(s) ? '&' : '?', _urlencode(k, ENCODE_IF_NEEDED | ENCODE_FULL) || k, '=', _urlencode(v, ENCODE_IF_NEEDED | ENCODE_FULL) || v ); } return join('', s); }; export function urlencode(value) { if (value == null) return null; value = '' + value; return _urlencode(value, ENCODE_IF_NEEDED | ENCODE_FULL) || value; }; export function urldecode(value, decode_plus) { if (value == null) return null; value = '' + value; return _urldecode(value, DECODE_IF_NEEDED | (decode_plus ? DECODE_PLUS : 0)) || value; }; // Extract and split urlencoded data pairs, separated bei either "&" or ";" // from given url or string. Returns a table with urldecoded values. // Simple parameters are stored as string values associated with the parameter // name within the table. Parameters with multiple values are stored as array // containing the corresponding values. export function urldecode_params(url, tbl) { let parser, name, value; let params = tbl || {}; parser = urlencoded_parser(function(what, buffer, length) { if (what == parser.TUPLE) { name = null; value = null; } else if (what == parser.NAME) { name = _urldecode(buffer); } else if (what == parser.VALUE && name) { params[name] = _urldecode(buffer) || ''; } return true; }); if (parser) { let m = match(('' + (url || '')), /[^?]*$/); parser.parse(m ? m[0] : ''); parser.parse(null); } return params; }; // Encode each key-value-pair in given table to x-www-urlencoded format, // separated by '&'. Tables are encoded as parameters with multiple values by // repeating the parameter name with each value. export function urlencode_params(tbl) { let enc = []; for (let k, v in tbl) { if (type(v) == 'array') { for (let v2 in v) { if (length(enc)) push(enc, '&'); push(enc, _urlencode(k), '=', _urlencode('' + v2)); } } else { if (length(enc)) push(enc, '&'); push(enc, _urlencode(k), '=', _urlencode('' + v)); } } return join(enc, ''); }; // Default IO routines suitable for CGI invocation let avail_len = +getenv('CONTENT_LENGTH'); const default_source = () => { let rlen = min(avail_len, 4096); if (rlen == 0) { stdin.close(); return null; } let chunk = stdin.read(rlen); if (chunk == null) die(`Input read error: ${fserror()}`); avail_len -= length(chunk); return chunk; }; const default_sink = (...chunks) => { for (let chunk in chunks) stdout.write(chunk); stdout.flush(); }; const Class = { formvalue: function(name, noparse) { if (!noparse && !this.parsed_input) this._parse_input(); if (name != null) return this.message.params[name]; else return this.message.params; }, formvaluetable: function(prefix) { let vals = {}; prefix = (prefix || '') + '.'; if (!this.parsed_input) this._parse_input(); for (let k, v in this.message.params) if (index(k, prefix) == 0) vals[substr(k, length(prefix))] = '' + v; return vals; }, content: function() { if (!this.parsed_input) this._parse_input(); return this.message.content; }, getcookie: function(name) { return header_attribute(`cookie; ${this.getenv('HTTP_COOKIE') ?? ''}`, name); }, getenv: function(name) { if (name != null) return this.message.env[name]; else return this.message.env; }, setfilehandler: function(callback) { if (type(callback) == 'resource' && type(callback.call) == 'function') this.filehandler = (...args) => callback.call(...args); else if (type(callback) == 'function') this.filehandler = callback; else die('Invalid callback argument for setfilehandler()'); if (!this.parsed_input) return; // If input has already been parsed then uploads are stored as unlinked // temporary files pointed to by open file handles in the parameter // value table. Loop all params, and invoke the file callback for any // param with an open file handle. for (let name, value in this.message.params) { while (value?.fd) { let data = value.fd.read(1024); let eof = (length(data) == 0); this.filehandler(value, data, eof); if (eof) { value.fd.close(); value.fd = null; } } } }, _parse_input: function() { parse_message_body( this.input, this.message, this.filehandler ); this.parsed_input = true; }, close: function() { this.write_headers(); this.closed = true; }, header: function(key, value) { this.headers ??= {}; this.headers[lc(key)] = value; }, prepare_content: function(mime) { if (!this.headers?.['content-type']) { if (mime == 'application/xhtml+xml') { if (index(this.getenv('HTTP_ACCEPT'), mime) == -1) { mime = 'text/html; charset=UTF-8'; this.header('Vary', 'Accept'); } } this.header('Content-Type', mime); } }, status: function(code, message) { this.status_code = code ?? 200; this.status_message = message ?? 'OK'; }, write_headers: function() { if (this.eoh) return; if (!this.status_code) this.status(); if (!this.headers?.['content-type']) this.header('Content-Type', 'text/html; charset=UTF-8'); if (!this.headers?.['cache-control']) { this.header('Cache-Control', 'no-cache'); this.header('Expires', '0'); } if (!this.headers?.['x-frame-options']) this.header('X-Frame-Options', 'SAMEORIGIN'); if (!this.headers?.['x-xss-protection']) this.header('X-XSS-Protection', '1; mode=block'); if (!this.headers?.['x-content-type-options']) this.header('X-Content-Type-Options', 'nosniff'); this.output('Status: '); this.output(this.status_code); this.output(' '); this.output(this.status_message); this.output('\r\n'); for (let k, v in this.headers) { this.output(k); this.output(': '); this.output(v); this.output('\r\n'); } this.output('\r\n'); this.eoh = true; }, // If the content chunk is nil this function will automatically invoke close. write: function(content) { if (content != null && !this.closed) { this.write_headers(); this.output(content); return true; } else { this.close(); } }, redirect: function(url) { this.status(302, 'Found'); this.header('Location', url ?? '/'); this.close(); }, write_json: function(value) { this.write(sprintf('%.J', value)); }, urlencode, urlencode_params, urldecode, urldecode_params, build_querystring }; export default function(env, sourcein, sinkout) { return proto({ input: sourcein ?? default_source, output: sinkout ?? default_sink, // File handler nil by default to let .content() work file: null, // HTTP-Message table message: { env, headers: {}, params: urldecode_params(env?.QUERY_STRING ?? '') }, parsed_input: false }, Class); }; 07070100E816FB000041ED00000000000000000000000369B8AF0D00000000000000080000000100000000000000000000002000000000usr/share/ucode/luci/controller07070100E816FC000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000002600000000usr/share/ucode/luci/controller/admin07070100E816FD000081A400000000000000000000000169B8AF0D00000FC1000000080000000100000000000000000000002F00000000usr/share/ucode/luci/controller/admin/index.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { load_catalog, change_catalog, get_translations } from 'luci.core'; const ubus_types = [ null, 'array', 'object', 'string', null, // INT64 'number', null, // INT16, 'boolean', 'double' ]; function ubus_reply(id, data, code, errmsg) { const reply = { jsonrpc: '2.0', id }; if (errmsg) reply.error = { code, message: errmsg }; else if (type(code) == 'object') reply.result = code; else if (data != null) reply.result = [ code, data ]; else reply.result = [ code ]; return reply; } function ubus_access(sid, obj, fun) { return (ubus.call('session', 'access', { ubus_rpc_session: sid, scope: 'ubus', object: obj, function: fun })?.access == true); } function ubus_request(req) { if (type(req?.method) != 'string' || req?.jsonrpc != '2.0' || req?.id == null) return ubus_reply(null, null, -32600, 'Invalid request'); if (req.method == 'call') { if (type(req?.params) != 'array' || length(req.params) < 3) return ubus_reply(null, null, -32600, 'Invalid parameters'); let sid = req.params[0], obj = req.params[1], fun = req.params[2], arg = req.params[3] ?? {}; if (type(arg) != 'object' || exists(arg, 'ubus_rpc_session')) return ubus_reply(req.id, null, -32602, 'Invalid parameters'); if (sid == '00000000000000000000000000000000' && ctx.authsession) sid = ctx.authsession; if (!ubus_access(sid, obj, fun)) return ubus_reply(req.id, null, -32002, 'Access denied'); arg.ubus_rpc_session = sid; // clear error ubus.error(); const res = ubus.call(obj, fun, arg); return ubus_reply(req.id, res, ubus.error(true) ?? 0); } if (req.method == 'list') { if (req?.params == null || (type(req.params) == 'array' && length(req.params) == 0)) { return ubus_reply(req.id, null, ubus.list()); } else if (type(req.params) == 'array') { const rv = {}; for (let param in req.params) { if (type(param) != 'string') return ubus_reply(req.id, null, -32602, 'Invalid parameters'); for (let m, p in ubus.list(param)?.[0]) { for (let pn, pt in p) { rv[param] ??= {}; rv[param][m] ??= {}; rv[param][m][pn] = ubus_types[pt] ?? 'unknown'; } } } return ubus_reply(req.id, null, rv); } else { return ubus_reply(req.id, null, -32602, 'Invalid parameters') } } return ubus_reply(req.id, null, -32601, 'Method not found') } return { action_ubus: function() { let request; try { request = json(http.content()); } catch { request = null; } http.prepare_content('application/json; charset=UTF-8'); if (type(request) == 'object') http.write_json(ubus_request(request)); else if (type(request) == 'array') http.write_json(map(request, ubus_request)); else http.write_json(ubus_reply(null, null, -32700, 'Parse error')) }, action_translations: function(reqlang) { if (reqlang != null && reqlang != dispatcher.lang) { load_catalog(reqlang, '/usr/lib/lua/luci/i18n'); change_catalog(reqlang); } http.prepare_content('application/javascript; charset=UTF-8'); http.write('window.TR={'); get_translations((key, val) => http.write(sprintf('"%08x":%J,', key, val))); http.write('};'); }, action_logout: function() { const url = dispatcher.build_url(); if (ctx.authsession) { ubus.call('session', 'destroy', { ubus_rpc_session: ctx.authsession }); if (http.getenv('HTTPS') == 'on') http.header('Set-Cookie', `sysauth_https=; expires=Thu, 01 Jan 1970 01:00:00 GMT; path=${url}`); else http.header('Set-Cookie', `sysauth_http=; expires=Thu, 01 Jan 1970 01:00:00 GMT; path=${url}`); } http.redirect(url); }, action_menu: function() { const session = dispatcher.is_authenticated({ methods: [ 'cookie:sysauth_https', 'cookie:sysauth_http' ] }); const menu = dispatcher.menu_json(session?.acls ?? {}) ?? {}; http.prepare_content('application/json; charset=UTF-8'); http.write_json(menu); } }; 07070100E816FE000081A400000000000000000000000169B8AF0D00000CE8000000080000000100000000000000000000002D00000000usr/share/ucode/luci/controller/admin/uci.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { STATUS_NO_DATA, STATUS_PERMISSION_DENIED } from 'ubus'; let last_ubus_error; const ubus_error_map = [ 200, 'OK', 400, 'Invalid command', 400, 'Invalid argument', 404, 'Method not found', 404, 'Not found', 204, 'No data', 403, 'Permission denied', 504, 'Timeout', 500, 'Not supported', 500, 'Unknown error', 503, 'Connection failed', 500, 'Out of memory', 400, 'Parse error', 500, 'System error', ]; function ubus_call(object, method, args) { ubus.error(); // clear previous error let res = ubus.call(object, method, args); last_ubus_error = ubus.error(true); return res ?? !last_ubus_error; } function ubus_state_to_http(err) { let code = ubus_error_map[(err << 1) + 0] ?? 200; let msg = ubus_error_map[(err << 1) + 1] ?? 'OK'; http.status(code, msg); if (code != 204) { http.prepare_content('text/plain'); http.write(msg); } } function uci_apply(rollback) { if (rollback) { const timeout = +(config?.apply?.rollback ?? 90) || 0; const success = ubus_call('uci', 'apply', { ubus_rpc_session: ctx.authsession, timeout: max(timeout, 90), rollback: true }); if (success) { const token = dispatcher.randomid(16); ubus.call('session', 'set', { ubus_rpc_session: '00000000000000000000000000000000', values: { rollback: { token, session: ctx.authsession, timeout: time() + timeout } } }); return token; } return null; } else { let changes = ubus_call('uci', 'changes', { ubus_rpc_session: ctx.authsession })?.changes; for (let config in changes) if (!ubus_call('uci', 'commit', { ubus_rpc_session: ctx.authsession, config })) return false; return ubus_call('uci', 'apply', { ubus_rpc_session: ctx.authsession, rollback: false }); } } function uci_confirm(token) { const data = ubus.call('session', 'get', { ubus_rpc_session: '00000000000000000000000000000000', keys: [ 'rollback' ] })?.values?.rollback; if (type(data?.token) != 'string' || type(data?.session) != 'string' || type(data?.timeout) != 'int' || data.timeout < time()) { last_ubus_error = STATUS_NO_DATA; return false; } if (token != data.token) { last_ubus_error = STATUS_PERMISSION_DENIED; return false; } if (!ubus_call('uci', 'confirm', { ubus_rpc_session: data.session })) return false; ubus_call('session', 'set', { ubus_rpc_session: '00000000000000000000000000000000', values: { rollback: {} } }); return true; } return { action_apply_rollback: function() { const token = uci_apply(true); if (token) { http.prepare_content('application/json; charset=UTF-8'); http.write_json({ token }); } else { ubus_state_to_http(last_ubus_error); } }, action_apply_unchecked: function() { uci_apply(false); ubus_state_to_http(last_ubus_error); }, action_confirm: function() { uci_confirm(http.formvalue('token')); ubus_state_to_http(last_ubus_error); }, action_revert: function() { for (let config in ubus_call('uci', 'changes', { ubus_rpc_session: ctx.authsession })?.changes) if (!ubus_call('uci', 'revert', { ubus_rpc_session: ctx.authsession, config })) break; ubus_state_to_http(last_ubus_error); } }; 07070100E816F8000081A400000000000000000000000169B8AF0D00000063000000080000000100000000000000000000002000000000usr/share/ucode/luci/version.ucexport const revision = '26.075.80566~6efa8ae', branch = 'LuCI (HEAD detached at 6efa8ae) branch'; 07070100E81637000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001500000000usr/share/ucode/wifi07070100E81654000081A400000000000000000000000169B8AF0D00000A41000000080000000100000000000000000000002100000000usr/share/ucode/wifi/validate.uc'use strict'; import { log } from 'wifi.common'; import * as fs from 'fs'; const schemas = { device: json(fs.readfile('/usr/share/schema/wireless.wifi-device.json')).properties, iface: json(fs.readfile('/usr/share/schema/wireless.wifi-iface.json')).properties, vlan: json(fs.readfile('/usr/share/schema/wireless.wifi-vlan.json')).properties, station: json(fs.readfile('/usr/share/schema/wireless.wifi-station.json')).properties, }; const types = { "array": 1, "string": 3, "number": 5, "boolean": 7, }; function dump_option(schema, key) { let _key = (schema[key].type == 'alias') ? schema[key].default : key; return [ key, types[schema[_key].type] ]; } export function dump_options() { let dump = { "name": "mac80211", }; for (let k, v in schemas) { dump[k] = []; for (let option in v) push(dump[k], dump_option(v, option)); }; printf('%J\n', dump); return 0; }; function abort(msg) { log(msg); die(); } function validate_value(schema, key, value) { switch(schema.type) { case 'number': value = +value; if (schema.minimum && value < schema.minimum) abort(`${key}: ${value} is lower than the minimum value`); if (schema.maximum && value > schema.maximum) abort(`${key}: ${value} is larger than the maximum value`); if (schema.enum && !(value in schema.enum)) abort(`${key}: ${value} has to be one of ${schema.enum}`); break; case 'boolean': value = !!+value; break; case 'string': if (schema.enum && !(value in schema.enum)) abort(`${key}: ${value} has to be one of ${schema.enum}`); break; case 'array': if (type(value) != 'array') value = [ value ]; if (schema.items?.type) for (let k, v in value) value[k] = validate_value(schema.items, key, v); break; } return value; } export function validate(schema, dict) { schema = schemas[schema]; /* complain about anything that is not in the schema */ for (let k, v in dict) { if (substr(k, 0, 1) == '.') continue; if (schema[k]) continue; log(`${k} is not present in the schema`); } /* convert all aliases */ for (let k, v in dict) { if (schema[k]?.type != 'alias') continue; if (schema[k].default == null) abort(`${k} alias does not have a default value`); dict[schema[k].default] = v; delete dict[k]; } /* set defaults */ for (let k, v in schema) { if (schema[k]?.type == 'alias') continue; if (dict[k] != null || schema[k].default == null) continue; dict[k] = schema[k].default; } /* validate value constraints */ for (let k, v in dict) { if (!schema[k]) continue; dict[k] = validate_value(schema[k], k, v); } }; 07070100E81646000081A400000000000000000000000169B8AF0D00000431000000080000000100000000000000000000001F00000000usr/share/ucode/wifi/netifd.uc'use strict'; import { log } from 'wifi.common'; import * as fs from 'fs'; const CMD_UP = 0; const CMD_SET_DATA = 1; const CMD_PROCESS_ADD = 2; const CMD_PROCESS_KILL_ALL = 3; const CMD_SET_RETRY = 4; export function notify(command, params, data) { params ??= {}; data ??= {}; global.ubus.call('network.wireless', 'notify', { command, device: global.radio, ...params, data }); }; export function set_up() { notify(CMD_UP); }; export function set_data(data) { notify(CMD_SET_DATA, null, data); }; export function add_process(exe, pid, required, keep) { exe = fs.realpath(exe); notify(CMD_PROCESS_ADD, null, { pid, exe, required, keep }); }; export function set_retry(retry) { notify(CMD_SET_RETRY, null, { retry }); }; export function set_vif(interface, ifname) { notify(CMD_SET_DATA, { interface }, { ifname }); }; export function set_vlan(interface, ifname, vlan) { notify(CMD_SET_DATA, { interface, vlan }, { ifname }); }; export function setup_failed(reason) { log(`Device setup failed: ${reason}`); printf('%s\n', reason); set_retry(false); }; 07070100E81638000081A400000000000000000000000169B8AF0D00003B66000000080000000100000000000000000000001B00000000usr/share/ucode/wifi/ap.uc'use strict'; import * as libuci from 'uci'; import { md5 } from 'digest'; import * as fs from 'fs'; import { append, append_raw, append_value, append_vars, append_string_vars, comment, push_config, set_default, touch_file } from 'wifi.common'; import * as netifd from 'wifi.netifd'; import * as iface from 'wifi.iface'; function iface_setup(config) { switch(config.fixup) { case 'owe': config.ignore_broadcast_ssid = true; config.ssid = config.ssid + 'OWE'; break; case 'owe-transition': let ifname = config.ifname; config.ifname = config.owe_transition_ifname; config.owe_transition_ifname = ifname; config.owe_transition_ssid = config.ssid + 'OWE'; config.encryption = 'none'; config.ignore_broadcast_ssid = false; iface.prepare(config); break; } comment('Setup interface: ' + config.ifname); config.bridge = config.network_bridge; config.snoop_iface = config.network_ifname; if (!config.wds) config.wds_bridge = null; else config.wds_sta = true; if (!config.idx) append('interface', config.ifname); else append('bss', config.ifname); if (config.multicast_to_unicast || config.proxy_arp) config.ap_isolate = 1; if (config.proxy_arp) set_default(config, 'na_mcast_to_ucast', true); append('bssid', config.macaddr); config.ssid2 = config.ssid; config.wmm_enabled = 1; append_string_vars(config, [ 'ssid2' ]); append_vars(config, [ 'ctrl_interface', 'ap_isolate', 'max_num_sta', 'ap_max_inactivity', 'airtime_bss_weight', 'airtime_bss_limit', 'airtime_sta_weight', 'bss_load_update_period', 'chan_util_avg_period', 'disassoc_low_ack', 'skip_inactivity_poll', 'ignore_broadcast_ssid', 'uapsd_advertisement_enabled', 'utf8_ssid', 'multi_ap', 'multi_ap_vlanid', 'multi_ap_profile', 'tdls_prohibit', 'bridge', 'wds_sta', 'wds_bridge', 'snoop_iface', 'vendor_elements', 'nas_identifier', 'radius_acct_interim_interval', 'ocv', 'beacon_prot', 'spp_amsdu', 'multicast_to_unicast', 'preamble', 'proxy_arp', 'per_sta_vif', 'mbo', 'bss_transition', 'wnm_sleep_mode', 'wnm_sleep_mode_no_keys', 'qos_map_set', 'max_listen_int', 'dtim_period', 'wmm_enabled', 'start_disabled', 'na_mcast_to_ucast', 'no_probe_resp_if_max_sta', ]); } function iface_authentication_server(config) { for (let server in config.auth_server_addr) { append('auth_server_addr', server); append_vars(config, [ 'auth_server_port', 'auth_server_shared_secret' ]); } append_vars(config, [ 'radius_auth_req_attr' ]); } function iface_accounting_server(config) { for (let server in config.acct_server_addr) { append('acct_server_addr', server); append_vars(config, [ 'acct_server_port', 'acct_server_shared_secret' ]); } append_vars(config, [ 'radius_acct_req_attr' ]); } function iface_auth_type(config) { if (config.auth_type in [ 'sae', 'owe', 'eap2', 'eap192' ]) { config.ieee80211w = 2; config.sae_require_mfp = 1; if (!config.ppsk) set_default(config, 'sae_pwe', 2); } if (config.auth_type in [ 'psk-sae', 'eap-eap2' ]) { set_default(config, 'ieee80211w', 1); if (config.rsn_override) config.rsn_override_mfp = 2; config.sae_require_mfp = 1; if (!config.ppsk) set_default(config, 'sae_pwe', 2); } if (config.own_ip_addr) config.dynamic_own_ip_addr = null; if (!config.wpa) config.wpa_disable_eapol_key_retries = null; switch(config.auth_type) { case 'none': case 'owe': config.wps_possible = 1; config.wps_state = 1; append_string_vars(config, [ 'owe_transition_ssid' ]); append_vars(config, [ 'owe_transition_bssid', 'owe_transition_ifname', ]); break; case 'psk': case 'psk2': case 'sae': case 'psk-sae': config.vlan_possible = 1; config.wps_possible = 1; if (config.ppsk) { iface_authentication_server(config); config.macaddr_acl = 2; config.wpa_psk_radius = 2; } else if (length(config.key) == 64) { config.wpa_psk = config.key; } else if (length(config.key) >= 8 && length(config.key) <= 63) { config.wpa_passphrase = config.key; } else if (config.key) { netifd.setup_failed('INVALID_WPA_PSK'); } if (config.auth_type in [ 'psk', 'psk-sae' ]) { set_default(config, 'wpa_psk_file', `/var/run/hostapd-${config.ifname}.psk`); touch_file(config.wpa_psk_file); } if (config.auth_type in [ 'sae', 'psk-sae' ]) { set_default(config, 'sae_password_file', `/var/run/hostapd-${config.ifname}.sae`); touch_file(config.sae_password_file); } break; case 'eap': case 'eap2': case 'eap-eap2': case 'eap192': config.vlan_possible = 1; if (config.fils) { set_default(config, 'erp_domain', substr(md5(config.ssid), 0, 4)); set_default(config, 'fils_realm', config.erp_domain); set_default(config, 'erp_send_reauth_start', 1); set_default(config, 'fils_cache_id', substr(md5(config.fils_realm), 0, 4)); } if (!config.eap_server) { iface_authentication_server(config); iface_accounting_server(config); } if (config.radius_das_client && config.radius_das_secret) { set_default(config, 'radius_das_port', 3799); config.radius_das_client = config.radius_das_client + ' ' + config.radius_das_secret; } set_default(config, 'eapol_version', config.wpa & 1); if (!config.eapol_version) config.eapol_version = null; append('eapol_key_index_workaround', '1'); append('ieee8021x', '1'); break; } append_vars(config, [ 'sae_require_mfp', 'sae_password_file', 'sae_pwe', 'sae_track_password', 'time_advertisement', 'time_zone', 'wpa_group_rekey', 'wpa_ptk_rekey', 'wpa_gmk_rekey', 'wpa_strict_rekey', 'macaddr_acl', 'wpa_psk_radius', 'wpa_psk', 'wpa_passphrase', 'wpa_psk_file', 'eapol_version', 'dynamic_vlan', 'radius_request_cui', 'eap_reauth_period', 'radius_das_client', 'radius_das_port', 'own_ip_addr', 'dynamic_own_ip_addr', 'wpa_disable_eapol_key_retries', 'auth_algs', 'wpa', 'wpa_pairwise', 'erp_domain', 'fils_realm', 'erp_send_reauth_start', 'fils_cache_id' ]); } function iface_ppsk(config) { if (!(config.auth_type in [ 'none', 'owe', 'psk', 'sae', 'psk-sae', 'wep' ]) || !config.auth_server_addr) return; iface_authentication_server(config); append('macaddr_acl', '2'); } function iface_wps(config) { push_config(config, 'config_methods', 'wps_pushbutton', 'push_button'); push_config(config, 'config_methods', 'wps_label', 'label'); if (config.multi_ap == 1) config.wps_possible = false; if (config.wps_possible && length(config.config_methods)) { config.eap_server = 1; set_default(config, 'wps_state', 2); if (config.ext_registrar && config.network_bridge) set_default(config, 'upnp_iface', config.network_bridge); if (config.multi_ap && config.multi_ap_backhaul_ssid) { append_string_vars(config, [ 'multi_ap_backhaul_ssid' ]); if (length(config.multi_ap_backhaul_key) == 64) append('multi_ap_backhaul_wpa_psk', config.multi_ap_backhaul_key); else if (length(config.multi_ap_backhaul_key) > 8) append('multi_ap_backhaul_wpa_passphrase', config.multi_ap_backhaul_key); else netifd.setup_failed('INVALID_WPA_PSK'); } append_vars(config, [ 'wps_state', 'device_type', 'device_name', 'config_methods', 'wps_independent', 'eap_server', 'ap_pin', 'ap_setup_locked', 'upnp_iface' ]); } } function iface_rrm(config) { set_default(config, 'rrm_neighbor_report', config.ieee80211k); set_default(config, 'rrm_beacon_report', config.ieee80211k); append_vars(config, [ 'rrm_neighbor_report', 'rrm_beacon_report', 'rnr', 'ftm_responder', ]); } function iface_ftm(config, phy_features) { if (!phy_features.ftm_responder || !config.ftm_responder) return; append_vars(config, [ 'ftm_responder', 'lci', 'civic' ]); } function iface_macfilter(config) { let path = `/var/run/hostapd-${config.ifname}.maclist`; switch(config.macfilter) { case 'allow': append('accept_mac_file', path); append('macaddr_acl', 1); config.vlan_possible = 1; break; case 'deny': append('deny_mac_file', path); append('macaddr_acl', 0); break; default: return; } let file = fs.open(path, 'w'); if (!file) { warn(`Failed to open ${path}`); return; } if (config.maclist) file.write(join('\n', config.maclist)); let macfile = fs.readfile(config.macfile); if (macfile) file.write(macfile); file.close(); } function iface_vlan(interface, config, vlans) { let path = `/var/run/hostapd-${config.ifname}.vlan`; let file = fs.open(path, 'w'); for (let k, vlan in vlans) if (vlan.config.name && vlan.config.vid) { let ifname = `${config.ifname}-${vlan.config.name}`; file.write(`${vlan.config.vid} ${ifname}\n`); netifd.set_vlan(interface, ifname, k); } file.close(); set_default(config, 'vlan_file', path); append_vars(config, [ 'vlan_file' ]); if (!config.vlan_possible || !config.dynamic_vlan) return; set_default(config, 'vlan_no_bridge', !config.vlan_bridge); append_vars(config, [ 'dynamic_vlan', 'vlan_naming', 'vlan_bridge', 'vlan_no_bridge', 'vlan_tagged_interface' ]); } function iface_wpa_stations(config, stas) { let path = `/var/run/hostapd-${config.ifname}.psk`; let file = fs.open(path, 'w'); for (let k, sta in stas) if (sta.config.mac && sta.config.key) { for (let mac in sta.config.mac) { let station = `${mac} ${sta.config.key}\n`; if (sta.config.vid) station = `vlanid=${sta.config.vid} ` + station; file.write(station); } } file.close(); set_default(config, 'wpa_psk_file', path); } function iface_sae_stations(config, stas) { let path = `/var/run/hostapd-${config.ifname}.sae`; let file = fs.open(path, 'w'); for (let k, sta in stas) if (sta.config.mac && sta.config.key) { for (let mac in sta.config.mac) { if (mac == '00:00:00:00:00:00') mac = 'ff:ff:ff:ff:ff:ff'; let station = `${sta.config.key}|mac=${mac}`; if (sta.config.vid) station = station + `|vlanid=${sta.config.vid}`; station = station + '\n'; file.write(station); } } file.close(); set_default(config, 'sae_password_file', path); } function iface_eap_server(config) { if (!config.eap_server) return; set_default(config, 'eap_server', true); set_default(config, 'eap_server_erp', true); append_vars(config, [ 'eap_server', 'eap_server_erp', 'eap_user_file', 'ca_cert', 'server_cert', 'private_key', 'private_key_passwd', 'server_id', ]); } function iface_roaming(config) { if (!config.ieee80211r || config.wpa < 2) return; set_default(config, 'mobility_domain', substr(md5(config.ssid + '\n'), 0, 4)); set_default(config, 'ft_psk_generate_local', config.auth_type == 'psk'); set_default(config, 'ft_iface', config.network_ifname); if (!config.ft_psk_generate_local) { if (!config.r0kh || !config.r1kh) { if (!config.auth_secret && !config.key) netifd.setup_failed('FT_KEY_CANT_BE_DERIVED'); let ft_key = md5(`${config.mobility_domain}/${config.auth_secret ?? config.key}`); set_default(config, 'r0kh', [ 'ff:ff:ff:ff:ff:ff,*,' + ft_key ]); set_default(config, 'r1kh', [ '00:00:00:00:00:00,00:00:00:00:00:00,' + ft_key ]); } for (let name in [ 'r0kh', 'r1kh' ]) for (let val in config[name]) append(name, join(' ', split(val, ',', 3))); append_vars(config, [ 'r1_key_holder', 'r0_key_lifetime', 'pmk_r1_push' ]); } append_vars(config, [ 'mobility_domain', 'ft_psk_generate_local', 'ft_over_ds', 'reassociation_deadline', 'ft_iface' ]); } function iface_mfp(config) { if (!config.ieee80211w || config.wpa < 2) { append('ieee80211w', 0); return; } if (config.auth_type == 'eap192') config.group_mgmt_cipher = 'BIP-GMAC-256'; else config.group_mgmt_cipher = config.ieee80211w_mgmt_cipher ?? 'AES-128-CMAC'; append_vars(config, [ 'ieee80211w', 'group_mgmt_cipher', 'assoc_sa_query_max_timeout', 'assoc_sa_query_retry_timeout' ]); } function iface_key_caching(config) { if (config.wpa < 2) return; if (config.network_bridge && config.rsn_preauth) { set_default(config, 'okc', true); config.rsn_preauth_interfaces = config.network_bridge; append_vars(config, [ 'rsn_preauth', 'rsn_preauth_interfaces' ]); } else { set_default(config, 'okc', (config.auth_type in [ 'sae', 'psk-sae', 'owe' ])); } if (!config.okc && !config.fils) config.disable_pmksa_caching = 1; append_vars(config, [ 'okc', 'disable_pmksa_caching' ]); } function iface_hs20(config) { if (!config.hs20) return; append_vars(config, [ 'hs20', 'disable_dgaf', 'anqp_domain_id', 'hs20_deauth_req_timeout', 'hs20_wan_metrics', 'hs20_operating_class', 'hs20_t_c_filename', 'hs20_t_c_timestamp', 'hs20_t_c_server_url', 'hs20_conn_capab' ]); } function iface_interworking(config) { if (!config.iw_enabled) return; config.interworking = true; if (config.domain_name) config.domain_name = join(',', config.domain_name); if (config.anqp_3gpp_cell_net) config.domain_name = join(',', config.anqp_3gpp_cell_net); append_vars(config, [ 'interworking', 'internet', 'asra', 'uesa', 'access_network_type', 'hessid', 'venue_group', 'venue_type', 'network_auth_type', 'gas_address3', 'roaming_consortium', 'anqp_elem', 'nai_realm', 'venue_name', 'venue_url', 'domain_name', 'anqp_3gpp_cell_net', ]); } export function generate(interface, data, config, vlans, stas, phy_features) { config.ctrl_interface = '/var/run/hostapd'; config.start_disabled = data.ap_start_disabled; iface_setup(config); iface.parse_encryption(config, data.config); if (data.config.band == '6g') { if (config.auth_type == 'psk-sae') config.auth_type = 'sae'; if (config.auth_type == 'eap-eap2') config.auth_type = 'eap2'; } if (config.auth_type in [ 'psk', 'psk-sae' ]) iface_wpa_stations(config, stas); if (config.auth_type in [ 'sae', 'psk-sae' ]) iface_sae_stations(config, stas); iface_auth_type(config); iface_accounting_server(config); iface_ppsk(config); iface_wps(config); iface_rrm(config); iface_ftm(config, phy_features); iface_macfilter(config); iface_vlan(interface, config, vlans); iface_eap_server(config); iface_roaming(config); iface_mfp(config); iface_key_caching(config); iface_hs20(config); iface_interworking(config); iface.wpa_key_mgmt(config); append_vars(config, [ 'wpa_key_mgmt', ]); if (config.rsn_override_key_mgmt || config.rsn_override_pairwise) { config.rsn_override_mfp ??= config.ieee80211w; config.rsn_override_key_mgmt ??= config.wpa_key_mgmt; config.rsn_override_pairwise ??= config.wpa_pairwise; append_vars(config, [ 'rsn_override_key_mgmt', 'rsn_override_pairwise', 'rsn_override_mfp' ]); if (config.mlo) { config.rsn_override_mfp_2 ??= config.rsn_override_mfp; config.rsn_override_key_mgmt_2 ??= config.rsn_override_key_mgmt; config.rsn_override_pairwise_2 ??= config.rsn_override_pairwise; append_vars(config, [ 'rsn_override_key_mgmt_2', 'rsn_override_pairwise_2', 'rsn_override_mfp_2' ]); } } /* raw options */ for (let raw in config.hostapd_bss_options) append_raw(raw); if (config.mlo) { append_raw('mld_ap=1'); if (data.config.radio != null) append_raw('mld_link_id=' + data.config.radio); } if (config.default_macaddr) append_raw('#default_macaddr'); else if (config.random_macaddr) append_raw('#random_macaddr'); }; 07070100E81643000081A400000000000000000000000169B8AF0D00004767000000080000000100000000000000000000002000000000usr/share/ucode/wifi/hostapd.uc'use strict'; import { append, append_raw, append_vars, dump_config, flush_config, set_default, wiphy_info, wiphy_band } from 'wifi.common'; import { validate } from 'wifi.validate'; import * as netifd from 'wifi.netifd'; import * as iface from 'wifi.iface'; import * as nl80211 from 'nl80211'; import * as ap from 'wifi.ap'; import * as fs from 'fs'; const NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER = 33; const NL80211_EXT_FEATURE_RADAR_BACKGROUND = 61; let phy_features = {}; let phy_capabilities = {}; /* make sure old style UCI and hwmode and newer band properties are correctly resolved */ function set_device_defaults(config) { /* validate the hw mode */ if (config.hw_mode in [ '11a', '11b', '11g', '11ad' ]) config.hw_mode = substr(config.hw_mode, 2); else if (config.channel > 14) config.hw_mode = 'a'; else config.hw_mode = 'g'; /* validate band */ if (config.band == '2g') config.hw_mode = 'g'; else if (config.band in [ '5g', '6g', '60g' ]) config.hw_mode = 'a'; else switch (config.hw_mode) { case 'a': config.band = '5g'; break; case 'ad': config.band = '60g'; break; default: config.band = '2g'; break; } } /* setup sylog / stdout */ function device_log_append(config) { let log_mask = 0; for (let k in [ 'log_mlme', 'log_iapp', 'log_driver', 'log_wpa', 'log_radius', 'log_8021x', 'log_80211' ]) { log_mask <<= 1; log_mask |= config[k] ? 1 : 0; } append('logger_syslog', log_mask); append('logger_syslog_level', config.log_level); append('logger_stdout', log_mask); append('logger_stdout_level', config.log_level); } /* setup country code */ function device_country_code(config) { let status = global.ubus.call('network.wireless', 'status'); for (let name, radio in status) { if (!radio.config.country) continue; config.country_code = radio.config.country; } if (!exists(config, 'country_code')) return; if (config.hw_mode != 'a') delete config.ieee80211h; append_vars(config, [ 'country_code', 'country3', 'ieee80211h' ]); if (config.ieee80211d) append_vars(config, [ 'ieee80211d', 'local_pwr_constraint', 'spectrum_mgmt_required' ]); } /* setup cell density */ function device_cell_density_append(config) { switch (config.hw_mode) { case 'b': if (config.cell_density == 1) { config.supported_rates ??= [ 5500, 11000 ]; config.basic_rates ??= [ 5500, 11000 ]; } else if (config.cell_density > 2) { config.supported_rates ??= [ 11000 ]; config.basic_rates ??= [ 11000 ]; } ;; case 'g': if (config.cell_density in [ 0, 1 ]) { if (!config.legacy_rates) { config.supported_rates ??= [ 6000, 9000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 6000, 12000, 24000 ]; } else if (config.cell_density == 1) { config.supported_rates ??= [ 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 5500, 11000 ]; } } else if (config.cell_density == 2 || (config.cell_density > 3 && config.legacy_rates)) { if (!config.legacy_rates) { config.supported_rates ??= [ 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 12000, 24000 ]; } else { config.supported_rates ??= [ 11000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 11000 ]; } } else if (config.cell_density > 2) { config.supported_rates ??= [ 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 24000 ]; } ;; case 'a': switch (config.cell_density) { case 1: config.supported_rates ??= [ 6000, 9000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 6000, 12000, 24000 ]; break; case 2: config.supported_rates ??= [ 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 12000, 24000 ]; break; case 3: config.supported_rates ??= [ 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 24000 ]; break; } } } function device_rates(config) { for (let key in [ 'supported_rates', 'basic_rates' ]) config[key] = map(config[key], x => x / 100); append_vars(config, [ 'beacon_rate', 'supported_rates', 'basic_rates' ]); } function device_htmode_append(config) { config.channel_offset = config.band == '6g' ? 1 : 0; /* 802.11n */ config.ieee80211n = 0; if (config.band != '6g') { if (config.htmode in [ 'VHT20', 'HT20', 'HE20', 'EHT20' ]) { config.ieee80211n = 1; config.ht_capab = ''; } if (config.htmode in [ 'HT40', 'HT40+', 'HT40-', 'VHT40', 'VHT80', 'VHT160', 'HE40', 'HE80', 'HE160', 'EHT40', 'EHT80', 'EHT160' ]) { config.ieee80211n = 1; if (!config.channel) config.ht_capab = '[HT40+]'; else switch (config.hw_mode) { case 'a': switch (((config.channel / 4) + config.channel_offset) % 2) { case 0: config.ht_capab = '[HT40-]'; break; case 1: config.ht_capab = '[HT40+]'; break; } break; default: switch (config.htmode) { case 'HT40+': case 'HT40-': config.ht_capab = '[' + config.htmode + ']'; break; default: if (config.channel < 7) config.ht_capab = '[HT40+]'; else config.ht_capab = '[HT40-]'; break; } } } if (config.ieee80211n) { let ht_capab = phy_capabilities.ht_capa; if (ht_capab & 0x1 && config.ldpc) config.ht_capab += '[LDPC]'; if (ht_capab & 0x10 && config.greenfield) config.ht_capab += '[GF]'; if (ht_capab & 0x20 && config.short_gi_20) config.ht_capab += '[SHORT-GI-20]'; if (ht_capab & 0x40 && config.short_gi_40) config.ht_capab += '[SHORT-GI-40]'; if (ht_capab & 0x80 && config.tx_stbc) config.ht_capab += '[TX-STBC]'; if (ht_capab & 0x800 && config.max_amsdu) config.ht_capab += '[MAX-AMSDU-7935]'; if (ht_capab & 0x1000 && config.dsss_cck_40) config.ht_capab += '[DSSS_CCK-40]'; let rx_stbc = [ '', '[RX-STBC1]', '[RX-STBC12]', '[RX-STBC123]' ]; config.ht_capab += rx_stbc[min(config.rx_stbc, (ht_capab >> 8) & 3)]; append_vars(config, [ 'ieee80211n', 'ht_coex', 'ht_capab' ]); } } /* 802.11ac */ config.ieee80211ac = 1; config.vht_oper_centr_freq_seg0_idx = 0; config.vht_oper_chwidth = 0; switch (config.htmode) { case 'VHT20': case 'HE20': case 'EHT20': break; case 'VHT40': case 'HE40': case 'EHT40': config.vht_oper_centr_freq_seg0_idx = config.channel + (((config.channel / 4) + config.channel_offset) % 2 ? 2 : -2); break; case 'VHT80': case 'HE80': case 'EHT80': let delta = [ -6, 6, 2, -2 ]; config.vht_oper_centr_freq_seg0_idx = config.channel + delta[((config.channel / 4) + config.channel_offset) % 4]; config.vht_oper_chwidth = 1; break; case 'VHT160': case 'HE160': case 'EHT160': let vht_oper_centr_freq_seg0_idx_map = [[ 64, 50 ], [ 128, 114 ], [ 177, 163 ]]; if (config.band == '6g') vht_oper_centr_freq_seg0_idx_map = [ [ 29, 15 ], [ 61, 47 ], [ 93, 79 ], [ 125, 111 ], [ 157, 143 ], [ 189, 175 ], [ 221, 207 ]]; for (let k, v in vht_oper_centr_freq_seg0_idx_map) if (config.channel >= (v[0] - 28) && config.channel <= v[0]) { config.vht_oper_centr_freq_seg0_idx = v[1]; break; } config.vht_oper_chwidth = 2; break; default: config.ieee80211ac = 0; break; } config.eht_oper_chwidth = config.vht_oper_chwidth; config.eht_oper_centr_freq_seg0_idx = config.vht_oper_centr_freq_seg0_idx; if (config.band == '6g') { config.ieee80211ac = 0; switch(config.htmode) { case 'HE20': case 'EHT20': config.op_class = 131; break; case 'EHT320': let eht_center_seg0_map = [ [ 61, 31 ], [ 125, 95 ], [ 189, 159 ], [ 221, 191 ] ]; for (let k, v in eht_center_seg0_map) if (config.channel <= v[0]) { config.eht_oper_centr_freq_seg0_idx = v[1]; break; } config.op_class = 137; config.eht_oper_chwidth = 7; /* * Set HE operation values for 160MHz backward compatibility * with WiFi 6E clients. Pick the 160MHz half that contains * the primary channel. */ config.he_oper_chwidth = 3; if (config.channel < config.eht_oper_centr_freq_seg0_idx) config.he_oper_centr_freq_seg0_idx = config.eht_oper_centr_freq_seg0_idx - 16; else config.he_oper_centr_freq_seg0_idx = config.eht_oper_centr_freq_seg0_idx + 16; break; case 'HE40': case 'HE80': case 'HE160': case 'EHT40': case 'EHT80': case 'EHT160': config.op_class = 132 + config.eht_oper_chwidth; break; } append_vars(config, [ 'op_class' ]); } if (config.ieee80211ac && config.hw_mode == 'a') { /* VHT capab */ if (config.vht_oper_chwidth < 2) { config.vht160 = 0; config.short_gi_160 = 0; } set_default(config, 'tx_queue_data2_burst', '2.0'); let vht_capab = phy_capabilities.vht_capa; config.vht_capab = ''; if (vht_capab & 0x10 && config.rxldpc) config.vht_capab += '[RXLDPC]'; if (vht_capab & 0x20 && config.short_gi_80) config.vht_capab += '[SHORT-GI-80]'; if (vht_capab & 0x40 && config.short_gi_160) config.vht_capab += '[SHORT-GI-160]'; if (vht_capab & 0x80 && config.tx_stbc_2by1) config.vht_capab += '[TX-STBC-2BY1]'; if (vht_capab & 0x800 && config.su_beamformer) config.vht_capab += '[SU-BEAMFORMER]'; if (vht_capab & 0x1000 && config.su_beamformee) config.vht_capab += '[SU-BEAMFORMEE]'; if (vht_capab & 0x80000 && config.mu_beamformer) config.vht_capab += '[MU-BEAMFORMER]'; if (vht_capab & 0x100000 && config.mu_beamformee) config.vht_capab += '[MU-BEAMFORMEE]'; if (vht_capab & 0x200000 && config.vht_txop_ps) config.vht_capab += '[VHT-TXOP-PS]'; if (vht_capab & 0x400000 && config.htc_vht) config.vht_capab += '[HTC-VHT]'; if (vht_capab & 0x10000000 && config.rx_antenna_pattern) config.vht_capab += '[RX-ANTENNA-PATTERN]'; if (vht_capab & 0x20000000 && config.tx_antenna_pattern) config.vht_capab += '[TX-ANTENNA-PATTERN]'; let rx_stbc = [ '', '[RX-STBC-1]', '[RX-STBC-12]', '[RX-STBC-123]', '[RX-STBC-1234]' ]; config.vht_capab += rx_stbc[min(config.rx_stbc, (vht_capab >> 8) & 7)]; if (vht_capab & 0x800 && config.su_beamformer) config.vht_capab += '[SOUNDING-DIMENSION-' + min(((vht_capab >> 16) & 3) + 1, config.beamformer_antennas) + ']'; if (vht_capab & 0x1000 && config.su_beamformee) config.vht_capab += '[BF-ANTENNA-' + min(((vht_capab >> 13) & 3) + 1, config.beamformer_antennas) + ']'; /* supported Channel widths */ if (((vht_capab & 0xc) == 4 || (vht_capab & 0xc) == 8) && config.vht160 >= 1) config.vht_capab += '[VHT160]'; if ((vht_capab & 0xc) == 8 && config.vht160 >= 2) config.vht_capab += '[VHT160-80PLUS80]'; /* maximum MPDU length */ if ((vht_capab & 3) > 1 && config.vht_max_mpdu >= 11454) config.vht_capab += '[MAX-MPDU-11454]'; else if ((vht_capab & 3) && config.vht_max_mpdu >= 7991) config.vht_capab += '[MAX-MPDU-7991]'; /* maximum A-MPDU length exponent */ let max_a_mpdu_len_exp = (vht_capab >> 20) & 0x38; for (let exp = 7; exp; exp--) if (max_a_mpdu_len_exp >= (0x8 * exp) && exp <= config.vht_max_a_mpdu_len_exp) { config.vht_capab += '[MAX-A-MPDU-LEN-EXP' + exp + ']'; break; } /* whether or not the STA supports link adaptation using VHT variant */ let vht_link_adapt = vht_capab & 0xC000000; if (vht_link_adapt >= 0xC000000 && config.vht_link_adapt > 3) config.vht_capab += '[VHT-LINK-ADAPT-3]'; if (vht_link_adapt >= 0x8000000 && config.vht_link_adapt > 2) config.vht_capab += '[VHT-LINK-ADAPT-2]'; append_vars(config, [ 'ieee80211ac', 'vht_oper_chwidth', 'vht_oper_centr_freq_seg0_idx', 'vht_capab' ]); } /* 802.11ax */ if (wildcard(config.htmode, 'HE*') || wildcard(config.htmode, 'EHT*')) { let he_phy_cap = phy_capabilities.he_phy_cap; let he_mac_cap = phy_capabilities.he_mac_cap; config.ieee80211ax = true; if (config.hw_mode == 'a') { /* * Only set HE values from VHT if not already set. * For 6GHz 320MHz, these are pre-set for 160MHz backward * compatibility with WiFi 6E clients. */ if (!config.he_oper_chwidth) config.he_oper_chwidth = config.vht_oper_chwidth; if (!config.he_oper_centr_freq_seg0_idx) config.he_oper_centr_freq_seg0_idx = config.vht_oper_centr_freq_seg0_idx; } if (config.band == "6g") { config.stationary_ap = true; append_vars(config, [ 'he_6ghz_reg_pwr_type', ]); } if (config.he_bss_color_enabled) { if (config.he_spr_non_srg_obss_pd_max_offset) config.he_spr_sr_control |= 1 << 2; if (!config.he_spr_psr_enabled) config.he_spr_sr_control |= 1; append_vars(config, [ 'he_bss_color', 'he_spr_non_srg_obss_pd_max_offset', 'he_spr_sr_control' ]); } if (!(he_phy_cap[3] & 0x80)) config.he_su_beamformer = false; if (!(he_phy_cap[4] & 0x1)) config.he_su_beamformee = false; if (!(he_phy_cap[4] & 0x2)) config.he_mu_beamformer = false; if (!(he_phy_cap[7] & 0x1)) config.he_spr_psr_enabled = false; if (!(he_mac_cap[0] & 0x1)) config.he_twt_required= false; append_vars(config, [ 'ieee80211ax', 'he_oper_chwidth', 'he_oper_centr_freq_seg0_idx', 'he_su_beamformer', 'he_su_beamformee', 'he_mu_beamformer', 'he_twt_required', 'he_default_pe_duration', 'he_rts_threshold', 'he_mu_edca_qos_info_param_count', 'he_mu_edca_qos_info_q_ack', 'he_mu_edca_qos_info_queue_request', 'he_mu_edca_qos_info_txop_request', 'he_mu_edca_ac_be_aifsn', 'he_mu_edca_ac_be_aci', 'he_mu_edca_ac_be_ecwmin', 'he_mu_edca_ac_be_ecwmax', 'he_mu_edca_ac_be_timer', 'he_mu_edca_ac_bk_aifsn', 'he_mu_edca_ac_bk_aci', 'he_mu_edca_ac_bk_ecwmin', 'he_mu_edca_ac_bk_ecwmax', 'he_mu_edca_ac_bk_timer', 'he_mu_edca_ac_vi_ecwmin', 'he_mu_edca_ac_vi_ecwmax', 'he_mu_edca_ac_vi_aifsn', 'he_mu_edca_ac_vi_aci', 'he_mu_edca_ac_vi_timer', 'he_mu_edca_ac_vo_aifsn', 'he_mu_edca_ac_vo_aci', 'he_mu_edca_ac_vo_ecwmin', 'he_mu_edca_ac_vo_ecwmax', 'he_mu_edca_ac_vo_timer', ]); } if (wildcard(config.htmode, 'EHT*')) { config.ieee80211be = true; append_vars(config, [ 'ieee80211be' ]); if (config.hw_mode == 'a') append_vars(config, [ 'eht_oper_chwidth', 'eht_oper_centr_freq_seg0_idx' ]); } append_vars(config, [ 'tx_queue_data2_burst', 'stationary_ap' ]); } function device_extended_features(data, flag) { return !!(data[flag / 8] | (1 << (flag % 8))); } function device_capabilities(config) { let phy = config.phy; phy = wiphy_info(phy); let band = wiphy_band(phy, config.band); phy_capabilities.ht_capa = band.ht_capa ?? 0; phy_capabilities.vht_capa = band.vht_capa ?? 0; for (let iftype in band.iftype_data) { if (!iftype.iftypes.ap) continue; phy_capabilities.he_mac_cap = iftype.he_cap_mac; phy_capabilities.he_phy_cap = iftype.he_cap_phy; } phy_features.ftm_responder = device_extended_features(phy.extended_features, NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER); phy_features.radar_background = device_extended_features(phy.extended_features, NL80211_EXT_FEATURE_RADAR_BACKGROUND); } function generate(config) { if (!config) die(`${config.path} is an unknown phy`); device_capabilities(config); append('driver', 'nl80211'); set_device_defaults(config); device_log_append(config); device_country_code(config); device_cell_density_append(config); device_rates(config); /* beacon */ append_vars(config, [ 'beacon_int', 'beacon_rate', 'rnr_beacon' ]); /* wpa_supplicant co-exist */ append_vars(config, [ 'noscan' ]); /* airtime */ if (config.airtime_mode) append_vars(config, [ 'airtime_mode' ]); /* assoc/thresholds */ append_vars(config, [ 'rssi_reject_assoc_rssi', 'rssi_reject_assoc_timeout', 'rssi_ignore_probe_request', 'iface_max_num_sta' ]); /* ACS / Radar*/ if (!phy_features.radar_background || config.band != '5g') delete config.enable_background_radar; else set_default(config, 'enable_background_radar', false); append_vars(config, [ 'acs_chan_bias', 'acs_exclude_dfs', 'enable_background_radar' ]); /* TX Power */ append_vars(config, [ 'min_tx_power' ]); /* hwmode, channel, op_class, ... */ append_vars(config, [ 'hw_mode', 'channel', 'rts_threshold', 'chanlist' ]); if (config.hw_mode in [ 'a', 'g' ] && config.require_mode in [ 'n', 'ac', 'ax' ]) { let require_mode = { n: 'require_ht', ac: 'require_vht', ax: 'require_he' }; config.legacy_rates = false; append(require_mode[config.require_mode], 1); } device_htmode_append(config); if (config.ieee80211ax || config.ieee80211be) append_vars(config, [ 'mbssid' ]); /* 6G power mode */ if (config.band != '6g') append_vars(config, [ 'reg_power_type' ]); /* raw options */ for (let raw in config.hostapd_options) append_raw(raw); } let iface_idx = 0; function setup_interface(interface, data, config, vlans, stas, phy_features, fixup) { config = { ...config, fixup }; config.idx = iface_idx++; ap.generate(interface, data, config, vlans, stas, phy_features); } export function setup(data) { let file_name = `/var/run/hostapd-${data.phy}${data.vif_phy_suffix}.conf`; flush_config(); if (fs.stat(file_name)) fs.rename(file_name, file_name + '.prev'); data.config.phy = data.phy; generate(data.config); if (data.config.num_global_macaddr) append('\n#num_global_macaddr', data.config.num_global_macaddr); if (data.config.macaddr_base) append('\n#macaddr_base', data.config.macaddr_base); let has_ap; for (let k, interface in data.interfaces) { if (interface.config.mode != 'ap') continue; interface.config.network_bridge = interface.bridge; interface.config.network_ifname = interface['bridge-ifname']; let owe = interface.config.encryption == 'owe' && interface.config.owe_transition; setup_interface(k, data, interface.config, interface.vlans, interface.stas, phy_features, owe ? 'owe' : null ); if (owe) setup_interface(k, data, interface.config, interface.vlans, interface.stas, phy_features, 'owe-transition'); has_ap = true; } let config = dump_config(file_name); let msg = { phy: data.phy, radio: data.config.radio, config: has_ap ? file_name : "", prev_config: file_name + '.prev' }; if (!global.ubus.list('hostapd')) system('ubus wait_for hostapd'); let ret = global.ubus.call('hostapd', 'config_set', msg); if (ret) netifd.add_process('/usr/sbin/hostapd', ret.pid, true, true); else netifd.setup_failed('HOSTAPD_START_FAILED'); }; 07070100E81644000081A400000000000000000000000169B8AF0D0000171A000000080000000100000000000000000000001E00000000usr/share/ucode/wifi/iface.uc'use strict'; import { append_value, log } from 'wifi.common'; import * as fs from 'fs'; export function parse_encryption(config, dev_config) { if (!config.encryption) return; let encryption = split(config.encryption, '+', 2); config.wpa = 0; for (let k, v in { 'wpa2*': 2, 'wpa3*': 2, '*psk2*': 2, 'psk3*': 2, 'sae*': 2, 'owe*': 2, 'wpa*mixed*': 3, '*psk*mixed*': 3, 'wpa*': 1, '*psk*': 1, }) if (wildcard(config.encryption, k)) { config.wpa = v; break; } config.wpa_pairwise = null; if (config.wpa) config.wpa_pairwise = (config.hw_mode == 'ad') ? 'GCMP' : 'CCMP'; config.auth_type = encryption[0] ?? 'none'; let wpa3_pairwise = config.wpa_pairwise; if (wildcard(dev_config?.htmode, 'EHT*') || wildcard(dev_config?.htmode, 'HE*')) wpa3_pairwise = 'GCMP-256 ' + wpa3_pairwise; switch(config.auth_type) { case 'owe': config.auth_type = 'owe'; break; case 'wpa3-192': config.auth_type = 'eap192'; break; case 'wpa3-mixed': config.auth_type = 'eap-eap2'; break; case 'wpa3': config.auth_type = 'eap2'; break; case 'psk': case 'psk2': case 'psk-mixed': config.auth_type = 'psk'; wpa3_pairwise = null; break; case 'sae': case 'psk3': config.auth_type = 'sae'; break; case 'psk3-mixed': case 'sae-mixed': config.auth_type = 'psk-sae'; break; case 'wpa': case 'wpa2': case 'wpa-mixed': config.auth_type = 'eap'; wpa3_pairwise = null; break; default: config.wpa_pairwise = null; wpa3_pairwise = null; break; } switch(encryption[1]){ case 'tkip+aes': case 'tkip+ccmp': case 'aes+tkip': case 'ccmp+tkip': config.wpa_pairwise = 'CCMP TKIP'; break; case 'ccmp256': config.wpa_pairwise = 'CCMP-256'; break; case 'aes': case 'ccmp': config.wpa_pairwise = 'CCMP'; break; case 'tkip': config.wpa_pairwise = 'TKIP'; break; case 'gcmp256': config.wpa_pairwise = 'GCMP-256'; break; case 'gcmp': config.wpa_pairwise = 'GCMP'; break; default: if (config.encryption == 'wpa3-192') { config.wpa_pairwise = 'GCMP-256'; break; } if (!wpa3_pairwise) break; if (config.rsn_override && wpa3_pairwise != config.wpa_pairwise) config.rsn_override_pairwise = wpa3_pairwise; else config.wpa_pairwise = wpa3_pairwise; break; } }; export function wpa_key_mgmt(config) { if (!config.wpa) return; switch(config.auth_type) { case 'psk': case 'psk2': append_value(config, 'wpa_key_mgmt', 'WPA-PSK'); if (config.wpa >= 2 && config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-PSK'); if (config.ieee80211w) append_value(config, 'wpa_key_mgmt', 'WPA-PSK-SHA256'); break; case 'eap': append_value(config, 'wpa_key_mgmt', 'WPA-EAP'); if (config.wpa >= 2 && config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP'); if (config.ieee80211w) append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SHA256'); break; case 'eap192': append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SUITE-B-192'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP-SHA384'); break; case 'eap-eap2': append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP'); if (config.rsn_override) config.rsn_override_key_mgmt = config.wpa_key_mgmt; append_value(config, 'wpa_key_mgmt', 'WPA-EAP'); break; case 'eap2': append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP'); break; case 'sae': append_value(config, 'wpa_key_mgmt', 'SAE'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-SAE'); break; case 'psk-sae': append_value(config, 'wpa_key_mgmt', 'SAE'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-SAE'); if (config.rsn_override) { config.rsn_override_key_mgmt = config.wpa_key_mgmt; append_value(config, 'rsn_override_key_mgmt_2', 'SAE-EXT-KEY'); if (config.ieee80211r) append_value(config, 'rsn_override_key_mgmt_2', 'FT-SAE-EXT-KEY'); } if (config.rsn_override > 1) delete config.wpa_key_mgmt; append_value(config, 'wpa_key_mgmt', 'WPA-PSK'); if (config.ieee80211w) append_value(config, 'wpa_key_mgmt', 'WPA-PSK-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-PSK'); break; case 'owe': append_value(config, 'wpa_key_mgmt', 'OWE'); break; } if (config.fils) { switch(config.auth_type) { case 'eap192': append_value(config, 'wpa_key_mgmt', 'FILS-SHA384'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-FILS-SHA384'); break; case 'eap-eap2': case 'eap2': case 'eap': append_value(config, 'wpa_key_mgmt', 'FILS-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-FILS-SHA256'); if (!config.rsn_override_key_mgmt) break; append_value(config, 'rsn_override_key_mgmt', 'FILS-SHA256'); if (config.ieee80211r) append_value(config, 'rsn_override_key_mgmt', 'FT-FILS-SHA256'); break; } } config.key_mgmt = config.wpa_key_mgmt; }; function macaddr_random() { let f = fs.open("/dev/urandom", "r"); let addr = f.read(6); addr = map(split(addr, ""), (v) => ord(v)); addr[0] &= ~1; addr[0] |= 2; return join(":", map(addr, (v) => sprintf("%02x", v))); } let mac_idx = 0; export function prepare(data, phy, num_global_macaddr, macaddr_base) { if (!data.macaddr) { let pipe = fs.popen(`ucode /usr/share/hostap/wdev.uc ${phy} get_macaddr id=${mac_idx} num_global=${num_global_macaddr} mbssid=${data.mbssid ?? 0} macaddr_base=${macaddr_base ?? ""}`); data.macaddr = trim(pipe.read("all"), '\n'); pipe.close(); data.default_macaddr = true; mac_idx++; } else if (data.macaddr == 'random') { data.macaddr = macaddr_random(); data.random_macaddr = true; } log(`Preparing interface: ${data.ifname} with MAC: ${data.macaddr}`); }; 07070100E81647000081A400000000000000000000000169B8AF0D00001D8E000000080000000100000000000000000000002300000000usr/share/ucode/wifi/supplicant.uc'use strict'; import { append, append_raw, append_vars, network_append, network_append_raw, network_append_vars, network_append_string_vars, set_default, dump_network, flush_network, wiphy_info, wiphy_band } from 'wifi.common'; import * as netifd from 'wifi.netifd'; import * as iface from 'wifi.iface'; import * as fs from 'fs'; function set_fixed_freq(data, config) { if (!data.frequency) return; set_default(config, 'fixed_freq', 1); set_default(config, 'frequency', data.frequency); if (data.htmode in [ 'VHT80', 'HE80' ]) set_default(config, 'max_oper_chwidth', 1); else if (data.htmode in [ 'VHT160', 'HE160' ]) set_default(config, 'max_oper_chwidth', 2); else if (data.htmode in [ 'VHT20', 'VHT40', 'HE20', 'HE40' ]) set_default(config, 'max_oper_chwidth', 0); else set_default(config, 'disable_vht', true); if (data.htmode in [ 'NOHT' ]) set_default(config, 'disable_ht', true); else if (data.htmode in [ 'HT20', 'VHT20', 'HE20' ]) set_default(config, 'disable_ht40', true); else if (data.htmode in [ 'VHT40', 'VHT80', 'VHT160', 'HE40', 'HE80', 'HE160' ]) set_default(config, 'ht40', true); if (wildcard(data.htmode, 'VHT*')) set_default(config, 'vht', 1); } export function ratestr(rate) { if (rate == null) return rate; let rem = (rate / 100) % 10; rate = int(rate / 1000); if (rem > 0) rate += "." + rem; return "" + rate; }; export function ratelist(rates) { if (length(rates) < 1) return null; return join(",", map(rates, (rate) => ratestr(rate))); }; function setup_sta(data, config) { iface.parse_encryption(config); if (config.auth_type in [ 'sae', 'owe', 'eap2', 'eap192' ]) config.ieee80211w = 2; else if (config.auth_type in [ 'psk-sae' ] && !config.ieee80211w) config.ieee80211w = 1; if ((wildcard(data.htmode, 'EHT*') || wildcard(data.htmode, 'HE*')) && config.rsn_override) config.rsn_overriding = 1; else config.rsn_overriding = 0; set_default(config, 'ieee80211r', 0); set_default(config, 'sae_pwe', 2); set_default(config, 'multi_ap', 0); set_default(config, 'multi_profile', 1); set_default(config, 'default_disabled', 0); config.scan_ssid = 1; switch(config.mode) { case 'sta': set_default(config, 'multi_ap_backhaul_sta', config.multi_ap); break; case 'adhoc': config.ap_scan = 2; config.scan_ssid = 0; network_append('mode', 1); set_fixed_freq(data, config); break; case 'mesh': config.ssid = config.mesh_id; config.scan_ssid = null; network_append('mode', 5); set_fixed_freq(data, config); if (config.encryption && config.encryption != 'none') config.key_mgmt = 'SAE'; config.ieee80211w = null; break; } if (config.mode != 'mesh' ) { switch(config.wpa) { case 1: config.proto = 'WPA'; break; case 2: config.proto = 'RSN'; break; } } switch(config.auth_type) { case 'none': break; case 'owe': iface.wpa_key_mgmt(config); break; case 'wps': config.key_mgmt = 'WPS'; break; case 'psk': case 'psk2': case 'sae': case 'psk-sae': if (config.mode != 'mesh') iface.wpa_key_mgmt(config); if (config.mode == 'mesh' || config.auth_type == 'sae') config.sae_password = `"${config.key}"`; else config.psk = `"${config.key}"`; break; case 'eap': case 'eap2': case 'eap192': iface.wpa_key_mgmt(config); set_default(config, 'erp', config.fils); if (config.ca_cert_usesystem && fs.stat('/etc/ssl/certs/ca-certificates.crt')) config.ca_cert = '/etc/ssl/certs/ca-certificates.crt'; switch(config.eap_type) { case 'fast': case 'peap': case 'ttls': set_default(config, 'auth', 'MSCHAPV2'); if (config.auth == 'EAP-TLS') { if (config.ca_cert2_usesystem && fs.stat('/etc/ssl/certs/ca-certificates.crt')) config.ca_cert2 = '/etc/ssl/certs/ca-certificates.crt'; } break; } } if (config.wpa_pairwise == 'GCMP') { config.pairwise = 'GCMP'; config.group = 'GCMP'; } config.key_mgmt ??= 'NONE'; config.basic_rate = ratelist(config.basic_rate); config.mcast_rate = ratestr(config.mcast_rate); network_append_string_vars(config, [ 'ssid', 'identity', 'anonymous_identity', 'password', 'ca_cert', 'ca_cert2', 'client_cert', 'client_cert2', 'subject_match', 'private_key', 'private_key_passwd', 'private_key2', 'private_key2_passwd', ]); network_append_vars(config, [ 'rsn_overriding', 'scan_ssid', 'noscan', 'disabled', 'multi_ap_profile', 'multi_ap_backhaul_sta', 'ocv', 'beacon_prot', 'key_mgmt', 'sae_pwe', 'psk', 'sae_password', 'pairwise', 'group', 'bssid', 'proto', 'mesh_fwding', 'mesh_rssi_threshold', 'frequency', 'fixed_freq', 'disable_ht', 'disable_ht40', 'disable_vht', 'vht', 'max_oper_chwidth', 'ht40', 'beacon_int', 'ieee80211w', 'basic_rate', 'mcast_rate', 'altsubject_match', 'domain_match', 'domain_suffix_match', 'bssid_blacklist', 'bssid_whitelist', 'erp', ]); } function freq_in_range(freq_ranges, freq) { if (!freq_ranges) return true; freq *= 1000; for (let range in freq_ranges) if (freq >= range.start && freq <= range.end) return true; } function wiphy_frequencies(phy, band, radio) { phy = wiphy_info(phy); band = wiphy_band(phy, band); if (!band) return; let ranges; for (let r in phy.radios) if (r.index == radio) ranges = r.freq_ranges; let freqs = []; for (let chan in band.freqs) if (!chan.disabled && freq_in_range(ranges, chan.freq)) push(freqs, chan.freq); if (length(freqs) > 0) return freqs; } export function generate(config_list, data, interface) { flush_network(); if (interface.bridge && (interface.config.mode == 'adhoc' || (interface.config.mode == 'sta' && !interface.config.wds && !interface.config.multi_ap))){ netifd.setup_failed('BRIDGE_NOT_ALLOWED'); return 1; } interface.config.country = data.config.country_code; interface.config.beacon_int = data.config.beacon_int; if (!data.config.scan_list) data.config.scan_list = wiphy_frequencies(data.phy, data.config.band, data.config.radio); if (data.config.scan_list) interface.config.freq_list = join(" ", data.config.scan_list); append_vars(interface.config, [ 'country', 'beacon_int', 'freq_list' ]); setup_sta(data.config, interface.config); let file_name = `/var/run/wpa-supplicant-${interface.config.ifname}.conf`; if (fs.stat(file_name)) fs.rename(file_name, file_name + '.prev'); dump_network(file_name); let config = { mode: interface.config.mode, ctrl: '/var/run/wpa_supplicant', iface: interface.config.ifname, config: file_name, '4addr': !!interface.config.wds, mlo: !!interface.config.mlo, freq_list: data.config.scan_list, powersave: false }; if (!interface.config.default_macaddr) config.macaddr = interface.config.macaddr; if (interface.config.wds) config.bridge = interface.bridge; push(config_list, config); return config; }; export function setup(config, data) { if (!global.ubus.list('wpa_supplicant')) system('ubus wait_for wpa_supplicant'); let ret = global.ubus.call('wpa_supplicant', 'config_set', { phy: data.phy, radio: data.config.radio, config, defer: true, num_global_macaddr: data.config.num_global_macaddr, macaddr_base: data.config.macaddr_base ?? "", }); if (ret) netifd.add_process('/usr/sbin/wpa_supplicant', ret.pid, true, true); else netifd.setup_failed('SUPPLICANT_START_FAILED'); }; export function start(data) { global.ubus.call('wpa_supplicant', 'config_set', { phy: data.phy, radio: data.config.radio, num_global_macaddr: data.config.num_global_macaddr, macaddr_base: data.config.macaddr_base ?? "", }); }; 07070100E8163C000081A400000000000000000000000169B8AF0D00000CBD000000080000000100000000000000000000001F00000000usr/share/ucode/wifi/common.uc'use strict'; import * as libubus from 'ubus'; import * as nl80211 from 'nl80211'; import * as fs from 'fs'; global.ubus = libubus.connect(); let config_data = ''; let network_data = ''; const nl80211_bands = [ '2g', '5g', '60g', '6g' ]; export function wiphy_info(phy) { let idx = +fs.readfile(`/sys/class/ieee80211/${phy}/index`); return nl80211.request(nl80211.const.NL80211_CMD_GET_WIPHY, nl80211.const.NLM_F_DUMP, { wiphy: idx, split_wiphy_dump: true }); }; export function wiphy_band(info, band) { let band_idx = index(nl80211_bands, band); if (band_idx < 0 || !info) return; return info.wiphy_bands[band_idx]; }; export function log(msg) { printf(`wifi-scripts: ${msg}\n`); }; export function append_raw(value) { config_data += value + '\n'; }; export function append(key, value) { if (value == null) return; switch (type(value)) { case 'array': value = join(' ', value); break; case 'bool': value = value ? 1 : 0; break; } append_raw(key + '=' + value); }; function escape_string(value) { let chars = map(split(value, ''), (v) => ord(v)); if (length(filter(chars, (v) => (v < 32 || v >= 128))) > 0) return hexenc(value); return `"${value}"`; } export function append_string(key, value) { if (value == null) return; append(key, escape_string(value)); }; export function append_vars(dict, keys) { for (let key in keys) append(key, dict[key]); }; export function append_string_vars(dict, keys) { for (let key in keys) append_string(key, dict[key]); }; export function network_append_raw(value) { network_data += value + '\n'; }; export function network_append(key, value) { if (value == null) return; switch (type(value)) { case 'array': value = join(' ', value); break; case 'bool': value = value ? 1 : 0; break; } network_append_raw('\t' + key + '=' + value); }; export function network_append_string(key, value) { if (value == null) return; network_append_raw('\t' + key + '=' + escape_string(value)); }; export function network_append_vars(dict, keys) { for (let key in keys) network_append(key, dict[key]); }; export function network_append_string_vars(dict, keys) { for (let key in keys) network_append_string(key, dict[key]); }; export function set_default(dict, key, value) { if (dict[key] == null) dict[key] = value; }; export function push_config(dict, key, option, value) { if (!dict[option]) return; dict[key] ??= []; push(dict[key], value); }; export function touch_file(filename) { let file = fs.open(filename, "a"); if (file) file.close(); else log('Failed to touch ' + filename); }; export function append_value(config, key, value) { if (!config[key]) config[key] = value; else config[key] += ' ' + value; }; export function comment(comment) { append_raw('\n# ' + comment); }; export function dump_config(file) { if (file) fs.writefile(file, config_data); return config_data; }; export function dump_network(file) { config_data += 'network={\n'; config_data += network_data;; config_data += '}\n'; if (file) fs.writefile(file, config_data); return config_data; }; export function flush_config() { config_data = ''; }; export function flush_network() { config_data = ''; network_data = ''; }; 07070100E81648000081A400000000000000000000000169B8AF0D0000090A000000080000000100000000000000000000001E00000000usr/share/ucode/wifi/utils.uc'use strict'; import { readfile, realpath, lsdir } from "fs"; import * as nl80211 from "nl80211"; function phy_filename(phy, name) { return `/sys/class/ieee80211/${phy}/${name}`; } function phy_file(phy, name) { return readfile(phy_filename(phy, name)); } function phy_index(phy) { return +phy_file(phy, "index"); } function phy_path_match(phy, path) { let phy_path = realpath(phy_filename(phy, "device")); return substr(phy_path, -length(path)) == path; } function __find_phy_by_path(phys, path) { if (!path) return null; path = split(path, "+"); phys = filter(phys, (phy) => phy_path_match(phy, path[0])); phys = sort(phys, (a, b) => phy_index(a) - phy_index(b)); return phys[+path[1]]; } function find_phy_by_macaddr(phys, macaddr) { macaddr = lc(macaddr); return filter(phys, (phy) => phy_file(phy, "macaddr") == macaddr)[0]; } function rename_phy_by_name(phys, name, rename) { let data = json(readfile("/etc/board.json")).wlan; if (!data) return; data = data[name]; if (!data) return; let prev_name = __find_phy_by_path(phys, data.path); if (!prev_name) return; if (!rename) return true; let idx = phy_index(prev_name); nl80211.request(nl80211.const.NL80211_CMD_SET_WIPHY, 0, { wiphy: idx, wiphy_name: name }); let prev_idx = index(phys, prev_name); if (prev_idx >= 0) phys[prev_idx] = name; return true; } function find_phy_by_path(phys, path) { let name = __find_phy_by_path(phys, path); if (!name) return; let data = json(readfile("/etc/board.json")).wlan; if (!data || data[name]) return name; for (let cur_name, cur_data in data) { if (!phy_path_match(name, cur_data.path)) continue; let idx = phy_index(name); nl80211.request(nl80211.const.NL80211_CMD_SET_WIPHY, 0, { wiphy: idx, wiphy_name: cur_name }); return cur_name; } return name; } function find_phy_by_name(phys, name, rename) { if (index(phys, name) >= 0) return name; if (!rename_phy_by_name(phys, name, rename)) return; if (!rename) return name; return index(phys, name) < 0 ? null : name; } export function find_phy(config, rename) { let phys = lsdir("/sys/class/ieee80211"); return find_phy_by_path(phys, config.path) ?? find_phy_by_macaddr(phys, config.macaddr) ?? find_phy_by_name(phys, config.phy, rename); }; 07070100E81636000081A400000000000000000000000169B8AF0D00003CDE000000080000000100000000000000000000001A00000000usr/share/ucode/iwinfo.uc'use strict'; import * as nl80211 from 'nl80211'; import * as libubus from 'ubus'; import { readfile, stat } from "fs"; let wifi_devices = json(readfile('/usr/share/wifi_devices.json')); let countries = json(readfile('/usr/share/iso3166.json')); let board_data = json(readfile('/etc/board.json')); let ubus = libubus.connect(); export let phys; let interfaces; let wireless_status; function find_phy(wiphy) { for (let k, phy in phys) if (phy && phy.wiphy == wiphy) return phy; return null; } function get_survey(iface) { let channels = nl80211.request(nl80211.const.NL80211_CMD_GET_SURVEY, nl80211.const.NLM_F_DUMP, { dev: iface.ifname }); for (let channel in channels) if (channel.survey_info?.frequency == iface.wiphy_freq) return channel.survey_info; return null; } function get_noise(iface) { return iface.survey?.noise ?? -100; } function get_country(iface) { let reg = nl80211.request(nl80211.const.NL80211_CMD_GET_REG, 0, { dev: iface.ifname }); return reg.reg_alpha2 ?? ''; } function get_max_power(iface) { let phy = find_phy(iface.wiphy); for (let k, band in phy.wiphy_bands) if (band) for (let freq in band.freqs) if (freq.freq == iface.wiphy_freq) return freq.max_tx_power;; return 0; } function get_hardware_id(iface) { let hw = { type: 'nl80211', id: 'Generic MAC80211', power_offset: 0, channel_offset: 0, }; let path = `/sys/class/ieee80211/phy${iface.wiphy}/device/`; if (stat(path + 'vendor')) { let data = []; for (let lookup in [ 'vendor', 'device', 'subsystem_vendor', 'subsystem_device' ]) push(data, trim(readfile(path + lookup), '\n')); for (let device in wifi_devices.pci) { let match = 0; for (let i = 0; i < 4; i++) if (lc(data[i]) == lc(device[i])) match++; if (match == 4) { hw.type = `${data[0]}:${data[1]} ${data[2]}:${data[3]}`; hw.power_offset = device[4]; hw.channel_offset = device[5]; hw.id = `${device[6]} ${device[7]}`; } } } let compatible = trim(readfile(`/sys/class/net/${iface.ifname}/device/of_node/compatible`), '\n'); if (compatible && wifi_devices.compatible[compatible]) { hw.id = wifi_devices.compatible[compatible][0] + ' ' + wifi_devices.compatible[compatible][1]; hw.compatible = compatible; hw.type = 'embedded'; } return hw; } const iftypes = [ 'Unknown', 'Ad-Hoc', 'Client', 'Master', 'Master (VLAN)', 'WDS', 'Monitor', 'Mesh Point', 'P2P Client', 'P2P Go', ]; export let ifaces = {}; export function update() { phys = nl80211.request(nl80211.const.NL80211_CMD_GET_WIPHY, nl80211.const.NLM_F_DUMP, { split_wiphy_dump: true }); interfaces = nl80211.request(nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP); wireless_status = ubus.call('network.wireless', 'status'); ifaces = {}; for (let k, v in interfaces) { let iface = ifaces[v.ifname] = v; iface.mode = iftypes[iface.iftype] ?? 'unknown', iface.survey = get_survey(iface); iface.noise = get_noise(iface); iface.country = get_country(iface); iface.max_power = get_max_power(iface); iface.assoclist = nl80211.request(nl80211.const.NL80211_CMD_GET_STATION, nl80211.const.NLM_F_DUMP, { dev: v.ifname }) ?? []; iface.hardware = get_hardware_id(iface); iface.bss_info = ubus.call('hostapd', 'bss_info', { iface: v.ifname }); if (!iface.bss_info) iface.bss_info = ubus.call('wpa_supplicant', 'bss_info', { iface: v.ifname }); } for (let radio, data in wireless_status) for (let k, v in data.interfaces) { if (!v.ifname || !ifaces[v.ifname]) continue; ifaces[v.ifname].ssid = v.config.ssid || v.config.mesh_id; ifaces[v.ifname].radio = data.config; let bss_info = ifaces[v.ifname].bss_info; let owe_transition_ifname = bss_info?.owe_transition_ifname; if (v.config.owe_transition && ifaces[owe_transition_ifname]) { ifaces[v.ifname].owe_transition_ifname = owe_transition_ifname; ifaces[owe_transition_ifname].ssid = v.config.ssid; ifaces[owe_transition_ifname].radio = data.config; ifaces[owe_transition_ifname].owe_transition_ifname = v.ifname } } }; function format_channel(freq) { if (freq < 1000) return 0; if (freq == 2484) return 14; if (freq == 5935) return 2; if (freq < 2484) return (freq - 2407) / 5; if (freq >= 4910 && freq <= 4980) return (freq - 4000) / 5; if (freq < 5950) return (freq - 5000) / 5; if (freq <= 45000) return (freq - 5950) / 5; if (freq >= 58320 && freq <= 70200) return (freq - 56160) / 2160; return 'unknown'; } function format_band(freq) { if (freq == 5935) return '6'; if (freq < 2484) return '2.4'; if (freq < 5950) return '5'; if (freq <= 45000) return '6'; return '60'; } function format_frequency(freq) { return freq ? sprintf('%.03f', freq / 1000.0) : 'unknown'; } function format_rate(rate) { return rate ? sprintf('%.01f', rate / 10.0) : 'unknown'; } function format_expected_throughput(rate) { return rate ? sprintf('%.01f', rate / 1000.0) : 'unknown'; } function format_mgmt_key(key) { switch(+key) { case 1: return '802.1x'; case 2: return 'WPA PSK'; case 3: return 'FT 802.1x'; case 4: return 'FT PSK'; case 5: case 11: // deprecated 802.1x-suiteB-SHA256 return '802.1x-SHA256'; case 6: return 'WPA PSK-SHA256'; case 8: // SAE with SHA256 case 24: // SAE using group-dependent hash return 'SAE'; case 9: // FT SAE with SHA256 case 25: // FT SAE using group-dependent hash return 'FT SAE'; case 12: return '802.1x-192bit'; case 13: return 'FT 802.1x-SHA384'; case 14: return 'FILS-SHA256'; case 15: return 'FILS-SHA384'; case 16: return 'FT FILS-SHA256'; case 17: return 'FT FILS-SHA384'; case 18: return 'OWE'; case 19: return 'FT PSK-SHA384'; case 20: return 'WPA PSK-SHA384'; } return null; } function assoc_flags(data) { const assoc_mhz = { width_40: 40, width_80: 80, width_80p80: '80+80', width_160: 160, width_320: 320, width_10: 10, width_5: 5 }; let mhz = 'unknown'; for (let k, v in assoc_mhz) if (data[k]) mhz = v; const assoc_flags = { mcs: { mcs: 'MCS', }, vht_mcs: { vht_mcs: 'VHT-MCS', vht_nss: 'VHT-NSS', }, he_mcs: { he_mcs: 'HE-MCS', he_nss: 'HE-NSS', he_gi: 'HE-GI', he_dcm: 'HE-DCM', }, eht_mcs: { eht_mcs: 'EHT-MCS', eht_nss: 'EHT-NSS', eht_gi: 'EHT-GI', }, }; let flags = []; for (let k, v in assoc_flags) { if (!data[k]) continue; let first = 0; for (let name, flag in v) { if (data[name] == null) continue; push(flags, `${flag} ${data[name]}`); if (!first++) push(flags, `${mhz}MHz`); } } return flags; } function dbm2mw(dbm) { const LOG10_MAGIC = 1.25892541179; let res = 1.0; let ip = dbm / 10; let fp = dbm % 10; for (let k = 0; k < ip; k++) res *= 10; for (let k = 0; k < fp; k++) res *= LOG10_MAGIC; return int(res); } function dbm2quality(dbm) { let quality = dbm; if (quality < -110) quality = -110; else if (quality > -40) quality = -40; quality += 110; return quality; } function hwmodelist(name) { const mode = { 'HT*': 'n', 'VHT*': 'ac', 'HE*': 'ax', 'EHT*': 'be' }; let iface = ifaces[name]; let phy = board_data.wlan?.['phy' + iface.wiphy]; if (!phy || !iface.radio?.band) return ''; let htmodes = phy.info.bands[uc(iface.radio.band)].modes; let list = []; if (iface.radio.band == '2g' && 'NOHT' in htmodes) push(list, 'g/b'); for (let k, v in mode) for (let htmode in htmodes) if (wildcard(htmode, k)) push(list, v); return join('/', reverse(uniq(list))); } export function assoclist(dev) { let stations = ifaces[dev].assoclist; let ret = {}; for (let station in stations) { let sta = { mac: uc(station.mac), signal: station.sta_info.signal_avg, noise: ifaces[dev].noise, snr: station.sta_info.signal_avg - ifaces[dev].noise, inactive_time: station.sta_info.inactive_time, rx: { bitrate: format_rate(station.sta_info.rx_bitrate?.bitrate ?? 0), bitrate_raw: station.sta_info.rx_bitrate?.bitrate ?? 0, packets: station.sta_info.rx_packets ?? 0, flags: assoc_flags(station.sta_info.rx_bitrate ?? {}), }, tx: { bitrate: format_rate(station.sta_info.tx_bitrate?.bitrate ?? 0), bitrate_raw: station.sta_info.tx_bitrate?.bitrate ?? 0, packets: station.sta_info.tx_packets ?? 0, flags: assoc_flags(station.sta_info.tx_bitrate ?? {}), }, expected_throughput: format_expected_throughput(station.sta_info.expected_throughput ?? 0), }; ret[sta.mac] = sta; } return ret; }; export function freqlist(name) { const freq_flags = { no_10mhz: 'NO_10MHZ', no_20mhz: 'NO_20MHZ', no_ht40_minus: 'NO_HT40-', no_ht40_plus: 'NO_HT40+', no_80mhz: 'NO_80MHZ', no_160mhz: 'NO_160MHZ', indoor_only: 'INDOOR_ONLY', no_ir: 'NO_IR', no_he: 'NO_HE', radar: 'RADAR_DETECTION', }; let iface = ifaces[name]; let phy = find_phy(iface.wiphy); let channels = []; for (let k, band in phy.wiphy_bands) { if (!band) continue; let band_name = format_band(band.freqs[0].freq); for (let freq in band.freqs) { if (freq.disabled) continue; let channel = { freq: format_frequency(freq.freq), band: band_name, channel: format_channel(freq.freq), flags: [], active: iface.wiphy_freq == freq.freq, }; for (let k, v in freq_flags) if (freq[k]) push(channel.flags, v); push(channels, channel); } } return channels; }; export function info(name) { let order = []; for (let iface, data in ifaces) push(order, iface); let list = []; for (let iface in sort(order)) { if (name && iface != name) continue; let data = ifaces[iface]; let dev = { iface, ssid: data.ssid, mac: data.mac, mode: data.mode, channel: format_channel(data.wiphy_freq), freq: format_frequency(data.wiphy_freq), htmode: data.radio?.htmode, center_freq1: format_channel(data.center_freq1) || 'unknown', center_freq2: format_channel(data.center_freq2) || 'unknown', txpower: data.wiphy_tx_power_level / 100, noise: data.noise, signal: 0, bitrate: 0, encryption: 'unknown', hwmode: hwmodelist(iface), phy: 'phy' + data.wiphy, vaps: 'no', hw_type: data.hardware.type, hw_id: data.hardware.id, power_offset: data.hardware.power_offset || 'none', channel_offset: data.hardware.channel_offset || 'none', }; let phy = find_phy(data.wiphy); for (let limit in phy.interface_combinations?.[0]?.limits) if (limit.types?.ap && limit.max > 1) dev.vaps = 'yes'; if (data.bss_info) { if (data.bss_info.wpa_key_mgmt && data.bss_info.wpa_pairwise) dev.encryption = `${replace(data.bss_info.wpa_key_mgmt, ' ', ' / ')} (${data.bss_info.wpa_pairwise})`; else if (data.owe_transition_ifname) dev.encryption = 'none (OWE transition)'; else dev.encryption = 'none'; } let stations = assoclist(iface); for (let k, station in stations) { dev.signal += station.signal; dev.bitrate += station.tx.bitrate_raw; } dev.signal /= length(data.assoclist) || 1; dev.bitrate /= length(data.assoclist) || 1; dev.bitrate = format_rate(dev.bitrate); dev.quality = dbm2quality(dev.signal); if (data.owe_transition_ifname) dev.owe_transition_ifname = data.owe_transition_ifname; push(list, dev); } return list; }; export function htmodelist(name) { let iface = ifaces[name]; let phy = board_data.wlan?.['phy' + iface.wiphy]; if (!phy || !iface.radio.band) return []; return filter(phy.info.bands[uc(iface.radio.band)].modes, (v) => v != 'NOHT'); }; export function txpowerlist(name) { let iface = ifaces[name]; let max_power = iface.max_power / 100; let match = iface.wiphy_tx_power_level / 100; let list = []; for (let power = 0; power <= max_power; power++) { let txpower = { dbm: power, mw: dbm2mw(power), active: power == match, }; push(list, txpower); } return list; }; export function countrylist(dev) { let iface = ifaces[dev]; let list = { active: iface.country, countries, }; return list; }; function scan_extension(ext, cell) { const eht_chan_width = [ '20 MHz', '40 MHz', '80 MHz', '160 MHz', '320 MHz']; switch(ord(ext, 0)) { case 36: let offset = 7; if (!(ord(ext, 3) & 0x2)) break; if (ord(ext, 2) & 0x40) offset += 3; if (ord(ext, 2) & 0x80) offset += 1; cell.he = { chan_width: eht_chan_width[ord(ext, offset + 1) & 0x3], center_chan_1: ord(ext, offset + 2), center_chan_2: ord(ext, offset + 3), }; break; case 106: if (!(ord(ext, 1) & 0x1)) break; cell.eht = { chan_width: eht_chan_width[ord(ext, 6) & 0x7], center_chan_1: ord(ext, 7), center_chan_2: ord(ext, 8), }; break; } }; export function scan(dev) { const rsn_cipher = [ 'NONE', 'WEP-40', 'TKIP', 'WRAP', 'CCMP', 'WEP-104', 'AES-OCB', 'CKIP', 'GCMP', 'GCMP-256', 'CCMP-256' ]; const ht_chan_offset = [ 'no secondary', 'above', '[reserved]', 'below' ]; const vht_chan_width = [ '20 or 40 MHz', '80 MHz', '80+80 MHz', '160 MHz' ]; const ht_chan_width = [ '20 MHz', '40 MHz or higher' ]; const SCAN_FLAG_AP = (1<<2); let params = { dev, scan_flags: SCAN_FLAG_AP, scan_ssids: [ '' ], }; let res = nl80211.request(nl80211.const.NL80211_CMD_TRIGGER_SCAN, 0, params); if (res === false) { printf("Unable to trigger scan: " + nl80211.error() + "\n"); exit(1); } res = nl80211.waitfor([ nl80211.const.NL80211_CMD_NEW_SCAN_RESULTS, nl80211.const.NL80211_CMD_SCAN_ABORTED ], 5000); if (!res) { printf("Netlink error while awaiting scan results: " + nl80211.error() + "\n"); exit(1); } else if (res.cmd == nl80211.const.NL80211_CMD_SCAN_ABORTED) { printf("Scan aborted by kernel\n"); exit(1); } let scan = nl80211.request(nl80211.const.NL80211_CMD_GET_SCAN, nl80211.const.NLM_F_DUMP, { dev }); let cells = []; for (let k, bss in scan) { bss = bss.bss; let cell = { bssid: uc(bss.bssid), frequency: format_frequency(bss.frequency), band: format_band(bss.frequency), channel: format_channel(bss.frequency), dbm: bss.signal_mbm / 100, }; if (bss.capability & (1 << 1)) cell.mode = 'Ad-Hoc'; else if (bss.capability & (1 << 0)) cell.mode = 'Master'; else cell.mode = 'Mesh Point'; cell.quality = dbm2quality(cell.dbm); for (let ie in bss.information_elements) switch(ie.type) { case 0: case 114: cell.ssid = ie.data; break; case 7: cell.country = substr(ie.data, 0, 2); break; case 48: cell.crypto = { group: rsn_cipher[ord(ie.data, 5)] ?? '', pair: [], key_mgmt: [], }; let offset = 6; let count = ord(ie.data, offset); offset += 2; for (let i = 0; i < count; i++) { let key = rsn_cipher[ord(ie.data, offset + 3)]; if (key) push(cell.crypto.pair, key); offset += 4; } count = ord(ie.data, offset); offset += 2; for (let i = 0; i < count; i++) { let key = format_mgmt_key(ord(ie.data, offset + 3)); if (key) push(cell.crypto.key_mgmt, key); offset += 4; } break; case 61: cell.ht = { primary_channel: ord(ie.data, 0), secondary_chan_off: ht_chan_offset[ord(ie.data, 1) & 0x3], chan_width: ht_chan_width[(ord(ie.data, 1) & 0x4) >> 2], }; break; case 192: cell.vht = { chan_width: vht_chan_width[ord(ie.data, 0)], center_chan_1: ord(ie.data, 1), center_chan_2: ord(ie.data, 2), }; break; case 255: scan_extension(ie.data, cell); break; }; push(cells, cell); } return cells; }; update(); 07070100E8154C000081A400000000000000000000000169B8AF0D0001380E000000080000000100000000000000000000001700000000usr/share/ucode/fw4.ucconst fs = require("fs"); const uci = require("uci"); const ubus = require("ubus"); const STATEFILE = "/var/run/fw4.state"; const PARSE_LIST = 0x01; const FLATTEN_LIST = 0x02; const NO_INVERT = 0x04; const UNSUPPORTED = 0x08; const REQUIRED = 0x10; const DEPRECATED = 0x20; const ipv4_icmptypes = { "any": [ 0xFF, 0, 0xFF ], "echo-reply": [ 0, 0, 0xFF ], "pong": [ 0, 0, 0xFF ], /* Alias */ "destination-unreachable": [ 3, 0, 0xFF ], "network-unreachable": [ 3, 0, 0 ], "host-unreachable": [ 3, 1, 1 ], "protocol-unreachable": [ 3, 2, 2 ], "port-unreachable": [ 3, 3, 3 ], "fragmentation-needed": [ 3, 4, 4 ], "source-route-failed": [ 3, 5, 5 ], "network-unknown": [ 3, 6, 6 ], "host-unknown": [ 3, 7, 7 ], "network-prohibited": [ 3, 9, 9 ], "host-prohibited": [ 3, 10, 10 ], "TOS-network-unreachable": [ 3, 11, 11 ], "TOS-host-unreachable": [ 3, 12, 12 ], "communication-prohibited": [ 3, 13, 13 ], "host-precedence-violation": [ 3, 14, 14 ], "precedence-cutoff": [ 3, 15, 15 ], "source-quench": [ 4, 0, 0xFF ], "redirect": [ 5, 0, 0xFF ], "network-redirect": [ 5, 0, 0 ], "host-redirect": [ 5, 1, 1 ], "TOS-network-redirect": [ 5, 2, 2 ], "TOS-host-redirect": [ 5, 3, 3 ], "echo-request": [ 8, 0, 0xFF ], "ping": [ 8, 0, 0xFF ], /* Alias */ "router-advertisement": [ 9, 0, 0xFF ], "router-solicitation": [ 10, 0, 0xFF ], "time-exceeded": [ 11, 0, 0xFF ], "ttl-exceeded": [ 11, 0, 0xFF ], /* Alias */ "ttl-zero-during-transit": [ 11, 0, 0 ], "ttl-zero-during-reassembly": [ 11, 1, 1 ], "parameter-problem": [ 12, 0, 0xFF ], "ip-header-bad": [ 12, 0, 0 ], "required-option-missing": [ 12, 1, 1 ], "timestamp-request": [ 13, 0, 0xFF ], "timestamp-reply": [ 14, 0, 0xFF ], "address-mask-request": [ 17, 0, 0xFF ], "address-mask-reply": [ 18, 0, 0xFF ] }; const ipv6_icmptypes = { /* "name": [ type-code, code-min, code-max ] */ "destination-unreachable": [ 1, 0, 0xFF ], "no-route": [ 1, 0, 0 ], "communication-prohibited": [ 1, 1, 1 ], "address-unreachable": [ 1, 3, 3 ], "port-unreachable": [ 1, 4, 4 ], "packet-too-big": [ 2, 0, 0xFF ], "time-exceeded": [ 3, 0, 0xFF ], "ttl-exceeded": [ 3, 0, 0xFF ], /* Alias */ "ttl-zero-during-transit": [ 3, 0, 0 ], "ttl-zero-during-reassembly": [ 3, 1, 1 ], "parameter-problem": [ 4, 0, 0xFF ], "bad-header": [ 4, 0, 0 ], "unknown-header-type": [ 4, 1, 1 ], "unknown-option": [ 4, 2, 2 ], "echo-request": [ 128, 0, 0xFF ], "ping": [ 128, 0, 0xFF ], /* Alias */ "echo-reply": [ 129, 0, 0xFF ], "pong": [ 129, 0, 0xFF ], /* Alias */ /* only code zero (0) */ "multicast-listener-query": [ 130, 0, 0xFF ], "multicast-listener-report": [ 131, 0, 0xFF ], "multicast-listener-done": [ 132, 0, 0xFF ], "router-solicitation": [ 133, 0, 0xFF ], "router-advertisement": [ 134, 0, 0xFF ], "neighbour-solicitation": [ 135, 0, 0xFF ], "neighbor-solicitation": [ 135, 0, 0xFF ], /* Alias */ "neighbour-advertisement": [ 136, 0, 0xFF ], "neighbor-advertisement": [ 136, 0, 0xFF ], /* Alias */ "redirect": [ 137, 0, 0xFF ], /* codes 0, 1, 255 */ "router-renumbering": [ 138, 0, 0xFF ], /* codes 0, 1, 2 */ "node-info-query": [ 139, 0, 0xFF ], /* codes 0, 1, 2 */ "node-info-response": [ 140, 0, 0xFF ], "inverse-neighbour-discovery-solicitation-message": [ 141, 0, 0xFF ], "inverse-neighbor-discovery-solicitation-message": [ 141, 0, 0xFF ], /* Alias */ "inverse-neighbour-discovery-advertisement-message": [ 142, 0, 0xFF ], "inverse-neighbor-discovery-advertisement-message": [ 142, 0, 0xFF ], /* Alias */ "v2-multicast-listener-report": [ 143, 0, 0xFF ], "home-agent-address-discovery-request-message": [ 144, 0, 0xFF ], "home-agent-address-discovery-reply-message": [ 145, 0, 0xFF ], "mobile-prefix-solicitation": [ 146, 0, 0xFF ], "mobile-prefix-advertisement": [ 147, 0, 0xFF ], /* SEND */ "certification-path-solicitation-message": [ 148, 0, 0xFF ], "certification-path-advertisement-message": [ 149, 0, 0xFF ], "seamoby-protocol-message": [ 150, 0, 0xFF ], /* IPv6 multicast: FF02:0:0:0:0:0:0:6A, no code fields */ "multicast-router-advertisement": [ 151, 0, 0xFF ], "multicast-router-solicitation": [ 152, 0, 0xFF ], "multicast-router-termination": [ 153, 0, 0xFF ], /* codes 0-5, 6-255 */ "fmipv6-message": [ 154, 0, 0xFF ], "rpl-control-message": [ 155, 0, 0xFF ], "ilnpv6-locator-update-message": [ 156, 0, 0xFF ], /* codes 0-4, 5-15 */ "duplicate-address-request": [ 157, 0, 0xFF ], /* codes 0-4, 5-15 */ "duplicate-address-confirmation": [ 158, 0, 0xFF ], /* Multicast Protocol for Low-Power */ "mpl-control-message": [ 159, 0, 0xFF ], /* codes 0, 1-255 */ "extended-echo-request": [ 160, 0, 0xFF ], "extended-ping": [ 160, 0, 0xFF ], /* Alias */ /* codes 0-4, 5-255 */ "extended-echo-reply": [ 161, 0, 0xFF ], "extended-pong": [ 161, 0, 0xFF ] /* Alias */ }; const dscp_classes = { "CS0": 0x00, "CS1": 0x08, "CS2": 0x10, "CS3": 0x18, "CS4": 0x20, "CS5": 0x28, "CS6": 0x30, "CS7": 0x38, "BE": 0x00, "LE": 0x01, "AF11": 0x0a, "AF12": 0x0c, "AF13": 0x0e, "AF21": 0x12, "AF22": 0x14, "AF23": 0x16, "AF31": 0x1a, "AF32": 0x1c, "AF33": 0x1e, "AF41": 0x22, "AF42": 0x24, "AF43": 0x26, "EF": 0x2e }; function to_mask(bits, v6) { let m = [], n = false; if (bits < 0) { n = true; bits = -bits; } if (bits > (v6 ? 128 : 32)) return null; for (let i = 0; i < (v6 ? 16 : 4); i++) { let b = (bits < 8) ? bits : 8; m[i] = (n ? ~(0xff << (8 - b)) : (0xff << (8 - b))) & 0xff; bits -= b; } return arrtoip(m); } function to_bits(mask) { let a = iptoarr(mask); if (!a) return null; let bits = 0; for (let i = 0, z = false; i < length(a); i++) { z ||= !a[i]; while (!z && (a[i] & 0x80)) { a[i] = (a[i] << 1) & 0xff; bits++; } if (a[i]) return null; } return bits; } function apply_mask(addr, mask) { let a = iptoarr(addr); if (!a) return null; if (type(mask) == "int") { for (let i = 0; i < length(a); i++) { let b = (mask < 8) ? mask : 8; a[i] &= (0xff << (8 - b)) & 0xff; mask -= b; } } else { let m = iptoarr(mask); if (!m || length(a) != length(m)) return null; for (let i = 0; i < length(a); i++) a[i] &= m[i]; } return arrtoip(a); } function to_array(x) { if (type(x) == "array") return x; if (x == null) return []; if (type(x) == "object") return [ x ]; x = trim("" + x); return (x == "") ? [] : split(x, /[ \t]+/); } function filter_pos(x) { let rv = filter(x, e => !e.invert); return length(rv) ? rv : null; } function filter_neg(x) { let rv = filter(x, e => e.invert); return length(rv) ? rv : null; } function null_if_empty(x) { return length(x) ? x : null; } function subnets_split_af(x) { let rv = {}; for (let ag in to_array(x)) { for (let a in filter(ag.addrs, a => (a.family == 4))) push(rv[0] ||= [], { ...a, invert: ag.invert }); for (let a in filter(ag.addrs, a => (a.family == 6))) push(rv[1] ||= [], { ...a, invert: ag.invert }); } if (rv[0] || rv[1]) rv.family = (!rv[0] ^ !rv[1]) ? (rv[0] ? 4 : 6) : 0; return rv; } function subnets_group_by_masking(x) { let groups = [], plain = [], nc = [], invert_plain = [], invert_masked = []; for (let a in to_array(x)) { if (a.bits == -1 && !a.invert) push(nc, a); else if (!a.invert) push(plain, a); else if (a.bits == -1) push(invert_masked, a); else push(invert_plain, a); } for (let a in nc) push(groups, [ null, null_if_empty(invert_plain), [ a, ...invert_masked ] ]); if (length(plain)) { push(groups, [ plain, null_if_empty(invert_plain), null_if_empty(invert_masked) ]); } else if (!length(groups)) { push(groups, [ null, null_if_empty(invert_plain), null_if_empty(invert_masked) ]); } return groups; } function ensure_tcpudp(x) { if (length(filter(x, p => (p.name == "tcp" || p.name == "udp")))) return true; let rest = filter(x, p => !p.any), any = filter(x, p => p.any); if (length(any) && !length(rest)) { splice(x, 0); push(x, { name: "tcp" }, { name: "udp" }); return true; } return false; } let is_family = (x, v) => (!x.family || x.family == v); let family_is_ipv4 = (x) => (!x.family || x.family == 4); let family_is_ipv6 = (x) => (!x.family || x.family == 6); function infer_family(f, objects) { let res = f; let by = null; for (let i = 0; i < length(objects); i += 2) { let objs = to_array(objects[i]), desc = objects[i + 1]; for (let obj in objs) { if (!obj || !obj.family || obj.family == res) continue; if (!res) { res = obj.family; by = obj.desc; continue; } return by ? `references IPv${obj.family} only ${desc} but is restricted to IPv${res} by ${by}` : `is restricted to IPv${res} but referenced ${desc} is IPv${obj.family} only`; } } return res; } function map_setmatch(set, match, proto) { if (!set || (('inet_service' in set.types) && proto != 'tcp' && proto != 'udp')) return null; let fields = []; for (let i, t in set.types) { let dir = ((match.dir?.[i] || set.directions[i] || 'src') == 'src' ? 's' : 'd'); switch (t) { case 'ipv4_addr': fields[i] = `ip ${dir}addr`; break; case 'ipv6_addr': fields[i] = `ip6 ${dir}addr`; break; case 'ether_addr': if (dir != 's') return NaN; fields[i] = 'ether saddr'; break; case 'inet_service': fields[i] = `${proto} ${dir}port`; break; } } return fields; } function resolve_lower_devices(devstatus, devname) { let dir = fs.opendir(`/sys/class/net/${devname}`); let devs = []; if (dir) { switch (devstatus[devname]?.devtype) { case 'vlan': case 'bridge': let e; while ((e = dir.read()) != null) if (index(e, "lower_") === 0) push(devs, ...resolve_lower_devices(devstatus, substr(e, 6))); break; default: push(devs, devname); break; } dir.close(); } return devs; } function nft_json_command(...args) { let cmd = [ "/usr/sbin/nft", "--terse", "--json", ...args ]; let nft = fs.popen(join(" ", cmd), "r"); let info; if (nft) { try { info = filter(json(nft.read("all"))?.nftables, item => (type(item) == "object" && !item.metainfo)); } catch (e) { warn(`Unable to parse nftables JSON output: ${e}\n`); } nft.close(); } else { warn(`Unable to popen() ${cmd}: ${fs.error()}\n`); } return info || []; } function nft_try_hw_offload(devices) { let nft_test = ` add table inet fw4-hw-offload-test; add flowtable inet fw4-hw-offload-test ft { hook ingress priority 0; devices = { "${join('", "', devices)}" }; flags offload; } `; let rc = system(`/usr/sbin/nft -c '${replace(nft_test, "'", "'\\''")}' 2>/dev/null`); return (rc == 0); } return { read_kernel_version: function() { let fd = fs.open("/proc/version", "r"), v = 0; if (fd) { let m = match(fd.read("line"), /^Linux version ([0-9]+)\.([0-9]+)(\.([0-9]+))?/); v = m ? (+m[1] << 24) | (+m[2] << 16) | (+m[4]) : 0; fd.close(); } return v; }, resolve_hw_offload_devices: function() { if (!this.default_option("flow_offloading_hw")) return null; let devstatus = null; let devices = null; let bus = ubus.connect(); if (bus) { devstatus = bus.call("network.device", "status") || {}; bus.disconnect(); } for (let zone in this.zones()) for (let device in zone.related_physdevs) push(devices ||= [], ...resolve_lower_devices(devstatus, device)); if (!devices) return null; devices = sort(uniq(devices)); if (!nft_try_hw_offload(devices)) { this.warn('Hardware flow offloading unavailable, falling back to software offloading'); this.state.defaults.flow_offloading_hw = false; return null; } return devices; }, resolve_offload_devices: function() { if (!this.default_option("flow_offloading")) return []; let devices = this.resolve_hw_offload_devices(); if (!devices) { devices = []; for (let zone in this.zones()) for (let device in zone.related_physdevs) if (fs.access(`/sys/class/net/${device}`)) push(devices, device); devices = sort(uniq(devices)); } return devices; }, check_set_types: function() { let sets = {}; for (let item in nft_json_command("list", "sets", "inet")) if (item.set?.table == "fw4") sets[item.set.name] = (type(item.set.type) == "array") ? item.set.type : [ item.set.type ]; return sets; }, check_flowtable: function() { for (let item in nft_json_command("list", "flowtables", "inet")) if (item.flowtable?.table == "fw4" && item.flowtable?.name == "ft") return true; return false; }, read_state: function() { let fd = fs.open(STATEFILE, "r"); let state = null; if (fd) { try { state = json(fd.read("all")); } catch (e) { warn(`Unable to parse '${STATEFILE}': ${e}\n`); } fd.close(); } return state; }, read_ubus: function() { let self = this, ifaces, services, rules = [], networks = {}, bus = ubus.connect(); if (bus) { ifaces = bus.call("network.interface", "dump"); services = bus.call("service", "get_data", { "type": "firewall" }); bus.disconnect(); } else { warn(`Unable to connect to ubus: ${ubus.error()}\n`); } // // Gather logical network information from ubus // if (type(ifaces?.interface) == "array") { for (let ifc in ifaces.interface) { let net = { up: ifc.up, device: ifc.l3_device ?? ifc.device, physdev: ifc.device, zone: ifc.data?.zone }; if (type(ifc["ipv4-address"]) == "array") { for (let addr in ifc["ipv4-address"]) { push(net.ipaddrs ||= [], { family: 4, addr: addr.address, mask: to_mask(addr.mask, false), bits: addr.mask }); } } if (type(ifc["ipv6-address"]) == "array") { for (let addr in ifc["ipv6-address"]) { push(net.ipaddrs ||= [], { family: 6, addr: addr.address, mask: to_mask(addr.mask, true), bits: addr.mask }); } } if (type(ifc["ipv6-prefix-assignment"]) == "array") { for (let addr in ifc["ipv6-prefix-assignment"]) { if (addr["local-address"]) { push(net.ipaddrs ||= [], { family: 6, addr: addr["local-address"].address, mask: to_mask(addr["local-address"].mask, true), bits: addr["local-address"].mask }); } } } if (type(ifc.data?.firewall) == "array") { let n = 0; for (let rulespec in ifc.data.firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${ifc.interface}[${ifc.proto}] ${rulespec.type || 'rule'} ${n}` : rulespec.name, device: rulespec.device ?? ifc.l3_device ?? ifc.device }); n++; } } networks[ifc.interface] = net; } } // // Gather firewall rule definitions from ubus services // if (type(services) == "object") { for (let svcname, service in services) { if (type(service?.firewall) == "array") { let n = 0; for (let rulespec in services[svcname].firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${svcname} ${rulespec.type || 'rule'} ${n}` : rulespec.name }); n++; } } for (let svcinst, instance in service) { if (type(instance?.firewall) == "array") { let n = 0; for (let rulespec in instance.firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${svcname}[${svcinst}] ${rulespec.type || 'rule'} ${n}` : rulespec.name }); n++; } } } } } return { networks: networks, ubus_rules: rules }; }, load: function(use_statefile) { let self = this; this.state = use_statefile ? this.read_state() : null; this.cursor = uci.cursor(); this.cursor.load("firewall"); this.cursor.load("/usr/share/firewall4/helpers"); if (!this.state) this.state = this.read_ubus(); this.kernel = this.read_kernel_version(); // // Read helper mapping // this.cursor.foreach("helpers", "helper", h => self.parse_helper(h)); // // Read default policies // this.cursor.foreach("firewall", "defaults", d => self.parse_defaults(d)); if (!this.state.defaults) this.parse_defaults({}); // // Build list of ipsets // if (!this.state.ipsets) { map(filter(this.state.ubus_rules, n => (n.type == "ipset")), s => self.parse_ipset(s)); this.cursor.foreach("firewall", "ipset", s => self.parse_ipset(s)); } // // Build list of logical zones // if (!this.state.zones) this.cursor.foreach("firewall", "zone", z => self.parse_zone(z)); // // Build list of rules // map(filter(this.state.ubus_rules, r => (r.type == "rule")), r => self.parse_rule(r)); this.cursor.foreach("firewall", "rule", r => self.parse_rule(r)); // // Build list of forwardings // this.cursor.foreach("firewall", "forwarding", f => self.parse_forwarding(f)); // // Build list of redirects // map(filter(this.state.ubus_rules, r => (r.type == "redirect")), r => self.parse_redirect(r)); this.cursor.foreach("firewall", "redirect", r => self.parse_redirect(r)); // // Build list of snats // map(filter(this.state.ubus_rules, n => (n.type == "nat")), n => self.parse_nat(n)); this.cursor.foreach("firewall", "nat", n => self.parse_nat(n)); // // Build list of includes // this.cursor.foreach("firewall", "include", i => self.parse_include(i)); // // Discover automatic includes // if (this.default_option("auto_includes")) { for (let position in [ 'ruleset-pre', 'ruleset-post', 'table-pre', 'table-post', 'chain-pre', 'chain-post' ]) for (let chain in (position in [ 'chain-pre', 'chain-post' ]) ? fs.lsdir(`/usr/share/nftables.d/${position}`) : [ null ]) for (let path in fs.glob(`/usr/share/nftables.d/${position}${chain ? `/${chain}` : ''}/*.nft`)) if (fs.access(path)) this.parse_include({ type: 'nftables', position, chain, path }); } if (use_statefile) { let fd = fs.open(STATEFILE, "w"); if (fd) { fd.write({ zones: this.state.zones, ipsets: this.state.ipsets, networks: this.state.networks, ubus_rules: this.state.ubus_rules, includes: this.state.includes }); fd.close(); } else { warn(`Unable to write '${STATEFILE}': ${fs.error()}\n`); } } }, warn: function(fmt, ...args) { if (getenv("QUIET")) return; let msg = sprintf(fmt, ...args); if (getenv("TTY")) warn(`\033[33m${msg}\033[m\n`); else warn(`[!] ${msg}\n`); }, get: function(sid, opt) { return this.cursor.get("firewall", sid, opt); }, get_all: function(sid) { return this.cursor.get_all("firewall", sid); }, parse_options: function(s, spec) { let rv = {}; for (let key, val in spec) { let datatype = `parse_${val[0]}`, defval = val[1], flags = val[2] || 0, parsefn = (flags & PARSE_LIST) ? "parse_list" : "parse_opt"; let res = this[parsefn](s, key, datatype, defval, flags); if (res !== res) return false; if (type(res) == "object" && res.invert && (flags & NO_INVERT)) { this.warn_section(s, `option '${key}' must not be negated`); return false; } if (res != null) { if (flags & DEPRECATED) this.warn_section(s, `option '${key}' is deprecated by fw4`); else if (flags & UNSUPPORTED) this.warn_section(s, `option '${key}' is not supported by fw4`); else rv[key] = res; } } for (let opt in s) { if (index(opt, '.') != 0 && opt != 'type' && !exists(spec, opt)) { this.warn_section(s, `specifies unknown option '${opt}'`); } } return rv; }, parse_subnet: function(subnet) { let parts = split(subnet, "/"); let a, b, m, n; switch (length(parts)) { case 2: a = iptoarr(parts[0]); m = iptoarr(parts[1]); if (!a) return null; if (m) { if (length(a) != length(m)) return null; b = to_bits(parts[1]); /* allow non-contiguous masks such as `::ffff:ffff:ffff:ffff` */ if (b == null) { b = -1; for (let i, x in m) a[i] &= x; } m = arrtoip(m); } else { b = +parts[1]; if (type(b) != "int") return null; m = to_mask(b, length(a) == 16); b = max(-1, b); } return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), mask: m, bits: b }]; case 1: parts = split(parts[0], "-"); switch (length(parts)) { case 2: a = iptoarr(parts[0]); b = iptoarr(parts[1]); if (a && b && length(a) == length(b)) { return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), addr2: arrtoip(b), range: true }]; } break; case 1: a = iptoarr(parts[0]); if (a) { return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), mask: to_mask(length(a) * 8, length(a) == 16), bits: length(a) * 8 }]; } n = this.state.networks[parts[0]]; if (n) return [ ...(n.ipaddrs || []) ]; } } return null; }, parse_enum: function(val, choices) { if (type(val) == "string") { val = lc(val); for (let i = 0; i < length(choices); i++) if (lc(substr(choices[i], 0, length(val))) == val) return choices[i]; } return null; }, section_id: function(sid) { let s = this.get_all(sid); if (!s) return null; if (s[".anonymous"]) { let c = 0; this.cursor.foreach("firewall", s[".type"], function(ss) { if (ss[".name"] == s[".name"]) return false; c++; }); return `@${s['.type']}[${c}]`; } return s[".name"]; }, warn_section: function(s, msg) { if (s[".name"]) { if (s.name) this.warn("Section %s (%s) %s", this.section_id(s[".name"]), s.name, msg); else this.warn("Section %s %s", this.section_id(s[".name"]), msg); } else { if (s.name) this.warn("ubus %s (%s) %s", s.type || "rule", s.name, msg); else this.warn("ubus %s %s", s.type || "rule", msg); } }, parse_policy: function(val) { return this.parse_enum(val, [ "accept", "reject", "drop" ]); }, parse_bool: function(val) { if (val == "1" || val == "on" || val == "true" || val == "yes") return true; else if (val == "0" || val == "off" || val == "false" || val == "no") return false; else return null; }, parse_family: function(val) { if (val == 'any' || val == 'all' || val == '*') return 0; else if (val == 'inet' || index(val, '4') > -1) return 4; else if (index(val, '6') > -1) return 6; return null; }, parse_zone_ref: function(val) { if (val == null) return null; if (val == '*') return { any: true }; for (let zone in this.state.zones) { if (zone.name == val) { return { any: false, zone: zone }; } } return null; }, parse_device: function(val) { let rv = this.parse_invert(val); if (!rv) return null; if (rv.val == '*') rv.any = true; else rv.device = rv.val; return rv; }, parse_direction: function(val) { if (val == 'in' || val == 'ingress') return false; else if (val == 'out' || val == 'egress') return true; return null; }, parse_setmatch: function(val) { let rv = this.parse_invert(val); if (!rv) return null; rv.val = trim(replace(rv.val, /^[^ \t]+/, function(m) { rv.name = m; return ''; })); let dir = split(rv.val, /[ \t,]/); for (let i = 0; i < 3 && i < length(dir); i++) { if (dir[i] == "dst" || dir[i] == "dest") (rv.dir ||= [])[i] = "dst"; else if (dir[i] == "src") (rv.dir ||= [])[i] = "src"; } return length(rv.name) ? rv : null; }, parse_cthelper: function(val) { let rv = this.parse_invert(val); if (!rv) return null; let helper = filter(this.state.helpers, h => (h.name == rv.val))?.[0]; return helper ? { ...rv, ...helper } : null; }, parse_protocol: function(val) { let p = this.parse_invert(val); if (!p) return null; p.val = lc(p.val); switch (p.val) { case 'all': case 'any': case '*': p.any = true; break; case '1': case 'icmp': p.name = 'icmp'; break; case '58': case 'icmpv6': case 'ipv6-icmp': p.name = 'ipv6-icmp'; break; case 'tcpudp': return [ { invert: p.invert, name: 'tcp' }, { invert: p.invert, name: 'udp' } ]; case '6': p.name = 'tcp'; break; case '17': p.name = 'udp'; break; default: p.name = p.val; } return (p.any || length(p.name)) ? p : null; }, parse_mac: function(val) { let mac = this.parse_invert(val); let m = mac ? match(mac.val, /^([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})$/i) : null; if (!m) return null; mac.mac = sprintf('%02x:%02x:%02x:%02x:%02x:%02x', hex(m[1]), hex(m[2]), hex(m[3]), hex(m[4]), hex(m[5]), hex(m[6])); return mac; }, parse_port: function(val) { let port = this.parse_invert(val); let m = port ? match(port.val, /^([0-9]{1,5})([-:]([0-9]{1,5}))?$/i) : null; if (!m) return null; if (m[3]) { let min_port = +m[1]; let max_port = +m[3]; if (min_port > max_port || min_port < 0 || max_port < 0 || min_port > 65535 || max_port > 65535) return null; port.min = min_port; port.max = max_port; } else { let pn = +m[1]; if (pn != pn || pn < 0 || pn > 65535) return null; port.min = pn; port.max = pn; } return port; }, parse_network: function(val) { let rv = this.parse_invert(val); if (!rv) return null; let nets = this.parse_subnet(rv.val); if (nets === null) return null; if (length(nets)) rv.addrs = [ ...nets ]; return rv; }, parse_icmptype: function(val) { let rv = {}; if (exists(ipv4_icmptypes, val)) { rv.family = 4; rv.type = ipv4_icmptypes[val][0]; rv.code_min = ipv4_icmptypes[val][1]; rv.code_max = ipv4_icmptypes[val][2]; } if (exists(ipv6_icmptypes, val)) { rv.family = rv.family ? 0 : 6; rv.type6 = ipv6_icmptypes[val][0]; rv.code6_min = ipv6_icmptypes[val][1]; rv.code6_max = ipv6_icmptypes[val][2]; } if (!exists(rv, "family")) { let m = match(val, /^([0-9]+)(\/([0-9]+))?$/); if (!m) return null; if (m[3]) { rv.type = +m[1]; rv.code_min = +m[3]; rv.code_max = rv.code_min; } else { rv.type = +m[1]; rv.code_min = 0; rv.code_max = 0xFF; } if (rv.type > 0xFF || rv.code_min > 0xFF || rv.code_max > 0xFF) return null; rv.family = 0; rv.type6 = rv.type; rv.code6_min = rv.code_min; rv.code6_max = rv.code_max; } return rv; }, parse_invert: function(val) { if (val == null) return null; let rv = { invert: false }; rv.val = trim(replace(val, /^[ \t]*!/, () => (rv.invert = true, ''))); return length(rv.val) ? rv : null; }, parse_limit: function(val) { let rv = this.parse_invert(val); let m = rv ? match(rv.val, /^([0-9]+)(\/([a-z]+))?$/) : null; if (!m) return null; let n = +m[1]; let u = m[3] ? this.parse_enum(m[3], [ "second", "minute", "hour", "day" ]) : "second"; if (!u) return null; rv.rate = n; rv.unit = u; return rv; }, parse_int: function(val) { let n = +val; return (n == n) ? n : null; }, parse_date: function(val) { let d = match(val, /^([0-9]{4})(-([0-9]{1,2})(-([0-9]{1,2})(T([0-9:]+))?)?)?$/); if (d == null || d[1] < 1970 || d[1] > 2038 || d[3] > 12 || d[5] > 31) return null; let t = this.parse_time(d[7] ?? "0"); if (t == null) return null; return { year: +d[1], month: +d[3] || 1, day: +d[5] || 1, ...t }; }, parse_time: function(val) { let t = match(val, /^([0-9]{1,2})(:([0-9]{1,2})(:([0-9]{1,2}))?)?$/); if (t == null || t[1] > 23 || t[3] > 59 || t[5] > 59) return null; return { hour: +t[1], min: +t[3], sec: +t[5] }; }, parse_weekdays: function(val) { let rv = this.parse_invert(val); if (!rv) return null; for (let day in to_array(rv.val)) { day = this.parse_enum(day, [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ]); if (!day) return null; (rv.days ||= {})[day] = true; } rv.days = keys(rv.days); return rv.days ? rv : null; }, parse_monthdays: function(val) { let rv = this.parse_invert(val); if (!rv) return null; for (let day in to_array(rv.val)) { day = +day; if (day < 1 || day > 31) return null; (rv.days ||= [])[day] = true; } return rv.days ? rv : null; }, parse_mark: function(val) { let rv = this.parse_invert(val); let m = rv ? match(rv.val, /^(0?x?[0-9a-f]+)(\/(0?x?[0-9a-f]+))?$/i) : null; if (!m) return null; let n = +m[1]; if (n != n || n > 0xFFFFFFFF) return null; rv.mark = n; rv.mask = 0xFFFFFFFF; if (m[3]) { n = +m[3]; if (n != n || n > 0xFFFFFFFF) return null; rv.mask = n; } return rv; }, parse_dscp: function(val) { let rv = this.parse_invert(val); if (!rv) return null; rv.val = uc(rv.val); if (exists(dscp_classes, rv.val)) { rv.dscp = dscp_classes[rv.val]; } else { let n = +rv.val; if (n != n || n < 0 || n > 0x3F) return null; rv.dscp = n; } return rv; }, parse_target: function(val) { return this.parse_enum(val, [ "accept", "reject", "drop", "notrack", "helper", "mark", "dscp", "dnat", "snat", "masquerade", "accept", "reject", "drop" ]); }, parse_reject_code: function(val) { return this.parse_enum(val, [ "tcp-reset", "port-unreachable", "admin-prohibited", "host-unreachable", "no-route" ]); }, parse_reflection_source: function(val) { return this.parse_enum(val, [ "internal", "external" ]); }, parse_ipsettype: function(val) { let m = match(val, /^(src|dst|dest)_(.+)$/); let t = this.parse_enum(m ? m[2] : val, [ "ip", "port", "mac", "net", "set" ]); return t ? [ (!m || m[1] == 'src') ? 'src' : 'dst', t ] : null; }, parse_ipsetentry: function(val, set) { let values = split(val, /[ \t]+/); if (length(values) != length(set.types)) return null; let rv = []; let ip, mac, port; for (let i, t in set.types) { switch (t) { case 'ipv4_addr': ip = filter(this.parse_subnet(values[i]), a => (a.family == 4)); switch (length(ip) ?? 0) { case 0: return null; case 1: break; default: this.warn("Set entry '%s' resolves to multiple addresses, using first one", values[i]); } rv[i] = ("net" in set.fw4types) ? `${ip[0].addr}/${ip[0].bits}` : ip[0].addr; break; case 'ipv6_addr': ip = filter(this.parse_subnet(values[i]), a => (a.family == 6)); switch (length(ip) ?? 0) { case 0: return null; case 1: break; case 2: this.warn("Set entry '%s' resolves to multiple addresses, using first one", values[i]); } rv[i] = ("net" in set.fw4types) ? `${ip[0].addr}/${ip[0].bits}` : ip[0].addr; break; case 'ether_addr': mac = this.parse_mac(values[i]); if (!mac || mac.invert) return null; rv[i] = mac.mac; break; case 'inet_service': port = this.parse_port(values[i]); if (!port || port.invert || port.min != port.max) return null; rv[i] = port.min; break; default: rv[i] = values[i]; } } return length(rv) ? rv : null; }, parse_includetype: function(val) { return this.parse_enum(val, [ "script", "nftables" ]); }, parse_includeposition: function(val) { return replace(this.parse_enum(val, [ "ruleset-prepend", "ruleset-postpend", "ruleset-append", "table-prepend", "table-postpend", "table-append", "chain-prepend", "chain-postpend", "chain-append" ]), "postpend", "append"); }, parse_identifier: function(val) { return match(val, /^[a-zA-Z_.][a-zA-Z0-9\/_.-]*$/)?.[0]; }, parse_string: function(val) { return "" + val; }, parse_opt: function(s, opt, fn, defval, flags) { let val = s[opt]; if (val === null) { if (flags & REQUIRED) { this.warn_section(s, `option '${opt}' is mandatory but not set`); return NaN; } val = defval; } if (type(val) == "array") { this.warn_section(s, `option '${opt}' must not be a list`); return NaN; } else if (val == null) { return null; } let res = this[fn](val); if (res === null) { this.warn_section(s, `option '${opt}' specifies invalid value '${val}'`); return NaN; } return res; }, parse_list: function(s, opt, fn, defval, flags) { let val = s[opt]; let rv = []; if (val == null) { if (flags & REQUIRED) { this.warn_section(s, `option '${opt}' is mandatory but not set`); return NaN; } val = defval; } for (val in to_array(val)) { let res = this[fn](val); if (res === null) { this.warn_section(s, `option '${opt}' specifies invalid value '${val}'`); return NaN; } if (flags & FLATTEN_LIST) push(rv, ...to_array(res)); else push(rv, res); } return length(rv) ? rv : null; }, quote: function(s, force) { if (force === true || !match(s, /^([0-9A-Fa-f:.\/-]+)( \. [0-9A-Fa-f:.\/-]+)*$/)) return `"${replace(s, '"', "'")}"`; return s; }, cidr: function(a) { if (a.range) return `${a.addr}-${a.addr2}`; if ((a.family == 4 && a.bits == 32) || (a.family == 6 && a.bits == 128)) return a.addr; if (a.bits >= 0) return `${apply_mask(a.addr, a.bits)}/${a.bits}`; return `${a.addr}/${a.mask}`; }, host: function(a, v6brackets) { return a.range ? `${a.addr}-${a.addr2}` : (a.family == 6 && v6brackets) ? `[${apply_mask(a.addr, a.bits)}]` : apply_mask(a.addr, a.bits); }, port: function(p) { if (p.min == p.max) return `${p.min}`; return `${p.min}-${p.max}`; }, set: function(v, force) { let seen = {}; v = filter(to_array(v), item => !seen[item]++); if (force || length(v) != 1) return `{ ${join(', ', map(v, this.quote))} }`; return this.quote(v[0]); }, concat: function(v) { return join(' . ', to_array(v)); }, ipproto: function(family) { switch (family) { case 4: return "ip"; case 6: return "ip6"; } }, nfproto: function(family, human_readable) { switch (family) { case 4: return human_readable ? "IPv4" : "ipv4"; case 6: return human_readable ? "IPv6" : "ipv6"; default: return human_readable ? "IPv4/IPv6" : null; } }, l4proto: function(family, proto) { switch (proto.name) { case 'icmp': switch (family ?? 0) { case 0: return this.set(['icmp', 'ipv6-icmp']); case 6: return 'ipv6-icmp'; } default: return proto.name; } }, datetime: function(stamp) { return sprintf('"%04d-%02d-%02d %02d:%02d:%02d"', stamp.year, stamp.month, stamp.day, stamp.hour, stamp.min, stamp.sec); }, date: function(stamp) { return sprintf('"%04d-%02d-%02d"', stamp.year, stamp.month, stamp.day); }, datestamp: function(stamp) { return exists(stamp, 'hour') ? this.datetime(stamp) : this.date(stamp); }, time: function(stamp) { return sprintf('"%02d:%02d:%02d"', stamp.hour, stamp.min, stamp.sec); }, hex: function(n) { return sprintf('0x%x', n); }, is_loopback_dev: function(dev) { return !!(+fs.readfile(`/sys/class/net/${dev}/flags`) & 0x8); }, is_loopback_addr: function(addr) { return (index(addr, "127.") == 0 || addr == "::1" || addr == "::1/128"); }, filter_loopback_devs: function(devs, invert) { return null_if_empty(filter(devs, d => (this.is_loopback_dev(d) == invert))); }, filter_loopback_addrs: function(addrs, invert) { return null_if_empty(filter(addrs, a => (this.is_loopback_addr(a) == invert))); }, input_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.input != 'reject') ? this.state.defaults.input : 'drop'; }, output_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.output != 'reject') ? this.state.defaults.output : 'drop'; }, forward_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.forward != 'reject') ? this.state.defaults.forward : 'drop'; }, default_option: function(flag) { return this.state.defaults[flag]; }, helpers: function() { return this.state.helpers; }, zones: function() { return this.state.zones; }, rules: function(chain) { return filter(this.state.rules, r => (r.chain == chain)); }, redirects: function(chain) { return filter(this.state.redirects, r => (r.chain == chain)); }, ipsets: function() { return this.state.ipsets; }, includes: function(position, chain) { let stmts = []; let pad = ''; let pre = ''; switch (position) { case 'table-prepend': case 'table-append': pad = '\t'; pre = '\n'; break; case 'chain-prepend': case 'chain-append': pad = '\t\t'; break; default: pre = '\n'; } push(stmts, pre); for (let inc in this.state.includes) if (inc.type == 'nftables' && inc.position == position && (!chain || inc.chain == chain)) push(stmts, `${pad}include "${inc.path}"\n`); print(length(stmts) > 1 ? join('', stmts) : ''); }, parse_setfile: function(set, cb) { let fd = fs.open(set.loadfile, "r"); if (!fd) { warn(`Unable to load file '${set.loadfile}' for set '${set.name}': ${fs.error()}\n`); return; } let count = 0; for (let line = fd.read("line"); length(line); line = fd.read("line")) { line = trim(line); if (length(line) == 0 || ord(line) == 35) continue; let v = this.parse_ipsetentry(line, set); if (!v) { this.warn(`Skipping invalid entry '${line}' in file '${set.loadfile}' for set '${set.name}'`); continue; } cb(v); count++; } fd.close(); return count; }, print_setentries: function(set) { let first = true; let printer = (entry) => { if (first) { print("\t\telements = {\n"); first = false; } print("\t\t\t", join(" . ", entry), ",\n"); }; map(set.entries, printer); if (set.loadfile) this.parse_setfile(set, printer); if (!first) print("\t\t}\n"); }, parse_helper: function(data) { let helper = this.parse_options(data, { name: [ "string", null, REQUIRED ], description: [ "string" ], module: [ "string" ], family: [ "family" ], proto: [ "protocol", null, PARSE_LIST | FLATTEN_LIST | NO_INVERT ], port: [ "port", null, NO_INVERT ] }); if (helper === false) { this.warn("Helper definition '%s' skipped due to invalid options", data.name || data['.name']); return; } else if (helper.proto.any) { this.warn("Helper definition '%s' must not specify wildcard protocol", data.name || data['.name']); return; } else if (length(helper.proto) > 1) { this.warn("Helper definition '%s' must not specify multiple protocols", data.name || data['.name']); return; } helper.available = (fs.stat(`/sys/module/${helper.module}`)?.type == "directory"); push(this.state.helpers ||= [], helper); }, parse_defaults: function(data) { if (this.state.defaults) { this.warn_section(data, ": ignoring duplicate defaults section"); return; } let defs = this.parse_options(data, { input: [ "policy", "drop" ], output: [ "policy", "drop" ], forward: [ "policy", "drop" ], drop_invalid: [ "bool" ], tcp_reject_code: [ "reject_code", "tcp-reset" ], any_reject_code: [ "reject_code", "port-unreachable" ], syn_flood: [ "bool" ], synflood_protect: [ "bool" ], synflood_rate: [ "limit", "25/second" ], synflood_burst: [ "int", "50" ], tcp_syncookies: [ "bool", "1" ], tcp_ecn: [ "int" ], tcp_window_scaling: [ "bool", "1" ], accept_redirects: [ "bool" ], accept_source_route: [ "bool" ], auto_helper: [ "bool", "1" ], custom_chains: [ "bool", null, UNSUPPORTED ], disable_ipv6: [ "bool", null, UNSUPPORTED ], flow_offloading: [ "bool", "0" ], flow_offloading_hw: [ "bool", "0" ], auto_includes: [ "bool", "1" ] }); if (defs.synflood_protect === null) defs.synflood_protect = defs.syn_flood; delete defs.syn_flood; this.state.defaults = defs; }, parse_zone: function(data) { let zone = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "identifier", null, REQUIRED ], family: [ "family" ], network: [ "device", null, PARSE_LIST ], device: [ "device", null, PARSE_LIST ], subnet: [ "network", null, PARSE_LIST ], input: [ "policy", this.state.defaults ? this.state.defaults.input : "drop" ], output: [ "policy", this.state.defaults ? this.state.defaults.output : "drop" ], forward: [ "policy", this.state.defaults ? this.state.defaults.forward : "drop" ], masq: [ "bool" ], masq_allow_invalid: [ "bool" ], masq_src: [ "network", null, PARSE_LIST ], masq_dest: [ "network", null, PARSE_LIST ], masq6: [ "bool" ], extra: [ "string", null, UNSUPPORTED ], extra_src: [ "string", null, UNSUPPORTED ], extra_dest: [ "string", null, UNSUPPORTED ], mtu_fix: [ "bool" ], custom_chains: [ "bool", null, UNSUPPORTED ], log: [ "int" ], log_limit: [ "limit" ], auto_helper: [ "bool", "1" ], helper: [ "cthelper", null, PARSE_LIST ], counter: [ "bool", "1" ] }); if (zone === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!zone.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } for (let helper in zone.helper) { if (!helper.available) { this.warn_section(data, `uses unavailable ct helper '${zone.helper.name}'`); } } if (zone.mtu_fix && this.kernel < 0x040a0000) { this.warn_section(data, "option 'mtu_fix' requires kernel 4.10 or later"); return; } if (this.state.defaults?.auto_helper === false) zone.auto_helper = false; let match_devices = []; let related_physdevs = []; let related_subnets = []; let related_ubus_networks = []; let match_subnets, masq_src_subnets, masq_dest_subnets; for (let name, net in this.state.networks) { if (net.zone === zone.name) push(related_ubus_networks, { invert: false, device: name }); } zone.network = [ ...to_array(zone.network), ...related_ubus_networks ]; for (let e in zone.network) { if (exists(this.state.networks, e.device)) { let net = this.state.networks[e.device]; if (net.device) { push(match_devices, { invert: e.invert, device: net.device }); } if (net.physdev && !e.invert) push(related_physdevs, net.physdev); push(related_subnets, ...(net.ipaddrs || [])); } } push(match_devices, ...to_array(zone.device)); match_subnets = subnets_split_af(zone.subnet); masq_src_subnets = subnets_split_af(zone.masq_src); masq_dest_subnets = subnets_split_af(zone.masq_dest); push(related_subnets, ...(match_subnets[0] || []), ...(match_subnets[1] || [])); let match_rules = []; let add_rule = (family, devices, subnets, zone) => { let r = {}; r.family = family; r.devices_pos = null_if_empty(devices[0]); r.devices_neg = null_if_empty(devices[1]); r.devices_neg_wildcard = null_if_empty(devices[2]); r.subnets_pos = map(subnets[0], this.cidr); r.subnets_neg = map(subnets[1], this.cidr); r.subnets_masked = subnets[2]; push(match_rules, r); }; let family = infer_family(zone.family, [ match_subnets, "subnet list" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); return; } // group non-inverted device matches into wildcard and non-wildcard ones let devices = [], plain_devices = [], plain_invert_devices = [], wildcard_invert_devices = []; for (let device in match_devices) { let m = match(device.device, /^([^+]*)(\+)?$/); if (!m) { this.warn_section(data, `skipping invalid wildcard pattern '${device.device}'`); continue; } // filter `+` (match any device) since nftables does not support // wildcard only matches if (!device.invert && m[0] == '+') continue; // replace inverted `+` (match no device) with invalid pattern if (device.invert && m[0] == '+') { device.device = '/never/'; device.invert = false; } // replace "name+" matches with "name*" else if (m[2] == '+') device.device = m[1] + '*'; device.wildcard = !!m[2]; if (!device.invert && device.wildcard) push(devices, [ [ device.device ], plain_invert_devices, wildcard_invert_devices ]); else if (!device.invert) push(plain_devices, device.device); else if (device.wildcard) push(wildcard_invert_devices, device.device); else push(plain_invert_devices, device.device); } if (length(plain_devices)) push(devices, [ plain_devices, plain_invert_devices, wildcard_invert_devices ]); else if (!length(devices)) push(devices, [ null, plain_invert_devices, wildcard_invert_devices ]); // emit zone jump rules for each device group if (length(match_devices) || length(match_subnets[0]) || length(match_subnets[1])) { for (let devgroup in devices) { // check if there's no AF specific bits, in this case we can do AF agnostic matching if (!family && !length(match_subnets[0]) && !length(match_subnets[1])) { add_rule(0, devgroup, [], zone); } // we need to emit one or two AF specific rules else { if (!family || family == 4) for (let subnets in subnets_group_by_masking(match_subnets[0])) add_rule(4, devgroup, subnets, zone); if (!family || family == 6) for (let subnets in subnets_group_by_masking(match_subnets[1])) add_rule(6, devgroup, subnets, zone); } } } zone.family = family; zone.match_rules = match_rules; zone.masq4_src_subnets = subnets_group_by_masking(masq_src_subnets[0]); zone.masq4_dest_subnets = subnets_group_by_masking(masq_dest_subnets[0]); zone.masq6_src_subnets = subnets_group_by_masking(masq_src_subnets[1]); zone.masq6_dest_subnets = subnets_group_by_masking(masq_dest_subnets[1]); zone.sflags = {}; zone.sflags[zone.input] = true; zone.dflags = {}; zone.dflags[zone.output] = true; zone.dflags[zone.forward] = true; zone.match_devices = map(filter(match_devices, d => !d.invert), d => d.device); zone.match_subnets = map(filter(related_subnets, s => !s.invert && s.bits != -1), this.cidr); zone.related_subnets = related_subnets; zone.related_physdevs = related_physdevs; if (zone.masq || zone.masq6) zone.dflags.snat = true; if ((zone.auto_helper && !(zone.masq || zone.masq6)) || length(zone.helper)) { zone.dflags.helper = true; for (let helper in (length(zone.helper) ? zone.helper : this.state.helpers)) { if (!helper.available) continue; for (let proto in helper.proto) { push(this.state.rules ||= [], { chain: `helper_${zone.name}`, family: helper.family, name: helper.description || helper.name, proto: proto, src: zone, dports_pos: [ this.port(helper.port) ], target: "helper", set_helper: helper }); } } } push(this.state.zones ||= [], zone); }, parse_forwarding: function(data) { let fwd = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string" ], family: [ "family" ], src: [ "zone_ref", null, REQUIRED ], dest: [ "zone_ref", null, REQUIRED ] }); if (fwd === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!fwd.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } let add_rule = (family, fwd) => { let f = { ...fwd, family: family, proto: { any: true } }; f.name ||= `Accept ${fwd.src.any ? "any" : fwd.src.zone.name} to ${fwd.dest.any ? "any" : fwd.dest.zone.name} ${family ? `${this.nfproto(family, true)} ` : ''}forwarding`; f.chain = fwd.src.any ? "forward" : `forward_${fwd.src.zone.name}`; if (fwd.dest.any) f.target = "accept"; else f.jump_chain = `accept_to_${fwd.dest.zone.name}`; push(this.state.rules ||= [], f); }; /* inherit family restrictions from related zones */ let family = infer_family(fwd.family, [ fwd.src?.zone, "source zone", fwd.dest?.zone, "destination zone" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); return; } add_rule(family, fwd); if (fwd.dest.zone) fwd.dest.zone.dflags.accept = true; }, parse_rule: function(data) { let rule = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], _name: [ "string", null, DEPRECATED ], family: [ "family" ], src: [ "zone_ref" ], dest: [ "zone_ref" ], device: [ "device", null, NO_INVERT ], direction: [ "direction" ], ipset: [ "setmatch" ], helper: [ "cthelper" ], set_helper: [ "cthelper", null, NO_INVERT ], proto: [ "protocol", "tcpudp", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network", null, PARSE_LIST ], src_mac: [ "mac", null, PARSE_LIST ], src_port: [ "port", null, PARSE_LIST ], dest_ip: [ "network", null, PARSE_LIST ], dest_port: [ "port", null, PARSE_LIST ], icmp_type: [ "icmptype", null, PARSE_LIST ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], set_mark: [ "mark", null, NO_INVERT ], set_xmark: [ "mark", null, NO_INVERT ], dscp: [ "dscp" ], set_dscp: [ "dscp", null, NO_INVERT ], counter: [ "bool", "1" ], log: [ "string" ], log_limit: [ "limit" ], target: [ "target" ] }); if (rule === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!rule.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (rule.target in ["helper", "notrack"] && (!rule.src || !rule.src.zone)) { this.warn_section(data, `must specify a source zone for target '${rule.target}'`); return; } else if (rule.target == "dscp" && !rule.set_dscp) { this.warn_section(data, "must specify option 'set_dscp' for target 'dscp'"); return; } else if (rule.target == "mark" && !rule.set_mark && !rule.set_xmark) { this.warn_section(data, "must specify option 'set_mark' or 'set_xmark' for target 'mark'"); return; } else if (rule.target == "helper" && !rule.set_helper) { this.warn_section(data, "must specify option 'set_helper' for target 'helper'"); return; } else if (rule.device?.any) { this.warn_section(data, "must not specify '*' as device"); return; } switch (this.parse_bool(rule.log)) { case true: rule.log = `${rule.name}: `; break; case false: delete rule.log; } let ipset; if (rule.ipset) { ipset = filter(this.state.ipsets, s => (s.name == rule.ipset.name))?.[0]; if (!ipset) { this.warn_section(data, `references unknown set '${rule.ipset.name}'`); return; } if (('inet_service' in ipset.types) && !ensure_tcpudp(rule.proto)) { this.warn_section(data, "references named set with port match but no UDP/TCP protocol, ignoring section"); return; } } let need_src_action_chain = (rule) => (rule.src?.zone?.log && rule.target != "accept"); let add_rule = (family, proto, saddrs, daddrs, sports, dports, icmptypes, icmpcodes, ipset, rule) => { let r = { ...rule, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(length(sports) || length(dports)), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(sports), this.port), sports_neg: map(filter_neg(sports), this.port), dports_pos: map(filter_pos(dports), this.port), dports_neg: map(filter_neg(dports), this.port), smacs_pos: map(filter_pos(rule.src_mac), m => m.mac), smacs_neg: map(filter_neg(rule.src_mac), m => m.mac), icmp_types: map(icmptypes, i => (family == 4 ? i.type : i.type6)), icmp_codes: map(icmpcodes, ic => `${(family == 4) ? ic.type : ic.type6} . ${(family == 4) ? ic.code_min : ic.code6_min}`) }; if (!length(r.icmp_types)) delete r.icmp_types; if (!length(r.icmp_codes)) delete r.icmp_codes; if (r.set_mark) { r.set_xmark = { invert: r.set_mark.invert, mark: r.set_mark.mark, mask: r.set_mark.mark | r.set_mark.mask }; delete r.set_mark; } let set_types = map_setmatch(ipset, rule.ipset, proto.name); if (set_types !== set_types) { this.warn_section(data, "destination MAC address matching not supported"); return; } else if (set_types) { r.ipset = { ...r.ipset, fields: set_types }; } if (r.target == "notrack") { r.chain = `notrack_${r.src.zone.name}`; r.src.zone.dflags.notrack = true; } else if (r.target == "helper") { r.chain = `helper_${r.src.zone.name}`; r.src.zone.dflags.helper = true; } else if (r.target == "mark" || r.target == "dscp") { if ((r.src?.any && r.dest?.any) || (r.src?.zone && r.dest?.zone)) r.chain = "mangle_forward"; else if (r.src?.any && r.dest?.zone) r.chain = "mangle_postrouting"; else if (r.src?.zone && r.dest?.any) r.chain = "mangle_prerouting"; else if (r.src && !r.dest) r.chain = "mangle_input"; else r.chain = "mangle_output"; if (r.src?.zone) { r.src.zone.dflags[r.target] = true; r.iifnames = null_if_empty(r.src.zone.match_devices); } if (r.dest?.zone) { r.dest.zone.dflags[r.target] = true; r.oifnames = null_if_empty(r.dest.zone.match_devices); } } else { r.chain = "output"; if (r.src) { if (!r.src.any) r.chain = `${r.dest ? "forward" : "input"}_${r.src.zone.name}`; else r.chain = r.dest ? "forward" : "input"; } if (r.dest && !r.src) { if (!r.dest.any) r.chain = sprintf("output_%s", r.dest.zone.name); else r.chain = "output"; } if (r.target && r.dest && !r.dest.any) { r.jump_chain = `${r.target}_to_${r.dest.zone.name}`; r.dest.zone.dflags[r.target] = true; } else if (r.target && need_src_action_chain(r)) { r.jump_chain = `${r.target}_from_${r.src.zone.name}`; r.src.zone.sflags[r.target] = true; } else if (r.target == "reject") r.jump_chain = "handle_reject"; } if (r.device) r[r.direction ? "oifnames" : "iifnames"] = [ r.device.device ]; push(this.state.rules ||= [], r); }; for (let proto in rule.proto) { let sip, dip, sports, dports, itypes4, itypes6; let family = rule.family; switch (proto.name) { case "icmp": itypes4 = filter(rule.icmp_type || [], family_is_ipv4); itypes6 = filter(rule.icmp_type || [], family_is_ipv6); break; case "ipv6-icmp": family = 6; itypes6 = filter(rule.icmp_type || [], family_is_ipv6); break; case "tcp": case "udp": sports = rule.src_port; dports = rule.dest_port; break; } sip = subnets_split_af(rule.src_ip); dip = subnets_split_af(rule.dest_ip); family = infer_family(family, [ ipset, "set match", sip, "source IP", dip, "destination IP", rule.src?.zone, "source zone", rule.dest?.zone, "destination zone", rule.helper, "helper match", rule.set_helper, "helper to set" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } let has_ipv4_specifics = (length(sip[0]) || length(dip[0]) || length(itypes4) || rule.dscp !== null); let has_ipv6_specifics = (length(sip[1]) || length(dip[1]) || length(itypes6) || rule.dscp !== null); /* if no family was configured, infer target family from IP addresses */ if (family === null) { if (has_ipv4_specifics && !has_ipv6_specifics) family = 4; else if (has_ipv6_specifics && !has_ipv4_specifics) family = 6; else family = 0; } /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && rule.target != "dscp" && !has_ipv4_specifics && !has_ipv6_specifics) { add_rule(0, proto, [], [], sports, dports, null, null, ipset, rule); } /* we need to emit one or two AF specific rules */ else { if (family == 0 || family == 4) { let icmp_types = filter(itypes4, i => (i.code_min == 0 && i.code_max == 0xFF)); let icmp_codes = filter(itypes4, i => (i.code_min != 0 || i.code_max != 0xFF)); for (let saddrs in subnets_group_by_masking(sip[0])) { for (let daddrs in subnets_group_by_masking(dip[0])) { if (length(icmp_types) || (!length(icmp_types) && !length(icmp_codes))) add_rule(4, proto, saddrs, daddrs, sports, dports, icmp_types, null, ipset, rule); if (length(icmp_codes)) add_rule(4, proto, saddrs, daddrs, sports, dports, null, icmp_codes, ipset, rule); } } } if (family == 0 || family == 6) { let icmp_types = filter(itypes6, i => (i.code_min == 0 && i.code_max == 0xFF)); let icmp_codes = filter(itypes6, i => (i.code_min != 0 || i.code_max != 0xFF)); for (let saddrs in subnets_group_by_masking(sip[1])) { for (let daddrs in subnets_group_by_masking(dip[1])) { if (length(icmp_types) || (!length(icmp_types) && !length(icmp_codes))) add_rule(6, proto, saddrs, daddrs, sports, dports, icmp_types, null, ipset, rule); if (length(icmp_codes)) add_rule(6, proto, saddrs, daddrs, sports, dports, null, icmp_codes, ipset, rule); } } } } } }, parse_redirect: function(data) { let redir = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], _name: [ "string", null, DEPRECATED ], family: [ "family" ], src: [ "zone_ref" ], dest: [ "zone_ref" ], ipset: [ "setmatch" ], helper: [ "cthelper", null, NO_INVERT ], proto: [ "protocol", "tcpudp", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network" ], src_mac: [ "mac", null, PARSE_LIST ], src_port: [ "port" ], src_dip: [ "network" ], src_dport: [ "port" ], dest_ip: [ "network" ], dest_port: [ "port" ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], reflection: [ "bool", "1" ], reflection_src: [ "reflection_source", "internal" ], reflection_zone: [ "zone_ref", null, PARSE_LIST ], counter: [ "bool", "1" ], log: [ "string" ], log_limit: [ "limit" ], target: [ "target", "dnat" ] }); if (redir === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!redir.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!(redir.target in ["dnat", "snat"])) { this.warn_section(data, "has invalid target specified, defaulting to dnat"); redir.target = "dnat"; } switch (this.parse_bool(redir.log)) { case true: redir.log = `${redir.name}: `; break; case false: delete redir.log; } let ipset; if (redir.ipset) { ipset = filter(this.state.ipsets, s => (s.name == redir.ipset.name))?.[0]; if (!ipset) { this.warn_section(data, `references unknown set '${redir.ipset.name}'`); return; } if (('inet_service' in ipset.types) && !ensure_tcpudp(redir.proto)) { this.warn_section(data, "references named set with port match but no UDP/TCP protocol, ignoring section"); return; } } let resolve_dest = (redir) => { for (let zone in this.state.zones) { for (let zone_addr in zone.related_subnets) { for (let dest_addr in redir.dest_ip.addrs) { if (dest_addr.family != zone_addr.family) continue; let a = apply_mask(dest_addr.addr, zone_addr.mask); let b = apply_mask(zone_addr.addr, zone_addr.mask); if (a != b) continue; redir.dest = { any: false, zone: zone }; return true; } } } return false; }; if (redir.target == "dnat") { if (!redir.src) return this.warn_section(data, "has no source specified"); else if (redir.src.any) return this.warn_section(data, "must not have source '*' for dnat target"); else if (redir.dest_ip && redir.dest_ip.invert) return this.warn_section(data, "must not specify a negated 'dest_ip' value"); else if (redir.dest_ip && length(filter(redir.dest_ip.addrs, a => a.bits == -1))) return this.warn_section(data, "must not use non-contiguous masks in 'dest_ip'"); if (!redir.dest && redir.dest_ip && resolve_dest(redir)) this.warn_section(data, `does not specify a destination, assuming '${redir.dest.zone.name}'`); if (!redir.dest_port) redir.dest_port = redir.src_dport; if (redir.reflection && redir.dest?.zone && redir.src.zone.masq) { redir.dest.zone.dflags.accept = true; redir.dest.zone.dflags.dnat = true; redir.dest.zone.dflags.snat = true; } if (redir.helper) redir.src.zone.dflags.helper = true; redir.src.zone.dflags[redir.target] = true; } else { if (!redir.dest) return this.warn_section(data, "has no destination specified"); else if (redir.dest.any) return this.warn_section(data, "must not have destination '*' for snat target"); else if (!redir.src_dip) return this.warn_section(data, "has no 'src_dip' option specified"); else if (redir.src_dip.invert) return this.warn_section(data, "must not specify a negated 'src_dip' value"); else if (length(filter(redir.src_dip.addrs, a => a.bits == -1))) return this.warn_section(data, "must not use non-contiguous masks in 'src_dip'"); else if (redir.src_mac) return this.warn_section(data, "must not use 'src_mac' option for snat target"); else if (redir.helper) return this.warn_section(data, "must not use 'helper' option for snat target"); redir.dest.zone.dflags[redir.target] = true; } let add_rule = (family, proto, saddrs, daddrs, raddrs, sport, dport, rport, ipset, redir) => { let r = { ...redir, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(sport || dport || rport), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(to_array(sport)), this.port), sports_neg: map(filter_neg(to_array(sport)), this.port), dports_pos: map(filter_pos(to_array(dport)), this.port), dports_neg: map(filter_neg(to_array(dport)), this.port), smacs_pos: map(filter_pos(redir.src_mac), m => m.mac), smacs_neg: map(filter_neg(redir.src_mac), m => m.mac), raddr: raddrs ? raddrs[0] : null, rport: rport }; let set_types = map_setmatch(ipset, redir.ipset, proto.name); if (set_types !== set_types) { this.warn_section(data, "destination MAC address matching not supported"); return; } else if (set_types) { r.ipset = { ...r.ipset, fields: set_types }; } switch (r.target) { case "dnat": r.chain = `dstnat_${r.src.zone.name}`; r.src.zone.dflags.dnat = true; if (!r.raddr) r.target = "redirect"; break; case "snat": r.chain = `srcnat_${r.dest.zone.name}`; r.dest.zone.dflags.snat = true; break; } push(this.state.redirects ||= [], r); }; let to_hostaddr = (a) => { let bits = (a.family == 4) ? 32 : 128; return { family: a.family, addr: apply_mask(a.addr, bits), bits: bits }; }; for (let proto in redir.proto) { let sip, dip, rip, iip, eip, refip, sport, dport, rport; let family = redir.family; if (proto.name == "ipv6-icmp") family = 6; switch (redir.target) { case "dnat": sip = subnets_split_af(redir.src_ip); dip = subnets_split_af(redir.src_dip); rip = subnets_split_af(redir.dest_ip); switch (proto.name) { case "tcp": case "udp": sport = redir.src_port; dport = redir.src_dport; rport = redir.dest_port; break; } break; case "snat": sip = subnets_split_af(redir.src_ip); dip = subnets_split_af(redir.dest_ip); rip = subnets_split_af(redir.src_dip); switch (proto.name) { case "tcp": case "udp": sport = redir.src_port; dport = redir.dest_port; rport = redir.src_dport; break; } break; } family = infer_family(family, [ ipset, "set match", sip, "source IP", dip, "destination IP", rip, "rewrite IP", redir.src?.zone, "source zone", redir.dest?.zone, "destination zone", redir.helper, "helper match" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } /* build reflection rules */ if (redir.target == "dnat" && redir.reflection && (length(rip[0]) || length(rip[1])) && redir.src?.zone && redir.dest?.zone) { let refredir = { name: `${redir.name} (reflection)`, helper: redir.helper, // XXX: this likely makes no sense for reflection rules //src_mac: redir.src_mac, limit: redir.limit, limit_burst: redir.limit_burst, start_date: redir.start_date, stop_date: redir.stop_date, start_time: redir.start_time, stop_time: redir.stop_time, weekdays: redir.weekdays, mark: redir.mark }; let eaddrs = length(dip) ? dip : subnets_split_af({ addrs: map(redir.src.zone.related_subnets, to_hostaddr) }); let rzones = length(redir.reflection_zone) ? redir.reflection_zone : [ redir.dest ]; for (let rzone in rzones) { if (!is_family(rzone, family)) { this.warn_section(data, `is restricted to IPv${family} but referenced reflection zone is IPv${rzone.family} only, skipping`); continue; } let iaddrs = subnets_split_af({ addrs: rzone.zone.related_subnets }); let refaddrs = (redir.reflection_src == "internal") ? iaddrs : eaddrs; for (let i = 0; i <= 1; i++) { if (redir.src.zone[i ? "masq6" : "masq"] && length(rip[i])) { let snat_addr = refaddrs[i]?.[0]; /* For internal reflection sources try to find a suitable candiate IP * among the reflection zone subnets which is within the same subnet * as the original DNAT destination. If we can't find any matching * one then simply take the first candidate. */ if (redir.reflection_src == "internal") { for (let zone_addr in rzone.zone.related_subnets) { if (zone_addr.family != rip[i][0].family) continue; let r = apply_mask(rip[i][0].addr, zone_addr.mask); let a = apply_mask(zone_addr.addr, zone_addr.mask); if (r != a) continue; snat_addr = zone_addr; break; } } if (!snat_addr) { this.warn_section(data, `${redir.reflection_src || "external"} rewrite IP cannot be determined, disabling reflection`); } else if (!length(iaddrs[i])) { this.warn_section(data, "internal address range cannot be determined, disabling reflection"); } else if (!length(eaddrs[i])) { this.warn_section(data, "external address range cannot be determined, disabling reflection"); } else { refredir.src = rzone; refredir.dest = null; refredir.target = "dnat"; for (let saddrs in subnets_group_by_masking(iaddrs[i])) for (let daddrs in subnets_group_by_masking(eaddrs[i])) add_rule(i ? 6 : 4, proto, saddrs, daddrs, rip[i], sport, dport, rport, null, refredir); refredir.src = null; refredir.dest = rzone; refredir.target = "snat"; for (let daddrs in subnets_group_by_masking(rip[i])) for (let saddrs in subnets_group_by_masking(iaddrs[i])) add_rule(i ? 6 : 4, proto, saddrs, daddrs, [ to_hostaddr(snat_addr) ], null, rport, null, null, refredir); } } } } } if (length(rip[0]) > 1 || length(rip[1]) > 1) this.warn_section(data, "specifies multiple rewrite addresses, using only first one"); let has_ip4_addr = length(sip[0]) || length(dip[0]) || length(rip[0]), has_ip6_addr = length(sip[1]) || length(dip[1]) || length(rip[1]), has_any_addr = has_ip4_addr || has_ip6_addr; /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && !has_any_addr) { /* for backwards compatibility, treat unspecified family as IPv4 unless user explicitly requested any (0) */ if (family == null) family = 4; add_rule(family, proto, [], [], null, sport, dport, rport, ipset, redir); } /* we need to emit one or two AF specific rules */ else { if ((!family || family == 4) && (!has_any_addr || has_ip4_addr)) { for (let saddrs in subnets_group_by_masking(sip[0])) for (let daddrs in subnets_group_by_masking(dip[0])) add_rule(4, proto, saddrs, daddrs, rip[0], sport, dport, rport, ipset, redir); } if ((!family || family == 6) && (!has_any_addr || has_ip6_addr)) { for (let saddrs in subnets_group_by_masking(sip[1])) for (let daddrs in subnets_group_by_masking(dip[1])) add_rule(6, proto, saddrs, daddrs, rip[1], sport, dport, rport, ipset, redir); } } } }, parse_nat: function(data) { let snat = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], family: [ "family" ], src: [ "zone_ref" ], device: [ "string" ], ipset: [ "setmatch", null, UNSUPPORTED ], proto: [ "protocol", "all", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network" ], src_port: [ "port" ], snat_ip: [ "network", null, NO_INVERT ], snat_port: [ "port", null, NO_INVERT ], dest_ip: [ "network" ], dest_port: [ "port" ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], connlimit_ports: [ "bool" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], counter: [ "bool", "1" ], log: [ "string" ], target: [ "target", "masquerade" ] }); if (snat === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!snat.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!(snat.target in ["accept", "snat", "masquerade"])) { this.warn_section(data, "has invalid target specified, defaulting to masquerade"); snat.target = "masquerade"; } if (snat.target == "snat" && !snat.snat_ip && !snat.snat_port) { this.warn_section(data, "needs either 'snat_ip' or 'snat_port' for target snat, ignoring section"); return; } else if (snat.target != "snat" && snat.snat_ip) { this.warn_section(data, "must not use 'snat_ip' for non-snat target, ignoring section"); return; } else if (snat.target != "snat" && snat.snat_port) { this.warn_section(data, "must not use 'snat_port' for non-snat target, ignoring section"); return; } if ((snat.snat_port || snat.src_port || snat.dest_port) && !ensure_tcpudp(snat.proto)) { this.warn_section(data, "specifies ports but no UDP/TCP protocol, ignoring section"); return; } if (snat.snat_ip && length(filter(snat.snat_ip.addrs, a => a.bits == -1 || a.invert))) { this.warn_section(data, "must not use inversion or non-contiguous masks in 'snat_ip', ignoring section"); return; } switch (this.parse_bool(snat.log)) { case true: snat.log = `${snat.name}: `; break; case false: delete snat.log; } let add_rule = (family, proto, saddrs, daddrs, raddrs, sport, dport, rport, snat) => { let n = { ...snat, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(sport || dport), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(to_array(sport)), this.port), sports_neg: map(filter_neg(to_array(sport)), this.port), dports_pos: map(filter_pos(to_array(dport)), this.port), dports_neg: map(filter_neg(to_array(dport)), this.port), raddr: raddrs ? raddrs[0] : null, rport: rport, chain: snat.src?.zone ? `srcnat_${snat.src.zone.name}` : "srcnat" }; push(this.state.redirects ||= [], n); }; for (let proto in snat.proto) { let sip, dip, rip, sport, dport, rport; let family = snat.family; sip = subnets_split_af(snat.src_ip); dip = subnets_split_af(snat.dest_ip); rip = subnets_split_af(snat.snat_ip); switch (proto.name) { case "tcp": case "udp": sport = snat.src_port; dport = snat.dest_port; rport = snat.snat_port; break; } if (length(rip[0]) > 1 || length(rip[1]) > 1) this.warn_section(data, "specifies multiple rewrite addresses, using only first one"); family = infer_family(family, [ sip, "source IP", dip, "destination IP", rip, "rewrite IP", snat.src?.zone, "source zone" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } if (snat.src?.zone) snat.src.zone.dflags.snat = true; /* if no family was configured, infer target family from IP addresses */ if (family === null) { if ((length(sip[0]) || length(dip[0]) || length(rip[0])) && !length(sip[1]) && !length(dip[1]) && !length(rip[1])) family = 4; else if ((length(sip[1]) || length(dip[1]) || length(rip[1])) && !length(sip[0]) && !length(dip[0]) && !length(rip[0])) family = 6; else family = 4; /* default to IPv4 only for backwards compatibility, unless an explict family any was configured */ } /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && !length(sip[0]) && !length(sip[1]) && !length(dip[0]) && !length(dip[1]) && !length(rip[0]) && !length(rip[1])) { add_rule(0, proto, [], [], null, sport, dport, rport, snat); } /* we need to emit one or two AF specific rules */ else { if (family == 0 || family == 4) for (let saddr in subnets_group_by_masking(sip[0])) for (let daddr in subnets_group_by_masking(dip[0])) add_rule(4, proto, saddr, daddr, rip[0], sport, dport, rport, snat); if (family == 0 || family == 6) for (let saddr in subnets_group_by_masking(sip[1])) for (let daddr in subnets_group_by_masking(dip[1])) add_rule(6, proto, saddr, daddr, rip[1], sport, dport, rport, snat); } } }, parse_include: function(data) { let inc = this.parse_options(data, { enabled: [ "bool", "1" ], path: [ "string", null, REQUIRED ], type: [ "includetype", "script" ], fw4_compatible: [ "bool", data.path != "/etc/firewall.user" ], family: [ "family", null, UNSUPPORTED ], reload: [ "bool", null, UNSUPPORTED ], position: [ "includeposition" ], chain: [ "identifier" ] }); if (!inc.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (inc.type == "script" && !inc.fw4_compatible) { this.warn_section(data, "is not marked as compatible with fw4, ignoring section"); this.warn_section(data, "requires 'option fw4_compatible 1' to be considered compatible"); return; } for (let opt in [ "table", "chain", "position" ]) { if (inc.type != "nftables" && inc[opt]) { this.warn_section(data, `must not specify '${opt}' for non-nftables includes, ignoring section`); return; } } switch (inc.position ??= 'table-append') { case 'ruleset-prepend': case 'ruleset-append': case 'table-prepend': case 'table-append': if (inc.chain) this.warn_section(data, `specifies 'chain' which has no effect for position ${inc.position}`); delete inc.chain; break; case 'chain-prepend': case 'chain-append': if (!inc.chain) { this.warn_section(data, `must specify 'chain' for position ${inc.position}, ignoring section`); return; } break; } let path = fs.readlink(inc.path) ?? inc.path; if (!fs.access(path)) { this.warn_section(data, `specifies unreachable path '${path}', ignoring section`); return; } if (!data['.name']) this.warn(`Automatically including '${path}'`); push(this.state.includes ||= [], { ...inc, path }); }, parse_ipset: function(data) { let ipset = this.parse_options(data, { enabled: [ "bool", "1" ], reload_set: [ "bool" ], counters: [ "bool" ], comment: [ "string" ], name: [ "identifier", null, REQUIRED ], family: [ "family", "4" ], storage: [ "string", null, UNSUPPORTED ], match: [ "ipsettype", null, PARSE_LIST ], iprange: [ "string", null, UNSUPPORTED ], portrange: [ "string", null, UNSUPPORTED ], netmask: [ "int", null, UNSUPPORTED ], maxelem: [ "int" ], hashsize: [ "int", null, UNSUPPORTED ], timeout: [ "int", "-1" ], external: [ "string", null, UNSUPPORTED ], entry: [ "string", null, PARSE_LIST ], loadfile: [ "string" ] }); if (ipset === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!ipset.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!length(ipset.match)) { this.warn_section(data, "has no datatypes assigned"); return; } let dirs = map(ipset.match, m => m[0]), types = map(ipset.match, m => m[1]), interval = false; if (("ip" in types || "net" in types) && ipset.family == 0) { this.warn_section(data, "must not specify family 'any' when matching type 'ip' or 'net'"); return; } if ("set" in types) { this.warn_section(data, "match type 'set' is not supported"); return; } if ("net" in types) { if (this.kernel < 0x05060000) { this.warn_section(data, "match type 'net' requires kernel 5.6 or later"); return; } interval = true; } let s = { ...ipset, fw4types: types, types: map(types, (t) => { switch (t) { case 'ip': case 'net': return (ipset.family == 4) ? 'ipv4_addr' : 'ipv6_addr'; case 'mac': return 'ether_addr'; case 'port': return 'inet_service'; } }), directions: dirs, interval: interval }; if (s.interval) push(s.flags ??= [], 'interval'); if (s.timeout >= 0) push(s.flags ??= [], 'timeout'); s.entries = filter(map(ipset.entry, (e) => { let v = this.parse_ipsetentry(e, s); if (!v) this.warn_section(data, `ignoring invalid ipset entry '${e}'`); return v; }), (e) => (e != null)); push(this.state.ipsets ||= [], s); } }; 07070100E8183D000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001600000000usr/share/ucode/utils07070100E8183E000081ED00000000000000000000000169B8AF0D00002941000000080000000100000000000000000000002200000000usr/share/ucode/utils/argparse.uc//------------------------------------------------------------------------------ // argparse.uc - Argument Parser for ucode // Copyright (c) 2024-2025 Eric Fahlgren // SPDX-License-Identifier: GPL-2.0-only // vim: set noexpandtab softtabstop=8 shiftwidth=8 syntax=javascript: //------------------------------------------------------------------------------ // All uses of 'assert' in the argparse module indicate programming errors, // and never user input errors. If you define an argument incorrectly, // an assertion will be raised, whereas if a user enters an incorrect // command line, then 'usage' or 'usage_short' is called. // // To dump the list of actions, try this: // $ ucode -p 'import { ArgActions } from "utils.argparse"; keys(ArgActions);' const VERSION = "2026.01.13~2526d84b-r1"; import { cursor } from 'uci'; import { basename, dirname, realpath } from 'fs'; const isnan = (x) => x != x; export const ArgActions = { // Static class of standard actions for arguments. // All functions have the prototype: // fn(self, params) // where // self = an ArgParser object // params = object with optional parameters, typically, but not restricted // to: // name = option name // value = option value // msg = any associated output message store: function(self, params) { // We don't flag multiple stores, last one wins. assert(params.name, "'store' action requires an option name"); assert(params.value, "'store' action requires a value"); self.options[params.name] = params.value; }, storex: function(self, params) { // Exclusive version of store, multiple stores generates an error. if (self.options[params.name]) { let p = this.long || this.short; this.usage_short(self, {exit: 1, prefix: `ERROR: '${p}' may only be used once per invocation:\n ${this.help}`}); } this.store(self, params); }, store_int: function(self, params) { assert(params.name, "'store_int' action requires an option name"); assert(params.value, "'store_int' action requires a value"); let value = int(params.value); let error = null; if (isnan(value)) error = `invalid integer '${params.value}'`; else if ("lower" in this && value < this.lower) error = `${value} below lower bound ${this.lower}`; else if ("upper" in this && value > this.upper) error = `${value} above upper bound ${this.upper}`; if (error) this.usage_short(self, {exit: 1, prefix: `ERROR: ${error}`}); self.options[params.name] = value; }, file: function(self, params) { assert(params.name, "'file' action requires an option name"); assert(params.value, "'file' action requires a value"); if (params.value) { let dir = realpath(dirname(params.value)); if (! dir) { let msg = `'${params.name}' value '${params.value}' must contain a valid directory path.`; this.usage_short(self, {exit: 1, prefix: `ERROR: ${msg}`}); } let file = dir + "/" + basename(params.value); self.options[params.name] = file; } }, enum: function(self, params) { assert(params.name, "'enum' action requires an option name"); assert(params.value, "'enum' action requires a value"); assert(this.one_of, "'enum' requires a 'one_of' list of values"); if (! (params.value in this.one_of)) { let msg = `'${params.name}' must be one of ${join(", ", this.one_of)}, not '${params.value}'`; this.usage_short(self, {exit: 1, prefix: `ERROR: ${msg}`}); } self.options[params.name] = params.value; }, set: function(self, params) { assert(params.name, "'set' action requires an option name"); assert(type(self.options[params.name]) == "bool", `missing default value for '${params.name}'?`); let value = exists(params, "value") ? params.value : true; self.options[params.name] = value in [true, "true", 1, "1", "yes", "on"]; }, inc: function(self, params) { assert(params.name, "'inc' action requires an option name"); assert(type(self.options[params.name]) == "int", `missing default value for '${params.name}'?`); let value = exists(params, "value") ? int(params.value) : (self.options[params.name] + 1); self.options[params.name] = value; }, dec: function(self, params) { assert(params.name, "'dec' action requires an option name"); assert(type(self.options[params.name]) == "int", `missing default value for '${params.name}'?`); let value = exists(params, "value") ? int(params.value) : (self.options[params.name] - 1); self.options[params.name] = value; }, version: function(self, params) { self.show_version(); }, usage_short: function(self, params) { // Produce a short usage message. 'params' may contain 'prefix' // or 'suffix'. let shorts = []; for (let arg in self) { if (! arg.name || ! arg.help) continue; if ("position" in arg) { push(shorts, uc(arg.name)); } else { let name = arg.short || arg.long; // deal with "nargs" ... let v = arg.nargs > 0 ? ` ${uc(arg.name)}` : ""; push(shorts, `[${name}${v}]`); } } if ("prefix" in params) printf("%s\n", params.prefix); printf(`Usage: ${self.program_string} %s\n`, join(" ", shorts)); if ("suffix" in params) printf("%s\n", params.suffix); if ("exit" in params) exit(params.exit); }, usage: function(self, params) { self.show_version(); // params: optional {msg} if (params?.msg) printf("\n%s\n", params.msg); if (self.prologue) print(self.prologue); this.usage_short(self, {prefix: ""}); for (let arg in self) { if (! arg.help) continue; // Explicitly ignore items without help. if ("position" in arg) { printf("\n %s - %s, must be one of:\n", uc(arg.name), arg.help); for (let n,v in arg.one_of) { if (v.help) { printf(" %-8s - %s\n", n, v.help); } } printf("\n"); } else { let out = ""; if (arg.short) out += arg.short; if (arg.long) { if (length(out)) out += "/"; out += arg.long; } if (arg.nargs > 0) out += " " + uc(arg.name); printf(" %-20s - %s\n", out, arg.help); } } if (self.epilogue) print(self.epilogue); if ("exit" in params) exit(params.exit); }, }; export const ArgParser = { // Singleton class for a program's command line argument parsing. program_string: null, // User-defined name of program. version_string: null, // User-defined version string. prologue: null, // Text to put before argument list in usage. epilogue: null, // Text to put after argument list in usage. options: null, // Collected results from parsing. has_required: false, // Did the user specify any required arguments? show_version: function() { printf("%s\n", this.version_string ?? "no version string set"); }, set_prog_info: function(ver, prog) { // Allow user to set the version string, and optionally the // program string. proto(this).version_string = ver; proto(this).program_string = prog ?? split(sourcepath(1), "/")[-1]; }, set_bookends: function(prologue, epilogue) { proto(this).prologue = prologue; proto(this).epilogue = epilogue; }, init: function() { // Build initial options table. // Could use a bunch of error checking added to verify // non-duplicate short and long, etc. proto(this).options = {}; // Build the result cache, populate with defaults. for (let i = 0, arg = this[i]; i < length(this); i++, arg = this[i]) { assert(arg.short || arg.long || "position" in arg, `arg definition must contain at least one of 'short', 'long' or 'position'\n ${arg}`); arg = this[i] = proto(arg, ArgActions); // Cast each arg to actions type. if (arg.name) { this.options[arg.name] = "default" in arg ? arg.default : null; } if (type(arg.action) == "string") { // Look up our canned actions. assert(arg.action in ArgActions, `action '${arg.action}' is not defined`); arg.action = ArgActions[arg.action]; } if ("position" in arg) { // Positional arguments are required. proto(this).has_required = true; } } }, get_arg: function(arg, position) { for (let opt in this) { if (position == opt.position) { if (arg in opt.one_of) return opt; ArgActions.usage_short(this, {exit: 1, prefix: `ERROR: '${arg}' is not valid here, expected ${uc(opt.name)}`}); } if (arg in [opt.short, opt.long]) { return opt; } } return null; }, get_by_name: function(name) { for (let opt in this) { if (opt.name == name) return opt; } return null; }, add_config: function(uci_section) { let uci = cursor(); for (let file, section in uci_section) { let cfg = uci.get_all(file, section); for (let name, value in cfg) { let opt = this.get_by_name(name); if (opt) { opt.action(this, {name: name, value: value}); } } } }, parse: function(argv, uci_section) { // Parse the argument vector. If no value for 'argv' is // supplied, then use global ARGV. // // uci_section is an object with file and section names to // be used to override default values. argv ??= ARGV; this.init(); if (uci_section) { this.add_config(uci_section); } if (this.has_required && length(argv) == 0) { ArgActions.usage_short(this, {exit: 1, suffix: "Try '-h' for full help."}); } let iarg = 0; let narg = length(argv); while (iarg < narg) { let arg = argv[iarg]; let opt = this.get_arg(arg, iarg); iarg++; if (! opt) { ArgActions.usage(this, {exit: 1, msg: `ERROR: '${arg}' is not a valid command or option`}); } let action_args = {}; if ("name" in opt) { action_args.name = opt.name; } if ("position" in opt) { action_args.value = arg; } if ("nargs" in opt && opt.nargs > 0) { if (opt.nargs > narg-iarg) { ArgActions.usage(this, {exit: 1, msg: `ERROR: '${arg}' requires ${opt.nargs} values`}); } if (opt.nargs == 1) { action_args.value = argv[iarg]; } else { action_args.value = slice(argv, iarg, iarg+opt.nargs); } iarg += opt.nargs; } opt.action(this, action_args); if ("auto_exit" in opt) { // The auto_exit parameter value is the exit status code. exit(opt.auto_exit); } } return this.options; }, }; // argparse module provides a few canned option definitions. export let DEFAULT_HELP = { short: "-h", long: "--help", action: "usage", auto_exit: 1, help: "Show this message and quit." }; export let DEFAULT_VERSION = { long: "--version", action: "version", auto_exit: 0, help: "Show the program version and terminate." }; 07070100E814BF000041ED00000000000000000000000369B8AF0D00000000000000080000000100000000000000000000001400000000usr/share/firewall407070100E814C2000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001E00000000usr/share/firewall4/templates07070100E814CA000081A400000000000000000000000169B8AF0D00000168000000080000000100000000000000000000002B00000000usr/share/firewall4/templates/zone-jump.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress: (direction in ["output", "srcnat"]), rule }) -%} jump {{ direction }}_{{ zone.name }} comment "!fw4: Handle {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} {{ direction }} {{ (direction == 'helper') ? "assignment" : "traffic" }}" 07070100E814C6000081A400000000000000000000000169B8AF0D000014D3000000080000000100000000000000000000002600000000usr/share/firewall4/templates/rule.uc{%+ if (rule.family && !rule.has_addrs): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (!rule.proto.any && !rule.has_ports && !rule.icmp_types && !rule.icmp_codes): -%} meta l4proto {{ fw4.l4proto(rule.family, rule.proto) }} {%+ endif -%} {%+ if (rule.iifnames): -%} iifname {{ fw4.set(rule.iifnames) }} {%+ endif -%} {%+ if (rule.oifnames): -%} oifname {{ fw4.set(rule.oifnames) }} {%+ endif -%} {%+ if (rule.saddrs_pos): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(rule.saddrs_pos) }} {%+ endif -%} {%+ if (rule.saddrs_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.saddrs_neg) }} {%+ endif -%} {%+ for (let a in rule.saddrs_masked): -%} {{ fw4.ipproto(rule.family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (rule.daddrs_pos): -%} {{ fw4.ipproto(rule.family) }} daddr {{ fw4.set(rule.daddrs_pos) }} {%+ endif -%} {%+ if (rule.daddrs_neg): -%} {{ fw4.ipproto(rule.family) }} daddr != {{ fw4.set(rule.daddrs_neg) }} {%+ endif -%} {%+ for (let a in rule.daddrs_masked): -%} {{ fw4.ipproto(rule.family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (rule.sports_pos): -%} {{ rule.proto.name }} sport {{ fw4.set(rule.sports_pos) }} {%+ endif -%} {%+ if (rule.sports_neg): -%} {{ rule.proto.name }} sport != {{ fw4.set(rule.sports_neg) }} {%+ endif -%} {%+ if (rule.dports_pos): -%} {{ rule.proto.name }} dport {{ fw4.set(rule.dports_pos) }} {%+ endif -%} {%+ if (rule.dports_neg): -%} {{ rule.proto.name }} dport != {{ fw4.set(rule.dports_neg) }} {%+ endif -%} {%+ if (rule.smacs_pos): -%} ether saddr {{ fw4.set(rule.smacs_pos) }} {%+ endif -%} {%+ if (rule.smacs_neg): -%} ether saddr != {{ fw4.set(rule.smacs_neg) }} {%+ endif -%} {%+ if (rule.icmp_types): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type {{ fw4.set(rule.icmp_types) }} {%+ endif -%} {%+ if (rule.icmp_codes): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type . {{ (rule.family == 4) ? "icmp" : "icmpv6" }} code {{ fw4.set(rule.icmp_codes, true) }} {%+ endif -%} {%+ if (rule.helper): -%} ct helper{% if (rule.helper.invert): %} !={% endif %} {{ fw4.quote(rule.helper.name, true) }} {%+ endif -%} {%+ if (rule.limit): -%} limit rate {{ rule.limit.rate }}/{{ rule.limit.unit }} {%- if (rule.limit_burst): %} burst {{ rule.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (rule.start_date && rule.stop_date): -%} meta time {{ fw4.datestamp(rule.start_date) }}-{{ fw4.datestamp(rule.stop_date) }} {%+ elif (rule.start_date): -%} meta time >= {{ fw4.datestamp(rule.start_date) }} {%+ elif (rule.stop_date): -%} meta time <= {{ fw4.datestamp(rule.stop_date) }} {%+ endif -%} {%+ if (rule.start_time && rule.stop_time): -%} meta hour {{ fw4.time(rule.start_time) }}-{{ fw4.time(rule.stop_time) }} {%+ elif (rule.start_time): -%} meta hour >= {{ fw4.time(rule.start_time) }} {%+ elif (rule.stop_time): -%} meta hour <= {{ fw4.time(rule.stop_time) }} {%+ endif -%} {%+ if (rule.weekdays): -%} meta day{% if (rule.weekdays.invert): %} !={% endif %} {{ fw4.set(rule.weekdays.days) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(rule.mark.mask) }} {{ rule.mark.invert ? '!=' : '==' }} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (rule.mark.invert): %} !={% endif %} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.dscp): -%} {{ fw4.ipproto(rule.family) }} dscp{% if (rule.dscp.invert): %} !={% endif %} {{ fw4.hex(rule.dscp.dscp) }} {%+ endif -%} {%+ if (rule.ipset): -%} {{ fw4.concat(rule.ipset.fields) }}{{ rule.ipset.invert ? ' !=' : '' }} @{{ rule.ipset.name }} {%+ endif -%} {%+ if (rule.log && rule.log_limit): -%} limit rate {{ rule.log_limit.rate }}/{{ rule.log_limit.unit }} log prefix {{ fw4.quote(rule.log, true) }} {%+ include("rule.uc", { fw4, zone, rule: { ...rule, log: 0 } }) %} {%+ elif (rule.log && zone?.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix {{ fw4.quote(rule.log, true) }} {%+ include("rule.uc", { fw4, zone, rule: { ...rule, log: 0 } }) %} {%+ else -%} {%+ if (rule.counter): -%} counter {%+ endif -%} {%+ if (rule.log): -%} log prefix {{ fw4.quote(rule.log, true) }} {%+ endif -%} {%+ if (rule.target == "mark"): -%} meta mark set {{ (rule.set_xmark.mask == 0xFFFFFFFF) ? fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mark == 0) ? `mark and ${fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF)}` : (rule.set_xmark.mark == rule.set_xmark.mask) ? `mark or ${fw4.hex(rule.set_xmark.mark)}` : (rule.set_xmark.mask == 0) ? `mark xor ${fw4.hex(rule.set_xmark.mark)}` : `mark and ${fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF)} xor ${fw4.hex(rule.set_xmark.mark)}` }} {%+ elif (rule.target == "dscp"): -%} {{ fw4.ipproto(rule.family) }} dscp set {{ fw4.hex(rule.set_dscp.dscp) }} {%+ elif (rule.target == "notrack"): -%} notrack {%+ elif (rule.target == "helper"): -%} ct helper set {{ fw4.quote(rule.set_helper.name, true) }} {%+ elif (rule.jump_chain): -%} jump {{ rule.jump_chain }} {%+ elif (rule.target): -%} {{ rule.target }} {%+ endif -%} comment {{ fw4.quote(`!fw4: ${rule.name}`, true) }} {%+ endif -%} 07070100E814C7000081A400000000000000000000000169B8AF0D00003ABD000000080000000100000000000000000000002900000000usr/share/firewall4/templates/ruleset.uc{% let flowtable_devices = fw4.resolve_offload_devices(); let available_helpers = filter(fw4.helpers(), h => h.available); let defined_ipsets = fw4.ipsets(); let zones_with_limits = filter(fw4.zones(), z => z.log_limit); -%} table inet fw4 flush table inet fw4 {% if (fw4.check_flowtable()): %} delete flowtable inet fw4 ft {% endif %} {% fw4.includes('ruleset-prepend') %} table inet fw4 { {% if (length(flowtable_devices) > 0): %} # # Flowtable # flowtable ft { hook ingress priority 0; devices = {{ fw4.set(flowtable_devices, true) }}; counter; {% if (fw4.default_option("flow_offloading_hw")): %} flags offload; {% endif %} } {% endif %} {% if (length(available_helpers)): %} # # CT helper definitions # {% for (let helper in available_helpers): %} {% for (let proto in helper.proto): %} ct helper {{ helper.name }} { type {{ fw4.quote(helper.name, true) }} protocol {{ proto.name }}; } {% endfor %} {% endfor %} {% endif %} {% if (length(defined_ipsets)): %} # # Set definitions # {% for (let set in defined_ipsets): %} set {{ set.name }} { {% if (set.comment): %} comment {{ fw4.quote(set.comment, true) }} {% endif %} type {{ fw4.concat(set.types) }} {% if (set.maxelem > 0): %} size {{ set.maxelem }} {% endif %} {% if (set.timeout > 0): %} timeout {{ set.timeout }}s {% endif %} {% if (set.interval): %} auto-merge {% endif %} {% if (set.flags): %} flags {{ join(',', set.flags) }} {% endif %} {% fw4.print_setentries(set) %} } {% endfor %} {% endif %} # # Defines # {% for (let zone in fw4.zones()): %} define {{ replace(zone.name, /^[0-9]/, '_$&') }}_devices = {{ fw4.set(zone.match_devices, true) }} define {{ replace(zone.name, /^[0-9]/, '_$&') }}_subnets = {{ fw4.set(zone.match_subnets, true) }} {% endfor %} {% if (length(zones_with_limits)): %} # # Limits # {% for (let zone in zones_with_limits): %} limit {{ zone.name }}.log_limit { comment "{{ zone.name }} log limit" rate {{ zone.log_limit.rate }}/{{ zone.log_limit.unit }} } {% endfor %} {% endif %} # # User includes # include "/etc/nftables.d/*.nft" {% fw4.includes('table-prepend') %} # # Filter rules # chain input { type filter hook input priority filter; policy {{ fw4.input_policy(true) }}; iif "lo" accept comment "!fw4: Accept traffic from loopback" {% fw4.includes('chain-prepend', 'input') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle inbound flows" {% if (fw4.default_option("synflood_protect") && fw4.default_option("synflood_rate")): %} tcp flags & (fin | syn | rst | ack) == syn jump syn_flood comment "!fw4: Rate limit TCP syn packets" {% endif %} {% for (let rule in fw4.rules("input")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "input" }) %} {% endfor; endfor %} {% if (fw4.input_policy() == "reject"): %} jump handle_reject {% endif %} {% fw4.includes('chain-append', 'input') %} } chain forward { type filter hook forward priority filter; policy {{ fw4.forward_policy(true) }}; {% if (length(flowtable_devices) > 0): %} meta l4proto { tcp, udp } flow offload @ft; {% endif %} {% fw4.includes('chain-prepend', 'forward') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle forwarded flows" {% for (let rule in fw4.rules("forward")): %} {%+ include("rule.uc", { fw4, zone: (rule.src?.zone?.log_limit ? rule.src.zone : rule.dest?.zone), rule }) %} {% endfor %} {% for (let zone in fw4.zones()): for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "forward" }) %} {% endfor; endfor %} {% fw4.includes('chain-append', 'forward') %} {% if (fw4.forward_policy() == "reject"): %} jump handle_reject {% endif %} } chain output { type filter hook output priority filter; policy {{ fw4.output_policy(true) }}; oif "lo" accept comment "!fw4: Accept traffic towards loopback" {% fw4.includes('chain-prepend', 'output') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle outbound flows" {% for (let rule in fw4.rules("output")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% for (let rule in zone.match_rules): %} {% if (zone.dflags.helper): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, true); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, true); %} {% if (devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "helper" }) %} {% endif %} {% endif %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "output" }) %} {% endfor %} {% endfor %} {% fw4.includes('chain-append', 'output') %} {% if (fw4.output_policy() == "reject"): %} jump handle_reject {% endif %} } chain prerouting { type filter hook prerouting priority filter; policy accept; {% for (let zone in fw4.zones()): %} {% if (zone.dflags.helper): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, false); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, false); %} {% if (rule.devices_neg || rule.subnets_neg || devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "helper" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} } chain handle_reject { meta l4proto tcp reject with {{ (fw4.default_option("tcp_reject_code") != "tcp-reset") ? `icmpx type ${fw4.default_option("tcp_reject_code")}` : "tcp reset" }} comment "!fw4: Reject TCP traffic" reject with {{ (fw4.default_option("any_reject_code") != "tcp-reset") ? `icmpx type ${fw4.default_option("any_reject_code")}` : "tcp reset" }} comment "!fw4: Reject any other traffic" } {% if (fw4.default_option("synflood_protect") && fw4.default_option("synflood_rate")): let r = fw4.default_option("synflood_rate"); let b = fw4.default_option("synflood_burst"); %} chain syn_flood { limit rate {{ r.rate }}/{{ r.unit }} {%- if (b): %} burst {{ b }} packets{% endif %} return comment "!fw4: Accept SYN packets below rate-limit" drop comment "!fw4: Drop excess packets" } {% endif %} {% for (let zone in fw4.zones()): %} chain input_{{ zone.name }} { {% fw4.includes('chain-prepend', `input_${zone.name}`) %} {% for (let rule in fw4.rules(`input_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% if (zone.dflags.dnat): %} ct status dnat accept comment "!fw4: Accept port redirections" {% endif %} {% fw4.includes('chain-append', `input_${zone.name}`) %} jump {{ zone.input }}_from_{{ zone.name }} } chain output_{{ zone.name }} { {% fw4.includes('chain-prepend', `output_${zone.name}`) %} {% for (let rule in fw4.rules(`output_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% fw4.includes('chain-append', `output_${zone.name}`) %} jump {{ zone.output }}_to_{{ zone.name }} } chain forward_{{ zone.name }} { {% fw4.includes('chain-prepend', `forward_${zone.name}`) %} {% for (let rule in fw4.rules(`forward_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% if (zone.dflags.dnat): %} ct status dnat accept comment "!fw4: Accept port forwards" {% endif %} {% fw4.includes('chain-append', `forward_${zone.name}`) %} jump {{ zone.forward }}_to_{{ zone.name }} {% if (fw4.forward_policy() != "accept" && (zone.log & 1)): %} {%+ if (zone.log_limit): %}limit name "{{ zone.name }}.log_limit" {%+ endif -%} log prefix "{{ fw4.forward_policy() }} {{ zone.name }} forward: " {% endif %} } {% if (zone.dflags.helper): %} chain helper_{{ zone.name }} { {% for (let rule in fw4.rules(`helper_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} } {% endif %} {% for (let verdict in ["accept", "reject", "drop"]): %} {% if (zone.sflags[verdict]): %} chain {{ verdict }}_from_{{ zone.name }} { {% for (let rule in zone.match_rules): %} {%+ include("zone-verdict.uc", { fw4, zone, rule, egress: false, verdict }) %} {% endfor %} } {% endif %} {% if (zone.dflags[verdict]): %} chain {{ verdict }}_to_{{ zone.name }} { {% for (let rule in zone.match_rules): %} {% if (!fw4.default_option("drop_invalid") && verdict == "accept" && (zone.masq || zone.masq6) && !zone.masq_allow_invalid): %} {%+ include("zone-drop-invalid.uc", { fw4, zone, rule }) %} {% endif %} {%+ include("zone-verdict.uc", { fw4, zone, rule, egress: true, verdict }) %} {% endfor %} } {% endif %} {% endfor %} {% endfor %} # # NAT rules # chain dstnat { type nat hook prerouting priority dstnat; policy accept; {% fw4.includes('chain-prepend', 'dstnat') %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags.dnat): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "dstnat" }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'dstnat') %} } chain srcnat { type nat hook postrouting priority srcnat; policy accept; {% fw4.includes('chain-prepend', 'srcnat') %} {% for (let redirect in fw4.redirects("srcnat")): %} {%+ include("redirect.uc", { fw4, zone: null, redirect }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags.snat): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "srcnat" }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'srcnat') %} } {% for (let zone in fw4.zones()): %} {% if (zone.dflags.dnat): %} chain dstnat_{{ zone.name }} { {% fw4.includes('chain-prepend', `dstnat_${zone.name}`) %} {% for (let redirect in fw4.redirects(`dstnat_${zone.name}`)): %} {%+ include("redirect.uc", { fw4, zone, redirect }) %} {% endfor %} {% fw4.includes('chain-append', `dstnat_${zone.name}`) %} } {% endif %} {% if (zone.dflags.snat): %} chain srcnat_{{ zone.name }} { {% fw4.includes('chain-prepend', `srcnat_${zone.name}`) %} {% for (let redirect in fw4.redirects(`srcnat_${zone.name}`)): %} {%+ include("redirect.uc", { fw4, zone, redirect }) %} {% endfor %} {% if (zone.masq): %} {% for (let saddrs in zone.masq4_src_subnets): %} {% for (let daddrs in zone.masq4_dest_subnets): %} {%+ include("zone-masq.uc", { fw4, zone, family: 4, saddrs, daddrs }) %} {% endfor %} {% endfor %} {% endif %} {% if (zone.masq6): %} {% for (let saddrs in zone.masq6_src_subnets): %} {% for (let daddrs in zone.masq6_dest_subnets): %} {%+ include("zone-masq.uc", { fw4, zone, family: 6, saddrs, daddrs }) %} {% endfor %} {% endfor %} {% endif %} {% fw4.includes('chain-append', `srcnat_${zone.name}`) %} } {% endif %} {% endfor %} # # Raw rules (notrack) # chain raw_prerouting { type filter hook prerouting priority raw; policy accept; {% for (let zone in fw4.zones()): %} {% if (zone.dflags["notrack"]): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, false); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, false); %} {% if (rule.devices_neg || rule.subnets_neg || devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "notrack" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'raw_prerouting') %} } chain raw_output { type filter hook output priority raw; policy accept; {% fw4.includes('chain-prepend', 'raw_output') %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags["notrack"]): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, true); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, true); %} {% if (devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "notrack" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'raw_output') %} } {% for (let zone in fw4.zones()): %} {% if (zone.dflags.notrack): %} chain notrack_{{ zone.name }} { {% for (let rule in fw4.rules(`notrack_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} } {% endif %} {% endfor %} # # Mangle rules # chain mangle_prerouting { type filter hook prerouting priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_prerouting') %} {% for (let rule in fw4.rules("mangle_prerouting")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_prerouting') %} } chain mangle_postrouting { type filter hook postrouting priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_postrouting') %} {% for (let rule in fw4.rules("mangle_postrouting")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.mtu_fix): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-mssfix.uc", { fw4, zone, rule, egress: true }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'mangle_postrouting') %} } chain mangle_input { type filter hook input priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_input') %} {% for (let rule in fw4.rules("mangle_input")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_input') %} } chain mangle_output { type route hook output priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_output') %} {% for (let rule in fw4.rules("mangle_output")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_output') %} } chain mangle_forward { type filter hook forward priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_forward') %} {% for (let rule in fw4.rules("mangle_forward")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.mtu_fix): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-mssfix.uc", { fw4, zone, rule, egress: false }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'mangle_forward') %} } {% fw4.includes('table-append') %} } {% fw4.includes('ruleset-append') %} 07070100E814C5000081A400000000000000000000000169B8AF0D0000125C000000080000000100000000000000000000002A00000000usr/share/firewall4/templates/redirect.uc{%+ if (redirect.family && !redirect.has_addrs): -%} meta nfproto {{ fw4.nfproto(redirect.family) }} {%+ endif -%} {%+ if (!redirect.proto.any && !redirect.has_ports): -%} meta l4proto {{ (redirect.proto.name == 'icmp' && redirect.family == 6) ? 'ipv6-icmp' : redirect.proto.name }} {%+ endif -%} {%+ if (redirect.device): -%} oifname {{ fw4.quote(redirect.device, true) }} {%+ endif -%} {%+ if (redirect.saddrs_pos): -%} {{ fw4.ipproto(redirect.family) }} saddr {{ fw4.set(redirect.saddrs_pos) }} {%+ endif -%} {%+ if (redirect.saddrs_neg): -%} {{ fw4.ipproto(redirect.family) }} saddr != {{ fw4.set(redirect.saddrs_neg) }} {%+ endif -%} {%+ for (let a in redirect.saddrs_masked): -%} {{ fw4.ipproto(redirect.family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (redirect.daddrs_pos): -%} {{ fw4.ipproto(redirect.family) }} daddr {{ fw4.set(redirect.daddrs_pos) }} {%+ endif -%} {%+ if (redirect.daddrs_neg): -%} {{ fw4.ipproto(redirect.family) }} daddr != {{ fw4.set(redirect.daddrs_neg) }} {%+ endif -%} {%+ for (let a in redirect.daddrs_masked): -%} {{ fw4.ipproto(redirect.family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (redirect.sports_pos): -%} {{ redirect.proto.name }} sport {{ fw4.set(redirect.sports_pos) }} {%+ endif -%} {%+ if (redirect.sports_neg): -%} {{ redirect.proto.name }} sport != {{ fw4.set(redirect.sports_neg) }} {%+ endif -%} {%+ if (redirect.dports_pos): -%} {{ redirect.proto.name }} dport {{ fw4.set(redirect.dports_pos) }} {%+ endif -%} {%+ if (redirect.dports_neg): -%} {{ redirect.proto.name }} dport != {{ fw4.set(redirect.dports_neg) }} {%+ endif -%} {%+ if (redirect.smacs_pos): -%} ether saddr {{ fw4.set(redirect.smacs_pos) }} {%+ endif -%} {%+ if (redirect.smacs_neg): -%} ether saddr != {{ fw4.set(redirect.smacs_neg) }} {%+ endif -%} {%+ if (redirect.helper): -%} ct helper{% if (redirect.helper.invert): %} !={% endif %} {{ fw4.quote(redirect.helper.name, true) }} {%+ endif -%} {%+ if (redirect.limit): -%} limit rate {{ redirect.limit.rate }}/{{ redirect.limit.unit }} {%- if (redirect.limit_burst): %} burst {{ redirect.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (redirect.start_date && redirect.stop_date): -%} meta time {{ fw4.datestamp(redirect.start_date) }}-{{ fw4.datestamp(redirect.stop_date) }} {%+ elif (redirect.start_date): -%} meta time >= {{ fw4.datestamp(redirect.start_date) }} {%+ elif (redirect.stop_date): -%} meta time <= {{ fw4.datestamp(redirect.stop_date) }} {%+ endif -%} {%+ if (redirect.start_time && redirect.stop_time): -%} meta hour {{ fw4.time(redirect.start_time) }}-{{ fw4.time(redirect.stop_time) }} {%+ elif (redirect.start_time): -%} meta hour >= {{ fw4.time(redirect.start_time) }} {%+ elif (redirect.stop_time): -%} meta hour <= {{ fw4.time(redirect.stop_time) }} {%+ endif -%} {%+ if (redirect.weekdays): -%} meta day{% if (redirect.weekdays.invert): %} !={% endif %} {{ fw4.set(redirect.weekdays.days) }} {%+ endif -%} {%+ if (redirect.mark && redirect.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(redirect.mark.mask) }} {{ redirect.mark.invert ? '!=' : '==' }} {{ fw4.hex(redirect.mark.mark) }} {%+ endif -%} {%+ if (redirect.mark && redirect.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (redirect.mark.invert): %} !={% endif %} {{ fw4.hex(redirect.mark.mark) }} {%+ endif -%} {%+ if (redirect.ipset): -%} {{ fw4.concat(redirect.ipset.fields) }}{{ redirect.ipset.invert ? ' !=' : '' }} @{{ redirect.ipset.name }} {%+ endif -%} {%+ if (redirect.log && redirect.log_limit): -%} limit rate {{ redirect.log_limit.rate }}/{{ redirect.log_limit.unit }} log prefix {{ fw4.quote(redirect.log, true) }} {%+ include("redirect.uc", { fw4, zone, redirect: { ...redirect, log: 0 } }) %} {%+ elif (redirect.log && zone?.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix {{ fw4.quote(redirect.log, true) }} {%+ include("redirect.uc", { fw4, zone, redirect: { ...redirect, log: 0 } }) %} {%+ else -%} {%+ if (redirect.counter): -%} counter {%+ endif -%} {%+ if (redirect.log): -%} log prefix {{ fw4.quote(redirect.log, true) }} {%+ endif -%} {% if (redirect.target == "redirect"): -%} redirect{% if (redirect.rport): %} to {{ fw4.port(redirect.rport) }}{% endif %} {%- elif (redirect.target == "accept" || redirect.target == "masquerade"): -%} {{ redirect.target }} {%- else -%} {{ redirect.target }} {{ redirect.raddr ? fw4.host(redirect.raddr, redirect.rport != null) : '' }} {%- if (redirect.rport): %}:{{ fw4.port(redirect.rport) }}{% endif %} {% endif %} comment {{ fw4.quote(`!fw4: ${redirect.name}`, true) }} {% endif -%} 07070100E814CB000081A400000000000000000000000169B8AF0D000003A5000000080000000100000000000000000000002B00000000usr/share/firewall4/templates/zone-masq.ucmeta nfproto {{ fw4.nfproto(family) }} {%+ if (saddrs && saddrs[0]): -%} {{ fw4.ipproto(family) }} saddr {{ fw4.set(map(saddrs[0], fw4.cidr)) }} {%+ endif -%} {%+ if (saddrs && saddrs[1]): -%} {{ fw4.ipproto(family) }} saddr != {{ fw4.set(map(saddrs[1], fw4.cidr)) }} {%+ endif -%} {%+ for (let a in (saddrs ? saddrs[2] : [])): -%} {{ fw4.ipproto(family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (daddrs && daddrs[0]): -%} {{ fw4.ipproto(family) }} daddr {{ fw4.set(map(daddrs[0], fw4.cidr)) }} {%+ endif -%} {%+ if (daddrs && daddrs[1]): -%} {{ fw4.ipproto(family) }} daddr != {{ fw4.set(map(daddrs[1], fw4.cidr)) }} {%+ endif -%} {%+ for (let a in (daddrs ? daddrs[2] : [])): -%} {{ fw4.ipproto(family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} masquerade comment "!fw4: Masquerade {{ fw4.nfproto(family, true) }} {{ zone.name }} traffic" 07070100E814F7000081A400000000000000000000000169B8AF0D00000360000000080000000100000000000000000000002E00000000usr/share/firewall4/templates/zone-notrack.uc{%+ let devs = fw4.filter_loopback_devs(fw4.devices_pos, output), nets = fw4.filter_loopback_addrs(fw4.subnets_pos, output); if (!((output && (length(devs) || length(nets))) || (!output && (rule.devices_neg || rule.subnets_neg || length(devs) || length(nets))))) return; -%} {%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (length(devs)): -%} iifname {{ fw4.set(devs) }} {%+ endif -%} {%+ if (rule.devices_neg): -%} iifname != {{ fw4.set(rule.devices_neg) }} {%+ endif -%} {%+ if (length(nets)): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(nets) }} {%+ endif -%} {%+ if (rule.subnets_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.subnets_neg) }} {%+ endif -%} jump notrack_{{ zone.name }} comment "!fw4: {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} CT bypass" 07070100E81504000081A400000000000000000000000169B8AF0D0000038B000000080000000100000000000000000000002E00000000usr/share/firewall4/templates/zone-verdict.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress, rule }) -%} {%+ if (verdict != "accept" && (zone.log & 1) && zone.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix "{{ verdict }} {{ zone.name }} {{ egress ? "out" : "in" }}: " {%+ include("zone-verdict.uc", { fw4, zone: { ...zone, log: 0 }, rule, egress, verdict }) %} {%+ else -%} {%+ if (zone.counter): -%} counter {%+ endif -%} {%+ if (verdict != "accept" && (zone.log & 1)): -%} log prefix "{{ verdict }} {{ zone.name }} {{ egress ? "out" : "in" }}: " {%+ endif -%} {% if (verdict == "reject"): -%} jump handle_reject comment "!fw4: reject {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} traffic" {% else -%} {{ verdict }} comment "!fw4: {{ verdict }} {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} traffic" {% endif -%} {% endif -%} 07070100E814F5000081A400000000000000000000000169B8AF0D00000194000000080000000100000000000000000000002D00000000usr/share/firewall4/templates/zone-mssfix.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress, rule }) -%} tcp flags syn / syn,fin,rst tcp option maxseg size set rt mtu {%+ if (zone.log & 2): -%} log prefix "MSSFIX {{ zone.name }} out: " {%+ endif -%} comment "!fw4: Zone {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} {{ egress ? "egress" : "ingress" }} MTU fixing" 07070100E814C9000081A400000000000000000000000169B8AF0D00000266000000080000000100000000000000000000003300000000usr/share/firewall4/templates/zone-drop-invalid.uc{%+ if (zone.masq ^ zone.masq6): -%} meta nfproto {{ fw4.nfproto(zone.masq ? 4 : 6) }} {%+ endif -%} {%+ include("zone-match.uc", { egress: true, rule }) -%} ct state invalid {%+ if ((zone.log & 1) && zone.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix "drop {{ zone.name }} invalid ct state: " {%+ include("zone-drop-invalid.uc", { fw4, zone: { ...zone, log: 0 }, rule }) %} {%+ else -%} {%+ if (zone.counter): -%} counter {%+ endif -%} {%+ if (zone.log & 1): -%} log prefix "drop {{ zone.name }} invalid ct state: " {%+ endif -%} drop comment "!fw4: Prevent NAT leakage" {%+ endif -%} 07070100E814C4000081A400000000000000000000000169B8AF0D000010F7000000080000000100000000000000000000002D00000000usr/share/firewall4/templates/mangle-rule.uc{%+ for (let src_devices in rule.src?.zone) } {%+ if (rule.family && !rule.has_addrs): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (!rule.proto.any && !rule.has_ports && !rule.icmp_types && !rule.icmp_codes): -%} meta l4proto {{ (rule.proto.name == 'icmp' && rule.family == 6) ? 'ipv6-icmp' : rule.proto.name }} {%+ endif -%} {%+ if (rule.saddrs_pos): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(rule.saddrs_pos) }} {%+ endif -%} {%+ if (rule.saddrs_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.saddrs_neg) }} {%+ endif -%} {%+ if (rule.daddrs_pos): -%} {{ fw4.ipproto(rule.family) }} daddr {{ fw4.set(rule.daddrs_pos) }} {%+ endif -%} {%+ if (rule.daddrs_neg): -%} {{ fw4.ipproto(rule.family) }} daddr != {{ fw4.set(rule.daddrs_neg) }} {%+ endif -%} {%+ if (rule.sports_pos): -%} {{ rule.proto.name }} sport {{ fw4.set(rule.sports_pos) }} {%+ endif -%} {%+ if (rule.sports_neg): -%} {{ rule.proto.name }} sport != {{ fw4.set(rule.sports_neg) }} {%+ endif -%} {%+ if (rule.dports_pos): -%} {{ rule.proto.name }} dport {{ fw4.set(rule.dports_pos) }} {%+ endif -%} {%+ if (rule.dports_neg): -%} {{ rule.proto.name }} dport != {{ fw4.set(rule.dports_neg) }} {%+ endif -%} {%+ if (rule.smacs_pos): -%} ether saddr {{ fw4.set(rule.smacs_pos) }} {%+ endif -%} {%+ if (rule.smacs_neg): -%} ether saddr != {{ fw4.set(rule.smacs_neg) }} {%+ endif -%} {%+ if (rule.icmp_types): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type {{ fw4.set(rule.icmp_types) }} {%+ endif -%} {%+ if (rule.icmp_codes): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type . {{ (rule.family == 4) ? "icmp" : "icmpv6" }} code {{ fw4.set(rule.icmp_codes, true) }} {%+ endif -%} {%+ if (rule.helper): -%} ct helper{% if (rule.helper.invert): %} !={% endif %} {{ fw4.quote(rule.helper.name, true) }} {%+ endif -%} {%+ if (rule.limit): -%} limit rate {{ rule.limit.rate }}/{{ rule.limit.unit }} {%- if (rule.limit_burst): %} burst {{ rule.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (rule.start_date): -%} meta time >= {{ exists(rule.start_date, "hour") ? fw4.datetime(rule.start_date) : fw4.date(rule.start_date) }} {%+ endif -%} {%+ if (rule.stop_date): -%} meta time <= {{ exists(rule.stop_date, "hour") ? fw4.datetime(rule.stop_date) : fw4.date(rule.stop_date) }} {%+ endif -%} {%+ if (rule.start_time): -%} meta hour >= {{ fw4.time(rule.start_time) }} {%+ endif -%} {%+ if (rule.stop_time): -%} meta hour <= {{ fw4.time(rule.stop_time) }} {%+ endif -%} {%+ if (rule.weekdays): -%} meta day{% if (rule.weekdays.invert): %} !={% endif %} {{ fw4.set(rule.weekdays.days) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(rule.mark.mask) }} {{ rule.mark.invert ? '!=' : '==' }} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (rule.mark.invert): %} !={% endif %} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.dscp): -%} dscp{% if (rule.dscp.invert): %} !={% endif %} {{ fw4.hex(rule.dscp.dscp) }} {%+ endif -%} {%+ if (rule.ipset): -%} {{ fw4.concat(rule.ipset.fields) }}{{ rule.ipset.invert ? ' !=' : '' }} @{{ rule.ipset.name }} {%+ endif -%} {%+ if (rule.counter): -%} counter {%+ endif -%} {%+ if (rule.log): -%} log prefix {{ fw4.quote(rule.log, true) }} {%+ endif -%} {%+ if (rule.target == "mark"): -%} meta mark set {{ (rule.set_xmark.mask == 0xFFFFFFFF) ? fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mark == 0) ? 'mark and ' + fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF) : (rule.set_xmark.mark == rule.set_xmark.mask) ? 'mark or ' + fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mask == 0) ? 'mark xor ' + fw4.hex(rule.set_xmark.mark) : 'mark and ' + fw4.hex(~r.set_xmark.mask & 0xFFFFFFFF) + ' xor ' + fw4.hex(r.set_xmark.mark) }} {%+ elif (rule.target == "dscp"): -%} {{ fw4.ipproto(rule.family) }} dscp set {{ fw4.hex(rule.set_dscp.dscp) }} {%+ elif (rule.target == "notrack"): -%} notrack {%+ elif (rule.target == "helper"): -%} ct helper set {{ fw4.quote(rule.set_helper.name, true) }} {%+ elif (rule.jump_chain): -%} jump {{ rule.jump_chain }} {%+ elif (rule.target): -%} {{ rule.target }} {%+ endif -%} comment {{ fw4.quote(`!fw4: ${rule.name}`, true) }} 07070100E814CC000081A400000000000000000000000169B8AF0D00000358000000080000000100000000000000000000002C00000000usr/share/firewall4/templates/zone-match.uc{%+ if (rule.devices_pos): -%} {{ egress ? "oifname" : "iifname" }} {{ fw4.set(rule.devices_pos) }} {%+ endif -%} {%+ if (rule.devices_neg): -%} {{ egress ? "oifname" : "iifname" }} != {{ fw4.set(rule.devices_neg) }} {%+ endif -%} {%+ for (let wcndev in rule.devices_neg_wildcard): -%} {{ egress ? "oifname" : "iifname" }} != {{ fw4.quote(wcndev) }} {%+ endfor -%} {%+ if (rule.subnets_pos): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} {{ fw4.set(rule.subnets_pos) }} {%+ endif -%} {%+ if (rule.subnets_neg): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} != {{ fw4.set(rule.subnets_neg) }} {%+ endif -%} {%+ for (let subnet in rule.subnets_masked): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} & {{ subnet.mask }} {{ subnet.invert ? '!=' : '==' }} {{ subnet.addr }} {%+ endfor -%} 07070100E814C1000081A400000000000000000000000169B8AF0D00000BC8000000080000000100000000000000000000001C00000000usr/share/firewall4/main.uc{% let fw4 = require("fw4"); function read_state() { let state = fw4.read_state(); if (!state) { warn("Unable to read firewall state - do you need to start the firewall?\n"); exit(1); } return state; } function reload_sets() { let state = read_state(), sets = fw4.check_set_types(); for (let set in state.ipsets) { if (!set.loadfile && !length(set.entries)) continue; if (!exists(sets, set.name)) { warn(`Named set '${set.name}' does not exist - do you need to restart the firewall?\n`); continue; } else if (fw4.concat(sets[set.name]) != fw4.concat(set.types)) { warn(`Named set '${set.name}' has a different type - want '${fw4.concat(set.types)}' but is '${fw4.concat(sets[set.name])}' - do you need to restart the firewall?\n`); continue; } let first = true; let printer = (entry) => { if (first) { print(`add element inet fw4 ${set.name} {\n`); first = false; } print(` ${join(" . ", entry)},\n`); }; print(`flush set inet fw4 ${set.name}\n`); map(set.entries, printer); if (set.loadfile) fw4.parse_setfile(set, printer); if (!first) print("}\n\n"); } } function render_ruleset(use_statefile) { fw4.load(use_statefile); include("templates/ruleset.uc", { fw4, type, exists, length, include }); } function lookup_network(net) { let state = read_state(); for (let zone in state.zones) { for (let network in (zone.network || [])) { if (network.device == net) { print(zone.name, "\n"); exit(0); } } } exit(1); } function lookup_device(dev) { let state = read_state(); for (let zone in state.zones) { for (let rule in (zone.match_rules || [])) { if (dev in rule.devices_pos) { print(zone.name, "\n"); exit(0); } } } exit(1); } function lookup_zone(name, dev) { let state = read_state(); for (let zone in state.zones) { if (zone.name == name) { let devices = []; map(zone.match_rules, (r) => push(devices, ...(r.devices_pos || []))); if (dev) { if (dev in devices) { print(dev, "\n"); exit(0); } exit(1); } if (length(devices)) print(join("\n", devices), "\n"); exit(0); } } exit(1); } function run_includes() { let state = read_state(), paths = []; for (let inc in state.includes) { if (inc.type != 'script') continue; let path = replace(inc.path, "'", "'\\''"); let rc = system([ 'sh', '-c', `exec 1000>&-; config() { echo "You cannot use UCI in firewall includes!" >&2; exit 1; }; . '${path}'` ], 30000); if (rc != 0) warn(`Include '${inc.path}' failed with exit code ${rc}\n`); } } switch (getenv("ACTION")) { case "start": return render_ruleset(true); case "print": return render_ruleset(false); case "reload-sets": return reload_sets(); case "network": return lookup_network(getenv("OBJECT")); case "device": return lookup_device(getenv("OBJECT")); case "zone": return lookup_zone(getenv("OBJECT"), getenv("DEVICE")); case "includes": return run_includes(); } 07070100E814C0000081A400000000000000000000000169B8AF0D00000893000000080000000100000000000000000000001C00000000usr/share/firewall4/helpersconfig helper option name 'amanda' option description 'Amanda backup and archiving proto' option module 'nf_conntrack_amanda' option family 'any' option proto 'udp' option port '10080' config helper option name 'ftp' option description 'FTP passive connection tracking' option module 'nf_conntrack_ftp' option family 'any' option proto 'tcp' option port '21' config helper option name 'RAS' option description 'RAS proto tracking' option module 'nf_conntrack_h323' option family 'any' option proto 'udp' option port '1719' config helper option name 'Q.931' option description 'Q.931 proto tracking' option module 'nf_conntrack_h323' option family 'any' option proto 'tcp' option port '1720' config helper option name 'irc' option description 'IRC DCC connection tracking' option module 'nf_conntrack_irc' option family 'ipv4' option proto 'tcp' option port '6667' config helper option name 'netbios-ns' option description 'NetBIOS name service broadcast tracking' option module 'nf_conntrack_netbios_ns' option family 'ipv4' option proto 'udp' option port '137' config helper option name 'pptp' option description 'PPTP VPN connection tracking' option module 'nf_conntrack_pptp' option family 'ipv4' option proto 'tcp' option port '1723' config helper option name 'sane' option description 'SANE scanner connection tracking' option module 'nf_conntrack_sane' option family 'any' option proto 'tcp' option port '6566' config helper option name 'sip' option description 'SIP VoIP connection tracking' option module 'nf_conntrack_sip' option family 'any' option proto 'udp' option port '5060' config helper option name 'snmp' option description 'SNMP monitoring connection tracking' option module 'nf_conntrack_snmp' option family 'ipv4' option proto 'udp' option port '161' config helper option name 'tftp' option description 'TFTP connection tracking' option module 'nf_conntrack_tftp' option family 'any' option proto 'udp' option port '69' config helper option name 'rtsp' option description 'RTSP connection tracking' option module 'nf_conntrack_rtsp' option family 'ipv4' option proto 'tcp' option port '554' 07070100E816E9000041ED00000000000000000000000369B8AF0D00000000000000080000000100000000000000000000000F00000000usr/share/luci07070100E816EA000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001600000000usr/share/luci/menu.d07070100E816EB000081A400000000000000000000000169B8AF0D000009FD000000080000000100000000000000000000002500000000usr/share/luci/menu.d/luci-base.json{ "admin": { "title": "Administration", "order": 10, "action": { "type": "firstchild", "recurse": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ], "login": true } }, "admin/status": { "title": "Status", "order": 10, "action": { "type": "firstchild", "preferred": "overview", "recurse": true } }, "admin/system": { "title": "System", "order": 20, "action": { "type": "firstchild", "preferred": "system", "recurse": true } }, "admin/services": { "title": "Services", "order": 40, "action": { "type": "firstchild", "recurse": true } }, "admin/network": { "title": "Network", "order": 50, "action": { "type": "firstchild", "recurse": true } }, "admin/vpn": { "title": "VPN", "order": 70, "action": { "type": "firstchild", "recurse": true } }, "admin/translations/*": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_translations" }, "auth": {} }, "admin/ubus/*": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_ubus" }, "auth": {} }, "admin/logout": { "title": "Log out", "order": 999, "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_logout" }, "depends": { "acl": [ "luci-base" ] }, "firstchild_ineligible": true }, "admin/uci": { "action": { "type": "firstchild" } }, "admin/uci/revert": { "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_revert", "post": true } }, "admin/uci/apply_rollback": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_apply_rollback", "post": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ] } }, "admin/uci/apply_unchecked": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_apply_unchecked", "post": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ] } }, "admin/uci/confirm": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_confirm" }, "auth": {} }, "admin/menu": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_menu" }, "auth": {} } } 07070100E817A3000081A400000000000000000000000169B8AF0D00000AFF000000080000000100000000000000000000002B00000000usr/share/luci/menu.d/luci-mod-system.json{ "admin/system/system": { "title": "System", "order": 1, "action": { "type": "view", "path": "system/system" }, "depends": { "acl": [ "luci-mod-system-config" ] } }, "admin/system/admin": { "title": "Administration", "order": 2, "action": { "type": "firstchild" }, "depends": { "acl": [ "luci-mod-system-config", "luci-mod-system-ssh" ] } }, "admin/system/admin/password": { "title": "Router Password", "order": 1, "action": { "type": "view", "path": "system/password" }, "depends": { "acl": [ "luci-mod-system-config" ] } }, "admin/system/admin/dropbear": { "title": "SSH Access", "order": 2, "action": { "type": "view", "path": "system/dropbear" }, "depends": { "acl": [ "luci-mod-system-ssh" ], "fs": { "/usr/sbin/dropbear": "executable" } } }, "admin/system/admin/sshkeys": { "title": "SSH-Keys", "order": 3, "action": { "type": "view", "path": "system/sshkeys" }, "depends": { "acl": [ "luci-mod-system-ssh" ], "fs": { "/usr/sbin/dropbear": "executable" } } }, "admin/system/admin/uhttpd": { "title": "HTTP(S) Access", "order": 4, "action": { "type": "view", "path": "system/uhttpd" }, "depends": { "acl": [ "luci-mod-system-uhttpd" ], "fs": { "/usr/sbin/uhttpd": "executable" } } }, "admin/system/admin/repokeys": { "title": "Repo Public Keys", "order": 5, "action": { "type": "view", "path": "system/repokeys" }, "depends": { "acl": [ "luci-mod-system-repokeys" ] } }, "admin/system/startup": { "title": "Startup", "order": 45, "action": { "type": "view", "path": "system/startup" }, "depends": { "acl": [ "luci-mod-system-init" ] } }, "admin/system/crontab": { "title": "Scheduled Tasks", "order": 46, "action": { "type": "view", "path": "system/crontab" }, "depends": { "acl": [ "luci-mod-system-cron" ] } }, "admin/system/mounts": { "title": "Mount Points", "order": 50, "action": { "type": "view", "path": "system/mounts" }, "depends": { "acl": [ "luci-mod-system-mounts" ], "fs": { "/sbin/block": "executable" } } }, "admin/system/leds": { "title": "LED Configuration", "order": 60, "action": { "type": "view", "path": "system/leds" }, "depends": { "acl": [ "luci-mod-system-config" ], "fs": { "/sys/class/leds": "directory" } } }, "admin/system/flash": { "title": "Backup / Flash Firmware", "order": 70, "action": { "type": "view", "path": "system/flash" }, "depends": { "acl": [ "luci-mod-system-flash" ] } }, "admin/system/reboot": { "title": "Reboot", "order": 90, "action": { "type": "view", "path": "system/reboot" }, "depends": { "acl": [ "luci-mod-system-reboot" ] } } } 07070100E81762000081A400000000000000000000000169B8AF0D0000074C000000080000000100000000000000000000002C00000000usr/share/luci/menu.d/luci-mod-network.json{ "admin/network/switch": { "title": "Switch", "order": 20, "action": { "type": "view", "path": "network/switch" }, "depends": { "acl": [ "luci-mod-network-config" ], "fs": { "/sbin/swconfig": "executable" }, "uci": { "network": { "@switch": true } } } }, "admin/network/wireless": { "title": "Wireless", "order": 15, "action": { "type": "view", "path": "network/wireless" }, "depends": { "acl": [ "luci-mod-network-config" ], "uci": { "wireless": { "@wifi-device": true } } } }, "admin/network/remote_addr/*": { "action": { "type": "call", "module": "luci.controller.admin.network", "function": "remote_addr" } }, "admin/network/network": { "title": "Interfaces", "order": 10, "action": { "type": "view", "path": "network/interfaces" }, "depends": { "acl": [ "luci-mod-network-config" ] } }, "admin/network/routes": { "title": "Routing", "order": 30, "action": { "type": "view", "path": "network/routes" }, "depends": { "acl": [ "luci-mod-network-config" ] } }, "admin/network/dhcp": { "title": "DHCP", "order": 40, "action": { "type": "view", "path": "network/dhcp" }, "depends": { "acl": [ "luci-mod-network-dhcp" ], "fs": [ { "/usr/sbin/odhcpd": "executable" }, { "/usr/sbin/dnsmasq": "executable" } ], "uci": { "dhcp": true } } }, "admin/network/dns": { "title": "DNS", "order": 45, "action": { "type": "view", "path": "network/dns" }, "depends": { "acl": [ "luci-mod-network-dns" ], "fs": { "/usr/sbin/dnsmasq": "executable" }, "uci": { "dhcp": true } } }, "admin/network/diagnostics": { "title": "Diagnostics", "order": 50, "action": { "type": "view", "path": "network/diagnostics" }, "depends": { "acl": [ "luci-mod-network-diagnostics" ] } } } 07070100E8174D000081A400000000000000000000000169B8AF0D000004D9000000080000000100000000000000000000002D00000000usr/share/luci/menu.d/luci-app-firewall.json{ "admin/network/firewall": { "title": "Firewall", "order": 60, "action": { "type": "alias", "path": "admin/network/firewall/zones" }, "depends": { "acl": [ "luci-app-firewall" ], "fs": { "/sbin/fw3": "executable" }, "uci": { "firewall": true } } }, "admin/network/firewall/zones": { "title": "General Settings", "order": 10, "action": { "type": "view", "path": "firewall/zones" } }, "admin/network/firewall/forwards": { "title": "Port Forwards", "order": 20, "action": { "type": "view", "path": "firewall/forwards" } }, "admin/network/firewall/rules": { "title": "Traffic Rules", "order": 30, "action": { "type": "view", "path": "firewall/rules" } }, "admin/network/firewall/snats": { "title": "NAT Rules", "order": 40, "action": { "type": "view", "path": "firewall/snats" } }, "admin/network/firewall/ipsets": { "title": "IP Sets", "order": 45, "action": { "type": "view", "path": "firewall/ipsets" } }, "admin/network/firewall/custom": { "title": "Custom Rules", "order": 50, "action": { "type": "view", "path": "firewall/custom" }, "depends": { "fs": { "/usr/share/fw3/helpers.conf": "file" } } } } 07070100E81747000081A400000000000000000000000169B8AF0D000000CF000000080000000100000000000000000000003400000000usr/share/luci/menu.d/luci-app-package-manager.json{ "admin/system/package-manager": { "title": "Software", "order": 30, "action": { "type": "view", "path": "package-manager" }, "depends": { "acl": [ "luci-app-package-manager" ] } } } 07070100E81811000081A400000000000000000000000169B8AF0D0000024F000000080000000100000000000000000000003700000000usr/share/luci/menu.d/luci-app-attendedsysupgrade.json{ "admin/system/attendedsysupgrade": { "title": "Attended Sysupgrade", "order": 60, "action": { "type": "firstchild" }, "depends": { "acl": [ "luci-app-attendedsysupgrade" ], "uci": { "attendedsysupgrade": true } } }, "admin/system/attendedsysupgrade/overview": { "title": "Overview", "order": 1, "action": { "type": "view", "path": "attendedsysupgrade/overview" } }, "admin/system/attendedsysupgrade/configuration": { "title": "Configuration", "order": 2, "action": { "type": "view", "path": "attendedsysupgrade/configuration" } } } 07070100E81776000081A400000000000000000000000169B8AF0D00000CFB000000080000000100000000000000000000002B00000000usr/share/luci/menu.d/luci-mod-status.json{ "admin/status/overview": { "title": "Overview", "order": 1, "action": { "type": "template", "path": "admin_status/index" }, "depends": { "acl": [ "luci-mod-status-index" ] } }, "admin/status/routes": { "title": "Routing", "order": 2, "action": { "type": "view", "path": "status/routes" }, "depends": { "acl": [ "luci-mod-status-routes" ], "fs": [ { "/usr/libexec/ip-tiny": "absent", "/usr/libexec/ip-full": "absent" } ] } }, "admin/status/routesj": { "title": "Routing", "order": 2, "action": { "type": "view", "path": "status/routesj" }, "depends": { "acl": [ "luci-mod-status-routes-json" ], "fs": [ { "/usr/libexec/ip-tiny": "executable" }, { "/usr/libexec/ip-full": "executable" } ] } }, "admin/status/iptables": { "title": "Firewall", "order": 3, "action": { "type": "view", "path": "status/iptables" }, "depends": { "acl": [ "luci-mod-status-firewall" ], "fs": [ { "/usr/sbin/nft": "absent", "/usr/sbin/iptables": "executable" }, { "/usr/sbin/nft": "absent", "/usr/sbin/ip6tables": "executable" } ] } }, "admin/status/nftables": { "title": "Firewall", "order": 3, "action": { "type": "view", "path": "status/nftables" }, "depends": { "acl": [ "luci-mod-status-firewall" ], "fs": { "/usr/sbin/nft": "executable" } } }, "admin/status/nftables/iptables": { "action": { "type": "view", "path": "status/iptables" } }, "admin/status/logs": { "title": "System Log", "order": 4, "action": { "type": "alias", "path": "admin/status/logs/syslog" }, "depends": { "acl": [ "luci-mod-status-logs" ] } }, "admin/status/logs/syslog": { "title": "System Log", "order": 1, "action": { "type": "view", "path": "status/syslog" } }, "admin/status/logs/dmesg": { "title": "Kernel Log", "order": 2, "action": { "type": "view", "path": "status/dmesg" } }, "admin/status/processes": { "title": "Processes", "order": 6, "action": { "type": "view", "path": "status/processes" }, "depends": { "acl": [ "luci-mod-status-processes" ] } }, "admin/status/channel_analysis": { "title": "Channel Analysis", "order": 7, "action": { "type": "view", "path": "status/channel_analysis" }, "depends": { "acl": [ "luci-mod-status-channel_analysis" ], "uci": { "wireless": { "@wifi-device": true } } } }, "admin/status/realtime": { "title": "Realtime Graphs", "order": 7, "action": { "type": "alias", "path": "admin/status/realtime/load" }, "depends": { "acl": [ "luci-mod-status-realtime" ] } }, "admin/status/realtime/load": { "title": "Load", "order": 1, "action": { "type": "view", "path": "status/load" } }, "admin/status/realtime/bandwidth": { "title": "Bandwidth", "order": 2, "action": { "type": "view", "path": "status/bandwidth" } }, "admin/status/realtime/wireless": { "title": "Wireless", "order": 3, "action": { "type": "view", "path": "status/wireless" }, "depends": { "uci": { "wireless": { "@wifi-device": true } } } }, "admin/status/realtime/connections": { "title": "Connections", "order": 4, "action": { "type": "view", "path": "status/connections" } } } 07070100E8174F000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001300000000usr/share/ucitrack07070100E81765000081A400000000000000000000000169B8AF0D00000048000000080000000100000000000000000000003400000000usr/share/ucitrack/luci-mod-network-interfaces.json{ "config": "network", "init": "network", "affects": [ "dhcp" ] } 07070100E81767000081A400000000000000000000000169B8AF0D00000038000000080000000100000000000000000000003200000000usr/share/ucitrack/luci-mod-network-wireless.json{ "config": "wireless", "affects": [ "network" ] } 07070100E81764000081A400000000000000000000000169B8AF0D00000047000000080000000100000000000000000000003100000000usr/share/ucitrack/luci-mod-network-dnsmasq.json{ "config": "dhcp", "init": "dnsmasq", "affects": [ "odhcpd" ] } 07070100E817AE000081A400000000000000000000000169B8AF0D00000035000000080000000100000000000000000000002F00000000usr/share/ucitrack/luci-mod-system-mounts.json{ "config": "fstab", "exec": "/sbin/block mount" } 07070100E81766000081A400000000000000000000000169B8AF0D0000002B000000080000000100000000000000000000003000000000usr/share/ucitrack/luci-mod-network-odhcpd.json{ "config": "odhcpd", "init": "odhcpd" } 07070100E817AA000081A400000000000000000000000169B8AF0D0000002F000000080000000100000000000000000000003100000000usr/share/ucitrack/luci-mod-system-dropbear.json{ "config": "dropbear", "init": "dropbear" } 07070100E81750000081A400000000000000000000000169B8AF0D00000069000000080000000100000000000000000000002A00000000usr/share/ucitrack/luci-app-firewall.json{ "config": "firewall", "init": "firewall", "affects": [ "luci-splash", "qos", "miniupnpd" ] } 07070100E817B0000081A400000000000000000000000169B8AF0D0000007B000000080000000100000000000000000000002F00000000usr/share/ucitrack/luci-mod-system-system.json{ "config": "system", "init": "led", "exec": "/etc/init.d/log reload", "affects": [ "luci_statistics", "dhcp" ] } 07070100E8162F000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001100000000usr/share/schema07070100E81633000081A400000000000000000000000169B8AF0D00000217000000080000000100000000000000000000002C00000000usr/share/schema/wireless.wifi-station.json{ "$id": "https://openwrt.org/wifi.station.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi Station Schema", "type": "object", "properties": { "mac": { "description": "The station's MAC addresses", "type": "array", "items": { "type": "string" }, "default": ["00:00:00:00:00:00"] }, "key": { "description": "The passphrase that shall be used", "type": "string" }, "vid": { "description": "The VLAN Id used by the station", "type": "string" } } } 07070100E81630000081A400000000000000000000000169B8AF0D00004E0A000000080000000100000000000000000000002B00000000usr/share/schema/wireless.wifi-device.json{ "$id": "https://openwrt.org/wifi.device.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi Device Schema", "type": "object", "properties": { "acs_chan_bias": { "description": "Can be used to increase (or decrease) the likelihood of a specific channel to be selected by the ACS algorithm", "type": "string" }, "acs_exclude_dfs": { "description": "Exclude DFS channels from ACS", "type": "boolean", "default": false }, "airtime_mode": { "description": "Set the airtime policy operating mode", "type": "number", "default": 0, "minimum": 0, "maximum": 3 }, "antenna_gain": { "description": "Reduction in antenna gain from regulatory maximum in dBi", "type": "number", "default": 0 }, "assoc_sa_query_max_timeout": { "description": "Association SA Query maximum timeout", "type": "number" }, "assoc_sa_query_retry_timeout": { "description": "Association SA Query retry timeout", "type": "number" }, "auth_cache": { "type": "alias", "default": "okc" }, "background_radar": { "type": "alias", "default": "enable_background_radar" }, "band": { "description": "The wireless band thatthe radio shall operate on", "type": "string", "enum": [ "2g", "5g", "6g", "60g" ] }, "basic_rate": { "type": "alias", "default": "basic_rates" }, "basic_rates": { "description": "Set the supported basic rates. Each basic_rate is measured in kb/s. This option only has an effect on ap and adhoc wifi-ifaces. ", "type": "array", "items": { "type": "number" } }, "beacon_int": { "description": "Set the beacon interval. This is the time interval between beacon frames, measured in units of 1.024 ms. hostapd permits this to be set between 15 and 65535. This option only has an effect on ap and adhoc wifi-ifaces", "type": "number", "default": 100, "minimum": 15, "maximum": 65535 }, "beacon_rate": { "description": "Beacon frame TX rate configuration", "type": "string" }, "beamformee_antennas": { "description": "Beamformee antenna override", "type": "number", "default": 4 }, "beamformer_antennas": { "description": "Beamformer antenna override", "type": "number", "default": 4 }, "bssid": { "description": "Overrides the MAC address used for the Wi-Fi interface. Warning: if the MAC address specified is a multicast address, this override will fail silently. To avoid this problem, ensure that the mac address specified is a valid unicast mac address", "type": "string" }, "cell_density": { "description": "Configures data rates based on the coverage cell density. Normal configures basic rates to 6, 12, 24 Mbps if legacy_rates is 0, else to 5.5, 11 Mbps. High configures basic rates to 12, 24 Mbps if legacy_rates is 0, else to the 11 Mbps rate. Very High configures 24 Mbps as the basic rate. Supported rates lower than the minimum basic rate are not offered. The basic_rate and supported_rates options overrides this option. 0 = Disabled, 1 = Normal, 2 = High, 3 = Very High", "type": "number", "default": 0, "minimum": 0, "maximum": 3 }, "chanbw": { "description": "Specifies a narrow channel width in MHz, possible values are: 5, 10, 20", "type": "number", "enum": [ 5, 10, 20 ] }, "channel": { "description": "Specifies the wireless channel. “auto†defaults to the lowest available channel, or utilizes the ACS algorithm depending on hardware/driver support", "type": "string" }, "channels": { "type": "alias", "default": "chanlist" }, "channel_list": { "type": "alias", "default": "chanlist" }, "chanlist": { "description": "Use specific channels, when channel is in “auto†mode. This option allows hostapd to select one of the provided channels when a channel should be automatically selected. Channels can be provided as range using hyphen ('-') or individual channels can be specified by space (' ') separated values", "type": "array", "items": { "type": "string" } }, "country": { "type": "alias", "default": "country_code" }, "country3": { "description": "The third octet of the Country String (dot11CountryString)", "type": "string" }, "country_code": { "description": "Specifies the two-letter country code (e.g. EN or DE), affects the available channels and transmission powers", "type": "string" }, "country_ie": { "type": "alias", "default": "ieee80211d" }, "disabled": { "description": "When set to 1, wireless network is disabled", "type": "boolean", "default": false }, "distance": { "description": "Distance between the ap and the furthest client in meters", "type": "number", "default": 0 }, "doth": { "type": "alias", "default": "ieee80211h" }, "dsss_cck_40": { "description": "DSSS/CCK Mode in 40 MHz allowed in Beacon, Measurement Pilot and Probe Response frames", "type": "boolean", "default": true }, "enable_background_radar": { "description": "This feature allows CAC to be run on dedicated radio RF chains", "type": "boolean" }, "frag": { "description": "Fragmentation threshold", "type": "number" }, "greenfield": { "description": "Receive Greenfield - treats pre-80211n traffic as noise", "type": "boolean", "default": false }, "he_bss_color": { "description": "BSS color to be announced", "type": "number", "minimum": 1, "maximum": 128, "default": 128 }, "he_bss_color_enabled": { "description": "Enable BSS color", "type": "boolean", "default": true }, "he_default_pe_duration": { "description": "The duration of PE field in an HE PPDU in us", "type": "number", "default": 4, "enum": [ 4, 8, 12, 16 ] }, "he_mu_beamformer": { "description": "HE multiple user beamformer support", "type": "boolean", "default": true }, "he_mu_edca_ac_be_aci": { "type": "number", "default": 0 }, "he_mu_edca_ac_be_aifsn": { "type": "number", "default": 8 }, "he_mu_edca_ac_be_ecwmax": { "type": "number", "default": 10 }, "he_mu_edca_ac_be_ecwmin": { "type": "number", "default": 9 }, "he_mu_edca_ac_be_timer": { "type": "number", "default": 255 }, "he_mu_edca_ac_bk_aci": { "type": "number", "default": 1 }, "he_mu_edca_ac_bk_aifsn": { "type": "number", "default": 15 }, "he_mu_edca_ac_bk_ecwmax": { "type": "number", "default": 10 }, "he_mu_edca_ac_bk_ecwmin": { "type": "number", "default": 9 }, "he_mu_edca_ac_bk_timer": { "type": "number", "default": 255 }, "he_mu_edca_ac_vi_aci": { "type": "number", "default": 2 }, "he_mu_edca_ac_vi_aifsn": { "type": "number", "default": 5 }, "he_mu_edca_ac_vi_ecwmax": { "type": "number", "default": 7 }, "he_mu_edca_ac_vi_ecwmin": { "type": "number", "default": 5 }, "he_mu_edca_ac_vi_timer": { "type": "number", "default": 255 }, "he_mu_edca_ac_vo_aci": { "type": "number", "default": 3 }, "he_mu_edca_ac_vo_aifsn": { "type": "number", "default": 5 }, "he_mu_edca_ac_vo_ecwmax": { "type": "number", "default": 7 }, "he_mu_edca_ac_vo_ecwmin": { "type": "number", "default": 5 }, "he_mu_edca_ac_vo_timer": { "type": "number", "default": 255 }, "he_mu_edca_qos_info_param_count": { "type": "number", "default": 0 }, "he_mu_edca_qos_info_q_ack": { "type": "number", "default": 0 }, "he_mu_edca_qos_info_queue_request": { "type": "number", "default": 0 }, "he_mu_edca_qos_info_txop_request": { "type": "number", "default": 0 }, "he_oper_centr_freq_seg0_idx": { "description": "", "type": "string" }, "he_oper_chwidth": { "description": "", "type": "string" }, "he_6ghz_reg_pwr_type": { "description": "This config is to set the 6 GHz Access Point type.", "type": "number", "minimum": 0, "maximum": 4, "default": 0 }, "he_rts_threshold": { "description": "Duration of STA transmission", "type": "number", "default": 1023 }, "he_spr_non_srg_obss_pd_max_offset": { "description": "", "type": "number" }, "he_spr_psr_enabled": { "description": "", "type": "boolean", "default": false }, "he_spr_sr_control": { "description": "", "type": "number", "default": 3 }, "he_su_beamformee": { "description": "", "type": "boolean", "default": true }, "he_su_beamformer": { "description": "", "type": "boolean", "default": true }, "he_twt_required": { "description": "", "type": "boolean", "default": false }, "hostapd_options": { "type": "array", "items": { "type": "string" } }, "ht_coex": { "description": "Disable honoring 40 MHz intolerance in coexistence flags of stations", "type": "boolean", "default": false }, "htc_vht": { "description": "STA supports receiving a VHT variant HT Control field", "type": "boolean", "default": true }, "htmode": { "description": "Specifies the high throughput mode", "type": "string", "enum": [ "NOHT", "HT20", "HT40-", "HT40+", "HT40", "VHT20", "VHT40", "VHT80", "VHT160", "HE20", "HE40", "HE80", "HE160", "EHT20", "EHT40", "EHT80", "EHT160", "EHT320" ] }, "hwmode": { "type": "alias", "default": "hw_mode" }, "hw_mode": { "description": "Legacy way, use the band property instead", "type": "string", "enum": [ "11a", "11b", "11g", "11ad" ] }, "ieee80211d": { "description": "Enables IEEE 802.11d country IE (information element) advertisement in beacon and probe response frames. This IE contains the country code and channel/power map. Requires country", "type": "boolean", "default": true }, "ieee80211h": { "description": "This enables radar detection and DFS support", "type": "boolean", "default": true }, "ieee80211w": { "description": "Whether management frame protection (MFP) is enabled", "type": "number", "minimum": 0, "maximum": 2 }, "ieee80211w_max_timeout": { "type": "alias", "default": "assoc_sa_query_max_timeout" }, "ieee80211w_mgmt_cipher": { "description": "Cypher used for MFP", "type": "string" }, "ieee80211w_retry_timeout": { "type": "alias", "default": "assoc_sa_query_retry_timeout" }, "ifname_prefix": { "description": "Default ifname prefix for this radio", "type": "string" }, "iface_max_num_sta": { "description": "Limits the maximum allowed number of associated clients", "type": "number" }, "ldpc": { "description": " LDPC (Low-Density Parity-Check code) capability ", "type": "boolean", "default": true }, "legacy_rates": { "description": "Allow legacy 802.11b data rates (used by cell_density)", "type": "boolean", "default": false }, "local_pwr_constraint": { "description": "Add Power Constraint element to Beacon and Probe Response frame", "type": "number", "minimum": 0, "maximum": 255 }, "log_80211": { "description": "Enable IEEE 802.11 logging", "type": "boolean", "default": true }, "log_8021x": { "description": "Enable IEEE 802.1X logging", "type": "boolean", "default": true }, "log_driver": { "description": "Enable driver interface logging", "type": "boolean", "default": true }, "log_iapp": { "description": "Enable iapp logging", "type": "boolean", "default": true }, "log_level": { "description": "Log severity", "type": "number", "default": 2, "minimum": 0, "maximum": 4 }, "log_mlme": { "description": "Enable MLME logging", "type": "boolean", "default": true }, "log_radius": { "description": "Enable Radius logging", "type": "boolean", "default": true }, "log_wpa": { "description": "Enable WPA logging", "type": "boolean", "default": true }, "logger_stdout": { "description": "Log to stdout", "type": "boolean", "default": true }, "logger_stdout_level": { "description": "Log severity", "type": "number", "default": 2, "minimum": 0, "maximum": 4 }, "logger_syslog": { "description": "Log to syslog", "type": "boolean", "default": true }, "logger_syslog_level": { "description": "Syslog severity", "type": "number", "default": 2, "minimum": 0, "maximum": 4 }, "macaddr": { "type": "alias", "default": "bssid" }, "macaddr_base": { "type": "string", "description": "Base MAC address used for deriving interface MAC addresses" }, "max_amsdu": { "description": "Maximum A-MSDU length of 7935 octects (3839 octets if option set to 0)", "type": "boolean", "default": true }, "maxassoc": { "type": "alias", "default": "iface_max_num_sta" }, "mbssid": { "description": "Multiple BSSID Advertisement in IEEE 802.11ax IEEE Std 802.11ax-2021 added a feature where instead of multiple interfaces on a common radio transmitting individual Beacon frames, those interfaces can form a set with a common Beacon frame transmitted for all Set minimum permitted max TX power (in dBm) for ACS and DFS channel selection", "type": "number", "default": 0, "minimum": 0, "maximum": 2 }, "min_tx_power": { "description": "Set minimum permitted max TX power (in dBm) for ACS and DFS channel selection", "type": "number", "default": 0 }, "mu_beamformee": { "description": "Supports operation as an MU beamformee", "type": "boolean", "default": true }, "mu_beamformer": { "description": " Supports operation as an MU beamformer", "type": "boolean", "default": true }, "multiple_bssid": { "type": "alias", "default": "mbssid" }, "num_global_macaddr": { "description": "The number of MACs that this radio can use", "type": "number", "default": 1 }, "noscan": { "description": "Do not scan for overlapping BSSs in HT40+/- mode.", "type": "boolean", "default": false }, "okc": { "description": "Enable Opportunistic Key Caching", "type": "boolean" }, "path": { "description": "Alternative to phy used to identify the device based paths in /sys/devices", "type": "string" }, "phy": { "description": "Name of the phy, as described in board.json", "type": "string" }, "radio": { "description": "Index of the phy radio (for multi-radio PHYs)", "type": "number", "default": -1 }, "reg_power_type": { "type": "alias", "default": "he_6ghz_reg_pwr_type" }, "require_mode": { "description": "Sets the minimum client capability level mode that connecting clients must support to be allowed to connect", "type": "string", "enum": [ "n", "ac", "ax" ] }, "rnr_beacon": { "description": "", "type": "string" }, "rsn_preauth": { "description": "Enable IEEE 802.11i/RSN/WPA2 pre-authentication", "type": "boolean" }, "rssi_ignore_probe_request": { "description": "Ignore Probe Request frames if RSSI is below given threshold (in dBm)", "type": "number", "default": 0 }, "rssi_reject_assoc_rssi": { "description": "Reject STA association if RSSI is below given threshold (in dBm)", "type": "number", "default": 0 }, "rssi_reject_assoc_timeout": { "description": "Association retry delay in seconds allowed by the STA if RSSI has not met the threshold", "type": "number", "default": 30, "minimum": 0, "maximum": 255 }, "rts": { "description": "Override the RTS/CTS threshold", "type": "number" }, "rts_threshold": { "description": "RTS/CTS threshold", "type": "number", "minimum": -1, "maximum": 65535 }, "rx_antenna_pattern": { "description": "Rx antenna pattern does not change during the lifetime of an association", "type": "boolean", "default": true }, "rx_stbc": { "description": "Supports reception of PPDUs using STBC", "type": "number", "default": 3, "minimum": 0, "maximum": 4 }, "rxantenna": { "description": "Specifies the antenna for receiving, the value may be driver specific, usually it is 1 for the first and 2 for the second antenna. Specifying 0 enables automatic selection by the driver if supported. This option has no effect if diversity is enabled", "type": "number" }, "rxldpc": { "description": "Supports receiving LDPC coded pkts", "type": "boolean", "default": true }, "scan_list": { "description": "List of frequencies (in MHz) to scan when looking for networks in client mode", "type": "array", "items": { "type": "number" } }, "short_gi_160": { "description": "Short GI for 160 MHz", "type": "boolean", "default": true }, "short_gi_20": { "description": "Short GI for 20 MHz", "type": "boolean", "default": true }, "short_gi_40": { "description": "Short GI for 40 MHz", "type": "boolean", "default": true }, "short_gi_80": { "description": "Short GI for 80 MHz", "type": "boolean", "default": true }, "spectrum_mgmt_required": { "description": "Set Spectrum Management subfield in the Capability Information field", "type": "boolean", "default": false }, "stationary_ap": { "description": "Stationary AP config indicates that the AP doesn't move hence location data can be considered as always up to date.", "type": "boolean", "default": true }, "su_beamformee": { "description": "Single user beamformee", "type": "boolean", "default": true }, "su_beamformer": { "description": "Single user beamformer", "type": "boolean", "default": true }, "supported_rates": { "description": "Set the supported data rates. Each supported rate is measured in kb/s. This option only has an effect on ap and adhoc wifi-ifaces. This must be a superset of the rates set in basic_rate. The minimum basic rate should also be the minimum supported rate. It is recommended to use the cell_density option instead", "type": "array", "items": { "type": "number" } }, "tx_antenna_pattern": { "description": "Tx antenna pattern does not change during the lifetime of an association", "type": "boolean", "default": true }, "tx_burst": { "type": "alias", "default": "tx_queue_data2_burst" }, "tx_queue_data2_burst": { "description": "", "type": "number" }, "tx_stbc": { "description": "Transmit STBC (Space-Time Block Coding)", "type": "boolean", "default": true }, "tx_stbc_2by1": { "description": "Supports transmission of at least 2×1 STBC", "type": "boolean", "default": true }, "txantenna": { "description": "Specifies the antenna for transmitting, values are identical to rxantenna", "type": "number" }, "txpower": { "description": "Specifies the maximum desired transmission power in dBm. The actual txpower used depends on regulatory requirements", "type": "number" }, "type": { "description": "Device type (only mac80211 supported)", "type": "string" }, "vht160": { "description": "Supported channel widths. 0 == 160MHz and 80+80 MHz not supported, 1 == 160 MHz supported, 2 == 160MHz and 80+80 MHz supported", "type": "number", "minimum": 0, "maximum": 2, "default": 2 }, "vht_link_adapt": { "description": "TA supports link adaptation using VHT variant HT Control field", "type": "number", "minimum": 0, "maximum": 3 }, "vht_max_a_mpdu_len_exp": { "description": "Indicates the maximum length of A-MPDU pre-EOF padding that the STA can recv", "type": "number", "minimum": 0, "maximum": 7, "default": 7 }, "vht_max_mpdu": { "description": "Maximum MPDU length", "type": "number", "enum": [ 3895, 7991, 11454 ], "default": 11454 }, "vht_txop_ps": { "description": "VHT TXOP PS mode", "type": "boolean", "default": true } } } 07070100E81635000081A400000000000000000000000169B8AF0D00000140000000080000000100000000000000000000002900000000usr/share/schema/wireless.wifi-vlan.json{ "$id": "https://openwrt.org/wifi.vlan.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi VLAN Schema", "type": "object", "properties": { "name": { "description": "VLAN name", "type": "string" }, "vid": { "description": "VLAN ID", "type": "string" } } } 07070100E81632000081A400000000000000000000000169B8AF0D000072B1000000080000000100000000000000000000002A00000000usr/share/schema/wireless.wifi-iface.json{ "$id": "https://openwrt.org/wifi.iface.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi Interface Schema", "type": "object", "properties": { "access_network_type": { "description": "Interworking Access Network Type", "type": "number", "minimum": 0, "maximum": 15 }, "acct_interval": { "type": "alias", "default": "radius_acct_interim_interval" }, "acct_port": { "type": "alias", "default": "acct_server_port" }, "acct_secret": { "type": "alias", "default": "acct_server_shared_secret" }, "acct_server": { "type": "alias", "default": "acct_server_addr" }, "acct_server_addr": { "description": "RADIUS accounting server to handle client authentication", "type": "array", "items": { "type": "string" } }, "acct_server_port": { "description": "RADIUS accounting port", "type": "number", "default": 1813 }, "acct_server_shared_secret": { "description": "Shared accounting RADIUS secret", "type": "string" }, "airtime_bss_limit": { "description": "Whether the current BSS should be limited (when airtime_mode=3)", "type": "boolean" }, "airtime_bss_weight": { "description": "Per-BSS airtime weight. In multi-BSS mode, set for each BSS and hostapd will configure station weights to enforce the correct ratio between BSS weights depending on the number of active stations", "type": "number" }, "airtime_sta_weight": { "description": "Static configuration of station weights (when airtime_mode=1). Kernel default weight is 256", "type": "array", "items": { "type": "string" } }, "altsubject_match": { "description": "Semicolon separated string of entries to be matched against the alternative subject name of the authentication server certificate", "type": "array", "items": { "type": "string" } }, "altsubject_match2": { "type": "array" }, "anonymous_identity": { "description": "Anonymous identity string for EAP", "type": "string" }, "anqp_3gpp_cell_net": { "description": "3GPP Cellular Network information", "type": "array", "items": { "type": "string" } }, "anqp_domain_id": { "description": "An identifier for a set of APs in an ESS that share the same common ANQP information", "type": "number", "minimum": 0, "maximum": 65535, "default": 0 }, "ap_isolate": { "description": "Isolates wireless clients from each other, only applicable in ap mode", "type": "boolean", "default": false }, "ap_max_inactivity": { "description": "Station inactivity limit in seconds: If a station does not send anything in ap_max_inactivity seconds, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not ACKed, the station will be disassociated and then deauthenticated", "type": "number" }, "ap_pin": { "description": "Static access point PIN for WPS", "type": "string" }, "ap_setup_locked": { "description": "AP can be configured into a locked state where new WPS Registrar are not accepted", "type": "boolean" }, "anqp_elem": { "description": "Arbitrary ANQP-element configuration", "type": "array", "items": { "type": "string" } }, "asra": { "description": "Additional Step Required for Access", "type": "boolean", "default": false }, "assoc_sa_query_max_timeout": { "description": "Specifies the 802.11w Association SA Query maximum timeout.", "type": "number", "minimum": 1, "maximum": 4294967295 }, "assoc_sa_query_retry_timeout": { "description": "Association SA Query retry timeout", "type": "number", "minimum": 1, "maximum": 4294967295 }, "auth": { "description": "Defines the phase 2 (inner) authentication method, only applicable if eap_type is peap or ttl", "type": "string" }, "auth_cache": { "type": "alias", "default": "okc" }, "auth_port": { "type": "alias", "default": "auth_server_port" }, "auth_secret": { "type": "alias", "default": "auth_server_shared_secret" }, "auth_server": { "type": "alias", "default": "auth_server_addr" }, "auth_server_addr": { "description": "RADIUS authentication server to handle client authentication", "type": "array", "items": { "type": "string" } }, "auth_server_port": { "description": "RADIUS authentication port", "type": "number", "default": 1812 }, "auth_server_shared_secret": { "description": "Shared authentication RADIUS secret", "type": "string" }, "basic_rate": { "type": "array" }, "beacon_prot": { "description": "Management frame protection for Beacon frames", "type": "boolean" }, "bss_load_update_period": { "description": "BSS Load update period (in BUs)", "type": "number", "default": 60 }, "bss_transition": { "description": "BSS Transition Management", "type": "boolean" }, "bssid": { "description": "Override the BSSID of the network", "type": "string" }, "bssid_blacklist": { "type": "array" }, "bssid_whitelist": { "type": "array" }, "ca_cert": { "description": "Specifies the path the CA certificate used for authentication", "type": "string" }, "ca_cert2_usesystem": { "type": "boolean" }, "ca_cert_usesystem": { "type": "boolean" }, "chan_util_avg_period": { "description": "Channel utilization averaging period (in BUs)", "type": "number", "default": 600 }, "civic": { "description": "The content of a location civic measurement subelement", "type": "string" }, "client_cert": { "description": "File path to client certificate file (PEM/DER)", "type": "string" }, "dae_client": { "type": "alias", "default": "radius_das_client" }, "dae_port": { "type": "alias", "default": "radius_das_port" }, "dae_secret": { "type": "alias", "default": "radius_das_secret" }, "default_disabled": { "type": "alias", "default": "disabled" }, "device": { "description": "Devices to enable this interface on (wifi-device section names)", "type": "array", "items": { "type": "string" } }, "device_name": { "description": "Primary Device Name used by WPS", "type": "string", "default": "OpenWrt AP" }, "device_type": { "description": "Primary Device Type used by WPS", "type": "string", "default": "6-0050F204-1" }, "disabled": { "description": "Do not bring the interface up automatically", "type": "boolean" }, "disable_dgaf": { "description": "Disable Downstream Group-Addressed Forwarding", "type": "boolean", "default": false }, "disassoc_low_ack": { "description": "Disassociate stations based on excessive transmission failures or other indications of connection loss. This depends on the driver capabilities and may not be available with all drivers.", "type": "boolean", "default": true }, "domain_match": { "type": "array", "items": { "type": "string" } }, "domain_match2": { "type": "array" }, "domain_name" : { "type": "array", "items": { "type": "string" } }, "domain_suffix_match": { "type": "array", "items": { "type": "string" } }, "domain_suffix_match2": { "type": "array" }, "dtim_period": { "description": "Set the DTIM (delivery traffic information message) period. There will be one DTIM per this many beacon frames. This may be set between 1 and 255. This option only has an effect on ap wifi-ifaces.", "type": "number", "default": 2, "minimum": 1, "maximum": 255 }, "dynamic_ownip": { "type": "alias", "default": "dynamic_own_ip_addr" }, "dynamic_own_ip_addr": { "type": "boolean" }, "dynamic_vlan": { "description": "Allow RADIUS authentication server to decide which VLAN is used for the stations (0 = disabled, 1 = optional, 2 = required)", "type": "number", "enum": [ 0, 1, 2 ], "default": 0 }, "eap_reauth_period": { "description": "EAP reauthentication period in seconds", "type": "number" }, "eap_server": { "description": "Use integrated EAP server instead of external RADIUS authentication server", "type": "boolean" }, "eap_type": { "type": "string" }, "eap_user_file": { "description": "Path for EAP server user database", "type": "string" }, "eapol_version": { "description": "IEEE 802.1X/EAPOL version", "type": "number", "enum": [ 1, 2 ] }, "enable": { "description": "Enable the interface", "type": "boolean", "default": true }, "encryption": { "type": "string" }, "esr": { "description": "Emergency services reachable", "type": "boolean", "default": false }, "ext_registrar": { "description": "WPS UPnP interface", "type": "boolean" }, "fils": { "description": "Enable FILS", "type": "boolean" }, "fils_dhcp": { "description": "DHCP server for FILS HLP. Set to '*' for automatic lookup.", "type": "string" }, "ft_iface": { "description": "Inter-AP communication interface for 802.11r", "type": "string" }, "ft_over_ds": { "description": "Whether to enable FT-over-DS", "type": "boolean", "default": false }, "ft_psk_generate_local": { "description": "Whether to generate FT response locally for PSK networks. This avoids use of PMK-R1 push/pull from other APs with FT-PSK networks as the required information (PSK and other session data) is already locally available.", "type": "boolean" }, "ftm_responder": { "description": "Publish fine timing measurement (FTM) responder functionality", "type": "boolean" }, "gas_address3": { "type": "string" }, "hidden": { "type": "alias", "default": "ignore_broadcast_ssid" }, "hessid": { "description": "Homogeneous ESS identifier", "type": "string" }, "hostapd_bss_options": { "description": "Additional raw options to be added", "type": "array", "items": { "type": "string" } }, "hs20": { "description": "Enable Hotspot 2.0 support", "type": "boolean" }, "hs20_conn_capab": { "description": "Connection Capability", "type": "array", "items": { "type": "string" } }, "hs20_deauth_req_timeout": { "description": "Deauthentication request timeout", "type": "number", "default": 60 }, "hs20_operating_class": { "description": "Operating Class Indication", "type": "string" }, "hs20_t_c_filename": { "description": "Terms and Conditions information", "type": "string" }, "hs20_t_c_server_url": { "description": "Terms and Conditions server", "type": "string" }, "hs20_t_c_timestamp": { "description": "Terms and Conditions timestamp", "type": "string" }, "hs20_wan_metrics": { "description": "WAN Metrics", "type": "string" }, "identity": { "description": "Identity string for EAP", "type": "string" }, "ieee80211k": { "description": "Enables Radio Resource Measurement (802.11k) support", "type": "boolean" }, "ieee80211r": { "description": "Enables fast BSS transition (802.11r) support.", "type": "boolean" }, "ieee80211w": { "description": "Enables MFP (802.11w) support (0 = disabled, 1 = optional, 2 = required). Requires the 'full' version of wpad/hostapd and support from the Wi-Fi driver", "type": "number", "enum": [ 0, 1, 2 ] }, "ieee80211w_max_timeout": { "type": "alias", "default": "assoc_sa_query_max_timeout" }, "ieee80211w_mgmt_cipher": { "description": "Group Management cypher", "type": "string" }, "ieee80211w_retry_timeout": { "type": "alias", "default": "assoc_sa_query_retry_timeout" }, "ifname": { "description": "Specifies a custom name for the Wi-Fi interface, which is otherwise automatically named. Maximum length: 15 characters", "type": "string" }, "ignore_broadcast_ssid": { "description": "Disables the broadcasting of beacon frames if set to 1 and, in doing so, hides the ESSID. Where the ESSID is hidden, clients may fail to roam and airtime efficiency may be significantly reduced.", "type": "boolean", "default": false }, "internet": { "description": "Whether the network provides connectivity to the Internet", "type": "boolean", "default": true }, "isolate": { "type": "alias", "default": "ap_isolate" }, "iw_access_network_type": { "type": "alias", "default": "access_network_type" }, "iw_anqp_3gpp_cell_net": { "type": "alias", "default": "anqp_3gpp_cell_net" }, "iw_anqp_elem": { "type": "alias", "default": "anqp_elem" }, "iw_asra": { "type": "alias", "default": "asra" }, "iw_domain_name": { "type": "alias", "default": "domain_name" }, "iw_enabled": { "type": "boolean", "default": false }, "iw_esr": { "type": "alias", "default": "esr" }, "iw_gas_address3": { "type": "alias", "default": "gas_address3" }, "iw_hessid": { "type": "alias", "default": "hessid" }, "iw_internet": { "type": "alias", "default": "internet" }, "iw_ipaddr_type_availability": { "type": "number" }, "iw_nai_realm": { "type": "alias", "default": "nai_realm" }, "iw_network_auth_type": { "type": "alias", "default": "network_auth_type" }, "iw_qos_map_set": { "type": "alias", "default": "qos_map_set" }, "roaming_consortium": { "type": "alias", "default": "roaming_consortium" }, "iw_uesa": { "type": "alias", "default": "uesa" }, "iw_venue_group": { "type": "alias", "default": "venue_group" }, "iw_venue_name": { "type": "alias", "default": "venue_name" }, "iw_venue_type": { "type": "alias", "default": "venue_type" }, "iw_venue_url": { "type": "alias", "default": "venue_url" }, "key": { "description": "Encryption key", "type": "string" }, "lci": { "description": "The content of a LCI measurement subelement", "type": "string" }, "macaddr": { "description": "Override the BSSID of the network", "type": "string" }, "macfile": { "description": "File containing a list MACs used by the macfilter", "type": "string" }, "macfilter": { "description": "Allow/deny associations based on the clients MAC", "type": "string", "enum": [ "allow", "deny" ] }, "maclist": { "description": "List of MACs used by the macfilter option", "type": "array", "items": { "type": "string" } }, "manufacturer": { "description": "Manufacturer used by WPS", "type": "string", "default": "www.openwrt.org" }, "max_inactivity": { "type": "alias", "default": "ap_max_inactivity" }, "max_listen_int": { "type": "alias", "default": "max_listen_interval" }, "max_listen_interval": { "description": "How many Beacon periods STAs are allowed to remain asleep", "type": "number" }, "max_num_sta": { "description": "Maximum number of stations allowed in station table", "type": "number" }, "maxassoc": { "type": "alias", "default": "max_num_sta" }, "mbo": { "description": "Multiband Operation", "type": "boolean" }, "mcast_rate": { "description": "Allowed multicast rate", "type": "number" }, "mesh_auto_open_plinks": { "type": "boolean" }, "mesh_awake_window": { "type": "number" }, "mesh_confirm_timeout": { "type": "number" }, "mesh_element_ttl": { "type": "number" }, "mesh_fwding": { "description": "Enable 802.11s layer-2 routing and forwarding", "type": "boolean" }, "mesh_nolearn": { "description": "Disable 802.11s path discovery", "type": "boolean" }, "mesh_gate_announcements": { "type": "number" }, "mesh_holding_timeout": { "type": "number" }, "mesh_hwmp_active_path_timeout": { "type": "number" }, "mesh_hwmp_active_path_to_root_timeout": { "type": "number" }, "mesh_hwmp_confirmation_interval": { "type": "number" }, "mesh_hwmp_max_preq_retries": { "type": "number" }, "mesh_hwmp_net_diameter_traversal_time": { "type": "number" }, "mesh_hwmp_preq_min_interval": { "type": "number" }, "mesh_hwmp_rann_interval": { "type": "number" }, "mesh_hwmp_root_interval": { "type": "number" }, "mesh_hwmp_rootmode": { "type": "number" }, "mesh_id": { "type": "string" }, "mesh_max_peer_links": { "type": "number" }, "mesh_max_retries": { "type": "number" }, "mesh_min_discovery_timeout": { "type": "number" }, "mesh_path_refresh_time": { "type": "number" }, "mesh_plink_timeout": { "type": "number" }, "mesh_power_mode": { "type": "string" }, "mesh_retry_timeout": { "type": "number" }, "mesh_rssi_threshold": { "type": "number" }, "mesh_sync_offset_max_neighor": { "type": "number" }, "mesh_ttl": { "type": "number" }, "mlo": { "description": "Multi-Link Operation", "type": "boolean" }, "mobility_domain": { "description": "DID is used to indicate a group of APs between which a STA can use Fast BSS Transition.", "type": "string" }, "mode": { "type": "string" }, "multi_ap": { "description": "Enable Multi-AP functionality", "type": "number" }, "multi_ap_vlanid": { "description": "Multi-AP Default VLAN ID", "type": "number" }, "multi_ap_profile": { "description": "Multi-AP Profile", "type": "number" }, "multi_ap_backhaul_key": { "type": "string" }, "multi_ap_backhaul_ssid": { "description": "Multi-AP backhaul BSS SSID", "type": "string" }, "multicast_to_unicast": { "description": "Request that the AP will do multicast-to-unicast conversion for ARP, IPv4, and IPv6 frames ", "type": "boolean" }, "multicast_to_unicast_all": { "type": "alias", "default": "multicast_to_unicast" }, "na_mcast_to_ucast": { "description": "IPv6 Neighbor Advertisement multicast-to-unicast conversion", "type": "boolean" }, "nas_identifier": { "description": "NAS-Identifier string for RADIUS messages", "type": "string" }, "nai_realm": { "description": "NAI Realm information", "type": "array", "items": { "type": "string" } }, "nasid": { "type": "alias", "default": "nas_identifier" }, "network": { "description": "Specifies one or multiple logical network interfaces declared in the network configuration, each one should be a L3 bridge to be able to attach this L2 wireless interface.", "type": "array", "items": { "type": "string" } }, "network_auth_type": { "description": "Network Authentication Type", "type": "string" }, "no_probe_resp_if_max_sta": { "description": "Do not answer probe requests if iface_max_num_sta was reached", "type": "boolean" }, "ocv": { "description": "Operating Channel Validation", "type": "number", "minimum": 0, "maximum": 15 }, "okc": { "description": "PMKSA and Opportunistic Key Caching", "type": "boolean" }, "owe_transition": { "description": "Indicate that an OWE BSS shall automatically add an unencrypted transition interface", "type": "boolean" }, "owe_transition_bssid": { "description": "Pointer to the matching open/OWE BSS", "type": "string" }, "owe_transition_ifname": { "description": "Alternatively, OWE transition mode BSSID/SSID can be configured with a reference to a BSS operated by this hostapd process.", "type": "string" }, "owe_transition_ssid": { "description": "The SSID used by the OWE transition device", "type": "string" }, "ownip": { "type": "alias", "default": "own_ip_addr" }, "own_ip_addr": { "description": "The own IP address of the access point", "type": "string" }, "password:wpakey": { "type": "string" }, "pbc_in_m1": { "description": "WPS capability discovery workaround for PBC with Windows 7", "type": "boolean" }, "per_sta_vif": { "description": "Per-Station AP_VLAN interface mode", "type": "boolean" }, "pmk_r1_push": { "description": "Whether PMK-R1 push is enabled at R0KH", "type": "boolean", "default": false }, "port:port": { "type": "number" }, "powersave": { "type": "boolean" }, "ppsk": { "description": "Lookup PSK2 Keys up via a Radius server", "type": "boolean" }, "preamble": { "description": "Short Preamble", "type": "boolean", "default": true }, "priv_key": { "type": "string" }, "priv_key_pwd": { "type": "string" }, "private_key": { "description": "Private key matching with the server certificate for EAP-TLS/PEAP/TTLS", "type": "string" }, "private_key_passwd": { "description": "Passphrase for private key", "type": "string" }, "proxy_arp": { "description": "Proxy ARP", "type": "boolean" }, "qos_map_set": { "description": "QoS Map Set configuration", "type": "string", "default": "0,0,2,16,1,1,255,255,18,22,24,38,40,40,44,46,48,56" }, "r0_key_lifetime": { "description": "Default lifetime of the PMK-R0 in seconds", "type": "number" }, "r0kh": { "description": "List of R0KHs in the same Mobility Domain", "type": "array", "items": { "type": "string" } }, "r1_key_holder": { "description": "PMK-R1 Key Holder identifier", "type": "string" }, "r1kh": { "description": "List of R1KHs in the same Mobility Domain", "type": "array", "items": { "type": "string" } }, "radios": { "type": "array", "items": { "type": "string" } }, "radius_acct_interim_interval": { "description": "Interim accounting update interval", "type": "number" }, "radius_acct_req_attr": { "description": "Additional Accounting-Request attributes", "type": "array", "items": { "type": "string" } }, "radius_auth_req_attr": { "description": "Additional Access-Request attributes", "type": "array", "items": { "type": "string" } }, "radius_client_addr": { "description": "RADIUS client forced local IP address for the access point", "type": "string" }, "radius_das_client": { "description": "DAS client (the host that can send Disconnect/CoA requests)", "type": "string" }, "radius_das_port": { "description": "Dynamic Authorization Extensions port", "type": "number" }, "radius_das_secret": { "description": "Dynamic Authorization Extensions secret", "type": "string" }, "radius_request_cui" :{ "description": "Request Chargeable-User-Identity (RFC 4372)", "type": "boolean" }, "reassociation_deadline": { "description": "Reassociation deadline in time units", "type": "number", "minimum": 1000, "maximum": 65535, "default": 20000 }, "request_cui": { "type": "alias", "default": "radius_request_cui" }, "rrm_beacon_report": { "description": "Enable beacon report via radio measurements", "type": "boolean" }, "rrm_neighbor_report": { "description": "Enable neighbor report via radio measurements", "type": "boolean" }, "rnr": { "description": "Enable reduced neighbor reporting", "type": "boolean" }, "roaming_consortium": { "description": "Roaming Consortium List", "type": "array", "items": { "type": "string" } }, "rsn_preauth": { "type": "boolean" }, "rsn_override": { "type": "number", "description": "Use RSNE override IE WPA3 compatibility (0: disabled, 1: enabled, 2:force WPA2 for older devices)", "default": 1 }, "sae_password_file": { "description": "External file containing VLAN SAE MAC address triplets", "type": "string" }, "sae_pwe": { "description": "SAE mechanism for PWE derivation", "type": "number", "enum": [ 0, 1, 2 ] }, "sae_require_mfp": { "description": "Require MFP for all associations using SAE", "type": "boolean" }, "sae_track_password": { "description": "Tracking of SAE password use", "type": "number" }, "server:host": { "type": "string" }, "server_cert": { "description": "Server certificate (PEM or DER file) for EAP-TLS/PEAP/TTLS", "type": "string" }, "server_id": { "description": "Server identity", "type": "string" }, "short_preamble": { "type": "alias", "default": "preamble" }, "skip_inactivity_poll": { "description": "The inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP", "type": "boolean", "default": false }, "spp_amsdu": { "description": "Signaling and Payload Protected A-MSDU", "type": "boolean" }, "ssid": { "type": "string" }, "ssid:string": { "type": "string" }, "start_disabled": { "type": "number" }, "subject_match": { "description": "Substring to be matched against the subject of the authentication server certificate", "type": "string" }, "subject_match2": { "type": "string" }, "supported_rates": { "type": "array" }, "tdls_prohibit": { "description": "Prohibit use of TDLS in this BSS", "type": "boolean" }, "time_advertisement": { "description": "Time advertisement", "type": "number", "enum": [ 0, 2 ] }, "time_zone": { "description": "Local time zone as specified in 8.3 of IEEE Std 1003.1-2004", "type": "string" }, "uapsd": { "type": "alias", "default": "uapsd_advertisement_enabled" }, "uapsd_advertisement_enabled": { "description": "WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]", "type": "boolean", "default": true }, "uesa": { "description": "Unauthenticated emergency service accessible", "type": "boolean", "default": false }, "utf8_ssid": { "description": "Whether the SSID is to be interpreted using UTF-8 encoding", "type": "boolean", "default": true }, "vendor_elements": { "description": "Additional vendor specific elements for Beacon and Probe Response frames", "type": "array", "items": { "type": "string" } }, "venue_group": { "type": "string" }, "venue_name": { "description": "Venue Name information", "type": "array", "items": { "type": "string" } }, "venue_type": { "type": "string" }, "venue_url": { "description": "Venue URL information", "type": "array", "items": { "type": "string" } }, "vlan_bridge": { "description": "Bridge (prefix) to add the wifi and the tagged interface to.", "type": "string" }, "vlan_file": { "type": "string" }, "vlan_naming": { "description": "When hostapd creates a VLAN interface on vlan_tagged_interfaces, it needs to know how to name it.", "type": "boolean", "default": true }, "vlan_no_bridge": { "description": "To not setup a bridge for dynamic vlans", "type": "boolean" }, "vlan_tagged_interface": { "type": "string" }, "wds": { "type": "boolean" }, "wds_bridge": { "description": "If bridge parameter is set, the WDS STA interface will be added to the same bridge by default", "type": "string" }, "wds_sta": { "description": "If bridge parameter is set, the WDS STA interface will be added to the same bridge by default", "type": "boolean" }, "wnm_sleep_mode": { "description": "WNM-Sleep Mode (extended sleep mode for stations)", "type": "boolean" }, "wnm_sleep_mode_no_keys": { "description": "WNM-Sleep Mode GTK/IGTK workaround", "type": "boolean" }, "wpa_disable_eapol_key_retries": { "description": "Workaround for key reinstallation attacks", "type": "boolean", "default": false }, "wpa_gmk_rekey": { "description": "Time interval for rekeying GMK (master key used internally to generate GTKs)", "type": "number" }, "wpa_group_rekey": { "description": "Time interval for rekeying GTK (broadcast/multicast encryption keys)", "type": "number" }, "wpa_master_rekey": { "type": "alias", "default": "wpa_gmk_rekey" }, "wpa_pair_rekey": { "type": "alias", "default": "wpa_ptk_rekey" }, "wpa_psk_file": { "description": "External file conatining VLAN PSK MAC address triplets", "type": "string" }, "wpa_ptk_rekey": { "description": "Maximum lifetime for PTK in seconds", "type": "number" }, "wpa_strict_rekey": { "description": "Rekey GTK when any STA that possesses the current GTK is leaving the BSS", "type": "boolean" }, "wps_ap_setup_locked": { "type": "alias", "default": "ap_setup_locked" }, "wps_device_name": { "type": "alias", "default": "device_name" }, "wps_device_type": { "type": "alias", "default": "device_type" }, "wps_independent": { "description": "Whether to manage this interface independently from other WPS interfaces", "type": "number", "default": true }, "wps_label": { "description": "Support WPS labels", "type": "boolean" }, "wps_manufacturer": { "type": "alias", "default": "manufacturer" }, "wps_pbc_in_m1": { "type": "alias", "default": "pbc_in_m1" }, "wps_pin": { "type": "alias", "default": "ap_pin" }, "wps_pushbutton": { "description": "Support WPS pushbutton", "type": "boolean" } } } 07070100E80FF2000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001100000000usr/share/udhcpc07070100E80FF4000081ED00000000000000000000000169B8AF0D00000544000000080000000100000000000000000000002000000000usr/share/udhcpc/default.script#!/bin/sh [ -z "$1" ] && echo "Error: should be run by udhcpc" && exit 1 set_classless_routes() { local max=128 local type while [ -n "$1" -a -n "$2" -a $max -gt 0 ]; do [ ${1##*/} -eq 32 ] && type=host || type=net echo "udhcpc: adding route for $type $1 via $2" route add -$type "$1" gw "$2" dev "$interface" max=$(($max-1)) shift 2 done } setup_interface() { echo "udhcpc: ip addr add $ip/${subnet:-255.255.255.0} broadcast ${broadcast:-+} dev $interface" ip addr add $ip/${subnet:-255.255.255.0} broadcast ${broadcast:-+} dev $interface [ -n "$router" ] && [ "$router" != "0.0.0.0" ] && [ "$router" != "255.255.255.255" ] && { echo "udhcpc: setting default routers: $router" local valid_gw="" for i in $router ; do route add default gw $i dev $interface valid_gw="${valid_gw:+$valid_gw|}$i" done eval $(route -n | awk ' /^0.0.0.0\W{9}('$valid_gw')\W/ {next} /^0.0.0.0/ {print "route del -net "$1" gw "$2";"} ') } # CIDR STATIC ROUTES (rfc3442) [ -n "$staticroutes" ] && set_classless_routes $staticroutes [ -n "$msstaticroutes" ] && set_classless_routes $msstaticroutes } applied= case "$1" in deconfig) ip -4 addr flush dev "$interface" ;; renew) setup_interface update ;; bound) setup_interface ifup ;; esac # user rules [ -f /etc/udhcpc.user ] && . /etc/udhcpc.user exit 0 07070100E816BE000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001400000000usr/share/libiwinfo07070100E816BF000081A400000000000000000000000169B8AF0D0000461D000000080000000100000000000000000000002000000000usr/share/libiwinfo/devices.txt# libiwinfo hardware database # vendor id | device id | subsystem vendor id | subsystem device id | # txpower offset | frequency offset | "vendor name" | "device name" 0x0777 0x11ac 0x0777 0xe7f9 0 0 "Ubiquiti" "LiteBeam 5AC" 0xffff 0xffff 0xffff 0xb102 0 0 "Ubiquiti" "PowerStation2 (18V)" 0xffff 0xffff 0xffff 0xb202 0 0 "Ubiquiti" "PowerStation2 (16D)" 0xffff 0xffff 0xffff 0xb302 0 0 "Ubiquiti" "PowerStation2 (EXT)" 0xffff 0xffff 0xffff 0xb105 0 0 "Ubiquiti" "PowerStation5 (22V)" 0xffff 0xffff 0xffff 0xb305 0 0 "Ubiquiti" "PowerStation5 (EXT)" 0xffff 0xffff 0xffff 0xc302 0 0 "Ubiquiti" "PicoStation2" 0xffff 0xffff 0xffff 0xc3a2 10 0 "Ubiquiti" "PicoStation2 HP" 0xffff 0xffff 0xffff 0xa105 0 0 "Ubiquiti" "WispStation5" 0xffff 0xffff 0xffff 0xa002 10 0 "Ubiquiti" "LiteStation2" 0xffff 0xffff 0xffff 0xa005 5 0 "Ubiquiti" "LiteStation5" 0xffff 0xffff 0xffff 0xc002 10 0 "Ubiquiti" "NanoStation2" 0xffff 0xffff 0xffff 0xc005 5 0 "Ubiquiti" "NanoStation5" 0xffff 0xffff 0xffff 0xc102 10 0 "Ubiquiti" "NanoStation Loco2" 0xffff 0xffff 0xffff 0xc105 5 0 "Ubiquiti" "NanoStation Loco5" 0xffff 0xffff 0xffff 0xc202 10 0 "Ubiquiti" "Bullet2" 0xffff 0xffff 0xffff 0xc205 5 0 "Ubiquiti" "Bullet5" 0x168c 0xffff 0x0777 0xe002 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe003 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe005 5 0 "Ubiquiti" "NanoStation M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe006 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe009 6 0 "Ubiquiti" "NanoStation Loco M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe012 10 0 "Ubiquiti" "NanoStation M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe035 3 0 "Ubiquiti" "NanoStation M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe0a2 2 0 "Ubiquiti" "NanoStation Loco M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe0a5 1 0 "Ubiquiti" "NanoStation Loco M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe102 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe105 5 0 "Ubiquiti" "Rocket M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe112 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe115 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1a3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1a5 5 0 "Ubiquiti" "PowerBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1b2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b5 5 0 "Ubiquiti" "Rocket M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1b6 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b9 6 0 "Ubiquiti" "Rocket M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1c3 3 0 "Ubiquiti" "Rocket M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c5 5 0 "Ubiquiti" "Rocket M5 GPS" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1d2 10 0 "Ubiquiti" "Rocket M2 Titanium" /* airOS XM/XW */ 0x168c 0xffff 0x0777 0xe1d3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1d5 5 0 "Ubiquiti" "airOS XM/XW" 0x168c 0xffff 0x0777 0xe1d9 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1e3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1e5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe202 12 0 "Ubiquiti" "Bullet M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe205 6 0 "Ubiquiti" "Bullet M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe212 1 0 "Ubiquiti" "AirGrid M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe215 1 0 "Ubiquiti" "AirGrid M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe232 2 0 "Ubiquiti" "NanoBridge M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe233 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe235 1 0 "Ubiquiti" "NanoBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe239 6 0 "Ubiquiti" "NanoBridge M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe242 9 0 "Ubiquiti" "AirGrid M2 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe243 3 0 "Ubiquiti" "NanoBridge M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe245 6 0 "Ubiquiti" "AirGrid M5 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe252 9 0 "Ubiquiti" "AirGrid M2 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe255 6 0 "Ubiquiti" "AirGrid M5 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2a3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2a5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2b2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2b5 1 0 "Ubiquiti" "NanoBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2b9 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2c2 10 0 "Ubiquiti" "NanoBeam M2 Int" /* airOS XW */ 0x168c 0xffff 0x0777 0xe2c3 6 0 "Ubiquiti" "Bullet M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe2c4 6 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe2d2 12 0 "Ubiquiti" "Bullet M2 Titanium HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2d4 6 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe2d5 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2e5 4 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe302 12 0 "Ubiquiti" "PicoStation M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe305 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe345 6 0 "Ubiquiti" "WispStation M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe3a5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe3b5 6 0 "Ubiquiti" "airOS XM/XW" 0x168c 0xffff 0x0777 0xe3e5 4 0 "Ubiquiti" "PowerBeam M5 300" /* airOS XW */ 0x168c 0xffff 0x0777 0xe402 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe405 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe4a2 1 0 "Ubiquiti" "AirRouter" /* airOS XM */ 0x168c 0xffff 0x0777 0xe4a5 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe4b2 9 0 "Ubiquiti" "AirRouter HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe4d5 5 0 "Ubiquiti" "Rocket M5 Titanium" /* airOS XW */ 0x168c 0xffff 0x0777 0xe4e5 4 0 "Ubiquiti" "PowerBeam M5 400" /* airOS XW */ 0x168c 0xffff 0x0777 0xe5e5 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe6a2 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6b2 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6b5 5 0 "Ubiquiti" "Rocket M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe6c2 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6e5 4 0 "Ubiquiti" "PowerBeam M5 400 ISO" /* airOS XW */ 0x168c 0xffff 0x0777 0xe7f8 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe805 5 0 "Ubiquiti" "airOS XM" /* e.g. NanoStation M5, Bullet M5 */ 0x168c 0xffff 0x0777 0xe812 6 0 "Ubiquiti" "NanoBeam M2 13" /* airOS XW */ 0x168c 0xffff 0x0777 0xe815 4 0 "Ubiquiti" "NanoBeam M5 16" /* airOS XW */ 0x168c 0xffff 0x0777 0xe825 4 0 "Ubiquiti" "NanoBeam M5 19" /* airOS XW */ 0x168c 0xffff 0x0777 0xe835 6 0 "Ubiquiti" "AirGrid M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe845 1 0 "Ubiquiti" "NanoStation Loco M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe855 5 0 "Ubiquiti" "NanoStation M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe865 6 0 "Ubiquiti" "LiteBeam M5" /* airOS XW */ 0x168c 0xffff 0x0777 0xe866 6 0 "Ubiquiti" "NanoStation M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe867 2 0 "Ubiquiti" "NanoStation Loco M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe868 7 0 "Ubiquiti" "Rocket M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe869 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe875 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe879 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe885 4 0 "Ubiquiti" "PowerBeam M5 620 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe895 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe8a5 1 0 "Ubiquiti" "NanoStation Loco M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe8b5 5 0 "Ubiquiti" "airOS XM" 0x168c 0x001b 0x0777 0x3002 10 0 "Ubiquiti" "XR2" 0x168c 0x001b 0x7777 0x3002 10 0 "Ubiquiti" "XR2" 0x168c 0x001b 0x0777 0x3b02 10 0 "Ubiquiti" "XR2.3" 0x168c 0x001b 0x0777 0x3c02 10 0 "Ubiquiti" "XR2.6" 0x168c 0x001b 0x0777 0x3b03 10 0 "Ubiquiti" "XR3-2.8" 0x168c 0x001b 0x0777 0x3c03 10 0 "Ubiquiti" "XR3-3.6" 0x168c 0x001b 0x0777 0x3003 10 0 "Ubiquiti" "XR3" 0x168c 0x001b 0x0777 0x3004 10 0 "Ubiquiti" "XR4" 0x168c 0x001b 0x0777 0x3005 10 0 "Ubiquiti" "XR5" 0x168c 0x001b 0x7777 0x3005 10 0 "Ubiquiti" "XR5" 0x168c 0x001b 0x0777 0x3007 10 0 "Ubiquiti" "XR7" 0x168c 0x001b 0x0777 0x3009 10 -1520 "Ubiquiti" "XR9" 0x168c 0x001b 0x168c 0x2063 0 0 "Atheros" "AR5413" 0x168c 0x0013 0x168c 0x1042 1 0 "Ubiquiti" "SRC" 0x168c 0x0013 0x0777 0x2041 10 0 "Ubiquiti" "SR2" 0x168c 0x0013 0x0777 0x2004 6 0 "Ubiquiti" "SR4" 0x168c 0x0013 0x7777 0x2004 6 0 "Ubiquiti" "SR4" 0x168c 0x0013 0x0777 0x1004 6 0 "Ubiquiti" "SR4C" 0x168c 0x0013 0x7777 0x1004 6 0 "Ubiquiti" "SR4C" 0x168c 0x0013 0x168c 0x2042 7 0 "Ubiquiti" "SR5" 0x168c 0x0013 0x7777 0x2009 12 -1500 "Ubiquiti" "SR9" 0x168c 0x0027 0x168c 0x2082 7 0 "Ubiquiti" "SR71A" 0x168c 0x0027 0x0777 0x4082 7 0 "Ubiquiti" "SR71" 0x168c 0x0029 0x0777 0x4005 7 0 "Ubiquiti" "SR71-15" 0x168c 0x002a 0x0777 0xe302 12 0 "Ubiquiti" "PicoStation M2" /* ToDo: confirm offset - Correct! */ 0x168c 0x002a 0x0777 0xe012 12 0 "Ubiquiti" "NanoStation M2" /* ToDo: confirm offset - Wrong! */ 0x168c 0x002a 0x0777 0xe005 5 0 "Ubiquiti" "NanoStation M5" /* ToDo: confirm offset - Correct! */ 0x168c 0x002a 0x0777 0xe202 12 0 "Ubiquiti" "Bullet M2" 0x168c 0x002a 0x0777 0xe805 5 0 "Ubiquiti" "Bullet M5" 0x168c 0x002a 0x0777 0xe345 0 0 "Ubiquiti" "WispStation M5" /* ToDo: confirm offset - Wrong! */ 0x168c 0x0029 0x168c 0xa094 0 0 "Atheros" "AR9220" 0x168c 0x0029 0x168c 0xa095 0 0 "Atheros" "AR9223" 0x168c 0x002a 0x168c 0xa093 0 0 "Atheros" "AR9280" 0x168c 0x002b 0x168c 0xa091 0 0 "Atheros" "AR9285" 0x168c 0x002d 0x168c 0x209a 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x1a3b 0x1121 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x0777 0xe0a2 8 0 "Ubiquiti" "NanoStation Loco M2 (XM)" /* wrong offset! */ 0x168c 0x002e 0x168c 0x30a4 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x168c 0xa199 0 0 "Atheros" "AR9287" 0x168c 0x0030 0x168c 0x3112 0 0 "Atheros" "AR9380" 0x168c 0x0030 0x168c 0x3114 0 0 "Atheros" "AR9390" 0x168c 0x0033 0x168c 0xa120 0 0 "Atheros" "AR9580" 0x168c 0x0033 0x168c 0xa136 0 0 "Atheros" "AR9580" 0x168c 0x0033 0x168c 0x3123 0 0 "Atheros" "AR9590" 0x168c 0x0033 0x19b6 0xd014 0 0 "MikroTik" "R11e-5HnD" 0x168c 0x0033 0x19b6 0xd057 0 0 "MikroTik" "R11e-5HnDr2" 0x168c 0x0033 0x19b6 0xd016 0 0 "MikroTik" "R11e-2HPnD" 0x168c 0x0034 0x17aa 0x3214 0 0 "Atheros" "AR9462" 0x168c 0x003c 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9880" 0x168c 0x003c 0x168c 0x3223 0 0 "Qualcomm Atheros" "QCA9880" 0x168c 0x003c 0x1a56 0x1420 0 0 "Qualcomm Atheros" "QCA9862" 0x168c 0x003c 0x19b6 0xd03c 0 0 "Mikrotik" "R11e-5HacT" 0x168c 0x003c 0x19b6 0xd075 0 0 "Mikrotik" "R11e-5HacD" 0x168c 0x003e 0x168c 0x3361 0 0 "Qualcomm Atheros" "QCA6174" 0x168c 0x0040 0x168c 0x0002 0 0 "Qualcomm Atheros" "QCA9990" 0x168c 0x0046 0x168c 0xcafe 0 0 "Qualcomm Atheros" "QCA9984" 0x168c 0x0050 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9887" 0x168c 0x0056 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9886" 0x17cb 0x1104 0x17cb 0x1104 0 0 "Qualcomm Atheros" "QCN6024/9024/9074" 0x1814 0x3051 0x1814 0x0007 0 0 "Ralink" "Rt3051" /* needs fixing */ 0x1814 0x3052 0x1814 0x0008 0 0 "Ralink" "Rt3052" /* needs fixing */ 0x1814 0x3091 0x1814 0x3091 0 0 "Ralink" "RT5592" 0x1814 0x3350 0x1814 0x000b 0 0 "Ralink" "Rt3350" /* needs fixing */ 0x1814 0x3662 0x1814 0x000d 0 0 "Ralink" "Rt3662" /* needs fixing */ 0x11ab 0x2a55 0x11ab 0x0000 0 0 "Marvell" "88W8864" 0x02df 0x9135 0x0000 0x0000 0 0 "Marvell" "88W8887" 0x11ab 0x2b40 0x11ab 0x0000 0 0 "Marvell" "88W8964" 0x02df 0x9141 0x0000 0x0000 0 0 "Marvell" "88W8997" 0x14c3 0x0608 0x14c3 0x0608 0 0 "AMD" "RZ608" 0x14c3 0x7603 0x14c3 0x7603 0 0 "MediaTek" "MT7603E" 0x14c3 0x7610 0x14c3 0x7610 0 0 "MediaTek" "MT7610E" 0x14c3 0x7612 0x14c3 0x7612 0 0 "MediaTek" "MT7612E" 0x14c3 0x7663 0x14c3 0x7663 0 0 "MediaTek" "MT7613BE" 0x14c3 0x7615 0x7615 0x14c3 0 0 "MediaTek" "MT7615E" 0x14c3 0x7628 0x14c3 0x0004 0 0 "MediaTek" "MT76x8" 0x14c3 0x7650 0x14c3 0x7650 0 0 "MediaTek" "MT7610E" 0x14c3 0x7662 0x14c3 0x7662 0 0 "MediaTek" "MT76x2E" 0x14c3 0x7915 0x14c3 0x7915 0 0 "MediaTek" "MT7915E" 0x14c3 0x7906 0x14c3 0x7906 0 0 "MediaTek" "MT7916AN" 0x14c3 0x7925 0x1a3b 0x6002 0 0 "MediaTek" "MT7925E" 0x14c3 0x7990 0x14C3 0x6639 0 0 "MediaTek" "MT7996E" 0x14c3 0x7992 0x14c3 0x7992 0 0 "MediaTek" "MT7992E" 0x14e4 0xaa52 0x14e4 0xaa52 0 0 "Broadcom" "BCM43602" 0x02d0 0xa9a6 0x0000 0x0000 0 0 "Cypress" "CYW43455" 0x02d0 0x4345 0x0000 0x0000 0 0 "Cypress" "CYW43455" 0x1ae9 0x0310 0x1ae9 0x0000 0 0 "Wilocity" "Wil6210" # USB devices # 0x0000 | 0x0000 | vendor id | product id | ... # mt7601u/usb.c 0x0000 0x0000 0x148f 0x7601 0 0 "MediaTek" "MT7601U" # mt7921/usb.c 0x0000 0x0000 0x0e8d 0x7961 0 0 "MediaTek" "MT7921AU" # mt76x2/usb.c 0x0000 0x0000 0x0b05 0x1833 0 0 "ASUS" "USB-AC54" 0x0000 0x0000 0x0b05 0x17eb 0 0 "ASUS" "USB-AC55" 0x0000 0x0000 0x0b05 0x180b 0 0 "ASUS" "USB-N53 B1" 0x0000 0x0000 0x0e8d 0x7612 0 0 "Aukey" "USBAC1200" /* Alfa AWUS036ACM */ 0x0000 0x0000 0x057c 0x8503 0 0 "AVM" "FRITZ!WLAN AC860" 0x0000 0x0000 0x7392 0xb711 0 0 "Edimax" "EW-7722UAC" 0x0000 0x0000 0x0e8d 0x7632 0 0 "High Cloud" "HC-M7662BU1" 0x0000 0x0000 0x2c4e 0x0103 0 0 "Mercury" "UD13" 0x0000 0x0000 0x0846 0x9053 0 0 "Netgear" "A6210" 0x0000 0x0000 0x045e 0x02e6 0 0 "Microsoft" "XBox One Wireless Adapter" 0x0000 0x0000 0x045e 0x02fe 0 0 "Microsoft" "XBox One Wireless Adapter" # mt76x0/usb.c 0x0000 0x0000 0x148f 0x7610 0 0 "MediaTek" "MT7610U" 0x0000 0x0000 0x13b1 0x003e 0 0 "Linksys" "AE6000" 0x0000 0x0000 0x0e8d 0x7610 0 0 "Sabrent" "NTWLAC" 0x0000 0x0000 0x7392 0xa711 0 0 "Edimax" "7711MAC" 0x0000 0x0000 0x148f 0x761a 0 0 "TP-Link" "TL-WDN5200" 0x0000 0x0000 0x0b05 0x17d1 0 0 "ASUS" "USB-AC51" 0x0000 0x0000 0x0b05 0x17db 0 0 "ASUS" "USB-AC50" 0x0000 0x0000 0x0df6 0x0075 0 0 "Sitecom" "WLA-3100" 0x0000 0x0000 0x2019 0xab31 0 0 "Planex" "GW-450D" 0x0000 0x0000 0x2001 0x3d02 0 0 "D-Link" "DWA-171 rev B1" 0x0000 0x0000 0x0586 0x3425 0 0 "Zyxel" "NWD6505" 0x0000 0x0000 0x07b8 0x7610 0 0 "AboCom" "AU7212" 0x0000 0x0000 0x04bb 0x0951 0 0 "I-O DATA" "WN-AC433UK" 0x0000 0x0000 0x057c 0x8502 0 0 "AVM" "FRITZ!WLAN AC430" 0x0000 0x0000 0x293c 0x5702 0 0 "Comcast" "Xfinity KXW02AAA" 0x0000 0x0000 0x20f4 0x806b 0 0 "TRENDnet" "TEW-806UBH" 0x0000 0x0000 0x7392 0xc711 0 0 "Devolo" "WiFi Stick ac" 0x0000 0x0000 0x0df6 0x0079 0 0 "Sitecom" "WL-356" 0x0000 0x0000 0x2357 0x0123 0 0 "TP-Link" "T2UHP US v1" 0x0000 0x0000 0x2357 0x010b 0 0 "TP-Link" "T2UHP UN v1" 0x0000 0x0000 0x2357 0x0105 0 0 "TP-Link" "Archer T1U" 0x0000 0x0000 0x0e8d 0x7630 0 0 "MediaTek" "MT7630U" 0x0000 0x0000 0x0e8d 0x7650 0 0 "MediaTek" "MT7650U" # mt7615/usb.c 0x0000 0x0000 0x0e8d 0x7663 0 0 "MediaTek" "MT7663U" 0x0000 0x0000 0x043e 0x310c 0 0 "LG" "LGSBWAC02" # rtl8xxxu/rtl8xxxu_core.c 0x0000 0x0000 0x0bda 0x8176 0 0 "Realtek" "RTL8188CU" 0x0000 0x0000 0x0bda 0xf179 0 0 "Realtek" "RTL8188FTV" # FDT compatible strings # "compatible" | txpower offset | frequency offset | ... "qca,ar9130-wmac" 0 0 "Atheros" "AR9130" "qca,ar9330-wmac" 0 0 "Atheros" "AR9330" "qca,ar9340-wmac" 0 0 "Atheros" "AR9340" "qca,qca9530-wmac" 0 0 "Qualcomm Atheros" "QCA9530" "qca,qca9550-wmac" 0 0 "Qualcomm Atheros" "QCA9550" "qca,qca9560-wmac" 0 0 "Qualcomm Atheros" "QCA9560" "qcom,ipq4019-wifi" 0 0 "Qualcomm Atheros" "IPQ4019" "qcom,ipq5018-wifi" 0 0 "Qualcomm Atheros" "IPQ5018" "qcom,ipq6018-wifi" 0 0 "Qualcomm Atheros" "IPQ6018" "qcom,ipq8074-wifi" 0 0 "Qualcomm Atheros" "IPQ8074" "qcom,qcn6122-wifi" 0 0 "Qualcomm Atheros" "QCN6102/QCN6122" "mediatek,mt7622-wmac" 0 0 "MediaTek" "MT7622" "mediatek,mt7628-wmac" 0 0 "MediaTek" "MT7628" "mediatek,mt7981-wmac" 0 0 "MediaTek" "MT7981" "mediatek,mt7986-wmac" 0 0 "MediaTek" "MT7986" "ralink,rt2880-wmac" 0 0 "Ralink" "Rt2880" "ralink,rt3050-wmac" 0 0 "Ralink" "Rt3050" "ralink,rt3352-wmac" 0 0 "Ralink" "Rt3352" "ralink,rt3883-wmac" 0 0 "Ralink" "Rt3883" "ralink,rt5350-wmac" 0 0 "Ralink" "Rt5350" "ralink,rt7620-wmac" 0 0 "MediaTek" "MT7620" 07070100E8158C000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001100000000usr/share/hostap07070100E8162E000081A400000000000000000000000169B8AF0D000016BA000000080000000100000000000000000000002000000000usr/share/hostap/wifi-detect.uc#!/usr/bin/env ucode 'use strict'; import { readfile, writefile, realpath, glob, basename, unlink, open, rename } from "fs"; import { is_equal } from "/usr/share/hostap/common.uc"; let nl = require("nl80211"); let board_file = "/etc/board.json"; let prev_board_data = json(readfile(board_file)); let board_data = json(readfile(board_file)); function phy_idx(name) { return +rtrim(readfile(`/sys/class/ieee80211/${name}/index`)); } function phy_path(name) { let devpath = realpath(`/sys/class/ieee80211/${name}/device`); devpath = replace(devpath, /^\/sys\/devices\//, ""); if (match(devpath, /^platform\/.*\/pci/)) devpath = replace(devpath, /^platform\//, ""); let dev_phys = map(glob(`/sys/class/ieee80211/${name}/device/ieee80211/*`), basename); sort(dev_phys, (a, b) => phy_idx(a) - phy_idx(b)); let ofs = index(dev_phys, name); if (ofs > 0) devpath += `+${ofs}`; return devpath; } function cleanup() { let wlan = board_data.wlan; for (let name in wlan) if (substr(name, 0, 3) == "phy") delete wlan[name]; else delete wlan[name].info; } function wiphy_get_entry(phy, path) { board_data.wlan ??= {}; let wlan = board_data.wlan; for (let name in wlan) if (wlan[name].path == path) return wlan[name]; wlan[phy] = { path: path }; return wlan[phy]; } function freq_to_channel(freq) { if (freq < 1000) return 0; if (freq == 2484) return 14; if (freq == 5935) return 2; if (freq < 2484) return (freq - 2407) / 5; if (freq >= 4910 && freq <= 4980) return (freq - 4000) / 5; if (freq < 5950) return (freq - 5000) / 5; if (freq <= 45000) return (freq - 5950) / 5; if (freq >= 58320 && freq <= 70200) return (freq - 56160) / 2160; return 0; } function freq_range_match(ranges, freq) { freq *= 1000; for (let range in ranges) { if (freq >= range[0] && freq <= range[1]) return true; } return false; } function wiphy_detect() { let phys = nl.request(nl.const.NL80211_CMD_GET_WIPHY, nl.const.NLM_F_DUMP, { split_wiphy_dump: true }); if (!phys) return; for (let phy in phys) { if (!phy) continue; let name = phy.wiphy_name; let path = phy_path(name); let info = { antenna_rx: phy.wiphy_antenna_avail_rx, antenna_tx: phy.wiphy_antenna_avail_tx, bands: {}, radios: [] }; for (let radio in phy.radios) { // S1G is not supported yet radio.freq_ranges = filter(radio.freq_ranges, (range) => range.end > 2000000 ); if (!length(radio.freq_ranges)) continue; push(info.radios, { index: radio.index, freq_ranges: map(radio.freq_ranges, (range) => [ range.start, range.end ] ), bands: {} }); } let bands = info.bands; for (let band in phy.wiphy_bands) { if (!band || !band.freqs) continue; let freq = band.freqs[0].freq; let band_info = {}; let band_name; if (freq > 50000) band_name = "60G"; else if (freq > 5900) band_name = "6G"; else if (freq > 4000) band_name = "5G"; else if (freq > 2000) band_name = "2G"; else continue; bands[band_name] = band_info; if (band.ht_capa > 0) band_info.ht = true; if (band.vht_capa > 0) band_info.vht = true; let he_phy_cap = 0; let eht_phy_cap = 0; for (let ift in band.iftype_data) { if (!ift.he_cap_phy) continue; band_info.he = true; he_phy_cap |= ift.he_cap_phy[0]; if (!ift.eht_cap_phy) continue; band_info.eht = true; eht_phy_cap |= ift.eht_cap_phy[0]; } if (band_name != "2G" && (he_phy_cap & 0x18) || ((band.vht_capa >> 2) & 0x3)) band_info.max_width = 160; else if (band_name != "2G" && (he_phy_cap & 4) || band.vht_capa > 0) band_info.max_width = 80; else if ((band.ht_capa & 0x2) || (he_phy_cap & 0x2)) band_info.max_width = 40; else band_info.max_width = 20; let modes = band_info.modes = [ "NOHT" ]; if (band_info.ht) push(modes, "HT20"); if (band_info.vht) push(modes, "VHT20"); if (band_info.he) push(modes, "HE20"); if (band_info.eht) push(modes, "EHT20"); if (band.ht_capa & 0x2) { push(modes, "HT40"); if (band_info.vht) push(modes, "VHT40") } if (he_phy_cap & 2) push(modes, "HE40"); if (eht_phy_cap && he_phy_cap & 2) push(modes, "EHT40"); for (let radio in info.radios) { let freq_match = filter(band.freqs, (freq) => freq_range_match(radio.freq_ranges, freq.freq) ); if (!length(freq_match)) continue; let radio_band = {}; radio.bands[band_name] = radio_band; freq_match = filter(freq_match, (freq) => !freq.disabled ); let freq = freq_match[0]; if (freq) radio_band.default_channel = freq_to_channel(freq.freq); } for (let freq in band.freqs) { if (freq.disabled) continue; let chan = freq_to_channel(freq.freq); if (!chan) continue; band_info.default_channel = chan; break; } if (band_name == "2G") continue; if (he_phy_cap & 4) push(modes, "HE40"); if (eht_phy_cap && he_phy_cap & 4) push(modes, "EHT40"); if (band_info.vht) push(modes, "VHT80"); if (he_phy_cap & 4) push(modes, "HE80"); if (eht_phy_cap && he_phy_cap & 4) push(modes, "EHT80"); if ((band.vht_capa >> 2) & 0x3) push(modes, "VHT160"); if (he_phy_cap & 0x18) push(modes, "HE160"); if (eht_phy_cap && he_phy_cap & 0x18) push(modes, "EHT160"); if (eht_phy_cap & 2) push(modes, "EHT320"); } let entry = wiphy_get_entry(name, path); entry.info = info; } } cleanup(); wiphy_detect(); if (!is_equal(prev_board_data, board_data)) { let new_file = board_file + ".new"; unlink(new_file); let f = open(new_file, "wx"); if (!f) exit(1); f.write(sprintf("%.J\n", board_data)); f.close(); rename(new_file, board_file); } 07070100E8186B000081A400000000000000000000000169B8AF0D0000442A000000080000000100000000000000000000002300000000usr/share/hostap/wpa_supplicant.uclet libubus = require("ubus"); import * as uloop from "uloop"; import { open, readfile } from "fs"; import { wdev_create, wdev_set_mesh_params, wdev_remove, is_equal, wdev_set_up, vlist_new, phy_open } from "common"; let ubus = libubus.connect(); function ex_handler(e) { e = split(`${e}\n${e.stacktrace[0].context}`, '\n'); for (let line in e) wpas.printf(line); return libubus.STATUS_UNKNOWN_ERROR; } libubus.guard(ex_handler); wpas.data.mld = {}; wpas.data.config = {}; wpas.data.iface_phy = {}; wpas.data.iface_ubus = {}; wpas.data.macaddr_list = {}; function iface_stop(iface) { let ifname = iface.config.iface; if (!iface.running) return; delete wpas.data.iface_phy[ifname]; wpas.remove_iface(ifname); wdev_remove(ifname); iface.running = false; } function iface_start(phydev, iface, macaddr_list) { let phy = phydev.name; if (iface.running) return; let ifname = iface.config.iface; let wdev_config = {}; for (let field in iface.config) wdev_config[field] = iface.config[field]; if (!wdev_config.macaddr) wdev_config.macaddr = phydev.macaddr_next(); wpas.data.iface_phy[ifname] = phy; wdev_remove(ifname); let ret = phydev.wdev_add(ifname, wdev_config); if (ret) wpas.printf(`Failed to create device ${ifname}: ${ret}`); wdev_set_up(ifname, true); wpas.add_iface(iface.config); iface.running = true; } function iface_cb(new_if, old_if) { if (old_if && new_if && is_equal(old_if.config, new_if.config)) { new_if.running = old_if.running; return; } if (new_if && old_if) wpas.printf(`Update configuration for interface ${old_if.config.iface}`); else if (old_if) wpas.printf(`Remove interface ${old_if.config.iface}`); if (old_if) iface_stop(old_if); } function prepare_config(config, radio) { config.config_data = readfile(config.config); return { config }; } function phy_dev_open(phy_name) { let phy = wpas.data.config[phy_name]; if (!phy) { warn(`Missing phy config for ${phy_name}\n`); return; } let phydev = phy_open(phy.name, phy.radio); if (!phydev) return; let macaddr_list = wpas.data.macaddr_list[phy_name]; phydev.macaddr_init(macaddr_list, { num_global: phy.num_global_macaddr, macaddr_base: phy.macaddr_base, }); return phydev; } function start_pending(phy_name) { let phy = wpas.data.config[phy_name]; if (!phy || !phy.data) return; let phydev = phy_dev_open(phy_name); if (!phydev) { wpas.printf(`Could not open phy ${phy_name}`); return; } for (let ifname in phy.data) iface_start(phydev, phy.data[ifname]); } function phy_name(phy, radio) { if (!phy) return null; if (radio != null && radio >= 0) phy += "." + radio; return phy; } function mld_remove(data) { if (!data.radio_mask_up) return; let name = data.name; wpas.printf(`Remove MLD interface ${name}`); wpas.remove_iface(name); wdev_remove(name); data.radio_mask_up = 0; } function mld_first_phy(data) { let mask = data.radio_mask_present; for (let i = 0; mask; i++, mask >>= 1) if (mask & 1) return i; } function mld_radio_index(data, freq) { let phys = data.phy_config; for (let i = 0; i < length(phys); i++) if (phys[i] && index(phys[i].freq_list, freq) >= 0) return i; } function mld_add(data, phy_list) { let name = data.name; phy_list ??= []; wpas.printf(`Add MLD interface ${name}`); let radio = mld_first_phy(data); if (radio == null) return; let phy_name = data.phy + '.' + radio; let phydev = phy_list[phy_name]; if (!phydev) { phydev = phy_dev_open(phy_name); if (!phydev) return; phy_list[phy_name] = phydev; } let wdev_config = { ...data.config, radio_mask: data.radio_mask }; if (!wdev_config.macaddr) wdev_config.macaddr = phydev.macaddr_next(); let ret = phydev.wdev_add(name, wdev_config); if (ret) wpas.printf(`Failed to create device ${name}: ${ret}`); let first_config = data.phy_config[radio]; wdev_set_up(name, true); wpas.add_iface(first_config); let iface = wpas.interfaces[name]; if (!iface) { wpas.printf(`Interface ${name} not found after adding\n`); wpas.remove_iface(name); wdev_remove(name); return; } if (length(data.freq_list) > 0) iface.config('freq_list', data.freq_list); data.radio_mask_up = data.radio_mask_present; } function mld_remove_links(data) { // TODO mld_remove(data); } function mld_add_links(data) { // TODO: incremental update mld_remove(data); mld_add(data); } function mld_set_config(config) { let prev_mld = { ...wpas.data.mld }; let new_mld = {}; let phy_list = {}; let new_config = !length(prev_mld); wpas.printf(`Set MLD config: ${keys(config)}`); for (let name, data in config) { let prev = prev_mld[name]; if (prev && is_equal(prev.config, data)) { new_mld[name] = prev; delete prev_mld[name]; continue; } let radio_mask = 0; for (let r in data.radios) if (r != null) radio_mask |= 1 << r; new_mld[name] = { name, config: data, phy: data.phy, phy_config: [], radio_mask, radio_mask_up: 0, radio_mask_present: 0, }; } for (let name, data in prev_mld) mld_remove(data); wpas.data.mld = new_mld; } function mld_set_iface_config(name, data, radio, config) { wpas.printf(`Set MLD interface ${name} radio ${radio} config: ${keys(config)}`); data.phy_config[radio] = config; if (config) data.radio_mask_present |= 1 << radio; else data.radio_mask_present &= ~(1 << radio); let freq_list; for (let config in data.phy_config) { if (!config || !config.freq_list) continue; if (!freq_list) freq_list = [ ...config.freq_list ]; else push(freq_list, ...config.freq_list); } data.freq_list = freq_list; } function mld_update_iface(name, data) { if (!data.radio_mask_up) return; if (!data.radio_mask_present) { mld_remove(data); return; } let mask = data.radio_mask_up & ~data.radio_mask_present; if (!mask) return; mld_remove_links(data); } function mld_update_phy(phy, ifaces) { for (let name, data in wpas.data.mld) { if (data.phy != phy.name) continue; mld_set_iface_config(name, data, phy.radio, ifaces[name]); mld_update_iface(name, data); } } function mld_start() { if (wpas.data.mld_pending) return; wpas.printf(`Start pending MLD interfaces\n`); let phy_list = {}; for (let name, data in wpas.data.mld) { wpas.printf(`MLD interface ${name} present=${data.radio_mask_present} up=${data.radio_mask_up}`); let add_mask = data.radio_mask_present & ~data.radio_mask_up; if (!add_mask) continue; if (!data.radio_mask_up) mld_add(data, phy_list); else mld_add_links(data); } } function mld_bss_allowed(data, bss) { if (!data.freq_list) return true; return index(data.freq_list, bss.freq) >= 0; } function set_config(config_name, phy_name, radio, num_global_macaddr, macaddr_base, config_list) { let phy = wpas.data.config[config_name]; if (radio < 0) radio = null; if (!phy) { phy = vlist_new(iface_cb, false); phy.name = phy_name; wpas.data.config[config_name] = phy; } phy.radio = radio; phy.num_global_macaddr = num_global_macaddr; phy.macaddr_base = macaddr_base; let values = []; let mlo_ifaces = {}; for (let config in config_list) if (config.mlo) mlo_ifaces[config.iface] = config; else push(values, [ config.iface, prepare_config(config) ]); mld_update_phy(phy, mlo_ifaces); phy.update(values); } function iface_status_fill_radio_link(mld, radio, msg, link) { let config = mld.phy_config[radio]; if (!config) return; let freq_list = config.freq_list; if (!freq_list) return; if (!link || index(freq_list, link.frequency) < 0) return; msg.frequency = link.frequency; msg.sec_chan_offset = link.sec_chan_offset; } function iface_status_fill_radio(mld, radio, msg, status) { if (status.links) for (let link in status.links) iface_status_fill_radio_link(mld, radio, msg, link); else iface_status_fill_radio_link(mld, radio, msg, status); } let main_obj = { phy_set_state: { args: { phy: "", radio: 0, stop: true, }, call: function(req) { let name = phy_name(req.args.phy, req.args.radio); if (!name || req.args.stop == null) return libubus.STATUS_INVALID_ARGUMENT; let phy = wpas.data.config[name]; if (!phy) return libubus.STATUS_NOT_FOUND; let radio_mask = phy.radio != null ? (1 << phy.radio) : 0; if (req.args.stop) { for (let ifname in phy.data) iface_stop(phy.data[ifname]); for (let name, data in wpas.data.mld) { data.radio_mask_present &= ~radio_mask; if (data.radio_mask_up & radio_mask) mld_update_iface(name, data); } } else { start_pending(name); let found; for (let name, data in wpas.data.mld) { if (!(data.radio_mask & radio_mask)) continue; data.radio_mask_present |= radio_mask; found = true; } if (found) mld_start(); } return 0; } }, phy_set_macaddr_list: { args: { phy: "", radio: 0, macaddr: [], }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; wpas.data.macaddr_list[phy] = req.args.macaddr; return 0; } }, phy_status: { args: { phy: "", radio: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; phy = wpas.data.config[phy]; if (!phy) return libubus.STATUS_NOT_FOUND; let ifnames = keys(phy.data); let radio_mask = phy.radio != null ? (1 << phy.radio) : 0; for (let name, data in wpas.data.mld) if (data.radio_mask_up & radio_mask) push(ifnames, name); for (let ifname in ifnames) { try { let iface = wpas.interfaces[ifname]; if (!iface) continue; let status = iface.status(); if (!status) continue; if (status.state == "INTERFACE_DISABLED") continue; if (phy.data[ifname]) { status.ifname = ifname; return status; } let ret = { ifname, state: status.state, }; let mld = wpas.data.mld[ifname]; iface_status_fill_radio(mld, phy.radio, ret, status); return ret; } catch (e) { ex_handler(e); continue; } } return libubus.STATUS_NOT_FOUND; } }, iface_status: { args: { name: "" }, call: function(req) { let iface = wpas.interfaces[req.args.name]; if (!iface) return libubus.STATUS_NOT_FOUND; return iface.status(); }, }, mld_set: { args: { config: {} }, call: function(req) { if (!req.args.config) return libubus.STATUS_INVALID_ARGUMENT; wpas.data.mld_pending = true; mld_set_config(req.args.config); return 0; } }, mld_start: { args: {}, call: function(req) { wpas.data.mld_pending = false; mld_start(); return 0; } }, config_set: { args: { phy: "", radio: 0, num_global_macaddr: 0, macaddr_base: "", config: [], defer: true, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; wpas.printf(`Set new config for phy ${phy}`); if (req.args.config) set_config(phy, req.args.phy, req.args.radio, req.args.num_global_macaddr, req.args.macaddr_base, req.args.config); if (!req.args.defer) uloop.timer(100, () => start_pending(phy)); return { pid: wpas.getpid() }; } }, config_add: { args: { driver: "", iface: "", bridge: "", hostapd_ctrl: "", ctrl: "", config: "", }, call: function(req) { if (!req.args.iface || !req.args.config) return libubus.STATUS_INVALID_ARGUMENT; if (wpas.add_iface(req.args) < 0) return libubus.STATUS_INVALID_ARGUMENT; return { pid: wpas.getpid() }; } }, config_remove: { args: { iface: "" }, call: function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; wpas.remove_iface(req.args.iface); return 0; } }, bss_info: { args: { iface: "", }, call: function(req) { let ifname = req.args.iface; if (!ifname) return libubus.STATUS_INVALID_ARGUMENT; let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; let status = iface.ctrl("STATUS"); if (!status) return libubus.STATUS_NOT_FOUND; let ret = {}; status = split(status, "\n"); for (let line in status) { line = split(line, "=", 2); ret[line[0]] = line[1]; } return ret; } }, }; wpas.data.ubus = ubus; wpas.data.obj = ubus.publish("wpa_supplicant", main_obj); wpas.udebug_set("wpa_supplicant", wpas.data.ubus); function iface_event(type, name, data) { let ubus = wpas.data.ubus; data ??= {}; data.name = name; let req = wpas.data.obj.notify(`iface.${type}`, data, null, null, null, -1); if (req) req.abort(); ubus.call("service", "event", { type: `wpa_supplicant.${name}.${type}`, data: {} }); } function iface_hostapd_notify(ifname, iface, state) { let status = iface.status(); let ubus = wpas.data.ubus; let msg = {}; let mld = wpas.data.mld[ifname]; switch (state) { case "DISCONNECTED": case "AUTHENTICATING": case "SCANNING": msg.up = false; break; case "INTERFACE_DISABLED": case "INACTIVE": msg.up = true; break; case "COMPLETED": msg.up = true; if (!mld) { msg.frequency = status.frequency; msg.sec_chan_offset = status.sec_chan_offset; } break; default: return; } if (!mld) { msg.phy = wpas.data.iface_phy[ifname]; if (!msg.phy) { wpas.printf(`no PHY for ifname ${ifname}`); return; } ubus.call("hostapd", "apsta_state", msg); return; } let radio_mask = mld.radio_mask; for (let i = 0; radio_mask; i++, radio_mask >>= 1) { if (!(radio_mask & 1)) { wpas.printf(`skip radio ${i}`); continue; } let radio_msg = { ...msg, phy: mld.phy, radio: i, }; if (state == "COMPLETED") iface_status_fill_radio(mld, i, radio_msg, status); ubus.call("hostapd", "apsta_state", radio_msg); } } function iface_channel_switch(ifname, iface, info) { let msg = { up: true, csa: true, csa_count: info.csa_count ? info.csa_count - 1 : 0, frequency: info.frequency, sec_chan_offset: info.sec_chan_offset, }; let mld = wpas.data.mld[ifname]; if (mld) { msg.phy = mld.phy; msg.radio = mld_radio_index(mld, info.frequency); if (msg.radio == null) { wpas.printf(`PHY ${mld.phy} radio for frequency ${info.frequency} not found`); return; } } else { msg.phy = wpas.data.iface_phy[ifname]; if (!msg.phy) { wpas.printf(`no PHY for ifname ${ifname}`); return; } } ubus.call("hostapd", "apsta_state", msg); } function iface_ubus_remove(ifname) { let obj = wpas.data.iface_ubus[ifname]; if (!obj) return; obj.remove(); delete wpas.data.iface_ubus[ifname]; } function iface_ubus_notify(ifname, event) { let obj = wpas.data.iface_ubus[ifname]; if (!obj) return; obj.notify('ctrl-event', { event }, null, null, null, -1); } function iface_ubus_add(ifname) { let ubus = wpas.data.ubus; iface_ubus_remove(ifname); let obj = ubus.publish(`wpa_supplicant.${ifname}`, { reload: { args: {}, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; iface.ctrl("RECONFIGURE"); return 0; }, }, wps_start: { args: { multi_ap: true }, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; iface.ctrl(`WPS_PBC multi_ap=${+req.args.multi_ap}`); return 0; }, }, wps_cancel: { args: {}, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; iface.ctrl("WPS_CANCEL"); return 0; }, }, control: { args: { command: "" }, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; return { result: iface.ctrl(req.args.command) }; }, }, }); wpas.data.iface_ubus[ifname] = obj; } return { shutdown: function() { for (let phy in wpas.data.config) set_config(phy, []); wpas.ubus.disconnect(); }, bss_allowed: function(ifname, bss) { let mld = wpas.data.mld[ifname]; if (!mld) return true; return mld_bss_allowed(mld, bss); }, iface_add: function(name, obj) { iface_ubus_add(name); iface_event("add", name); }, iface_remove: function(name, obj) { iface_event("remove", name); iface_ubus_remove(name); }, ctrl_event: function(name, iface, ev) { iface_ubus_notify(name, ev); }, state: function(ifname, iface, state) { let event_data = iface.status(); event_data.name = ifname; iface_event("state", ifname, event_data); try { iface_hostapd_notify(ifname, iface, state); if (state != "COMPLETED") return; let phy = wpas.data.iface_phy[ifname]; if (!phy) return; let phy_data = wpas.data.config[phy]; if (!phy_data) return; let iface_data = phy_data.data[ifname]; if (!iface_data) return; let wdev_config = iface_data.config; if (!wdev_config || wdev_config.mode != "mesh") return; wdev_set_mesh_params(ifname, wdev_config); } catch (e) { ex_handler(e); } }, event: function(ifname, iface, ev, info) { if (ev == "CH_SWITCH_STARTED") iface_channel_switch(ifname, iface, info); }, wps_credentials: function(ifname, iface, cred) { cred.ifname = ifname; ubus.event("wps_credentials", cred); } }; 07070100E8162D000081A400000000000000000000000169B8AF0D000010B5000000080000000100000000000000000000001900000000usr/share/hostap/wdev.uc#!/usr/bin/env ucode 'use strict'; import { vlist_new, is_equal, wdev_set_mesh_params, wdev_remove, wdev_set_up, phy_open } from "/usr/share/hostap/common.uc"; import { readfile, writefile, basename, readlink, glob } from "fs"; let libubus = require("ubus"); let keep_devices = {}; let phy_name = shift(ARGV); let command = shift(ARGV); let phy, phydev; function iface_stop(wdev) { if (keep_devices[wdev.ifname]) return; wdev_remove(wdev.ifname); } function iface_start(wdev) { let ifname = wdev.ifname; if (readfile(`/sys/class/net/${ifname}/ifindex`)) { wdev_set_up(ifname, false); wdev_remove(ifname); } let wdev_config = {}; for (let key in wdev) wdev_config[key] = wdev[key]; if (!wdev_config.macaddr && wdev.mode != "monitor") wdev_config.macaddr = phydev.macaddr_next(); phydev.wdev_add(ifname, wdev_config); wdev_set_up(ifname, true); let htmode = wdev.htmode || "NOHT"; if (wdev.freq) system(`iw dev ${ifname} set freq ${wdev.freq} ${htmode}`); if (wdev.mode == "adhoc") { let cmd = ["iw", "dev", ifname, "ibss", "join", wdev.ssid, wdev.freq, htmode, "fixed-freq" ]; if (wdev.bssid) push(cmd, wdev.bssid); for (let key in [ "beacon-interval", "basic-rates", "mcast-rate", "keys" ]) if (wdev[key]) push(cmd, key, wdev[key]); system(cmd); } else if (wdev.mode == "mesh") { let cmd = [ "iw", "dev", ifname, "mesh", "join", wdev.ssid ]; if (wdev.freq) { push(cmd, "freq", wdev.freq); if (htmode && htmode != "NOHT") push(cmd, htmode); } for (let key in [ "basic-rates", "mcast-rate", "beacon-interval" ]) if (wdev[key]) push(cmd, key, wdev[key]); system(cmd); wdev_set_mesh_params(ifname, wdev); } } function iface_cb(new_if, old_if) { if (old_if && new_if && is_equal(old_if, new_if)) return; if (old_if) iface_stop(old_if); if (new_if) iface_start(new_if); } function drop_inactive(config) { for (let key in config) { if (!readfile(`/sys/class/net/${key}/ifindex`)) delete config[key]; } } function add_ifname(config) { for (let key in config) config[key].ifname = key; } function delete_ifname(config) { for (let key in config) delete config[key].ifname; } function add_existing(phydev, config) { phydev.for_each_wdev((wdev) => { if (config[wdev]) return; if (trim(readfile(`/sys/class/net/${wdev}/operstate`)) == "down") config[wdev] = {}; }); } function usage() { warn(`Usage: ${basename(sourcepath())} [] Commands: set_config [ - get phy MAC address for vif index `); exit(1); } const commands = { set_config: function(args) { let statefile = `/var/run/wdev-${phy_name}.json`; let new_config = shift(args); for (let dev in ARGV) keep_devices[dev] = true; if (!new_config) usage(); new_config = json(new_config); if (!new_config) { warn("Invalid configuration\n"); exit(1); } let old_config = readfile(statefile); if (old_config) old_config = json(old_config); let config = vlist_new(iface_cb); if (type(old_config) == "object") config.data = old_config; add_existing(phydev, config.data); add_ifname(config.data); drop_inactive(config.data); let ubus = libubus.connect(); let data = ubus.call("hostapd", "config_get_macaddr_list", { phy: phydev.name, radio: phydev.radio ?? -1 }); let macaddr_list = []; if (type(data) == "object" && data.macaddr) macaddr_list = data.macaddr; ubus.disconnect(); phydev.macaddr_init(macaddr_list); add_ifname(new_config); config.update(new_config); drop_inactive(config.data); delete_ifname(config.data); writefile(statefile, sprintf("%J", config.data)); }, get_macaddr: function(args) { let data = {}; for (let arg in args) { arg = split(arg, "=", 2); data[arg[0]] = arg[1]; } let macaddr = phydev.macaddr_generate(data); if (!macaddr) { warn(`Could not get MAC address for phy ${phy_name}\n`); exit(1); } print(macaddr + "\n"); }, }; if (!phy_name || !command | !commands[command]) usage(); let phy_split = split(phy_name, ":"); phydev = phy_open(phy_split[0], phy_split[1]); phy = phydev.phy; if (!phydev) { warn(`PHY ${phy_name} does not exist\n`); exit(1); } commands[command](ARGV); 07070100E8186A000081A400000000000000000000000169B8AF0D00007AE5000000080000000100000000000000000000001C00000000usr/share/hostap/hostapd.uclet libubus = require("ubus"); import { open, readfile, access } from "fs"; import { wdev_remove, is_equal, vlist_new, phy_is_fullmac, phy_open, wdev_set_radio_mask, wdev_set_up } from "common"; let ubus = libubus.connect(null, 60); function ex_handler(e) { e = split(`${e}\n${e.stacktrace[0].context}`, '\n'); for (let line in e) hostapd.printf(line); return libubus.STATUS_UNKNOWN_ERROR; } libubus.guard(ex_handler); hostapd.data.config = {}; hostapd.data.pending_config = {}; hostapd.data.file_fields = { vlan_file: true, wpa_psk_file: true, sae_password_file: true, rxkh_file: true, accept_mac_file: true, deny_mac_file: true, eap_user_file: true, ca_cert: true, server_cert: true, server_cert2: true, private_key: true, private_key2: true, dh_file: true, eap_sim_db: true, }; hostapd.data.iface_fields = { ft_iface: true, upnp_iface: true, snoop_iface: true, bridge: true, iapp_interface: true, }; hostapd.data.bss_info_fields = { // radio hw_mode: true, channel: true, ieee80211ac: true, ieee80211ax: true, // bss bssid: true, ssid: true, wpa: true, wpa_key_mgmt: true, wpa_pairwise: true, auth_algs: true, ieee80211w: true, owe_transition_ifname: true, }; hostapd.data.mld = {}; function iface_remove(cfg) { if (!cfg || !cfg.bss || !cfg.bss[0] || !cfg.bss[0].ifname) return; for (let bss in cfg.bss) if (!bss.mld_ap) wdev_remove(bss.ifname); } function iface_gen_config(config, start_disabled) { let str = `data: ${join("\n", config.radio.data)} channel=${config.radio.channel} `; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; let type = i > 0 ? "bss" : "interface"; let nasid = bss.nasid ?? replace(bss.bssid, ":", ""); let bssid = bss.bssid; if (bss.mld_ap) bssid += "\nmld_addr=" + bss.mld_bssid; str += ` ${type}=${bss.ifname} bssid=${bssid} ${join("\n", bss.data)} nas_identifier=${nasid} `; if (start_disabled) str += ` start_disabled=1 `; } return str; } function iface_freq_info(iface, config, params) { let freq = params.frequency; if (!freq) return null; let sec_offset = params.sec_chan_offset; if (sec_offset != -1 && sec_offset != 1) sec_offset = 0; let width = 0; for (let line in config.radio.data) { if (!sec_offset && match(line, /^ht_capab=.*HT40/)) { sec_offset = null; // auto-detect continue; } let val = match(line, /^(vht_oper_chwidth|he_oper_chwidth)=(\d+)/); if (!val) continue; val = int(val[2]); if (val > width) width = val; } if (freq < 4000) width = 0; return hostapd.freq_info(freq, sec_offset, width); } function iface_add(phy, config, phy_status) { let config_inline = iface_gen_config(config, !!phy_status); let bss = config.bss[0]; let ret = hostapd.add_iface(`bss_config=${phy}:${config_inline}`); if (ret < 0) return false; if (!phy_status) return true; let iface = hostapd.interfaces[phy]; if (!iface) return false; let freq_info = iface_freq_info(iface, config, phy_status); return iface.start(freq_info) >= 0; } function iface_config_macaddr_list(config) { let macaddr_list = {}; for (let name, mld in hostapd.data.mld) if (mld.macaddr) macaddr_list[mld.macaddr] = -1; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (!bss.default_macaddr) macaddr_list[bss.bssid] = i; } return macaddr_list; } function iface_update_supplicant_macaddr(phydev, config) { let macaddr_list = []; for (let name, mld in hostapd.data.mld) if (mld.macaddr) push(macaddr_list, mld.macaddr); for (let bss in config.bss) push(macaddr_list, bss.bssid); ubus.defer("wpa_supplicant", "phy_set_macaddr_list", { phy: phydev.phy, radio: phydev.radio ?? -1, macaddr: macaddr_list }); } function __iface_pending_next(pending, state, ret, data) { let config = pending.config; let phydev = pending.phydev; let phy = pending.phy; let bss = config.bss[0]; if (pending.defer) pending.defer.abort(); delete pending.defer; switch (state) { case "init": iface_update_supplicant_macaddr(phydev, config); return "create_bss"; case "create_bss": if (!bss.mld_ap) { let err = phydev.wdev_add(bss.ifname, { mode: "ap", radio: phydev.radio, }); if (err) { hostapd.printf(`Failed to create ${bss.ifname} on phy ${phy}: ${err}`); return null; } } pending.call("wpa_supplicant", "phy_status", { phy: phydev.phy, radio: phydev.radio ?? -1, }); return "check_phy"; case "check_phy": let phy_status = data; if (phy_status && phy_status.state == "COMPLETED") { if (iface_add(phy, config, phy_status)) return "done"; hostapd.printf(`Failed to bring up phy ${phy} ifname=${bss.ifname} with supplicant provided frequency`); } pending.call("wpa_supplicant", "phy_set_state", { phy: phydev.phy, radio: phydev.radio ?? -1, stop: true }); return "wpas_stopped"; case "wpas_stopped": if (!iface_add(phy, config)) hostapd.printf(`hostapd.add_iface failed for phy ${phy} ifname=${bss.ifname}`); pending.call("wpa_supplicant", "phy_set_state", { phy: phydev.phy, radio: phydev.radio ?? -1, stop: false }); return null; case "done": default: delete hostapd.data.pending_config[phy]; break; } } function iface_pending_next(ret, data) { let pending = true; let cfg = this; while (pending) { try { this.next_state = __iface_pending_next(cfg, this.next_state, ret, data); if (!this.next_state) { __iface_pending_next(cfg, "done"); return; } } catch(e) { hostapd.printf(`Exception: ${e}\n${e.stacktrace[0].context}`); return; } pending = !this.defer; } } function iface_pending_abort() { this.next_state = "done"; this.next(); } function iface_pending_ubus_call(obj, method, arg) { let ubus = hostapd.data.ubus; let pending = this; this.defer = ubus.defer(obj, method, arg, (ret, data) => { delete pending.defer; pending.next(ret, data) }); } const iface_pending_proto = { next: iface_pending_next, call: iface_pending_ubus_call, abort: iface_pending_abort, }; function iface_pending_init(phydev, config) { let phy = phydev.name; let pending = proto({ next_state: "init", phydev: phydev, phy: phy, config: config, next: iface_pending_next, }, iface_pending_proto); hostapd.data.pending_config[phy] = pending; pending.next(); } function iface_macaddr_init(phydev, config, macaddr_list) { let macaddr_data = { num_global: config.num_global_macaddr ?? 1, macaddr_base: config.macaddr_base, mbssid: config.mbssid ?? 0, }; return phydev.macaddr_init(macaddr_list, macaddr_data); } function iface_restart(phydev, config, old_config) { let phy = phydev.name; let pending = hostapd.data.pending_config[phy]; if (pending) pending.abort(); hostapd.remove_iface(phy); iface_remove(old_config); iface_remove(config); if (!config.bss || !config.bss[0]) { hostapd.printf(`No bss for phy ${phy}`); return; } iface_macaddr_init(phydev, config, iface_config_macaddr_list(config)); for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (bss.default_macaddr) bss.bssid = phydev.macaddr_next(); } iface_pending_init(phydev, config); } function array_to_obj(arr, key, start) { let obj = {}; start ??= 0; for (let i = start; i < length(arr); i++) { let cur = arr[i]; obj[cur[key]] = cur; } return obj; } function find_array_idx(arr, key, val) { for (let i = 0; i < length(arr); i++) if (arr[i][key] == val) return i; return -1; } function bss_reload_psk(bss, config, old_config) { if (is_equal(old_config.hash.wpa_psk_file, config.hash.wpa_psk_file)) return; old_config.hash.wpa_psk_file = config.hash.wpa_psk_file; if (!is_equal(old_config, config)) return; let ret = bss.ctrl("RELOAD_WPA_PSK"); ret ??= "failed"; hostapd.printf(`Reload WPA PSK file for bss ${config.ifname}: ${ret}`); } function normalize_rxkhs(txt) { const pat = { sep: "\x20", mac: "([[:xdigit:]]{2}:?){5}[[:xdigit:]]{2}", r0kh_id: "[\x21-\x7e]{1,48}", r1kh_id: "([[:xdigit:]]{2}:?){5}[[:xdigit:]]{2}", key: "[[:xdigit:]]{32,}", r0kh: function() { return "r0kh=" + this.mac + this.sep + this.r0kh_id; }, r1kh: function() { return "r1kh=" + this.mac + this.sep + this.r1kh_id; }, rxkh: function() { return "(" + this.r0kh() + "|" + this.r1kh() + ")" + this.sep + this.key; }, }; let rxkhs = filter( split(txt, "\n"), (line) => match(line, regexp("^" + pat.rxkh() + "$")) ) ?? []; rxkhs = map(rxkhs, function(k) { k = split(k, " ", 3); k[0] = lc(k[0]); if(match(k[0], /^r1kh/)) { k[1] = lc(k[1]); } if(!k[2] = hostapd.rkh_derive_key(k[2])) { return; } return join(" ", k); }); return join("\n", sort(filter(rxkhs, length))); } function bss_reload_rxkhs(bss, config, old_config) { let bss_rxkhs = join("\n", sort(split(bss.ctrl("GET_RXKHS"), "\n"))); let bss_rxkhs_hash = hostapd.sha1(bss_rxkhs); if (is_equal(config.hash.rxkh_file, bss_rxkhs_hash)) { if (is_equal(old_config.hash.rxkh_file, config.hash.rxkh_file)) return; } old_config.hash.rxkh_file = config.hash.rxkh_file; if (!is_equal(old_config, config)) return; let ret = bss.ctrl("RELOAD_RXKHS"); ret ??= "failed"; hostapd.printf(`Reload RxKH file for bss ${config.ifname}: ${ret}`); } function remove_file_fields(config) { return filter(config, (line) => !match(line, /^\s*$/) && !match(line, /^\s*#/) && !hostapd.data.file_fields[split(line, "=")[0]] ); } function bss_remove_file_fields(config) { let new_cfg = {}; for (let key in config) new_cfg[key] = config[key]; new_cfg.data = remove_file_fields(new_cfg.data); new_cfg.hash = {}; for (let key in config.hash) new_cfg.hash[key] = config.hash[key]; delete new_cfg.hash.wpa_psk_file; delete new_cfg.hash.sae_password_file; delete new_cfg.hash.vlan_file; return new_cfg; } function bss_ifindex_list(config) { config = filter(config, (line) => !!hostapd.data.iface_fields[split(line, "=")[0]]); return join(",", map(config, (line) => { try { let file = "/sys/class/net/" + split(line, "=")[1] + "/ifindex"; let val = trim(readfile(file)); return val; } catch (e) { return ""; } })); } function bss_config_hash(config) { return hostapd.sha1(remove_file_fields(config) + bss_ifindex_list(config)); } function bss_find_existing(config, prev_config, prev_hash) { let hash = bss_config_hash(config.data); for (let i = 0; i < length(prev_config.bss); i++) { if (!prev_hash[i] || hash != prev_hash[i]) continue; prev_hash[i] = null; return i; } return -1; } function get_config_bss(name, config, idx) { if (!config.bss[idx]) { hostapd.printf(`Invalid bss index ${idx}`); return; } let ifname = config.bss[idx].ifname; if (!ifname) { hostapd.printf(`Could not find bss ${config.bss[idx].ifname}`); return; } let if_bss = hostapd.bss[name]; if (!if_bss) { hostapd.printf(`Could not find interface ${name} bss list`); return; } return if_bss[ifname]; } function iface_reload_config(name, phydev, config, old_config) { let phy = phydev.name; if (!old_config || !is_equal(old_config.radio, config.radio)) return false; if (is_equal(old_config.bss, config.bss)) return true; if (hostapd.data.pending_config[name]) return false; if (!old_config.bss || !old_config.bss[0]) return false; let iface = hostapd.interfaces[name]; let iface_name = old_config.bss[0].ifname; if (!iface) { hostapd.printf(`Could not find previous interface ${iface_name}`); return false; } if (iface.state() != "ENABLED") { hostapd.printf(`Interface ${iface_name} is not fully configured`); return false; } let first_bss = get_config_bss(name, old_config, 0); if (!first_bss) { hostapd.printf(`Could not find bss of previous interface ${iface_name}`); return false; } let macaddr_list = iface_config_macaddr_list(config); let bss_list = []; let bss_list_cfg = []; let prev_bss_hash = []; for (let bss in old_config.bss) { let hash = bss_config_hash(bss.data); push(prev_bss_hash, bss_config_hash(bss.data)); } // Step 1: find (possibly renamed) interfaces with the same config // and store them in the new order (with gaps) for (let i = 0; i < length(config.bss); i++) { let prev; // For fullmac devices, the first interface needs to be preserved, // since it's treated as the master if (!i && phy_is_fullmac(phy)) { prev = 0; prev_bss_hash[0] = null; } else { prev = bss_find_existing(config.bss[i], old_config, prev_bss_hash); } if (prev < 0) continue; let cur_config = config.bss[i]; let prev_config = old_config.bss[prev]; if (prev_config.force_reload) { delete prev_config.force_reload; continue; } let prev_bss = get_config_bss(name, old_config, prev); if (!prev_bss) return false; // try to preserve MAC address of this BSS by reassigning another // BSS if necessary if ((cur_config.default_macaddr || cur_config.random_macaddr) && cur_config.random_macaddr == prev_config.random_macaddr && cur_config.default_macaddr == prev_config.default_macaddr && !macaddr_list[prev_config.bssid]) { macaddr_list[prev_config.bssid] = i; cur_config.bssid = prev_config.bssid; } bss_list[i] = prev_bss; bss_list_cfg[i] = old_config.bss[prev]; } if (config.mbssid && !bss_list_cfg[0]) { hostapd.printf("First BSS changed with MBSSID enabled"); return false; } // Step 2: if none were found, rename and preserve the first one if (length(bss_list) == 0) { // can't change the bssid of the first bss if (config.bss[0].bssid != old_config.bss[0].bssid) { if (!config.bss[0].default_macaddr) { hostapd.printf(`BSSID of first interface changed: ${lc(old_config.bss[0].bssid)} -> ${lc(config.bss[0].bssid)}`); return false; } config.bss[0].bssid = old_config.bss[0].bssid; } let prev_bss = get_config_bss(name, old_config, 0); if (!prev_bss) return false; macaddr_list[config.bss[0].bssid] = 0; bss_list[0] = prev_bss; bss_list_cfg[0] = old_config.bss[0]; prev_bss_hash[0] = null; } // Step 3: delete all unused old interfaces for (let i = 0; i < length(prev_bss_hash); i++) { if (!prev_bss_hash[i]) continue; let prev_bss = get_config_bss(name, old_config, i); if (!prev_bss) return false; let ifname = old_config.bss[i].ifname; hostapd.printf(`Remove bss '${ifname}' on phy '${name}'`); prev_bss.delete(); if (!old_config.bss[i].mld_ap) wdev_remove(ifname); } // Step 4: rename preserved interfaces, use temporary name on duplicates let rename_list = []; for (let i = 0; i < length(bss_list); i++) { if (!bss_list[i]) continue; let old_ifname = bss_list_cfg[i].ifname; let new_ifname = config.bss[i].ifname; if (old_ifname == new_ifname) continue; if (hostapd.bss[name][new_ifname]) { new_ifname = "tmp_" + substr(hostapd.sha1(new_ifname), 0, 8); push(rename_list, i); } hostapd.printf(`Rename bss ${old_ifname} to ${new_ifname}`); if (!bss_list[i].rename(new_ifname)) { hostapd.printf(`Failed to rename bss ${old_ifname} to ${new_ifname}`); return false; } bss_list_cfg[i].ifname = new_ifname; } // Step 5: rename interfaces with temporary names for (let i in rename_list) { let new_ifname = config.bss[i].ifname; if (!bss_list[i].rename(new_ifname)) { hostapd.printf(`Failed to rename bss to ${new_ifname}`); return false; } bss_list_cfg[i].ifname = new_ifname; } // Step 6: assign BSSID for newly created interfaces macaddr_list = iface_macaddr_init(phydev, config, macaddr_list); for (let i = 0; i < length(config.bss); i++) { if (bss_list[i]) continue; let bsscfg = config.bss[i]; let mac_idx = macaddr_list[bsscfg.bssid]; if (mac_idx < 0) macaddr_list[bsscfg.bssid] = i; if (mac_idx == i) continue; // statically assigned bssid of the new interface is in conflict // with the bssid of a reused interface. reassign the reused interface if (!bsscfg.default_macaddr) { // can't update bssid of the first BSS, need to restart if (!mac_idx < 0) return false; bsscfg = config.bss[mac_idx]; } let addr = phydev.macaddr_next(i); if (!addr) { hostapd.printf(`Failed to generate mac address for phy ${name}`); return false; } bsscfg.bssid = addr; } let config_inline = iface_gen_config(config); // Step 7: fill in the gaps with new interfaces for (let i = 0; i < length(config.bss); i++) { let ifname = config.bss[i].ifname; let bss = bss_list[i]; if (bss) continue; hostapd.printf(`Add bss ${ifname} on phy ${name}`); bss_list[i] = iface.add_bss(config_inline, i); if (!bss_list[i]) { hostapd.printf(`Failed to add new bss ${ifname} on phy ${name}`); return false; } } // Step 8: update interface bss order if (!iface.set_bss_order(bss_list)) { hostapd.printf(`Failed to update BSS order on phy '${name}'`); return false; } // Step 9: update config for (let i = 0; i < length(config.bss); i++) { if (!bss_list_cfg[i]) continue; let ifname = config.bss[i].ifname; let bss = bss_list[i]; if (is_equal(config.bss[i], bss_list_cfg[i])) continue; if (is_equal(bss_remove_file_fields(config.bss[i]), bss_remove_file_fields(bss_list_cfg[i]))) { hostapd.printf(`Update config data files for bss ${ifname}`); if (bss.set_config(config_inline, i, true) < 0) { hostapd.printf(`Could not update config data files for bss ${ifname}`); return false; } else { bss.ctrl("RELOAD_WPA_PSK"); continue; } } bss_reload_psk(bss, config.bss[i], bss_list_cfg[i]); bss_reload_rxkhs(bss, config.bss[i], bss_list_cfg[i]); if (is_equal(config.bss[i], bss_list_cfg[i])) continue; hostapd.printf(`Reload config for bss '${config.bss[0].ifname}' on phy '${name}'`); if (bss.set_config(config_inline, i) < 0) { hostapd.printf(`Failed to set config for bss ${ifname}`); return false; } } return true; } function bss_check_mld(phydev, iface_name, bss) { if (!bss.ifname) return; let mld_data = hostapd.data.mld[bss.ifname]; if (!mld_data || !mld_data.ifname || !mld_data.macaddr) return; bss.mld_bssid = mld_data.macaddr; mld_data.iface[iface_name] = true; if (!access('/sys/class/net/' + bss.ifname, 'x')) mld_data.has_wdev = false; if (mld_data.has_wdev) return true; hostapd.printf(`Create MLD interface ${bss.ifname} on phy ${phydev.name}, radio mask: ${mld_data.radio_mask}`); let err = phydev.wdev_add(bss.ifname, { mode: "ap", macaddr: mld_data.macaddr, radio_mask: mld_data.radio_mask, }); wdev_set_up(bss.ifname, true); if (err) { hostapd.printf(`Failed to create MLD ${bss.ifname} on phy ${phydev.name}: ${err}`); delete mld_data.iface[iface_name]; return; } mld_data.has_wdev = true; return true; } function iface_check_mld(phydev, name, config) { phydev = phy_open(phydev.phy); for (let mld_name, mld_data in hostapd.data.mld) delete mld_data.iface[name]; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (!bss.mld_ap) continue; if (!bss_check_mld(phydev, name, bss)) { hostapd.printf(`Skip MLD interface ${name} on phy ${phydev.name}`); splice(config.bss, i--, 1); } } for (let mld_name, mld_data in hostapd.data.mld) { if (length(mld_data.iface) > 0) continue; hostapd.printf(`Remove MLD interface ${mld_name}`); wdev_remove(mld_name); delete mld_data.has_wdev; } } function iface_config_remove(name, old_config) { hostapd.remove_iface(name); return iface_remove(old_config); } function iface_set_config(name, config) { let old_config = hostapd.data.config[name]; hostapd.data.config[name] = config; let phy = config.phy; let phydev = phy_open(phy, config.radio_idx); if (!phydev) { hostapd.printf(`Failed to open phy ${phy}`); return false; } config.orig_bss = [ ...config.bss ]; iface_check_mld(phydev, name, config); if (!length(config.bss)) return iface_config_remove(name, old_config); try { let ret = iface_reload_config(name, phydev, config, old_config); if (ret) { iface_update_supplicant_macaddr(phydev, config); hostapd.printf(`Reloaded settings for phy ${name}`); return 0; } } catch (e) { hostapd.printf(`Error reloading config: ${e}\n${e.stacktrace[0].context}`); } hostapd.printf(`Restart interface for phy ${name}`); let ret = iface_restart(phydev, config, old_config); return ret; } function config_add_bss(config, name) { let bss = { ifname: name, data: [], hash: {} }; push(config.bss, bss); return bss; } function iface_load_config(phy, radio, filename) { if (radio < 0) radio = null; let config = { phy, radio_idx: radio, radio: { data: [] }, bss: [], orig_file: filename, }; let f = open(filename, "r"); if (!f) return config; let bss; let line; while ((line = rtrim(f.read("line"), "\n")) != null) { let val = split(line, "=", 2); if (!val[0]) continue; if (val[0] == "interface") { bss = config_add_bss(config, val[1]); break; } if (val[0] == "channel") { config.radio.channel = val[1]; continue; } if (val[0] == "#num_global_macaddr") config[substr(val[0], 1)] = int(val[1]); else if (val[0] == "#macaddr_base") config[substr(val[0], 1)] = val[1]; else if (val[0] == "mbssid") config[val[0]] = int(val[1]); push(config.radio.data, line); } while ((line = rtrim(f.read("line"), "\n")) != null) { if (line == "#default_macaddr") bss.default_macaddr = true; if (line == "#random_macaddr") bss.random_macaddr = true; let val = split(line, "=", 2); if (!val[0]) continue; if (val[0] == "bssid") { bss.bssid = lc(val[1]); continue; } if (val[0] == "nas_identifier") bss.nasid = val[1]; if (val[0] == "mld_ap") bss[val[0]] = int(val[1]); if (val[0] == "bss") { bss = config_add_bss(config, val[1]); continue; } if (hostapd.data.file_fields[val[0]]) { if (val[0] == "rxkh_file") { bss.hash[val[0]] = hostapd.sha1(normalize_rxkhs(readfile(val[1]))); } else { bss.hash[val[0]] = hostapd.sha1(readfile(val[1])); } } push(bss.data, line); } f.close(); return config; } function phy_name(phy, radio) { if (!phy) return null; if (radio != null && radio >= 0) phy += "." + radio; return phy; } function bss_config(bss_name) { for (let phy, config in hostapd.data.config) { if (!config) continue; for (let bss in config.bss) if (bss.ifname == bss_name) return [ config, bss ]; } } function mld_rename_bss(data, name) { if (data.ifname == name) return true; // TODO: handle rename gracefully return false; } function mld_add_bss(name, data, phy_list, i) { let config = data.config; if (!config.phy) return; hostapd.printf(`Add MLD interface ${name}`); wdev_remove(name); let phydev = phy_list[config.phy]; if (!phydev) { phydev = phy_open(config.phy, 0); if (!phydev) return; let macaddr_list = {}; let phy_config = hostapd.data.config[phy_name(config.phy, 0)]; if (phy_config) macaddr_list = iface_config_macaddr_list(phy_config); iface_macaddr_init(phydev, data.config, macaddr_list); phy_list[config.phy] = phydev; } data.macaddr = config.macaddr; if (!data.macaddr) { data.macaddr = phydev.macaddr_next(); data.default_macaddr = true; } let radio_mask = 0; for (let r in config.radios) if (r != null) radio_mask |= 1 << r; data.radio_mask = radio_mask; data.ifname = name; } function mld_find_matching_config(list, config) { for (let name, data in list) if (is_equal(data.config, config)) return name; } function mld_reload_interface(name) { let config = hostapd.data.config[name]; if (!config) return; config = { ...config }; config.bss = config.orig_bss; iface_set_config(name, config); } function mld_set_config(config) { let prev_mld = { ...hostapd.data.mld }; let new_mld = {}; let phy_list = {}; let new_config = !length(prev_mld); hostapd.printf(`Set MLD config: ${keys(config)}`); // find renamed/new interfaces for (let name, data in config) { let prev = mld_find_matching_config(prev_mld, data); if (prev) { let data = prev_mld[prev]; if (mld_rename_bss(data, name)) { new_mld[name] = data; delete prev_mld[prev]; continue; } } new_mld[name] = { config: data, iface: {}, }; } let reload_iface = {}; for (let name, data in prev_mld) { delete hostapd.data.mld[name]; if (!data.ifname) continue; for (let iface, bss_list in hostapd.bss) { if (!bss_list[name]) continue; reload_iface[iface] = true; } } for (let name in reload_iface) mld_reload_interface(name); for (let name, data in prev_mld) { if (data.ifname) hostapd.printf(`Remove MLD interface ${name}`); wdev_remove(name); } // add new interfaces hostapd.data.mld = new_mld; for (let name, data in new_mld) if (!data.ifname) mld_add_bss(name, data, phy_list); if (!new_config) return; hostapd.printf(`Reload all interfaces`); for (let name in hostapd.data.config) mld_reload_interface(name); } let main_obj = { reload: { args: { phy: "", radio: 0, }, call: function(req) { let phy_list = req.args.phy ? [ phy_name(req.args.phy, req.args.radio) ] : keys(hostapd.data.config); for (let phy_name in phy_list) { let phy = hostapd.data.config[phy_name]; let config = iface_load_config(phy.phy, phy.radio_idx, phy.orig_file); iface_set_config(phy_name, config); } return 0; } }, apsta_state: { args: { phy: "", radio: 0, up: true, frequency: 0, sec_chan_offset: 0, csa: true, csa_count: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (req.args.up == null || !phy) return libubus.STATUS_INVALID_ARGUMENT; let config = hostapd.data.config[phy]; if (!config || !config.bss || !config.bss[0] || !config.bss[0].ifname) return 0; let iface = hostapd.interfaces[phy]; if (!iface) return 0; if (!req.args.up) { iface.stop(); return 0; } let freq_info; if (req.args.frequency) { freq_info = iface_freq_info(iface, config, req.args); if (!freq_info) return libubus.STATUS_UNKNOWN_ERROR; if (req.args.csa) { freq_info.csa_count = req.args.csa_count ?? 10; let ret = iface.switch_channel(freq_info); if (!ret) return libubus.STATUS_UNKNOWN_ERROR; return 0; } } let ret = iface.start(freq_info); if (!ret) return libubus.STATUS_UNKNOWN_ERROR; return 0; } }, config_get_macaddr_list: { args: { phy: "", radio: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; let ret = { macaddr: [], }; let config = hostapd.data.config[phy]; if (!config) return ret; ret.macaddr = map(config.bss, (bss) => bss.bssid); return ret; } }, switch_channel: { args: { phy: "", radio: 0, csa_count: 0, sec_channel: 0, oper_chwidth: 0, frequency: 0, center_freq1: 0, center_freq2: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!req.args.frequency || !phy) return libubus.STATUS_INVALID_ARGUMENT; let iface = hostapd.interfaces[phy]; if (!iface) return libubus.STATUS_NOT_FOUND; req.args.csa_count ??= 10; let ret = iface.switch_channel(req.args); if (!ret) return libubus.STATUS_UNKNOWN_ERROR; return 0; }, }, mld_set: { args: { config: {} }, call: function(req) { if (!req.args.config) return libubus.STATUS_INVALID_ARGUMENT; mld_set_config(req.args.config); return { pid: hostapd.getpid() }; } }, config_reset: { args: { }, call: function(req) { for (let name in hostapd.data.config) iface_set_config(name); mld_set_config({}); return 0; } }, config_set: { args: { phy: "", radio: 0, config: "", prev_config: "", }, call: function(req) { let phy = req.args.phy; let radio = req.args.radio; let name = phy_name(phy, radio); let file = req.args.config; let prev_file = req.args.prev_config; if (!phy) return libubus.STATUS_INVALID_ARGUMENT; if (prev_file && !hostapd.data.config[name]) { let config = iface_load_config(phy, radio, prev_file); if (config) config.radio.data = []; hostapd.data.config[name] = config; } let config = iface_load_config(phy, radio, file); hostapd.printf(`Set new config for phy ${name}: ${file}`); iface_set_config(name, config); if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("reload", { phy, radio }); return { pid: hostapd.getpid() }; } }, config_add: { args: { iface: "", config: "", }, call: function(req) { if (!req.args.iface || !req.args.config) return libubus.STATUS_INVALID_ARGUMENT; if (hostapd.add_iface(`bss_config=${req.args.iface}:${req.args.config}`) < 0) return libubus.STATUS_INVALID_ARGUMENT; return { pid: hostapd.getpid() }; } }, config_remove: { args: { iface: "" }, call: function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; hostapd.remove_iface(req.args.iface); return 0; } }, bss_info: { args: { iface: "" }, call: function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; let config = bss_config(req.args.iface); if (!config) return libubus.STATUS_NOT_FOUND; let bss = config[1]; config = config[0]; let ret = {}; for (let line in [ ...config.radio.data, ...bss.data ]) { let fields = split(line, "=", 2); let name = fields[0]; if (hostapd.data.bss_info_fields[name]) ret[name] = fields[1]; } return ret; } }, }; hostapd.data.ubus = ubus; hostapd.data.obj = ubus.publish("hostapd", main_obj); let auth_obj = {}; hostapd.data.auth_obj = ubus.publish("hostapd-auth", auth_obj); hostapd.udebug_set("hostapd", hostapd.data.ubus); function bss_event(type, name, data) { let ubus = hostapd.data.ubus; data ??= {}; data.name = name; hostapd.data.obj.notify(`bss.${type}`, data, null, null, null, -1); ubus.call("service", "event", { type: `hostapd.${name}.${type}`, data: {} }); } return { shutdown: function() { for (let phy in hostapd.data.config) iface_set_config(phy); hostapd.udebug_set(null); hostapd.ubus.disconnect(); }, bss_create: function(phy, name, obj) { phy = hostapd.data.config[phy]; if (!phy) return; if (phy.radio_idx != null && phy.radio_idx >= 0) wdev_set_radio_mask(name, 1 << phy.radio_idx); }, bss_add: function(phy, name, obj) { bss_event("add", name); }, bss_reload: function(phy, name, obj, reconf) { bss_event("reload", name, { reconf: reconf != 0 }); }, bss_remove: function(phy, name, obj) { bss_event("remove", name); }, sta_auth: function(iface, sta) { let msg = { iface, sta }; let ret = {}; let data_cb = (type, data) => { ret = { ...ret, ...data }; }; if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("sta_auth", msg, data_cb, null, null, 1000); return ret; }, sta_connected: function(iface, sta, data) { let msg = { iface, sta, ...data }; let ret = {}; let data_cb = (type, data) => { ret = { ...ret, ...data }; }; if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("sta_connected", msg, data_cb, null, null, 1000); return ret; }, }; 07070100E8162C000081A400000000000000000000000169B8AF0D000024B3000000080000000100000000000000000000001B00000000usr/share/hostap/common.ucimport * as nl80211 from "nl80211"; import * as rtnl from "rtnl"; import { readfile, glob, basename, readlink, open } from "fs"; const iftypes = { ap: nl80211.const.NL80211_IFTYPE_AP, mesh: nl80211.const.NL80211_IFTYPE_MESH_POINT, sta: nl80211.const.NL80211_IFTYPE_STATION, adhoc: nl80211.const.NL80211_IFTYPE_ADHOC, monitor: nl80211.const.NL80211_IFTYPE_MONITOR, }; const mesh_params = { mesh_retry_timeout: "retry_timeout", mesh_confirm_timeout: "confirm_timeout", mesh_holding_timeout: "holding_timeout", mesh_max_peer_links: "max_peer_links", mesh_max_retries: "max_retries", mesh_ttl: "ttl", mesh_element_ttl: "element_ttl", mesh_auto_open_plinks: "auto_open_plinks", mesh_hwmp_max_preq_retries: "hwmp_max_preq_retries", mesh_path_refresh_time: "path_refresh_time", mesh_min_discovery_timeout: "min_discovery_timeout", mesh_hwmp_active_path_timeout: "hwmp_active_path_timeout", mesh_hwmp_preq_min_interval: "hwmp_preq_min_interval", mesh_hwmp_net_diameter_traversal_time: "hwmp_net_diam_trvs_time", mesh_hwmp_rootmode: "hwmp_rootmode", mesh_hwmp_rann_interval: "hwmp_rann_interval", mesh_gate_announcements: "gate_announcements", mesh_sync_offset_max_neighor: "sync_offset_max_neighbor", mesh_rssi_threshold: "rssi_threshold", mesh_hwmp_active_path_to_root_timeout: "hwmp_path_to_root_timeout", mesh_hwmp_root_interval: "hwmp_root_interval", mesh_hwmp_confirmation_interval: "hwmp_confirmation_interval", mesh_awake_window: "awake_window", mesh_plink_timeout: "plink_timeout", mesh_fwding: "forwarding", mesh_power_mode: "power_mode", mesh_nolearn: "nolearn" }; function wdev_remove(name) { nl80211.request(nl80211.const.NL80211_CMD_DEL_INTERFACE, 0, { dev: name }); } function __phy_is_fullmac(phyidx) { let data = nl80211.request(nl80211.const.NL80211_CMD_GET_WIPHY, 0, { wiphy: phyidx }); return !data.software_iftypes.monitor; } function phy_is_fullmac(phy) { let phyidx = int(trim(readfile(`/sys/class/ieee80211/${phy}/index`))); return __phy_is_fullmac(phyidx); } function find_reusable_wdev(phyidx) { if (!__phy_is_fullmac(phyidx)) return null; let data = nl80211.request( nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP, { wiphy: phyidx }); for (let res in data) if (trim(readfile(`/sys/class/net/${res.ifname}/operstate`)) == "down") return res.ifname; return null; } function wdev_set_radio_mask(name, mask) { nl80211.request(nl80211.const.NL80211_CMD_SET_INTERFACE, 0, { dev: name, vif_radio_mask: mask }); } function wdev_create(phy, name, data) { let phyidx = int(readfile(`/sys/class/ieee80211/${phy}/index`)); wdev_remove(name); if (!iftypes[data.mode]) return `Invalid mode: ${data.mode}`; let req = { wiphy: phyidx, ifname: name, iftype: iftypes[data.mode], }; if (data["4addr"]) req["4addr"] = data["4addr"]; if (data.macaddr) req.mac = data.macaddr; if (data.radio_mask > 0) req.vif_radio_mask = data.radio_mask; else if (data.radio != null && data.radio >= 0) req.vif_radio_mask = 1 << data.radio; nl80211.error(); let reuse_ifname = find_reusable_wdev(phyidx); if (reuse_ifname && (reuse_ifname == name || rtnl.request(rtnl.const.RTM_SETLINK, 0, { dev: reuse_ifname, ifname: name}) != false)) { req.dev = req.ifname; delete req.ifname; nl80211.request(nl80211.const.NL80211_CMD_SET_INTERFACE, 0, req); } else { nl80211.request( nl80211.const.NL80211_CMD_NEW_INTERFACE, nl80211.const.NLM_F_CREATE, req); } let error = nl80211.error(); if (error) return error; if (data.powersave != null) { nl80211.request(nl80211.const.NL80211_CMD_SET_POWER_SAVE, 0, { dev: name, ps_state: data.powersave ? 1 : 0}); } return null; } function wdev_set_mesh_params(name, data) { let mesh_cfg = {}; for (let key in mesh_params) { let val = data[key]; if (val == null) continue; mesh_cfg[mesh_params[key]] = int(val); } if (!length(mesh_cfg)) return null; nl80211.request(nl80211.const.NL80211_CMD_SET_MESH_CONFIG, 0, { dev: name, mesh_params: mesh_cfg }); return nl80211.error(); } function wdev_set_up(name, up) { rtnl.request(rtnl.const.RTM_SETLINK, 0, { dev: name, change: 1, flags: up ? 1 : 0 }); } function phy_sysfs_file(phy, name) { return trim(readfile(`/sys/class/ieee80211/${phy}/${name}`)); } function macaddr_split(str) { return map(split(str, ":"), (val) => hex(val)); } function macaddr_join(addr) { return join(":", map(addr, (val) => sprintf("%02x", val))); } function wdev_macaddr(wdev) { return trim(readfile(`/sys/class/net/${wdev}/address`)); } const phy_proto = { macaddr_init: function(used, options) { this.macaddr_options = options ?? {}; this.macaddr_list = {}; if (type(used) == "object") for (let addr in used) this.macaddr_list[addr] = used[addr]; else for (let addr in used) this.macaddr_list[addr] = -1; this.for_each_wdev((wdev) => { let macaddr = wdev_macaddr(wdev); this.macaddr_list[macaddr] ??= -1; }); return this.macaddr_list; }, macaddr_generate: function(data) { let phy = this.phy; let radio_idx = this.radio; let idx = int(data.id ?? 0); let mbssid = int(data.mbssid ?? 0) > 0; let num_global = int(data.num_global ?? 1); let use_global = !mbssid && idx < num_global; let base_addr = phy_sysfs_file(phy, "macaddress"); if (!base_addr) return null; let base_mask = phy_sysfs_file(phy, "address_mask"); if (!base_mask) return null; if (base_mask == "00:00:00:00:00:00") base_mask = "ff:ff:ff:ff:ff:ff"; if (data.macaddr_base) base_addr = data.macaddr_base; else if (base_mask == "ff:ff:ff:ff:ff:ff" && (radio_idx > 0 || idx >= num_global)) { let addrs = split(phy_sysfs_file(phy, "addresses"), "\n"); if (radio_idx != null) { if (radio_idx && radio_idx < length(addrs)) base_addr = addrs[radio_idx]; else idx += radio_idx * 16; } else { if (idx < length(addrs)) return addrs[idx]; } } if (!idx && !mbssid) return base_addr; let addr = macaddr_split(base_addr); let mask = macaddr_split(base_mask); let type; if (mbssid) type = "b5"; else if (use_global) type = "add"; else if (mask[0] > 0) type = "b1"; else if (mask[5] < 0xff) type = "b5"; else type = "add"; switch (type) { case "b1": if (!(addr[0] & 2)) idx--; addr[0] |= 2; addr[0] ^= idx << 2; break; case "b5": if (mbssid) addr[0] |= 2; addr[5] ^= idx; break; default: for (let i = 5; i > 0; i--) { addr[i] += idx; if (addr[i] < 256) break; addr[i] %= 256; } break; } return macaddr_join(addr); }, macaddr_next: function(val) { let data = this.macaddr_options ?? {}; let list = this.macaddr_list; for (let i = 0; i < 32; i++) { data.id = i; let mac = this.macaddr_generate(data); if (!mac) return null; if (list[mac] != null) continue; list[mac] = val != null ? val : -1; return mac; } }, wdev_add: function(name, data) { let phydev = this; wdev_create(this.phy, name, { ...data, radio: this.radio, }); }, for_each_wdev: function(cb) { let wdevs = nl80211.request( nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP, { wiphy: this.idx } ); let mac_wdev = {}; for (let wdev in wdevs) { if (wdev.iftype == nl80211.const.NL80211_IFTYPE_AP_VLAN) continue; if (this.radio != null && wdev.vif_radio_mask != null && wdev.vif_radio_mask != (1 << this.radio)) continue; mac_wdev[wdev.mac] = wdev; } for (let wdev in wdevs) { if (!mac_wdev[wdev.mac]) continue; cb(wdev.ifname); } } }; function phy_open(phy, radio) { let phyidx = readfile(`/sys/class/ieee80211/${phy}/index`); if (!phyidx) return null; let name = phy; if (radio === "" || radio < 0) radio = null; if (radio != null) name += "." + radio; return proto({ phy, name, radio, idx: int(phyidx), }, phy_proto); } const vlist_proto = { update: function(values, arg) { let data = this.data; let cb = this.cb; let seq = { }; let new_data = {}; let old_data = {}; this.data = new_data; if (type(values) == "object") { for (let key in values) { old_data[key] = data[key]; new_data[key] = values[key]; delete data[key]; } } else { for (let val in values) { let cur_key = val[0]; let cur_obj = val[1]; old_data[cur_key] = data[cur_key]; new_data[cur_key] = val[1]; delete data[cur_key]; } } for (let key in data) { cb(null, data[key], arg); delete data[key]; } for (let key in new_data) cb(new_data[key], old_data[key], arg); } }; function is_equal(val1, val2) { let t1 = type(val1); if (t1 != type(val2)) return false; if (t1 == "array") { if (length(val1) != length(val2)) return false; for (let i = 0; i < length(val1); i++) if (!is_equal(val1[i], val2[i])) return false; return true; } else if (t1 == "object") { for (let key in val1) if (!is_equal(val1[key], val2[key])) return false; for (let key in val2) if (val1[key] == null) return false; return true; } else { return val1 == val2; } } function vlist_new(cb) { return proto({ cb: cb, data: {} }, vlist_proto); } export { wdev_remove, wdev_create, wdev_set_mesh_params, wdev_set_radio_mask, wdev_set_up, is_equal, vlist_new, phy_is_fullmac, phy_open }; 07070100E812D6000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001200000000usr/share/dnsmasq07070100E812D80000818000000000000000000000000169B8AF0D00000137000000080000000100000000000000000000001F00000000usr/share/dnsmasq/rfc6761.conf# RFC6761 included configuration file for dnsmasq # # includes a list of domains that should not be forwarded to Internet name servers # to reduce burden on them, asking questions that they won't know the answer to. server=/bind/ server=/invalid/ server=/local/ server=/localhost/ server=/onion/ server=/test/ 07070100E812D70000818000000000000000000000000169B8AF0D00000154000000080000000100000000000000000000002900000000usr/share/dnsmasq/dhcpbogushostname.conf# dhcpbogushostname.conf included configuration file for dnsmasq # # includes a list of hostnames that should not be associated with dhcp leases # in response to CERT VU#598349 # file included by default, option dhcpbogushostname 0 to disable dhcp-name-match=set:dhcp_bogus_hostname,localhost dhcp-name-match=set:dhcp_bogus_hostname,wpad 07070100E8150B000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001500000000usr/share/nftables.d07070100E8150C000081A400000000000000000000000169B8AF0D000003DF000000080000000100000000000000000000001C00000000usr/share/nftables.d/READMEThis directory may contain partial nftables files which are automatically included into the nftables ruleset generated by the fw4 program. Only accessible files (no broken symlinks, no files with insufficient permissions) with an `*.nft` file extension are considered. The include position of each file within the overall ruleset is derived from the file path: - Files in ./ruleset-pre/ and ./ruleset-post/ are included before and after the `table inet fw4 { ... }` declaration respectively - Files in ./table-pre/ and ./table-post/ are included before the first chain and after the last chain declaration within the fw4 table respectively - Files in ./chain-pre/${chain}/ and ./chain-post/${chain}/ are included before the first and after the last rule within the mentioned chain of the fw4 table respectively Automatic inclusion of these files can be disabled by setting the global `auto_includes` option to `0` within the defaults section of /etc/config/firewall. 07070100E81624000081A400000000000000000000000169B8AF0D00001413000000080000000100000000000000000000001700000000usr/share/iso3166.json{ "00": "World", "AD": "Andorra", "AE": "United Arab Emirates", "AF": "Afghanistan", "AG": "Antigua and Barbuda", "AI": "Anguilla", "AL": "Albania", "AM": "Armenia", "AN": "Netherlands Antilles", "AO": "Angola", "AQ": "Antarctica", "AR": "Argentina", "AS": "American Samoa", "AT": "Austria", "AU": "Australia", "AW": "Aruba", "AX": "Aland Islands", "AZ": "Azerbaijan", "BA": "Bosnia and Herzegovina", "BB": "Barbados", "BD": "Bangladesh", "BE": "Belgium", "BF": "Burkina Faso", "BG": "Bulgaria", "BH": "Bahrain", "BI": "Burundi", "BJ": "Benin", "BL": "Saint Barthelemy", "BM": "Bermuda", "BN": "Brunei Darussalam", "BO": "Bolivia", "BR": "Brazil", "BS": "Bahamas", "BT": "Bhutan", "BV": "Bouvet Island", "BW": "Botswana", "BY": "Belarus", "BZ": "Belize", "CA": "Canada", "CC": "Cocos (Keeling) Islands", "CD": "Congo", "CF": "Central African Republic", "CG": "Congo", "CH": "Switzerland", "CI": "Cote d'Ivoire", "CK": "Cook Islands", "CL": "Chile", "CM": "Cameroon", "CN": "China", "CO": "Colombia", "CR": "Costa Rica", "CU": "Cuba", "CV": "Cape Verde", "CX": "Christmas Island", "CY": "Cyprus", "CZ": "Czech Republic", "DE": "Germany", "DJ": "Djibouti", "DK": "Denmark", "DM": "Dominica", "DO": "Dominican Republic", "DZ": "Algeria", "EC": "Ecuador", "EE": "Estonia", "EG": "Egypt", "EH": "Western Sahara", "ER": "Eritrea", "ES": "Spain", "ET": "Ethiopia", "FI": "Finland", "FJ": "Fiji", "FK": "Falkland Islands", "FM": "Micronesia", "FO": "Faroe Islands", "FR": "France", "GA": "Gabon", "GB": "United Kingdom", "GD": "Grenada", "GE": "Georgia", "GF": "French Guiana", "GG": "Guernsey", "GH": "Ghana", "GI": "Gibraltar", "GL": "Greenland", "GM": "Gambia", "GN": "Guinea", "GP": "Guadeloupe", "GQ": "Equatorial Guinea", "GR": "Greece", "GS": "South Georgia", "GT": "Guatemala", "GU": "Guam", "GW": "Guinea-Bissau", "GY": "Guyana", "HK": "Hong Kong", "HM": "Heard and McDonald Islands", "HN": "Honduras", "HR": "Croatia", "HT": "Haiti", "HU": "Hungary", "ID": "Indonesia", "IE": "Ireland", "IL": "Israel", "IM": "Isle of Man", "IN": "India", "IO": "Chagos Islands", "IQ": "Iraq", "IR": "Iran", "IS": "Iceland", "IT": "Italy", "JE": "Jersey", "JM": "Jamaica", "JO": "Jordan", "JP": "Japan", "KE": "Kenya", "KG": "Kyrgyzstan", "KH": "Cambodia", "KI": "Kiribati", "KM": "Comoros", "KN": "Saint Kitts and Nevis", "KP": "North Korea", "KR": "South Korea", "KW": "Kuwait", "KY": "Cayman Islands", "KZ": "Kazakhstan", "LA": "Laos", "LB": "Lebanon", "LC": "Saint Lucia", "LI": "Liechtenstein", "LK": "Sri Lanka", "LR": "Liberia", "LS": "Lesotho", "LT": "Lithuania", "LU": "Luxembourg", "LV": "Latvia", "LY": "Libyan Arab Jamahiriya", "MA": "Morocco", "MC": "Monaco", "MD": "Moldova", "ME": "Montenegro", "MF": "Saint Martin (French part)", "MG": "Madagascar", "MH": "Marshall Islands", "MK": "Macedonia", "ML": "Mali", "MM": "Myanmar", "MN": "Mongolia", "MO": "Macao", "MP": "Northern Mariana Islands", "MQ": "Martinique", "MR": "Mauritania", "MS": "Montserrat", "MT": "Malta", "MU": "Mauritius", "MV": "Maldives", "MW": "Malawi", "MX": "Mexico", "MY": "Malaysia", "MZ": "Mozambique", "NA": "Namibia", "NC": "New Caledonia", "NE": "Niger", "NF": "Norfolk Island", "NG": "Nigeria", "NI": "Nicaragua", "NL": "Netherlands", "NO": "Norway", "NP": "Nepal", "NR": "Nauru", "NU": "Niue", "NZ": "New Zealand", "OM": "Oman", "PA": "Panama", "PE": "Peru", "PF": "French Polynesia", "PG": "Papua New Guinea", "PH": "Philippines", "PK": "Pakistan", "PL": "Poland", "PM": "Saint Pierre and Miquelon", "PN": "Pitcairn", "PR": "Puerto Rico", "PS": "Palestinian Territory", "PT": "Portugal", "PW": "Palau", "PY": "Paraguay", "QA": "Qatar", "RE": "Reunion", "RO": "Romania", "RS": "Serbia", "RU": "Russian Federation", "RW": "Rwanda", "SA": "Saudi Arabia", "SB": "Solomon Islands", "SC": "Seychelles", "SD": "Sudan", "SE": "Sweden", "SG": "Singapore", "SH": "St. Helena and Dependencies", "SI": "Slovenia", "SJ": "Svalbard and Jan Mayen", "SK": "Slovakia", "SL": "Sierra Leone", "SM": "San Marino", "SN": "Senegal", "SO": "Somalia", "SR": "Suriname", "ST": "Sao Tome and Principe", "SV": "El Salvador", "SY": "Syrian Arab Republic", "SZ": "Swaziland", "TC": "Turks and Caicos Islands", "TD": "Chad", "TF": "French Southern Territories", "TG": "Togo", "TH": "Thailand", "TJ": "Tajikistan", "TK": "Tokelau", "TL": "Timor-Leste", "TM": "Turkmenistan", "TN": "Tunisia", "TO": "Tonga", "TR": "Turkey", "TT": "Trinidad and Tobago", "TV": "Tuvalu", "TW": "Taiwan", "TZ": "Tanzania", "UA": "Ukraine", "UG": "Uganda", "UM": "U.S. Minor Outlying Islands", "US": "United States", "UY": "Uruguay", "UZ": "Uzbekistan", "VA": "Vatican City State", "VC": "St. Vincent and Grenadines", "VE": "Venezuela", "VG": "Virgin Islands, British", "VI": "Virgin Islands, U.S.", "VN": "Viet Nam", "VU": "Vanuatu", "WF": "Wallis and Futuna", "WS": "Samoa", "YE": "Yemen", "YT": "Mayotte", "ZA": "South Africa", "ZM": "Zambia", "ZW": "Zimbabwe" } 07070100E80F96000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001200000000usr/share/libubox07070100E80F98000081A400000000000000000000000169B8AF0D00001D91000000080000000100000000000000000000001A00000000usr/share/libubox/jshn.sh# functions for parsing and generating json _json_get_var() { # dest=$1 # var=$2 eval "$1=\"\$${JSON_PREFIX}$2\"" } _json_set_var() { # var=$1 local ___val="$2" eval "${JSON_PREFIX}$1=\"\$___val\"" } __jshn_raw_append() { # var=$1 local value="$2" local sep="${3:- }" eval "export -- \"$1=\${$1:+\${$1}\${value:+\$sep}}\$value\"" } _jshn_append() { # var=$1 local _a_value="$2" eval "${JSON_PREFIX}$1=\"\${${JSON_PREFIX}$1}\${${JSON_PREFIX}$1:+ }\$_a_value\"" } _get_var() { # var=$1 # value=$2 eval "$1=\"\$$2\"" } _set_var() { # var=$1 local __val="$2" eval "$1=\"\$__val\"" } _json_inc() { # var=$1 # dest=$2 let "${JSON_PREFIX}$1 += 1" "$2 = ${JSON_PREFIX}$1" } _json_add_generic() { # type=$1 # name=$2 # value=$3 # cur=$4 local var if [ "${4%%[0-9]*}" = "J_A" ]; then _json_inc "S_$4" var else var="${2//[^a-zA-Z0-9_]/_}" [[ "$var" == "$2" ]] || export -- "${JSON_PREFIX}N_${4}_${var}=$2" fi export -- \ "${JSON_PREFIX}${4}_$var=$3" \ "${JSON_PREFIX}T_${4}_$var=$1" _jshn_append "JSON_UNSET" "${4}_$var" _jshn_append "K_$4" "$var" } _json_add_table() { # name=$1 # type=$2 # itype=$3 local cur seq _json_get_var cur JSON_CUR _json_inc JSON_SEQ seq local table="J_$3$seq" _json_set_var "U_$table" "$cur" export -- "${JSON_PREFIX}K_$table=" unset "${JSON_PREFIX}S_$table" _json_set_var JSON_CUR "$table" _jshn_append "JSON_UNSET" "$table" _json_add_generic "$2" "$1" "$table" "$cur" } _json_close_table() { local _s_cur _json_get_var _s_cur JSON_CUR _json_get_var "${JSON_PREFIX}JSON_CUR" "U_$_s_cur" } json_set_namespace() { local _new="$1" local _old="$2" [ -n "$_old" ] && _set_var "$_old" "$JSON_PREFIX" JSON_PREFIX="$_new" } json_cleanup() { local unset tmp _json_get_var unset JSON_UNSET for tmp in $unset J_V; do unset \ ${JSON_PREFIX}U_$tmp \ ${JSON_PREFIX}K_$tmp \ ${JSON_PREFIX}S_$tmp \ ${JSON_PREFIX}T_$tmp \ ${JSON_PREFIX}N_$tmp \ ${JSON_PREFIX}$tmp done unset \ ${JSON_PREFIX}JSON_SEQ \ ${JSON_PREFIX}JSON_CUR \ ${JSON_PREFIX}JSON_UNSET } json_init() { json_cleanup export -n ${JSON_PREFIX}JSON_SEQ=0 export -- \ ${JSON_PREFIX}JSON_CUR="J_V" \ ${JSON_PREFIX}K_J_V= } json_add_object() { _json_add_table "$1" object T } json_close_object() { _json_close_table } json_add_array() { _json_add_table "$1" array A } json_close_array() { _json_close_table } json_add_string() { local cur _json_get_var cur JSON_CUR _json_add_generic string "$1" "$2" "$cur" } json_push_string() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic string "" "$1" "$cur" } json_add_int() { local cur _json_get_var cur JSON_CUR _json_add_generic int "$1" "$2" "$cur" } json_push_int() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic int "" "$1" "$cur" } json_add_boolean() { local cur _json_get_var cur JSON_CUR _json_add_generic boolean "$1" "$2" "$cur" } json_push_boolean() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic boolean "" "$1" "$cur" } json_add_double() { local cur _json_get_var cur JSON_CUR _json_add_generic double "$1" "$2" "$cur" } json_push_double() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic double "" "$1" "$cur" } json_add_null() { local cur _json_get_var cur JSON_CUR _json_add_generic null "$1" "" "$cur" } json_push_null() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic null "" "" "$cur" } json_add_fields() { while [ "$#" -gt 0 ]; do local field="$1" shift local name="${field%%=*}" local val="${field#*=}" [ "$name" != "$val" ] || val="" local type="${name#*:}" [ "$type" != "$name" ] || type=string name="${name%%:*}" case "$type" in string|int|boolean|double) local cur _json_get_var cur JSON_CUR _json_add_generic "$type" "$name" "$val" "$cur" ;; esac done } json_get_index() { local __dest="$1" local __cur __parent __seq _json_get_var __cur JSON_CUR _json_get_var __parent "U_$__cur" if [ "${__parent%%[0-9]*}" != "J_A" ]; then [ -n "$_json_no_warning" ] || \ echo "WARNING: Not inside an array" >&2 return 1 fi __seq="S_$__parent" eval "export -- \"$__dest=\${$__seq}\"; [ -n \"\${$__seq+x}\" ]" } # functions read access to json variables json_compact() { JSON_NONEWLINE=1 JSON_INDENT= } json_pretty() { JSON_NONEWLINE= JSON_INDENT=1 } json_load() { eval "`jshn -r "$1"`" } json_load_file() { eval "`jshn -R "$1"`" } json_dump() { jshn "$@" ${JSON_PREFIX:+-p "$JSON_PREFIX"} ${JSON_NONEWLINE:+-n} ${JSON_INDENT:+-i} -w } json_get_type() { # target=$2 local __dest="$1" local __cur _json_get_var __cur JSON_CUR local __var="${JSON_PREFIX}T_${__cur}_${2//[^a-zA-Z0-9_]/_}" eval "export -- \"$__dest=\${$__var}\"; [ -n \"\${$__var+x}\" ]" } json_get_keys() { local __dest="$1" local _tbl_cur if [ -n "$2" ]; then json_get_var _tbl_cur "$2" else _json_get_var _tbl_cur JSON_CUR fi local __var="${JSON_PREFIX}K_${_tbl_cur}" eval "export -- \"$__dest=\${$__var}\"; [ -n \"\${$__var+x}\" ]" } json_get_values() { local _v_dest="$1" local _v_keys _v_val _select= local _json_no_warning=1 unset "$_v_dest" [ -n "$2" ] && { json_select "$2" || return 1 _select=1 } json_get_keys _v_keys set -- $_v_keys while [ "$#" -gt 0 ]; do json_get_var _v_val "$1" __jshn_raw_append "$_v_dest" "$_v_val" shift done [ -n "$_select" ] && json_select .. return 0 } json_get_var() { local __dest="$1" local __cur _json_get_var __cur JSON_CUR local __var="${JSON_PREFIX}${__cur}_${2//[^a-zA-Z0-9_]/_}" eval "export -- \"$__dest=\${$__var:-$3}\"; [ -n \"\${$__var+x}\${3+x}\" ]" } json_get_vars() { while [ "$#" -gt 0 ]; do local _var="$1"; shift if [ "$_var" != "${_var#*:}" ]; then json_get_var "${_var%%:*}" "${_var%%:*}" "${_var#*:}" else json_get_var "$_var" "$_var" fi done } json_select() { local target="$1" local type local cur [ -z "$target" ] && { _json_set_var JSON_CUR "J_V" return 0 } [[ "$target" == ".." ]] && { _json_get_var cur JSON_CUR _json_get_var cur "U_$cur" _json_set_var JSON_CUR "$cur" return 0 } json_get_type type "$target" case "$type" in object|array) json_get_var cur "$target" _json_set_var JSON_CUR "$cur" ;; *) [ -n "$_json_no_warning" ] || \ echo "WARNING: Variable '$target' does not exist or is not an array/object" >&2 return 1 ;; esac } json_is_a() { # target=$1 # type=$2 local type json_get_type type "$1" [ "$type" = "$2" ] } json_for_each_item() { [ "$#" -ge 2 ] || return 0 local function="$1"; shift local target="$1"; shift local type val json_get_type type "$target" case "$type" in object|array) local keys key json_select "$target" json_get_keys keys for key in $keys; do json_get_var val "$key" eval "$function \"\$val\" \"\$key\" \"\$@\"" done json_select .. ;; *) json_get_var val "$target" eval "$function \"\$val\" \"\" \"\$@\"" ;; esac } 07070100E807B1000041ED00000000000000000000000469B8AF0D00000000000000080000000100000000000000000000000F00000000usr/share/rpcd07070100E807C5000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001500000000usr/share/rpcd/acl.d07070100E816EC000081A400000000000000000000000169B8AF0D000003F6000000080000000100000000000000000000002400000000usr/share/rpcd/acl.d/luci-base.json{ "unauthenticated": { "description": "Allow system feature probing", "read": { "ubus": { "luci": [ "getFeatures" ] } } }, "luci-base": { "description": "Grant access to basic LuCI procedures", "read": { "file": { "/": [ "list" ], "/*": [ "list" ] }, "ubus": { "file": [ "list" ], "uci": [ "changes", "get" ] }, "uci": [ "system", "luci" ] }, "write": { "cgi-io": [ "upload" ], "file": { "/etc/luci-uploads/*": [ "write" ] }, "ubus": { "file": [ "remove" ], "uci": [ "add", "apply", "confirm", "delete", "order", "rename", "set" ] } } }, "luci-base-network-status": { "description": "Grant access to network status information", "read": { "ubus": { "luci-rpc": [ "getBoardJSON", "getHostHints", "getNetworkDevices", "getWirelessDevices" ], "network": [ "get_proto_handlers" ], "network.device": [ "status" ], "network.interface": [ "dump" ] }, "uci": [ "luci", "network", "wireless" ] } } } 07070100E817A4000081A400000000000000000000000169B8AF0D00001248000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/luci-mod-system.json{ "luci-mod-system-config": { "description": "Grant access to system configuration", "read": { "ubus": { "luci": [ "getLEDs", "getTimezones", "getUSBDevices", "getUnixtime" ], "rc": [ "list" ] }, "uci": [ "luci", "system" ] }, "write": { "ubus": { "luci": [ "setLocaltime", "setPassword" ], "rc": [ "init" ] }, "uci": [ "luci", "system" ] } }, "luci-mod-system-ssh": { "description": "Grant access to SSH configuration", "read": { "file": { "/etc/dropbear/authorized_keys": [ "read" ] }, "ubus": { "file": [ "read" ] }, "uci": [ "dropbear" ] }, "write": { "file": { "/etc/dropbear/authorized_keys": [ "write" ] }, "ubus": { "file": [ "write" ], "luci": [ "setLocaltime" ] }, "uci": [ "dropbear" ] } }, "luci-mod-system-repokeys": { "description": "Grant access to Software Repository Public Key management", "read": { "file": { "/etc/opkg/keys/*": [ "read" ], "/etc/apk/keys/*": [ "read" ] } }, "write": { "file": { "/etc/opkg/keys/*": [ "write" ], "/etc/apk/keys/*": [ "write" ] } } }, "luci-mod-system-uhttpd": { "description": "Grant access to uHTTPd configuration", "read": { "uci": [ "uhttpd" ] }, "write": { "uci": [ "uhttpd" ] } }, "luci-mod-system-init": { "description": "Grant access to startup configuration", "read": { "file": { "/etc/rc.local": [ "read" ] }, "ubus": { "file": [ "read" ], "rc": [ "list" ] } }, "write": { "file": { "/etc/rc.local": [ "write" ] }, "ubus": { "file": [ "write" ], "rc": [ "init" ] } } }, "luci-mod-system-cron": { "description": "Grant access to crontab configuration", "read": { "file": { "/etc/crontabs/root": [ "read" ] }, "ubus": { "file": [ "read" ] } }, "write": { "file": { "/etc/crontabs/root": [ "write" ], "/etc/init.d/cron reload": [ "exec" ] }, "ubus": { "file": [ "write" ] } } }, "luci-mod-system-mounts": { "description": "Grant access to mount configuration", "read": { "file": { "/etc/filesystems": [ "read" ], "/proc/filesystems": [ "read" ], "/usr/bin/btrfsck": [ "list" ], "/usr/bin/ntfsfix": [ "list" ], "/usr/sbin/e2fsck": [ "list" ], "/usr/sbin/fsck.f2fs": [ "list" ], "/usr/sbin/fsck.fat": [ "list" ] }, "ubus": { "file": [ "read", "stat" ], "luci": [ "getBlockDevices", "getMountPoints" ] }, "uci": [ "fstab" ] }, "write": { "file": { "/etc/crontabs/root": [ "write" ], "/bin/umount": [ "exec" ], "/sbin/block": [ "exec" ] }, "ubus": { "file": [ "exec", "write" ], "luci": [ "setBlockDetect" ] }, "uci": [ "fstab" ] } }, "luci-mod-system-flash": { "description": "Grant access to flash operations", "read": { "cgi-io": [ "backup", "download" ], "file": { "/dev/mtdblock[0-9]*": [ "read" ], "/etc/sysupgrade.conf": [ "read" ], "/lib/upgrade/platform.sh": [ "list" ], "/proc/mounts": [ "read" ], "/proc/mtd": [ "read" ], "/proc/partitions": [ "read" ], "/proc/sys/kernel/hostname": [ "read" ], "/sbin/sysupgrade --list-backup": [ "exec" ] }, "ubus": { "file": [ "exec", "read", "stat" ] } }, "write": { "cgi-io": [ "upload" ], "file": { "/bin/tar -tzf /tmp/backup.tar.gz": [ "exec" ], "/etc/sysupgrade.conf": [ "write" ], "/sbin/firstboot -r -y": [ "exec" ], "/sbin/reboot": [ "exec" ], "/sbin/sysupgrade --force /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -n --force /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -u /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -u -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -n /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -u /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -u -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --restore-backup /tmp/backup.tar.gz": [ "exec" ], "/sbin/sysupgrade --test /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade /tmp/firmware.bin": [ "exec" ], "/tmp/backup.tar.gz": [ "write" ], "/tmp/firmware.bin": [ "write" ] }, "ubus": { "file": [ "exec", "remove", "write" ], "system": [ "validate_firmware_image" ] } } }, "luci-mod-system-reboot": { "description": "Allow rebooting the device", "write": { "file": { "/sbin/reboot": [ "exec" ] }, "ubus": { "file": [ "exec" ], "system": [ "reboot" ] } } } } 07070100E81763000081A400000000000000000000000169B8AF0D00000861000000080000000100000000000000000000002B00000000usr/share/rpcd/acl.d/luci-mod-network.json{ "luci-mod-network-config": { "description": "Grant access to network configuration", "read": { "cgi-io": [ "exec" ], "file": { "/etc/iproute2/rt_tables": [ "read" ], "/proc/sys/net/ipv6/conf/*/mtu": [ "read" ], "/proc/sys/net/ipv6/conf/*/hop_limit": [ "read" ], "/usr/libexec/luci-peeraddr": [ "exec" ], "/proc/sys/net/ipv[46]/conf/*": [ "read" ], "/sys/class/net/*/brport/*": [ "read" ] }, "ubus": { "file": [ "exec" ], "iwinfo": [ "assoclist", "countrylist", "freqlist", "txpowerlist" ], "luci": [ "getSwconfigFeatures", "getSwconfigPortState" ] }, "uci": [ "dhcp", "firewall", "network", "wireless", "system" ] }, "write": { "cgi-io": [ "exec" ], "file": { "/sbin/ifup": [ "exec" ], "/sbin/ifdown": [ "exec" ], "/sbin/wifi": [ "exec" ] }, "ubus": { "file": [ "exec" ], "hostapd.*": [ "del_client" ], "iwinfo": [ "scan" ] }, "uci": [ "dhcp", "firewall", "network", "wireless" ] } }, "luci-mod-network-dns": { "description": "Grant access to DNS configuration", "read": { "ubus": { "luci-rpc": [ "getHostHints" ] }, "uci": [ "dhcp" ] }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-network-dhcp": { "description": "Grant access to DHCP configuration", "read": { "ubus": { "luci-rpc": [ "getDHCPLeases", "getDUIDHints", "getHostHints", "getNetworkDevices" ], "fingerprint": [ "fingerprint" ], "service": [ "list" ] }, "uci": [ "dhcp" ] }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-network-diagnostics": { "description": "Grant access to network diagnostic tools", "read": { "file": { "/bin/ping": [ "exec" ], "/bin/ping6": [ "exec", "list" ], "/bin/traceroute": [ "exec" ], "/bin/traceroute6": [ "exec", "list" ], "/usr/bin/nslookup": [ "exec" ], "/usr/bin/ping": [ "exec" ], "/usr/bin/ping6": [ "exec", "list" ], "/usr/bin/traceroute": [ "exec" ], "/usr/bin/traceroute6": [ "exec", "list" ], "/usr/bin/arp-scan": [ "exec", "list" ] }, "ubus": { "file": [ "exec", "stat" ] }, "uci": [ "luci" ] } } } 07070100E8174E000081A400000000000000000000000169B8AF0D0000019B000000080000000100000000000000000000002C00000000usr/share/rpcd/acl.d/luci-app-firewall.json{ "luci-app-firewall": { "description": "Grant access to firewall configuration", "read": { "file": { "/etc/firewall.user": [ "read" ] }, "ubus": { "file": [ "read" ], "luci": [ "getConntrackHelpers" ] }, "uci": [ "firewall" ] }, "write": { "file": { "/etc/firewall.user": [ "write" ] }, "ubus": { "file": [ "write" ] }, "uci": [ "firewall" ] } } } 07070100E81748000081A400000000000000000000000169B8AF0D000004FF000000080000000100000000000000000000003300000000usr/share/rpcd/acl.d/luci-app-package-manager.json{ "luci-app-package-manager": { "description": "Grant access to package management", "read": { "cgi-io": [ "exec" ], "file": { "/usr/libexec/package-manager-call list-installed": [ "exec" ], "/usr/libexec/package-manager-call list-available": [ "exec" ], "/etc/opkg.conf": [ "read" ], "/etc/opkg/*.conf": [ "read" ], "/etc/apk/repositories": [ "read" ], "/etc/apk/repositories.d/distfeeds.list": [ "read" ], "/etc/apk/repositories.d/customfeeds.list": [ "read" ] }, "ubus": { "luci": [ "getMountPoints" ] } }, "write": { "file": { "/usr/libexec/package-manager-call install": [ "exec" ], "/usr/libexec/package-manager-call install *": [ "exec" ], "/usr/libexec/package-manager-call remove *": [ "exec" ], "/usr/libexec/package-manager-call update": [ "exec" ], "/usr/libexec/package-manager-call upgrade": [ "exec" ], "/usr/libexec/package-manager-call upgrade *": [ "exec" ], "/etc/opkg.conf": [ "write" ], "/etc/opkg/*.conf": [ "write" ], "/etc/apk/repositories": [ "write" ], "/etc/apk/repositories.d/distfeeds.list": [ "write" ], "/etc/apk/repositories.d/customfeeds.list": [ "write" ], "/tmp/upload.ipk": [ "write" ], "/tmp/upload.apk": [ "write" ] } } } } 07070100E81812000081A400000000000000000000000169B8AF0D0000021A000000080000000100000000000000000000003600000000usr/share/rpcd/acl.d/luci-app-attendedsysupgrade.json{ "luci-app-attendedsysupgrade": { "description": "Grant UCI access to LuCI app attendedsysupgrade", "read": { "ubus": { "rpc-sys": [ "upgrade_start", "packagelist" ], "system": [ "board", "info" ], "uci": [ "get" ] }, "file": { "/sys/firmware/efi": [ "list" ] }, "uci": [ "attendedsysupgrade" ] }, "write": { "cgi-io": [ "upload" ], "ubus": { "uci": [ "set", "commit" ] }, "uci": [ "attendedsysupgrade" ] } } } 07070100E81778000081A400000000000000000000000169B8AF0D000009CF000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/luci-mod-status.json{ "luci-mod-status-realtime": { "description": "Grant access to realtime statistics", "read": { "file": { "/etc/services": [ "read" ] }, "ubus": { "luci": [ "getConntrackList", "getRealtimeStats" ], "luci-rpc": [ "getHostHints", "getNetworkDevices", "getDHCPLeases" ], "network.rrdns": [ "lookup" ] } } }, "luci-mod-status-processes": { "description": "Grant access to process status", "read": { "ubus": { "luci": [ "getProcessList" ] } }, "write": { "file": { "/bin/kill": [ "exec" ] }, "ubus": { "file": [ "exec" ] } } }, "luci-mod-status-logs": { "description": "Grant access to system logs", "read": { "cgi-io": [ "exec" ], "file": { "/bin/dmesg -r": [ "exec" ], "/usr/libexec/syslog-wrapper": [ "exec" ] }, "ubus": { "log": [ "read" ], "file": [ "stat" ] } } }, "luci-mod-status-routes": { "description": "Grant access to routing status", "read": { "file": { "/sbin/ip -[46] neigh show": [ "exec" ], "/sbin/ip -[46] route show table all": [ "exec" ], "/sbin/ip -[46] rule show": [ "exec" ] }, "ubus": { "file": [ "exec" ], "fingerprint": [ "fingerprint" ] } } }, "luci-mod-status-routes-json": { "description": "Grant access to routing status", "read": { "file": { "/sbin/ip -[46] -j neigh show": [ "exec" ], "/sbin/ip -[46] -j route show table all": [ "exec" ], "/sbin/ip -[46] -j rule show": [ "exec" ] }, "ubus": { "file": [ "exec" ], "fingerprint": [ "fingerprint" ] } } }, "luci-mod-status-channel_analysis": { "description": "Grant access to wireless channel status", "read": { "ubus": { "iwinfo": [ "info", "freqlist", "scan" ] } } }, "luci-mod-status-firewall": { "description": "Grant access to firewall status", "read": { "cgi-io": [ "exec" ], "file": { "/usr/sbin/nft --terse --json list ruleset": [ "exec" ], "/usr/sbin/iptables --line-numbers -w -nvxL -t *": [ "exec" ], "/usr/sbin/ip6tables --line-numbers -w -nvxL -t *": [ "exec" ], "/usr/sbin/ip6tables": [ "list" ], "/usr/sbin/iptables-save": [ "exec" ], "/usr/sbin/ip6tables-save": [ "exec" ] }, "ubus": { "file": [ "stat" ] } }, "write": { "cgi-io": [ "exec" ], "file": { "/etc/init.d/firewall restart": [ "exec" ], "/usr/sbin/iptables -Z": [ "exec" ], "/usr/sbin/ip6tables -Z": [ "exec" ] }, "ubus": { "file": [ "exec" ] } } } } 07070100E807CC000081A400000000000000000000000169B8AF0D000000B3000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/unauthenticated.json{ "unauthenticated": { "description": "Access controls for unauthenticated requests", "read": { "ubus": { "session": [ "access", "login" ] } } } } 07070100E81777000081A400000000000000000000000169B8AF0D000005FF000000080000000100000000000000000000003000000000usr/share/rpcd/acl.d/luci-mod-status-index.json{ "luci-mod-status-index": { "description": "Grant access to main status display", "read": { "file": { "/etc/board.json": [ "read" ], "/proc/sys/net/netfilter/nf_conntrack_count": [ "read" ], "/proc/sys/net/netfilter/nf_conntrack_max": [ "read" ], "/www/luci-static/resources/view/status/include": [ "list" ] }, "ubus": { "luci": [ "getVersion", "getUnixtime", "getOdhcp6cStats" ], "file": [ "list", "read" ], "system": [ "board", "info" ] } }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-status-index-storage": { "description": "Grant access to Storage and Mount status display", "read": { "ubus": { "luci": [ "getMountPoints" ], "system": [ "info" ] } } }, "luci-mod-status-index-dhcp": { "description": "Grant access to DHCP status display", "read": { "ubus": { "luci-rpc": [ "getDHCPLeases" ], "fingerprint": [ "fingerprint" ] } } }, "luci-mod-status-index-dsl": { "description": "Grant access to DSL status display", "read": { "ubus": { "dsl": [ "metrics" ] } } }, "luci-mod-status-index-ports": { "description": "Grant access to port status display", "read": { "ubus": { "luci": [ "getBuiltinEthernetPorts" ] } } }, "luci-mod-status-index-wifi": { "description": "Grant access to wireless status display", "read": { "ubus": { "iwinfo": [ "assoclist" ] } }, "write": { "ubus": { "hostapd.*": [ "del_client", "wps_start", "wps_cancel", "wps_status" ] } } } } 07070100E816EE000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000001500000000usr/share/rpcd/ucode07070100E816EF000081A400000000000000000000000169B8AF0D00003EEA000000080000000100000000000000000000001A00000000usr/share/rpcd/ucode/luci// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. 'use strict'; import { stdin, access, dirname, basename, open, popen, glob, lsdir, readfile, readlink, realpath, error } from 'fs'; import { cursor } from 'uci'; import { init_list, init_index, init_enabled, init_action, conntrack_list, process_list } from 'luci.sys'; import { revision, branch } from 'luci.version'; import { statvfs, uname } from 'luci.core'; import { connect } from 'ubus'; import timezones from 'luci.zoneinfo'; function shellquote(s) { return `'${replace(s, "'", "'\\''")}'`; } function callPackageVersionCheck(pkg) { let version = ""; if ( access('/bin/opkg') ) { // <= v24.10 let fd = popen('opkg list-installed ' + shellquote(pkg) + ' 2>/dev/null'); if (fd) { const re = regexp('^' + pkg + ' - (.+)$', 's'); const m = match(fd.read('all'), re); version = m?.[1]; fd.close(); } } else if ( access('/usr/bin/apk') ) { // > v24.10 let fd = popen('apk list -I ' + shellquote(pkg) + ' 2>/dev/null'); if (fd) { const re = regexp('^' + pkg + '-(.+)$', 's'); const m = match(fd.read('all'), re); version = m?.[1]; fd.close(); } } return version; } const methods = { getVersion: { call: function(request) { return { revision, branch }; } }, getInitList: { args: { name: 'name' }, call: function(request) { let scripts = {}; for (let name in filter(init_list(), i => !request.args.name || i == request.args.name)) { let idx = init_index(name); scripts[name] = { index: idx?.[0], stop: idx?.[1], enabled: init_enabled(name) }; } return length(scripts) ? scripts : { error: 'No such init script' }; } }, setInitAction: { args: { name: 'name', action: 'action' }, call: function(request) { switch (request.args.action) { case 'enable': case 'disable': case 'start': case 'stop': case 'restart': case 'reload': const rc = init_action(request.args.name, request.args.action); if (rc === false) return { error: 'No such init script' }; return { result: rc == 0 }; default: return { error: 'Invalid action' }; } } }, getUnixtime: { call: function(request) { // time() ; Returns the current UNIX epoch. return { result: time() }; } }, setLocaltime: { args: { localtime: 0 }, call: function(request) { let t = localtime(request.args.localtime); if (t) { system(sprintf('date -s "%04d-%02d-%02d %02d:%02d:%02d" >/dev/null', t.year, t.mon, t.mday, t.hour, t.min, t.sec)); system('/etc/init.d/sysfixtime restart >/dev/null'); } return { result: request.args.localtime }; } }, getTimezones: { call: function(request) { let tz = trim(readfile('/etc/TZ')); let zn = cursor()?.get?.('system', '@system[0]', 'zonename'); let result = {}; for (let zone, tzstring in timezones) { result[zone] = { tzstring }; if (zn == zone) result[zone].active = true; }; return result; } }, getLEDs: { call: function() { let result = {}; for (let led in lsdir('/sys/class/leds')) { let s; result[led] = { triggers: [] }; s = trim(readfile(`/sys/class/leds/${led}/trigger`)); for (let trigger in split(s, ' ')) { push(result[led].triggers, trim(trigger, '[]')); if (trigger != result[led].triggers[-1]) result[led].active_trigger = result[led].triggers[-1]; } s = readfile(`/sys/class/leds/${led}/brightness`); result[led].brightness = +s; s = readfile(`/sys/class/leds/${led}/max_brightness`); result[led].max_brightness = +s; } return result; } }, getUSBDevices: { call: function() { let result = { devices: [], ports: [] }; for (let path in glob('/sys/bus/usb/devices/[0-9]*/manufacturer')) { let id = basename(dirname(path)); push(result.devices, { id, vid: trim(readfile(`/sys/bus/usb/devices/${id}/idVendor`)), pid: trim(readfile(`/sys/bus/usb/devices/${id}/idProduct`)), vendor: trim(readfile(path)), product: trim(readfile(`/sys/bus/usb/devices/${id}/product`)), speed: +readfile(`/sys/bus/usb/devices/${id}/speed`) }); } for (let path in glob('/sys/bus/usb/devices/*/*-port[0-9]*')) { let port = basename(path); let link = readlink(`${path}/device`); push(result.ports, { port, device: basename(link) }); } return result; } }, getConntrackHelpers: { call: function() { const uci = cursor(); let helpers = []; let package; if (uci.load('/usr/share/firewall4/helpers')) package = 'helpers'; else if (uci.load('/usr/share/fw3/helpers.conf')) package = 'helpers.conf'; if (package) { uci.foreach(package, 'helper', (s) => { push(helpers, { name: s.name, description: s.description, module: s.module, family: s.family, proto: s.proto, port: s.port }); }); } return { result: helpers }; } }, getFeatures: { call: function() { let result = { firewall: access('/sbin/fw3') == true, firewall4: access('/sbin/fw4') == true, opkg: access('/bin/opkg') == true, bonding: access('/sys/module/bonding'), mii_tool: access('/usr/sbin/mii-tool'), offloading: access('/sys/module/xt_FLOWOFFLOAD/refcnt') == true || access('/sys/module/nft_flow_offload/refcnt') == true, br2684ctl: access('/usr/sbin/br2684ctl') == true, swconfig: access('/sbin/swconfig') == true, zram: access('/sys/class/zram-control') == true, sysntpd: readlink('/usr/sbin/ntpd') != null, ipv6: access('/proc/net/ipv6_route') == true, dropbear: access('/usr/sbin/dropbear') == true, cabundle: access('/etc/ssl/certs/ca-certificates.crt') == true, relayd: access('/usr/sbin/relayd') == true, apk: access('/usr/bin/apk') == true, wifi: access('/sbin/wifi') == true, ufpd: access('/usr/sbin/ufpd') == true, vrf: access('/sys/module/vrf/refcnt') == true, // vrf.ko is loaded netifd_vrf: false, }; const wifi_features = [ '11ac', '11ax', '11be', '11r', 'acs', 'eap', 'mesh', 'ocv', 'owe', 'sae', 'suiteb192', 'wep', 'wps', ]; if (access('/usr/sbin/hostapd')) { result.hostapd = { cli: access('/usr/sbin/hostapd_cli') == true }; for (let feature in wifi_features) result.hostapd[feature] = system(`/usr/sbin/hostapd -v${feature} >/dev/null 2>/dev/null`) == 0; } if (access('/usr/sbin/wpa_supplicant')) { result.wpasupplicant = { cli: access('/usr/sbin/wpa_cli') == true }; for (let feature in wifi_features) result.wpasupplicant[feature] = system(`/usr/sbin/wpa_supplicant -v${feature} >/dev/null 2>/dev/null`) == 0; } let fd = popen('dnsmasq --version 2>/dev/null'); if (fd) { const m = match(fd.read('all'), /^Compile time options: (.+)$/s); for (let opt in split(m?.[1], ' ')) { let f = replace(opt, 'no-', '', 1); result.dnsmasq ??= {}; result.dnsmasq[lc(f)] = (f == opt); } fd.close(); } result.odhcpd = false; fd = popen('odhcpd -h 2>/dev/null'); if (fd) { const output = fd.read('all'); if (output) { result.odhcpd = {}; const m = match(output, /^Features: (.+)$/s); for (let opt in split(m?.[1], ' ')) { let f = replace(opt, 'no-', '', 1); result.odhcpd[lc(f)] = (f == opt); } } fd.close(); } // This check can be removed after v25 release result.netifd_vrf = match(callPackageVersionCheck('netifd'), /^20[0-9][0-9]/s)?.[0] >= 2025; fd = popen('ipset --help 2>/dev/null'); if (fd) { for (let line = fd.read('line'), flag = false; length(line); line = fd.read('line')) { if (line == 'Supported set types:\n') { flag = true; } else if (flag) { const m = match(line, /^ +([\w:,]+)\t+([0-9]+)\t/); if (m) { result.ipset ??= {}; result.ipset[m[1]] ??= +m[2]; } } } fd.close(); } return result; } }, getSwconfigFeatures: { args: { switch: 'switch0' }, call: function(request) { // Parse some common switch properties from swconfig help output. const swc = popen(`swconfig dev ${shellquote(request.args.switch)} help 2>/dev/null`); if (swc) { let is_port_attr = false; let is_vlan_attr = false; let result = {}; for (let line = swc.read('line'); length(line); line = swc.read('line')) { if (match(line, /^\s+--vlan/)) { is_vlan_attr = true; } else if (match(line, /^\s+--port/)) { is_vlan_attr = false; is_port_attr = true; } else if (match(line, /cpu @/)) { result.switch_title = match(line, /^switch[0-9]+: \w+\((.+)\)/)?.[1]; result.num_vlans = match(line, /vlans: ([0-9]+)/)?.[1] ?? 16; result.min_vid = 1; } else if (match(line, /: (pvid|tag|vid)/)) { if (is_vlan_attr) result.vid_option = match(line, /: (\w+)/)?.[1]; } else if (match(line, /: enable_vlan4k/)) { result.vlan4k_option = 'enable_vlan4k'; } else if (match(line, /: enable_vlan/)) { result.vlan_option = 'enable_vlan'; } else if (match(line, /: enable_learning/)) { result.learning_option = 'enable_learning'; } else if (match(line, /: enable_mirror_rx/)) { result.mirror_option = 'enable_mirror_rx'; } else if (match(line, /: max_length/)) { result.jumbo_option = 'max_length'; } } swc.close(); if (!length(result)) return { error: 'No such switch' }; return result; } else { return { error: error() }; } } }, getSwconfigPortState: { args: { switch: 'switch0' }, call: function(request) { const swc = popen(`swconfig dev ${shellquote(request.args.switch)} show 2>/dev/null`); if (swc) { let ports = [], port; for (let line = swc.read('line'); length(line); line = swc.read('line')) { if (match(line, /^VLAN [0-9]+:/) && length(ports)) break; let pnum = match(line, /^Port ([0-9]+):/)?.[1]; if (pnum) { port = { port: +pnum, duplex: false, speed: 0, link: false, auto: false, rxflow: false, txflow: false }; push(ports, port); } if (port) { let m; if (match(line, /full[ -]duplex/)) port.duplex = true; if ((m = match(line, / speed:([0-9]+)/)) != null) port.speed = +m[1]; if ((m = match(line, /([0-9]+) Mbps/)) != null && !port.speed) port.speed = +m[1]; if ((m = match(line, /link: ([0-9]+)/)) != null && !port.speed) port.speed = +m[1]; if (match(line, /(link|status): ?up/)) port.link = true; if (match(line, /auto-negotiate|link:.*auto/)) port.auto = true; if (match(line, /link:.*rxflow/)) port.rxflow = true; if (match(line, /link:.*txflow/)) port.txflow = true; } } swc.close(); if (!length(ports)) return { error: 'No such switch' }; return { result: ports }; } else { return { error: error() }; } } }, setPassword: { args: { username: 'root', password: 'password' }, call: function(request) { const u = shellquote(request.args.username); const p = shellquote(request.args.password); return { result: system(`(echo ${p}; sleep 1; echo ${p}) | /bin/busybox passwd ${u} >/dev/null 2>&1`) == 0 }; } }, getBlockDevices: { call: function() { const block = popen('/sbin/block info 2>/dev/null'); if (block) { let result = {}; for (let line = block.read('line'); length(line); line = block.read('line')) { let dev = match(line, /^\/dev\/([^:]+):/)?.[1]; if (dev) { let e = result[dev] = { dev: `/dev/${dev}`, size: +readfile(`/sys/class/block/${dev}/size`) * 512 }; for (let m in match(line, / (\w+)="([^"]+)"/g)) e[lc(m[1])] = m[2]; } } block.close(); const swaps = open('/proc/swaps', 'r'); if (swaps) { for (let line = swaps.read('line'); length(line); line = swaps.read('line')) { let m = match(line, /^(\/\S+)\s+\S+\s+(\d+)/); if (m) { let dev = replace(m[1], /\\(\d\d\d)/g, (_, n) => chr(int(n, 8))); result[`swap:${m[1]}`] = { dev, type: 'swap', size: +m[2] * 1024 }; } } swaps.close(); } return result; } else { return { error: 'Unable to execute block utility' }; } } }, setBlockDetect: { call: function() { return { result: system('/sbin/block detect > /etc/config/fstab') == 0 }; } }, getMountPoints: { call: function() { const fd = open('/proc/mounts', 'r'); if (fd) { let result = []; for (let line = fd.read('line'); length(line); line = fd.read('line')) { const m = split(line, ' '); const device = replace(m[0], /\\([0-9][0-9][0-9])/g, (m, n) => chr(int(n, 8))); const mount = replace(m[1], /\\([0-9][0-9][0-9])/g, (m, n) => chr(int(n, 8))); const stat = statvfs(mount); if (stat?.blocks > 0) { push(result, { device, mount, size: stat.bsize * stat.blocks, avail: stat.bsize * stat.bavail, free: stat.bsize * stat.bfree }); } } fd.close(); return { result }; } else { return { error: error() }; } } }, getRealtimeStats: { args: { mode: 'interface', device: 'eth0' }, call: function(request) { let flags; if (request.args.mode == 'interface') flags = `-i ${shellquote(request.args.device)}`; else if (request.args.mode == 'wireless') flags = `-r ${shellquote(request.args.device)}`; else if (request.args.mode == 'conntrack') flags = '-c'; else if (request.args.mode == 'load') flags = '-l'; else return { error: 'Invalid mode' }; const fd = popen(`luci-bwc ${flags}`, 'r'); if (fd) { let result; try { result = { result: json(`[${fd.read('all')}]`) }; } catch (err) { result = { error: err }; } return result; } else { return { error: error() }; } } }, getConntrackList: { call: function() { return { result: conntrack_list() }; } }, getProcessList: { call: function() { return { result: process_list() }; } }, getBuiltinEthernetPorts: { call: function() { let fd = open('/etc/board.json', 'r'); let board = fd ? json(fd) : {}; let ports = []; for (let k in [ 'lan', 'wan' ]) { if (!board?.network?.[k]) continue; if (type(board.network[k].ports) == 'array') { for (let ifname in board.network[k].ports) { push(ports, { role: k, device: ifname }); } } else if (type(board.network[k].device) == 'string') { push(ports, { role: k, device: board.network[k].device }); } } /* Workaround for targets that do not enumerate all netdevs in board.json */ if (uname().machine in [ 'x86_64' ] && match(ports[0]?.device, /^eth\d+$/)) { let bus = realpath(`/sys/class/net/${ports[0].device}/device/subsystem`); for (let netdev in lsdir('/sys/class/net')) { if (!match(netdev, /^eth\d+$/)) continue; if (length(filter(ports, port => port.device == netdev))) continue; if (realpath(`/sys/class/net/${netdev}/device/subsystem`) != bus) continue; push(ports, { role: 'unknown', device: netdev }); } } return { result: ports }; } }, getOdhcp6cStats: { call: function() { const ubus = connect(); const devs = ubus.call('network.device', 'status'); if (!devs) return false; const dev_stats = {}; for (let dev in devs) { const m = ubus.call(`odhcp6c.${dev}`, 'get_statistics'); // not all interfaces are exposed unless odhcp6c runs on it if (!m) continue; push(dev_stats, dev); dev_stats[dev] = m; } return { result: dev_stats }; } } }; return { luci: methods }; 07070100E8162B000081A400000000000000000000000169B8AF0D00004C55000000080000000100000000000000000000001C00000000usr/share/wifi_devices.json{ "pci": [ [ "0x0777", "0x11ac", "0x0777", "0xe7f9", 0, 0, "Ubiquiti", "LiteBeam, 5AC" ], [ "0xffff", "0xffff", "0xffff", "0xb102", 0, 0, "Ubiquiti", "PowerStation2, (18V)" ], [ "0xffff", "0xffff", "0xffff", "0xb202", 0, 0, "Ubiquiti", "PowerStation2, (16D)" ], [ "0xffff", "0xffff", "0xffff", "0xb302", 0, 0, "Ubiquiti", "PowerStation2, (EXT)" ], [ "0xffff", "0xffff", "0xffff", "0xb105", 0, 0, "Ubiquiti", "PowerStation5, (22V)" ], [ "0xffff", "0xffff", "0xffff", "0xb305", 0, 0, "Ubiquiti", "PowerStation5, (EXT)" ], [ "0xffff", "0xffff", "0xffff", "0xc302", 0, 0, "Ubiquiti", "PicoStation2" ], [ "0xffff", "0xffff", "0xffff", "0xc3a2", 10, 0, "Ubiquiti", "PicoStation2, HP" ], [ "0xffff", "0xffff", "0xffff", "0xa105", 0, 0, "Ubiquiti", "WispStation5" ], [ "0xffff", "0xffff", "0xffff", "0xa002", 10, 0, "Ubiquiti", "LiteStation2" ], [ "0xffff", "0xffff", "0xffff", "0xa005", 5, 0, "Ubiquiti", "LiteStation5" ], [ "0xffff", "0xffff", "0xffff", "0xc002", 10, 0, "Ubiquiti", "NanoStation2" ], [ "0xffff", "0xffff", "0xffff", "0xc005", 5, 0, "Ubiquiti", "NanoStation5" ], [ "0xffff", "0xffff", "0xffff", "0xc102", 10, 0, "Ubiquiti", "NanoStation, Loco2" ], [ "0xffff", "0xffff", "0xffff", "0xc105", 5, 0, "Ubiquiti", "NanoStation, Loco5" ], [ "0xffff", "0xffff", "0xffff", "0xc202", 10, 0, "Ubiquiti", "Bullet2" ], [ "0xffff", "0xffff", "0xffff", "0xc205", 5, 0, "Ubiquiti", "Bullet5" ], [ "0x168c", "0xffff", "0x0777", "0xe002", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe003", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe005", 5, 0, "Ubiquiti", "NanoStation, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe006", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe009", 6, 0, "Ubiquiti", "NanoStation, Loco, M9" ], [ "0x168c", "0xffff", "0x0777", "0xe012", 10, 0, "Ubiquiti", "NanoStation, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe035", 3, 0, "Ubiquiti", "NanoStation, M3" ], [ "0x168c", "0xffff", "0x0777", "0xe0a2", 2, 0, "Ubiquiti", "NanoStation, Loco, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe0a5", 1, 0, "Ubiquiti", "NanoStation, Loco, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe102", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe105", 5, 0, "Ubiquiti", "Rocket, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe112", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe115", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1a3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1a5", 5, 0, "Ubiquiti", "PowerBridge, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe1b2", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1b3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1b5", 5, 0, "Ubiquiti", "Rocket, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe1b6", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1b9", 6, 0, "Ubiquiti", "Rocket, M9" ], [ "0x168c", "0xffff", "0x0777", "0xe1c2", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1c3", 3, 0, "Ubiquiti", "Rocket, M3" ], [ "0x168c", "0xffff", "0x0777", "0xe1c5", 5, 0, "Ubiquiti", "Rocket, M5, GPS" ], [ "0x168c", "0xffff", "0x0777", "0xe1c5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1d2", 10, 0, "Ubiquiti", "Rocket, M2, Titanium" ], [ "0x168c", "0xffff", "0x0777", "0xe1d3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1d5", 5, 0, "Ubiquiti", "airOS, XM/XW" ], [ "0x168c", "0xffff", "0x0777", "0xe1d9", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1e3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1e5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe202", 12, 0, "Ubiquiti", "Bullet, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe205", 6, 0, "Ubiquiti", "Bullet, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe212", 1, 0, "Ubiquiti", "AirGrid, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe215", 1, 0, "Ubiquiti", "AirGrid, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe232", 2, 0, "Ubiquiti", "NanoBridge, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe233", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe235", 1, 0, "Ubiquiti", "NanoBridge, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe239", 6, 0, "Ubiquiti", "NanoBridge, M9" ], [ "0x168c", "0xffff", "0x0777", "0xe242", 9, 0, "Ubiquiti", "AirGrid, M2, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe243", 3, 0, "Ubiquiti", "NanoBridge, M3" ], [ "0x168c", "0xffff", "0x0777", "0xe245", 6, 0, "Ubiquiti", "AirGrid, M5, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe252", 9, 0, "Ubiquiti", "AirGrid, M2, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe255", 6, 0, "Ubiquiti", "AirGrid, M5, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe2a3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2a5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2b2", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2b5", 1, 0, "Ubiquiti", "NanoBridge, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe2b9", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2c2", 10, 0, "Ubiquiti", "NanoBeam, M2, Int" ], [ "0x168c", "0xffff", "0x0777", "0xe2c3", 6, 0, "Ubiquiti", "Bullet, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe2c4", 6, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe2d2", 12, 0, "Ubiquiti", "Bullet, M2, Titanium, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe2d4", 6, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe2d5", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2e5", 4, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe302", 12, 0, "Ubiquiti", "PicoStation, M2"], [ "0x168c", "0xffff", "0x0777", "0xe305", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe345", 6, 0, "Ubiquiti", "WispStation, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe3a5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe3b5", 6, 0, "Ubiquiti", "airOS, XM/XW" ], [ "0x168c", "0xffff", "0x0777", "0xe3e5", 4, 0, "Ubiquiti", "PowerBeam, M5, 300" ], [ "0x168c", "0xffff", "0x0777", "0xe402", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe405", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe4a2", 1, 0, "Ubiquiti", "AirRouter" ], [ "0x168c", "0xffff", "0x0777", "0xe4a5", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe4b2", 9, 0, "Ubiquiti", "AirRouter, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe4d5", 5, 0, "Ubiquiti", "Rocket, M5, Titanium" ], [ "0x168c", "0xffff", "0x0777", "0xe4e5", 4, 0, "Ubiquiti", "PowerBeam, M5, 400" ], [ "0x168c", "0xffff", "0x0777", "0xe5e5", 4, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe6a2", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe6b2", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe6b5", 5, 0, "Ubiquiti", "Rocket, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe6c2", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe6e5", 4, 0, "Ubiquiti", "PowerBeam, M5, 400, ISO" ], [ "0x168c", "0xffff", "0x0777", "0xe7f8", 2, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe805", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe812", 6, 0, "Ubiquiti", "NanoBeam, M2, 13" ], [ "0x168c", "0xffff", "0x0777", "0xe815", 4, 0, "Ubiquiti", "NanoBeam, M5, 16" ], [ "0x168c", "0xffff", "0x0777", "0xe825", 4, 0, "Ubiquiti", "NanoBeam, M5, 19" ], [ "0x168c", "0xffff", "0x0777", "0xe835", 6, 0, "Ubiquiti", "AirGrid, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe845", 1, 0, "Ubiquiti", "NanoStation, Loco, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe855", 5, 0, "Ubiquiti", "NanoStation, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe865", 6, 0, "Ubiquiti", "LiteBeam, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe866", 6, 0, "Ubiquiti", "NanoStation, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe867", 2, 0, "Ubiquiti", "NanoStation, Loco, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe868", 7, 0, "Ubiquiti", "Rocket, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe869", 2, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe875", 4, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe879", 2, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe885", 4, 0, "Ubiquiti", "PowerBeam, M5, 620, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe895", 4, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe8a5", 1, 0, "Ubiquiti", "NanoStation, Loco, M5"], [ "0x168c", "0xffff", "0x0777", "0xe8b5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0x001b", "0x0777", "0x3002", 10, 0, "Ubiquiti", "XR2" ], [ "0x168c", "0x001b", "0x7777", "0x3002", 10, 0, "Ubiquiti", "XR2" ], [ "0x168c", "0x001b", "0x0777", "0x3b02", 10, 0, "Ubiquiti", "XR2.3" ], [ "0x168c", "0x001b", "0x0777", "0x3c02", 10, 0, "Ubiquiti", "XR2.6" ], [ "0x168c", "0x001b", "0x0777", "0x3b03", 10, 0, "Ubiquiti", "XR3-2.8" ], [ "0x168c", "0x001b", "0x0777", "0x3c03", 10, 0, "Ubiquiti", "XR3-3.6" ], [ "0x168c", "0x001b", "0x0777", "0x3003", 10, 0, "Ubiquiti", "XR3" ], [ "0x168c", "0x001b", "0x0777", "0x3004", 10, 0, "Ubiquiti", "XR4" ], [ "0x168c", "0x001b", "0x0777", "0x3005", 10, 0, "Ubiquiti", "XR5" ], [ "0x168c", "0x001b", "0x7777", "0x3005", 10, 0, "Ubiquiti", "XR5" ], [ "0x168c", "0x001b", "0x0777", "0x3007", 10, 0, "Ubiquiti", "XR7" ], [ "0x168c", "0x001b", "0x0777", "0x3009", 10, -1520, "Ubiquiti", "XR9" ], [ "0x168c", "0x001b", "0x168c", "0x2063", 0, 0, "Atheros", "AR5413" ], [ "0x168c", "0x0013", "0x168c", "0x1042", 1, 0, "Ubiquiti", "SRC" ], [ "0x168c", "0x0013", "0x0777", "0x2041", 10, 0, "Ubiquiti", "SR2" ], [ "0x168c", "0x0013", "0x0777", "0x2004", 6, 0, "Ubiquiti", "SR4" ], [ "0x168c", "0x0013", "0x7777", "0x2004", 6, 0, "Ubiquiti", "SR4" ], [ "0x168c", "0x0013", "0x0777", "0x1004", 6, 0, "Ubiquiti", "SR4C" ], [ "0x168c", "0x0013", "0x7777", "0x1004", 6, 0, "Ubiquiti", "SR4C" ], [ "0x168c", "0x0013", "0x168c", "0x2042", 7, 0, "Ubiquiti", "SR5" ], [ "0x168c", "0x0013", "0x7777", "0x2009", 12, -1500, "Ubiquiti", "SR9" ], [ "0x168c", "0x0027", "0x168c", "0x2082", 7, 0, "Ubiquiti", "SR71A" ], [ "0x168c", "0x0027", "0x0777", "0x4082", 7, 0, "Ubiquiti", "SR71" ], [ "0x168c", "0x0029", "0x0777", "0x4005", 7, 0, "Ubiquiti", "SR71-15" ], [ "0x168c", "0x002a", "0x0777", "0xe302", 12, 0, "Ubiquiti", "PicoStation, M2" ], [ "0x168c", "0x002a", "0x0777", "0xe012", 12, 0, "Ubiquiti", "NanoStation, M2" ], [ "0x168c", "0x002a", "0x0777", "0xe005", 5, 0, "Ubiquiti", "NanoStation, M5" ], [ "0x168c", "0x002a", "0x0777", "0xe202", 12, 0, "Ubiquiti", "Bullet, M2" ], [ "0x168c", "0x002a", "0x0777", "0xe805", 5, 0, "Ubiquiti", "Bullet, M5" ], [ "0x168c", "0x002a", "0x0777", "0xe345", 0, 0, "Ubiquiti", "WispStation, M5" ], [ "0x168c", "0x0029", "0x168c", "0xa094", 0, 0, "Atheros", "AR9220" ], [ "0x168c", "0x0029", "0x168c", "0xa095", 0, 0, "Atheros", "AR9223" ], [ "0x168c", "0x002a", "0x168c", "0xa093", 0, 0, "Atheros", "AR9280" ], [ "0x168c", "0x002b", "0x168c", "0xa091", 0, 0, "Atheros", "AR9285" ], [ "0x168c", "0x002d", "0x168c", "0x209a", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x002e", "0x1a3b", "0x1121", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x002e", "0x0777", "0xe0a2", 8, 0, "Ubiquiti", "NanoStation, Loco, M2, (XM)" ], [ "0x168c", "0x002e", "0x168c", "0x30a4", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x002e", "0x168c", "0xa199", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x0030", "0x168c", "0x3112", 0, 0, "Atheros", "AR9380" ], [ "0x168c", "0x0030", "0x168c", "0x3114", 0, 0, "Atheros", "AR9390" ], [ "0x168c", "0x0033", "0x168c", "0xa120", 0, 0, "Atheros", "AR9580" ], [ "0x168c", "0x0033", "0x168c", "0xa136", 0, 0, "Atheros", "AR9580" ], [ "0x168c", "0x0033", "0x168c", "0x3123", 0, 0, "Atheros", "AR9590" ], [ "0x168c", "0x0033", "0x19b6", "0xd014", 0, 0, "MikroTik", "R11e-5HnD" ], [ "0x168c", "0x0033", "0x19b6", "0xd057", 0, 0, "MikroTik", "R11e-5HnDr2" ], [ "0x168c", "0x0033", "0x19b6", "0xd016", 0, 0, "MikroTik", "R11e-2HPnD" ], [ "0x168c", "0x0034", "0x17aa", "0x3214", 0, 0, "Atheros", "AR9462" ], [ "0x168c", "0x003c", "0x0000", "0x0000", 0, 0, "Qualcomm Atheros", "QCA9880" ], [ "0x168c", "0x003c", "0x168c", "0x3223", 0, 0, "Qualcomm Atheros", "QCA9880" ], [ "0x168c", "0x003c", "0x1a56", "0x1420", 0, 0, "Qualcomm Atheros", "QCA9862" ], [ "0x168c", "0x003c", "0x19b6", "0xd03c", 0, 0, "Mikrotik", "R11e-5HacT" ], [ "0x168c", "0x003c", "0x19b6", "0xd075", 0, 0, "Mikrotik", "R11e-5HacD" ], [ "0x168c", "0x003e", "0x168c", "0x3361", 0, 0, "Qualcomm Atheros", "QCA6174" ], [ "0x168c", "0x0046", "0x168c", "0xcafe", 0, 0, "Qualcomm Atheros", "QCA9984" ], [ "0x168c", "0x0040", "0x168c", "0x0002", 0, 0, "Qualcomm Atheros", "QCA9990" ], [ "0x168c", "0x0046", "0x0777", "0xe535", 0, 0, "Qualcomm Atheros", "QCA9994" ], [ "0x168c", "0x0046", "0x0777", "0xe5a2", 0, 0, "Qualcomm Atheros", "QCA9994" ], [ "0x168c", "0x0050", "0x0000", "0x0000", 0, 0, "Qualcomm Atheros", "QCA9887" ], [ "0x168c", "0x0056", "0x0000", "0x0000", 0, 0, "Qualcomm Atheros", "QCA9886" ], [ "0x17cb", "0x1104", "0x17cb", "0x1104", 0, 0, "Qualcomm Atheros", "QCN6024/9024/9074" ], [ "0x1814", "0x3051", "0x1814", "0x0007", 0, 0, "Ralink", "Rt3051" ], [ "0x1814", "0x3052", "0x1814", "0x0008", 0, 0, "Ralink", "Rt3052" ], [ "0x1814", "0x3350", "0x1814", "0x000b", 0, 0, "Ralink", "Rt3350" ], [ "0x1814", "0x3662", "0x1814", "0x000d", 0, 0, "Ralink", "Rt3662" ], [ "0x11ab", "0x2a55", "0x11ab", "0x0000", 0, 0, "Marvell", "88W8864" ], [ "0x02df", "0x9135", "0x0000", "0x0000", 0, 0, "Marvell", "88W8887" ], [ "0x11ab", "0x2b40", "0x11ab", "0x0000", 0, 0, "Marvell", "88W8964" ], [ "0x02df", "0x9141", "0x0000", "0x0000", 0, 0, "Marvell", "88W8997" ], [ "0x14c3", "0x0608", "0x14c3", "0x0608", 0, 0, "AMD", "RZ608" ], [ "0x14c3", "0x7603", "0x14c3", "0x7603", 0, 0, "MediaTek", "MT7603E" ], [ "0x14c3", "0x7610", "0x14c3", "0x7610", 0, 0, "MediaTek", "MT7610E" ], [ "0x14c3", "0x7612", "0x14c3", "0x7612", 0, 0, "MediaTek", "MT7612E" ], [ "0x14c3", "0x7663", "0x14c3", "0x7663", 0, 0, "MediaTek", "MT7613BE" ], [ "0x14c3", "0x7615", "0x7615", "0x14c3", 0, 0, "MediaTek", "MT7615E" ], [ "0x14c3", "0x7628", "0x14c3", "0x0004", 0, 0, "MediaTek", "MT76x8" ], [ "0x14c3", "0x7650", "0x14c3", "0x7650", 0, 0, "MediaTek", "MT7610E" ], [ "0x14c3", "0x7662", "0x14c3", "0x7662", 0, 0, "MediaTek", "MT76x2E" ], [ "0x14c3", "0x7915", "0x14c3", "0x7915", 0, 0, "MediaTek", "MT7915E" ], [ "0x14c3", "0x7906", "0x14c3", "0x7906", 0, 0, "MediaTek", "MT7916AN" ], [ "0x14c3", "0x7990", "0x14C3", "0x6639", 0, 0, "MediaTek", "MT7996E" ], [ "0x14c3", "0x7992", "0x14C3", "0x7992", 0, 0, "MediaTek", "MT7992E" ], [ "0x14e4", "0xaa52", "0x14e4", "0xaa52", 0, 0, "Broadcom", "BCM43602" ], [ "0x02d0", "0xa9a6", "0x0000", "0x0000", 0, 0, "Cypress", "CYW43455" ], [ "0x02d0", "0x4345", "0x0000", "0x0000", 0, 0, "Cypress", "CYW43455" ], [ "0x1ae9", "0x0310", "0x1ae9", "0x0000", 0, 0, "Wilocity", "Wil6210" ], [ "0x0000", "0x0000", "0x148f", "0x7601", 0, 0, "MediaTek", "MT7601U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7961", 0, 0, "MediaTek", "MT7921AU" ], [ "0x0000", "0x0000", "0x0b05", "0x1833", 0, 0, "ASUS", "USB-AC54" ], [ "0x0000", "0x0000", "0x0b05", "0x17eb", 0, 0, "ASUS", "USB-AC55" ], [ "0x0000", "0x0000", "0x0b05", "0x180b", 0, 0, "ASUS", "USB-N53, B1" ], [ "0x0000", "0x0000", "0x0e8d", "0x7612", 0, 0, "Aukey", "USBAC1200" ], [ "0x0000", "0x0000", "0x057c", "0x8503", 0, 0, "AVM", "FRITZ!WLAN, AC860" ], [ "0x0000", "0x0000", "0x7392", "0xb711", 0, 0, "Edimax", "EW-7722UAC" ], [ "0x0000", "0x0000", "0x0e8d", "0x7632", 0, 0, "High, Cloud", "HC-M7662BU1" ], [ "0x0000", "0x0000", "0x2c4e", "0x0103", 0, 0, "Mercury", "UD13" ], [ "0x0000", "0x0000", "0x0846", "0x9053", 0, 0, "Netgear", "A6210" ], [ "0x0000", "0x0000", "0x045e", "0x02e6", 0, 0, "Microsoft", "XBox, One, Wireless, Adapter" ], [ "0x0000", "0x0000", "0x045e", "0x02fe", 0, 0, "Microsoft", "XBox, One, Wireless, Adapter" ], [ "0x0000", "0x0000", "0x148f", "0x7610", 0, 0, "MediaTek", "MT7610U" ], [ "0x0000", "0x0000", "0x13b1", "0x003e", 0, 0, "Linksys", "AE6000" ], [ "0x0000", "0x0000", "0x0e8d", "0x7610", 0, 0, "Sabrent", "NTWLAC" ], [ "0x0000", "0x0000", "0x7392", "0xa711", 0, 0, "Edimax", "7711MAC" ], [ "0x0000", "0x0000", "0x148f", "0x761a", 0, 0, "TP-Link", "TL-WDN5200" ], [ "0x0000", "0x0000", "0x0b05", "0x17d1", 0, 0, "ASUS", "USB-AC51" ], [ "0x0000", "0x0000", "0x0b05", "0x17db", 0, 0, "ASUS", "USB-AC50" ], [ "0x0000", "0x0000", "0x0df6", "0x0075", 0, 0, "Sitecom", "WLA-3100" ], [ "0x0000", "0x0000", "0x2019", "0xab31", 0, 0, "Planex", "GW-450D" ], [ "0x0000", "0x0000", "0x2001", "0x3d02", 0, 0, "D-Link", "DWA-171, rev, B1" ], [ "0x0000", "0x0000", "0x0586", "0x3425", 0, 0, "Zyxel", "NWD6505" ], [ "0x0000", "0x0000", "0x07b8", "0x7610", 0, 0, "AboCom", "AU7212" ], [ "0x0000", "0x0000", "0x04bb", "0x0951", 0, 0, "I-O, DATA", "WN-AC433UK" ], [ "0x0000", "0x0000", "0x057c", "0x8502", 0, 0, "AVM", "FRITZ!WLAN, AC430" ], [ "0x0000", "0x0000", "0x293c", "0x5702", 0, 0, "Comcast", "Xfinity, KXW02AAA" ], [ "0x0000", "0x0000", "0x20f4", "0x806b", 0, 0, "TRENDnet", "TEW-806UBH" ], [ "0x0000", "0x0000", "0x7392", "0xc711", 0, 0, "Devolo", "WiFi, Stick, ac" ], [ "0x0000", "0x0000", "0x0df6", "0x0079", 0, 0, "Sitecom", "WL-356" ], [ "0x0000", "0x0000", "0x2357", "0x0123", 0, 0, "TP-Link", "T2UHP, US, v1" ], [ "0x0000", "0x0000", "0x2357", "0x010b", 0, 0, "TP-Link", "T2UHP, UN, v1" ], [ "0x0000", "0x0000", "0x2357", "0x0105", 0, 0, "TP-Link", "Archer, T1U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7630", 0, 0, "MediaTek", "MT7630U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7650", 0, 0, "MediaTek", "MT7650U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7663", 0, 0, "MediaTek", "MT7663U" ], [ "0x0000", "0x0000", "0x043e", "0x310c", 0, 0, "LG", "LGSBWAC02" ], [ "0x0000", "0x0000", "0x0bda", "0x8176", 0, 0, "Realtek", "RTL8188CU" ], [ "0x0000", "0x0000", "0x0bda", "0xf179", 0, 0, "Realtek", "RTL8188FTV" ] ], "compatible": { "qca,ar9130-wifi": [ "Atheros", "AR9130" ], "qca,ar9330-wifi": [ "Atheros", "AR9330" ], "qca,ar9340-wifi": [ "Atheros", "AR9340" ], "qca,qca9530-wifi": [ "Qualcomm Atheros", "QCA9530" ], "qca,qca9550-wifi": [ "Qualcomm Atheros", "QCA9550" ], "qca,qca9560-wifi": [ "Qualcomm Atheros", "QCA9560" ], "qcom,ipq4019-wifi": [ "Qualcomm Atheros", "IPQ4019" ], "qcom,ipq6018-wifi": [ "Qualcomm Atheros", "IPQ6018" ], "qcom,ipq8074-wifi": [ "Qualcomm Atheros", "IPQ8074" ], "mediatek,mt7622-wmac": [ "MediaTek", "MT7622" ], "mediatek,mt7628-wmac": [ "MediaTek", "MT7628" ], "mediatek,mt7981-wmac": [ "MediaTek", "MT7981" ], "mediatek,mt7986-wmac": [ "MediaTek", "MT7986" ], "ralink,rt2880-wmac": [ "Ralink", "Rt2880" ], "ralink,rt3050-wmac": [ "Ralink", "Rt3050" ], "ralink,rt3352-wmac": [ "Ralink", "Rt3352" ], "ralink,rt3883-wmac": [ "Ralink", "Rt3883" ], "ralink,rt5350-wmac": [ "Ralink", "Rt5350" ], "ralink,rt7620-wmac": [ "MediaTek", "MT7620" ] } } 07070100E80F64000041ED00000000000000000000000269B8AF0D00000000000000080000000100000000000000000000000900000000usr/sbin07070100E813BF0000A1FF00000000000000000000000169B8AF0D00000006000000080000000100000000000000000000001300000000usr/sbin/mkfs.ext3mke2fs07070100E813B40000A1FF00000000000000000000000169B8AF0D00000006000000080000000100000000000000000000001300000000usr/sbin/mkfs.ext2mke2fs07070100E818650000A1FF00000000000000000000000169B8AF0D00000004000000080000000100000000000000000000001100000000usr/sbin/hostapdwpad07070100E8159B000081ED00000000000000000000000169B8AF0D000218A5000000080000000100000000000000000000000C00000000usr/sbin/iwELF@ 4t4 (4@4@4  T@T@Tpp@p@p@@m°m°þ”Bþ”Bþ”,ˆ@ˆ@ˆXXdtåQdtåRþ”Bþ”Bþ”ll/lib/ld-musl-mips-sf.so.1 ®¾Ì @Ô @ÊBþ”Bþ˜@à@ $@d ð pCp5C @  ppp@p p\p&p\@,¨p2Bþ¤oÿÿûoÿÿþ@Ìoÿÿÿoÿÿð@C\>U%L2VNI1EC(9FZQHYR)B$753M T:4SWD' OP[X=&J   #",.6*<@-?;G!/8+0KAƒ¨§[¶nÑðBþœ@dèIJC°Ah`"6iàˆÒtž÷骬w¼( @Ô bG-Ahp"ˆÐ‰ '#²wìöø?WvžCpfN—6‘Xm@Ê d[œåBþ l‘.ØàBÅãšE|ñ_‹ßûIÞ__RLD_MAP_init_fini__register_frame_info__deregister_frame_info__libc_start_mainnla_putstrchrsscanfstrcmpstrtoulstrlenputchargenlmsg_attrdatagenlmsg_attrlennla_parseif_indextonamenl_socket_add_membershipsfputsstderrnl_cb_allocnl_cb_setnl_cb_putnl_recvmsgsnla_oknla_next__floatunsidf__muldf3strncmpstrtod__truncdfsf2__mulsf3__fixsfsistrtok_r__stack_chk_fail__addsf3__fixunssfsi__floatsisf__nesf2__stack_chk_guardnlmsg_allocfprintfnlmsg_freeexitsnprintfopenreadcloseatoistrnlenstrtoll__errno_locationif_nametoindexgenlmsg_putnl_send_auto_completenl_cb_errcallocmemcpymemcmp__ashldi3strtolmallocstrrchrmemset__udivdi3__umoddi3__lshrdi3__gettimeofday_time64__localtime64strftimefflushstdoutnl_socket_allocgenl_connectnl_socket_freesetsockoptgenl_ctrl_resolvestrerror__clock_gettime64__divdi3sprintf__fixdfsistrcasecmp__ltdf2__gtdf2__adddf3__fixunsdfsistrcpylibnl-tiny.so.1libgcc_s.so.1libc.soGCC_4.2.0GCC_3.0GLIBC_2.0¾ '``Ô y&PÞ iiæBþœ~C°~Bþ E~Bþ¬Bþ°Bþ´Bþ¸Bþ¼BþÀBþÄBþÈ BþÌ BþÐ BþÔ BþØ BþÜBþàBþäBþèBþìBþðBþôBþøBþüBÿBÿBÿBÿ BÿBÿBÿBÿ Bÿ !Bÿ$"Bÿ(#Bÿ,$Bÿ0%Bÿ4&Bÿ8'Bÿ<(Bÿ@)BÿD*BÿH+BÿL,BÿP-BÿT.BÿX/Bÿ\0Bÿ`1Bÿd2Bÿh3Bÿl4Bÿp6Bÿt7Bÿx8Bÿ|9Bÿ€:Bÿ„;Bÿˆ<BÿŒ=Bÿ>Bÿ”?Bÿ˜@BÿœBBÿ CBÿ¤DBÿ¨FBÿ¬GBÿ°HBÿ´IBÿ¸JBÿ¼KBÿÀLBÿÄMBÿÈNBÿÌOBÿÐPBÿÔQBÿØRBÿÜSBÿàTBÿäUBÿèVBÿìWBÿðXBÿôYBÿøZBÿü['½ÿ௼¯¿¼¿à'½ ðdùjÒ @Dgb²rPE$Ú`a’µp[š* ²nkÚ`’B’B'I µk[™€* µi´jZR`3j„"µ[” *’*jiÒà” n Zl “ ƒ`+Bo[ÿ` q`q`jdyè Ò ÌÒ ÊjêK÷“ ”Â| nZÔm=RaÏ’*Âjè@ʸ@ÊÀv`è jjdeè Ÿ€„@"ødån gZlñZ`ñ“ƒ`+îg}ðÃ[nmYZÔgRj`ãj„êKàeva4döŸ @".g´[g±* onmÑZÔgR`j„êKdvè n Zlg‘“ƒ`+³ ñÀJëCañÀkê{+èåg}ðnmYêÃ[Ýjâjàè j@ÊÈÁÿvðdög'aŸµ![g"6gnZlg’‚@"1jdvè vaûŸ€nZlg’‚@*ò™nZlg"’‚@*é” nmiZÔÐRa ” nmjZÔÑRj`×j„êKÔié+gæg0äe@ÊÐv`è jjdvè Ÿ@ðdög'‚@"÷Ÿ„@"ôn Zlg’‚@*ì ë™ ´[g±* mÿÐnM ZÔ” RajÚ´[g±*mÿÐnM î´ [g±* mÿÐnM ãj„êKÁjü@ÊÔ@ÊÜ@ÊìV`è jð d÷Ÿ g[Hg‘”gñgÂZÔm4RaV’B/)j2˜n Zl“ƒ`#,H˜ %$* ”nZÔmRa;Iÿ!æHµ[˜€*q`˜µ[g*”nm5ZÔÒRa"q`Íjdwè ”nm&ZÔÒRa’B.!¾Hǵ [g*ê”jnm5ZÔÒR`àjêKÞ@Êô@Êü@ËV`è jjdxè Ÿ@ð døg‚gg'[HÒ—gÂm4ZÔgRa0™¡%$ *ç nmZÔgRa#™Bµ g‚[Ò* nm5gZÔÒ RjÒa™ƒn Zl“ƒ`+Å nm&gZÔÒ R`jêKºµ[”*´j nm5gZÔÒ RjÚ’rgXZgXr’gxêm e@Êü@ËvadõŸ g[Hg‘gÂgñmZÔgRajduè è jj„êKùvadõŸ g[Hg‘BÁgñmZÔgRajduè è jj„êKùdĤ¤´Z´/Z[g*jÙ@²;´<š[Xg°´:[Xg°´9[Xg°jе7[g*jǵ5[g*jÀµ2[g*j¹µ0[g" µ.[g"µ-[g*j¨µ*[g"µ)[g*jœµ&[g*j•µ$[g*j Žµ![g*j ‡µ[g*j €² gеZ¨š€©jye@Û@Û @Û(@Û0@Û4@Û<@ÛDBþ @ÛH@Û|@Û¼@Ûè@Ûð@Ûü@Ü@Ü@Ü @Ü@Ü@Ü @Ü(@Ü4@Ü<@ÜDVðdú`jÒ’dzè “gFJÿ›€oÔ K ÒøÓÒ*í’Òð "µc˜ [g‘*%@DÒ’r`Û˜!JþHÒÐ’*Ô[H” — ”BÁZÔmRa ’ ” nmZÔÒ Rð€`j„êK¼µO[g‘*˜¡@D%$Ò"²J´Jš [Xej¨’HJþÒjÐÒ´µD[g‘* •˜@D?Ò"M²<´>š ãµ>[g‘*’–JÿHÒ–Ð">²2´6š ϵ6[g‘÷*˜!@DÒ!2µ2[g‘"jÒ@")n Zlg‘Z `"kêd’êm“ Òƒ@"én!r,aC!éjÒ’”mÿ nMNZÔÒ Ra’HJþÒÐii²´š ) ’" ”nZÔmR÷aj.[Hg‘”gñgÂZÔmR`èce@Ü`@ÜhBþ @Û@Üp@Üx@܈@Ü@Ü @ÊÐ@ܨðdög%oøg*(’nmg‘ZÔÒR`h„è gPdvè hû&+ðdågjnmgZÔÒR`j„êKdeè gÐ – "ørajôJ³ "´ [X› jë’ ›€µZ¨šÀ÷è jBþ @ܼ@ÜØdõl g&Z$gg±&kgZ$l duè eðdøl Z$g’Za&g°%´Z<’ &JúéB`´ZÌ´>Ê´>È´>Æ´>Ä´>´>À´>¾´>¼´>º´>¸´>¶´>´´>²´>°´>®´>¬´>ª´>¨nµ=Zàg*™q`qa•´:œ´:š´:ä´:â´:à´:î´:ì´:êÑ ]e@ßÈ@ßÜ@ßô@à@à$@à<@à\@áœ@á°@á¼@áÈ@áü@â0@â@@âP@âd@âx@âŒ@â @â¬@â¼@âÜ@ÐôCH@ßP@àx@à„CD@àˆ@à˜@à @à´@àÀ@àÌ@àÐ@àØ@àì@á@á@á,@á<@áL@á\@á`@áp@á|@áˆC@@á˜A ”@áÔ@áà@áì@â@â@â dÅjgægÅ´µþÒdEè e@ß8@àxdÅjgægÅ´µþÒdEè e@ß@@àxdö´gZÒ ’âá·ZLg‚“ãIÒ’ " ’”â’ ¶6á·ZLšá“ãIÒ’¶1Ò ’âá·ZLg‚“ãIÒ’ " ’”â’ ¶)á·ZLšá“ãIÒ’¶$Ò ’âá·ZLg‚“ãIÒ’ " ’”â’ ¶á·ZLšá“ãIÒ’¶Ò ’âá·ZLg‚“ãIÒ’ " ’”â’ ¶á·ZLšá“ãIÒ’â æ² ðÐøeCP@å,@å(@å\@å¬A+\A,A´@ÍA,HðÀd÷œ+¥HIg‘gm[TÒmg‘[Ò–kmÿÓgâMUZ€5–d. ²‘´‘š [XeðÀdwè j·Žm?"²‰´‹š ï•%ðM%´ˆZ<’8"šZ4´„Z<’%" š¡uðÀ`uðÀ`ðÀ-´}ZZñ¡t`=÷"t`<ñ¡T`öžLjìZ*èåè êôÝDBZG`jìZ*èåêôÿJè ÷"T`ô}Lè÷Õj ìB`jìZ*èåêó_Jè óÜjêKäIöeZ `ðajìZ*èåêè Jæè jè jè jè jeðdöDOg$hÒè"advè ’ â ¢€DHJçZ^`t\` Z$Hït a ’ê õg¤´Z’šArÙ@`NZ`<ð " JþZa´>´> ´>$þe’÷€3âi3$ã-3t2Lâe²â%´8$þ™¢´7$þ™£´6$þ™¤´5$þ™¥Z$l í´2d´2b´2`´/’´/´/Žµ/¦eAÄAäAüA Ae”AAÌAA¨AtAÄAØAìA A@A$A0 ATAx@Ò AŒA¤AÌAàA,HAAA A@@ÏdAXAlAtA- A|A„A”Aœ@ï8A¼ðdûgð@¢Sg%ô€"ñA² ÒñA´Z<•@FÐÒ’ñ!´ª@g¢í12@5¢íMZ<í1’JÒ“’êjaíñ´Z\e¨@k2Bêl"ñ´ Z<•¨@k2Bêl"ðá´Z<•¨@k2Bêl"ðá´ Z<•¨@gÂî12@6ÂîMî16ÎjîL&ðÁ´Z<•¨@gÂî12@6ÂîMî16ÖjîL&ð¡´Z<• ÁjîL&ð¡´Z<• Áj6ÊîL&ð´Z<• Áj6ÒîL&ð´Z<•¨Ak2Bêl"ða´Z<•¨Ak2Bêl"ða´Z<•¨Ak2Bêl"ðA´Z<•¨Ak2Bêl"ðA´Z<•¨Ak 2Bêl"ð!´Z<•¨Ak@2Bêl"ð!´Z<•¨A2B2^"ð´Z<•¨Aòk2@êl"ð´Z<•¨Aôk2@êl"÷à´Z<• Ãj6ÎîL&÷à´Z<•¨Aðk2@êl"÷À´Z<•¨Aðk2@êl"÷À´Z<•¨agCê12B3`êmê±R`÷ ´Z<•¨Bk2Bêl"÷€´Z<•¨Bk2Bêl"÷€´Z<•¨Bk2Bêl"÷`´Z<•¨Bk2Bêl"÷`´Z<•¨Bk2Bêl"÷@´Z<•¨Bk 2Bêl"÷@´Z<•¨Bk@2Bêl"÷ ´Z<•¨BgÂî12@6ÂîMî16ÞjîL&÷´Z<•¨Bôk2@êl"÷´Z<•¨Bðk2@êl"öà´Z<•¨Bðk2@êl"öà´Z<•öà´Z<•AGJAÒöÀ´Z<  ’Hê a÷ö ´Z\e©@òk2@êl"ö ´ Z<•©@ôk2@êl"ö€´Z<•©@ðk2@êl"ö€´Z<•©@ðk2@êl"ö`´Z<•©@ðk2@êl"ö`´Z<•©@ðk2@êl"ö@´Z<•©Áj6ÂîL&ö@´Z<•©Ak2Bêl"•ö ´ZÐ?Ð@ÐAÐBÐCÐDÐEÐFÐGÐHÐIÐJÐKÐLÐMZìÐNñ€nmZì³ñ€nô@Zìmñ€nõà Zìmñ€n÷`ZìmjÐ5Ð6Ð7Ð8Ð9Ò ÒÒ%Ò$Ò#Ò"Ò!Ò ÒÒÒÒÒ ÒÒÒÒÒÒ Ò Ò ÒÒÒÒÒÒiÒÒÒ’ò“êbaU’ñà* ’"•5O?ñà" ’ "•8õà CñÀ"’ "•7ô@GñÀ"’ "•9÷`KñÀ" ’ñÀ* ’"’ñ*’ ñÀ"õ€µ[g‚g"õ`µ[” ñ "õ`µ[” ðà*hðPm”Ò ñ * j„¡’“.2HãIõ@µ š[g*’ðà*1Òñ ÒjiÒ’JŒõ µ[g* ’ðÀ* 2Òñ! ÒjiÒëõµ[g* ’ð *3ÒñA ÒjiÒÙôàµ[g* ’ð * 4ÒñÒjiÒÇôÀµ[g* ’ð€*6Ò³ÒjiÒ¶ô µ[g* ’ð€*5ÒOÒjiÒ¥ô€µ[g* ’ *v8Ò õà ÒjiÒ ”ô`µ [g* ’ *e7Ò ô@ÒjiÒ ƒô@µ [g* ’ *T9Ò ÷`ÒjiÒ rô µ[gðÀ"ô µ[gðÀ"ôµ[gð "ôµ[gð "ôµ[gð "µÿ[gð "µý[gð "µû[gð "µù[gð "µ÷[gð "q`qY`q`Nq`_q`j´Ùñá“ œ€ëŽñ #Z„eqð€`q`cigZ :g’:Ó‚@*åÐ&Ó'·ä¶â•'Zô”&RaÛ’Ð(Ò)·à¶ß•)Z¬”(R`Ð’”Ð*š`Ð,CAÜ@’–*âiÒ/’”,Ò+Ò-—+[ •-g£[@g‚“/Ã@Ýn:Zg“:ƒ`+®ñZ`«“•›`CÝ€”ämë’š@Rd`Ÿ”Ba2HÜ`“ãIÚ¾’ š@Rd`“” Ba2HÜ`“ón:Zg“:ƒ`+…Z`ƒ2GÒ§jiÒ£jiÒŸjiÒ›jiÒ—jiÒ “jiÒ!jiÒ$‹jiÒ"‡jiÒ#ƒjiÒ%Ð }•6³;ö*jêKM’ö?"HhMhK’*’* ’* ’ *“’êm“ êm“"êm"Oðm”g"ö?"’"–1”ñ ZÔm’"–3”ñA ZÔm’"”;nZÔm’ "”CnZÔm’"”n.om’"”n.om’ "”gÐî.om’""g]”ð`¢Ïm.oî’g±.tš‹’*’* ’* ’ *“’êm“!êm“#êm"Oðm”g"õß"’"–2”ñ! ZÔm’"–4”ñZÔm’"”?nZÔm’ "”GnZÔm’"”n.om’"”n.om’!"”gÐî.om’#"g]”ð`¢Ïm.oî’g±.tš‹’ *’$“%êm"'ðm”g"õŸ"’ "”KnZÔm’$"”gÐî.om’%"g]”ð`¢Ïm.oî’g±.tš‹’• .tš‹jScAððdè C°A*¬A*°A*´A)àA)ìA)øA*A*A*A*(A*4A*@A*LA*TA*\A*dA*lA*xA*€A*ˆA*”A* ee?ð@àðødÿócœ mZˆ’“Ò ’HÒ ’mgÓ [TÒmg[g"kmÿgÑÓgâ÷  Z€MU÷€–.ô ²ô ´š [Xeô€cððdè jô·m+?J"ô²ô´š ê÷@’%B¤÷ ’Z4š´üZ<’N"´úZ<ª¢’O"´øZ<ª¢’P" ¢Drñ€`Z`rñ€`ra µñ rñ€`rñ€`rñ``µìµìZ, ´ëZ< ’s"´éZ<š¡’p"¢Dñ`"µæ´æZµC‡µC…µCƒµCµCµCµB˜´AÛ´@ÿ´?#´?G´=k´<Ž´;±mÿogÐMU?vö ’"!´7Z<¢¤•|%M%´3Z<–‹.² ´1š · m+?ö* ô•¶,#NgZø gªeBþ @éTCü@åÈA*¸A*ÌA*ÜA*üAtA*ìA+,A+@A ¬A+`A+€A+¤A+¼A+ÔA+ðA,A,A,$@ʸA,4A,@A,L@âøA,\A*ôA+A+A+A+$A °@ÊÀA,xA,„A,”A,°ðdõgÄg%·„m?"¶‚mdZLg‘ðduè ’ ðà" šARðàa k êz+èå¶zmdg‘êïZLÒáA’ "á¢äg¶tZLMdàA’"á¢äg¶pZLMdàA’ "ág¶lZLMdàA’"ág¶iZLMdàA’"ág¶eZLMdàA’"ág¶bZLMdàA’"ág¶^ZLMdàA’!"ág¶[ZLMdàA’""ág¶WZLMdàA’#"ág¶TZLMdàA’$"ág¶PZLMdàA’%"ág¶MZLMdàA’ "ág¶IZLMdàA’"á¢äg¶EZLMdàA’"á¢äg¶AZLMdàA’"á¢äg¶=ZLMdàA’"á¢äg¶9ZLMdàA’"á¢äg¶5ZLMdàA’"á¢äg¶1ZLMdàA’"á¢äg¶-ZLMdàA’"á¢äg¶)ZLMdàA’"á¢äg¶%ZLMdàA’÷"á¢ä¶!MdZLg ’ "ªB¶mdZLg‘CøA,´A,ÜA,øA-A- A-A-A-(A-0A-8A-@A-HA-PA-XA-`A-lA-xA-„A-A-œA-¨A-¸A-ÄA-ÐA-ÜA,ìð°dúœ mH[Tgmg[g"kmÿgÑÓgâMUZ€’ Z4š´5Z< –o. ²3´3š [Xeð°dzè j·0m ?"²+´-š ï’"š¡’"H¶*´+Z unknownchannel %d (%d MHz), width: %s, center1: %d MHz, center2: %d MHz, punctured: 0x%x phy dev wdev %s %.*s Usage: %s [options] command Options: --debug enable netlink debugging --version show version (%s) Commands: Commands that use the netdev ('dev') can also be given the 'wdev' instead to identify the device. You can omit the 'phy' or 'dev' if the identification is unique, e.g. "iw wlan0 info" or "iw phy0 info". (Don't when scripting.) Do NOT screenscrape this tool, we don't consider its output stable. * primary channel: %d * secondary channel offset: %s * STA channel width: %s 20 or 40 MHz160 MHz80+80 MHz * channel width: %d (%s) * center freq segment 1: %d * center freq segment 2: %d * VHT basic MCS set: 0x%.2x%.2x * station count: %d * channel utilisation: %d/255 * available admission capacity: %d [*32us] * malformed capability * Group capa: 0x%.2x, Device capa: 0x%.2x * malformed device info * Unknown TLV (%#.2x, %d bytes): %.2x * bogus tail data (%d): DGAF: %i Unexpected length: %i HE Operation Parameters: (0x%02x%02x%02x) Default PE Duration: %hhu TWT Required TXOP Duration RTS Threshold: %hu VHT Operation Information Present Co-Hosted BSS ER SU Disable 6 GHz Operation Information Present BSS Color: %hhu Partial BSS Color BSS Color Disabled Basic HE-MCS NSS Set: 0x%04x %d streams: MCS 0-%d VHT Operation Info: Invalid VHT Operation Info: 0x%02x%02x%02x Max Co-Hosted BSSID: Invalid Max Co-Hosted BSSID: %hhu 6 GHz Operation Info: Invalid 6 GHz Operation Information: 0x%02x Primary Channel: %hhu Channel Width: 20 MHz40 MHz80+80 or 160 MHz Duplicate Beacon: True Regulatory Info: %hhu Center Frequency Segment 0: %hhu Center Frequency Segment 1: %hhu Minimum Rate: %hhu MLD MAC: %s Link ID: %d EML Capabilities: 0x%04x EMLSR Support EMLMR Support MLD Capabilities and Operations: 0x%04x Maximum Number of Simultaneous Links: %d EHT Operation Parameters: (0x%02x) EHT Default PE Duration Group Addressed BU Indication Limit Group Addressed BU Indication Exponent: 0x%01x Basic EHT-MCS And Nss Set: 0x EHT Operation Info: Invalid EHT Operation Info: 0x320 MHzinvalid bandwidth (%d) Disabled Subchannel Bitmap: 0x%02x%02x HWSIM PS: %d nl80211 features: 0x%x * split wiphy dump%s %s %s Power save: %s configregulatorymlmevendornaninvalid mac address invalid destination mac address next_hopinvalid next hop mac address not a valid ISO/IEC 3166-1 alpha2 Special non-alpha2 usable entries: 00 World Regulatory domain failed to allocate netlink callbacks -f-t-T-rBand %d: * %d MHz [%d] (disabled) Maximum TX power: %.1f dBm No IR Passive scan No IBSS Radar detection Channel widths: 20MHz HT40- HT40+ VHT80 VHT160 DFS state: %s (for %lu sec) DFS CAC time: %u ms (self-managed)DFS-invalidNo alpha2No reg rulesphy#%d%s globalcountry %c%c: %s (%d - %d @ %d), (N/A, %d), (%u ms), (N/A)NO-OFDM, %sNO-CCKNO-INDOORNO-OUTDOORDFSPTP-ONLYAUTO-BWIR-CONCURRENTNO-HT40MINUSNO-HT40PLUSNO-80MHZNO-160MHZNO-HENO-320MHZNO-EHT, NO-IRPASSIVE-SCANNO-IBSSfixed-freqbeacon-intervalbasic-rates,mcast-ratemumimo-groupidInvalid groupID: %s %2xFailed reading groupID mumimo-follow-macInvalid MAC address typeadhocibssocbmonitormasterapYou need to run a management daemon, e.g. hostapd, see http://wireless.kernel.org/en/users/Documentation/hostapd for more information on how to do that. __ap__ap_vlanwdsmanagedmgdstationmpmesh__p2pcl__p2pdev__p2pgo__naninvalid interface type %s mesh_idaddr4addr4addr error flagsflags error radiosInvalid radio list failed to allocate flags unknown flag %s BSSID: %s SSID: Band Info: %u Channel Info: %u /sys/class/ieee80211/%s/index/var/run/netns%s/%sInvalid parameter: pid(%s) nameInvalid parameter: nsname(%s) , [%s%d] ERROR: received positive netlink error code %d kernel reports: %*s failed to allocate netlink message building message failed -wconnectestablishfeaturesNot connected.MLD %s stats: linkget_bssget_staregdumptriggerscan aborted!KEY_IDX missing! ATTR_KEY_DATA missing! KeyATTR_KEY_SEQ missing! Key seqUse group cipher suiteWEP-40TKIPCCMPWEP-104%.02x-%.02x-%.02x:%dAES-128-CMACNO-GROUPGCMPGCMP-256BIP-GMAC-128BIP-GMAC-256BIP-CMAC-256 * Version: %d * Group cipher: %s * Pairwise ciphers: %s * Group cipher: * Pairwise ciphers: * Authentication suites: %s * Authentication suites:IEEE 802.1XPSKFT/IEEE 802.1XFT/PSKIEEE 802.1X/SHA-256PSK/SHA-256TDLS/TPKSAEFT/SAEIEEE 802.1X/SUITE-BIEEE 802.1X/SUITE-B-192FT/IEEE 802.1X/SHA-384FILS/SHA-256FILS/SHA-384FT/FILS/SHA-256FT/FILS/SHA-384OWEFT/PSK/SHA-384PSK/SHA-384SAE-EXT-KEYFT/SAE-EXT-KEYDPP * Capabilities: PreAuth NoPairwise 1-PTKSA-RC 2-PTKSA-RC 4-PTKSA-RC 16-PTKSA-RC 1-GTKSA-RC 2-GTKSA-RC 4-GTKSA-RC 16-GTKSA-RC MFP-required MFP-capable Peerkey-enabled SPP-AMSDU-capable SPP-AMSDU-required Extended-Key-ID (0x%.4x) * %d PMKIDs * Group mgmt cipher suite: * bogus tail data (%d): Vendor specific: data: MS/WiFi %#.2x, data: WFA %#.2x, data: Vendor specific: OUI %.2x:%.2x:%.2x, data: Extension IE: Unknown Extension ID (%d): Unknown IE (%d):fixedMissing TX power level argument.frameinvalid frame pattern: %p freqlowpriflushap-forcecolocduration-mandatoryrandomiserandomizessidpassivemeshidduration%u:%dMust specify a value for %s. %s must be set to active, light or deep. %s must be set to a number between 0 and %u dtim-periodvendor_syncTIDfailed to parse nested TXQ stats attributes! %s %s qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets %s bss info missing! failed to parse nested attributes! BSS %s(on %s) -- authenticated -- associated -- joined -- unknown status: %d last seen: %llu.%.3llus [boottime] TSF: %llu usec (%llud, %.2lld:%.2llu:%.2llu) freq: %d.%d freq: %d beacon interval: %d TUs capability: ESS IBSS signal: %d.%.2d dBm signal: %d/100 last seen: %d ms ago Information elements from Probe Response frame: Information elements from Beacon frame:Packet limit: %u pkts Memory limit: %u bytes Quantum: %u bytes Number of queues: %u Backlog: %u pkts Memory usage: %u bytes Packet limit overflows: %u Memory limit overflows: %u Hash collisions: %u mpath info missing! %s %s %s 0x%x%s = !! inconsistent MLD address information (%s) Connected to %s (on %s) Link %d BSSID %s Authenticated with %s (on %s) Joined IBSS %s (on %s) %sfreq: %d.%d sta stats missing! RX: %u bytes (%u packets) TX: %u bytes (%u packets) signal: %d dBm rx bitrate: %s tx bitrate: %s failed to parse nested bss parameters! bss flags: CTS-protection%sshort-preamble%sshort-slot-time dtim period: %d beacon int: %dphy#%d %sInterface %s %sUnnamed/non-netdev interface %s ifindex %d %s wdev 0x%llx %s addr %s %s ssid %s type %s %s wiphy %d %s %s txpower %d.%.2d dBm %s multicast TXQ:%s %s 4addr: on %s MLD with links: %s - link ID %2d link addr %s %s %s txpower %d.%.2d dBm%s Radios:, STA/AP BI must match%s%svalid interface combinations: %s * #{ } <= %u, %s total <= %d, #channels <= %d%s, radar detect widths: {%s %s }Wiphy %s wiphy index: %u Band %d: HE Iftypes: EHT Iftypes: Frequencies: * %d.%d MHz * %d MHz [%d]disabled (%.1f dBm)no IRpassive scanno ibssradar detection max # scan SSIDs: %d max scan IEs length: %d bytes max # sched scan SSIDs: %d max # match sets: %d max # scan plans: %d max scan plan interval: %d max scan plan iterations: %d Fragmentation threshold: %d RTS threshold: %d Retry short long limit: %d Retry short limit: %d Retry long limit: %d Coverage class: %d (up to %dm) Available Antennas: TX %#x RX %#x Configured Antennas: TX %#x RX %#x Supported interface modes%s: %s * %s interface combinations are not supported Device supports roaming. Device supports AP-side u-APSD. HT Capability overrides: * MCS: %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx * maximum A-MSDU length * supported channel width * short GI for 40 MHz * max A-MPDU length exponent * min MPDU start spacing ERROR: capabilities mask is too short, expected: %d, received: %d Device supports T-DLS. Supported extended features:VHT-IBSSVHT_IBSS * [ %s ]: %s RRMMU-MIMO snifferMU_MIMO_AIR_SNIFFERscan start timestampSCAN_START_TIMEBSS last beacon/probe TSFBSS_PARENT_TSFscan dwell settingSET_SCAN_DWELLlegacy beacon rate settingBEACON_RATE_LEGACYHT beacon rate settingBEACON_RATE_HTVHT beacon rate settingBEACON_RATE_VHTSTA FILS (Fast Initial Link Setup)FILS_STArandomized TA while not associatedMGMT_TX_RANDOM_TArandomized TA while associatedMGMT_TX_RANDOM_TA_CONNECTEDsched_scan for BSS with better RSSI reportSCHED_SCAN_RELATIVE_RSSImultiple CQM_RSSI_THOLD recordsCQM_RSSI_LISTFILS shared key authentication offloadFILS_SK_OFFLOAD4-way handshake with PSK in station mode4WAY_HANDSHAKE_STA_PSK4-way handshake with 802.1X in station mode4WAY_HANDSHAKE_STA_1XFILS max channel attribute override with dwell timeFILS_MAX_CHANNEL_TIMEaccepts broadcast probe responseACCEPT_BCAST_PROBE_RESPprobe request TX at high rate (at least 5.5Mbps)OCE_PROBE_REQ_HIGH_TX_RATEprobe request tx deferral and suppressionOCE_PROBE_REQ_DEFERRAL_SUPPRESSIONMFP_OPTIONAL value in ATTR_USE_MFPMFP_OPTIONALlow span scanLOW_SPAN_SCANlow power scanLOW_POWER_SCANhigh accuracy scanHIGH_ACCURACY_SCANDFS offloadDFS_OFFLOADcontrol port over nl80211CONTROL_PORT_OVER_NL80211ack signal level supportACK_SIGNAL_SUPPORTFQ-CoDel-enabled intermediate TXQsTXQSuse random sequence numbers in scansSCAN_RANDOM_SNuse probe request with only rate IEs in scansSCAN_MIN_PREQ_CONTENTcan safely replace PTK 0 when rekeyingCAN_REPLACE_PTK0enable FTM (Fine Time Measurement) responderENABLE_FTM_RESPONDERairtime fairness schedulingAIRTIME_FAIRNESSPMKSA caching supported in AP modeAP_PMKSA_CACHINGband specific RSSI thresholds for scheduled scanSCHED_SCAN_BAND_SPECIFIC_RSSI_THOLDExtended Key ID supportEXT_KEY_IDTX power control per stationSTA_TX_PWRSAE offload supportSAE_OFFLOADVLAN offload supportVLAN_OFFLOADAirtime Queue Limits (AQL)AQLbeacon protection supportBEACON_PROTECTIONdisable pre-auth over nl80211 control port supportCONTROL_PORT_NO_PREAUTHprotected Target Wake Time (TWT) supportPROTECTED_TWTdeletion of IBSS station supportDEL_IBSS_STAmgmt frame registration for multicastMULTICAST_REGISTRATIONSbeacon prot. for clients supportBEACON_PROTECTION_CLIENTscan on kHz frequency supportSCAN_FREQ_KHZtx status for nl80211 control port supportCONTROL_PORT_OVER_NL80211_TX_STATUSOperating Channel Validation (OCV) supportOPERATING_CHANNEL_VALIDATIONAP mode PSK offload support4WAY_HANDSHAKE_AP_PSKAP mode SAE authentication offload supportSAE_OFFLOAD_APFILS discovery frame transmission supportFILS_DISCOVERYunsolicated broadcast probe response transmission supportUNSOL_BCAST_PROBE_RESPHE beacon rate support (AP/mesh)BEACON_RATE_HEsecure LTF measurement protocol supportSECURE_LTFsecure RTT measurement protocol supportSECURE_RTTsupport for MFP in range measurement negotiation/procedurePROT_RANGE_NEGO_AND_MEASUREBSS coloring supportBSS_COLORFILS crypto offloadFILS_CRYPTO_OFFLOADRadar background supportRADAR_BACKGROUNDcan change MAC address while upPOWERED_ADDR_CHANGEpreamble puncturing in AP modePUNCTsecure NAN supportSECURE_NANrandom auth/deauth transmitter addressAUTH_AND_DEAUTH_RANDOM_TAOWE DH element handling offload (client)OWE_OFFLOADOWE DH element handling offload (AP)OWE_OFFLOAD_APDFS channel use under concurrent DFS masterDFS_CONCURRENTSPP A-MSDU supportSPP_AMSDU_SUPPORT Coalesce support: * Maximum %u coalesce rules supported * Each rule contains up to %u patterns of %u-%u bytes, maximum packet offset %u bytes * Maximum supported coalescing delay %u msecs Peer measurement (PMSR) Malformed PMSR Max peers: %d REPORT_AP_TSF RANDOMIZE_MAC_ADDR FTM (Fine time measurement or Flight time measurement) Preambles: LEGACY HT VHT DMG Bandwidth: 20_NOHT 20 40 80 80P80 160 5 10 1 2 4 8 16 320 MAX_BURSTS_EXPONENT: %d MAX_FTMS_PER_BURST: %d ASAP NON_ASAP REQ_LCI REQ_CIVICLOC TRIGGER_BASED NON_TRIGGER_BASED PMSR type is missing Maximum associated stations in AP mode: %u Supported wiphy radios: * Idx %u: Frequency Range: %u MHz - %u MHzRadio's Radio level interface combinations are not supported RTS Threshold: %d * Globally Global interface combinations are not supportedBUG%Y-%m-%d %H:%M:%S[%s.%06lu]: %llu.%06llu: %s (phy #%d): phy #%d: wdev 0x%llx (phy #%d): %s: wdev 0x%llx: regulatory domain change (phy): regulatory domain change: set to %s by %s request on phy%dset to world roaming by %s requestcustom world roaming rules in place on phy%d by %s requestintersection used due to a request made by %sunknown source (upgrade this utility)beacon hint:phy%d %d MHz [%d]: o Initiating radiation enabled o active scan enabled o ibss enablednew station %s del station %s unknown event %d --debug--versioniw version %s helpFailed to allocate netlink socket. Failed to connect to generic netlink. nl80211nl80211 not found. devphywdevUsage: %s [options] command failed: %s (%d) ACTIVELIGHT SLEEPDEEP SLEEPUNKNOWN%sinactive time: %u ms%srx bytes: %llu%srx bytes: %u%srx packets: %u%stx bytes: %llu%stx bytes: %u%stx packets: %u%stx retries: %u%stx failed: %u%sbeacon loss: %u beacon rx: %llu%srx drop misc: %llu%ssignal: %d %sdBm%ssignal avg: %d %sdBm%sbeacon signal avg: %d dBm%sToffset: %llu us%stx bitrate: %s%stx duration: %lld us%srx bitrate: %s%srx duration: %lld us%slast ack signal:%d dBm%savg ack signal: %d dBm%sairtime weight: %d%sexpected throughput: %u.%uMbps-v%sMSDU:%sTID rx tx tx retries tx failedfailed to parse nested stats attributes! %llu %llu%sTXQs:%sfailed to parse nested bss param attributes!%sDTIM period: %u%sbeacon interval:%u%sCTS protection: yes no%sshort preamble:%sshort slot time:yesno%sconnected time: %u seconds%sassociated at [boottime]: %llu.%.3llus%sassociated at: %llu msHE capabilitiesHE OperationEHT OperationMulti-LinkEHT capabilitiesP2PHotSpot 2.0 IndicationHotSpot 2.0 OSENOWE Transition ModeWPASSIDBSS LoadHT capabilitiesRSNHT operationSecondary Channel OffsetMESH IDVHT capabilitiesVHT operationanyno secondaryabove[reserved!]belowDFS-UNSETDFS-FCCDFS-ETSIDFS-JPusableunavailableavailablemesh_retry_timeoutmesh_confirm_timeoutmesh_holding_timeoutmesh_max_peer_linksmesh_max_retriesmesh_ttlmesh_element_ttlmesh_auto_open_plinksmesh_hwmp_max_preq_retriesmesh_path_refresh_timemesh_min_discovery_timeoutmesh_hwmp_active_path_timeoutmesh_hwmp_preq_min_intervalmesh_hwmp_net_diameter_traversal_timemesh_hwmp_rootmodemesh_hwmp_rann_intervalmesh_gate_announcementsmesh_fwdingmesh_sync_offset_max_neighormesh_rssi_thresholdmesh_hwmp_active_path_to_root_timeoutmesh_hwmp_root_intervalmesh_hwmp_confirmation_intervalmesh_power_modemesh_awake_windowmesh_plink_timeoutmesh_connected_to_gatemesh_nolearnmesh_connected_to_asNO HTHT20HT40-HT40+nonefcsfailplcpfailcontrolotherbsscook20 MHz (no HT)5 MHz10 MHzthe wireless core upon initializationa usera drivera country IE%d, plink_actionvlanairtime_weighttxpwr3/41/2x2undef(%s NSS) :%02x%xsubtypereason-codeinvalid vlan id invalid airtime weight Unknown mode (%d)\x%.2xpunct Maximum RX AMPDU length %d bytes (exponent: 0x0%02x) Maximum RX AMPDU length: unrecognized bytes (exponent: %d) BUG (spacing more than 3 bits!) Minimum RX AMPDU time spacing: %s (0x%02x) Capabilities: 0x%02x RX LDPC HT20 HT20/HT40 Static SM Power Save Dynamic SM Power Save SM Power Save disabled RX Greenfield RX HT20 SGI RX HT40 SGI TX STBC No RX STBC RX STBC 1-stream RX STBC 2-streams RX STBC 3-streams HT Delayed Block Ack Max AMSDU length: 7935 bytes Max AMSDU length: 3839 bytes No DSSS/CCK HT40 DSSS/CCK HT40 40 MHz Intolerant L-SIG TXOP protection HT Max RX data rate: %d Mbps HT TX/RX MCS rate indexes supported: HT RX MCS rate indexes supported: TX unequal modulation supported TX unequal modulation not supported HT TX Max spatial streams: %d HT TX MCS rate indexes supported may differ HT TX MCS rate indexes are undefinednot VHT Capabilities (0x%.8x): Max MPDU length: 3895799111454(reserved) Supported Channel Width: neither 160 nor 80+80160 MHz, 80+80 MHz20MHz40MHz160MHz80+80MHz short GI (80 MHz) short GI (160/80+80 MHz) SU Beamformer SU Beamformee MU Beamformer MU Beamformee VHT TXOP PS +HTC-VHT RX antenna pattern consistency TX antenna pattern consistency VHT RX MCS set:MCS 0-7MCS 0-8MCS 0-9 VHT RX highest supported: %d Mbps VHT TX MCS set: VHT TX highest supported: %d Mbps VHT extended NSS: %ssupported RX%s HE MAC Capabilities (0x%04x%s +HTC HE Supported %s TWT Requester %s TWT Responder %s Dynamic BA Fragementation Level: %d %s Maximum number of MSDUS Fragments: %d %s Minimum Payload size of 128 bytes: %d %s Trigger Frame MAC Padding Duration: %d %s Multi-TID Aggregation Support: %d %s All Ack %s TRS %s BSR %s Broadcast TWT %s 32-bit BA Bitmap %s MU Cascading %s Ack-Enabled Aggregation %s OM Control %s OFDMA RA %s Maximum A-MPDU Length Exponent: %d %s A-MSDU Fragmentation %s Flexible TWT Scheduling %s RX Control Frame to MultiBSS %s BSRP BQRP A-MPDU Aggregation %s QTP %s BQR %s SRP Responder Role %s NDP Feedback Report %s OPS %s A-MSDU in A-MPDU %s Multi-TID Aggregation TX: %d %s HE Subchannel Selective Transmission %s UL 2x996-Tone RU %s OM Control UL MU Data Disable RX %s HE PHY Capabilities: (0x%s HE40/2.4GHz %s HE40/HE80/5GHz %s HE160/5GHz %s HE160/HE80+80/5GHz %s 242 tone RUs/2.4GHz %s 242 tone RUs/5GHz %s Punctured Preamble RX: %d %s Device Class: %d %s LDPC Coding in Payload %s HE SU PPDU with 1x HE-LTF and 0.8us GI %s Midamble Rx Max NSTS: %d %s NDP with 4x HE-LTF and 3.2us GI %s STBC Tx <= 80MHz %s STBC Rx <= 80MHz %s Doppler Tx %s Doppler Rx %s Full Bandwidth UL MU-MIMO %s Partial Bandwidth UL MU-MIMO %s DCM Max Constellation: %d %s DCM Max NSS Tx: %d %s DCM Max Constellation Rx: %d %s DCM Max NSS Rx: %d %s Rx HE MU PPDU from Non-AP STA %s SU Beamformer %s SU Beamformee %s MU Beamformer %s Beamformee STS <= 80MHz: %d %s Beamformee STS > 80MHz: %d %s Sounding Dimensions <= 80MHz: %d %s Sounding Dimensions > 80MHz: %d %s Ng = 16 SU Feedback %s Ng = 16 MU Feedback %s Codebook Size SU Feedback %s Codebook Size MU Feedback %s Triggered SU Beamforming Feedback %s Triggered MU Beamforming Feedback %s Triggered CQI Feedback %s Partial Bandwidth Extended Range %s Partial Bandwidth DL MU-MIMO %s PPE Threshold Present %s SRP-based SR %s Power Boost Factor ar %s HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI %s Max NC: %d %s STBC Tx > 80MHz %s STBC Rx > 80MHz %s HE ER SU PPDU 4x HE-LTF 0.8us GI %s 20MHz in 40MHz HE PPDU 2.4GHz %s 20MHz in 160/80+80MHz HE PPDU %s 80MHz in 160/80+80MHz HE PPDU %s HE ER SU PPDU 1x HE-LTF 0.8us GI %s Midamble Rx 2x & 1x HE-LTF %s DCM Max BW: %d %s Longer Than 16HE SIG-B OFDM Symbols %s Non-Triggered CQI Feedback %s TX 1024-QAM %s RX 1024-QAM %s RX Full BW SU Using HE MU PPDU with Compression SIGB %s RX Full BW SU Using HE MU PPDU with Non-Compression SIGB <= 80%s HE %s MCS and NSS set %s MHz %s %d streams: TX%s PPE Threshold 0x%02x %s EHT MAC Capabilities (0x%s EPCS Priority Access Supported %s EHT OM Control Supported %s Triggered TXOP Sharing Mode 1 Supported %s Triggered TXOP Sharing Mode 2 Supported %s Restricted TWP Supported %s SCS Traffic Description Supported %s Maximum MPDU Length: %d %s Maximum A_MPDU Length Exponent Extension %s EHT TRS Supported %s TXOP Return In TXOP Sharing Mode 2 Supported %s Two BQRs Supported %s EHT Link Adaptation Supported: %d %s EHT PHY Capabilities (0x%s 320MHz in 6GHz Supported %s 242-tone RU in BW wider than 20MHz Supported %s NDP With EHT-LTF And 3.2 µs GI %s Beamformee SS (80MHz): %d %s Beamformee SS (160MHz): %d %s Beamformee SS (320MHz): %d %s Number Of Sounding Dimensions (80MHz): %d %s Number Of Sounding Dimensions (160MHz): %d %s Number Of Sounding Dimensions (320MHz): %d %s Codebook size (4, 2) SU Feedback %s Codebook size (7, 5) MU Feedback %s Triggered MU Beamforming Partial BW Feedback %s PSR-Based SR Support %s Power Boost Factor Support %s EHT MU PPDU With 4 EHT-LTF And 0.8 µs GI %s Max Nc: %d %s Tx 1024-QAM And 4096-QAM < 242-tone RU %s Rx 1024-QAM And 4096-QAM < 242-tone RU %s PPE Thresholds Present %s Common Nominal Packet Padding: %d %s Maximum Number Of Supported EHT-LTFs: %d %s Support of MCS 15: %d %s Support Of EHT DUP In 6 GHz %s Support For 20MHz Rx NDP With Wider Bandwidth %s Non-OFDMA UL MU-MIMO (80MHz) %s Non-OFDMA UL MU-MIMO (160MHz) %s Non-OFDMA UL MU-MIMO (320MHz) %s MU Beamformer (80MHz) %s MU Beamformer (160MHz) %s MU Beamformer (320MHz) %s TB Sounding Feedback Rate Limit %s Rx 1024-QAM In Wider Bandwidth DL OFDMA Supported %s Rx 4096-QAM In Wider Bandwidth DL OFDMA Supported %s EHT-MCS Map (20 MHz Non-AP STA) (0x%s Rx Max NSS for MCS %s: %u %s Tx Max NSS for MCS %s: %u %s EHT-MCS Map (BW <= 80) (0x%s EHT-MCS Map (BW = 160) (0x%s EHT-MCS Map (BW = 320) (0x%s EHT PPE Thresholds %s: %02x nlctrl--radiolegacy-2.4legacy-5ht-mcs-2.4ht-mcs-5vht-mcs-2.4vht-mcs-5he-mcs-2.4he-mcs-5he-mcs-6sgi-2.4sgi-5lgi-2.4lgi-5he-gi-2.4he-gi-5he-gi-6he-ltf-2.4he-ltf-5he-ltf-60.81.63.2Station %s (on %s) mesh llid: %d mesh plid: %dLISTENOPN_SNTOPN_RCVDCNF_RCVDESTABHOLDINGBLOCKED mesh plink: %s mesh airtime link metric: %d mesh connected to gate: %s mesh connected to auth server: %s mesh local PS mode: mesh peer PS mode: mesh non-peer PS mode: authorized: authenticated: associated: preamble: WMM/WME: MFP: TDLS peer: current time: %llu ms Link %u: address: %slink sta stats missing! failed to parse nested rate attributes!%d.%d MBit/s(unknown) MCS %d VHT-MCS %d 40MHz 80MHz 80P80MHz 160MHz 320MHz 1MHz 2MHz 4MHz 8MHz 16MHz short GI VHT-NSS %d HE-MCS %d HE-NSS %d HE-GI %d HE-DCM %d HE-RU-ALLOC %d EHT-MCS %d EHT-NSS %d EHT-GI %d EHT-RU-ALLOC %d [in use]Survey data from %s survey data missing! frequency: %u MHz%s noise: %d dBm channel active time: %llu ms channel busy time: %llu ms extension channel busy time: %llu ms channel receive time: %llu ms channel BSS receive time: %llu ms channel transmit time: %llu ms bitrates[legacy-<2.4|5> *] [ht-mcs-<2.4|5> *] [vht-mcs-<2.4|5> [he-mcs-<2.4|5|6> *] [sgi-2.4|lgi-2.4] [sgi-5|lgi-5] [he-gi-<2.4|5|6> <0.8|1.6|3.2>] [he-ltf-<2.4|5|6> <1|2|4>]Sets up the specified rate masks. Not passing any arguments would clear the existing mask (if any).disconnectDisconnect from the current network.[-w] [] [] [auth open|shared] [key 0:abcde d:1:6162636465] [mfp:req/opt/no]Join the network with the given SSID (and frequency, BSSID). With -w, wait for the connect to finish or fail. [key 0:abcde d:1:6162636465]Authenticate with the given network. event[-t|-T|-r] [-f]Monitor events from the kernel. -t - print timestamp -T - print absolute, human-readable timestamp -r - print relative timestamp -f - print full frame for auth/assoc etc.getpssetpsstopqueueshwsimwakequeuesleaveLeave the current IBSS cell.join [NOHT|HT20|HT40+|HT40-|5MHz|10MHz|80MHz] [fixed-freq] [] [beacon-interval ] [basic-rates ] [mcast-rate ] [key d:0:abcde]Join the IBSS cell with the given SSID, if it doesn't exist create it on the given frequency. When fixed frequency is requested, don't join/create a cell on a different frequency. When a fixed BSSID is requested use that BSSID and do not adopt another cell's BSSID even if it has higher TSF and the same SSID. If an IBSS is created, create it with the specified basic-rates, multicast-rate and beacon-interval.infoShow capabilities for the specified wireless device.listList all wireless devices and their capabilities.add type [mesh_id ] [4addr on|off] [flags *] [addr ] [radios all|[,...]]Add a new virtual interface with the given configuration. Valid interface types are: managed, ibss, monitor, mesh, wds. The flags are only used for monitor interfaces, valid flags are: none: no special flags fcsfail: show frames with FCS errors control: show control frames otherbss: show frames from other BSSes cook: use cooked mode active: use active mode (ACK incoming unicast packets) mumimo-groupid : use MUMIMO according to a group id mumimo-follow-mac : use MUMIMO according to a MAC address The mesh_id is used only for mesh mode.delRemove this virtual interfaceShow information for this interface.*Set monitor flags. Valid flags are: none: no special flags fcsfail: show frames with FCS errors control: show control frames otherbss: show frames from other BSSes cook: use cooked mode active: use active mode (ACK incoming unicast packets) mumimo-groupid : use MUMIMO according to a group id mumimo-follow-mac : use MUMIMO according to a MAC addressList all network interfaces for wireless hardware.Set interface type/mode. Valid interface types are: managed, ibss, monitor, mesh, wds.Set interface 4addr (WDS) mode.noack_mapSet the NoAck map for the TIDs. (0x0009 = BE, 0x0006 = BK, 0x0030 = VI, 0x00C0 = VO)mcast_rateSet the multicast bitrate.[command]Print usage for all or a specific command, e.g. "help wowlan" or "help wowlan enable".keyget Retrieve a key and key sequence. Print information about the current connection, if any.mesh_param= [=]*Set mesh parameter (run command without any to see available ones).[]Retrieve mesh parameter (run command without any to see available ones).List all supported mesh parameters [[freq ] [basic-rates ]], [mcast-rate ] [beacon-interval