07070100EA3361000041ED00000000000000000000001069F91E1500000000000000080000000100000000000000000000000200000000.07070100EA4D98000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000000500000000proc07070100EA494D000041ED00000000000000000000000769F91E1500000000000000080000000100000000000000000000000400000000usr07070100EA4DA10000A1FF00000000000000000000000169F91E1500000003000000080000000100000000000000000000000A00000000usr/lib64lib07070100EA4D09000041ED00000000000000000000000369F91E1500000000000000080000000100000000000000000000000C00000000usr/libexec07070100EA5648000081ED00000000000000000000000169F91E1500010490000000080000000100000000000000000000001900000000usr/libexec/logread-uboxELF @@8 @@ @ @8 8 8pX X X  /@/@  8` ` `ppdtQdtR  hh/lib/ld-musl-mips64-sf.so.1@( P( P(4 P( P( P( P  (  (P     p  p Pp5 `ppp p pAp$poo oo %A- = 3, 4 !$>&? #%;2'"+/)6@(*059.:17<8  ( Pq  |  (Pe (0 (  ( ( 'd '_ ' 'Z ' ' ' ' 'pT '`L 'P '@ '0v ' E '= ' &f & &6 & &. &Q & && &p &` &P &@ &0v &  & &" %? %1 % %  %x %j % %'} %p# %`7 %P %@  %0> %  %` %"EW $__RLD_MAPuloop_doneuloop_fd_addblob_buf_initblobmsg_parseblobmsg_add_fieldustream_get_read_bufustream_consumeuloop_run_timeoutuloop_fd_deleteusock_finiuloop_timeout_setuloop_initustream_fd_initfputsstrlenstderrfclosememsetfopenunlinkopenlogfprintfwrite__stack_chk_failuloop_cancelledmallocmemcpy__stack_chk_guardsnprintfubus_freeubus_strerrorubus_lookup_idubus_invoke_async_fdubus_connectubus_complete_request_asyncstat__register_frame_info__deregister_frame_infogetpidsleepstrtoulsendrenamectimesignalstrncatregcompgetoptregexecsyslogsprintffsyncexitatoi__libc_start_mainoptindoptarglibubox.so.20260213libubus.so.20251202libjson-c.so.5libblobmsg_json.so.20260213libgcc_s.so.1libc.soGLIBC_2.0 iig߼߿g g <-gpPߙhߔ@ߓ@%%$ $%%fs-X$f.0 $Pߙ `0% (% @ %W@%ߙ ߙ@  %@@%߂߄@Eߙp d-x߿*{@ *Z@Y*Q@&$0P5$FPJ߂߂߅@ߙ&Dd* $߿߾߼߷߶ߵߴ߲߳߱%߰g&.!@߂~-\-@$SP߂ߙ D$ *d ߃8b߂8$C ߂8$C߂V߃bdDd߃8b@߃pb$D"-dC߂8C8C߂8CH߂C߂8C(߂C߂8C0߂8$C߂ߙ D|@%߂ߙD0% (%߄80C$bC%m߂ߙD0% (%߄80C$bC%^߂C߂8YC ߐ߄8ߙ0$ dP@Qߙ ߂8MC߂8$HCߙߔ8$  dDP@ߓ8߂8D(߅@ߙ( d-@ @%ߙ ߅@ߙ@0%d-  %ߙ  %ߓ8ߙ(%fd g߆@ߙ$$@8%d-$fd ߆@ߙ,B$@8%d-$fd A߆@ߙ$@8%d-$ fd߂@ߖ8dBfߙ$h(%@ % ߕ8߅@ߙgd-  %@)@%ߙ߂ % ^߅@ߙ %@0% d-ߙ$ @$C@ண@ߙ   %ߙ @߿߂8D(ߙX @߂@@@@߆@߂8B@@)߂8B8@&߄@ߙ`$$ d-߂8$C߂@߄8dBߙ߂@d$dB ߆@ߙPg؏$ @@%d-  %ߢߙ %@(% X$ߙߞ8H߂8ߙx$$ $ CA߂߅@ߙDH d(ߙ $$֮%/ %(-<-$$ g<-ghPߙ߈ ߇(0%߄0H% d߿߼gg<-ghߐ8@߂@ߙ߄8 d$߿߼߰g g<-gg߂(@߅8߄8ߙ(d d߿߼ga d*8e%$$cd$|cC-%< -dg܂8B@܂܂8$ C@܂$Cg<-gfߐ8ߙf %%$ (%߂@ߙdB$8߂@ (% %dBL ߿߼߱߰g @g<-gfLߙߐ8 fߙh ߄8ߙ$d$ ߿߼߰g g <-geߐ8ߒ8ߑ8 ߙ&8E@(  +߄8dA߂߅@ߙD d(߄8ߙ$ d߿(߼ ߲߱߰g0ߙ $ (C`߿(F@@'8߈@e(p߅@ߙd( $ $b$ ߈@e(xgX<-gd߂0`ߞ8B g"hPH@80(@&d߄8ߙ}%g0$ dߢ8@ߢ@@ߢH@ߢP@ߢ0@$ߖ8b6ߒ8B@3ߐ8ߙH gX@-Cߢb*@)ߙ Hߙ dD$ߙh @%@ H߅@ߙd( @ %Hߙ @(%ߙ` @ %ߙxH$ $ A "߂߅@ߙDH d(ߙ $ߓ@fs`% ߤ@U߂8B@~0b0B@ߢ߲0@`% @ %@%߂8B@߄8ߤP`% ߗ8hHlH$@8@@(߆@ߙ8d)$  ghߙx g(ߙ@ % @%-@$b߆@ߙ8g8%d)$  %ߙH$f  %@ ߂8ߙ  %$ߙH0/gh  %߂8U ߙ % $ߙH0/(%  %ߙ  %߅@ߙH0/d)  %߂8U0ߙ % $ߙH0/(%  %ߙ  %߅@ߙH0/d)   %`% ߤHB@ ߙ  %߅@$ߙH0/d)(  %ߙ  %$ߙH0/@(% % ߒ8ߙ  %@0%B @C$ߙ (%A߂8F@߂8G8B @E߈@߈@e(p߅@ߙd)8 $ߙ gߙh $߄8ߙ$d$ "$bߙ $ߢ߂8B@G߲0b@'ߙ@%8%0%@(% dP$bCߢߣBb`߿hߙ ߂8B@ߙdg$ E-Cx8%d (%e(x@߂@gh߅8ߙg$pd % 2$Cߗ@f(d^)`߅8ߙg($dp % 2$Cߊ@eJ(f `% ߤHB@ߋ@ߋ@ek)`߆@ߙ8gH%@%8%d)h$ % ߙ  %$ߙ@0% (%fek(߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gpg0<-g^ ߒ@(8%g fRߙ8 % `(%@ % ,C`߿8~P*@ @% ߙ(%  %ߙ8߼0߳(߲ ߱߰g@ߙx% d@ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d*ߙx% d)ߙx% d(ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dߙx% dg߼߿g udptcpfailed to connect: %m Logread connected to %s:%s via %s kernel:%s.oldfailed to open %s: %m [%lu.%03u] <%u> : kernel: Failed to send log data to %s:%s via %s %s %s%s.%s%s %s authauthprivcrondaemonftpkernlprmailmarknewssecuritysysloguseruucplocal0local1local2local3local4local5local6local7alertcritdebugemergerrerrorinfononenoticepanicwarnwarningUsage: %s [options] Options: -s Path to ubus socket -l Got only the last 'count' messages -e Filter messages with a regexp -r Stream message to a server -F Log file -S Log size -p PID file -h Add hostname to the message -P Prefix custom text to streamed messages -z handle only messages with given facility (0-23), repeatable -Z ignore messages with given facility (0-23), repeatable -f Follow log messages -u Use UDP as the protocol -t Add an extra timestamp -0 Use \0 instead of \n as trailer when using TCP u0fcs:l:z:Z:r:F:p:S:P:h:e:tFailed to connect to ubus w+%dstreamoneshotlineslogFailed to find log object: %s logreadreadmsgidprioritysourcetimet l8  P - . . . .  )  )P )H ) )X ) )0 ) ) )8 )  )( ) )@ * * * * *  *( *0 *8 *@ *H *P *X *` *h *p *x * * * *  (P (    (0 (  ( ( ' ' ' ' ' ' ' ' 'p '` 'P '@ '0 '  ' ' & & & & & & & & &p &` &P &@ &0 &  & & % % % % % % % % %p %` %P %@ %0 %  % % $07070100EA4D0A000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001400000000usr/libexec/network07070100EA4D0B000081ED00000000000000000000000169F91E150000175C000000080000000100000000000000000000002700000000usr/libexec/network/packet-steering.uc#!/usr/bin/env ucode 'use strict'; import { glob, basename, dirname, readlink, readfile, realpath, writefile, error, open } from "fs"; let napi_weight = 1.0; let cpu_thread_weight = 0.75; let rx_weight = 0.75; let eth_bias = 2.0; let debug = 0, do_nothing = 0; let disable; let cpus; let all_cpus; let local_flows = 0; while (length(ARGV) > 0) { let arg = shift(ARGV); switch (arg) { case "-d": debug++; break; case "-n": do_nothing++; break; case '0': disable = true; break; case '2': all_cpus = true; break; case '-l': local_flows = +shift(ARGV); break; } } function task_name(pid) { let stat = open(`/proc/${pid}/status`, "r"); if (!stat) return; let line = stat.read("line"); stat.close(); return trim(split(line, "\t", 2)[1]); } function set_task_cpu(pid, cpu) { if (disable) cpu = join(",", map(cpus, (cpu) => cpu.id)); let name = task_name(pid); if (!name) return; if (debug || do_nothing) warn(`taskset -p -c ${cpu} ${name}\n`); if (!do_nothing) system(`taskset -p -c ${cpu} ${pid}`); } function cpu_mask(cpu) { let mask; if (cpu < 0) mask = (1 << length(cpus)) - 1; else mask = (1 << int(cpu)); return sprintf("%x", mask); } function set_netdev_cpu(dev, cpu, rx_queue) { rx_queue ??= "rx-*"; let queues = glob(`/sys/class/net/${dev}/queues/${rx_queue}/rps_cpus`); let val = cpu_mask(cpu); if (disable) val = 0; for (let queue in queues) { if (debug || do_nothing) warn(`echo ${val} > ${queue}\n`); if (!do_nothing) writefile(queue, `${val}`); } queues = glob(`/sys/class/net/${dev}/queues/${rx_queue}/rps_flow_cnt`); for (let queue in queues) { if (debug || do_nothing) warn(`echo ${local_flows} > ${queue}\n`); if (!do_nothing) writefile(queue, `${local_flows}`); } } function task_device_match(name, device) { let napi_match = match(name, /napi\/([^-]*)-\d+/); if (!napi_match) napi_match = match(name, /mt76-tx (phy\d+)/); if (napi_match && (index(device.phy, napi_match[1]) >= 0 || index(device.netdev, napi_match[1]) >= 0)) return true; if (device.driver == "mtk_soc_eth" && match(name, /napi\/mtk_eth-/)) return true; return false; } cpus = map(glob("/sys/bus/cpu/devices/*"), (path) => { return { id: int(match(path, /.*cpu(\d+)/)[1]), core: int(trim(readfile(`${path}/topology/core_id`))), load: 0.0, }; }); cpus = slice(cpus, 0, 64); if (length(cpus) < 2) exit(0); function cpu_add_weight(cpu_id, weight) { let cpu = cpus[cpu_id]; cpu.load += weight; for (let sibling in cpus) { if (sibling == cpu || sibling.core != cpu.core) continue; sibling.load += weight * cpu_thread_weight; } } function get_next_cpu(weight, prev_cpu) { if (disable) return 0; let sort_cpus = sort(slice(cpus), (a, b) => a.load - b.load); let idx = 0; if (prev_cpu != null && sort_cpus[idx].id == prev_cpu) idx++; let cpu = sort_cpus[idx].id; cpu_add_weight(cpu, weight); return cpu; } let phys_devs = {}; let netdev_phys = {}; let netdevs = map(glob("/sys/class/net/*"), (dev) => basename(dev)); for (let dev in netdevs) { let pdev_path = realpath(`/sys/class/net/${dev}/device`); if (!pdev_path) continue; if (length(glob(`/sys/class/net/${dev}/lower_*`)) > 0) continue; let pdev = phys_devs[pdev_path]; if (!pdev) { pdev = phys_devs[pdev_path] = { path: pdev_path, driver: basename(readlink(`${pdev_path}/driver`)), netdev: [], phy: [], tasks: [], rx_tasks: [], rx_queues: map(glob(`/sys/class/net/${dev}/queues/rx-*/rps_cpus`), (v) => basename(dirname(v))), }; } let phyidx = trim(readfile(`/sys/class/net/${dev}/phy80211/index`)); if (phyidx != null) { let phy = `phy${phyidx}`; if (index(pdev.phy, phy) < 0) push(pdev.phy, phy); } push(pdev.netdev, dev); netdev_phys[dev] = pdev; } for (let path in glob("/proc/*/exe")) { readlink(path); if (error() != "No such file or directory") continue; let pid = basename(dirname(path)); let name = task_name(pid); for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!task_device_match(name, dev)) continue; push(dev.tasks, pid); let napi_match = match(name, /napi\/([^-]*)-(\d+)/); if (napi_match && napi_match[2] > 0) push(dev.rx_tasks, pid); break; } } function assign_dev_queues_cpu(dev) { let num = length(dev.rx_queues); if (num < length(dev.rx_tasks)) num = length(dev.rx_tasks); for (let i = 0; i < num; i++) { let cpu; let task = dev.rx_tasks[i]; if (num >= length(cpus)) cpu = i % length(cpus); else if (task) cpu = get_next_cpu(napi_weight); else cpu = -1; set_task_cpu(task, cpu); let rxq = dev.rx_queues[i]; if (!rxq) continue; if (num >= length(cpus)) cpu = (i + 1) % length(cpus); else if (all_cpus) cpu = -1; else cpu = get_next_cpu(napi_weight, cpu); for (let netdev in dev.netdev) set_netdev_cpu(netdev, cpu, rxq); } } function assign_dev_cpu(dev) { if (length(dev.rx_queues) > 1 && length(dev.rx_tasks) > 1) return assign_dev_queues_cpu(dev); if (length(dev.tasks) > 0) { let cpu = dev.napi_cpu = get_next_cpu(napi_weight); for (let task in dev.tasks) set_task_cpu(task, cpu); } if (length(dev.netdev) > 0) { let cpu; if (all_cpus) cpu = -1; else cpu = get_next_cpu(rx_weight, dev.napi_cpu); for (let netdev in dev.netdev) set_netdev_cpu(netdev, cpu); } } // Assign ethernet devices first for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!length(dev.phy)) assign_dev_cpu(dev); } // Add bias to avoid assigning other tasks to CPUs with ethernet NAPI for (let devname in phys_devs) { let dev = phys_devs[devname]; if (!length(dev.tasks) || dev.napi_cpu == null) continue; cpu_add_weight(dev.napi_cpu, eth_bias); } // Assign WLAN devices for (let devname in phys_devs) { let dev = phys_devs[devname]; if (length(dev.phy) > 0) assign_dev_cpu(dev); } if (debug > 1) warn(sprintf("devices: %.J\ncpus: %.J\n", phys_devs, cpus)); 07070100EA4DA3000081ED00000000000000000000000169F91E1500000122000000080000000100000000000000000000001500000000usr/libexec/login.sh#!/bin/sh [ -t 0 ] && { tty_dev=$(readlink /proc/self/fd/0) case "$tty_dev" in /dev/console|/dev/tty[0-9]*) export TERM=${TERM:-linux} ;; /dev/*) export TERM=vt102 ;; esac } [ "$(uci -q get system.@system[0].ttylogin)" = 1 ] || exec /bin/login -f root exec /bin/login 07070100EA4DA4000081ED00000000000000000000000169F91E150000066F000000080000000100000000000000000000002400000000usr/libexec/validate_firmware_image#!/bin/sh . /lib/functions.sh . /lib/functions/system.sh . /usr/share/libubox/jshn.sh include /lib/upgrade VALID=1 FORCEABLE=1 ALLOW_BACKUP=1 # Mark image as invalid but still possible to install notify_firmware_invalid() { VALID=0 } # Mark image as broken (impossible to install) notify_firmware_broken() { VALID=0 FORCEABLE=0 } # Mark image as incompatible with preserving a backup notify_firmware_no_backup() { ALLOW_BACKUP=0 } # Add result of validation test notify_firmware_test_result() { local old_ns json_set_namespace validate_firmware_image old_ns json_add_boolean "$1" "$2" json_set_namespace $old_ns } err_to_bool() { [ "$1" -ne 0 ] && echo 0 || echo 1 } fwtool_check_signature "$1" >&2 FWTOOL_SIGNATURE=$? [ "$FWTOOL_SIGNATURE" -ne 0 ] && notify_firmware_invalid fwtool_check_image "$1" >&2 FWTOOL_DEVICE_MATCH=$? [ "$FWTOOL_DEVICE_MATCH" -ne 0 ] && notify_firmware_invalid json_set_namespace validate_firmware_image old_ns json_init json_add_object "tests" json_add_boolean fwtool_signature "$(err_to_bool $FWTOOL_SIGNATURE)" json_add_boolean fwtool_device_match "$(err_to_bool $FWTOOL_DEVICE_MATCH)" # Call platform_check_image() here so it can add its test # results and still mark image properly. json_set_namespace $old_ns platform_check_image "$1" >&2 case "$?" in 0) ;; 74) notify_firmware_broken ;; *) notify_firmware_invalid ;; esac json_set_namespace validate_firmware_image old_ns json_close_object json_add_boolean valid "$VALID" json_add_boolean forceable "$FORCEABLE" json_add_boolean allow_backup "$ALLOW_BACKUP" json_dump -i json_set_namespace $old_ns 07070100EA4DAC000081ED00000000000000000000000169F91E15000103A8000000080000000100000000000000000000001300000000usr/libexec/cgi-ioELF @@8 @@ @ @8 8 8pX X X  OO    PPdtQdtR  ((/lib/ld-musl-mips64-sf.so.1@( ( (4 ( (| ( ( ( FZn|    F     X ( p p5@ ppp p pPp%poo oo CP/. D3 ;'8> G !%"I+0#&1$C(=26- 9 )F*4,<A@JNE5B7?:MOHKL  < (  :     5P  64<  8  6H   @ tD  F  AX  >\  =`d FJ FP FA FW Fp/ F`^ FP F@( F0# F  F F Eo E E E Ev E E E Ep E`} EP E@ E0 E  E E) D D8" D2 D D D$ D D Dp D` DP D@ D0 D  D D C C~ Cy Ct Cn C  C C Cp"" C` CPe C@^ C0X C  C CP B__RLD_MAPuloop_doneblob_buf_initblobmsg_parseblobmsg_add_field_finiclosestrchrstrlen__errno_locationstrcmpmemsetunlinkstrncmpreadcallocpipe__stack_chk_failmallocmemcpygetenv__stack_chk_guardsnprintfwaitpidstrcpyubus_freeubus_lookup_idubus_connectubus_invoke_fd__register_frame_info__deregister_frame_infoputcharioctlstdoutstrerrorexeclputsdup2tolowerstrtoulsplicefflushlseekstrncasecmpchmodisxdigitstrtolsendfilechdirstrstrstrncpyforkexecvlocaltimelinkatisalnumgethostnamesprintfstrftimestatfwrite__libc_start_mainopenlibubox.so.20260213libubus.so.20251202libgcc_s.so.1libc.sopartspostdecodemultipart_parser_initmultipart_parser_freemultipart_parser_executecanonicalize_pathdatadupparse_commandurldecodepostdecode_fieldsGLIBC_2.0n iig߼߿g g@<-glߑpܰ߅@ߙ"dM %x @߅@ߣx"bߙ@ߙ g9'߿߼ߵߴ߲߳߱߰ gߙdM  %@߅@ߣx"bߙ@g9!TߙdM  %@߅@ߙ8g8$@(% %( 0߂@ߙPg$dBI ߤ @%߆@(%dN$ߙ@g9  $ߙ ` %ߣx"b߿߼ߵߴ߲߳߱%߰g߇@߆@߅@ߙ@dGdN(g9T dH@ߙ g@ @%ߙ ߆@dMPE$ߙX @%$BRߙ@Uߙ g(ߙ( %ߙ@g ߆@ߙ@8%dN`$  %ߙ$?  %@ ߆@ߙxdNp$@  %$C,cAl߄@ߙ8 dI߄@ߙ8 dNx߄@ߙ0%(%dN $߂ߙD $ߙ$ $8%$ (%`ߙuߙߙ BTߙ0%g @ %ߙ ߙ ߆@dMhߙ0 $ߙ %ߙ $ߙ ߙ ߄@ߙ dMA߇@ߙ ߆@dM߅@߆@dNHߙ@@%dN0dN8 %V$ߙdN  %@S$ߣx"bߙ@g9.%/ %(-<-$$ g<-gfߙ߈ ߇(0%߄0H% d߿߼gg<-gfߐ8@߂@ߙ߄8 d$߿߼߰g g<-gfD߂`@߅8߄8ߙ`d d߿߼g+dg (<-geܐ`߄8ߙ}%g$ dߢ@߿(DD dCDB"8D%$B$D$|Bb-b+߿(߼ ߰g0g<-ge8 %߅@ߙ dF߿߃8,B߼bX%gg0<-gdߙ%g( 8% %@JߙX @%$""% (ߙ8ߙH ߙ0 $ߙ %ߙ $ߙ ߙ ߅@ߙ@dG@%`8%0% %@%߂8dB߿8߼0߳(߲ ߱߰g@ߐ8f %$A (%ߙx(% @0%ߙ0%(% % @%ߙ ߙ %g0<-gcxߒ88BX( @=, @:%%߅@ߙ$ dG  %@1f1 f$ $;"D(C'ff.@%߅@ߙ$dG(  %@f$$"&-BC#ddߔHf1$dfRX$ߙpޅ0%  %@Sfsuf߿8ff1߿8߼0ߵ(ߴ ߲߳߱߰%g@+@&-߿8g<-gb ߙ% % %߄8@ߙ8% 0%%$ d8߿߼߱߰g g@<-gaߙH% %0( H8%%% @6߿H@0@%߅@ߙg dG0 @ %@)ߙXߕ8ߙ(% f8 (%ߑ@߄@f1 % dG8߄@(% % dGP߄@@(% % dGX߄@`(% % dG`߈@߆@ާ8ߙ菥 $ $ g edGp  %ߙX  %߿H ߼@ߵ8ߴ0߳(߲ ߱߰gPg<-g`H%(%߄@ߙdGx %߄@ߙ8 dG߄@ߙ (% dG ߙߙ  %߄@ߙ@(% dGߙ $ ߿߼߱߰g gpx<-g_X߅8ߔpߙP8gނ$@d %ph`PH@( ߙP %$ ߤ ߆@dG(%$ߙ@g9  $ߙ ߤߣ(ނb߿ߙ ߐ@ߑ@߆@߅@fTf'GdH% dH@ߦ0߅@߆@dHߤ f'G% dH8@ߙߤ0 gX@ @%ߙ ߆@EdH@$x40BC$`C߰@߆@dH`߰@ߕ@fH@ߙ ߰Pߙߕ@fHЂ@ߙ ߙߤ0 (%A'@%ߙ ߆@EdH$ @ %@ ߙ@(%  %@f߆@dH(%$f @ %@ ߙ@(%  %@f߆@dHfx$`0BC<ߢߙ<@gdr  %߄@ߙ8 dIߥP߅@dG߄@ߙ dI(ߥ@ߙ߄@ dI@߂ߥCR߄@ߙdIx $ߙ@ %$Y$$ $ ߧ*0%ߙ(% $S)ߙ BUV g(,@ߙ4@8%$  %ߙx(%$  %@@(%ߙ @ %ߙWߧ^ߙ  %.ߙ@ߣb/߄@ߙ8dI g(ߙx(%$  %@@(%,@ߙ@8%$  %ߙx߾߼x߷p߶hߵ`ߴX߳P߲H߰8 %߱@gg<-g[%߄@ߙ8dI %߄@ߙ8ߐ8dI fX@Eߙ (%@1ߙ8߄@Dߙ dJߑ@߄@f1$  % dJ(@'@0%߇@dI߄@ߙ(% dJ0߄@$@ % dJH@@0%߇@dI߄@ߙ(% dJX߄@ߙ8 dJ߿߼߲߱߰g߄@ dJߑ@߆@߇@dIdI߆@߇@dIdI ߙ߄@ (% dJpߙ ߙQ  %߄@ߙ@0% (% dJ @߄@ߙ` g@<-gY(߄@ߑpߙh"dJH80(  @߅@ߙ $߅@ߙ@$dJ %g9% Cߣ"bK߿Hߙ ߙp$dJ@ % @%@@%f$=@fCߙ  %ߙ  dD@@%߅@ߙdJ ` %ߙ(% fd߂8߅8ߙXdBX$d` %C$ C ߙ` % @%%gߙx$`(% %0%ߙ`  %ߙxߙh`(%  %*߼@ߵ8ߴ0߳(߱߰@%߲ gPg0<-gWD ߒpߐ8BfX$8(@ߙ ߙ ߅@$CdJߙ@g9% %$ߤCf߿8ߙ ߆@ߙxg8%dK$  %ߙ` A ߙ C$bߙ0ߙ $߅@dK ߙ0$$ (% $A7ߙߙ$0% (%Aߙߙ $߅@dK@$ $A ߙ $߅@dK`.b@ߙ4  (%b ߙ $ߙ  ߅@dK$ߙx$  (% 0%ߙ ߙ $ߙ @߅@dK߼0߳(߲ ߱߰g@g<-gUߐ8fX$Q߇@߆@߅@ߙ@dKdKg9T dH@#ߙ ߅@QdK %ߙ@g9% $߿߼߱߰g $C$Aߙ@߅@dKg9) @$(%$%g<-gTߑ8$f1X#g+ %,g $e$eߙp%߿߼߱߰g $dߙ$$ ߙ $$߅@ߙ@dLg9% %$ߙx (%" (%"ߙ$ (%ٮ""@%+Ԣ0g<-gRߐ8$fXb%߿߼߰g ߅@dLHߙ@g9% $߇@߅@dLh %߅@ߙ@dKg9T dH8@ߙ߅@dH߄@<A$d dLA׮$߅@dLg@<-gR߅8ߙPhg@$Pd@ %x pߙP % $ߤH߆@dL(%7$ߕ@߇@ߗ@߅@fTdGfL% dH@߰hߒ@fRH ߙ ߰xߢߒ@fRHЂ 3ߙ ߢ@>$1D%R.RߤX8ߙ߆@ dL  %@ߙ (% @ %@f߆@dH(%$ߙ@g9  $ߙ ߤ߿߾߼߷߶ߵߴ߲x߱p߰h`%߳gf  %@ ߙ (% @ %@f߆@dHf% @@%ߞ@FߤHfL% gH8fC`1dB Fߙ  %ߙdB g@(% % @40BC?ߢ߄@ߙh dM@@(%߅@dL߂@ߓ8dBM%fs($:C@ߢ /V-,B@.@ߙh4̠`0% ` %ߥ(ߙ 0% v -ߥߙ ` %@f40BC ߢ@fߙ  %߆@(%dMz$`%@ߙߤHfL 0%% gH8@ߙߙ  %߆@0dM0 ߤ@ @%ߙ  %ߙ ߆@dMPEZ$ߙX @%$AߙMߙߙ ߄@ߙ8 dIߥx߅@dG߄@ߙ dI(ߥh߄@ߙ dI@߄@ߙ8dI $߂ߙD $ߙ$ $8%$ (%@ߙRߙߙ BQߙ0%g<  %ߙ ߙ  %ߙ  %ߙ ߙ ߙ ߆@dMh߄@$ dM@.@%ߙ0(% @ %@` %ߙ0$ ` %` %ߙ ߙ0 $@ߙߙ0 $ߙ ߙ ߄@ߙ dMAߙPߙ  %ߙ ߆@vdMߙ %$(%  %A$ߙ  %ߙ ߆@cdMg <-gKߙ(% %ߙ  x dA@@%ߙdQ0 % @(%ߙ @ %dB"-$( ߿(߼ ߲߳߱%߰g0g<-gJߙ ߿߼g܂gH<-gJ@ߗ@P80( X%%%%%dfO`$ 5+@-R$B0C,c`0B-B\-@$Cdc$ CdB %߿X߾P߼H߷@߶8ߴ(߳ ߲߱߰%ߵ0g`f1C$ B Y $  %@ $ %-ڀc0$ %^$-$B$:Bߙ( Y 30/$(-  %@$ % @ %$B0B,B@ Y f0/(-  %@ %$ B %$ B$ %^ Y 30/$  Y(-  %@$  %$ B$ % Y  $  %^ Y 30/$ ($ C %  %@$ s %(-  %@$ l %y Y$ B$ (bn Y $$  %ef1(  %@$ O %-B0R Y d((F-RdBCK Y( b$  %@^$2 %$-BY$$ B+$9$-B& Y0 M$  %@I$ %$ B$ Y $  %_%g<-gF%$ "C$B,B@ %f18$D +dBF|< $,b +C/d &e(-dC %dB % %%(%$\$ ߙ%߿߼߱߰g d $@&|cC-C (%8% %$ \$ $  @$#fdcdfdc8%d|D $-%+ dg$k|C-g%d| D -à`$g <-gD8ߙ %d( %@ @%Q+@-33ߙP@0% (%  %`߿(߼ ߲߳߱%߰g00+@2-3ߙP %%߿߼߱߰g g<-gC@%ߙx %@(-@%$/$. + dD +1$/e.dcܠ` &"f + fP+@  fP+@ F $/CH+ %i'dc%i %dc %b$/ddcTg08( <-gB,@%%$%$+0 @$߿8߼0ߵ(ߴ ߲߳߱߰g@+ߙЂ0  %@*ߙЂ5  %@%*:@82*:`2$B0B!| f1PfR*G@&2&*G$B$Bf1$ %$g@h<-@p`P@80(xXHg@%%%d%%$&ߣP/dBC*@$=BC %@%ߢ*@ߙfRޅ  %@&&f^@*@@ߔf1%S*@ %$ f1@&Rߙ % %߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0%߰(g@%g@<-g?\0%߄@ߙhdJ8H(  %@:߅@ߙp@ %$! dO @3ߙh߄@ dOH@.@%ߙ$ g @ %@%ߢQ%<f4cC+@ ߙf $@@%%ߙx0/Q(- %@ "-0*@ߙxߙ8%`0% (% @ % ߿H0*ߙߙ @ %%߿H߼@ߴ8߳0߲(߱ ߰gPߙx% dOߙx% dNߙx% dMߙx% dLߙx% dKߙx% dIߙx% dHߙx% dFߙx% dDߙx% dCߙx% dBߙx% dAߙx% d@ߙx% d?ߙx% d>ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dg߼߿g Content-Disposition/bin/busyboxform-dataname="sessionubus_rpc_sessionscopeobjectfunctionaccessStatus: %d %s Content-Type: text/plain %s: %sapplication/octet-streamDownload permission deniedreaddownloadcgi-ioAccess to path denied by ACLfileFailed to stat requested pathRequested path is not a regular file or block device ()<>@,;:[]?.=%-Invalid characters in filename .;=/-Invalid characters in mimetypeFailed to open requested pathStatus: 200 OK Content-Type: %s Content-Disposition: attachment; filename="%s" Content-Length: %llu sessionidpathfilenamemimetype"nullContent-Type: text/plain { "size": %u, "size": null,md5sum "checksum": %s%s%s, sha256sum "sha256sum": %s%s%s "message": "%s", "failure": [ %u, "%s" ] }CONTENT_TYPEInvalid requestmultipart/form-data;--No file data received/proc/self/fd/%dFailed to unlink existing fileFailed to rewind temp fileFailed to open target fileI/O failure while writing target fileFailed to chmod target filewriteuploadUpload permission deniedInternal program failureI/O failure while writing temporary fileFile data without sessionFile data without name/tmpFailed to create temporary file/bin:/usr/bin:/sbin:/usr/sbinExec permission deniedexecInvalid command parameterPATH/%sExecutable not foundAccess to command denied by ACLFailed to spawn pipeFailed to fork process/dev/null/Failed chdir('/')Failed execv(...)commandstderrcgi-uploadcgi-downloadcgi-backupBackup permission deniedbackup---create-backup/sbin/sysupgrade%Y-%m-%dOpenWrtContent-Type: application/x-targz Content-Disposition: attachment; filename="backup-%s-%s.tar.gz" cgi-exec(bug)filemodefiledataapplication/x-www-form-urlencodedCONTENT_LENGTHl``  P Gp I I I I I M I I M  x , - + N I I O O F      A 5P 6 6H =` < : > @  F F F F Fp F` FP F@ F0 F  F F E E E E E E E E Ep E` EP E@ E0 E  E E D D D D D D D D Dp D` DP D@ D0 D  D D C C C C C C C C Cp C` CP C@ C0 C  C C B07070100EA56EB000081ED00000000000000000000000169F91E150000010B000000080000000100000000000000000000001B00000000usr/libexec/syslog-wrapper#!/bin/sh . /lib/functions.sh main() { local log_file log_file="$(uci_get system @system[0] log_file "")" if [ -f "$log_file" ]; then cat "$log_file" return fi if [ -f /sbin/logread ]; then /sbin/logread -e ^ else /usr/sbin/logread -e ^ fi } main 07070100EA56D7000081ED00000000000000000000000169F91E1500000555000000080000000100000000000000000000001A00000000usr/libexec/luci-peeraddr#!/bin/sh NL=" " function ifaces_by_device() { ubus call network.interface dump 2>/dev/null | \ jsonfilter -e "@.interface[@.device='$1' || @.l3_device='$1'].interface" } function device_by_addr() { set -- $(ip route get "$1" ${2:+from "$2"} 2>/dev/null) echo "$5" } for inbound_device in $(device_by_addr "$REMOTE_ADDR" "$SERVER_ADDR"); do inbound_devices="$inbound_device" inbound_interfaces="" for iface in $(ifaces_by_device "$inbound_device"); do inbound_interfaces="${inbound_interfaces:+$inbound_interfaces$NL}$iface" for peeraddr in $(uci get "network.$iface.peeraddr"); do for ipaddr in $(resolveip -t 1 "$peeraddr" 2>/dev/null); do for peerdev in $(device_by_addr "$ipaddr"); do for iface in $(ifaces_by_device "$peerdev"); do inbound_devices="${inbound_devices:+$inbound_devices$NL}$peerdev" inbound_interfaces="${inbound_interfaces:+$inbound_interfaces$NL}$iface" done done done done done done inbound_devices="$(echo "$inbound_devices" | sort -u | sed ':a;N;$!ba;s/\n/", "/g')" inbound_interfaces="$(echo "$inbound_interfaces" | sort -u | sed ':a;N;$!ba;s/\n/", "/g')" cat </dev/null else cat /usr/lib/opkg/status fi ;; list-available) if [ $ipkg_bin = "apk" ]; then $ipkg_bin query --fields all --format json --available \* 2>/dev/null else lists_dir=$(sed -rne 's#^lists_dir \S+ (\S+)#\1#p' /etc/opkg.conf /etc/opkg/*.conf 2>/dev/null | tail -n 1) find "${lists_dir:-/usr/lib/opkg/lists}" -type f '!' -name '*.sig' | xargs -r gzip -cd fi ;; install|update|upgrade|remove) ( cmd="$ipkg_bin" # The apk package manager uses distinct commands for installing and removing packages. if [ $ipkg_bin = "apk" ]; then case "$action" in install) action="add" ;; remove) action="del" ;; esac fi # APK have --autoremove enabled by default and # --force-removal-of-dependent-packages as -r option if [ $ipkg_bin = "apk" ]; then while [ -n "$1" ]; do case "$1" in --autoremove) # Just shift and do nothing. # 'apk del' already cleans up orphaned dependencies by default. shift ;; --force-removal-of-dependent-packages) cmd="$cmd -r" shift ;; --force-overwrite) cmd="$cmd $1" shift ;; -*) shift ;; *) break ;; esac done else while [ -n "$1" ]; do case "$1" in --autoremove|--force-overwrite|--force-removal-of-dependent-packages) cmd="$cmd $1" shift ;; -*) shift ;; *) break ;; esac done fi if flock -x 200; then pkmcmd="$cmd $action $@" $cmd $action "$@" /tmp/ipkg.out 2>/tmp/ipkg.err code=$? stdout=$(cat /tmp/ipkg.out) stderr=$(cat /tmp/ipkg.err) else code=255 stderr="Failed to acquire lock" fi json_init json_add_int code $code [ -n "$pkmcmd" ] && json_add_string pkmcmd "$pkmcmd" [ -n "$stdout" ] && json_add_string stdout "$stdout" [ -n "$stderr" ] && json_add_string stderr "$stderr" json_dump ) 200>/tmp/ipkg.lock rm -f /tmp/ipkg.lock /tmp/ipkg.err /tmp/ipkg.out ;; *) echo "Usage: $0 {list-installed|list-available|update}" >&2 echo " $0 {install|upgrade|remove} pkg[ pkg...]" >&2 exit 1 ;; esac 07070100EA4989000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000000800000000usr/bin07070100EA5CCB0000A1FF00000000000000000000000169F91E1500000012000000080000000100000000000000000000000C00000000usr/bin/scp/usr/sbin/dropbear07070100EA4C3F0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000B00000000usr/bin/du../../bin/busybox07070100EA4C9B000081ED00000000000000000000000169F91E1500010240000000080000000100000000000000000000000D00000000usr/bin/jshnELF @@8 @@ @ @8 8 8pX X X  **  X` ` ```dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( ( ;Wfz    '`    x `  p p5  ppp p pAp$poo oo %A0-4 ?" !' +( ,@.9%*5$#; =82)<7&/:163>2!1z     D  '`J '@ '0 ' 9 '$ ' &O & &  & & & & &P &p &` &P@ &@ &0 &  &G & % %" % % % % %N % %p8 %`~ %PS %@' %0 % 3"[ % %b $  $V $  $ $g $ $*r $i $p"gy $` $P" $@ $0 $ __RLD_MAPblobmsg_format_json_with_cbblobmsg_add_json_from_string_finifreestrlen__stack_chk_fail__stack_chk_guardsnprintfjson_object_get_objectjson_object_new_int64json_object_to_json_stringjson_object_get_int64json_tokener_parsejson_object_new_booleanjson_object_new_doublejson_object_new_arrayjson_object_get_booleanjson_object_get_doublejson_object_new_stringjson_object_get_typejson_object_get_stringjson_object_object_addjson_object_array_addarray_list_get_idxjson_object_putjson_object_get_arrayarray_list_lengthjson_object_new_objectstrchrstderrstrcmpreadfprintfstrtodcallocavl_findblob_buf_initavl_initavl_insertfputsfclosefopenstrtok_r__register_frame_info__deregister_frame_infostdoutfflushfstatgetoptisalnumputcfwriteatoi__libc_start_mainatolloptarg__environlibblobmsg_json.so.20260213libjson-c.so.5libubox.so.20260213libgcc_s.so.1libc.soGLIBC_2.0JSONC_0.14z iiWg߼߿g g<-gnߔ8%߅@ߙdߒ%8%0%f(  E%` %dc|B-B@ߙ $@@%@%@%%fBV-D2ߙxߔ@ߗ@%%f)x$$Rf*ߙ80%(% ` %R0ߙ`  %߂߅@ߙhDd)0 $ ߿(߂߅@ߙhDd( $߿(߾ ߼߷߶ߵߴ߲߳߱%߰g0$= (@ߙPdB(% % 8ff@^$B,C`|B-B\-@߂ߙD߂8 D߃8b߂ߙ@g9h D#@%߂ߙP(%  %R @%߂߅@Dߙh0% d($ߙx(% @ %Bߴ@߅@0%d(߂ߙh Dߙh ` %$ߙ`  %߿(ߙf $@@%߅@0%d(ߙH0%@(% ` %ߣ@C ߙ@߂߅@ߙhD0% d)ߙ` @ %g9h @ %ߙ`@ % @%ߙh ` %ߙ`߂ߙ@F(%g9  %߂߅@Pߙ@d)(  %@@%ߙ@ %@0%g9 (%ߙ(@ % @%?$=$%P/ %(-<-$$ g<-giߙ߈ ߇(0%߄0H% d߿߼gg<-ghߐ8P@߂@ߙ߄8 d$P߿߼߰g g<-ghd߂@߅8߄8ߙdX d߿߼g@C d$=D%$=d%C#dg<-gg(%߄8ߙ d@߿B8߼gg(<-ggߐߙ0%8 % ߃8߆@eߙd(-d:8/߂8 @%Gd'  %ߙ@g9D  %8ߙ %߾0߼(߲ ߱߰g@gh<-gf`ߗߙp%xXPH@80(%%% ߕ83ߙ` % @%߃8p߆@f--f:8/`H%ާߓ@ߙ@%d'(% % fsD`%  %߆@)ާߙ@%d'(%  %`%  %߆@b)ߙާ@%d'(%  %`%  %@"bxߙ %߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(ggpx<-geߙ@Hg9% %`PphX@8% %@߿@ߗ@ߙ @ %ߖ@gߔ@@0%f'ߞ@f\f @g(߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8gg g` %% ߱  ߰(ߙg'  %@߅@ߙ $@% (%%  %Uߥߙ(% @ %ߙ ߦf' %ߙd'  %@߅@ߙ  0%@%ߙd'  %@߅@ߙ % @%ߙd'  %@߅@ߙ  %ߙ@ %ߙd'  %@ ߅@ߙ % (%ߙ @ %ߙd'  %@ ߅@ߙ  %ߙ  +ߙd'  %@%ߙ(0% @ %g0<-gblߙ ( 8%% %@C߅@ߙ@@ %0%d'g9 @%ߙ  %@@%$ߙ  %߿8߼0ߴ(߳ ߲߱%߰g@%ߔ8ߙ(% fߙp(% f@ߙބ@%8%0% $@@%@%`߇@߇@d'߅@ߙh0%d(@ % %ߙ`  %ߙd($g<-gaߙ ߑ@Pf1 8 % @߿߼߱߰g g<-g`ߙ @ ߙ`@ % @%$b߂ߙ  %߂߄@ߙpE d($߿߼߱߰g ߄@Qߙp (% d((ߙ@g9  %ߙ  %ߙ  %%g`<-g_0ߒߙ`B(% % hXPH@8% ,C`!߃@dc)b-B\-@߆@d'߂߅@Sߙhd(8 ` %4(ߙߙ`  %,C`߃@dc)b-B\-@$ߤC߿hߙ ߆@d'߆@d'߆@d'߆@d'߆@d'߆@d'  %@ߙ$_`(% % f1͂4߄@ߙp`(% d(Hߙ@g9  %߄@`(%d(Pߙp e%߄@ߙp`(%d(H ߑ@ߙ % ߔ@ߙ@ % @%%gf1(hf 88*@ߙ 0%$   %ߙ(% % f %% @(%@8߄@`(%d(p߄@ߙp`(%d( ߔ@ߙ0 % f(@%ߙx$'  %@@%ߙ  %(ߙ`8%$  %߄@`(%d(H0(/(`8%ߙ$  %ߙ`8%$$ % f0ߙxߙX  %߅@ߙh@0%d( ` %%fߙ  %߅@ߙh@0%d( ` %%ߙ  %߅@ߙh@0%d( ` %%߼`߷X߶PߵHߴ@߳8߲0߱(߰ gpߙx% d@ߙx% d?ߙx% d=ߙx% d<ߙx% d;ߙx% d8ߙx% d7ߙx% d5ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dg߼߿g %sK_%s%s%s_%s%sT_%s_%s%sN_%s_%s arrayobjectstringintdoublebooleannullJ_V%s%sFailed to parse message data json_init; json_add_%s ''; json_close_object; %djson_close_array; ' ''\''' %d; ' %ld; ' %lf; %m Error opening %s Error getting size of %s Error allocating memory for %s Error reading %s wUsage: %s [-n] [-i] -r |-R |-o |-p |-w p:nir:R:o:w`:! 7.& H"1)5'D$(%2C;60?@<FILK  (   $  . .t .py .` .P .@ .0j . x . .{ -j -v -_ -Q -T - -k - -p< -` -P -@* -0 -  - - ,  , , , ,o , , , ,p ,` ,P ,@h ,0a ,  , , +[ +C" + +  + +r +e +U +p +`% +PM +@; +0+ + -"- +" + *2 *D *M * *  * *__RLD_MAPucv_array_pushucv_putuc_vm_freeucv_from_jsonucv_object_deleteucv_getuc_vm_scope_getuc_vm_invokeucv_object_adduc_source_new_fileucv_string_newucv_to_stringbuf_formatteduc_program_writeuc_vm_executeuc_stdlib_loaduc_search_path_inituc_vm_initucv_typeuc_vm_trace_set_finiucv_string_lengthuc_source_new_bufferucv_array_newuc_compileucv_int64_get_ucv_string_getuc_vm_gc_startvasprintffputsstrchrstrlen__errno_locationfwritestderrstrcmpfclosememsetfopenstrdupfreadreallocfprintfstrrchr__stack_chk_failabortmemcpy__stack_chk_guardstrerrorstdoutjson_object_get_objectprintbuf_freejson_tokener_parse_exjson_tokener_newjson_tokener_freeprintbuf_newjson_tokener_get_parse_endjson_object_is_typejson_object_putjson_tokener_error_descjson_tokener_get_error__register_frame_info__deregister_frame_infostdinstrtokfdopengetoptatoi__libc_start_mainoptindoptarglibucode.so.20230711libjson-c.so.5libgcc_s.so.1libc.soGLIBC_2.0JSONC_PRIVATEJSONC_0.14 ii ꏅg߼߿g g<-gl߂`ߙPg@X$xB(% % <$B$ߢPAߙ$/  %@ߣdP$b"߅8߄8ߙ(%d/8 %ߢߤ@$ߙh ߤߙh ߤߙX ߙP  %ߢXߣBb߿ߙߙd7@  %@߅8%߂@߃@ ߂ߖ8Bb߂8`dB7߂8d^7h$$Sߙd7H  %@ߐ8f.S(CT`N$LCg$RC$ߙXߦߥ ߤRߙHߓ gbߣߙ@b-g %T$ bߙ  %ߙp @ %ߙ  %ߙ % 8ߤ8ߙ  @%߅8ߙ@0%d7 @ % ߙ  %ߙ % @%߅8ߙ@0%d7 @ %߂8dB/ (߂8HdB:Ph߂@p߂8dB9ux$TC߂(Dߙf7` ߓ8ߔ8@%fs7x@ߙ(% @ %@Hߙߙf7` %@%߂(ߙR$* @ %@ߙߙ8@(%g9* g{$ @ %@vB-$/D#dBߔ8߅8gf((@0% %%d7P g߂8ߥdW*% ` %ߙh ߤ߅8@0% %% d7Xߥ% ` %ߙh ߤڠ@$KI`(% @ %@߂ߙD@0% f7ߙ@ *Bc@$FR$UR{ߙ$DR\߂(ߢ`ߙXߥߤ dF7@%$B*Buߢ@\ߣbb-T߂߄8Ed9&R.B@ߢh~RR-B\-@ߢ߄8ߙEd/8 %ߢߒ(ߙ8g9( DDߙ @%߄8ߙ@0%(% d7ߒ(ߙ8g9( DDߙ @%߄8ߙ@0%(% d7$Hߙ($  %ߢ`߂(ߙ D % Tߙ$= % 0@@%dB@%@%ߙ  %ߙh @%@@%ߙ8g9) ߙp0$(% @ %ߙ % @%@@%ߙ  %^+ߙ  %ߙ  %@ߙ B@ ߂ % P߅8@8%0%d8 %ߙ  %ߤ0@0%@(%ߙ @ߙhB@(%ߙH %ߤ0ߙ@0% @(%$ߙ  %@Hߢ`E$$  %@߂ߙ  %R@ߙHE %T Rߤ0ߙ@0% (%߅8ߙD0%d80 %ߙߙ߂( % Uߙ$= % 0@@%dB@%@%߅8ߙd8h  %@Aߢ W ߄8߂Ed8pߙ $@ߙh @n@%g%PߙߤP8%$ $@<ߙpߥP0  %ߙ % @%@%$ߙߙ  %ߙ0  %*ߙhߙ  %߂;D߇8d.߅80%d8ߙ ߅8ߙ`d8  %@@%ߙ߂ Rߙp D߅8ߙ@8%0%d8 @ % $$  %@ߙ@ߙЂB@(%ߙH %ߤ0ߙ@0% @(%ߙ  %߇8d/  %R@ߙHE %U Rߤ0ߙ@0% (%  %߃(ߙ0e @ %߂(ߙT$=  %@@%dB@%@%ߙ  %߅8ߙ@8%$d8 % @%ߙX % @%ߙP@bߢ`_$  %(%0%R( @ %߂(D ߙߔ8f9 ߕ8@%߂8dW9߂8dV9Hߙߐ8Ff.$=  %@@%@dRߙ(%  %@ߙ@ߢpߙߥxD 0%%ߙf9 %(@%(%  %@ ߙ@ߙ߅80%d9P߂ߙ D߲(f9  %@ ߅8@ߙ8ߥg9)< gRߢdB0%d9߂(P$@߅8ߙd8h  %@ߙߢ B@ߢ ߂߄8ߙE d8pߙ $C߂ߣPbߙb- Rߙp D߅8@8%@0%td9%%gߙG$$  %@"@%ߙU- % (%@@%ߙ88g9)U -+@+-+@+@.-+@.4@ߙ80%(% %ߢ ߢ @߄8ߙ8d9g9( $@%߄8ߙ0%(% d9@c$cc߅8ߙd8h  %@&߂xPbߣC*`;ߣߙX ߤ8ߥߙߤg @=@%߂ߙE ߤߙh ߤߙX ` %ߙX ߤqߢ  %ߙ %$ $@ %$ ߙ߂ Rߙp D߅8@8%0%d:@ %߅8ߙ d:8@%b-ߙ Dߤ8ߙ @(%b$Bbߢ(@߅8ߙ@0%d:@  %ߢ@ߙ` %8F (%ߙ0  %%ߙߙ`  %ߙg0%`(%  %$C,C`@>ߙߢH@ߤߙ8 ߒx$bߙ  %ߤߙ @%Gߙ$@(%  %$C(@%ߙ @ @%߂߄8ߙE d.ߙ ߙߦ$ $ @(% % 8%Gߙ $ߙ  % ߤec$dB - ܄aߣ$bߐ8f.߾߼߷߶ߵߴ߳߱߰@%߲g %p/ %(-<-$$ g<-gYߙ߈ ߇(0%߄0H% d߿߼gg<-gXߐ@@߂@ߙ߄@ d$߿߼߰g g<-gXT߂@@߅@߄@ߙ@d d߿߼g%C-+`zg<-gWߙx g (08@H $b ߿߂߄8ߙE d.ߙ ߼gPg<-gW\ߙx @ ߿߂߄8ߙE d.ߙ ߼gg<-gW߂߄8ߙE d.ߙ g <-gVߙ8g9(%$( '%@ %d+@߿( ߙ( % @%@ߙPߙ8g9) 0/0(%S - "߿("߼ ߲߱߰S-߳g0g <-gUߙ8%܅g9)<%d( ߙ8@ %g9( @%߿("߼ dB߲߱߰g0ߙx% dLߙx% dKߙx% dJߙx% dIߙx% dGߙx% dFߙx% dDߙx% dCߙx% dBߙx% d@ߙx% d?ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d4ߙx% d2ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dߙx% dg߼߿g Out of memory ucode./uc.outJSON parse failureNot a valid JSON object/usr/bin/env ucodeUsage: %1$s -h %1$s -e "expression" %1$s input.uc [input2.uc ...] %1$s -c [-s] [-o output.uc] input.uc [input2.uc ...] -h Help display this help. -e "expression" Execute the given expression as ucode program. -p "expression" Like `-e` but print the result of expression. -t Enable VM execution tracing. -g interval Perform periodic garbage collection every `interval` object allocations. -S Enable strict mode. -R Process source file(s) as raw script code (default). -T[flag,flag,...] Process the source file(s) as templates, not as raw script code. Supported flags: no-lstrip (don't strip leading whitespace before block tags), no-rtrim (don't strip trailing newline after block tags). -D [name=]value Define global variable. If `name` is omitted, a JSON dictionary is expected with each property becoming a global variable set to the corresponding value. If `name` is specified, it is defined as global variable set to `value` parsed as JSON (or the literal `value` string if JSON parsing fails). -F [name=]path Like `-D` but reading the value from the file in `path`. The given file must contain a single, well-formed JSON dictionary. -U name Undefine the given global variable name. -l [name=]library Preload the given `library`, optionally aliased to `name`. -L pattern Prepend given `pattern` to default library search paths. If the pattern contains no `*`, it is added twice, once with `/*.so` and once with `/*.uc` appended to it. -c[flag,flag,...] Compile the given source file(s) to bytecode instead of executing them. Supported flags: no-interp (omit interpreter line), interp=... (over- ride interpreter line with ...), dynlink=... (force import from ... to be treated as shared extensions loaded at runtime). -o path Output file path when compiling. If omitted, the compiled byte code is written to `./uc.out`. Only meaningful in conjunction with `-c`. -s Omit (strip) debug information when compiling files. Only meaningful in conjunction with `-c`. utplucc%s/*.so%s/*.uc, no-lstripno-rtrimUnrecognized -T flag "%s", ignoring he:p:tg:ST::RD:F:U:l:L:c::o:sARGVSCRIPT_NAME[-e argument][-p argument]Invalid -D option value "%s": %s Invalid -D option value "%s": Not a valid JSON object -The stdin can only be read once rUnable to open definition file "%s": %s Invalid definition file "%s": %s require,no-interpCompile flag "%s" takes no value, ignoring interpCompile flag "%s" requires a value, ignoring dynlinkUnrecognized -c flag "%s", ignoring Require either -e/-p expression or source file [stdin]Failed to open "%s": %s Unable to open output file %s: %s wb#!%s @t( ' 'P . (    . .p .` .P .@ .0 .  . . - - - - - - - - -p -` -P -@ -0 -  - - , , , , , , , , ,p ,` ,P ,@ ,0 ,  , , + + + + + + + + +p +` +P +@ +0 +  + + * * * * * * *07070100EA4C550000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/expr../../bin/busybox07070100EA55B3000081ED00000000000000000000000169F91E15000017CF000000080000000100000000000000000000000F00000000usr/bin/iwinfo#!/usr/bin/ucode 'use strict'; import { find_phy } from 'wifi.utils'; import * as uci from 'uci'; import * as iwinfo from 'iwinfo'; function normalize_ssid(ssid) { if (!ssid) return 'unknown'; return '"' + replace(ssid, /[[:cntrl:]]/g, function(c) { return '\\x' + hexenc(c); }) + '"' } function print_assoclist(stations) { for (let mac, station in stations) { printf(`${station.mac} ${station.signal} dBm / ${station.noise} dBm (SNR ${station.snr}) ${station.inactive_time} ms ago\n`); for (let k in [ 'rx', 'tx' ]) { let bitrate = station[k]; let flags = join(', ', bitrate.flags); printf(`\t${uc(k)}: ${bitrate.bitrate == 'unknown' ? 'unknown' : bitrate.bitrate + ' MBit/s'}`); if (length(bitrate.flags)) printf(', %s', flags); printf('%10d Pkts.\n', bitrate.packets); } let expected_throughput = station.expected_throughput; printf(`\texpected throughput: ${expected_throughput == 'unknown' ? 'unknown' : expected_throughput + ' MBit/s'}\n\n`); } } function print_countrylist(list) { for (let k, v in list.countries) printf(`${k == list.active ? '*' : ' '} ${k} "${v}"\n`); } function print_freqlist(channels) { for (let channel in channels) { printf(`${channel.active ? '*' : ' '} ${channel.freq} GHz (Band: ${channel.band} GHz, Channel ${channel.channel})`); if (length(channel.flags)) printf(` [${join(', ', channel.flags)}]`); printf('\n'); } } function print_htmodelist(htmode) { printf('%s\n', join(' ', htmode)); } function print_info(list) { let padding = ' '; for (let bss in list) { printf(`${bss.iface} ESSID: ${normalize_ssid(bss.ssid)}\n`); printf(`${padding}Access Point: ${bss.mac}\n`); printf(`${padding}Mode: ${bss.mode} Channel: ${bss.channel} (${bss.freq} GHz) HT Mode: ${bss.htmode}\n`); printf(`${padding}Center Channel 1: ${bss.center_freq1} 2: ${bss.center_freq2}\n`); printf(`${padding}Tx-Power: ${bss.txpower} dBm Link Quality: ${bss.quality}/70\n`); printf(`${padding}Signal: ${bss.signal} dBm Noise: ${bss.noise} dBm\n`); printf(`${padding}Bit Rate: ${bss.bitrate == 'unknown' ? 'unknown' : bss.bitrate + ' MBit/s'}\n`); printf(`${padding}Encryption: ${bss.encryption}\n`); printf(`${padding}Type: nl80211 HW Mode(s): 802.11${bss.hwmode}\n`); printf(`${padding}Hardware: ${bss.hw_type} [${bss.hw_id}]\n`); printf(`${padding}TX power offset: ${bss.power_offset}\n`); printf(`${padding}Channel offset: ${bss.channel_offset}\n`); printf(`${padding}Supports VAPs: ${bss.vaps} PHY name: ${bss.phy}\n`); if (bss.owe_transition_ifname) printf(`${padding}OWE partner: ${bss.owe_transition_ifname}\n`); printf('\n'); } return 0; } function print_scan(cells) { let idx = 1; for (let cell in cells) { printf('Cell %02d - Address: %s\n', idx++, cell.bssid); printf('\t ESSID: %s\n', normalize_ssid(cell.ssid)); printf('\t Mode: %s Frequency: %s GHz Band: %s GHz Channel: %d\n', cell.mode, cell.frequency, cell.band, cell.channel); printf('\t Signal: %d dBm Quality: %2d/70\n', cell.dbm, cell.quality); if (!cell.crypto || !length(cell.crypto.key_mgmt)) printf('\t Encryption: NONE\n'); else printf('\t Encryption: %s (%s)\n', join(' / ', cell.crypto.key_mgmt), join(' / ', cell.crypto.pair)); if (cell.ht) { printf('\t HT Operation:\n'); printf('\t\tPrimary Channel: %d\n', cell.ht.primary_channel); printf('\t\tSecondary Channel Offset: %s\n', cell.ht.secondary_chan_off); printf('\t\tChannel Width: %s\n', cell.ht.chan_width); } if (cell.vht) { printf('\t VHT Operation:\n'); printf('\t\tCenter Frequency 1: %d\n', cell.vht.center_chan_1); printf('\t\tCenter Frequency 2: %s\n', cell.vht.center_chan_2); printf('\t\tChannel Width: %s\n', cell.vht.chan_width); } if (cell.he) { printf('\t HE Operation:\n'); printf('\t\tCenter Frequency 1: %d\n', cell.he.center_chan_1); printf('\t\tCenter Frequency 2: %s\n', cell.he.center_chan_2); printf('\t\tChannel Width: %s\n', cell.he.chan_width); } if (cell.eht) { printf('\t EHT Operation:\n'); printf('\t\tCenter Frequency 1: %d\n', cell.eht.center_chan_1); printf('\t\tCenter Frequency 2: %s\n', cell.eht.center_chan_2); printf('\t\tChannel Width: %s\n', cell.eht.chan_width); } printf('\n'); } } function print_txpowerlist(list) { for (let power in list) printf('%s %2d dbm (%4d mW)\n', power.active ? '*' : ' ', power.dbm, power.mw); } let pretty = true; if (ARGV[0] == '-j') { pretty = false; shift(ARGV); } if (!length(ARGV)) { let info = iwinfo.info(); if (pretty) print_info(info); else printf('%.J\n', info); return 0; } const commands = { assoclist: [ iwinfo.assoclist, print_assoclist ], countrylist: [ iwinfo.countrylist, print_countrylist ], freqlist: [ iwinfo.freqlist, print_freqlist ], htmodelist: [ iwinfo.htmodelist, print_htmodelist ], info: [ iwinfo.info, print_info ], scan: [ iwinfo.scan, print_scan ], txpowerlist: [ iwinfo.txpowerlist, print_txpowerlist ], }; if (ARGV[0] == 'nl80211' && ARGV[1] == 'phyname') { let sec_name = ARGV[2]; let sec = uci.cursor(null, null, null, { strict: false }).get_all('wireless', sec_name); if (!sec || sec['.type'] != 'wifi-device') { warn(`Config section ${sec_name} not found\n`); return 1; } let name = find_phy(sec); if (!name) { warn('Phy not found\n'); return 1; } print(name + '\n'); return 0; } if (length(ARGV) == 2 && iwinfo.ifaces[ARGV[0]]) for (let cmd, cb in commands) if (substr(cmd, 0, length(ARGV[1])) == ARGV[1]) { let ret = cb[0](ARGV[0]); if (pretty) cb[1](ret); else printf('%.J\n', ret); return 0; } switch(ARGV[0]) { case 'phy': printf('%.J\n', iwinfo.phys); return 0; case 'iface': printf('%.J\n', iwinfo.ifaces); return 0; } warn('Usage:\n' + '\tiwinfo info\n' + '\tiwinfo scan\n' + '\tiwinfo txpowerlist\n' + '\tiwinfo freqlist\n' + '\tiwinfo assoclist\n' + '\tiwinfo countrylist\n' + '\tiwinfo htmodelist\n' + '\tiwinfo nl80211 phyname
\n'); return 1; 07070100EA4C670000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000F00000000usr/bin/resize../../bin/busybox07070100EA4C5B0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000B00000000usr/bin/id../../bin/busybox07070100EA4C560000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/find../../bin/busybox07070100EA5780000081ED00000000000000000000000169F91E1500012127000000080000000100000000000000000000000D00000000usr/bin/owut#!/usr/bin/ucode -S // owut - OpenWrt Upgrade Tool // Copyright (c) 2024-2026 Eric Fahlgren // SPDX-License-Identifier: GPL-2.0-only // vim: set noexpandtab softtabstop=8 shiftwidth=8 syntax=javascript: //------------------------------------------------------------------------------ let NAME = "owut"; let VERSION = "2026.04.09~5d6760b5-r1"; let PROG = `${NAME}/${VERSION}`; import * as uloop from "uloop"; import * as uclient from "uclient"; import * as fs from "fs"; import * as mod_ubus from "ubus"; import * as ap from "utils.argparse"; import { cursor } from "uci"; let uci = cursor(); const default_sysupgrade = "https://sysupgrade.openwrt.org"; const default_upstream = "https://downloads.openwrt.org"; const issue_url = "https://github.com/efahl/owut/issues"; const forum_url = "https://forum.openwrt.org/t/owut-openwrt-upgrade-tool/200035"; const wiki_url = "https://openwrt.org/docs/guide-user/installation/sysupgrade.owut"; //------------------------------------------------------------------------------ const EXIT_OK = 0, EXIT_ERR = 1; const Logger = { _levels: [], _level: 0, set_level: function(lvl) { this._level = lvl; }, show: function(lvl) { return this._level >= lvl; }, push: function(new) { push(this._levels, this._level); this._level = new; }, pop: function() { this._level = pop(this._levels); }, stdout_is_pipe: ! fs.stdout.isatty(), GREEN: "0;255;0", YELLOW: "255;234;0", RED: "255;0;0", reset: "reset", clreol: function() { // Clear to end-of-line when appropriate. return this.stdout_is_pipe ? "" : "\033[K"; }, color: function(color_name) { // Suppress colorization when stdout is a pipe. if (this.stdout_is_pipe) return ""; return color_name == this.reset ? "\033[m" : `\033[38;2;${color_name}m`; }, colorize: function(color_name, text) { if (this.stdout_is_pipe) return text; return this.color(color_name) + text + this.color(this.reset); }, _n_lines: 0, mark: function() { this._n_lines = 0; }, backup: function() { // Reposition cursor up n lines and reset line counter. if (! this.stdout_is_pipe && this._n_lines > 0) { printf("\033[%dA\r", this._n_lines); fs.stdout.flush(); } this.mark(); }, _fmt: function(fmt, ...args) { let s = sprintf(fmt, ...args); this._n_lines += length(match(s, /\n/g)); return this.clreol() + s; }, _out: function(prefix, clr, fmt, ...args) { warn(sprintf("%s: ", this.colorize(clr, prefix)), this._fmt(fmt, ...args)); }, err: function(fmt, ...args) { this._out("ERROR", this.RED, fmt, ...args); }, wrn: function(fmt, ...args) { this._out("WARNING", this.YELLOW, fmt, ...args); }, log: function(level, fmt, ...args) { if (this.show(level)) { print(this._fmt(fmt, ...args)); fs.stdout.flush(); } }, die: function(fmt, ...args) { this.err(fmt, ...args); exit(EXIT_ERR); }, bug: function(fmt, ...args) { // Variant for errors indicating code issue, not a user error. this.err(fmt, ...args); assert(false, `This is a bug in '${PROG}', please report at\n` ` ${issue_url}\n`); }, }; let L = Logger; //------------------------------------------------------------------------------ let commands = { check: { help: "Collect all resources and report stats." }, list: { help: "Show all the packages installed by user." }, blob: { help: "Display the json blob for the ASU build request." }, download: { help: "Build, download and verify an image." }, verify: { help: "Verify the downloaded image." }, install: { help: "Install the specified local image." }, upgrade: { help: "Build, download, verify and install an image." }, versions: { help: "Show available versions." }, dump: { help: "Collect all resources and dump internal data structures." }, }; let _fstypes = ["squashfs", "ext4", "ubifs", "jffs2"]; let _fslo = 1; // See https://sysupgrade.openwrt.org/redoc#operation/api_v1_build_post_api_v1_build_post let _list_fmts = ["fs-user", "fs-all", "config"]; function parse_rev_code(version_code) { return match(version_code, /^r(\d+)-([[:xdigit:]]+)$/i); } // Add a custom validator for the '--rev-code' option value. ap.ArgActions["rc"] = function(self, params) { let rc = params.value; if (rc && rc != "none" && ! parse_rev_code(rc)) { this.usage_short(self, { exit: 1, prefix: `ERROR: invalid version code format '${params.value}'` }); } this.store(self, params); }; let arg_defs = proto([ ap.DEFAULT_HELP, ap.DEFAULT_VERSION, { name: "command", position: 0, one_of: commands, action: "store", help: "Sub-command to execute" }, { name: "version_to", short: "-V", long: "--version-to", action: "store", nargs: 1, default: null, help: "Specify the target version, defaults to installed version." }, { name: "rev_code", short: "-R", long: "--rev-code", action: "rc", nargs: 1, default: null, help: "Specify a 'version_code', literal 'none' allowed, defaults to latest build." }, { name: "verbosity", short: "-v", long: "--verbose", action: "inc", default: 0, help: "Print various diagnostics. Repeat for even more output." }, { name: "verbosity", short: "-q", long: "--quiet", action: "dec", default: 0, help: "Reduce verbosity. Repeat for total silence."}, { name: "keep", short: "-k", long: "--keep", action: "set", default: false, help: "Save all downloaded working files." }, { name: "force", long: "--force", action: "set", default: false, help: "Force a build even when there are downgrades or no changes." }, { name: "add", short: "-a", long: "--add", action: "storex", nargs: 1, help: "New packages to add to build list." }, { name: "remove", short: "-r", long: "--remove", action: "storex", nargs: 1, help: "Installed packages to remove from build list." }, { name: "clean_slate", long: "--clean-slate", action: "set", default: false, help: "Remove all but default packages (READ THE DOCS)." }, { name: "ignored_defaults", long: "--ignored-defaults", action: "storex", nargs: 1, help: "List of explicitly ignored default package names." }, { name: "ignored_changes", long: "--ignored-changes", action: "storex", nargs: 1, help: "List of explicitly ignored package changes." }, { name: "init_script", short: "-I", long: "--init-script", action: "store", nargs: 1, default: null, help: "Path to uci-defaults script to run on first boot ('-' use stdin)." }, { name: "fstype", short: "-F", long: "--fstype", action: "enum", nargs: 1, default: null, one_of: _fstypes, help: `Desired root file system type (${join(", ", _fstypes)}).` }, { name: "rootfs_size", short: "-S", long: "--rootfs-size", action: "store_int", nargs: 1, default: null, lower: _fslo, help: `DANGER: See wiki before using! Root file system size in MB (${_fslo}-[server-dependent]).` }, { name: "image", short: "-i", long: "--image", action: "file", nargs: 1, default: "/tmp/firmware.bin", help: "Image name for download, verify, install and upgrade." }, { name: "format", short: "-f", long: "--format", action: "enum", nargs: 1, default: null, one_of: _list_fmts, help: `Format for 'list' output (${join(", ", _list_fmts)}).` }, { name: "pre_install", short: "-p", long: "--pre-install", action: "store", nargs: 1, default: null, help: "Script to exec just prior to launching final sysupgrade." }, { name: "poll_interval", short: "-T", long: "--poll-interval", action: "store_int", nargs: 1, default: 2000, help: "Poll interval for build monitor, in milliseconds." }, { name: "progress_size", long: "--progress-size", action: "store_int", nargs: 1, default: 0, help: "Response content-length above which we report download progress." }, { name: "device", long: "--device", action: "store", nargs: 1, default: null }, // Undocumented: For testing foreign devices. ], ap.ArgParser); arg_defs.set_prog_info(`owut - OpenWrt Upgrade Tool ${VERSION} (${sourcepath()})`); arg_defs.set_bookends( "\nowut is an upgrade tool for OpenWrt.\n", `\nFull documentation\n` ` ${wiki_url}\n\n` `Questions and discussion\n` ` ${forum_url}\n\n` `Issues and bug reports\n` ` ${issue_url}\n\n` ); let options = arg_defs.parse(null, {attendedsysupgrade: "owut"}); L.set_level(options.verbosity); //------------------------------------------------------------------------------ let url; // See initialize_urls let build; // See collect_all for next three let device; let release; let server_limits; // Temporary and resource files. // We save them all with reasonably recognizable names to aid in debugging. let tmp_root = "/tmp/owut-"; let img_root = match(options.image, /(.*\/|)[^\.]*/)[0]; let tmp = { overview_json: `${tmp_root}overview.json`, pkg_arch_json: `${tmp_root}packages-arch.json`, pkg_platform_json: `${tmp_root}packages-plat.json`, platform_json: `${tmp_root}platform.json`, failed_html: `${tmp_root}failures`, req_json: `${tmp_root}build-request.json`, // The POST body we send. build_json: `${tmp_root}build-response.json`, // First response. build_status_json: `${tmp_root}build-status.json`, // Overwritten subsequent responses. rsp_header: `${tmp_root}rsp-header.txt`, firmware_sums: `${img_root}.sha256sums`, // Expected sha256sums from downloaded firmware. firmware_man: `${img_root}-manifest.json`, // Manifest of successful build. }; let packageDB = {}; // Dictionary of installed packages and much status. let pkg_name_len = 0; let packages = { // Dictionary of package lists. // Remove selected packages per // https://github.com/openwrt/openwrt/commit/451e2ce0 // https://github.com/openwrt/openwrt/commit/999ef827 non_upgradable: [ "kernel", "libgcc", "libc"], // Collected from this device. installed: {}, // All the name:version pairs. top_level: [], // Simple list of names. // Collected from upgrade servers based on to-version. default: [], // Another simple name list. available: {}, // The name:version pairs that are available for installation. changes: {}, // Changes extracted from overview; structure documented in apply_pkg_mods. // Logging of modifications replaced: {}, // Log of replacements and removals due to 'package_changes'. }; //------------------------------------------------------------------------------ const ubus = { init: function() { this._bus = mod_ubus.connect(); this.check(this._bus, "mod_ubus.connect"); }, term: function() { this._bus.disconnect(); }, check: function(result, fmt, ...args) { if (!result || mod_ubus.error()) L.bug("ubus: %s\n"+fmt+"\n", mod_ubus.error(), ...args); }, call: function(obj, func, args) { let result = this._bus.call(obj, func, args); this.check(result, " from: 'ubus call %s %s %s'", obj, func, args ?? ""); return result; }, raw_run: function(command, ...params) { // Dangerous: no error checking. return this._bus.call("file", "exec", { command, params }); }, run: function(command, ...params) { return this.call("file", "exec", { command, params }); }, }; //------------------------------------------------------------------------------ let sha256 = { cmd: [ "/bin/busybox", "sha256sum" ], save: function(file, sum) { // Create the checksum file from the image name and expected sum. let sums = fs.open(tmp.firmware_sums, "w"); if (sums) { sums.write(sprintf("%s %s\n", sum, file)); sums.close(); } }, saved_sum: function(file) { // Our saved sums is always just a single line let sums = fs.open(tmp.firmware_sums, "r"); if (sums) { let line = split(trim(sums.read("line")), /\s+/); sums.close(); if (line[1] == file) return line[0]; L.err("Invalid image: got '%s', but expected '%s' in sum file\n", line[1], file); } return null; }, sum: function(file) { // Return the checksum for the specified file. let data = ubus.run(...this.cmd, file); if (data?.code == 0) return substr(data.stdout, 0, 64); this._fatal("sum", data); }, verify: function() { // Run validation against the saved checksums. let data = ubus.run(...this.cmd, "-c", tmp.firmware_sums); if (! data) this._fatal("verify", data); return data; }, _fatal: function(where, data) { L.bug("Fatal error in sha256.%s:\n%.2J\n", where, data); }, }; //------------------------------------------------------------------------------ function sysupgrade(file, check, options) { // When sysupgrade performs the upgrade, it returns with shell status // of '10', so uc_ubus_call raises an error. '--test' is fine, it // returns proper status. return check ? ubus.run("sysupgrade", ...options, file) : ubus.raw_run("sysupgrade", ...(options ?? []), file); } //------------------------------------------------------------------------------ let dl_stats = { count: 0, // Number of files downloaded. time: 0, // Sum of wall time taken. bytes: 0, // Only includes content, not http headers. Mbits: (bytes) => (bytes * 8.0 / (1024*1024)), log: function(url, file, bytes, time) { this.bytes += bytes; this.time += time; this.count++; let Mbits = this.Mbits(bytes); L.log(3, "Downloaded %s to %s (%dB at %.3f Mbps)\n", url, file, bytes, Mbits/time); }, report: function() { if (this.count > 0) { let Mbps = this.Mbits(this.bytes) / this.time; L.log(3, "Downloaded %d files, %d bytes at %.3f Mbps\n", this.count, this.bytes, Mbps); } }, }; function _get_ca_files() { const cert_path = "/etc/ssl/certs"; try { return fs.glob(`${cert_path}/*.crt`); } catch (error) { L.wrn("Could not access SSL certificates: %s\n", error); return []; } } //------------------------------------------------------------------------------ function getenv_ic(envar) { return getenv(envar) || getenv(uc(envar)); } const url_parts = regexp("^([^:]+)://([^/]+)/?(.*)", "i"); function url_parse(url) { let parts = match(url, url_parts); return ! parts ? null : { scheme: parts[1], host: parts[2], // Includes any port spec. path: parts[3], }; } function get_proxy_url(url) { let parts = url_parse(url); let no_proxy = split(getenv_ic("no_proxy"), ","); if (no_proxy && parts.host in no_proxy) return null; return getenv_ic(`${parts.scheme}_proxy`); } //------------------------------------------------------------------------------ let _uc_uc = null; let _uc_cb = null; function _get_uclient(url, dst_file) { if (! _uc_uc) { _uc_cb = { url: "", // For error messages. dst_file: "", // Where to put result. output: null, // Handle for dst_file. rsp_headers: null, _disconnect: (cb) => { if (cb.output) { cb.output.close(); cb.output = null; } this.disconnect(); uloop.end(); }, header_done: (cb) => { cb.output = fs.open(cb.dst_file, "w"); if (! cb.output) { L.err("opening %s: %s\n", cb.dst_file, fs.error()); cb._disconnect(cb); } cb.rsp_headers = this.get_headers(); cb.rsp_headers.status = this.status().status; cb.rsp_headers.content_length = int(cb.rsp_headers["content-length"] || 0); cb.rsp_headers.content_read = 0; if (! this.redirect(cb)) { L.log(1, "Redirected to %s...\n", cb.rsp_headers.location); } }, data_read: (cb) => { // uc.read returns null on eof. let n_read = 0; while ((n_read = cb.output.write(this.read() ?? "")) > 0) { cb.rsp_headers.content_read += n_read; if (options.progress_size && cb.rsp_headers.content_length > options.progress_size) { let pct_read = 100.0 * cb.rsp_headers.content_read / cb.rsp_headers.content_length; L.log(0, "Download progress: %5.1f%% %8d/%d bytes" + (L.stdout_is_pipe ? "\n" : "\r"), pct_read, cb.rsp_headers.content_read, cb.rsp_headers.content_length); } } }, data_eof: (cb) => { cb._disconnect(cb); }, error: (cb, code) => { L.err("uclient error code=%s\n This could be due to the server being down or inaccessible, check\n %s\n", code, cb.url); cb._disconnect(cb); }, }; _uc_uc = uclient.new(url, null, _uc_cb); if (! _uc_uc.ssl_init({ca_files: _get_ca_files()})) { L.die("owut uses ucode-mod-uclient, which requires an SSL library to function:\n" + " Please install one of the libustream-*[ssl|tls] packages as well as\n" + " one of the ca-bundle or ca-certificates packages.\n"); } } let proxy_url = get_proxy_url(url); if (! proxy_url) _uc_uc.set_url(url); else { L.log(2, "Using proxy_url '%s'\n", proxy_url); _uc_uc.set_url(proxy_url); _uc_uc.set_proxy_url(url); } _uc_cb.url = url; _uc_cb.dst_file = dst_file; return _uc_uc; } function _del_uclient() { _uc_uc?.free(); _uc_uc = null; _uc_cb = null; gc(); } function _request(url, dst_file, params) { // uclient function for simple http requests // url = self explanatory // dst_file = result of request // params = dictionary of optional parameters: // 'type' = 'GET' (default), 'HEAD' or 'POST' // 'json_data' = json data, forces 'POST' implicitly let json_data = params?.json_data; let type = params?.type ?? "GET"; if (! (type in ["GET", "HEAD", "POST"])) { L.bug("Invalid request type '%s'\n", type); } let start = time(); let uc = _get_uclient(url, dst_file); if (! uc.connect()) { L.err("Failed to connect\n"); return null; } let headers = { "User-Agent": PROG, }; let args = { headers: headers, }; if (json_data) { type = "POST"; headers["Content-Type"] = "application/json"; args["post_data"] = json_data; } if (! uc.request(type, args)) { L.err("Failed to send request\n"); return null; } uloop.run(); if (_uc_cb.rsp_headers) { let elapsed = (time() - start) || 0.5; let bytes = fs.stat(dst_file).size; dl_stats.log(url, dst_file, bytes, elapsed); L.log(4, "Response headers = %.2J\n", _uc_cb.rsp_headers); if (options.keep) { let hdrs = fs.open(tmp.rsp_header, "w"); hdrs.write(sprintf("%.J\n", _uc_cb.rsp_headers)); hdrs.close(); } } return { ...uc.status(), type: type, headers: _uc_cb.rsp_headers }; } function read_tmp_file(file) { // Reads 'file', then optionally deletes it. // Return raw text. let fd = fs.open(file, "r"); let tx = fd.read("all"); fd.close(); if (! options.keep) { fs.unlink(file); } return tx; } function read_tmp_json(file) { // Read 'file' into a json object, then optionally delete the file. // Primarily used to parse downloads from /tmp. let txt = trim(read_tmp_file(file)); try { return json(txt); } catch (error) { L.err("Expected json, but '%s'\n", error); return txt; } } //------------------------------------------------------------------------------ //-- Source-specific downloaders ----------------------------------------------- function dl_json(url, json_file, keep_going) { let rsp = _request(url, json_file); if (rsp?.status == 200) { return read_tmp_json(json_file); } L.err("Response status %s while downloading\n %s\n", rsp?.status, url); return keep_going ? null : exit(EXIT_ERR); } function dl_platform() { // Get the starting point for the target build. return dl_json(url.platform, tmp.platform_json, true); } function dl_overview() { // Overview is the collection of information about the branches and their releases. // // Note that auc uses branches.json instead. Its content is all included // in overview.json at '$.branches', but we like overview as it has a few // more useful items. It can be found at: // url.api_root/branches.json return dl_json(url.overview, tmp.overview_json); } function dl_failures(feed) { // The build failures info is html that resides in odd, one-man-out URL // locations: // https://downloads.openwrt.org/snapshots/faillogs/mipsel_24kc// // https://downloads.openwrt.org/releases/faillogs-23.05/mipsel_24kc// let uri = feed ? `${url.failed}${feed}/` : url.failed; let htm = `${tmp.failed_html}-${feed ? feed : "feeds"}.html`; let rsp = _request(uri, htm); if (rsp?.status == 200) { return read_tmp_file(htm); } return null; // Expected result when no failures found. } function dl_package_versions() { // Download and consolidate the two sources of package versions into // a single object. let arch = dl_json(url.pkg_arch, tmp.pkg_arch_json, true); let plat = dl_json(url.pkg_plat, tmp.pkg_platform_json, true); return sort({ ...(arch ?? []), ...(plat?.packages ?? []) }); } function check_build_response(response, file) { // Check the build responses for errors and substitute appropriate // messages when the request has failed. if (! response) { return { status: -1, detail: "Error: unknown server error", }; } if (! (response.status in [200, 202])) { let txt = trim(read_tmp_file(file)); try { response = json(txt); } catch { response.detail = "Error: " + txt; } return response; } return null; } function dl_build(config) { // Start a build by POSTing the json build configuration. let rsp = _request(url.build, tmp.build_json, {json_data: config}); return check_build_response(rsp, tmp.build_json) || read_tmp_json(tmp.build_json); } let _use_HEAD = true; function dl_build_status() { // The response is considered valid even if status != 200 (usually 202), // as this is the ongoing status query. See switch cases in 'download' // function. let rsp = _use_HEAD && _request(url.build_status, tmp.build_status_json, {type: "HEAD"}); if (rsp?.status == 405) { _use_HEAD = false; } else if (rsp?.status == 202) { // Build a minimal response. let ib_queue = rsp.headers["x-queue-position"]; let ib_status = rsp.headers["x-imagebuilder-status"]; return { status: rsp.status, detail: ib_status ?? "queued", queue_position: ib_queue, imagebuilder_status: ib_status, }; } // Otherwise do a full GET. rsp = _request(url.build_status, tmp.build_status_json); return check_build_response(rsp, tmp.build_status_json) || read_tmp_json(tmp.build_status_json); } //------------------------------------------------------------------------------ function to_int(s) { // Must be an int or there's a bug in caller. if (! match(s, /^[0-9]+$/)) L.bug("Invalid int '%s'\n", s); return int(s); } function ck_int(s) { // If empty, NaN or not fully converted, return null. if (! s) return null; s = ltrim(s, "0") || "0"; let n = int(s); return n == s ? n : null; } const standard = regexp("^([0-9.]+)(~([0-9a-f]+)){0,1}(-r([0-9]+)){0,1}$", "i"); const pre_bits = regexp("^[-a-z.]+", "i"); const ver_bits = regexp("^[0-9.]+", "i"); const ver_splt = regexp("[^a-z0-9]", "i"); const rev_bits = regexp("-[r]{0,1}([0-9]+)$", "i"); const apk_bits = regexp("^_[a-z]+([0-9]+)$", "i"); function version_parse(version) { // Two forms are parsed incorrectly: // 1) Those with all dashes '-', no hash and no rev. The final number // is interpreted as the rev number: // ct-bugcheck: 2016-07-21 // ver=[2016, 7], hsh=null, rev=21 // 2) Those starting with a hash, and the initial digits are decimal: // open-plc-utils: 1ba7d5a0-6 // ver=[1], hsh="ba7d5a0", rev=6 // // #1 is only aesthetic and ends up working fine; #2 was fixed in // the apk version cleanup and only appears in 23.05 and earlier. let ver, hsh, rev, extra; let parts = match(version, standard); if (parts) { // Standard n.n.n~h-rn sequences with optional hash and rev. ver = map(split(parts[1], ver_splt), to_int); hsh = parts[3]; rev = ck_int(parts[5]); } else { // Some odd ones: // luasoap: 2014-08-21-raf1e100281cee4b972df10121e37e51d53367a98 // luci-app-advanced-reboot: 1.0.1-11-1 if (parts = match(version, pre_bits)) { // adb: android.5.0.2_r1-r3 // libinih: r58-r1 // luci-app-dockerman: v0.5.13-20240317-1 // luci-mod-status: git-24.141.29354-5cfe7a7 (23.05) version = substr(version, length(parts[0])); } if (rev = match(version, rev_bits)) { // Extract and strip rev number from version, in case // it's one of those with lots of dashes. version = substr(version, 0, -length(rev[0])); rev = to_int(rev[1]); } if (ver = match(version, ver_bits)) { version = substr(version, length(ver[0])); ver = map(split(rtrim(ver[0], "."), ver_splt), to_int); } if (length(ver) == 1 && index(version, "-") == 0) { // pservice: 2017-08-29-r3 for (let ns in split(substr(version, 1), /[-.]/)) { let n = ck_int(ns); if (n == null) break; push(ver, n); version = substr(version, length(ns)+1); } } if (extra = match(version, apk_bits)) { // For apk underscore-named versions: // openssh-ftp-server 9.9_p1-r3 9.9_p2-r1 push(ver, int(extra[1])); version = null; } // Anything left over must be the "hash" (if we can call it that). hsh = version || null; if (index(hsh, "-") == 0) hsh = substr(hsh, 1); } return { ver, hsh, rev }; } function pkg_ver_cmp(old, new, strict) { if (old == null) return -2; if (new == null) return 2; let v1 = version_parse(old); let v2 = version_parse(new); // Ensure format changes are respected: jansson 2.14-r3 2.14.1-r1 let len = max(length(v1.ver), length(v2.ver)); while (length(v1.ver) < len) push(v1.ver, 0); while (length(v2.ver) < len) push(v2.ver, 0); for (let i, n1 in v1.ver) { let n2 = v2.ver[i]; if (n1 < n2) return -1; if (n1 > n2) return 1; } if (v1.rev < v2.rev) return -1; if (v1.rev > v2.rev) return 1; // Ignore the hashes unless we're being strict if (strict && v1.hsh != v2.hsh) return 99; // 99 means "I don't know" return 0; } function _vmangle(v) { v = replace(v, "-SNAPSHOT", ".999"); v = replace(v, "SNAPSHOT", "999"); v = replace(v, "-rc", "-r"); if (substr(v, -2) == ".0") v += "-r999"; // After the -rcN return v; } function version_cmp(v1, v2) { // Compare two versions and return cmp value based on their relative // ordering. We want to make sure RCs are before any release, and // SNAPSHOTs are after, hence the string mangling. return pkg_ver_cmp(_vmangle(v1), _vmangle(v2)); } function version_older(new_version, base_version) { // Use version_cmp to see if new_version < base_version. Useful to detect // if the user is attempting to downgrade their installation. // // version_older('23.05.2', 'SNAPSHOT') -> true // version_older('23.05-SNAPSHOT', 'SNAPSHOT') -> true // version_older('23.05.0', '23.05.0-rc1') -> false return version_cmp(new_version, base_version) < 0; } function branch_of(version) { // Extract and return the branch for a given version. // SNAPSHOT -> SNAPSHOT // 23.05.0-rc1 -> 23.05 // 23.05.3 -> 23.05 // 23.05-SNAPSHOT -> 23.05 if (version == "SNAPSHOT") return "SNAPSHOT"; let m = match(version, /\d+\.\d+/); return m ? m[0] : ""; } //------------------------------------------------------------------------------ //-- Package management -------------------------------------------------------- function is_installed(pkg) { return pkg in packageDB; } function is_default(pkg) { // Return status if package is in the defaults for this device, i.e., it // will be present as part of the standard install. // Don't attempt to do the following, because we care about things that // may not be installed, e.g., 'dnsmasq' replaced by 'dnsmasq-full'. // return pkg in packageDB && packageDB[pkg].default; return pkg in packages.default; } function is_top_level(pkg) { // We only check in the installed packages. return is_installed(pkg) && packageDB[pkg].top_level; } function is_available(pkg) { // Search for a given package in the combined platform/arch package list. return pkg in packages.available; } //------------------------------------------------------------------------------ const SrcType = { ALL: 0, USER_ONLY: 1, DEFAULT_ONLY: 2, }; function what_provides(pkg) { // Attempt to find the package provider, if it exists. This is a // hacky workaround for https://github.com/efahl/owut/issues/10, see // that issue for current progress towards a proper solution. let result; result = ubus.raw_run("opkg", "whatprovides", pkg); if (result) { let m = match(trim(result.stdout), /What provides.*\n *(.*)/); if (m) return m[-1]; } result = ubus.raw_run("apk", "query", "--installed", "--format", "json", "--match", "provides", pkg); if (result) { let j = json(result.stdout); return length(j) == 1 ? j[0].name : null; } return null; } function top_level(src_type) { // Return only the installed top level packages, i.e., those upon which // no other package depends. 'src_type' specifies how the top-level list // is to be filtered. let tl; switch (src_type) { case SrcType.ALL: tl = is_top_level; break; case SrcType.DEFAULT_ONLY: tl = (pkg) => is_top_level(pkg) && is_default(pkg); break; case SrcType.USER_ONLY: tl = (pkg) => is_top_level(pkg) && ! is_default(pkg); break; } return filter(keys(packageDB), tl); } function with_versions(pkg_list) { let versioned = {}; for (let pkg in pkg_list) { let ver = packages.available[pkg]; if (! ver) { // Hackery because of packages historically missing from the indexes. if (pkg in ["kernel", "libc"]) continue; L.wrn("Package '%s' has no available current version\n", pkg); } versioned[pkg] = ver; } return versioned; } function removed_defaults() { // Return the list of default packages that have been removed. return filter(packages.default, (p) => ! is_installed(p)); } function add_package(pkg, force) { // 'force' is used during package_changes processing to ensure that // the replacement is added, irrespective of availability (e.g., a // broken build for the package being added would otherwise fail). if (is_installed(pkg)) { packageDB[pkg].top_level = true; return true; } if (! force && ! is_available(pkg)) { L.err("Package '%s' is not available on this platform\n", pkg); return false; } packageDB[pkg] = { version: null, new_version: packages.available[pkg], top_level: true, default: is_default(pkg), }; return true; } function remove_package(pkg, silent) { // pkg - the package to remove, if possible. if (! is_installed(pkg)) { if (! silent) L.err("Package '%s' is not installed and cannot be removed\n", pkg); } else { if (! is_top_level(pkg)) { if (! silent) L.wrn("Package '%s' is a dependency, removal will have no effect on the build\n", pkg); } else if (is_default(pkg)) { L.wrn("Package '%s' is a default package, removal may have unknown side effects\n", pkg); } delete packageDB[pkg]; return true; } return false; } function replace_package(old_pkg, new_pkg) { // Do optional replacements. If 'old_pkg' is not installed, then we // have nothing to do but report success. if (is_installed(old_pkg)) { remove_package(old_pkg, true); return add_package(new_pkg, true); } return true; } function clean_slate() { for (let pkg in keys(packageDB)) { if (! is_default(pkg)) { delete packageDB[pkg]; } } for (let pkg in packages.default) { if (is_available(pkg)) { add_package(pkg); } } return true; } //------------------------------------------------------------------------------ function collect_defaults(board, device) { // Use both board json for its defaults, then add the device-specific // defaults to make one big defaults list. let defaults = []; // Must filter out any device-specific removals. for (let pkg in board) { if (! ("-"+pkg in device)) { push(defaults, pkg); } } for (let pkg in device) { if (! match(pkg, /^-/)) { push(defaults, pkg); } } for (let pkg in packages.non_upgradable) { if (! (pkg in defaults)) push(defaults, pkg); } packages.default = sort(defaults); } function parse_package_list(opt) { // Return array and null as-is, parse strings into array of string. // String separators are any of comma, space or newline sequences. // Allows use of either "list" or "option" in config file. if (type(opt) == "string") { opt = split(opt, /[,[:space:]]+/); } return opt; } function apply_pkg_mods() { // 1) Handle 'overview.package_changes'. // 2) Generate any clean-slate request. // 3) Apply user-specified removals. // 4) Apply user-specified additions. // // Package names in changes are already in canonical form. // changes = [ // { // source: "name-from", // Required string - name of package in target version // target: "name-to", // Optional string - if present, name of replaced package in installed version // revision: 123, // Required int - revision at which package change was introduced // mandatory: false, // Optional bool - if true, then force add/remove of target/source, respectively // }, // ... // ]; // // For a case of simple removal, see 'kmod-nft-nat6', which was merged // into 'kmod-nft-nat' in rev 19160. let errors = 0; // TODO think about downgrades, i.e., when to.rev_num < from.rev_num... let ignored = parse_package_list(options.ignored_changes); let rev_num = build.to.rev_num(); for (let chg in packages.changes) { // Upgrades if (chg.source in ignored) { // Allow user to retain old packages on demand, but inform them when changes are skipped. L.log(1, "Ignoring package change %s to %s\n", chg.source, chg.target); continue; } if (chg.revision <= rev_num) { if (chg.target) { if (is_installed(chg.source)) packages.replaced[chg.source] = chg.target; if (! replace_package(chg.source, chg.target)) errors++; } else if (is_installed(chg.source)) { // No target, only source, so remove it. packages.replaced[chg.source] = null; if (! remove_package(chg.source)) errors++; } } } if (options.clean_slate) { clean_slate(); } // Do removals first, so any conflicts are suppressed. for (let pkg in parse_package_list(options.remove)) { if (! pkg) continue; if (! remove_package(pkg)) { errors++; } } for (let pkg in parse_package_list(options.add)) { if (! pkg) continue; if (! add_package(pkg)) { errors++; } } for (let pkg in ignored) { if (! add_package(pkg)) { errors++; } } return errors == 0; } function collect_packages() { // Using data from rpc-sys packagelist, build an object containing all // installed package data. // // packageDB = { // "pkg1": { // version: "version-string", // new_version: "version-string", // top_level: bool, // default: bool, // }, // "pkg2": { // ... // }, // }; let installed = ubus.call("rpc-sys", "packagelist", { all: true }); let top_level = ubus.call("rpc-sys", "packagelist", { all: false }); packages.installed = installed.packages; packages.top_level = sort(keys(top_level.packages)); packages.available = dl_package_versions() ?? {}; // Might be null in ancient versions. for (let pkg, ver in packages.installed) { packageDB[pkg] = { version: ver, new_version: packages.available[pkg], top_level: pkg in packages.top_level, default: is_default(pkg), }; } if (! apply_pkg_mods()) { L.die("Errors collecting package data, terminating.\n"); } } //------------------------------------------------------------------------------ function initialize_urls() { let sysupgrade = rtrim(uci.get_first("attendedsysupgrade", "server", "url"), "/") || default_sysupgrade; let api = sysupgrade + "/api/v1"; let build = api + "/build"; let status = build + "/{hash}"; let static = sysupgrade + "/json/v1"; let store = sysupgrade + "/store"; let overview = static + "/overview.json"; url = { sysupgrade_root: sysupgrade, // sysupgrade server base url api_root: api, // api for builds and other dynamic requests build: build, // build request build_status: status, // build status, same as build appended with hash static_root: static, // json static api root url store_root: store, // api database directory for build results platform: null, // release platform json overview: overview, // Top-level overview.json, contains branch info pkg_arch: null, // Generic arch package list, containing most of the items pkg_plat: null, // Platform packages, built specifically for this platform upstream: null, // upstream build server base url, from overview.json download: null, // upstream with directory at which the "to" build can be found failed: null, // Failure list html }; } function show_versions(check_version_to) { // Using the ASU overview to get all the available versions, scan that // for version-to and report. L.log(0, "Available 'version-to' values from %s:\n", url.sysupgrade_root); let branches = release.branches; let installed = build.from.version; let selected = build.to?.version ?? options.version_to; let found_to = false; for (let branch, details in branches) { L.log(0, " %s %s branch\n", branch, branch == "SNAPSHOT" ? "main" : "release"); for (let version in details.versions) { let suffix = []; if (version == details.latest) push(suffix, "latest"); if (version == installed ) push(suffix, "installed"); if (version == selected ) { push(suffix, "requested"); found_to = true; } suffix = length(suffix) == 0 ? "" : " (" + join(",", suffix) + ")"; L.log(0, " %s%s\n", version, suffix); } } if (! found_to) L.log(0, "\nYour specified version-to '%s' is not available. " + "Pick one from above.\n", selected); else if (check_version_to) L.log(0, "\nYour version-to '%s' appears valid, so either:\n" + " 1) This build has been removed from the server, or\n" + " 2) The ASU server is having issues.\n", selected); } //------------------------------------------------------------------------------ const BuildInfo = { is_snapshot: function() { return this.version == "SNAPSHOT"; }, is_rel_snapshot: function() { return match(this.version, /.*-SNAPSHOT/) != null; }, is_downgrade_from: function(from) { if (version_older(this.version, from.version)) return true; // Same or newer version, so check revision number. return this.rev_num() < from.rev_num(); }, rev_num: function() { // Extracts the revision number from the revision code: // "r23630-842932a63d" -> 23630 let m = parse_rev_code(this.rev_code); return m ? int(m[1]) : 0; }, }; function collect_device_info() { let sysb = ubus.call("system", "board"); let efi_check = null; if (options.device) { // Allow test cases (or "cross" downloads?), using '--device' // option. tegra is one with 'sdcard' sutype, use as follows: // owut ... --device tegra/generic:compulab_trimslice:squashfs let bv = split(options.device, ":"); sysb.release.target = bv[0]; sysb.board_name = bv[1]; sysb.rootfs_type = bv[2] || "squashfs"; efi_check = bv[3] || "no"; // Default to no, if unspecified. } let target = sysb.release.target; let platform = replace(sysb.board_name, /,/, "_"); let ver_from = sysb.release.version; let sutype; // Sysupgrade type: combined, combined-efi, sdcard or sysupgrade (or trx or lxl or ???) // Generic efi targets are: // armsr - EFI-boot only, see https://github.com/efahl/owut/issues/21 // loongarch - EFI-boot only // x86 - EFI- or BIOS-boot let efi_capable = match(target, /^(armsr|loongarch|x86)\//); if (efi_check == null) { efi_check = efi_capable ? "check" : "no"; // one of: force, no, check } // See also, auc.c:1657 'select_image' for changing installed fstype to requested one. // Wait, is there also "factory"??? See asu/build.py abt line 246 if (efi_capable) { // No distinction between "factory" and "sysupgrade" for the generic devices. sutype = "combined"; } else { // Could be that sutype = "sdcard" for some devices, but // assume it is "sysupgrade", which might be wrong. We'll // fix this after we get the profiles for the device, see // 'collect_all'. sutype = "sysupgrade"; } if (efi_check == "force" || (efi_check == "check" && fs.access("/sys/firmware/efi"))) { sutype = `${sutype}-efi`; } device = { arch: null, // "x86_64" or "mipsel_24kc" or "aarch64_cortex-a53", contained in platform_json target: target, // "x86/64" or "ath79/generic" or "mediatek/mt7622", from system board platform: platform, // "generic" (for x86) or "tplink,archer-c7-v4" or "linksys,e8450-ubi" fstype: sysb.rootfs_type, // "ext4" or "squashfs", what is actually present now sutype: sutype, // Sysupgrade type, combined, combined-efi or sysupgrade or sdcard }; build = { from: proto({ version: ver_from, // Full version name currently installed: "SNAPSHOT" or "22.03.1" rev_code: sysb.release.revision, // Kernel version that is currently running kernel: sysb.kernel, // Current build on device }, BuildInfo) }; } function collect_build_info() { let ver_to = options.version_to ? uc(options.version_to) : null; if (ver_to) { if (index(ver_to, "RC") > 0) ver_to = lc(ver_to); if (ver_to in release.branches) { // User specified a branch name, not a specific version, // so coerce to latest in that branch. ver_to = release.branches[ver_to].latest; } } else if (index(build.from.version, "SNAPSHOT") >= 0) // Any snapshot stays on the same branch. ver_to = build.from.version; else { // Any unspecified non-snapshot gets latest from same branch. let b = branch_of(build.from.version); ver_to = release.branches[b].latest; } let ver_to_branch = branch_of(ver_to); if (! (ver_to_branch in release.branches) || ! (ver_to in release.branches[ver_to_branch].versions)) { show_versions(true); exit(EXIT_ERR); } let fstype = options.fstype || device.fstype; build.to = proto({ version: ver_to, // Full version name of target: "22.03.0-rc4", "23.05.2" or "SNAPSHOT" rev_code: null, // Build number from target kernel: null, // Kernel version of target build, extracted from BOM fstype: fstype, // Requested root FS type img_prefix: null, // Prefix of image being built img_file: null, // Full image name to download and install date: null, // Build date of target }, BuildInfo); } function age(from) { let delta = time() - from; let hours = (delta+1800) / 3600; if (hours < 48) return sprintf("~%d hours ago", hours); return sprintf("~%.0f days ago", hours / 24.0); } function complete_build_info(profile, board) { let dt = gmtime(board.source_date_epoch); build.to.date = sprintf("%4d-%02d-%02dT%02d:%02d:%02dZ (%s)", dt.year, dt.mon, dt.mday, dt.hour, dt.min, dt.sec, age(board.source_date_epoch)); build.to.rev_code = board.version_code; build.to.img_prefix = profile.image_prefix; // First, only allow legitimate "sysupgrade" types through. let images = filter(profile.images, (img) => img.filesystem && img.filesystem != "initramfs" && ! match(img.type, /factory/)); let valid_fstypes = uniq(sort(map(images, (img) => img.filesystem))); if (! (build.to.fstype in valid_fstypes)) { L.die("File system type '%s' should be one of %s\n", build.to.fstype, valid_fstypes); } // Next, reduce candidate images to just those with desired fstype. images = filter(images, (img) => img.filesystem == build.to.fstype); // Here is where we fix our guess for 'sutype' made above in // 'collect_device_info' (look for "sdcard" there). let valid_sutypes = uniq(sort(map(images, (img) => img.type))); if (! (device.sutype in valid_sutypes)) { if (device.sutype == "sysupgrade" && length(valid_sutypes) == 1) device.sutype = valid_sutypes[0]; else L.bug("%s:%s Sysupgrade type '%s' should be one of %s\n", device.target, device.platform, device.sutype, valid_sutypes); } for (let img in images) { if (img.filesystem == build.to.fstype && img.type == device.sutype) { build.to.img_file = img.name; break; } } } function collect_overview() { // When building the versions list, refer to // https://openwrt.org/docs/guide-developer/security#support_status collect_device_info(); let overview = dl_overview(); url.upstream = overview.upstream_url ?? default_upstream; server_limits = { max_rootfs_size: overview.server?.max_custom_rootfs_size_mb || 1024, max_defaults_length: overview.server?.max_defaults_length || 20480, }; if (options.rootfs_size && options.rootfs_size > server_limits.max_rootfs_size) { L.die("%d is above this server's maximum rootfs partition size of %d MB\n", options.rootfs_size, server_limits.max_rootfs_size); } let bad_releases = [ "23.05.1", ]; release = { branch: null, // Release branch name: "SNAPSHOT" or "21.07" or "23.05" dir: null, // ASU and DL server release branch directory: "snapshots" or "release/23.05.0" branches: {}, }; for (let branch_id, data in overview.branches) { if ("enabled" in data && ! data.enabled) continue; if (! length(data.targets)) continue; release.branches[branch_id] = { latest: null, // Determined below. versions: filter(data.versions, (v) => !(v in bad_releases)), }; } // Put everything in order, select 'latest'... release.branches = sort(release.branches, version_cmp); for (let data in values(release.branches)) { data.versions = sort(data.versions, version_cmp); for (let version in data.versions) { if (index(version, "-SNAPSHOT") >= 0) continue; if (data.latest == null || version_older(data.latest, version)) { data.latest = version; } } } collect_build_info(); release.branch = branch_of(build.to.version); let active_branch = overview.branches[release.branch]; if (! active_branch) { // TODO Should probably check: // || ! (build.to.version in release.branches[release.branch].versions) // but the versions list we got from the overview is incomplete // (i.e., ASU server will build a lot more than is shown) and // we catch that when trying to fetch board_json below. show_versions(true); exit(EXIT_ERR); } release.dir = replace(active_branch.path, "{version}", build.to.version); packages.changes = active_branch.package_changes; } function collect_platform() { // ASU platform.json often updates days after upstream profiles, so the // 'version_code' is wrong and build requests fail. As of 2024-06-09, // this appears to have been solved, see ASU commit 1e6484d. // // Previously, to solve this issue we'd look at the download server: // url.platform = `${url.upstream}/${release.dir}/targets/${device.target}/profiles.json`; // let profile = platform.profiles[device.platform]; // // Use upstream as much as possible, per @aparcar's comment: // https://github.com/efahl/owut/issues/2#issuecomment-2165021615 url.platform = `${url.upstream}/${release.dir}/targets/${device.target}/profiles.json`; let platform = dl_platform(); if (! platform) { L.die("Unsupported target '%s'\n", device.target); } if (! (device.platform in keys(platform.profiles))) { // This is a mapped profile, e.g.: raspberrypi,model-b-plus -> rpi let found = false; for (let real_platform, data in platform.profiles) { for (let alias in data.supported_devices) { alias = replace(alias, ",", "_"); if (device.platform == alias) { found = true; L.log(2, "Mapping platform %s to %s\n", device.platform, real_platform); device.platform = real_platform; break; } } if (found) break; } if (! found) { if ("generic" in keys(platform.profiles)) device.platform = "generic"; else L.die("Unsupported profile: %s\n Valid profiles are %s\n", device.platform, keys(platform.profiles)); } } let profile = platform.profiles[device.platform]; device.arch = platform.arch_packages; complete_build_info(profile, platform); collect_defaults(platform.default_packages, profile.device_packages); if ("linux_kernel" in platform) { build.to.kernel = platform.linux_kernel.version; } } function collect_all() { collect_overview(); collect_platform(); let location = build.to.is_snapshot() ? "snapshots/faillogs" : `releases/faillogs-${release.branch}`; url.failed = `${url.upstream}/${location}/${device.arch}/`; url.pkg_arch = `${url.static_root}/${release.dir}/packages/${device.arch}-index.json`; url.pkg_plat = `${url.static_root}/${release.dir}/targets/${device.target}/index.json`; let prefix = "openwrt-"; let starget = replace(device.target, /\//, "-"); if (! build.to.is_snapshot()) prefix = `${prefix}${build.to.version}-`; if (build.to.is_rel_snapshot()) prefix = lc(`${prefix}${build.to.rev_code}-`); url.download = `${url.upstream}/${release.dir}/targets/${device.target}`; collect_packages(); if (! build.to.kernel) { // Fall back to pre-"linux_kernel" scanning of packages. build.to.kernel = "unknown"; for (let pkg, data in packageDB) { if (data.new_version && index(pkg, "kmod-") == 0 && is_default(pkg)) { build.to.kernel = match(data.new_version, /^\d+\.\d+\.\d+/)[0]; break; } } } pkg_name_len = max(...map(keys(packageDB), length), ...map(packages.default, length)); } //------------------------------------------------------------------------------ function dump() { // Send forth a json representation of all the stuff we've collected. let comma = (l) => L.show(l) ? "," : ""; let inst = sort(packages.installed); let urls = sort(url); let tmps = sort(tmp); let pkgs = sort(packageDB); L.log(-1, '{\n'); L.log(-1, '"version": "%s",\n', PROG); L.log(-1, '"options": %.2J,\n', options); L.log(-1, '"server_limits": %.2J,\n', server_limits); L.log( 1, '"url": %.2J,\n', urls); L.log( 1, '"tmp": %.2J,\n', tmps); L.log( 1, '"build": %.2J,\n', build); L.log(-1, '"device": %.2J,\n', device); L.log( 0, '"release": %.2J%s\n', release, comma(2)); L.log( 2, '"packageDB": %.2J%s\n', pkgs, comma(3)); L.log( 3, '"packages": %.2J\n', packages); L.log(-1, '}\n'); } function list() { // Generate a list formatted for use with firmware-selector or // source build. let packages; switch (options.format) { case "config": packages = top_level(SrcType.USER_ONLY); let ctype = "y"; // "y" to install, "m" just build package. for (let pkg in sort(packages)) { L.log(0, "CONFIG_PACKAGE_%s=%s\n", pkg, ctype); } break; case "fs-all": packages = top_level(SrcType.ALL); L.log(0, "%s\n", join(" ", packages)); break; case "fs-user": default: packages = top_level(SrcType.USER_ONLY); push(packages, ...map(removed_defaults(), (pkg) => "-"+pkg)); L.log(0, "%s\n", join(" ", packages)); break; } } function show_config() { // Pretty-print the major configuration values. let downgrade = build.to.is_downgrade_from(build.from) ? L.colorize(L.RED, " DOWNGRADE") : ""; let hash = split(build.to.rev_code, "-")[1]; L.log(0, `ASU-Server ${url.sysupgrade_root}\n` `Upstream ${url.upstream}\n` `Target ${device.target}\n` `Profile ${device.platform}\n` `Package-arch ${device.arch}\n` ); L.log(1, `Root-FS-type ${device.fstype}\n` `Sys-type ${device.sutype}\n` ); L.log(0, `Version-from ${build.from.version} ${build.from.rev_code} (kernel ${build.from.kernel})\n` `Version-to ${build.to.version} ${build.to.rev_code} (kernel ${build.to.kernel})${downgrade}\n` ); if (hash) L.log(1, `Build-commit https://git.openwrt.org/?p=openwrt/openwrt.git;a=shortlog;h=${hash}\n`); L.log(1, `Build-FS-type ${build.to.fstype}\n` `Build-at ${build.to.date}\n` `Image-prefix ${build.to.img_prefix}\n` `Image-URL ${url.download}\n` `Image-file ${build.to.img_file}\n` ); L.log(1, "Installed %3d packages\n", length(packageDB)); L.log(1, "Top-level %3d packages\n", length(top_level(SrcType.ALL))); L.log(1, "Default %3d packages\n", length(packages.default)); L.log(1, "User-installed %3d packages (top-level only)\n", length(top_level(SrcType.USER_ONLY))); L.log(1, "\n"); } function check_updates() { // Scan the old and new package lists, return the number of changed // packages and the number of missing packages that would cause a // build failure. let changes = 0; let missing = 0; let downgrades = 0; L.log(1, "Package version changes:\n"); let w0 = pkg_name_len + 2; let w1 = 0; for (let pkg, v in packageDB) { if (! (pkg in packages.non_upgradable)) w1 = max(w1, length(v.version)); } let f0 = ` %-${w0}s %s%-${w1}s %s%s%s%s\n`; let new = ''; for (let pkg, data in sort(packageDB)) { if (pkg in packages.non_upgradable) continue; let old = data.version; let new = data.new_version; if (old == new) continue; let cmp = pkg_ver_cmp(old, new, true); if (cmp == 0) continue; changes++; let c1 = ""; let c2 = ""; let suffix = ""; // Downgrade or whatever switch (cmp) { case -2: // Old is null. // This happens when you '--add' a new package. c1 = L.color(L.YELLOW); old = "not-installed"; // fallthrough case -1: c2 = L.color(L.GREEN); break; case 1: downgrades++; c2 = L.color(L.RED); suffix = " (downgrade)"; break; case 2: // New is null. if (! is_top_level(pkg) && ! is_default(pkg)) c2 = L.color(L.YELLOW); else { missing++; c2 = L.color(L.RED); } new = "missing to-version"; break; case 99: // They are different (hashes usually), but we // can't tell if one is older than the other. c2 = L.color(L.YELLOW); suffix = " (indeterminate)"; break; } L.log(1, f0, pkg, c1, old, c2, new, suffix, L.color(L.reset)); } if (missing) { L.log(0, "%d packages missing in target version, %s\n", missing, L.colorize(L.RED, "cannot upgrade")); } if (downgrades) { L.log(0, "%d packages were downgraded\n", downgrades); } if (changes) { L.log(0, "%d packages are out-of-date\n", changes); } else { L.log(0, "All packages are up-to-date\n"); } if (length(packages.replaced)) { let f0 =` %-${w0}s %s\n`; L.log(1, "\nAutomatic package replacements/removals:\n"); L.log(1, f0, "Package", "Replaced-by"); for (let chg, to in sort(packages.replaced)) { L.log(1, f0, chg, to ?? L.colorize(L.YELLOW, "removed")); } L.log(1, "Details at %s\n", url.overview); } L.log(1, "\n"); return { missing, changes, downgrades }; } function check_missing() { // Mostly silent check for missing packages. Used when generating a // package list for external uses, 'list' or 'blob'. L.push(-1); let updates = check_updates(); L.pop(); if (updates.missing) { L.err("There are %s missing packages in the build package list, run 'owut check'\n", updates.missing); return false; } return true; } function check_defaults() { // Scan the package defaults to see if they are // 1) missing from the installation or // 2) modified/replaced by some other package. let ignored = parse_package_list(options.ignored_defaults); let changes = {}; let count = { ignored: 0, retained: 0, replaced: 0, removed: 0 }; for (let pkg in packages.default) { if (pkg in packages.non_upgradable) continue; if (pkg in ignored) { count.ignored++; changes[pkg] = L.colorize(L.GREEN, "user ignored"); } else if (is_installed(pkg)) count.retained++; else { changes[pkg] = what_provides(pkg); if (changes[pkg]) count.replaced++; else { count.removed++; changes[pkg] = L.colorize(L.YELLOW, "not installed"); } } } L.log(1, "Default package analysis:\n"); if (length(changes) == 0) { L.log(1, " No missing or modified default packages\n\n"); } else { if (! L.show(1)) L.log(0, "There are %d missing and %d modified default packages\n", count.removed, count.replaced); let wid = pkg_name_len + 2; let fmt = ` %-${wid}s %s\n`; L.log(1, fmt, "Default", "Provided-by"); for (let p, a in changes) { L.log(1, fmt, p, a); } L.log(1, "\n"); } return count; } function check_pkg_builds() { // Scraping the failures.html is a total hack. // Let me know if you have an API on downloads (or other build site) // that can give this info. // // The lines we're scraping look like: // gummiboot/-Tue Apr 23 07:05:36 2024 let info = regexp( '([^<]*)/' + '[^<]*' + '([^<]*)', 'g' ); let n_failed = 0; let n_broken = 0; let html_blob = dl_failures(); let feeds = map(match(html_blob, info), (f) => f[1]); if (! html_blob || ! feeds) { L.log(1, "No package build failures found for %s %s.\n\n", build.to.version, device.arch); } else { L.log(1, "There are currently package build failures for %s %s:\n", build.to.version, device.arch); for (let feed in feeds) { let shown = 0; L.log(1, " Feed: %s\n", feed); html_blob = dl_failures(feed); if (html_blob) { let fails = match(html_blob, info); let fmt = ` %-${pkg_name_len}s %s - %s\n`; for (let fail in fails) { n_broken++; let pkg = fail[1]; let date = fail[2]; let msg, level; if (is_installed(pkg)) { n_failed++; msg = L.colorize(L.RED, "package installed locally, cannot upgrade"); level = 1; } else { msg = "not installed"; level = 2; } L.log(level, fmt, pkg, date, msg); if (L.show(level)) shown++; } if (shown != length(fails)) { L.log(1, " %d unshown\n", length(fails)-shown); } } } let prefix = n_failed ? L.colorize(L.RED, `${n_failed} of ${n_broken} package build failures affect this device:`) : L.colorize(L.GREEN, `${n_broken} package build failures don't affect this device,`); L.log(n_failed ? 0 : 1, "%s details at\n %s\n\n", prefix, url.failed); } return ! n_failed; } function check_init_script() { // If // 1) the user has an immutable image, and // 2) that image contains an ASU generated custom defaults file, and // 3) the user has not mentioned or overridden it, // then warn them and have them read the documentation. const asu_defaults = "/rom/etc/uci-defaults/99-asu-defaults"; if (options.init_script) { if (options.init_script != "-" && ! fs.access(options.init_script)) { L.die("The specified init-script '%s' does not exist\n", options.init_script); } } else if (fs.access(asu_defaults)) { L.wrn(`You have a custom uci-defaults script at\n` ` ${asu_defaults}\n` `and have not referenced it with the 'init-script' option.\n` `Please read:\n` ` ${wiki_url}#using_a_uci-defaults_script\n\n` ); } } function blob(report) { // Exclude default packages unless explicitly listed in 'packages'. When // moving between releases, default packages may be added, deleted or // renamed, which can result in bricks if something important is missed. let contains_defaults = true; let log_level = report ? 1 : 2; // We try to use 'packages_versions' in our server request, but can // only do so if all packages have valid versions. We fall back to // using 'packages' when any version is undefined. let package_list = { packages: top_level(SrcType.ALL) }; package_list["packages_versions"] = with_versions(package_list.packages); package_list["type"] = null in values(package_list.packages_versions) ? "packages" : "packages_versions"; let init_script; if (options.init_script) { let inits_file = options.init_script == "-" ? fs.stdin : fs.open(options.init_script); if (! inits_file) { L.err("Init script file '%s' does not exist\n", options.init_script); return null; } else { init_script = inits_file.read("all"); inits_file.close(); if (length(init_script) > server_limits.max_defaults_length) { L.err("'%s' is over the ASU server's %s byte maximum\n", options.init_script, server_limits.max_defaults_length); return null; } } } let rc = (options.rev_code == "none" ? "" : options.rev_code) ?? build.to.rev_code; L.log(log_level, "Request:\n Version %s %s (kernel %s)\n", build.to.version, rc || "none", build.to.kernel); if (build.to.fstype != device.fstype) { L.log(log_level, " Change file system type from '%s' to '%s'\n", device.fstype, build.to.fstype); } let blob = { client: PROG, target: device.target, profile: device.platform, // sanitized board name version: build.to.version, version_code: rc, filesystem: build.to.fstype, diff_packages: contains_defaults, }; blob[package_list.type] = package_list[package_list.type]; if (options.rootfs_size) { if (options.rootfs_size > server_limits.max_rootfs_size) { L.die("This server allows a maximum rootfs partition size of %d MB\n", server_limits.max_rootfs_size); } blob.rootfs_size_mb = options.rootfs_size; L.log(log_level, " ROOTFS_PARTSIZE set to %d MB\n", options.rootfs_size); } if (init_script) { blob.defaults = init_script; L.log(log_level, " Included init script '%s' (%d bytes) in build request\n", options.init_script, length(init_script)); } return blob; } function json_blob() { let b = blob(true); return b ? sprintf("%J", b) : null; } function show_blob() { let b = blob(); if (b) { L.log(0, "%.2J\n", b); } } function select_image(images) { for (let image in images) { if (image.filesystem == build.to.fstype && image.type == device.sutype) { return image; } } return null; } function verify_image() { // Verify the image with both the saved sha256sum and by passing it // to 'sysupgrade --test'. // // Failed images will be delete, unless '--keep' is set. let image = options.image; if (! fs.access(image)) { L.err("Image file '%s' does not exist\n", image); return false; } let info = fs.stat(image); L.log(1, "Verifying : %s (%d bytes) against %s\n", image, info.size, tmp.firmware_sums); let result = sha256.verify(); if (result?.code == 0) { L.log(1, " Saved sha256 matches\n"); } else { let file_sha = sha256.sum(image); let expected = sha256.saved_sum(image); L.err(`sha256 doesn't match:\n` ` calculated '${file_sha}'\n` ` saved '${expected}'\n`); if (! options.keep) { fs.unlink(image); } return false; } result = sysupgrade(image, true, ["--test"]); if (result?.code == 0) { L.log(1, " %s\n", join("\n ", split(trim(result.stderr), "\n"))); } else { L.err("sysupgrade validation failed:\n"); if (result.stdout) L.log(0, "stdout =\n%s\n", result.stdout); if (result.stderr) L.log(0, "stderr =\n%s\n", result.stderr); if (! options.keep) { fs.unlink(image); } return false; } L.log(1, "Checks complete, image is valid.\n"); return true; } function download() { // Use the json_blob to create a build request, run the request and // download the result. // // On success, return true. // // Certain failures often indicate that the ASU server has fallen // behind the build servers. For example, // // Error: Received incorrect version r26608-blah (requested r26620-blah) // // When we see one of these cases, we display one or more error // messages, increment an error counter and use the counter to fall // out of the main build-polling loop, and then generate a final // message "wait a bit and retry". // // Other inexplicable or better explained errors simply show the error // message and then immediately return false. let blob = json_blob(); if (! blob) return false; if (options.keep) { L.log(2, "Saving build blob to %s\n", tmp.req_json); let save = fs.open(tmp.req_json, "w"); if (save) { save.write(blob); save.close(); } } let response = dl_build(blob); let t_start = time(); let t_build_start = t_start; let hash = response?.request_hash; if (hash) { L.log(0, "Request hash:\n %s\n", hash); url.build_status = replace(url.build_status, "{hash}", hash); } let errors = 0; let prev_status = ""; let poll_interval = 500; // Check first response right away. while (response && !errors) { let status = response.status; if (response.detail == prev_status) { L.backup(); } else { L.log(0, "--\n"); L.mark(); prev_status = response.detail; } let t_now = time(); let highlight = status in [200, 202] ? L.GREEN : L.RED; L.log(0, "Status: %s", L.colorize(highlight, response.detail)); switch (response.detail) { case "queued": L.log(0, " - %d ahead of you", response.queue_position); t_build_start = t_now; break; case "started": L.log(0, " - %s", response.imagebuilder_status ?? "setup"); break; default: break; } L.log(0, "\n"); let t_total = t_now - t_start; let t_queue = t_build_start - t_start; let t_build = t_now - t_build_start; L.log(0, "Progress: %3ds total = %3ds in queue + %3ds in build\n", t_total, t_queue, t_build); switch (status) { case 202: // Build in-progress, update monitor at user-specified interval. sleep(poll_interval); poll_interval = options.poll_interval; response = dl_build_status(); break; case 200: // All done. let req_version_code = response.request.version_code; L.log(0, "\nBuild succeeded in %3ds total = %3ds in queue + %3ds to build:\n", t_total, t_queue, t_build); L.log(2, " build_at = %s\n", response.build_at); L.log(1, " version_number = %s\n", response.version_number); L.log(1, " version_code = %s (requested %s)\n", response.version_code, req_version_code); L.log(1, " kernel_version = %s\n", build.to.kernel); L.log(1, " rootfs_size_mb = %s\n", response.request.rootfs_size_mb ?? "default"); L.log(1, " init-script = %s\n", response.request.defaults ? options.init_script : "no-init-script"); L.log(3, " images = %.2J\n", response.images); L.log(3, " build_cmd = %.2J\n", response.build_cmd); L.log(3, " manifest = %.2J\n", response.manifest); L.log(1, "\n"); let image = select_image(response.images); if (! image) { L.err("Could not locate an image for '%s' and '%s'\n", build.to.fstype, device.sutype); return false; } let sha = image.sha256; // LuCI-ASU uses sha256_unsigned for something... let dir = response.bin_dir; let bin = `${url.store_root}/${dir}`; let img = `${bin}/${image.name}`; let dst = options.image; L.log(1, "Image source: %s\n", img); let rsp = _request(img, dst); if (rsp?.status != 200) { L.err("Couldn't download image %s\n", image.name); return false; } L.log(0, "Image saved : %s\n", dst); sha256.save(dst, sha); // Create the manifest, and validate against request. let manifest = response.manifest; let manifest_file = fs.open(tmp.firmware_man, "w"); if (manifest_file) { manifest_file.write(sprintf("%.2J\n", response)); manifest_file.close(); L.log(1, "Manifest : %s\n", tmp.firmware_man); } if (req_version_code && response.version_code != req_version_code) { L.err("Firmware revision mismatch: expected %s, but got %s\n" + "If you determine this is acceptable, simply 'owut verify' " + "and 'owut install'.\n", req_version_code, response.version_code); errors++; } for (let pkg in top_level(SrcType.ALL)) { if (pkg in packages.non_upgradable) continue; if (! (pkg in manifest)) { L.err("Firmware missing requested package: '%s'\n", pkg); errors++; continue; } let expected_version = packageDB[pkg].new_version; let received_version = manifest[pkg]; if (received_version != expected_version) { L.err("Firmware package version mismatch: '%s', expected %s, but got %s\n", pkg, expected_version, received_version); errors++; continue; } } return errors == 0; // Everything else is "failure - we're done" cases. case 400: // Invalid build request. case 422: // Unknown package. case 500: // Invalid build request. default: // ??? L.log(0, "\nBuild failed in %3ds total = %3ds in queue + %3ds to build:\n", t_total, t_queue, t_build); if (response.error ) L.log(0, "%s =\n%s\n", L.colorize(L.RED, "ASU server error"), response.error); if (response.stdout) L.log(0, "%s =\n%s\n", L.colorize(L.RED, "ASU server stdout"), response.stdout); if (response.stderr) L.log(0, "%s =\n%s\n", L.colorize(L.RED, "ASU server stderr"), response.stderr); L.err("Build failed with status %s (--version-to %s --device %s:%s:%s)\n", status, build.to.version, device.target, device.platform, build.to.fstype); errors++; break; } } if (errors) { L.log(0, "The above errors are often due to the upgrade server lagging behind the\n" + "build server, first suggestion is to wait a while and try again.\n"); } return false; } function run_pre_install_hook() { // Execute a user program just prior to doing the final installation. if (options.pre_install) { if (! fs.access(options.pre_install)) L.die(`Cannot access pre-install script '${options.pre_install}', aborting upgrade\n`); L.log(1, "Executing pre-install script '%s'...\n", options.pre_install); let result = ubus.run(options.pre_install); if (result?.stdout) L.log(0, result.stdout); if (result?.stderr) L.log(0, result.stderr); if (result.code != 0) L.die(`Pre-install script '${options.pre_install}' failed with status ${result.code}, aborting upgrade\n`); L.log(1, "Pre-install script successful, proceeding with upgrade\n"); } } function install() { // Run sysupgrade to install the image. // Probably need some more options reflected from sysupgrade itself. // '-n' = discard config comes to mind first, maybe '-f' = force, too. run_pre_install_hook(); // Run user's pre-install hook. sysupgrade(options.image, false); L.log(0, "Installing %s and rebooting...\n", options.image); } //------------------------------------------------------------------------------ if (options.verbosity > 0 && ! (options.command in ["dump", "blob", "list"])) { arg_defs.show_version(); } uloop.init(); ubus.init(); initialize_urls(); let updates, counts, details; let exit_status = EXIT_ERR; // Assume failure, until we know otherwise. function terminate() { // system("grep -E 'VmRSS|VmPeak' /proc/$PPID/status"); if (uloop.running()) uloop.end(); uloop.done(); ubus.term(); _del_uclient(); exit(exit_status); } signal("SIGINT", terminate); // Ensure ctrl-C works when inside build loop. switch (options.command) { case "versions": collect_overview(); show_versions(false); exit_status = EXIT_OK; break; case "dump": L.push(-1); collect_all(); L.pop(); dump(); L.push(-1); exit_status = EXIT_OK; break; case "list": collect_all(); list(); if (check_missing()) exit_status = EXIT_OK; break; case "check": collect_all(); show_config(); updates = check_updates(); counts = check_defaults(); if (check_pkg_builds() && ! updates.missing) exit_status = EXIT_OK; check_init_script(); if (counts.removed) L.wrn("There are %d missing default packages, confirm this is expected before proceeding\n", counts.removed); details = L.show(1) ? "\n" : " (re-run with '--verbose' for details)\n"; if (exit_status != EXIT_OK) L.err("Checks reveal errors, do not upgrade%s", details); else if (updates.downgrades) L.wrn("Checks reveal package downgrades, upgrade still possible with '--force'%s", details); else if (updates.changes == 0) L.log(0, "There are no changes, upgrade not necessary%s", details); else L.log(0, "It is safe to proceed with an upgrade%s", details); break; case "blob": collect_all(); check_init_script(); show_blob(); if (check_missing()) exit_status = EXIT_OK; break; case "download": case "upgrade": collect_all(); show_config(); updates = check_updates(); details = L.show(1) ? "\n" : " (run 'owut check --verbose' for details)\n"; if (updates.downgrades && ! options.force) { L.err("Update checks reveal package downgrades%s", details); break; } if (updates.missing) { L.err("Update checks reveal errors, can't proceed%s", details); break; } counts = check_defaults(); if (! check_pkg_builds()) { L.err("Package build checks reveal errors, can't proceed%s", details); break; } if (counts.removed) L.wrn("There are %d missing default packages, confirm this is expected before proceeding%s", counts.removed, details); if (updates.changes == 0) { if (options.force) L.wrn("Forcing build with no changes%s", details); else { L.log(0, "There are no changes to %s (see '--force')\n", options.command); exit_status = EXIT_OK; break; } } check_init_script(); if (! download()) break; // fallthrough case "verify": case "install": if (verify_image()) { exit_status = EXIT_OK; if (options.command in ["upgrade", "install"]) { install(); } } break; default: L.err("'%s' not implemented\n", options.command); break; } dl_stats.report(); terminate(); 07070100EA4C360000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000A00000000usr/bin/[../../bin/busybox07070100EA4C5D0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/less../../bin/busybox07070100EA56EA000081ED00000000000000000000000169F91E1500010240000000080000000100000000000000000000001100000000usr/bin/luci-bwcELF @@8 @@ @ @8 8 8pX X X  22  X` ` `00dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( (     .     (  p p5  ppp p p?p#poo oo %? 1<%9 $ :+ # (5' 80&!/.")6,*->3=247;        .] . . .pP .`: .P .@ .0 .  . .~ -wA -p -h -c - -\ -J -U -pO -`F -P@ -@: -00 - ) -$ - , ,; , ,  , , , ,Q" ,p ,` ,P ,@ ,0 ,  ,i , + + +$" + + + + +v +p +`p +P__RLD_MAP_init_fini__fixunssfsi__register_frame_infostrlen__mulsf3memset__deregister_frame_infomemcpypopensigemptysetstrerrormemmovepclosesnprintfmunmapgetpidfscanffgetsglobperrorsleepreaddirmmapdlclose__stack_chk_failwritefprintfkillchdirstrstrdlopenunlinkforksscanfsigactionfreaddlsymstrtoullfopengetoptfclosetimeopendirstrcmpstderrglobfreestat__errno_locationexitatoi__libc_start_mainclosedirmkdiroptarg__stack_chk_guardlibgcc_s.so.1libc.soGCC_3.0GLIBC_2.0 y&P iig߼߿g g0<-gpܣ߂8 ߔ88(%%C%$R*`!ߑ@$lf12@$r$cߙ 0%(% @ %A ߅@߂ ߙhD @% 8% 0% d2P߿8߼0ߵ(ߴ ߲߳߱߰$g@|B-ߙD&1 fs"!S2(Cm`U"$iC߂Dߙߙ@g9%߿8߼0ߵ(ߴ ߲߳߱߰ g@T $tC߂ߙ D߃8b߂Dߙ@g9&ߙ@g9(8߿8߼0ߵ(ߴ ߲߳߱߰ g@ߙ@g9)%P/ %(-<-$$ g<-gmߙ߈ ߇(0%߄0H% d߿߼gg<-glߐ8P@߂x@ߙx߄8 d$P߿߼߰g g<-gld߂@߅8߄8ߙdX d߿߼g< -dl܂8C܂8Cgp<-gkPߓhb`XH@8x%%( d$/$/$"@ߙx %$$ $<@ @%%ߙp@0%(%  %@&1 ߙpߙ`  %%T ߙh$ % @ߙ BV$5f1$ߤ(c߿xߙ ߼p߶hߵ`ߴX߳P߲H߱@߰8gg<-gjߙx$%(% %@@@%$ߕ8ޢ@ ߅@ߙd0( ` %@5@%  %@1YP ߥ%ޢYX ߥ%ޢY` ߥ%߆@ߙ 8%d08$  %ߥߙ  %@{ߙߙ@$g9   %@tߙߙ߂ Uߙ D߅@ߙh@8%0%d0X  %gXg(g8ߙߦXߤ( 8%$@@ ߥߙ ߤ(@@%ߙ@8%$$ % ߙ  %ߙ$ (%  %ߣbߢ fW߆@ߙߢ 8%d0$ %ߵx߷߾ ߥߙ  %@8ߙߙ@$(g9   %@0߂ߙ Qߙ D߅@ߙh@8%0%d0X  %ߙ  %@}j}ޢ  %@|k|ޢ  %@{k{߆@ %ߙ@$g %g9 ߙ %ߙ@ߢ$(g %g9 ߥ @ %@@%߂@%dB0(߂@%dB0H߂@%Pߙg 0%$  %@0ߙP߆@ߙd1($  %ߥߙ  %@hߙߙ@$g9   %@aߙߙ߂ Uߙ D߅@ߙh@8%0%d0X  %@_ %ߙ ߄@ߥ  %@@%߂@ߥ(  %@ߙߙPߥH  %@߅@ߙPd0  %@ߙߢPߙPdE0  %@߅@ߙPd0  %@ߙ߅@g8ߙ(@0%d1 % @ߙ(߅@ߙߤ d1@߅@ߙߤ d1 @&߅@ߦd1  %@߅@ߙ&' %ߙ@$g %g9 ߙ %ߙ@$ g %g9 x߾ ߼ ߷ ߶ ߵ ߴ ߳ ߲ ߱ %߰ g g@<-g\8߄@ߒߙxB(%d/H0( @ߙHg$ (%@ % @%@%ߙ % @%ߙ`  %ߙ`(%  %Aߙ`ߙ@g9 @&ߙ߂ Pߙ D߅@ߙh %@0% d1$ߙ $$  %@ߙ߂ Pߙ D߅@ߙh %@0% d1$ߣBb߿Hߙ ߼@߲8߱0߰(gPg`<-gZHߙ@ߓg9#bhP80X@%( g(߆@ߙ8%d0$ % gߙ@0%$(g9x  %@0ߒ@ߙ߂ Pߙ D߅@ߙh %@8% 0%d1 $ߣ(bb%߿hߙ q-e ߪf"(D+ߙ fghi BP  f2&1($*@ߣ ߙ@g9  %@%߂@dB0ߕ@%fR1߼`ߵXߴP߳H߲@߱8%߰0gpg`<-gYhHߙ@ߓg9#bhP80X@%( g(߆@ߙ8%d08$ % gߙ@0%$g9x  %@/ߒ@ߙ߂ Pߙ D߅@ߙh %@8% 0%d1 $ߣ(bb$߿hߙ q-e ߩf"D+ߙ fghBH  f2(&1$*@ߣ ߙ@g9  %@%߂@dB0ߕ@%fR1߼`ߵXߴP߳H߲@߱8%߰0gpg`<-gWHߙ@ߓg9#bhP8X@0( g(߆@ߙd1($ % gߙ@0%$g9x  %@/ߒ@ߙ߂ Pߙ D߅@ߙh %@8% 0%d1 $ߣ(bb$߿hߙ q-e ߩf"D+ߙ fgh BH  f2(&1$*@ߣ ߙ@g9  %@%߂@dB0ߕ@%fR1߼`ߵXߴP߳H߲@߱8%߰0gpg`<-gVPHߙ@ߓg9#bhP8X@0( g(߆@ߙd1h$ % gߙ@0%$ g9x  %@/ߒ@ߙ߂ Pߙ D߅@ߙh %@8% 0%d1 $ߣ(bb$߿hߙ q-e ߩf" D+ߙ fghBH  f2(&1 $*@ߣ ߙ@g9  %@%߂@dB0ߕ@%fR1߼`ߵXߴP߳H߲@߱8%߰0gpߙx% d>ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d9ߙx% d8ߙx% d7ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dߙx% dg߼߿g /proc/net/nf_conntrack/proc/net/ip_conntrack/usr/sbin/conntrack -L -o extended/usr/sbin/conntrackrx_packetstx_packetsrx_bytestx_bytesfork()/chdir()/var/run/luci-bwc.pidFailed to write pid file: %s %i/usr/lib/libiwinfo.so*luci-bwc %d/sys/class/netlo...iwinfo_backend/var/lib/luci-bwc/radio/%sFailed to init %s: %s /sys/class/net/%s/statistics/%sr/var/lib/luci-bwc/if/%sTIME_WAITsrc=127.0.0.1 dst=127.0.0.1 src=::1 dst=::1 %*s %*d %stcp%s %*dudp/var/lib/luci-bwc/connections/proc/loadavg%f %f %f/var/lib/luci-bwc/loadiwinfo_finishFailed to ping daemon and unable to start it up: %s Failed to send signal: %s ,Failed to open %s: %s [ %u, %lu, %lu, %lu, %lu ]%s [ %u, %u, %u, %u ]%s t:i:r:clUsage: %s [-t timeout] -i ifname %s [-t timeout] -r radiodev %s [-t timeout] -c %s [-t timeout] -l B  P  .     . . .p .` .P .@ .0 .  . . - - - - - - - - -p -` -P -@ -0 -  - - , , , , , , , , ,p ,` ,P ,@ ,0 ,  , , + + + + + + + + +p +` +P07070100EA4C710000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/time../../bin/busybox07070100EA4C5E0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000F00000000usr/bin/logger../../bin/busybox07070100EA4C3A0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000E00000000usr/bin/clear../../bin/busybox07070100EA558F000081ED00000000000000000000000169F91E15000100BF000000080000000100000000000000000000001200000000usr/bin/getrandomELF @@8 @@ @ @8 8 8pX X X  ``  (` ` `00dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 (? ( (           p p5 ppp p pp"poo poo J            p `z Psk @e 0-"T M "E __RLD_MAP_init_fini__register_frame_info__deregister_frame_infosyscallisatty__stack_chk_failwritefprintfstderratoi__libc_start_mainfputs__stack_chk_guardlibgcc_s.so.1libc.soGLIBC_2.0 iig߼߿g g@<-gw(ߓbH$80 D%߂xܦQ߅@ߙd   %߄@ (%d ߙ` $ߣbb8߿Hߙ ߙ $@@%߂x߄@Ed ߙp @@%߂x߄@Ed$g$*ߙ 8%@0%(% $U@0%߅@d0߂xߙDߙ(% $B߅@dH&*߼@ߵ8ߴ0߳(߲ ߰ %߱gP%`/ %(-<-$$ g<-gtߙh߈ ߇(0%߄0H% d߿߼gg<-gsߐ8@߂@ߙ߄8 d$߿߼߰g g<-gsT߂@߅8߄8ߙd d߿߼gߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dg߼߿g Usage: %s => return bytes from getrandom() Not outputting random to a tty Invalid param (must be > 0) getrandom() failed: %m write() failed: %m   P      p ` P @ 0   07070100EA4C640000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000F00000000usr/bin/printf../../bin/busybox07070100EA5CCC0000A1FF00000000000000000000000169F91E1500000012000000080000000100000000000000000000000C00000000usr/bin/ssh/usr/sbin/dropbear07070100EA4C750000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000F00000000usr/bin/uptime../../bin/busybox07070100EA5CC90000A1FF00000000000000000000000169F91E1500000012000000080000000100000000000000000000001300000000usr/bin/ssh-keygen/usr/sbin/dropbear07070100EA4C5F0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000F00000000usr/bin/md5sum../../bin/busybox07070100EA4C390000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001100000000usr/bin/basename../../bin/busybox07070100EA4C720000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/top../../bin/busybox07070100EA4C580000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/free../../bin/busybox07070100EA4C690000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000F00000000usr/bin/setsid../../bin/busybox07070100EA4C6A0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001200000000usr/bin/sha256sum../../bin/busybox07070100EA4C96000081ED00000000000000000000000169F91E1500010118000000080000000100000000000000000000000F00000000usr/bin/fwtoolELF @@8 @@ @ @8 8 8pX X X    0` ` `00dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( (          P  p p5  ppp p pp#poo `oo &                       p `2"p Pf @_ 0J  Q "X__RLD_MAP_init_finifree__register_frame_info__deregister_frame_infomallocmemcpystdoutfflushftruncate__stack_chk_failfprintfstdinfreadfopengetoptfclosestrcmpstderrfwritefileno__libc_start_mainfputsoptindoptarg__stack_chk_guardlibgcc_s.so.1libc.soGLIBC_2.0 iig߼߿g g0<-gu߃8<ܴx%%dc(%4ƃ $%$0D # $|BC$&$dcbߕ@ߓ8ߒ@f(fsfRߙ0%(%  %$C߂BQ* ;߄8߂߅@Dߙ0% d8^$$iC%(Cj` $s$SC$TC$$IC$߂` %EC$tC$qC߂8$ҠC$߂߄8Ed@% @ߙ9$0%0%߂8$C߂8$CC߃8(c`߃8c`߂8B@$߂߄@ߙhE d $߿߾߼߷߶ߵߴ߲߳߱%߰xg-@ߙ@g9 @%߂8Dߙ ߂8Dߙ ߂8Dߙ ߿ߙ@(%g9gHH @߃8@ b߂8B@߂߄@Edߙh v߃80c` ߃cC ߙ߂8B@߂߄@Ed @ߙ 4@@%߂8ߞ߂@%dB|%%$ߢB@BBߙ4$  %߹ %4(% %@%ߢߙG4$ % `%4@%C%W!߂@dB<FW$Bx0<߂@dB| lߥ߹gX$ %X` h߱X߳`h@@%߂8B@߄@߂Ed pߙh %2ߢ %߹ߙ 4@@%$H<C T߂8B@߂߄@ߙhE d $L`='߹  %4 `(%@ %߹ 0%  (%:4߂8B@.߂%$ߢB@wߙ``߂ߙG4$ ` % ߂ߙG0%$  %eߙ`߂ߙU@(%8% %$4B1 ߤߙ8%$ $Q %߄@Ed ߙh %$B*@ ߹߂8B@߂߄@Ed  %@0% (%߱X߳`hl@ @%߂8B@߄@%ߢ߂Eyd ȓP@/$ߢ(G\4B1$@(% %ߙ ߢ0Uߢߢߙx Dߙ(% @ %A@%߂8B@ߙ`߂߅@Dߙ dߙ`  %ߙ`  %ߙ` ` %߂8C0߂8G`'@)'.BL$f%P/ %(-<-$$ g<-glߙp߈ ߇(0%߄0H% d߿߼gg<-gkߐ8@@߂@ߙ߄8 d$@߿߼߰g g<-gkd߂@߅8߄8ߙdH d߿߼gg<-gk%߅@ߙdP %@ ߂߂B߿߼߱߰g ߂@߂@dE@ߙ  %@߿߅@ߙdX  %߿dEHg<-gj\߃8b%A %f@ߙ@߂8B@$߂߄@E dF߂8B@ $߂߄@Ed`ߙh $߿߼߰g 8g9 0,B<8-di%8|0-ddb&0c-c|Bb&gP<-gi<Hߖ@ߕ@80( X%%%%gf|ߙ8%$$ @ %H  @%)#  0% I!@(%%  -4ߙ`8%$ (% @ %ߙ$ߣb߿Xߙ ߼P߶Hߵ@ߴ8߳0߲(߱ ߰%g`܃`$$߿8߼0ߵ(ߴ ߲߳߱߰g@g%%%(* (@% (/ #0<t-e(--@0%E+8gh@7%U-3ߙ @ %U#u#@ ߙ` 4$@q(/E(-e + ++Nߙ 0% ` %T#t#@ ߙ` 4%+@d-C3ߙC-b3ߙgP<-gfh0ߒ߅@Bߙ<FWdBx1 Options: -S : Append signature file to firmware image -I : Append metadata file to firmware image -s : Extract signature file from firmware image -i : Extract metadata file from firmware image -t: Remove extracted chunks from firmare image (using -s, -i) -T: Output firmware image without extracted chunks to stdout (using -s, -i) -q: Quiet (suppress error messages) Cannot append/extract metadata and signature in one run Cannot truncate file when reading from stdin unable to extract trailer header Data not found CRC error Size error unable to extract trailer data   P                p ` P @ 0   07070100EA4C770000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000E00000000usr/bin/which../../bin/busybox07070100EA4C700000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/test../../bin/busybox07070100EA4C730000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000B00000000usr/bin/tr../../bin/busybox07070100EA4C610000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000B00000000usr/bin/nc../../bin/busybox07070100EA49930000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/ldd../../lib/libc.so07070100EA4C3B0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/cmp../../bin/busybox07070100EA4C680000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/seq../../bin/busybox07070100EA525E0000A1FF00000000000000000000000169F91E1500000010000000080000000100000000000000000000001100000000usr/bin/dbclient../sbin/dropbear07070100EA4C570000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000E00000000usr/bin/flock../../bin/busybox07070100EA4C760000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000B00000000usr/bin/wc../../bin/busybox07070100EA4C370000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000B00000000usr/bin/[[../../bin/busybox07070100EA4C3C0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001000000000usr/bin/crontab../../bin/busybox07070100EA525F0000A1FF00000000000000000000000169F91E1500000010000000080000000100000000000000000000001400000000usr/bin/dropbearkey../sbin/dropbear07070100EA4C99000081ED00000000000000000000000169F91E1500010390000000080000000100000000000000000000001300000000usr/bin/jsonfilterELF @@8 @@ @ @8 8 8pX X X  V@V@( ( (h  PPdtQdtR( ( (/lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( ( ( ( ( ( (7E    G 0 8 P `   p p5  ppp p pIp$poo oo CI>54-&. #'?B " 6: )+$;%GD@* 902!(<,7/1E38=HACF  5t\   V @M  (40  3    |}  5  G  &Dr  5H,a  '`i  <$8dB G" G G( G G G Gp G` GP/ G@i G0 G  G G0 F@X F FG F@ F F FN F FpU F` FP\ F@) F0 F b Fi Fo E E E Ew E" E E E Ep E` # EP E@x" E0 E X Eo E Dx D} D D D__RLD_MAP_init__calloc_a_finifputsstrlen__errno_locationstderrstrcmpfclosememsetfopenstrdupfreadstrncmpfprintfcalloc__stack_chk_failmallocmemcpy__stack_chk_guardsnprintfstrcpyjson_object_get_objectjson_object_to_json_stringjson_object_get_int64json_object_array_get_idxjson_object_array_lengthjson_tokener_parse_exjson_tokener_newjson_object_get_intjson_tokener_freejson_object_new_arrayjson_object_object_get_exjson_object_get_booleanjson_object_get_doublejson_object_get_typejson_object_get_stringjson_object_array_addjson_object_putjson_tokener_error_descjson_tokener_get_errorstrerror__register_frame_info__deregister_frame_infoputcharisxdigitstrtolstdinregcompgetoptregexecisalnumfputcexitatoi__libc_start_mainregfreeoptarglibubox.so.20260213libjson-c.so.5libgcc_s.so.1libc.sojp_parsetokennamesjp_freejp_matchParseAllocParseParseFreejp_get_tokenjp_alloc_opGLIBC_2.0JSONC_0.147 ii(g߼߿g g(<-gl߂00%8  B%߂%BHdB:8/dB:8@/$8ܩ߄@ߙ` @% 8% 0% (% dH`^ `(Ca`"$C$?CV$FC_߂ߙxp(%  %$C(Cuߙ@xg`(%g9$  %@~@%߂(߅@ߙDdN  $~,d`|c-c|-`$x ߄@ߙ` @% 8% 0% (%dH` %Hߙ`  %ߕ߅@ߙޤ dM@@%ߙ߂(ޱ PߙP D߅@ߙ 0%@8%dM % $} Bb8ߙ ߂SB@ߙxCC ߂ߙ Dh8-߄$܄d@-b&߂(ߙ` Dߙx<4Bh߂@ߒ@dBNp߂@HdBQ@%fRH@%%xs`%߂@P߂@%dB#LpPW*`@ߙ   %|B-cX8ߙHb-B@ % `@@%߂(߄@ߙE dN@P.%dB%PB@i߂(߄@Sߙ`(% dNP$CT(C`)$C-$CK`(%߂P$x߂@%dBHXX߂@dBHH00B@ xX0ߙC( x` % F%x&dBx$ ߙ`(% $ ߅@$C`(%߄@dN߄@`(%dN`ߙ ߅@`ߙdN` % %߄@ߙ`(% dN*@`(%߄@ߙ dO0ߙX  %0߄@dNx߄@`(%dNߙ$- &gߙ``8%dF"(% $ 0D%V Xx$tbNx߅8ߙ $8d gxS%ߙ`߄@(% dO߃@dcH dBX߃@xhdcO`($xdcc @`ߙ` X`@x>߄@ߙx $ dDBdVdbߙ  %ߙ Dg|BdB`C-Eߙ` (xBdBx`$B`%Sޯߙ @ %߄@ߙ`(%dO@% xhX߂@fdBQfbX߄@ߙ` dO @ߙ $B,C`4|Bb-B\-@ߙ g߃@Bdc$@"C(C` xpB@ % ` `(ߙ `@%g߂@(dBO((`b*@xX$BfXp @ %`ߙ` `$B`xpg @ %ߙ ߄@ߙ`@(% dO(Xxpg @ %ߙ8 ߄@ߙ`@(% dO0xpg @ %ߙ ߄@ߙ`@(% dO8xpg @ %ߙh ߙ@g9$ @ %xdVhxfb3x@1ߙ ,C`@ ߙxf$B$Cߙh ߙ @ %$%߾0߼(߷ ߶ߵߴ߲߳߰ %߱g@%/ %(-<-$$ g<-g`ߙ߈ ߇(0%߄0H% d߿߼gg<-g_ߐ8@߂@ߙ߄8 d($߿߼߰g g<-g_d߂(@߅8߄8ߙ(d d(߿߼gg@<-80( Hg_%%%%%%$ߙ0`(% @ %ߙ0@ % @%@  ߙ (%  %B b-/V߿H߼@߶8ߵ0ߴ(߳ ߲߰ %߱gPg<-g^4ߙ%%$ $@dDQPCd߿߼߱߰g g<-g]@%$BF -$" $'$ ߙx ߄@dHߙ` ߿$B߼߰g ߄@dH߄@dH g <-g] ߙxߑ@%$'($' f1H( ߙx $'߿(߼ ߲߱߰g0ߙ`  %f fgh<-g\l`ߗ0ߙHPH@8(xpX0%%%% @%$@ `ߙX @@%ߙh @ %߂@dBH0%ߣbA߿xߙ %ߙgߖ@gf"$ߙߤ8%$ $@@8%ߨߦ (%% @ %@%@`ߙh   %ߙ@0%g@8% (%g9" @ %@%ߙh @ %1 $ߙH$ ^ߙh߾p߼h߷`߶XߵPߴH߳@߲8߱0%߰(gg@<-80( HgZ%%%%PX`hߙ %gdFߙ8% $0@ @%߂(߄@ߙE dN@ߙ $(%0%T S(ߙpߤ  (% gPC`dD߿HB߼@ߴ8P߳0߲(߱ %߰gp@%@(%B@g<-%܄gY< ߙ  %߿߼߱߰g  ܑ %g@<-gXߙH0 8( %ߙ$ $ @ ߙh%߿H߼@ߴ8߳0߲(߱ %߰gP߄ @%@@%g  0%ߙp8%0%(% @ % ߙxߙ`(%  %@0% Aߙx߅ @ %߿Hߙp8% @ % ##C!c-ܮ$,C` ,C@i܂dCF$B$`4(B@Z$܃dbG%b0?$B܂dC$0%C+`<(B@C$܃dbG%b܇$Bd$|)C%0?$B܂dG4cC+@(B@#܂dC$C܇$Bd$b%܇$cd|)b%0?$c܃0%dgf%g0<-gUߙ( %%g$ 8 %ߣp ""$߿8߼0߲(߱ ߰g@B(p/g<-gUXߗ0ߙpg%%%(%$` %  %f"`%$_ߙP  %@ߢ߅@ߙ@dOx ` %@ ߅@ߙ@dO ` %@ߙ8Bt,BB($B/ ߢff/P!$ߤ ߿ߙ fϢ ` %B ߾߼߷߶ߵߴ߲߳߱߰gg<-gSߗ0ߙp( gH d%(%$@ % ߢ%@$<߂@%dBR(g<߂@dB)p@;$`$\$uCZ$xߙ  %@ߙ ` %@ߙ @ %@ߙ  %@*"a@%*"A&1*ba@'&s*Ba@)3!&R*a@+2!&ߥ߹60! g@@*ff/!$ߤ߿(ߙ @&1&1*bA@&s&s*BA@&R&R*A@&&%C+$FЂߙ  %@>ߙ @ %@9*"a@*"A&1*Ba@&Rߥ߹20!g@ @f@&1&1*BA@&R&R0,c`.<$0,c` ߙ@$cD0!D!0d,g<C0!C!(B@g@/!$g9)pg9)p g@@fg | -s "json..."] {-t | -e } -q Quiet, no errors are printed -h, --help Print this help -a Implicitly treat input as array; useful for JSON logs -i path Specify a JSON file to parse -s "json" Specify a JSON string to parse -l limit Specify max number of results to show -F separator Specify a field separator when using export -t Print the type of values matched by pattern -e Print the values matched by pattern -e VAR= Serialize matched value for shell "eval" == Patterns == Patterns are JsonPath: http://goessner.net/articles/JsonPath/ This tool implements $, @, [], * and the union operator ',' plus the usual expressions and literals. It does not support the recursive child search operator '..' or the '?()' or '()' filter expressions as those would require a complete JavaScript engine to support them. == Examples == Display the first IPv4 address on lan: # ifstatus lan | %s -e '@["ipv4-address"][0].address' Extract the release string from the board information: # ubus call system board | %s -e '@.release.description' Find all interfaces which are up: # ubus call network.interface dump | \ %s -e '@.interface[@.up=true].interface' Export br-lan traffic counters for shell eval: # devstatus br-lan | %s -e 'RX=@.statistics.rx_bytes' \ -e 'TX=@.statistics.tx_bytes' rFailed to open %s: %s ahi:s:e:t:F:l:qFailed to parse JSON data: %s Out of memory Syntax error: Unexpected character String or label literal too long Invalid escape sequence Unterminated string In expression %s Near here ----^ export %s=%s; %d%ld%fnullbooleandoubleintobjectarraystringtruefalseEnd of file'&&''||'',''=''!=''>''>=''<''<=''~''!'Label'$''@''.''*''['']'BoolNumberString/.../'('')' <=>=!=&&||.[](),$@<>=~!*/'"_azAZ-09xpL0,l4@LXdp|4`h Dh`  !""#$$%%%%%%%%&&&&&&&&]]]]]]]]]]]]]]>=<;]T]]JGD]]]:FSRQPON\[ZLIYXWVUMKHEC@BA?942.-,%)'8850111137LJ   & !"#$%& !"#$%&%&&!"#$%&#$%&  &&&&''&'& 8$)-,+*$.(' $2$$1('$/%$('0'^5$433$$$#$&$7"! _6__44pt|T ! !P H@ PX P`  Ph Pp Px P P P P P P P P  P P P P P  P  P P Q 2d Q -@ Q -@  Q +  Q  +  Q( + Q0 +4 Q8 +4 O@ OH OP OX O` Oh Op O O O O O O O O O O O O O O P P P P P  P( P0 P8 P@ PH PP G     (4 @ ' <$ 5H 5 5t 3 & G G G G G G Gp G` GP G@ G0 G  G G F F F F F F F F Fp F` FP F@ F0 F  F F E E E E E E E E Ep E` EP E@ E0 E  E E D D D D D07070100EA4C380000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/awk../../bin/busybox07070100EA4C3E0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001000000000usr/bin/dirname../../bin/busybox07070100EA4C3D0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/cut../../bin/busybox07070100EA4C5A0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001000000000usr/bin/hexdump../../bin/busybox07070100EA4C740000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/uniq../../bin/busybox07070100EA4C6C0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001000000000usr/bin/strings../../bin/busybox07070100EA4C660000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000E00000000usr/bin/reset../../bin/busybox07070100EA4C6B0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/sort../../bin/busybox07070100EA4CA60000A1FF00000000000000000000000169F91E1500000005000000080000000100000000000000000000000C00000000usr/bin/uccucode07070100EA4C790000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/yes../../bin/busybox07070100EA5D260000A1FF00000000000000000000000169F91E1500000012000000080000000100000000000000000000000D00000000usr/bin/wget/bin/uclient-fetch07070100EA4C620000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001100000000usr/bin/nslookup../../bin/busybox07070100EA4C590000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/head../../bin/busybox07070100EA4C600000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000F00000000usr/bin/mkfifo../../bin/busybox07070100EA4C780000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000E00000000usr/bin/xargs../../bin/busybox07070100EA4C5C0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001000000000usr/bin/killall../../bin/busybox07070100EA4C6E0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000001000000000usr/bin/taskset../../bin/busybox07070100EA4C630000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000E00000000usr/bin/pgrep../../bin/busybox07070100EA4D29000081ED00000000000000000000000169F91E1500010168000000080000000100000000000000000000000E00000000usr/bin/usignELF @@8 @@ @ @8 8 8pX X X  NN  ` ` `@@dtQdtR  /lib/ld-musl-mips64-sf.so.1@( ( (4 ( ( ( 7KY  `  C`      k p p5 ppp p p'p#poo @oo %' !   " %#$&   ` R    C` C@ C0 C  C! CE B B B B/ B( B B B Bp B` BP B@ B0-"i B  B B A  Az A A"W A A__RLD_MAP_init_fini__register_frame_info__deregister_frame_info__libc_start_main__stack_chk_guard__stack_chk_failmemcpymemsetstdinfopenstdoutstderrfprintfexitfwritefputsfclosefreadb64_encodefgetsstrchrb64_decodefeofsnprintffstatmmapmunmapperrorgetoptoptargstrlenstrcmpsprintflibubox.so.20260213libgcc_s.so.1libc.soGLIBC_2.0K iiag߼߿g gH<-gs8ߕP0ޢߑ@ߔ@P%@( X%%%f1H$fHߙ 0%(% @ %S $B,C3`|B-B\-@ߑ8"@e߂8$BC,C`t$C$C~߂8߂߅@ߙD dC$ޣX%߾P߼H߶@ߵ8ߴ0߳(߲ ߱߰g`߂C߂8C߂C߂8C߂8$C߂C߂8C߂V߂C߂8C߂8C`$C߂8C`$C߂C߂8C߂8C`v$C߂8C`p$Cߙ  %߅@dB:8ߙdH  % /@Uߙ߅@0%dH`  %=$C߂8B@߂8B@ߙ@g91 B@߂"@~ߙ@g9:x  %߂8B@+߂8sߙ@g96  %x߃8߂8dB#+ ++D!C!$Cߙ@߂߄@Qߙ 8%$($ dHh߅@ߙdC  %Z$g9@x UB@߂J߅@߂߄@ߙG$4$ dH(F$ߙ@g90 ߙ %`/ %(-<-$$ g<-gmߙ߈ ߇(0%߄0H% d߿߼gg<-glߐ8@߂@ߙ߄8 d$߿߼߰g g<-glT߂H@߅8߄8ߙHd d߿߼gg0<-8glߊP|byE0c#(0B(%d %fdcF-bg:gg'`0%8%$dH-d:dg $0!0'3ddc dߣ(Bb߿8߼0g@ߙ d %df&b%0Bd:b%|b8C%0C|B0CC'0B%%$ 8-@-:8!!0B8-dci$pC(%0c0Bd db!0B:%$4 $ -c@-j!h#g!8-dBI|g$b#g!|bpE0e%d ddcD-b:%0%d@%$4 gdc'8#!|Bje$C#|bpE0cd dC-:g$ $ 8%dd$ $$ & H|@-%CpxdB8YemH#@/})dY@-9H-CdBpxepj"8-Geke|$pC0d dC-:ggh<-gh8߃@pߞP@8d gdyXP%%@ %0%H%`(%x`0f (ߑ@g f10%(% %g  %0%@(% % `(%ߓ@0%fsH`% @ %0%(% % g0%@(% %  %f@f@ %  %߆@(%@ % % dNXf`f` % % gx0%(% %`% g߬߹0%(%  %@0%gX(% @ %(%g8`%  %0%(%  %@0%(% %  %0%(% % f (% % f@0%@(% % f`ߣb ߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(gߙ g`<-ge@ߒ@XߕPHfRgޢ0%0@%%` %hP8%( $`(%@%  %0%(%` %@% &10%`(%@%  % 0%(%@% ` %`0%`(%@%  %0%(%@% ` %`0%`(%@%  %0%(%@% ` %0%`(%@%  %0%(%@% ` %0%`(%@%  %ߣ(ޢb ߿h߼`ߵXߴP߳H߲@߱8߰0gpߙ hlg<-gd`ߙ8$%gP(  ߓ@%0.2(-/ 0(&8 %%8fsJ8%%H%%%@%X%P% (0@H(%% % %`%H%`X%@`%%J1D% -(0c܆PdgPe--% d)C))r~@&1o@& `N&::&(z`-ݞPπ-(&1(&$$w~- h'H5$88&h$+g:+(-p&!`&(-8x$+18$& & -0&-8&b-0-D$Pv`-%f-%1EDfs߲߮ߨ߭ ߯(߰0ߥ8ߦ@߿(߱H԰-K- -(-p-@-h-x-20(68߾ ߼߷߶ߵߴ߲߳߰.(-/ %0߱g0$g0<-gaߋP߃@bdcLg8(dj 8%0%H%hdcH#I#0B|H|Idjd1d d dߣ(bb߿8߼0g@ߙ g<-gaߙ%$$(%dC@@ @߿߼gg<-+@ g`d 3ߙ8 $ ߿߼g+@d 3ߙ8g`<-g`P߂P߆@xph`XHPCg8 dPߓ@% %|B8gfs W0%(% %`%0B W߆@gxdMx(% %`% ߐ@ߙ@gXfMX(% %g9H gߙ@(% %g9 g߂@fMXdY(% % (0% %`% (%% %%0%:(@!dDd$pDf 0ddcD-be:0%(%@ %`% g@(% %`% $0%(%@ %`% &10%@(%`%  % 0%(%@ %`% g@0%@(%`%  %0%(%`% @ %@0%@(%`%  %0%(%`%  %߂@ %dY ߹(0% (%  %0%@(%`%  % 0%(%`%  %ߙ@(%g9h  %Xߣ%8&0(% %FdB ddߑ@0%(% %`% f1 %  % %  %ߙ@(%g9  %߹(% % @%߲߹@(% g ߹ g`@0%(%`% g@ߢ ߣ8Bb߿߾߼߷߶xߵpߴh߳`߲X߰H %߱Pgߙ g@<-g\hߙ@ߕPߖ@gHޢx%%d`@ %g9g(fh g@0% (%%  %f% ߑ@` %% f1 %  % % ` %(%ߔ@fP% @ % % @ %`(% %% H % % ߤh2RޣR% ߿߼߶ߵߴ߲߳߱߰xgߙ g0<-g[߂PG߂@ghdBM+xPXh`W+gP +W+`ߙ8߃@dcNX3ߙ8$@(% % ߕ@g@gHg g߂@gdBHpg(߂@gdB0gH߂@$dBhxg8߂@fdBghgH`g(gg%g(ߣXb-ߤ@V0%(%%3 VߤH 0% (%% 2ߦ ߤ% (%ߢ߹p@0%@(% @ %߭ 0% % (%ߤ(0%(%% ߬(߸@߹00%(%  %߯H(%0%  %߮0%(%  %߭ߦ(% % 0߹x(%  %߹00%(%  %0%(% %% (ߥ0%%  %ߥ(% ߤ8ߦߥ% ߤ ߦP߹ % (% %%EdB CQdߤh %EdB CTdߢ ߤ`EdB CSdߢ8ߤEdB CBd'$tߣXߣw+@+db3ߣ+@ߙ8p3ߙ8ߤ$ (%ߢߣhBb ߿߾߼߷߶ߵߴ߲߳߱߰xgߙ g@<-gV0%߅@ߒPߙ@gBdL%g9$ % ߙ@(%g9#  %ߣBb߿߼߲߱߰gߙ g@<-0B( H80gVX%%@%$#dB@~ -++@IÀ +@-3ߙ80% `(%"-0C`H"/@%.@fߖ@fRr-`%f(% %% f"dB"$fs$2u-f$@+@-d+@t-3ߙ80% `(%"T-"߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gPb3ߙ8ߙ8-3-0% `(%"-0C`"ߖ@f%@f %% /@%g%܄ 0<-$-$d$(gTp%C@F f3@ߙdA0/(%$ - .Rq@0ߒ@ߒ@`(%fR@%  %ߙ$x(% ` %" %`(%@% " %f @܂fR:L:F:8>2>,>> d ߿(߼ ߲߳߱߰g0fRg<-gS0߂@ߒPdBMF+%%%`Q+g@C+nQ+`ߙ8߃@dcM#3ߙ8$@@(%  %ߙ@$ `(% %g9) ߙ@ %g9+ (%0cߤ0BC4B@ ߿߼߲߳߱߰gߙ g0<-gR ߙ%%(%$ 8( % fb-p(-@%DdBddcfP @% %bdcD%0Bb":Cߔ@CC%B&1f8$b-E2"E(0@% %bdc@D%0Bb":B@ %E%%B &15߿8߼0ߵ(ߴ ߲߳߱߰g@g<-gPߙ@d@g9+% (%ߙ@߿߼(% %߰߱$@g9- g g<-$BgPX%@ %@߂ B ߅@߅@dCߙ  %@ ߿߼߱߰g dC߂hB߂8B@߂߃8$cb ߂ D߇@dC߅@ߙ0% dCߙ $߇@dCg<-gOP߂߅@ߙ0%D dCߙ $g <-gOߙ@g9/%(%(% %߄@ߙdF(@8%$$ @%߂8Dߙh (%߅@ߙ 0% % dFPߙ  %߿(߼ ߲߳߱߰g0ߙ@` %g9 ߅@ߙ@8%@0%dF@  %߅@g@<-gNߒPߙB$d(%g<xph g ߙ$((%` %<Ed$BBK 8߅@߄@ߙdCdFX$Ed @ߙgX@8%$$ % @%$C@%߂߄@ߙG$"$ dFߙ  %$ߤhC߿߼߷߶ߵߴ߲߳߱x߰pgߙg`8%$$   %Q@%ߙ8%$$ g@T߂ߙ % gߙ@`(% %g9,0B4B@0c `ߙ@g(%g9)  %߅@dM+@+g+N+@ߙ8߂@dBM3ߙ8$@ % gߙ@$@(% %g9) `ߙ@ (%g9+  %gPQ+`53"+ ߙ(gC3ߙ(gߢ$ 0%$hg8 P@߂8ߗ@߆@Df0 8%dF% (%u+@+g3+@ߙ8v3ߙ8` %$ (%g+@+g23+@ߙ83ߙ8$  (%ߙ($ 0%$* g@i߂8߆@D 8%dF% `(%a%߂߄@ߙG$$ dFhW$ߙ g <-gJhߙ@g9/%$(% %@%ߙ@ 0%$  %@!ߙp$   %@ߙ@ߙ 8%$$  %ߙ- % @ߙ@0%`(%  %߿(B&߼ ߲߳߱߰,Bg0߂߄@ߙGdF$ $ߙ $g<-gIPߙ@ߓP$bg9/ @ߒ@@%߂8fR5D8%$Jg@% %@$Edbߔ8ބߙ@ 8%$*@% g`@`$Edb$g߂߄@Gߙ$$dG8߂߄@Gߙ$$dG ߙ  %$ߤc߿߼߶ߵߴ߲߳߱߰g߅@dME+@+g +N+@ߙ8߂@dBMB3ߙ8ߔ@$@@ %g f)$ (%@ %%gj $  (%$$8%  % (%0% @ %ߙ   %@ߙߙ % g@ߙ@(%@ %g9/@ gߙ@g@ %g9) g(%ߖ@ %f% g`ߙ@0% (% %g9$ @%(%%  %ߙ@0% (% %g9 $ߙ@ (%g  %g9# 2ߙ@ (%g9 @ %$߂8B@'߄@%߂߄@ߙG$$ dF}$߂8gg9G ߆@ߙ` %@@%dG( $O %@k߂߄@ߙG$$ dGXc$߂ߙG$$ dGpZ%ߙ g@<-gEgߞP@%ߙh$H(%%` %xpX g0@8% ߂8ߙ@D$hg`g95$Ed @'`$Edb$d@;ߙx %0% (%H@A@ %ߙ g`@9ߙߥߨHH%$$ %$C/PߢߣgE+@Xg3ߢ+@gߢQ3ߙ8ߤ$ g߂@ (%dR,@% % g߂@ߤ dV)% (%@%ߒ@ (%` % fRM+@P+gB+NP+@ߙ8߂@dBM3ߙ8 %$@@(% gp߂@ %dT)$ g% PߦXߥP %% g߂@ %dW/@ (%% g (%%  %+@P+gB+NP+@ߙ8߂@dBM3ߙ8$@@(% % $(%$  %% ߥ $  %% gPߦXߥP%  %g@(%% % (ߙ@$ `(%g0g9- g߂@PdB8++8+0+@]-R02R%% %bdc@D%0Bb#":߹  %ߢ@ߢ0ߢ8@ߢ0@ߙ8ߢ@@(% %$  %ߤ((%%bdcF!E!0Bb*:cd߹ % 2R%DdB C"f&$ % %efE!D!0B":4dc߹  %g:+@+gZ3+@ߙ8+.ߙ8$  (%ߥXߙX ߤPߙ` ߤH߰ ߙ($0%$J g@߂8߆@ߙ@Dߥ8%g90 dG %߂߄@ߙG$$ dGx$ߤX ߿߾߼߷߶ߵߴ߲߳x߱p߰hg߂߄@ߙG$1$ dG$ߙ` ߤH߄@ߙ0 dG$ߙ 4g<-g?߃8ߐPd ߙ@8%$hg95 g@߂8g߂8D ߙ@8%$*g95 g@߂8 g߂8Dߙ@8%$Jg95 g0@g2ߙ@߂hg9G ߅@ߙ@0%dH %%ߤ߿߼߰g$ߙ ߙx% d%ߙx% d$ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dߙx% dg߼߿g rwreadingwritingCannot open file '%s' for %s Usage: %s Commands: -V: verify (needs at least -m and -p|-P) -S: sign (needs at least -m and -s) -F: print key fingerprint of public/secret key or signature -G: generate a new keypair (needs at least -p and -s) Options: -c : add comment to keys -m : message file -p : public key file (verify/fingerprint only) -P : public key directory (verify only) -q: quiet (do not print verification result, use return code only) -s : secret key file (sign/fingerprint only) -x : signature file (defaults to .sig) untrusted comment: %s %016lx %s /dev/urandomCan't open /dev/urandom Can't read data from /dev/urandom private keypublic keyPremature end of file Cannot open message file Failed to decode signature %s/%016lxFailed to decode public key verification failed OK Failed to decode secret key Password protected secret keys are not supported Cannot open message filesigned by key%016lx FGSVc:m:P:p:qs:x:-Need signature file when reading message from stdin %s.sigNeed one secret/public key or signature 0hPB/("q7D#e͵M;/ۥۼ9V[H8Y?O^mB[Epo$1N䲌U }r]t{oޱ;%5ti&iJG8O%Ƌյ$ we-,oY+uJtn\ܽAvڃS>QRf߫1m-2'Ș!?YǾ =էG %cQo))g np' F/.!8\&&M,mZ*S8 e sTcvj &aц!}}Onxgro c}ŢȘ? q 5G(w#}2ʫ{@$< ɾCgĜ LLԾ>BY)e~*_o:lDJGX\cX֜%`-Vɲ%`,i\1Sn6i!XfffffffffffffffffffffffffffffffݷmRQw }dNfev_gxYMuAAM pywy@njso+lRj ggʧ;l٫Ak[~!yY&V0V$  P C` `    C@ C0 C  C C B B B B B B B B Bp B` BP B@ B0 B  B B A A A A A A07070100EA4A81000081ED00000000000000000000000169F91E1500041A98000000080000000100000000000000000000000C00000000usr/bin/apkELF 2@@8 @@ @ @8 8 8pX X X  XXp p p)(Nx x x``dtQdtRp p p/lib/ld-musl-mips64-sf.so.1@( 0( 0(4 0( 0( 0(? 0( 0( 0( 0(| 0(< 0( 0( 0,@JX  #  | x    s p 0p5 @ppp p pp$poo #oo "4j'7`G w-@a(At= oMEVs5 c;0+ h<%29U g$&Fq*)OlH.4>b3# CSP/1zY"!eWRZyKDp\}T,BLI?J68:Nd~]rQXvjk[ifu^_|mnx{  $0 $   |  # 0 |h |pS |` |P |@ |05 |  |= |C { { { {Y { { {" {m {p= {`X {P {@+ {0 {  {! { z z z z z z z z zp z` zP7 z@ z0 z  z z y y7 y  y y y yx yP yp< y`"I yP y@ y0O y 2 y y x x x> xo x x x# x9 xpK x` xP x@ x01 x  x xe w wW wV w wg wL w w wp w` wPx w@` w0 w  w w vz v vJ vU v v v"i v vp v` vP v@z v0 v  vJ v u u u uf u u- u$ u up u`s uPa u@+ u0w u A u u( t t t t tR t t t tp} t` tP] t@ t06 t  ts t s s s s s ss s sW sp s` sP s@ s0D s - s  s< rH r  r r r r__RLD_MAP_fini__libc_start_mainstrchrnulstrncmpstrtolmemcmpstrlenstrnlenstrcmpgetenvstrchrfnmatchunlinkat__errno_locationputchargetuidopenatmemset__stack_chk_guarduncompress__stack_chk_failmemmemmemcpy__assert_failreallocqsort_rvsnprintfqsortstrptimestrtoulmktimeinflateInit2_inflateinflateEndstdoutfputcfwritereadlinkatstrcasecmpmallocstrdupmemrchrcallocisalnumatoiatexitpsa_crypto_initstderrisattyaccessumasksetvbufsignalmkdiratfputsgmtime_rstrftimestrstrfclosefdopen__environgetpidfflushstdinfgetcsyncreadputenvexecvpmbedtls_md_info_from_typegetrandommbedtls_psa_crypto_freestrrchrbsearchfstatatfchownatfchmodatfstatmunmapfutimensmbedtls_mdmbedtls_md_initmbedtls_md_setupmbedtls_md_startsmbedtls_md_freembedtls_md_updatembedtls_md_finishmbedtls_pk_write_pubkeymbedtls_pk_freembedtls_pk_verifystrlcpymemchrstrerror_exitforkfchdirunsharegetgidmountchrootmkdirexecvelseekfdopendirreaddirclosedirrenameatmemmoveutimensatsymlinkatmknodatfsetxattrflistxattrfgetxattrfcntlfilenoioctlvfprintfmmapdeflateInit2_strcpymemfd_createfaccessatwaitpidpipe2polldeflatedeflateEndfgetpwentendpwentfgetgrentendgrentstrpbrkmbedtls_pk_initmbedtls_platform_zeroizembedtls_pk_parse_public_keymbedtls_pk_parse_keygmtimeposix_spawn_file_actions_initposix_spawn_file_actions_adddup2posix_spawnpposix_spawn_file_actions_destroyreallocarrayrealpathfstatfs_Exitflocksigactionalarmsetmntentgetmntentendmntent__register_frame_info__deregister_frame_infolibmbedcrypto.so.16libz.so.1libgcc_s.so.1libc.soGLIBC_2.0XXXXXXXXJ ii`g߼߿g <(-dd0ܢ8dBxCDdg <-gd߂8ߙXD=%߄ߕ8ߑ%= ߙߐX ߒ`ߙ($(% % fR;X< %@% ߞߙH(%f (08@ Hf((0f88@߂fXB%P߂($V$8$8@0XP @% f`ߙH0B4BP߂h$dB$߂hfdB($߂hdB $ ߂hdB@ ߙ $߄hߙ0BC%(%dh ,B0cy4BC%Dߙ$ %0B?C% D߅8ߙ`$$ %d< f8߅`ߙpd5 $ߙp$ $ ߆h߄ߙ߂$0dB~HF-BG-@<4B$p0B4B0pq$C%q%$ xp0B4B pp0B`dBM`dBJ $xp0B4B$<@-,@eM@0dB~pF-BH-@$C%%`dBy(`dB=$(`dBx$%%D g܃܂g܂܆F0c`@ Bܣb- $B $B:܂0c~C܂,B܂,B܂~0B܂@BB >0B,B%g<-gKߙ`g9< @߿܂BBh8B.+߼gܢhg <-G0H,I(J Cd8(gKdEX%߆hC@CߙpBdƠp(% ߿(߼ %g0c%kg0<-gKߒhܑh(ߔp 8d8f0fR#xC-C/dB"-+@ ߿8߼0ߴ(߳ ߲߱߰g@R0B@ @0% |`\(%% ` %fg@<-( H80gJL%%$Mߙx$߿H߼@߳8߱(߰ @%߲0gPߙP$: %$@%Q/C'$߅hߙ$d  %@pC`&C`ߓxc-q  ߙh0%g fDߣc`cC*`"* pq$C߅hߙ$d  %@$٢p%p`$q%$ (% $,C`ߙ  @ %߆h߅hߙp@@% 8%dơd@ f8߿H@@f8PCbg܂Pܕh<-*0(xp`XH@8gHh%%@߅hߙ8ߤ$ dH,Vf%"@%5%%%",C` $0@9ߙߙ % 'dB"-D.f#,D$D $D&$`%8B,BT%$0f# @ $$$% ߢ$(2$߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(g$ߤ0%  (%@1ߙߥ  %@%u+@ߙ $$B ߢ7717߅hߙXdP @ %@*߅hߙXdX @ %@ ߢ@$߅hߙXd` @ %@$$@%(u2$%ߢߙf (% dD@ߙf  %dS%$ %%$$*g <-gEtߙ8 %( (%߿(߼ g0@$$g<-gEߙ% ߄ߙp &g<-(gD@%K$,@A߂@0<0>0dB~F-B\-@<4B;$C%߄hߙdh %@@ %߄hߙ d@ @ %߅hߙX d@%0B"(4B"(%߿߼߱߰g 890BG%4B@4B 4B4B4B$g<- gC߅ߙ% % %",B@߿$$߿߼߱%߰g gܑ"$<-0B@gC ߙ %@<d$` ߿߆h߅hߙpdơd@ f$8$߿߼߱߰g %g<-gBx%܄8%߆h߅hߙpdƢxd@ d8 $B ߿߼߰%g @ %0%ߙ ߿0%g<-gA%܄8%߆h߅hߙpdƢxd@ d8$B߿߼߰%g 0B @ %$ ߙ 0%߿$g<܂@-gA@FG߂܅B(B@ dh߈he߄hߙ d߿߼g߈heHg܂00 8(ܐ8R<-zdQ8g@%22-2+@ ߙ߿8߼0ߴ(߳ ߲߱%߰g@4$/  %@ ߙ$`(%  %@0~f1g@<-g@ ߅hߙXd% % H80(%% %@>߿H`F 0B@+<C$@$8(B@߆hߙp 8%dƢ(% f8B 0B@%߿Hߙ80% (% @ %A߿Hߙ C$bߙ8$ (% @ %߿Hb@cC$@b@߿HC$@߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gPߖf%xC-C/dB-b+@$(%% ` %@ߙX(%  %@߿Hfsg<-g>$%@%ߙ 4B "@߄hGߙ،Fdh d߆`%߿ߙ 8%߼߱ %߰d9 g g0<-g=(ߔܑ% (%%8  %ߙ0%$@  %A!߿8B(dSBx"-q-q+@% ߆`߿8ߴ(߳ ߱ߙ8%߼0߰@ %߲4dJ g@e fsq+߼0ߴ(߳ ߲߱߰g@g<-g<%܄8%߆h߅hߙpdƢd@ d8$B߿߼߱߰%g ߙ % %@ @ %ߙ`8%0%g9J (%߿ߙ  (%g<-g;߂P* %܅߄hߙdh d$ߙx"@߄hߙFE d$ ߙx"p߄hߙFE dߙx $ ߿߼߱߰g g<-g:%%߄hܥߙdh d"@ߙx@߄hߙFE d"(B@߄hpߙFE dߙx $ ߿߼߱߰g gܢX<-%Eg:@ߙ%߄hF( d"@ ߙx@߄hߙFE dߙx $ ߿߼߱߰g ߄hdh d"`8%g<-g9%(%߆Dhߙ d߿߼%g%g %@<rh-H80(g90%(%@$@E߆`Q$ߖf1fUf"U" @߿H 0B @<߅`ߙ0%dW fDB@4߆h߅hߙpdƣd@ fd8$߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gP"T$@ "0B@@ 0B@@ "D @0%% 1f10%ߙ8%dE @ % F߿H߶8ߵ0ߴ(߳ ߱߰ߙ@ %߼@߲(% gPg$' ܳh(<܂-g7d%%@%B@ ߿(߼ ߳߰@(% %߲߱ g0@$8b߂hdB0߆`ߙ8%dY@(% ` %"8@ ߉h߈h߆hߙp8#e)8eHdƣX(% f$8߆`ߙ8%@(%` % dX ߿(߼ ߲߳߱߰%g0g0ܒPB8<-(Bg6$%%%@fT8߆hܧߙpdƣ(%  %'$Pߙ@%H%`0%(% @$C8`ߙ g@ % ߆h߅hߙp@@%8%dƣhd  %%߿߼ߴ߲߳߱߰gC߿Ȏ0$@0cd߼gX<-g5ߙ88( h`PH@0`%%% d8@B4BB$0B@B4BBEߙ߅hdpE<  $A!ߙ ߙDP # %߆h߅hߙp@@%8%dƣd@  %߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߰ %߱ gpߙ(f^$P(% % ߖh߂83dB8B߂(P߂0f2ߗpS-f֣S+@$0%U8%(%%  %߹(% $߹@(%  %@@%ߙ  %߆h߅h@@%8%dƣd@%  %ߙ  ߿hfR%g<-g2ߑ߆8"ߙg$d(% %$ ߦߙ$(%,L ߣߤb&#߿ߙP ߼߱߰+gg <%ܥ(-(g2(%%3߆hߙ%ܒ$dƣ ` %@S/A߿(B8@߆h('ߙpdƣ(% fD8$B߿(߼ ߲߳߱߰%g0܂@ܣ`C*@ܣߙ8C-fh ߿(:@3gД8 <-(g1@%܂ܱG(ߙ@(%0% % 2<0B@߿(B8(B@߆hߙpf>dƤ (% fD8<ߙH4B % <߿(߼ ߲߱߰%g0%<y-dc0@yP % (%]gp(x<-8ph`XPH@g0$@%܃ߔpdu8c8`%dh߆h(%dƣ%  %߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8%gSߙfshB@` %WV %:ߙX @%8$(0ߋhd@߆h@$ch#(P%-%ek %jP#܅H%`8%dƤ8(% %% %g`<-g.ߙP% %`XHxph% %@`@%B$(B@%0B?C%"-BdTB8-߂`ߢ+@ߙ`ޢ@W@FG@% (0 8~0@%$$f1d+@AD%ޗb@ߢ^$0B@@ޢ@deFG߹@% (0 8$C$Cfְ%%%ߙX @ %ߙE  %@߿߾߼߷߶xߵpߴh߳`߲X߱P߰H%g"V$@f1(0cDߙdh8(0 :$cb!cb+`߿ܮb$c%g@<-$( H80g, %%+%$$$f3$"$T$@ ߦ$ߧߙh0 ` %@ ߿H"T%"@ߙp2 fsSB%߿H߼@ߴ8߳0߲(߱ ߰gPdF$g@<-8H0(g+ %#P %P%$ߙ`ߦߧgg9\ (%@߿HQ ߙp2 $ߥf$"+@ߦ-3ߙ %߿H߼@߲8߱0߰(gP+@-3ߙߦߧD ߙx E(@$C$b$߿H܂geb-0@/<-h$( 8g)%%%%b b/܄ߙ(0%(% -- b-s+`& ` ߇h߅h߄hd烘$jdPd`ߙ @(<$  $ (<(>+` @ߙ @ ߇h߅h߄hd烘$odPdp <>8@%Q-E -+@F-+@ߙ4+@-+ߙ fRCC-Q߿8߼0ߴ(߲߱߰`%߳ g@܃g܂0(8<%D-$ g(,߇h߅h߄hߙdX$WdP dxB $BCdߙ$d $d߿8߼0߰(g@B ߇`@%d;(ߙ((<$(> d߿8 ߇@%d練B ߇@%dPg<-g&ߙ %ߙ (C`$d$h<>-h$$F*`d߿߼߰g <y-dc&dy8%0% $,`<8-d&D0% $%g08@HPX <%܄-(g&ߙh0%g0 @b * b/ -߿(߼ ߰g`g܃(<-g%t`pd$G܂@@`L*@X@%߉hdp-%P%e)N8+-$GM0-FRߊh0/0(%8%eJg$ eH-)h-*H-)d'8%$8I((%E(,9H'8%G$,c$=b,$go8-gx-8-g8-dcx%x%P%OP% h yh%M Yh9X%8%KGdBe$= )(%E܂L-܂H/߼(g0܂@܃`g<-g#e@D@ߙ ߿z߼0Bg%g<ܐ-g#$ܑ ߙ%@ @0B@߿&+߿߼߱߰g %g<-g"߉h߈h߅߇ߙ0%P%e)e d׌߿߼g g<-g"Pߙ(gH%%%(%$h` % UdVBߞx"-ш-+@I$%$ ,E e8f8@߆hߙpdƤ(%  %ߣ<>C-߃hhxdcPCdTxC--(߂X0߂`߂pHh%8ߢ(+@=ߥhߙ ` %ߢH @0#߿߾߼߷߶ߵߴ߲߳߱߰gT0B@CC$@ނ@(%% @ %@ ߣ$Bބd-$BfD$cސނPec0B@_CC$@Z@W߹0(% @ %@R@%8@@ ߆hKBߙpeJh%dƤ(% % ߤ<߹>D-(%` %p x߹8@ %`8%0% (%@@ %$ߥxߙdBh@&1C^ ߆h߅hߨ ߧߙp@P%H%dƥd@  %ߥx߹ ` %ߢhxߢpC-$B$BVf_]%0B@g<-gDߙH ߿߼gg`<q-g$C%ߙhXܴhxp`PH %qd8߂g8dp 8A߃hߙ@ % @%߆h߅hߙp@8%dƥ(d@ @ %ߙ ߤ8߿߾߼߷߶xߵpߴh߳`߲X߱P%߰Hgߢ8dQB ߃h"-dc(%ߣ#+`P߃p0ߢ ߙpghdF@(% @ %@߆hHGߙpdƥP(% @ %@ ߙ 0߆hߙp@8%dƥX(% @ %߂hf dB%+@%f10B@߂hf%+@&fbC$@ ߢ(ߩg WH ߢh߹dFp(% @ %&fs(%gܢh0<B-gB8ߙ 8(%% %4B @߂`dBM<@"x<dc C%ߙ"x@0%߂gf%p % @@%ߢSdQ3-3+@ %% f13+ߙ @ %߆h߅hߙp@8%dƥ(d@ f$8ߙ ߤ߿8߼0߳(߱߰@%߲ g@g<-g<ߙ%܄ ߿߂߼߰g g܂(0<-(ܳh8 g%%%d8@ܢ ܢ(0B@bCD@80c?CD$b*߅hߙXޤ d@$@%bB$@ ߙ`߿8߼0ߵ(ߴ ߲߳߱߰g9UX g@"8@߿8߆hߙpdƥ(% @ %߿8߼0ߵ(߲߳߱߰%ߴ g@߇`߂ߙ@%dV0%f%p % h@Fߙ`hߙ0߇d$ f0h0<>d-߄h@HX8P`4hߕd2-2+@ %%% f12+Pߙ  %0@0@ߙ`bB 0B@g9m0B@ ߙ`  g9m߆`߈ߙ8%d| (%ߙ`g9m fhܢhgp8xPH@8ph`X(p<0B4Bpܢx-g\%%%@dp,0C@`<x߅8ߙf6$dd0  %߇߂ߙ`(% @%d @0% % " $ ߇ߙ0d $ d" dSBb-߂hdB߂hdB ߂h(ߢb+@ߙ`b#,aPEߙߤ dh",0C`dh߄hߙ d@߄hFߙ،E dB@Bߙ(B@߄hߙd ߗh(ߞhdTB%xB-߂hdBH-f+@Kߦ@Up@ߙ߄hFE d(P߄hߙFE d@߄hߙ dP߄hߙ dhߙx $ SfsA<ydB w$ ߄hd ߗhߞhdTB%xB-߂hdBH-f+@ߦޅB&ߙ+dh0 gĥ f+(ޅB&ߙ+dh0 gĥ f+",0B@0B@@ ߅h߅hd߄hߙ dpd0B @ ߄h@GFߙ dxfsTߢ"(@ߙߙ %fs@HihGF ߤ XE+ߙ߄hF( dPߙFEߢ( dD@#߄hߙ d"((B@ߙxp߄hߙFE d؎"((B@tߙxh߄hFEߙ dj߄hdh dPߤߙ (%@ߙC@߄hEgfdh dg9m f$ ߙ   %߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8%gg <-(g %ߙ ߿(߼ %߰g0%gP<-gh`ܒxߗhߖh"-XfR8dߞ(xp%%@H8-%f֧f +@߹ߙ0 g8߿߾߼߷߶ߵߴx߲h߱`߰X`%߳pg  %@-`ߧߙ80%$ g8@%G2dh$(0ce-hi0c`ߙp@߆h܃@B@kjCBdƦ(%@ % &sfg ܂@JK0%(% @ %&sB@% %ߙ@@(%`0%g8( 0&s$b $$߿h߼`߲X߱P߰Hgpg`<-glPߑ`Xf1v\%ܤ %hH % %ߐH ߤߥ% @$ߤ% ߥ@ߦߧߥߤߙ` @%ߙX @ %߆hߙp@8%dƣ(% fD8%gX<-g\ @8ߕhߔ``dߞHP0(hH%d8-%fv\f+@%  %%`(% @ %@ B8@ߙp8%0%(%  %&sf߿h߾`߼X߷P߶Hߵ@ߴ8߲(߱ ߰`%߳0gpg`<-(HhXPg \@%`$,@%߂@0<0>0dB~F-B\-@<4BO$ %߅hߙhg@0%d  %@ B@ ߙ(ߙ @ %@ $ߙ($ (%  %ߣ` $߿h߼`߲X߱P߰Hgpc`$ 4BЬ $b$ߙ`g9v\ % (4B®4Bߙ< (% $ 4B$g0<-g  ߔނ܂%%ߙPSh%@%g0%(%@ %(8 u@ߙ`8@߆hߙp8%dƧ8(% f8bB 0B@ߙ80%(% @ %g9v\  %( )(ߧ0ߙX@(%`0%` % @B0B@@ߣނb߿8ߙP ߼0ߵ(ߴ ߲߳߱߰%g@g,`<-8(hXPH@0g H%@ %@$߆hߙpdƧH (%$,@߆h ߙ8dhdƧ(% fD(0B@ ߙ`g9v\ dhߙ@@(%`0%f B(ߔ`dSBߖ@x"-q-fv\fq+@ߙߕ`(@ %8%f} $B dRBx"-Q-Q+@߿h߼`߶XߵPߴH߳@߲8߱0߰(gpd(0B@ % dh %@(%`0%% fsBBSdT8-+@fRބ0B@@($@b+`0@8%܂B(0B@0%f} (%f=g(0<-0B8( g@%ߙܒ  %4B"("fR8Qߒ`dT8f-fR}+@ ߙ0 ` %߿8߼0ߴ(߳ ߲߱߰%g@ބ0B@@8%0%@% (%f%g%d-cf%g g0<-gߙ%܄(( %%$/g9<8 f0ߙ``0%@(% ߆C<ߙ4c8%@(% %@%dƓh C<ߙh0% @%߿8߼0߲(߰ %߱ g@gPxܴh<< -C$ph`Xg@d8߆h߅hߙpdƧd@ % $߿߾߼߷߶ߵߴx߲h߱`߰X`%߳pgނ%B8ߙ(8ܤ% %(8B@ H@Pߙ0%g9p g @%<$@0BC$C߅ߙ0%d f߿<>fRB-߂ߞhdBp߂h%dBߢB+@$/Gb d8@ߦߙpgţ  %fRߙ  %gP@%H+@+-+@+@."-+@."4@ߙ 0% (%g f"0C-D$/f1HC߹0% g b%@%(@$<y-dcyp 0%%g@<-gP߂xߖhpddBߞhh%d82-%f֧2+@.ߙ($H(%g 5߹(%$ ߙ0@(% g@%b8@ ߆hߙp8%dƣ(%  %&@%ߙ  %@@%ߙp8%gƣ(%  %&f1߿߾߼߷߶ߵ߲߳x߱p߰h%ߴg܂0Y g0<-, 8( @hg߂@0dBF-B%\-@%<0B?<%߿8߼0߲(߱ %߰g@<4B<4B<$0B?C%<߂h߃hdB$S$$߂HS` $C:,B$2`@1`6߿(4$e$߆`b A r ߆`߅hd4d %  %@$2B @߅h߆dX %  %@$2R@@߆`߅hd=d8 %  %@$ % % d4@$C߿(ʒ2,BdB߿(߼ ߲߳߱߰g0`߿($g <-gt߂8Px(%dQx ߙX%߿(߼ ߲߱%߰g0 @ %@߿(g<-gߖߙ(%$dg%%g4(% ߂h߆hdBߙ0g(($p$udƨp$/ %0$UP@ H@ߙ߆hdƨx߅hߙpd@  %blߙP $ % @%ߙ0 % @%$߆hP$UPbdƨx߂hߗhdB߂h%dB@dBUP+@ߙ@߆hdƨ  %ߙXdQ`-߅h %d @ߙ߂ߙP$ (% &Rߙ  %ߙ8%$@(%  %ߙ  %dP0-e  %@ߙX  %@߂t 2@@߅hߙXd  %@AߙXf娸  %@߂2 ߙX %%߿߾߼߷߶ߵߴ߲߳߱߰gg<-g,ߙ%܄ $߿߼߰g g@<-hܰhxp@g߅hߙX%d % %@l߅hߙXd  %@ $߅hߙXd  %@W߅hb 4Bb $ߙ  %@W@%22߅`ߙdH$  % 6߿ߕ؎C$f808@bbAgHߙg9 ggHߗ`ߞg fV$fv\B"+@?%߶eߙg0@8%0%  %ߙ % @%!S߆h߅hߙpdƩd@  %߿߾߼߷߶ߵߴ߲߳x߰h %߱pgߙXd  %@.$ߙ$2 ߅`b@ߙb@$  %@$ fߦߤ$(%%  (ߢ(@ ߥH߆h߅hQ-'ߙpdƨd@  %$ߦPߧXߙg &1Bߙ` %0%g9e @(%ߤ@ߙ @%%$Ðe <@-eg%xdE g #g <(-gx%ߙp0? f߿(߼ %߰g0g<-%g,% % !@%"B ߿e8c<0f$ߵ@ C` $DCdhߙ ߿߼߶ߵߴ߲߳߱߰g %B@(%߄hGFߙ d0 ߄hߙ0%(% d@0c`8?܂@RSRVSV =2Rߙ ߙ`(%gH$$@ %8 @@@%߄hߙ8%`0%@(% dHߙ]gH$$f^0@8( ,߄h2Rߙ@@%8%`0%@(% dh߄hߙ8%0% (% d$"$$DCB(߈heg <-g߂ߙ(ܞ(d0B% %x `@%-dB,BH@Pg0 -+@6`%-b3ߙ`0%(% f( g(@8%߂Pߥߤr-f(<@%( (A ߧHߨPߦ`ߙ(% % X@@H%B$C%"P%@%@0%8%$eߙg9  %b(d+@s-3ߙ$@0BC$ޢ80BC$C[ߙ`@f$ߙ`@(%0% %8 @@%B<0^"<,B@@%ߙ@(%0%fx @4@%B8$$B"8"<#84B"<$bC<0B @$D$d(ߙdCߪ(-$/H% @%fF8%(% %g9 C0$D  ߆ߥߤߙ@%8%dƓh ߢ(dB /((S/(߂ߣxBb2߿ߙP @(%0% %8 @@%B<,B @$%%<0B@%"B(CCd&0c` CC$mCC `%b$mߙ`ߥg9G` ߤߧHߨPߦ`ߙ %(%@% X@@%B$C%ޢ8$0BCb$C@4%_$" *"@$&1.1 ("40BC($":*"@.1 >%$"$Af*@ߙ8f /   -@}<0B@40BCߙߥߤgx$  0%$ CA$ ߅h$ dߙ8  %@b.<0B@*$$40BCUQ.1 Oc $ d+0B?$@d*$d*<$2<0%@ߨ $ߧߥߤߙP F0%@$eߙ$A.<ߪH%@%@0%8%.?C$߅h$ dC߅h$d$$%d % 0V?(%@0%߂`8%g@%x @4@%43b+BBB0B@@ߙؒ<0B@.<CC~&0c` CCCC `%b$M  (%d g.h p@$x0B?@$Uߙh0% (%  %j$A{߾߼߷߶ߵߴ߲߳߱߰%gg<-gߙ@dhdh (%  %@߿ߙX (%  %߿߼߱߰g <܂y-@ dcTDܢ@yg9t E܂ܢg<-ܐܱg%ߙ @ ߿%߱߰ߙ߼ g ߼߱߰g C%0cC%"< $D%g<-glߙ  %ߙ % @0%<?4cC$߿߼߰g g<-gߙ@% %<4cC$<>F0-8-G8+%F-߿߼ggh<-g@ߐpHx`XP%8%,C`,B@ߙ(<. dB$B,B@<.ܹ(% 0%8)xߙP 0d:8/%(%  %$9< ( 0g  %@<ߙ# C %ߙ  %%߾p߼hߴ`߳X߲P߱H߰@ggPܢ<-xph`Xg0 @[(,@Z%@W%,@T%eg@߂`ܔdB\%dߙ8$߿߾߼߷߶ߵߴx߳p߲h߱`߰Xgߤf$ (%@/ߨFG%߹ ߤ@'ߙ$ % @!ߙD ߕ$g< %%߾@߷H <@$ (%%  %@ 0%(%%  %@ߙfff%  %@߿ޔ$$g<-ghߙ8%   ? @0%߿<0<>߼%gg<-gߙ%  %@ ߙ߿߱߰ߙ ߼ g   %<?߿4cC$<߼߱߰>g g0<-0/(8 g/.B@ߙ(% <>Q+@ ߙg9  %Q+ dB$C$B+@߿8$%߿8߼0߲(߱ %߰g@g`<-g߂ߙ((Bh8g@H%$(%@ %xp`XPH%  %0*s߂ߦHdBߥ@ %@%x $@%߂%dB߂dB0߂`8 z."@߹}h  %$ߙ( @%߹0 % <>,CҨ/`l2-^0c`h$C@$CL@$.@_B@Hߢ8ߥߤ0%@8%dY]X `@=@%8P.%%$$ߙPgH`0%(%  %߹(  %@%,B@0B@߹  %Hߙ( @%<>b/$I$fߙ ` %S@(%B*b@ߙ@`0%  %G@?@%@ߥߢ0FdY] ߤ @%4BChC -x$  %A@% $bߙH`(%  %@@%,B@$bMߙH D@@ߙ`(%  %T ߙߦ`8%@(% %g9X `,T%#"߅h$C(/e(+hpxs-p@ %gh߹C/0%$(%@ %b/ ߙ` % @(%A@%$b$$D /  %$$bB@ߙ`$b$$$߾߼߷߶ߵߴx߳p߲h߱`߰XggP<-,XH@80( gx@%߿X߼P߷H߶@ߵ8ߴ0߳(߲ ߱%߰g`$%0B%%%@1 %ܴܲߙ($0(%  %`<4Bb$"@(ߙ0`.@<ADC$BB.bߙDf fR"ߙߥߦH%@%8%g9h  %@@%ߙp  %߿X%%$߿X߼Pߴ0߲ H%@%߷H߶@8%`0%ߵ8߳((% %߰߱g9 g`g(<-gۼ ߔ0ނ%ߙ(%%%$(%g88$0% ( 0B,C`8%dB:8/8%ߙx@(%`0%  %@%8,B@.@ߙg9H  %<ނb8ߙP ߙ % g@߉ߙ(%@%8%0% % Bߙp % @%ߙ 8%߾0߼(ߴ ߲߳߱%߰g@g܂X<-8 h`PH@0(g0%@%߂߂ddBtߞpߗߖS-S+@1$U(%% $% @ %$% @%&߹ %8% @(%@@%ߙ  %߆h߅hߙp@@%8%dƣd@ f8߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ %߰gpfR%g<-gߊH%@% % @%<b$< e ` %<0<#$cC$<>߿߼gߙ$0%(%g9,  %@@% D<ߙ$0%(%g9,  %@߿Dߙ ߼ g%g<-gߎ`%% h%(% %% @X%b+`K+߿߼g$g<-gא߉X% % % P%<b$<D@%<b,<b<ߌ$e,0%@(%% ` %@6@%I$ 8%@(%% ` %@%߿߼ %g ߌ$e,0%@(%% ` %@@%B$0I J"H%1) 8%ߌ$e,0%@(%% ` %@ @%D % $H< H> 8%H%%H%<0-d8gك gg@<-gߏh%%H p%(% %% ߤߥߙ``8%@0% @%$C8B,B߿H߼@gP$g<-gՐߊX%@% % `%<b$<H%Dh%@%<b#ߎ$eΝ,0%(%% ` %@@% D@@P%8<8>80%(%% ` %@ +-"߿߼ %*g  +-$ +@(<܂(>(E-B%g<-gdߙ ܆߿ߙ߼@(% % gg<-g$ߙ ܆߿ߙ߼@(% % g g܇ <-(g%%%ߙ %@8%B$B0B,B@ ߙ߇h߅h߄hߙd烈$dP dߙ@(% %  0%߿(߲߱߰ߙ߼ @(% % g0g@ܵxph<$B0B-,B@ g ߇h$(dx߅h߄hdP d܂U %߇h$)dx߅h߄hdPd`ߙ ߖC +d @%߂%g ߂%dB$+@D(%%  %`@%@b$D$B0B,B@߇h$>dh"߹߇h$?dh (%C,d ,c`1ߞ߇h߅h߄hdh$PdPdx$c,c`%(%@ %H )F@8%(%%  %@ ߿$b(%*@&%߿߾߼߷߶ߵߴ߲߳x߱p߰hgߦ(%%  %g@(%@ %%@0% ߥߤ߹ `0%`&b%߿g`<-g|XHx%ߒPg %8%@%h 0%%8%@% 0%ߙ(%g9  %߿h߼`߲X߱P߰Hgpg<-gߔ%%ߓ %g߉fsh`0%@(%@%8% %`%`h D% g`߉`0%@%8%@(% %`%H@`hpx ߔUg@0%`(% %% g 0% (%%  %ߙF (%g9 ` %߿߼ߵߴ߲߳߱߰gg<-%g|ߙ(܄0(% ߿Q$߼߱߰g g@<-gߓb%xhp$g%X܄$߃<ߗߕ 8@HP%gg8%XcCߙP b ߙ߇h߅h߄hd $ dP2d @ %ߙ@(%  %@%8%% $@%8%$%  ߙ @ %0 (@(Y0 @ %@C$b8߇h߅h߄hd $dPdߙ %߾߼߷߶ߵߴ߲߳x߱p߰hgg<-gߙ%  %@ߙߙg9 @%ߙ(  %߿<>߼߱/߰g g9  %<?4cC$<>g <-%܄(gp$ߙ(ߙH ܑ %ߙ( %$  (%߿(߼ ߲߱߰g0܃gdC- /S$%܄0E-<-+8(g`%ߙ+ f %`$f1T-C"-S$߿8R-߼0ߴ(߳ ߲߱߰g@gܣ ܢ(`<-hXPH@8g$@@`%B$ߙ$0%$ f3ߙ @8%$0%` %@%  (@)߿h$ߙ($ $ߙ0@%ߢ(%ߢ` %@0% $ <܂4czC$b+@fߙ8 $@ %" $C<> -߿h߼`ߴX߳P߲H߱@߰8%gpg@<-gߙ%܄ H80(% % 6@4ߥߦߙ f@8% % @%@ dB߿H߼@ߵ8ߴ0߳(߲ ߱߰gPߙ($ f%dS@%r+@q-B3ߙ 0%@(% ` %ߙ00%(% % fS+@Q-b3ߙ߂@g0<-gnjߙ($( 8 %ߥ@%E+@+-3ߙ 0%  %߿8߼0 %%߱(߰ g@@-3ߙg0<-gߙ( %$(8 dߥ@%E+@-3ߙ 0%  %@߿8߼0߲(߱ ߰g@+@-3ߙg@<-H80( g\߄hdߙ @%߿H߼@ߴ8߳0߲(߱ %߰gP-%@% %ߙ d@%Q+@ -33ߙ@0% (%  %`0+@3ߙg0<-gtߙ( 8 %@@%ߥE+@+-3ߙ 0%  %߿8߼0 %%߱(߰ g@@-3ߙ%g0<-g%ߙH%0%%@(% %( 8% %@`P/cp@f1-dC/BC$߿8߼0߳(߲ ߱߰g@%gP<-g(ߙ@(%%00%(%%`8% %H8X%  %@P/A @0%%߿X߼PߴH߳@߲8߱0߰(g`0-&/-QP$ -0-g/%g0%(%g<-gDߙ< ̞< <T@%8%HP%X%g9%-Q%5%kdi*@0 H$C< -$C&$C90&<4ckF&pC߿߼gBb&<²4B5pbC&D%kD eJpLBC%pMF&@b%00!0!8C&C&<̞$c-QpCBb%<$c5pCF&@0%%%g`XPxph`H<$-g%%@<>8%E-8%ddcC8-ߙ`ߨߦ߿߾߼߷߶xߵpߴh߳`߰H (%@ %߱P߲Xg9^< gߢߐH<>8E- x%%$ `0%% e@%ߢ Oذ-BT(b@<<>8-ޗfߙ$ $BރdPTCbߙ`ߨߦ8% (%@ %g9^< <%>f0@<d+<>V)ߢ0B %U-ߙ8ߤ@0% (@ߢߣ(gC-ߢ ^ߢdBU$@ߙ`߿߾߼߷߶xߴh߳`߲X߱P߰H%ߵpgߢ0f gg$p<-($xhgDH%@% 800%(%`P%ddcD-d +$<C+`,Cߙ  $<%ߙP0< %0> @(%߿x ߙ %߼p߰h g` 0BC%$$<@$$<߿x߼p߰h%gg@<-H80(g <$dB߿H߼@߲8߱0߰(gPߙ%% %@ߙ@%8%$ % (%@ߙXg$@ % ߿Hg <-g8ߙX$( g߿(߼ g0g0<-gߙH(% %(%8 @ߙXߢgߢ$ % ߿8߼0߰(g@<%dBg$@<-g g0<-g*ߙ8(% %%(%8 "0 @0#߿8߼0߱(߰ g@g <-gߏ(%h% p%(% %% ߤߥ߿(ߙx߼ `8%@0% g0g0<-g(ߙhHgH( 8PX`h%% Q+ ߿8%%߼0߱(%߰ gp,+@g<-g߂@(dBHE-B\-%@ % 4B (%fߙ %߿߼߰g  4B$b$ߙ $߈he߆hߙ`H%dƭ8$ gߙ`8%@0%P%H%@%$Xg9 @ %߿8߼0߳(߲ ߱߰%g@߈he%gp8<-Pܰhxph`X@g8߿߼ߵxߴp߳h߲`߱X߰PC!gߓhߕp%d8ffsxC-C/dB-"+@%@߆hߙdƭP$@ g`8%`߇hdH"R0B@ B8@ `0%*)|(`'\(%%  %f1߇hd@B8@߆hߙpdƭp(%  %߿g<-gߙX% `%߆h߿ߙ߼@8%dƯ(%` % g g<-gxߙX% `%߆h߿ߙ߼@8%dƭ(%` % g gp<-g(ߎX%%$xh%`H@hP %$ %%`% @%ߙ$ % $ B 08߿xߢ0ߣ8߼pߵhߴ`߳X߲P߱H߰@gߵ0B@߆h߿xߵh߲Pߙ8߼p߰@ @%(%߱Hߴ`` %߳Xdƭ g08@ߒhߒhfRߙX  ߆hߙ@@P% H%@8%dƭ(%` % 80fRg߀ p<-g @ߑ8f1Q-B h ` P xܓ X H 8vg0 $.b'( 0B@$%@%ߔ%8%߆h%dƭ$%  %0`8@%b8B 0B@f8` %߆hQ-Hߙp8%dƭ (%%߿ x߼ p߶ hߵ `ߴ X߳ P߲ H߱ @߰ 8g (cQ-`F@%߆hߙp8%dƭ (%߉he)ߙ"-%g$0% ` %A%@$߿ x߅hߙ@8% d߆hQ-G@@%dƮ$% g0`H%g0<-g(ߒ 8%%ߦߧH%@%  @%@"""@$߿8߼0߲(߱ ߰g@%gp<-gh`ߒߑhxpX%$f1g fRߙ$ 8%`(%g0 8@ ߤ ߿߼ߴx߳p߲h߱`߰Xgߥ(ߙ@%8% $@ߦ ߧ(D$@ H߇h߅h߄hߙd8$&dP dB @% Eߙ@(%  %ߙ$g <%܄-(gE*@ %߿(߼ ߱߰g0+@ (%-3ߙ  0%Q-Q/+@-3ߙgp<-gPߔXH*@80xh`%%%@<%߂hdDߙ`g9v\ $ @߄hߙGF @%dh d(B@ߙ߄hdh d(bfqx-ߕߖߗ0-g0g0+@ 0%߄hߙ d߿x߼p߷h߶`ߵXߴP߳H߲@߱8߰0g߂hdDH@(% %%$ ߥߦ %% f1ߦߧ$% `(%ߙ@(%߂` %G$ 0+g<-gH%Ȏ"82hߓ$%b#r"q4B(%a"qߙ@ %߿߾߼߷߶ߵߴ߲߳߱߰ g0@C<ߔ`>dߞ-%fv\gpg`+@ % $0%@(% %%` hߢh@ ߢ`@ߢp@BdSB8b-b+`0B@fcc`ߙfs`0%(% %@ߙ`&fdg9Lt (%f$D%`6"q"p$0B4B "p"@4B`<dB!4B`""x@<dB "x#߂bߙP@ߙЖ"0B@ߙPߙ߂0%gXf%p % X߰X@%f@ߓ`-fsLt+@$`% f+%-߂%dB ߂hdBHߢ+@ߙނBR@2B$3xB$@ 2B4B $xdBB$2B@ 2B p߅hFGߙd0  %2B @ <h߅hFGߙd@  %<B$@<ߙ$ gp0`b`8%(Bߙh@kdh߄h dH<B$@ <߇hߤ߹dx (%<B$@ ~߇h(ߤ߹d箈 (%~0B@&<c$b ߙ@߄hGFdh db(B@ߙ߄hߙdh d(ߙ ߆`ߙ4E8%dF  %߄hߙ d<B$@U<c$b @߄hߙGFdh d(d^B- ߂hdB@ߢ +@7ߙBdWB-0߂h8@߄h@%GF`H% dXߢ8ߙdh dD(ߢߦHB ߣ@dE>B:߄hb0 ߢ(ߙdG.d fߢ0+@ (b(B@ߢg߄h d<B$@.<@c$b @߄hߙGFdh ddWB-߂hdB +@߄hb(B@ߙߙߤ  dhߙߤ f+ߙ d<@B$@ ߇h ߤ߹d (%0B@V< b(C`Aߗh$CfH@߄hߙGFdh db(B@3BdWB-߂ ߂hdB(ߢ+@-߹  @C eddxe--(+܆0ߙC@Egfߤ(@% dhf߂hd^߄hߙdh d(d߄hߙ d< B$@߇hFߤ߹d  (%2R@߅hPFGߙd0  %~fߙ ߤX ߿0B @$#dBb߾$߿߾߼߷߶ߴ߲߳߱߰%ߵg %gX<-gߙP0 ܑ% %h@8(`H% %ߙ %g9gp@% @%$f$߅hQߖ8߅hߙ`8%0%dgg9b$ ߦ@ߙHffߙH@ % $@%,B@;߅hߙ`HG0%d8gg9b$ "eY  %ߦߧߙ$(%P X %@(%0"`0%Y0`8 hߙB@ b,B@ߙ bU0% fdߙ  %%߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gpߙ(@ %(% ߕ`ߙ$ff0`(%8%@@%g9@%  (߅hGFgfbdh %%@%$ ߂h߳dB$+@1*c)` ߆hߙ$dƴ8$ %`h ߳-߆hߙ  %@0%߅hd %% ߦߙߧ(%$$PX  %@(%@"`0%Y0H` h`^-Fߥ %% g߳dƧߙ`$0%dgg9bg`<-Xhg$%߄hߙ( d߿hߙ@(%߼` %߰X`0% gp߈hgO%` %e@`0%dc88-g8%8+((/ߙ % d߿h߼`߰Xgpg0<-$(8gX%߄hߙ( dߙ@(%`0% % G߿8(B@ߧ?߃hd0% %dcؐdC-Bd I0B0I%C-B0B< II%C-B0B?C-B 0< - 0B01F%C-B -$=dBdB߿8߼0߰(g@g@<-gߗpߑ0hܰhXgx %%%@ %d8(%% ߂Hߙ8gH@ % D ߂`dUv\% ߙ$g(%g ߢ@0B@ @ ߢCh$.bߙ`$b$d߃@߆h߅hGߙpdư(d@  %$g9E$  %@퓣$ߣXbg߿ߙP ߤߙ@ %g ߙ (%gp p߆h 8%gߙ@dư$   %%  %ߙ@@(%`0%f(P Xߙ`g ߕ߆hpߢߙ@ߢdưH8$$f( ߙHh$@ %4B $gp%  %ߢߙd^h  %(%dF%  %ߢ %F% EߙPg  %ߙX  %b@ 8@߆h߅hߙpdư`d  %bfu-߂`dBv\(߂`dBE$0߂88+@ߙ޴$.  %@+ߙ߹(  %Gߙ,g(%g ߢ@ߢ@AB@߈h߈h߉he e)ȸ߆h߅hߙp8%dưd@  %Vߣ߂@bߙ`I߆h(%  %@߹(߹0  %@Mߙ(g$`(% ` %$PߙPf(@@%g0%(%$ @B@%gH߹ @ %(% ߙߢ8(%dB$$g9g (08@ ߙ0@(% ` %A@%$b"%@)%߳X`&0B @#%ߙ(%fH %ߢ(ߥHߙ`B % @%ߙh ߤ ߙpߙ  %߆h߅hߙp@@%8%dƣd@  %$$ff$g`g$@h `ߦ`ߧhߙ (%$@x pߙ@@(%`0%f(q` h$|Bߙx@ g g9f߉heXe) ߤEߤߙ 0B@ ߥߙ`  %ߤߙx gEߤߙ 0ߦHߙ(%  %ߤHߙ @%ߤߙhߢ H߾߼߷߶ߵߴ߲߳x߱p%߰hg< ܂g`-e@܃Pxj*`݉h@@%8%e)*`X-(( ((<(>(xE-܂J/gce:#-cdc0c#-c040BC7g <-gh%ߙ]p%܏e^g$gH ߧ ߦߙ$ (%P`X% \X,d߄8dd-i߆hߙpPݢdư(% % ߿߼%g߉he)%gH<-gPߞ%" ߓ g %@0%$`%(X@80 ߂hߔhdB$f8@P$Bߣbt߿XߙP 6ߩ8U+@jgߤ0%`% (% %% $ߤ߹(`0% @(% %$% @%ߙ`0%@(%g g ߙgg@$@ Hߙ$$0% 'P,C`(Xߣ0dcC-I߆hߤ ߙpgP%dư (%g@2fC-$&R+@gߤ0%@(%`% ߖg@0%$ %`% $ %% $@(%g@ %߂`0%@% (߂80@$B&R߾P߼H߷@߶8ߵ0ߴ(߳ ߲߱߰$bg`gh<-Xxp`PH@80(g,A%ܒ߂hߙ(dB%fP8$@(%g ߂8dBB8(B@߂hdB0ߙ (%g9 $ߙ0g @(%A@ %$b߿xߙ ߆h߅hߙp@@% 8%dƣd@  %߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(%g 0B @ %ߙ0߇$ d 0Bߢ dRB8B- ߂dBP߂hXߢ B+@߿xCbPhcdD8`c(B8(B@ߑhߑhfhf10b(dTB-0ߢXdBHߢ0+@OޗdSBb-8߂8@f1 %߂hdB߆hߤ(ߙpf. @%8%dư(% fsߢ8b+@-߹Pu  %ߙ@(%`0%ghg$xh pߦhߧpߙ$(% `X%p0c?,dhߤ@dd-iP dC>B:@߂hdBߩHffRg`<-gߙxhp% % 0`8@H߿ߢ@ߣH߼ߴ߲߳x߱p߰hg߇hߤ0ߙd`(%$H%g$P X@ߓ@g ߥߦ %`% (߆h$dư %`%X Pߥߦߙ  %ߢ(@P/@H߆hߨ߿ߴ߳߱pߙ@(%߼߲x %߰hdư gg0<-gTߙ8x% p%` @h% (߿8ߢ ߣ(߼0g@ߙ`0%(% % ߢ@N/ (߆h߿8ߙ߼08%dƱ(% % g@܂@܃`FdBdBdc< YP-eJ`Hh%e܇܆`0ch-ceH* ddb-g<-gߙX%$  % @(%ߢ@ߙg9˸ ` %߿߼g <dBg<-gߙX%$ % @(%ߢ@ߙg9˸ ` %߿߼g <dBgP<-gpߙ`%߄hg9v\dhx` g ߤߥߙ`8%@0%g  @%@ߙߙߥߦ߿߼߷߶ߵߴ߳x߱h߰`@ %߲pg9D g %$  @%ߑ@%ߢߖ(@ߢߗxHf5(%% $ߤ@ߥH`8%% @0%@f15%tߙ߿߼߷߶ߵߴ߳x߱h߰`@ %(߲pg9˸ gg<-gߕ8fBߖ8 ߗ8%08%(PXߓަߧ ߤ0ߥ8g`H%gp`% ߐ@gPߥ0ߦ8% @ %߆h$dƢ% @ %ߢX@ Q/ $Bߥpߦx% @ %ߢX@f$|߿߾߼߷߶ߵߴ߲߳߱߰gߦ(Gߤ`ߥhg0`% @%@$g@@H%fGߤ`ߥh@%`%߰X ߾P@ߤ-ߥ`ߦhߤ߹ @8%@ߥX+@ߓߢP(/(-ߙ$  ߰X-ߢ@@ߥ`$< ܃gh-e|`܂xE*@'P%ݩh`@%8%e)*@%( <>xb-$B(x܂E/ge I-iX-Bkb`%P%K!`-dg`<-g%XPߙgg H@@%% 8% %$=@(%h @<*ߣ0b@<dBC-({,B@<ߙg@@ %߮ 0 8ߢ@ߙX 0%$ %e ߿h߼`߲X߱P߰Hgp<g0<-08g@<dBE(-{,ߙg0p%(%0%  %ߢ@ߙXg $ %  (߿8߼0g@<g ܒ0<-E*8(@gܓߙ8%%(%` %  0%@ q-Q/$߿8߼0߳(߲ ߱߰g@%g@0<ܒ-( H8g|%@ %ܓ*b@$1BC$2CHߙp ߿H߼@߳8߲0߱(߰ gPߙp $$0EBfsfR$Q2C33$XCߒf %@% $b߿H#$b߃h"BdcC-C$bߙp$$ f߿H߼@߳8߰ $  %@%߱(߲0$  gP $$0Eߒ`ffRb %@% $b߿H#$b߃h"BdcC-C$bߙp$$ f߿H߼@߳8߰ $  %@%߱(߲0$  gPg<ܕ-g@f8ߙ((gh `%%$h(%@ %( 8ߢ`@ ߥ`߇h߅h߄hߙd瀸$d d ߙ  %@H߆h߅hߤ(ߙpdƲ d@$߿(߾ ߼߷߶ߵߴ߳߱߰@%߲g0 ߙ`"@x@-e$@@-0 %gg9;l+@$$ ,E 8*R@ B0B@߄B0B@ߙߙ`(%g9e  %$b<C%؏ߣ<>C-ߣ(ߢ8h߃hhdc@pCdQxC-"-p߂hxx߂hdB`߂hdBxXߢp"+@ߥߙ ߤ8ߢh<@04cC$߅ߙߣX0%f C!@%CdQxC-"-߂8߂@߂`d^m6+@ !ߙߥ`g9 fC 0c`7ߙ`Cx`4dC8B(0B@.Pߑ߅h$ % d߅h$ % d<C$@D߅hߙ d@%,B@ %8ߙ(g($@(%` %`%% %0B@-ߙ$f$f b$ߙ  %dVB-X߂p߂hdBx߂hdBHߢX+@gp$ߣHb0B@0ߢHd,@ߙ @%t.@1 ߙ(g$(% % ߗ$ (%%  %@$ (%%  %ߙ  %@%d,@֠ ߙ @%ߙ d  ߢH$$Bfs ^Hߢ8 ܂@܃ߧ F0- ߦ0$C0F0$B°-` f4Bbߣ b/ ߢ0$B0dD$c߄ߙ (%$ .T߇Eߙ0d$dD @%@߆`߆`d<ߓ`߈hfsveH8% (%`%  %߈h߆`e8%d; (%`%  %߈h߆`e8%dd (% %`% @%B!@ ߈hB0B@߆`8(B@Pߙ߈h߆`8%`%e(d; (%  %߈h߆`8%`%eXde  (% % @%߈h߆`8%`%ed< (% % Pߔ@%g@$(%% @ %8`@%@߆hߤ(ߙpdƳ (%ߥ ߤ@(/% $8@ ߢ A4߉he)߆hߨߤ(ߙpdƳ (%ߢPW!!!ߙ  %@Zb0B@Ub 0B@Q߄hߙ d߂ߙ D߂ߙ D$b$$YdA$ C?$C=$ed<@߉he)8  %@8ߙ`ߙ`$(%g9e  %@$@.ߙ`8@,(%߆hߤ(ߙpdƴ  (%#ߙ`2@#$BBC$+f8hg@ߢxߤ@ߙ%dFH$  4ߢ`% C ނ@P߈hނ@eh%BߨPB@@8`$(#0cd߆hߤhߙp`8%dƴX(%-kjCBߢP dIh#$`% d"0B@<e4B$@bE$@ߥ<>`E-cߒߤ8(%@% hB 0B@ߥ3߂4ߒ`(@%ނ@D E@%b@D Eߙ(%  %@%BV0B?4BB@PfWߙ % fWW T׸-+@ߙH f+T ߙ"0B@<C4Bb$@߈hBC$@ނ@te߈hB@pe"0c~C߈hB@geE@ ބ@$C$C0$C1߈hߙ`ߢX %gg9;l!X f1wߢp߈he8@f$("0BEބ@C@߆hߙp`8%dƴp(%-KJ܂ߤhbbߢP dIhI߈hee܃^:b@D@% E`{zߙr@ߔߧ@$(%% @ %ߙ 8%$@(%  %ߧ@$(%% @ %ߙ(`(%  %%ߙHߤ +ߙH ߤߙ ߤ(ߥ߹h ߤ8ߢ"@ߙ`D"0B0cb%ނ@Dߙ0 (%ނ@ߨ@`7$ߧ@ߙ(% @ %V$°$+/ߧ8ߙ80+@(%  %ߙ@@(% % @%t8%ߙ 0%@(%  %ߙ((%  %ߙH`%g(߂H0%P$߹P8%@(%  %V@0%t e ߧ(ߙ $  %ߙ(`(%  %$"@S`bB@߹8ft(%  %g߹@d$(% ` % %%+ R!f10% A߆h߅hߤPߙpdƴ d@&RߖdSBb-߂hdWHt+@ %bFE% fs$(%%  %t+ߙ  %88 % ߙ %<  @(%@%Aߙ Q#ߢ8ߙP %"  @%AߙQ   %߆h߅hߤPߙp@8%dƵ( d@ߞ߅h@ %% d߅h %d% <C$@߅h߅h %% d@ %߅hd% @%,B@ߙX f %% d@ %,B@ߙ0% (%@ %߅h %d ߞhgHH%$@%$0% % ߙ$(%  %ߙ  %bQ ߥ$%  %pf2xf`C-X@߹pކ`  %ޅhߙ` ޔp.@B@ߙpd$$g$g@ ߢ@ߦߧߙ$@(%ߞ  %@0%`(%% dWB-`߂hߢ`+@ߥx$ %% @ߤ@ߙ fߥ@߹h@0%  %ߢ`GM Dߙ`$g9e  %<@C$@/߿( 0B@0D $0B@߅hߙdh f8ߙ` @9ߑh*B@4߈h߈he߆hߙ@8%dƵ$  g`%(`*0ߑh'f1H@< C$@߄hߙp(% d@@%ߙg$ `(% @ %$ C߅hߙ8` %$  d,Sߙ   %`߅h%ef1@ B 0B@0ߢ (-ߢ0S!ߙg $`H%8(d߆h ( ,ߤ(ߙpX`@% 8%dƵ (%߿($d߆hߤ(ߙp@`P% 8%dƵ (%g``ܱh"<-gi,dC8B8ߙhX%$$p(B%f&hx8BhH (08@H ߙߔ@% ߙ% %g9  b@߆`ߙ8%dK`(%  %@G߿ߙ8%(% % %@e@%"B8@,fxD-b-b +=DdCxD-b-b +=ߢDdCxD-b-b +=b@ D߆ߙgdƀ<`(%  %D@ߙx $ ߙp(%  %@%ߙ ߤߙ ߿߼߶ߵߴx߳p߱`߰X@%߲hgd0e(4(dcd0e(4(dcd4@dcߙx(%  %ߙg<-gfh߅hߙ߂g%dgܒHp%` hߢ@ fQ8Bߙxx߂@gx$S+`%߇h߅h߄hߙd烨$d dD܄d!8 -@+ܨKč @$djE&s  -EE$dBbgМ <-g^`x-ߒd(0-fR*\0+@߿(߼ ߲߱߰g0"0B@@%$ <f1gX<܂-g](RdP߂`8dB)ߞ@P80hH@ %%-<+@ ߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gpC0c@`fC`%Cc C(eddxe--(+3< Cq $q%CCb(Q%b(B(DdCxD-b-b +)߹ D<"7ߖf,% DB(dUBx"--+@%ޤ f+܅e܅d%7 (%dfdc( %ˬ(< g܂@<-g[S(ߕdR0H8 S-<f*\S+@@߿HBBTdQ84-&0B@@f14+@fR D < >xd-dBC-C + % <"B(dWBx--D(D($'>(+0dBC +% f+@<f1߼@߷8߶0ߵ(ߴ ߲߳߱߰gP8B.,Bgd$%gg:d>g܃c 0c`%C %< C$@4 @0%܂Y %<8-dY@܂dCBb-b0+܂&,Bfdc$4B$C$$C ܂@$0c %%%%%%%%%g$gg% ߿%g% (C ܂H%܆@F+C0 g%܄8܂0Y @ @ ߿$~@b/@Pd!P߿߰g %%g܆(<-gW% %߅hߙdH d0($B0@ ߿߆hߙ8 8%߼߱f߰dƺP(% g ߼߱߰g g<%܄-gV%ܥߙ @߿"BcC#߿߼߱߰g <y-dcVxܥy ܄<y-dcV\ܥy ܄@gP<-gV@ߙ܂g90xph`X%8 %߇fߙ0d1@$ % ߒhߔh8"-@߂hfRHfߢ@"+@߆0B@߿@߾߿߾߼߷߶ߵߴx߳p߲h߱`߰Xg6#0fw`$%޾E dBh ߙX @@%$(~0c?bߣ8߅hߧߦ ߙP%dX %b-KB f1@@%fc@dhfc޶(%E 0d^hߙX @X%ߩ0ߢHߨ(ߧ ߦߙP%dEp  %@X%g<-,@gS߂h dB@D-B\-@$ ߿߼g$ ߇h߅h߄hߙdh$6d d%$gh<-gS\0x"-߂@ߓh`(ddB0ߗh8xpXPH%-fs+@߿x߾p߷`߶XߵPߴH߳@߱0߰(ߙ0fD߼h߲8 gAߥ߹@ % f^0@`%ߔhf޶dBhߙX @@%ߧߙP%0%f庰  %f`@%g<-gRߙx0%% % (%,C`߿fPCb߿߼߰%g g<-gQߙg94D ߙ @ %߿߼gg<-gQdߙh %(% 0%߿߼gg<-gQ$ߙ ߿߼gg <-gPߙ%ܤܥ( ߙH 0߿(<߼ ߰>g0g܂<B -gPF ߙH d.߿<߼>ggP<-gP8H@8X%ߒx܂d.@%Q  @߿X&:߼P߰8f'>@%߱@߲H ( g`߼P߲H߱@߰8g`g0<ܱ- 8(gO% %3f2dhS-S+@ߙQ$(%  %@߿8߼0ߵ(߲߳߰0% (%ߴ ߱ g@fR߿8߼0ߵ(ߴ ߲߳߱߰%g@g <-gNߙ$/( %@ @%P/db%߿(߼ ߰g0%g%܄<-0B@gN@ߙ0 (%߿߼ ߰g ܂<ܧy-gdcMDdE.yxd. g <ܧy-%B܄dcMgyxd.@(% g ܂ܣB <g @-D:eMlg:dE>xd> g ܣ<g @-%eM(g:܄Exd> gܣ0%dbc %C-C(+EdB<8-dL (%g܂@<0-UgL8 8dSߖH(%u-%u+@ .@Z%%_$Bd(dcbBdTBx"--+@bB dTBx"--+@&fsބނ܃ >0B8BC% 0cb% (0C`@ .`<>dc}-d&4B(@(%% dfބ(0C`@ .`<>dc}-d&4B(@(%% dfBDdC!8d -d+@ ߿H߼@߶8ߵ0ߴ(߳ ߲߱߰%gPbBFdExF--0+bB FdExF--0+dcܦd(ܦd(g<-gJ%ߙ(% @ %߿߼%gg0<-8(gI%$ d( -BC$B,B@ߙ@dߙ@ @(%CdD-+@ ߙ f߿8߼0߰(%g@܂E߿8dgP<-gHH%߇h%ߙx@$%d` %@(%X 8@ߙ%f&@ % @%߿X߼P߲H߱@%߰8g`$gxP8<ܔ`-(C! XH@0(gHl` f߇ߙ0%d:$  %x%ߓߙ€# (%fh;$0% % %@@%f-fs;+@ @(% %`% fR@-Q߿X߼P߶Hߵ@ߴ8߳0߲(߰ %߱ g`&g<܂-gG<%%ߙD(%8%  0%Q&,BC%߿0cb%߼߱߰%g gX<ܰ-dH@( h`P80gF%%f$+d=ߣfC߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰%gp0B@B<0B@*$/TdSt-t+@!dd^ߙ$ (%@B@ߙ(% f"$B"ߙB<0B@(% fffs$.bg<-gE8ߙ $.@ @ %߅hߙX d+߿߼g$$g<-gDߙXܥ܄ ߿߼gg<-gDߙXܥ܄ ߿߼gg<-gDPߙ8 $߿߼gg <-((gD@%߅hߙ8%$d  %@$" ߂8$/b ߂8߂8dB@߿(߼ ߱߰g0dB<y-dcCgy$d gg %8<-(@gC`ߙ  ߙH  %߿*# %߼߱߰ g g0<-gBߙp%$8( @HPX` h@ ߙhgg@0%$@ %@% ߙ@%0%@(% %,BL ߙ &+ % /߿8߼0߲(߱ %߰gp$g<܂-gBߙ8dD $A%ߙ B#߿߼gg<܂-gAߙ%dD%%0% $@ ߙ B#߿߼߲߱߰g(&0$(Q,P&+$gܐ@@X<-2@80(h`PH gA%%@8%ܶ$.bߙ$/  %@!2 $$߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gpbߙ$0B?C% %g9/, @$@ ߅hߙ$d  %@@%$%a9<`$d0B@P$.b$bHC%bH0B@@uޱ L߅h$ݎ$B@%$bߕ8ff%$.ߙ  %ߤߙ@0%(% @%@ -B^-5 %&1$"f%R <dBB*@%fsQӘ-dV6%$(ߙX `(%@ ff1@(%ߙ  %x%1ߙXd  %@߅h߿h߾`߼X߷P߶Hߵ@߲(߰(%` %ߴ8߳0 %߱  gpߙXd  %@Yߙ  f@(%$޹  ߿hF ߾`߼X߷P߶Hߵ@߲(߱ ߰8%` %ߴ8߳0 gpbH4B@bH@;$bQ w߅hߙXd  %@ ߅hB (B@ߙXߙH d8E ff0ߙXd  %@0%fe0` % %߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰ gp@%bY( $bBC$.bj0%@(%` %$g <܂-g߿߼g %g0<-8( g4/%$+%d0(%(d, $-$!d,$#d!߿8 $d$$@d$$ddB$/@@ %ߙ@$/ @$ߙH`0% @(%ߙP0cp%ߦ@(% f$߿8߼0߱(߰ %g@$$dBd<y-dc2ܥy ܄gЌ <-0B(g2@%@*(ߙ((<(<>e% %fe $fRdD@@%R+@+-3ߙ`0%  %߿(߼ ߲߳߱%߰g0@-3ߙߐg܂X<-g1@%|@߇܄hߙ0d:H$ dhߙhfH$ X"h|0B@߿߱߰ߙ0߼(% g ߼߱߰g gЌP <-(g10AdPߙЌ%  %P߿(߼ ߲߰ %߱g0$0,@ <y-dc0bhdBӈ -%g<-g0@%ߙp8%  %(%@0%0B,B@0c߿߼g$b$1?dh%+@-3ߙ ߿+@-3ߙg <-g/ߙg96% %(%% %ߙf`0%@(% @ %@ߙp % @0%߿(߼ ߲߳߱߰%g0$g<-g/4ߙ%%$ $ @ ߙ`dP  % ߙ%߿߼߱߰g g96  %ߙ@0%@(%  %@ߙx$  %@$߿$g <-(ܓ g.l߇h߅h߄hߙdH$id dߙfr%@ % %ߙ %g960 `ߙ@0%@(% @ %@ߙx @ %@߿($߿(߼ ߲߳߱߰g0g<ܑ- g-ߙ% f$ߙH  %߿߼߱߰g g<-܂` g-8߇h߅h߄hߙd0$d dߙX dD@߿$߼gg%܄8 ܂0<-Yg,( %@ @%ߙ@0%@(% f$H"XP/"X߿(߼ ߲߱%߰g0g%<"-܄@ g,H߇h߅h߄hߙd$d dߙ%d d@@0%%ߙp %0B߿߼߱߰%g (%%$gP<-g+ߓߙ(gPbܒ$&(%% %x ߙx@0% (%ggv A ߙ$ߣxbb"߿ߙP $g96 @%gߥߙ 0%@8% @ %@@%+@P+fB3P+@ߙg 3ߙ$@(%  %߼߲߳߰ %߱gg<ܑ- g*\ߙH%  %ߙH  %߿߼߱߰g gp<-g)xߔ`ނܑH"ph@"XߙP%(%% %@$ߙg94D #ߙd`H%@@%g @(%@ ߤHރ߿ߙP $$߼ߴx߳p߲h߱`߰Xgg`<-g) xߒ܃BX< C$ph@$ߤXC&߿߼ߴ߲߳x߱p߰hg$%%%0B@@$``Q$"$ߒp@1ߙxߙ 3f`ߣXBb:߿ߙP $$4B㠂ߔ(%d`% %@$$b$$b%p@%`0% (%% fp@$x d@$$b h@%߼ߴ߲߳x߱p߰h g0C@4B@0B @`ߙ$"%ߙg9/,  %@/$CV$C,$C3p@_ߙxߙ f`v`ߙߙPg f`@bߙ8C#@ $ff  g4B<C$@V$ߙPE fp0B @M$@ߙ f`@ $ $<4cA:4B0B @$"4BߙPg`(% f`ߙF G(E ` %@ $x d@$< g`-%,e%݆h$c$b0B$ !d%dH* H-% /(-g݆h$b0B$ dp)*X+`H-)"H$ dk`%$< g`-,e$@@$$F0݂h0$ !dB%dH* H-% /(-g݂h$$ dBp)*X+`IH-)&H$ dc$܂܃bC$oWxdB<UdBUx܂D+%gp<-g#,Xߒh`ߓxphPH%%$fRg g$@8%(% %`%0 8@ߤ B@ ߿ߙX f@߿"$f1 D߿߼߶xߵpߴh߳`߲X߱P߰Hgߙ ߥ(ߙ@(% f$܂Y g%܄8 ܂0<-Yg"( %@ @%$@ߙ@0% @(%@@%߿(߼ ߲߱%߰g0܂gY ߿ ߰g gH<-g!L8ߒPB%@0(Xe0B/0%e % g +@-"3ߙ0%  (%ߙ@f$(`(%0% C BߙP $+@(-3ߙ%߿X߾P߼H߳@߲8߱0߰(g`:@eg``xphX<<-0Cg D`I%4B<ܥ%% %<0B@߂`ߙ@G 0%6:ߙf3>BC %`(%g9D(@H< ߙ(%`0%g80 8 g(ߙ0%(%g9.L @ %C؊< C$@4ߢ0 Y  %$Cߙ@߿"<4B"<߿߼߶ߵߴx߳p߲h߱`߰Xg8$B0B@8<8-dg9i gp<,-gh$Bߙp`Xxh%,d  %:`*$"%<4B<#b 0B@ߙf>"` %@(%g9D(@H< ߙ`(%@0%g80  8ߢ0Y g(ߙh0%  %<0B<߿߼ߴx߳p߲h߱`߰Xggܱ "<<-0C`Dg<܃c 0c`?%3:4Bߙܰ(f1>"܃ (%` %g9D ߙ`(% 0%g  C؊< C$@4ߢ Y  g@@ %P8@ ߙ  g߆h߅hߙp@@% 8%dƻd f8B$BB߿߼߲߳߱߰ggܳ <r-(g@%ܥߙh% D@ ߿(C((bߙH(%  %p߿(߼ ߲߳߱߰g0g <-gDߙ%ܤ( %@@%B$(B0B?CB-C"C$@ߙ@#@DghE $ ߿(߼ ߲߱%߰g0%g0<-( 8g%%% %d$@߿8d8ߙb܃H$Bb-E 0% @ %Q+$ ߿8߼0߳(߲ ߱߰g@R@߆hplߙdƻ (% @ %`$|@߿8߈pߙx`H%"(/ B -(C %g <-gTߙ(g9VH%% dX$`ߙh$ f&HEdC(B(e(-e+@ ߙbdcD ܆((d DF߿(߼ ߲߱ %߰g99 g0g<- g$߂h߇h߅h߄hߙdX$d d ߂hdB߿߼gdBgpx<-g,Pߓb%ph`XH@8(p$@ߖx%%$b$(+@%"-D E@9&%"-D E@-&+@$J&4B$@ߕ@C&f6(%  %$(Dߙ$@#-dBb$("-CCCC<> - d $ -(bb#ߙP d:8/g+d%@ -B3ߙ0% @(% (%0%D+@E-3ߙ%$%߾߼x߷p߶hߵ`ߴX߳P߲H߱@%߰8g@܂B>0B%g(ܔH$<-0BXP@80 @9gߕhxߖh-dߞp%f80-%f8f֣0+@߿X߾P߼H߷@߶8ߵ0ߴ(߳ ߱߰@%߲g`"~0B?@$(Cb-C` 8` 0%'IHdh(%%  %&Rf1%d0%%$  0i'($b%$d(0B@d@d8C$@($%@%(<%(>$ E00 <>xC-C/dB-$BG%܃b$0B@@%@%g<-gh߆h߅hߙpdƼxd@ dd8߿߼$g<y-dchghg%yx(%H%e?4$d@ % gg !<-g!ߙd!`h%(% 0% %!!!!!!!!%P X@Pߤ`ߥhߙ@ $/߆h@%ߙB@X%JI`@%8dƽ$g  %@%`%xCBp @%ߕxxC-C/dB-fߢ+@; %ߕ`(%% @0%߆h@%ߙ$dƽ`(%` %`%p x@ R/@$B8%$:$@S *E@%b`%ߤ`ߥhߙ@%g$/ @ ߾߶߳`CB߲h `%ߖh$f֢pކhއp(%% @` %ކއ% @(%@ߢ$bPb%P%߿!߾!߼!߷!߶!ߵ!ߴ!߳!߲!߱!߰!g!fBP-D$/dBߙ߆hH#H#@@%dƽ$ g %@(%%`0% @%`%߂hdBp@%3/5-@,C `$C<>`%8xb-b/dB-(ߢߙ$`(%@ %C N@|*b@߅hߙ8$d( @ %,B߅hߙ8fd$dŐ D -,B0ߣ8$bߙ($(%- f$Nߣ0"ߢ8c!"0BD%C%"ߢ>-Vߢ@4(" ߢ30dBP-ߢ 285@4Hߤ(ߙhߢ`8%@0%$ <C$@h%"0B@@d%C0`"B$0B@ߣ8@ߤ(ߙg$ `(%@ߙ8%g`(% @ %@ߣ8ߢߙ@ % "ߣC/c0b*@?%ߣ8$b-4B 5LJ$g$*b@߅h0%'$܂g(T܂PdQ0 H8%%0-$0+@ %߿H߶8ߵ0ߴ(߳ ߲߱߰gP$  `(%ܖ@% /@ %f1܂g܃0%D(H@sX888G-Pb(@*$ %߿XߴH߳@߱0߰(@%߲8g`ߥ"Y(ߦ/ @ %@߿X"/Y @ %ߤ@0%"ߥY `8% @߿X%߿Xg <-g ߙ%܄( ߥߦ߿(ߙ  %߼ ߰@8% g0gp<-g ߙ@%h$/% %@(%x ߙ@ߢg@Pfߢ$H X߿x߼p߰hgg`<-g ߒߙBx%g  %h ߙ$   %!,B@ߙg"$f$ @ Eߙߦߧg9e  %ߣhBb߿ߙP ߼߲߱߰x%gg@<-g 4ߕ4ޢh00BC;xܰߙ% %% %ߙH %@0% $.@-@%$D*ߙHD0/d $.@$@%ߙ  f@%$bߙfg  %fB/ !,B@ߙg"$f$ @Dߙ' `0% (%ߣhޢb߿ߙP ߼߶ߵߴ߲߳߱߰x%g܃܂c(-C`00F-C`$E$Bg@<-gdߙ8(d%܄H0  %ߥߦߙ @8% % @%@'@%ߙ($f%i fD@ @%ߙ((%@ % $hߥfh+@ +-3ߙ 0% -߂ߙ0`0%(% % h B<4cC$B߿H߼@ߴ8߳0߲(߱ %߰gP@-3ߙg<-g %PX@H% $%܂CS@ߤ@ߙg`8%$/`(%H h@ߢ@߱hߢ`(B@h%߿߾߼߷߶ߵ߲߳߱߰%ߴg %`%`߅hߙ8$d0  %@ߙ"@0%$/ % @ߢ@`%`ߢHh߂$0g߂x8r*@-BߣC߹0`(%0% %p x@ @%BUdV߂p8 ߂xը-(+@fsނWߣނCߦ`ߨ ߤ߹8H% 8%$ h@ @0%ߢ߹(@8%@ %(%P X@߿fg`<-gߙhPd%܄`XxpH ߤߥߙ@$/ @%ߙ @%`0%`8%@(% % @ߙ(@%B8@1$B8߿߾߼߷߶xߵpߴh߳`߲X߱P%߰Hg$fEA f$Hߙ((%@ %$@ @%ߥ$/f>=+@+-3ߙ @0%-@>ߙ0߂`0%(% %: 0",$B",$8f  @ (<4BĢ<@-3ߙߙߤߥ@%g  $/@6ߙ`ߥ ߦ(  %<C80z0c)@,c8c %%0B8BC% 0cb% f (%(dWBx--+@%fs(% f+ޤ(% f+B#b%`#n0B@o#b 4Bb (DdCxD-b-b +aedc 4  ߙ  %߿߼߷x߶pߵhߴ`߳X߲P߱H%߰@g%g<-gߒBܐߙ0gЌPߕ%%(%@ % $ %% f( %@(%߂@`0%@%@H $C$ %%-#B "0`!8ߙ@`0%@(% % `%߆hCߥ0#PBߙ$dƽ % "X@)U/$'  -0cb%ߞgp %@0%$% gP߂%߂`$ ߂$(@$BT+@ߦ %$ߤ% (%ߥ߹ ߤP@Dߤ߹( &1&bPߥ߹ U %b% D@$ߙh ߤ 8@$߆h߅hߙp H%dƽ8df8-H DߣBb߿ߙP ߾߼߷߶ߵߴ߲߱߰`%߳g܂0Y <Y-dBY ܄8<Y-dBY ܄8g <-(g%%%%+@ߙ00/p(- @ %@@߿(ߙ P#߿(߼ ߲߳߱%߰g0-g <-gߙ( %ߙ،D g߆hߙ@@%8%dƽh$  %` @0%ߙ$0  (%ߙ $$|g<-g\ߗ ܑ f"8 "ߙ،B % %  %%% % $ gX߆hߙ8%dƽp$ gH`%8@gXeߙ(0%@%f'8@ % @@%ߙ @ %߆hߧ@@%dƽ߅hߙpd@ f$8ߥ ߙ0 $ߣ b ߿ߙP @%߇hߕhߙ$d罠fgPf>H PP@%$߃E/+gH@ (ߤHd`% (-P&b!Pߢ@P߇hߙ$df(/@@%d罸  -P@%/+@ ߙߤHd(- &PU!Pߙ(%  %ߙ @6$@$ߔߙX (%dߙ $lߙ $% g\% g`%gh ߔߙ$ f@ߙ D@#߄hd% ߤ% p% gd% glߤߙ8 (%@%Cߙ ߙD # %߆hߧ@@%ldƽȎ" 0B@tC0b@@:< C$@3ߙ8ߙ8 ߙ @%ߙ8< @%@$0%ߕߗh߄hfE@f% d@߅h߄hd% d@0%߄hf% d @ ߅h߄hߙ<@%d@0%d d@<߄hdX <@߅h"0B@@3ߙ߄h dp@.߄hd`CC$@ߕhߙ$ f8߄hߙ@%$P0%f8 d@Af8ߙ@%8%(% %B0B@ߙߒh$ fDH߄hߙ@%$P0%fEH dP̖"&ߙP %d `(%߄h`dh߼߷߶ ߵ ߴ ߳ ߲ ߱ ߰ %߾g g<-(g%@$2߿ߙ <@ @%ߙ(% @ %@߳@ߙ ` %@@%ߙ`0%@(%  %ߣ@Cߙ @ߙ $CߙH @ %ߙ   %ߙ D #  %ߢ@2" %߿߼߲߳߱߰%g@]g`<-g(ߙHg0% %8hXPH@  %@߿h߇fPEߙ0dCh$ % ߔBg xB--+@ߙߙP`(%  %ߙX  %߿h߼`߷X߶PߵHߴ@߳8߲0߱(߰ gp % f$(% %%@% 0<(%0>%  %$(% %% 0<0>(%%  %+g@<-(0( H8g%%%@%$߿Hߙ<   %A@%ߙ P#߿H߼@߶8ߵ0ߴ(߳ ߲߱%߰gPߙx  %@@%ߙh0%(% @ %ߙ  %@ @%$.ߙH @ %@@%%ߙ   %ߙbV dpb@ߙHVb@``%8%0% (%%  %@@%ߙ @ %߿H  %@8%ߙH@!g܆ <-gl%d-ߙ  b @$`߿߼߰g %܂ g- <-,B(g%%@%ߙ @߿(߼ ߲߱߰g0."@ߙЎ 0% @(%"@$` d- -+@ -B3ߙ 0% @(% Q- %D+@Q-3ߙg<-gߙ%܄ ߑ߂f % ߿߼f %߰߱ g g0<-8( g`ߙ ߐ߿8߼0ߴ(߳ ߲߱%߰g@+% 0B%%@'%܂<z4cC$<>G3 <@ >61+@ڮ/ ߙ(  << > %d(% - 0߿8%3ߙ %( d@%g <-(g)%܇<8z4B88$%+C8 ߙ8<8>0% (%@%"@0fD00<0%+@+-3ߙ "B@%߿(߼ ߲߰ %߱g0@-3ߙg <-gߙg99%dX( %P!ߙ$ $@%RB߂(B@<"4cC$"؎"0C$B"0" f$C-#" f"b($`ߙ $߿("`߼ ߲߱%߰g0g܂X<-gE %ߙg9VH %$hߙ$ 0X"h߿߼߱%߰g ܇<8z4B8<8$y-,>@dc$y 8!$@g%<܂4czC$ <-b+(g\@%ߙ8$ %@ %B߿($C<>8dB-߼ ߲QP߱߰g0gh<-$X0(xp`PH@8g%%D%ߒhfRpߞ߂%043 6P%bfuxb-߂ߗg-f+@-߹ߓߦfs1@(%`%  %% ߆ߙ(%g % dơߦ@(%`%  %ߙ0 f$ߙ ߤ߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(gߒhfR0%(% %T$@ߧ0%(%% %fg@<-g ߙ(%80%%$f1dH(H @%@<ߙ((%@ % $0ߥf$.+@;+-3ߙ 0%0-@.߂0B3"PhB|@ ` (<ߙ(>((-g9:H g®B|<z4cC$b+@ߙ8 % $@%Bh$C<>-߿H߼@߳8߲0߰  %߱(gP@-3ߙg`P<%B -g80C:(ߙHF @% %hXH dC> (f<ߙ > 8%$g  ` %@@@%ߙߦߧ@(%g9$  %ߙ0@(% 0%` % @@%($B(߿h߼`߳X߲P߱H߰@%gpg@<ܐX- H80(g%%ߙdXg9;  %@ @%߿H߼@ߵ8ߴ0߳(߲ ߱%߰gP$ߙߥߦg9? @ %@F@%ߙ($$0 fDH@@%ߥߦߙ` @ % ߂`UxB(߂Q`4&<>"-CXBb (<ߙ(>(%(-g9;  %@%a&Ux"<z4cC$+@ߙ8 % $@%B`"$C<>#"-0ߙ(%g9 @ %@%g0<-g߰܅߈ߙ(%eC$d %8  @!߿8ߙ ߤD@%܂<z4cC$b+@ߙ8 $@ %B$b<>8dc -߿8߼0߲(߱ ߰%g@g<-g޴ߖg`%0%ܒ$ܐ%%` %  %g@$% ߕhߙ@0%@(%f f8ߙ$` % f8$` %4B g@0%% ߂%߂ ߹ ߤ`(%`߹ @ %`% ` (ބߙH ߢ"#W&,BC%#0cb%"&$ffg0%$` %% f$ߙ8<8>0%$ ߖߗ$@$BS+@߹"BB@ ߿ߙX f@߿BDfR D߿߾߼߷߶ߵߴ߲߳߱߰%g `(% % &s%`(%@ %0 8 %% @(%Ώg<0<-%b $8( g0ߙC%0%$ ߔ8ff1ff"R%ߙ0߇$ d߿8߼0ߴ(߳ ߲߱߰g@% ` %1f1<C$@mg@<-g ߙH80(  @*%ߙ% ߕhߖhSdRߗ(S-%fHf֢S+@4T"ĎC$@,<ރ4Bb$@ނ@#(%$ߙ (%@%,B@ ߿H߼@߷8߶0ߵ(ߴ ߲߳߱߰gP(%%  %@ ߙ$(%  %@fR߿H߷8߶0ߵ(ߴ ߲߳߱ߙ %߼@߰ gP߅hߙ8$0% d%%g<-gTߙ%$% %ߓ %$ %`% 0ߙ0`0%4@(%@ % gp$ %`% (ߙ8`0%4@(%@ % fߙ0%$ % ,$ߙ8<8>0%$ ߒhߞ$fRgg@ߙ@f $ %ߦߧߙH %X` h&1$BQ+@ (%`%  %H%`(%@%$$@8%@ %%X `@ߥ $߿߾߼߷߶ߵߴ߲߳߱߰gg<-g`%ߙ߄8%$ ߿߼߰g g0<-gxߖܐ@%h`ߙ$߆Pߙf84-,B@ ߢ߇h߅h߄hߙd$d dߙB %< (% @ %@߯ ߙ8(%dB@%8%0%]-D Pߤ@%$Bߙ08%$ dߢ"'8dB]-FE ` %@@%f14+@@%%ߢQdR8Q-Q+@ߙHg %"*@ߙ ߙ ߤ߿߼߷߶ߵߴ߲߳߱%߰gD fRQ+D&1 fR㏢g<-0Bg΄@d܅%߂߉h߈h߇ߙP%e)e 0% dE64B߿߼߰ %߱g ߈ߙ 8% dF6g <-ܢgBߔdhܞߙ%%gf0@8%߆h$dƾ ߒh߅h %d%(@ H߄hߙ(d ߓf`gPg`h$fR ߥߤ $@8%`%p x@SߥPߒ0@%  %߅h %% d0$d8b-`%b(+F߂hdB@ ߂8(߂(v-0߂@8v+@>߹  %߅h%d` % ߔhfdRBxb-f߂hdBXS- S+@Pߙ ߕhf@%"SdRf0߂hdBpS-8S+@@%BBFdG18b0-ߦXߙ@  %ߥedcܦ($(bRDC*߹0 fDh߹8`0%@(% %h `B(<C$B(fs`ߥ B@HG߹(fFh  %B($B߆h$ dƿHpx(BQD0@VߙX @@%C$(~0c?bߥ ߤߙP%8%0%-KB fR@%0B@@d+@fRHܢDdCxD-b-b +dd0 dcܢvdBhܢ@EB (ߙX @X%ߨ(ߧ ߦߥ8ߤ0ߙP%H% ]fRX%ߙ0 f߿߾߼߷߶ߵߴ߲߳߱߰gg0<-gx-ߓd( 8%0-<<@fs\0+@ ߿8߼0ߵ(ߴ ߲߳߱߰g@"0B@ %($`%@ %`% (f1ܢg%ܑDdCxD-<-g%%f18b-b +Dߙg9)  %߆h߅hߙp %dƿpd@ $߂dBTg@%(% %  BCdTxC--0߂h(߂dB0ߢ0+@@߿߅hߙd g߿߾߼߷߶ߵߴ߲߳߱߰g d4@dcސߙ@IHߢ(dhdF@$g ޒx2R0B @;߅h߹d % ߖ߅hgd` %% ߕ0% ` %ߙHg9. ߤ@߅h߹d  %H߅hGFd% ` %% ` %ߓ߆hfs4dƿ`%  %߆h(dƿ`%  %߆h dƿ`%  %@߳ bK$@D<4Bb$@>߅hߙdg90  %߅hdߙ gߙ0 ggBSdR߂h8S-dUS+@k(ߕhCdRxC-B-8fߢ8B+@tߙ0ߒg fR$(%@%  %ߢ@$(%@%  %߹   %Ffb:0cb0B@ ߅hߙdg90  %߅hdh`$0B@߂h߅hߙdg90  %߅hdE((ߙp40 ` %bX$`߂hfudW߂%dV0gbB+@ߙ0C$@ (%%  %$(Bߙ@ %b-E F&Rf(BB0B@@߹(%  %Cߙb@fHGߢ(dhdE@  %}fRB$BdSB8b-@߂hhߢ@b+@zfRcb0B@@9߄@BDd3cC2ߢh߹dE  %bDCB@dchHCBPX0@߂hdBWBdBh`ߙX @X%߅hߪ`ߩߨXߧPߦHߙdpg fsX%%g@<-g<ߙ %(%80(Hܓ%% @ߙ߆h߅hߙpdƲd@fd8 $߿H߼@߳8߲0߱(%߰ gPg(%߂@0% %`8% @0%@%`(%@  %ߙp @%ߙ ߤ߿Hߙx ߙ<(-d4gܹ(dh ggP<-gߓp%$g`%$:x  %ߕx$ (<(>ߔhߒ(%  %@% f %`0%`% @(%$   %(<% (>@% f %@(%`% `0%$ %(<% (> @ @% f %`0%`% @(% ߙpf   %߄h@% dH %`%`0% @(%߿߼ߵߴ߲߳߱x߰pgg<-gߓߙb $ߑ$@%`%8( 0ߦ ߥ( %  %ߦߥ % % g0ߙP %g ߐߥߦ%  %ߢ@ߙ(߄hdP  %`0%% @(%ߙ$g  %߆h$dƢ%  %ߣbb߿ߙP ߄hdX߼߳߱߰@%߲gg!<-g ߙ! ܕ d%d !!% &@%,@߂h8<8>8dBpG-B\-@ߙ)ߧߨ%& gX%@P%fg9ɨ  (ߙ@8%0%@(%  %@ߙ%`߿!32s3- ߿!߼!߶!ߵ!ߴ ߳ ߲ ߱ %߰ g!  P#ߙ80%(%  %߆hިߙgP@8%dƥ$@  %`Bߙ)ߧߨ%& g@P%fg9ɨ0 8ߙ8%0%@(%  %Aߙ P#ߙ)%& ߧߨg@P%fg9ɨ@ H0%@(%ߙ8  %Aߙ0%@(%߆hިߙgP@8%dƥ$@  %`$|ߙ80%$gPx0<\-gX%%%%`^0B$@C/,C@ܱߙ(  %ߙ@%ߢ`(%`ߢ@ %g9DHh\`% 0 (ߙ@(% 0%gXPX8 @ߢP,Y(0 gH߿߼ߴ߲߳߱߰xg`'$`$C$ ߙ % $ߙ (%@ %g9DP Hߨߩ߿߼߱Y(8%@0%ߴ߲(%` %߰x߳ gC@$߿C4$@Cܱߙ(g<-g|߂ܒP^Bg8߂(%ܑܤ@%%H @4(0A ާޤߙ0B@(% $/cb `%$b@7,E ߅hߙ$d1 ` %@߅hߙ$d) ` %@ ߅hߙPd0 ` %@߅hߙPd( ` %@"@%8@ ߆h"@'߅hIHߤߙp`P%dhd` d4B%ߢPߣBb<߿ߙP DdcÐb0$@0BC߂ߤߥg`gp$/@%px @)ߢ(߳p߷xBX@ ߙfEXg9; g@}ߙߙߥߦg9? @ %@t ߣ("@'߆h߅h߫0IHߤߙpPdhd d@%`ߢ0%hߙ 8%`(%0%@ %p x8040BCaߧ`^߹@  %ߙ@ %g`(%@@%g$/ ߢVXߢߙfEXg9; g@ ߙߥߦg9? @ %@@%BXV)߈ߙߤ e:$ f@V'ߧ`"@'ߣ(߆h߅hIH߫0ߤߙpPdhdd@ Uߙߥ g9 @ %8B|@Vh߇ߙ0d:H$ fή@|ߨhߙ`(%0%@ %p x@p@%ߙߦ`ߧhߥ8g9$ @ %@%8(B@߆hߤߙpdƣ (%,(0ߙf  @ %W2ߙfRh@ % bߦHߙdH %@H%8%(% @@ %0B@4B@8@ߙ "d^hg"@W Q߆h߅hߤߙp@X%@P% H%@%8%dP dߑ0B @f1Wf0? % ` %0B @400BCߙ @ %ߙh@0%$@8% g@@gB % ` %%BW@s#Cp(B0B@j"0B0B@ߢ(BdC CxC-ߣ b-@߂Xߢ@ߣ b+@ߤ $߹X  (%@>ߢ ߢ(B(ߢ0BdC CxC-ߣ b-@߂Xߢ@ߣ b+@,ߤ ߣ($bXC`#XC,BB$0B@.߆h8@߆h#@@ihC'B߅h ߤߙpekhdhd ddB ߹X (%@ ߢ ߢ0ߣ(BC*@U7!ߙߦ`dB #@@ihC'B߅h ߤߙpekhdhd d@6.4B$%A$4%bߙ4B@b4B"@3TQ ߆h߅hߤߙpfsh@X%P%H% @%`8%dx d@ \)f^b0B?@%\$b f^% $dBC$ޣPb-P,$b4B@b8(B@ ߤ߆hߤߙp`8%d (%ߤߥߙ@ $/ߙ`0%@(% 8%@ % ,(0ߙf @ % @%"(" S`ߙs( (%g9lX @ %% ߙ@ܢ`0%G( @ %7ߙߦ`߾߼߷߶ߵߴ߳߱߰@%߲g @xg@<-0( H8g%%%%%$LAX(ߙ0  %߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gP+@ߙ-Ab+` %@0% %"/R-"" @"0&YP+@ %0%`(%  %@@%"#$b/r-d/r-C-"#/Ub(-0/% %@@%"R-"%"E/* @%e+@r-+@ߙ4/% ,(%g<-gߙP% %" ߿߱ߙ0 %߼߰$ g ߼߱߰%g g < -(`3gL܃ܒ܅r/%,D"0B/B-ߙ`(% 0% @ %Q(- %0-0Y 0/@@߿($߲߳߱ߙ0 %߼ ߰( g0B-$|b-߿(߼ ߲߱߰`%߳g0 @"g <-g0ߒ(%%fRb/q+`@%  %@@߿($߿(߼ ߲߱߰g0g܃܂ <-(g%%b%ߙg9 E(/E+C( "E-%%߿(߼ ߲߱߰g0 @ $gސ!X<-!P!H!@!8!0!(! ܱܵ!h!`!g%%% (  %ߙg99  %ߙ( %8 0ߙߧ0ߨ8ߥ @H%`P%g0%fg9ɨ@ H@%B0$@0BC2@ߙ80% (% ` %@ߙ P$#߿!h߾!`߼!X߷!P߶!Hߵ!@ߴ!8߳!0߲!(߱! %߰!g!pF0$`0C,C``Y4$@Cb,C@`$C$ C2%2@%F(ߙ؎G,@% (% ` %F0+0@ߙ88% (% ` %@6B040BC B@B@ߙ<d (% ` %@@%B2CdUxC--߂hdBߢ+@ߙ   %B040BC߿!hߙB88%gp (%` %p x@߿!h6C4Cߙ 0%`(%  %@$2ߙ0 (% ` %A%ߙ P$2x#Oߙ0<` %d  (%A@ %ߙ hPߙ @%,B@ߢ`,B@g߂$V %+@$(/+dcߦߤ߹ b( @ߙ$Cߙ`ߙߙg9f  %AW@%ߙ80% (% ` %3߿!hߢߥ@0% % @ߢ-ߙg99  %ߙ( %X PߙߧPߨXߥ ߦ(@H%`P%gfg9ɨ` h@%ߙ@% 8%`0%(% ` %A&%ߙ2@ߙpG@ (% ` %޾ߙߥ$  %@ ߙާަ@%(%  %A6:f>6$gP<-, XH@80(g`@%߿X߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`P(/+( %  %@߿Xߢ-+@0%$ߖ%%%fug<-gߙXܥ % %߿ߙ8 %߼߰ g %g%܄8܂<-@g8P0cC-@ߙX  ߿(C߼߰ g g <-gߙH(% %@%,B@ ߙ0"R(-%߿(߼ ߲߱%߰g0(  %߿(g0<-g<ߙ%` %8 (% %` %ߓ`% @%&<?4cC$$C%<gk#$Bcpb$5ޢB@Bߙ  %ߙ %g9( @%@ߙ(@߿8$߿8߼0ߵ(ߴ ߲߳߱߰g@$ @ %@%,B@`% #b`% #bߙ$f$ fT߿8ߴ ߳߱߰ߙX@(%߼0߲ %ߵ( g@$$g `<-@8hXPHg%@%܄ߒ@$߿h߼`ߴX߳P߲H߱@߰8gpߒߔgfRߦߧ`H% @%% /@@%ߢߣC-%  %@@(%A ߿hߴX߳P߲H ߙ0߱@߼` %߰8 gp#C/"gP<-$g@߂h(dBH,XH@80@!%ߓ%%%ߥߦ8%`%  %@ ߥߦ@%  %A@(%ߙ0  %߿XߴH߳@߲8߱0ߙ8 %߼P߰( g`߿X߼PߴH߳@߲8߱0߰(g`g@<-gL߂@BpXܓ߂(%߄h@%dHxh%%% Hp.B@ xߣ@ߤXc߿ߙP fb8ߙ0gP@ % (% 2$ $0BC% $P߂dBlX%%%Xߥpߦxߙg`8% @ %@ߢB Aߙh$ϮB ߙh ߤߙ8 @ %ߣ@ߦ`$B(@5ߧhߢ`@ߥp`߹X`(%  %ߢPC% ߙ@ߥߙ`  %@$ϓ $0BC% %%$$ 4B꣢ ߙ@ߙgX  %@%ߙ@(%  %ߥ$:bߤߙdd(%h `@$C $ߥp*tߙgX  %@%*t@ %*f@$RU*S@ $Z$FU$MU!"B$0B@p߆h ߥp*t~ߦx&0C,c`߃h0Bdcјb-B\-@U$aU`uߙ$   %ߙ$: %@% (ߙ$   %ߙ$: %@% 0ߙ$  %߄h߹Hd@% 8ߙ@(%`0% % @rߙg  %ߧ0ߦ(ߥ8ߙg  %$Muf9b(ߤ`ߥh%$s$x$S$ fd*@/-BF(Jt@HI"B$0B@߆h߅hߤߙpd d@$ߢ`$ߢh߂hdTg(g0߂8ߥ(ߤ0߹8$8% @ߥߢh@߆h߅hߧߤߙp@%d d@ߦߙ@ f$(ߙ@(% gߥ(ߢ`@\`ߙ`(%g9lX  %ߥ`ߦhߙgX  %@%`Lߦ`ߧhߙ`(%  %@%Eߙg  %$ ߙ0B @g $$ߙg g9W  %ߢhߙ8%f (%  %ߙ$   %ߥ`ߦhߙ  %0BC%Gt4B@4B`dc4B4B $F$a$R$Z߾߼߷߶ߵߴ߲߳x߱p߰hggЌP <-(g%`%%$e܄-#0c`ߙ@EF d(C#B"P߿(߱߰ߙ@(%߼ ߲8% g0߿(߼ ߲߱߰$g0g<-gߑ(%߄h %dH ߒ0 (%D@%ߓhߔh (g0fsf ߧߥ ߦ(ߙ ߤ@߲8߿߾߼߷߶ߵߴ߲߳߱߰%g@߷0$#Cb` % % g`ߙ@0%`8%H%gP %@(%px@ H@ߧ % % ߒxߦPߧX@ %`(%@% @ ߄hߙ8%f(%  %ߧ % d ߦPߧX@ %`(%@% @߄hߙ$   % % dߦPߧX@ %`(%@% @ߨhޤ߹ (%ߙߦ`ߧhg9e  %ߧ`ߥPߦXߙ @gp<-g$߂h@ߐh`dBHߔhXPHx%%g fgߥߦ`8%%  %@ ߿x߼pߵhߴ`߳X߲P߱H߰@%gߤ ߥ($#bߙH%`@%$8%$0 8@ߧߨߥ ߦ(ߙ D@ߥgp<-g`ߑh"XH܂@x%@dH܂X@ߙXߙP(% @ %@bߙ8C#@ߙ0$  %@ߙX @ % ߤH(C # ߿xߙP d g߼p߲h߱`߰Xgg<-gߙ% % (%߆ߙ % @(%߿߼߰%g g <-gDߙ%((%%(ܓ0@ % %߆ߙ %dD @(%@@%$Bߙ  %߆h߅hߙp@@% 8%d8d@ fd8߿(߼ ߲߳߱%߰g0%gpx<-gpߙ(XP8%%%(%$ %@ph`H% (*@ߙ$z߿ߙ=0g`(%  %@ߢߙ Pj#ߙ(ߢ$ߢ`(% %ߢx߾߶ ߢ"8ߢ> "@ߢ6("Hߢ 20"P2@r5X2R4Bn$Bm2bߙ<d(%  %@_@%g0ߙ$@(% % @T߂%0g0%ߢߙ V-ߦ(%$  %A2@(%ߙ R$=B ߙ % &°!ߢ*@ߢ߶0ߙ@f&2  %ߙ  %ߙ   %@.2b$zB+2b#@%߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@%߰8g8ߢߤ(ߙ@@0%H @ߥHFGߙHg0P Xߙ%ߙ ӌR2b@$@0BCa4Cߙߧ,@ߙg0@0%(%  %@Uߧߙh@0%2e f$\%$ߙ % (%@%,B@ߙHg02e @ %@ߙ8ߓߕg00%$`%  %@ ߦ0ߙPf%\ @ %ߙX @ %ߙ8  %@%ߥ8% @ %0%g0<-gT ߔ%%ߙPނܓ%@%g0%(%@ %8( @ߙ( % 5ߧ0@(%bߙXHI`0%` %1 8%@@%@0% (%% ` %ߣނb߿8ߙP ߼0ߵ(ߴ ߲߳߱߰%g@g@<-gDߙ8ܔ%dH0( %% ވhߙPe(`8%@0%f @% ߿H21-߿H߼@ߴ8߳0߲(߱ ߰gPg0<-g(ߒ B8%%2?܂ߥߦY8<8%g  @ ߙ$BߤC+ߙP   %ߙ@0%`8%(%g| ߿8߼0߲(߱ ߰g@g8<-g߂@`ܞBg88 0BPdH0( %%% X߇ߙ0( f$ނ(dUB-@߂dBDp߂hdB`xߢ@+@ߙ޲B C:dC>ߣP`ߣ` $ނߙVfh  %ߤdBߢ߹pߢ@(% ߥߢߙߢg@0% BdVB-H߂hh߂hdB(ߢH+@ߙ@[ߢߢf.0g bf.ߢߤY8g<f. @VߢH߈ߙ&eCߢP$f%g @I%ߢ @ ߢߥߦY0ߤ$ 8(B@ߢB dG>B:@ߨ(߈heߢxߪ(ߩ0WP ߢhߤ8ߙpdFp (%ߢ@B F ߙH ߤߙ8<$g8>$f ($B(fS%S<.s@C<,c@,c C<4cfC<`b$C<` ߙߢߥߦY0ߧXߤ $ߥߦߤg9 8%@ߢ$ @ %S bB ߂hv `fw b@ߙH@(%  %E ߙh$ % f!ߢ@@߹ D@v f(ߢ`ߣBb߿HߙP ߾@߼8߷0߶(ߵ ߴ߲߳߱߰gPgP<-g߂BxH܂XHdB8Pܢ(d^B-$(߂dBD߂dBph`%%X8`ߢ+@Iߙ ̔R:dS> ނQf1h  %߹@ %`(%dB8PXL ߙ@(%`0%gH@ Hߢ@ߣXBbb+߇hߙxd€$@ %`(%$ ߣ hߢ B<4Bb<dCBb-߂hdB¨߂hߢߣC+@xߢߙHU f.00ߢ (F f. ߙ <>0ߧ0fg$f@$ @%0B@@7g8 X@"BB@S$ߢ@ߥ(ߦ0ߤ@Y08% A~@ %ނCB@dch@CBpx dC>B:@mߗhfߙ ߪf.ߢߩxߨpߧ@ߦߤPߙpdE@ X%4Bߢ y$"C%ߧ0ߙ"g$$f ߦ0ߙ0(% fߢdB`ߤ(D +/@%0b(B:@߈h߈he߆hJߤPߙpf.dˆ (%~$eߗhfߢh@$߇hߗxߤ(ߥ0d$%$ @߇hߙ ߤ(ߥ0$d0$% @ߙߢ8@(ߢ@ߦ0ߥ(Y8g`<g8 @ߢ8<D4c܂߷zC$b+@߱ߙ8 $@ %ߢ8D$C<>8dB -($Bg(߂ߣHBb߿ߙP ߢ(߾߼߷߶ߵߴx߳p߲h߱`߰Xgg0<-g}ߙ%܄8( g( %ߙ($(%@ % @%.@ (߿8߼0߳(߲ ߱%߰g@"@(ߙ߂8dB" % 2@߉ߙg0e) @%`8%0%@(% @ %@H@%<gkH$Bcpb<xd$Bnib)$ߙp @ %ߙ(32$P(%  %32C`B@ %ߙ` $@%ߙg9(  %@@%$$$bߢ8@%"S`߆gߙ(% @ %(%`%  %@%$bߢ8ߙp$$bߢ8ߙpg<-g{ߓb,@%ߣbb߿߼߷߶ߵߴ߲߳߱%߰gߙH%$  %@ %,B@߅hߣbb߿ߙP ߷߶ߵߴ߲߳߱ߙ`(߼ %߰ gߙ8$ d@ߙߣbbߙ߿߼߷߶ߵߴ߲߳(% %߰߱g9  g5  %@%"@$2+fR"@ߙ(߂8dB"g$(% % 4@0$ $4B0cC%$$ߗHBgx$%  %%gh% @ %߆ߙ8%d_$(%  %ߙ` % @%߅ߙ %@8% 0% dG,@@%$b$$"H,B@@&(ߢ < b$C" @ߙH@%$$0B ߙHߤ ߔX%  %% @ %ߙH $8ߙ(42$P(%  %4H2$$$bۏ $gH0<-0B8( gx4@ %ܑ@ߙ܄8(% "(%Y  %8ߙ`  A@`ߙߙg9f ߙH % @%߿8߼0߲(߰ %߱ g@gH<0-,( XP@8gwh%%%,@B߿X߾P߼H߷@߶8ߵ0ߴ(߳ ߲߱%߰g`@ ߙ`%2߿Xߙ` % @(%@% $P@0@%ߙ($P(%@ % ߂87dB(2>6"0083@4HW/ߙ0%(% ` %@@%A@%ߙH  %b@ߙrg9f ` %߿X2 %$g<-gu%%%&%ߕ$ gg% d@6@%$ gg  0%(%% @ %@,@%$BB 0B@&%ߙg(%  %@%,B@5ߙ(ߙܕ$g % @@%߆hވߙdƥ$g$ ``h$|߿߼߶ߵߴ߲߳߱%߰gd߿`߅hއߙd f8%  g@ %,B@ߙ`(%܅܃܂܆x߅hC/`pg`ߙ(% 0%ߙ(R$H(%g @% %ߙp %)0f"8ߙ0(% g@%$ ߙ8%0%(%  %߿ ߿"4B"g8<-gsܱߙ% (%$0( H@ܗ% @f8ߞg@(%$ @%g 0%% %@ߙ @ %@ %"0B@3Bb$.sߙ( (%@%,B@$ߙ"@ %2S Q߆h߅hߙpfRh@P%`H% @%@8%dƥd@  %T߿H"@$0߄ C/P8@(HX`g`Gg%ߙ($l(% gߢߙ($@ߢ(%gPhpx %ߙp߂8 %dB  ߙ0g(%f" `G@%@ߙ"4B"A %ߧߥhߤxߙ0B %߿H߾@߼8߷0߶(ߵ ߴ߲߳߱%߰gP$ @%g 0%fE% @ %@8@߆h"@'߅hIHߙpdhdd  %%ߙ (%ߙ$@(%  %P@%8@cߙ`$^@%\$%0/$ C$*d $ DdB$*ddB܅$C+@ %Y $(%Y  %%%g%ggdgg%gg%g܂܃bCb@*b$0B~gC%XPH8( ܗh`@0bܢ<dTB-8-gnt%%%ߢ+@"ߔPdSp-fp+@@ %e% fsp+ސA$#b0BC$#b$d$b%"bނfB"&+V!C%<$BjD$+0BC%0 `0'80Z0B@@ $<4B$@$@$+@0% B@ $BT0B@%0B,B0%`:b$(0B?G-B2/D%D\D$+0%0B@%0#+0BC%ߞdUBgxb--+@@ %ޥ% f+$%$%$$"ߗSdT8-f+@%" $0B8Bv<@b%C`ߕ$cC`b%#Xd8-f+@/߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gpޞBPdU-+@@ %ޥ% f+(dUBx--+@@ %fޥ% f+ނB dSBx-p-p+@@ %fe% fsp+>ܢgBRdQ( 8%%%2-2+@ %%% f12+(dSBx-p-p+@ ߿8ߵ(ߴ ߲߳߱߰g@bBRdQ2-2+@ %%% f12+fs@8\%g<-ghߙH%܄ ߙH  %߿߼߰g gH<-ghTߙ X%P@80( ,`j߆hߙdƽp$ % ߗ ߙ`% g$@%$V 0%%  %@ߙ$8%(% $@@%ߙ B^&16A @%ߙ B#(@ ߙ  A @ߙ B#,@ߙ ( g ߙg %AߙHߙ Q#ߙH  %߿X߾P߼H߷@߶8ߵ0ߴ(߳ ߲߰ %߱g`$`ߙ80% gߙHg<-gf4ߙ($@(% d(߿߼%gg<-geߙ($(% d߿߼%gg0<-geߙ( %%$d 8 %@#ߥdD@%PS+@$+-3ߙ`0% 2ߤߥߙ P-`$0BB-B#@f#$"C߿8߼0߳(߲ ߱߰g@@-3ߙg@<-gdߙ % %(%80H( ߒx0BdB-$߿Hߤߥf@% @ f %߿H߼@߳8߲0߱(%߰ gP%gP<-gc ߐh0ߒh@fPߔxH8(XfRؠ$%$$(%P 'ߦߧ-%  -@ &"߿X߼PߵHߴ@߳8߲0߱(߰ g`&13fR$g<-gcߙ< @߅hߙHd@@ % @%@@%ߙ   %߿߼߱%߰g % ,C `$ g<-gb߇h߅h߄hߙd՘d d0@$$c$$B -)g<-gb(%ߙ%@%8%܄ $ ߙ@%8% $ ߿"߼߱߰*g XB@%g<܂X-gaEF%ߙ %#@(%B$C+@ ߿߼߱Y %߰$ g ߼߱߰g g<-gaߙ$ %ߙ %4F $߿߼߰g gЌ <-(g`@%$2ߙȬ ܄<@ߙgdth @ %@߿( ,C`߿(߼ ߰g0g0<ܒ0-8( @Ag` ,B@@=%ߙ茔g9'. %$SB @=0%Ddb@$db@00BPBF߿84߅hߙ`dX %PF %*@ߙx* *@ߙߙ  %߄hߙx(% dh" 4B " ߿8߼0ߵ(ߴ ߲߳߱߰g@%BD(% &*(%$  &*gd <-,B(g^x%%@%@ %ߙx (%ߙ@@0% (%  %ߙ(% $ ߙ  %߿(߼ ߲߱߰g0܂g <%D(-(g]%%ߙ@ ߙ@CD @0% (% b ߿(߼ ߲߱߰g0g<-g]Pߙ g9*Xg (08@H ߿߼gPgp<-g\߇hߙxP$dh%$xh`XH@08 @ߢ$f߿x߼pߵhߴ`߳X߲P߱H%߰@gߑhߓߢ%$f1pg fs$Xߙ$ 8%(%g0 8@ߤ `% ߥ($C%R0c`T%gP<-g[8%߇hߙH@%%g@%$d秈X @ߙߙߤg9$X ߥ$C$0C0c` ߙBߤߥg9+4  0%@%`%$߿X߼P߲H߱@߰8g`g <-g[ܢ@ܧ߆hߙIHdhܐdƿ@g( $ߙ( %`0% @(%߿(߼ ߰g0gh<-gZ8(ߙ0%%܄pH@0x`X Pfxߓhߔh-ߞh0-fsf0+@Uߙ  %߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(g$60%b "dBhߙX @H%ߨߧߙX%gƺ$g  f1ߙ(@(%`0% % 0+`H%gh<-gY4` %$d ߙ%߿߼g %ߙX E,BD $gܐHQ<-XP@80( @gXĜߔx"-dߞ%fQ-f.fX$Q+@ %x߿X߾P߼H߷@߶8ߵ0ߴ(߳ ߲߱߰g`E% dh@` %CghD E@B0@(% xȢPB'0B¢QfRgh0<-8(gW@ $C@%%߿8߼0߰(g@܆܇ ߙx % ߥ,B߆hߙܐdƥg  $ߙ`(%$  %gАQ <-(gV@ߙ%g90 d@߿(0@ fX$PȐB'0B¢Q߿(߼ ߰%g0g܂`0 <ܰ(-8(PgVD@ %0`߿8߼0߱(߰ %g@`ߙ`@B@deFG@% $b߿80`ܥ(@g<-gUߙ8$C% ߿߼%g%@g<-gU@ߙ8dP %߿$C%߼߰g (@g<-gTߙdH %߿$߼(߰g g <-gTߙ%܄( ߙ@(%g93T f߿(߼ ߰%g0%gМ <-gTx-ߓd(%0-fs3T0+@߿(߼ ߲߳߱߰g0"0B@`%% @ %f1g (<-$/gS|b߆hߙ%$(%dƽ  %@߿(P/*߿(߼ ߰g0$g <-gR߆hߙ8%܄$( dH(߿(0B?߼ (߰g0gܢ0<- ܓ8(gR@/%B$(0B?Cb-BB%#ߔpb%e%"% (%% ` %R$:0c+C%0cb%߿8߼0ߴ(߳ ߲߱߰g@%V%b%e%Z` %% R$+0cb%ӦMgd@<- H80(gQT@ %ܢߕ@QdP8ߖ@%%-+@ ߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gPܢB0B @U ܢ(DdCxD-b-b +% ` %fdDddcg0<-ܒ8( gP%U%ܢU2? ]%"܄&@L#B$(0B?E-Bb%%d@ %422D<܂4czC$b+@ߙ8 $@ %B(<(>$CxE-dB-SQ$@%@% -0B% B$BB߿8߼0ߵ(ߴ ߲߳߱߰g@%%0D $&dB(%`B$BBq 2܂0c~C߿8B$BӮB<Y-dBMY ܄8<Y-dBMY ܄8g <-ܙ(gM %܇܆܄ $@@(%߿(ߙ0 %߼ ߰ g0 @ 8B @H`  0% (+d 8%@@(%$b߿(߼ ߰%g0g <-gLߙ%܄80%( $A @(%$%ߙ0  %߿(߼ ߰g0ߢHߢ@%g0<-( 8gL\%%`Xd@$`@m @j@ߙg9:l  %@߿8H@%ߙ @#(% @$ 0/A @(%ߙ0  %߿8߼0߳(߲ ߱߰g@@ߙg9;P  %@ߙ(% @ %@S$C2$ߙ0@@C /H@ߙ0ߙg9;P  %@߿8H@ ߙ0`Qߙg9:l  %@ߙ0 @ %߆hߙ0$pdƨp$/ @ %@$@`Q`"/g<-gJTߙ0%d@  ߙ` 8ߙH % @%߿߼߰ %߱g <y-dcI茅 y` ܄8<y-dcIܥy ܄g <-gIߙXd8%@ %( %@߿(b0C@` 0B\C%@ ߼ "2f18@R߿(߼ ߲߱߰g0gܢ <-gIQߒdP(%-fR>+@߿(bab0C`4B` %@% bf߼ ߲߳߱߰g0g08( b<-2b@@+gHtdHߙX%@ %% %@+2b@2b@@\@$ `<b$$<b6sbߙg9 @ %b0C`.0B"H2Hf1@HPRߙ߿8߼0ߴ(߳ ߲߱߰g@\$A` d$`߿82s@` $ `<C$$<C-,Bb0B0cb%Цb@ f10"dBdDH$"2f1 XEXe*`BHCPRPHPrg<-gFߙ0%g9?% %ߙ (%g9?  %ߙ߿߼ (% %߱߰g9> g g<-gF(ߙ($(% %߿$߼߰g g0<- 8(gE%dd$$ߙH ܔ %f12߿8ߴ(߳ ߲߱ߙ %߼0߰ g@g<-,gEH@%$/b$%." $ " dc%$: -@ %dBC + - ߿߅hߙ$ dx@ ߙf߿߼߱%߰g ߅h$d(  %@." f-C$/b߿-BC߼%g<-gD8ߐfBT%% d߿߼f$%߱߰ g g <-gCߙ<%fd@( @ ߙ(ߙ   %$߿(߼ ߲߳߱߰g0$@(%@ %@% dR@߂8dB08%g<-gC,ߙ%< A ߙ B#߿߼߲߳߱߰g&@%ߙ(% @ %A ߙHߙ P#%,C`߿߼ߥ@H% @%$$ %@%$Bߙ $@߳@@@%ߙ8`(% @ %߿߲߳߰ߙH %߼߱ gߙ($@(% @ %S-$T%%9%߆hߙdƭ$$ % gߤߥߙ@%@8%$+ 8@4ߢߤߥߙ @%8% $@ߥߦ %%$>$~$ <$ =*` -cg(k?`ij4B%%$C$@@@$ $h4B d4Bd4B6BߢB %߿X߼PߴH߲8߱0߰(c߳@g`%܅d(x(-(e(-e0+ <@-e8-C8`+%ܷ 0c`&%f8 ܓ߂Xd@C-^hߔh߆h܊ߙgPX%ehfd$  %@`H%$|ߐh$Vf؏Dߢ(V@@ߙ$  %A@%<C%؎<C$@ 2ߙ$C$@zߔhߙ08%0% fH@rߙ$ fHADߙp8@iߙbdBh0b@CT 8ߙ D߆h߅hߨ8ߧ0ߙp@P%H%dPd f8R$ߤ$ fAߐh%fèߙ DbߙdWhb@S R߆h߅hߤ ߙpX%P%@H%`@%8%dĠd@ $4Bm߅h$$! d@ߙp߅h$$! d@ߙp߅h$$! d @ߙp߅h$ $! d0@ߙp߅h$$! d@@<C%! %ߙߤ$$ (%@[@%$ߙF0E8  %@TFߙߙ  % $8@<C$@A߇h߇hdØb@h߆hJIߤ ߙpX%ehdĈ (%f<C$@/dh߉he)àߨ(ߙ 8%(%  %@ߙ % ߙ   %߿ߙ8ߤ0% (%߿߾߼߷߶ߵߴx߳p߲h߱`%߰Xg$?$   %8d߉he)%ߐhPf%%gh(<%-g$ߙ %dE$0/(-XP@xp`H80% %@@%C!߂dB߂hfRdBx߂pf-%ߙQ/0%$   %@@%%ߙ2 (% % $߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(g߹ %(% fg(@/ߦߤ߹@H%@ (%b b(2ߙ@(%g9  %߆hB(/g(ߤߙp@@H%dƥx (%%g@<-g"ߙ %d80(H%%% @ߙA߆h$߿H߼@߳8߲0߱(߰ gPEF ` %%߅h0(ߙpH@P%dĸ d$g ܑ0@+ ܂(<"-܂-H80(Q.g"܂R@%߆h܉܈ ߙg 8%d$ ` %` %ߙ`(% @ %Tߙߙ  @ %@ߙ߿H߼@ߴ8߳0߲(߱ ߰(%g9( gP߿H߼@ߴ8߳0߲(߱ ߰gPg <-g ߙ%%܅H܄@( %8<܃0d"+y"0  @(%@߿(Hb-H߿(߼ ߲߱߰g0g <-g hߙ0g9*Xg0(8@HPX% ߿(߼ ߰g`g0<-g ߙ%(gH%g9*X(% 8HPX`h% @%`B$Bߙ % B -$ b%Q߿8߼0߳(߲ ߱߰gp$@g<-g@߅hߙdHg9* %߿߼߰g gP<-@0g% 8ߒ+(XH% @ fR*߇h߅h `H%d0#@% db!ߙ܄g9'<% >4-f1"* ߅h߇h߅h  `H%dd@%  %$B߿X߼PߴH߳@߲8߱0߰(%g` `8%d@%  %Վg0<-g ߙhg (@%H0%g@ %$8PX`h ߙ@0% %@(% ߿8߼0߱(߰ gpg<%-g(ߙ  $߿߼߰g g@<-g@[%܄@ߙ8 ߑf % fX % f %f $ߙȎ0% @(%Aߙ BQߙȎX0@:0ߙ0@ g߆h:0d$  %0$b,B@߆h8%d C!(B@4߆h:0d8#߆h߆h$dP  %`@ ߆h߅h08ߙp @%dƣ d@X4<C$@ $@@%\A %d`߿߼߲߱߰g$g<-gߙ% g9kX d8@ߙH#0b@0c`0B߃hxdcC-PߙH  %߿*%߼߱߰ g $$g0<-g$ߙ(%%$ % 8%% %@`%dRߙ($`(%  %." (08@ @#߿8߼0ߵ(ߴ ߲߳߱߰g@ߙ0<  %Aߙ B ߙ0ߙ  $ߙ0< fA <ߙ  ߙ  ߙߙ0 fA ߑߙ  ߙ  ߙ   f1'0 %  %  % %gP<-gtߙ(0(%%$(%H@8X g$ ߒߓh$gfRcfs؏C$C$@Sߙ$$  %@@ @%88%@% f^@ߙf$ @8@%`8%@% f^@ߙf$ $b;H@ߙ@ߙfH $$C @ ߙߙ f$+\$C%\HP A@%ߙ C$ bߙߙg9kX  %߿X߼PߴH߳@߲8߱0߰(g`PC-PHC/H0B@ߙ@ $߿Xg <-gߙ8%%$d8( %$bߙЎ0b@0c`0B߃hxdcC-B߿(߼ ߲߱߰g0$$Î@@0%  (%A߿(ߙ B#<0-d4€hx$dBؠ xb- -eÀhgE/dcPe-dBgg`<-g߆hߙdƫp%$ %$xh ߤߥߙ@$/ ߔf$@(%`0%%@H @߰B@ B߿߼ߴ߲߳x߱p߰hgߢ$/@@%ߙg@gP@8%$/` %(%  (@$@0%f$%$0 8@߿BdBf@HPXgP<-gxߙ8%܄XH@0( % %ߥߦߙ @8%@ % @%@+ߙ f$ @4@%ߥdDQ+@+-3ߙ  0%ߙ00%(% @ %ߤߥߙ  %߿X߼PߴH߳@߲8߱0߰(g`@-3ߙ@%2b@%0B@%ߙH ߤ$gЌ01<-$B11(1 1100000ܗg (X`0%$#b%ghg @ %߂ߥdB&@%hp ߲ ߴ(߱h@߳p$߿1(߾1 ߼1߷1߶1ߵ1ߴ0߳0߲0߱0߰0g10ߢ@$@c b %ߥߤ߹X` (h p߲ ߴ(߱h@߳p$ߙ %g94 `(%@!߇h%c$@b$*"@߅hߙ8f$$dŐ d -@߂x*"@ ߅hߙ8f$$dŀ d -@߂xߕhfxߖxߤhߥp$dŘ$% @߇hgߑhg$$-f1Šߤ߹ ߵ߾$$ 8% %(%%  ߲@)ߴ%@߇hWߥ߇hߨߙ$dg$@ %(%  ߣ@ ߱@ ߆h߅h0(ߙpHP%d db$@]߆h߅h0(HP%dŰdߙp R$(c`߅hߙ8$d  %@"4B $B,B@ߤߥߙ@%8% $@߈ߦߧߙxg H%ee@$  %@/ߥߦߙh`H%@8% @%f %߿1(ߤhߥp$d$% @$߇hߤhߥp$d$% @ $߇hߤhߥp$d$%  @ $ߥ߹ ߤ߲ ߴ(߱h@&߳p$@ ߆h߅h0(ߙpH`P%dd  %$/$%ߕhfň߂xߞg %H%ge@ 0%`8%$@%hp @@ %ߙ@$/(% @%ߢ`%H@Pߙ %g94 `(%@ @߆h߅h0(H`P%d@d\ %@ ߨX Yߩ`ߥHߦP8%  %ߙxg@0%H%ge@8%$ %8 @@@%`0%ߓg  (% %`% gxߒhߗgxfRg $ߥߤ$@8%% @ߥx%ߦ`%  % @% ߨXYߩ`8%0% % @g߿1( f"0g C-ۢ g<-g %߅hߙXd` %@߅hߙXdh  %@߅hߙXdp  %@߿$߿߼߱%߰g ߐ8fhߐg0<-,8( g (@%ܴ%%%ߙ  %@@%ߙ(0%(%  %b~Y   %@ @%%߿8߼0ߴ(߳ ߲߰ %߱g@$"@ߙ2 % @%߿8!g<%܄-g (ߙ Y   %B,B@߿ߙH  %߿߼߰g g <-gߙ8%܄( (߿(C!߼ (߰g0gЌ <-,C (` gD߇h߅h߄hߙd$dx d0$%C %-0B@@ߙp߆h$ dH(-4B@-2"@$$B$ $B -Q.-߿(0B߼ ߱-߰g0g<-gdߙg9 $߿߼%gg-<-@g(,8,(ߙg9 ߿߼%g$gp<-gߙxphx% %߂hdBP+`8ߥ߃hdc؟+`0%߆h/d0-ߒp@%  %߆h$dƧ@%  %ߙ$$ ",  $&."-0BP%"-A ߿߆h$dH@%  % , (߿߼߲x߱p߰h%g0%$g@<-g߅hߙgX%$!dƘ % %߆h$dH@; ,$bߢߙ8 $ߢߑh(ߢߓ0g8g(f1Øߦߧ (%`%  %@ߒp,(߿߼ߵߴ߲߳߱߰%g$$ 0% %@%H Pߥ8ߦ@@%  %ߥߦ @%  %ߦߙx % ߒp$@@(% 0% %@%H Pߥߦ@%  %$̢,gp<-gߙxxh`X%% %ߙ@8% 0%g  %ߙp@(% % `0%$,߿x߼p߲h߱`߰X%g 4B@ ܂dCB8b-b +ddc8%8%gܢ <-gQߒdP(%-fR>+@ ߿(bA` %b4B@% bf߼ ߲߳߱߰g0g <-g`ߒfR?%ܥ@%( %(dQBx-0-0+@ ` %߿(߼ ߲߳߱߰g0%@% f10+gP( XH@80b<-0C@g%%%`%߂@ܢ0G}߿X"d@z߿X@(%ߒ@%  %(߿X߼P߷H߶@ߵ8ߴ0߳(߰ %@%߲߱  g`ߕXdH4B@ %%b( 0@ߙ  %f8%  %@ߙ  %@"dA(ߖ@ߙ(%  %@7ߙ(% %6g9?\@B0B@ߖB dUBfOx--+@ޢBb0B@@0%@(%%  %fUdT8ߗ@-+@ߙޅEv%ނS  %fߙ@(% %߿X߼P߷H߶@ߵ8ߴ0߳(߲ ߱߰ g`߼P߷H߶@ߵ8ߴ0߳(߲ ߱߰g`0B@9ܢgC(<-g,%`%cb$߿Cb߆@4cCbߙ4B 8% %dƏ$ ߆@ߙ(% %g9t dƊ8ߙ(% %g98 0%߿߰ߙ %߼߱ g ߼߱߰g ܢC\` B(@<0-d4ى %ܥ@C(`B`$<C$@ ܢ FdCxF-b-b0+gb0 (<@-e@g9 dcb0C `2g4B (<%bܥ@-gP %(@ߙB @ %QdP8-+@߿(߼ ߲߱߰g0ܢC@B(@ߙ @ %fb0B @tg@<-gt(ߔ@f%H%80  %(T߿H0C`P4B %% (dSBxB-r-r+@4 %ߕT@߆@ftdƊ8(%% ߖ@f֎dSBxB-r-r+@%`0%ߙ0%(%g98  %߆@(%dƍ%  %ߙ ߿Hޅ߶8ߵ0ߴ(߳ ߲߰ߙ %߼@߱ gPe% fsr+(% %% fsr+߼@߶8ߵ0ߴ(߳ ߲߱߰gPg0 <ܴ(-8(1gܣ`$|b$$b)%ނ ߕdQB%x-0-0+@ߙ@߿8߼0ߵ(ߴ ߱߰@(%` %߲߳g9 g@"0B@&b0B @ ߿8d( (%%  %@f1߿8߼0ߵ(ߴ ߲߳߱߰g@g (<-0B%S(gp%@(%d@߿(ߙfF(  %@ߙ@ߙ (%  %ߙ@@(%g9  %`߿(b0B @ ߲߳ߙ (%߼ ߱ %߰ g0߼ ߲߳߱߰g0<Y-dBY(%  %gpx<-gl%߇ߙ0PdEd>d$ %ph`XPH@ 8ߢP:0B`߂߂dBOHߢߤߙp$ߢ ( X%$ߢ`g,0BC%,g8gggߢPߢBPxBP-ߢ PP-dMj+@bߢ%B$x-Ѐ-g0+@_߂8dBP X߰ߢ8cߙߤg^gߙg9 db\@bb0B@ߢbߖ@dTB%8- ߢ(ߢ +@ߢ<0b$Cgߙ(% ` %ߔ@@ft0%` %% (dRBx"-Q-Q+@i0%dRBx"-Q-Q+@߹H@0%(%` % fRQ+b@%e  %ek"@ ߹H"~ 0%(%` %R  f1 %g9 %f( 0Bp*0c0B*hdTB08-x$(߂%@ߢx+@=ߢ0*C8c*C%ߤ ߣ("@d%C%*0B0cC%*(>0cw920BW%*$ߢ@3$*4B@*dbc$$C-3#C(+ ߙEܥ`($dB*0B*ߙߥ0%g9? g>߰ޑ"0B"ߣh`#0B @z"CdSxC-b-ߢb+@b0B@u,@b0B@@e߹@f(`(%  %@wߙ@ (% gȖ"0B @Vߢp@x<#ߤ 0BD % ߤ(W%$d$@G("@(%4B"ߢ&F" "DdCxD-b-b +#b`R&B߄@b`ނD/d`,B!~0D%db@0%bb"(߉@dDB@8%xb--&H$ +@"ߣ00B8BC!0 &Rރ߂@bނC`BB\+=f\@ߦXޢVdU8-+@ߙ@ޢB0B @ ߹@f߹@`(%  %@tfs0%`(%  %@lfs#C$@#$"0B?C%"" ߖdSBx-u-u+@fb0C@`(`(%c0c`4Bbߙe0%g9? gȒ"0B?""0B@`ߖ" dUBf5xb-g-+@SߤޢF( (%% f+d(%  %@"0B?4B@fsd0d^^Pdc܅`G`܂ܦ`I/1~0,BF%b@0$%b]dr$%МDdC!8d -d+@>ߢQ"f1xb-$BP3-$g3+@;ߢE`B `ܧ`ߙߦ9~0g96 gߢߗU(f6ܞfxb-g3- % +@Pߢ$Cbb0BߤbbxC-"-"+`$f1be$bfdcz0B($%"C^t@^ߥ߹H 0%  %f14^B^f13+@ߢE\@$ߙ覂\g(%@ %g9A ނߗUdT8-f5+@ߦޅߤ % f+ޅ`B`ܧ`ߦߤ 9~% 0fߤgߤߙ߲BC`Rߤ߅ߑ0%dx % d߳߇@bftdBdCDߕpffYpߓ@fgfsߢfdBbVߢߔ@B%x-Ѐ-gfp+@Qߢߓ@PgffsߢfdBbNCBC!CC!B ߢCxC-`-ߣcc$0c``%+`_߅ߢ %0%d! dDߢ߅ %0%d"< dD߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8g@ޑ"<0b$Czޕߢn"@"B\@og+"C%0R0B@m#"$Ej7zEh/z7:/:00T#2B@W2B0c'0d#J߂`ޤޥ@%@% 0$C>$W:#bߙ`#@@deFG@% $C)W%$#2R@@$ ++#$'zz00c#$#b$#D$pc pB  ++C#@% %f@߂`z0c'z7z/z00#6.00#%#ߢ(E<@E$@2B 2B@2B @7:&0+(+#7:/:00#2B@7/00#&0c0dd#2BA@t߂`#bߢj$ ++b#GE` %% fRߢߙ@FPߢX`(%Gg9t gȖb\@E߰؏$B@@Eܣe@ܣc8ܣ(fddxf--0+BdB܆܆ܨ8d% Df`%  %f`0%(% %% fsp+ %`% Efd܄(0 d %ddcb +0%ߢ߅d! % dDߢ߅0%d"< % dDߢ$c(`d0!0cd%gg0<ܰ-8( Fg@ܢ@%ߙ% f <"4cC$"؎"0c$B"0" C/" 2@ߙfߙ< %>f1 2- 2+@ߙH$ f12+ߙߑf( f % f %@ % f8ߙ $ߙH f1QߙH  %`߿8߼0ߴ(߳ ߲߱߰g@g܂ <-(g@%dߙ( ܄ߒ @% ߑ(@%  0@% (8@% 08߿(߲߱ߙf@߼ ߰ g0g <-g(ߗ%%% %Dߙ @%(x(-ߙ(($d fdh@ @@PB߂ߞ߂$߂g`% $T+@߹߿߾߼߷߶ߵߴ߲߳߱߰g߂0%(%  %߹$  %$ %% (`06$ %% &߹`0%@(% ` %ߥ(ߦ0ߙ@fd( @%XXߧXߙ(%@0% @ %%$$gpx<-gXHߒ@%h8$ܖ%@% %p`X P@(%(@ߙ`0% f$ %@% ߔ@ߙ`0%@(% % $ %@% f(`0%@(%` %%  ($ %@% H%`0%(D8$D `(%` %H@ 0$  %@% x` %`0%@(%%P X$ %@% p` %`0%@(%%` h$ %@% X` %`0%@(%%ߗx p$  %% P$  %% $ %% $ %@% ` %`0%@(%% $ %@% `` %`0%@(%% $  %% h$  %@% ߙ@(%`0%gg$P ߦߧߙ$P(% `0%`j@(%% ` % %%$ ߞ0C0%0BC% %%$ ߗ%@0%(% f 0% %% $%@0%(% f00% %% $%@0%(% f(0% %% $%@0%(%f8 f@0%$ %% ߞ%D @%@ߙ @%(<(>ߙ(d$( fh@@@Qߑ@$% P+@(%߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8g߂@߂ %@% &` %@(%`0%%  % % @(%%gX0<- 8(g|@%ߙ %0% $ߙ(% fP$b߿8߼0߱(߰ g@$g <-gߙhg080%g0%$ %(@HPX @0%,B@ ߙ@$|$|$|߿(߼ ߱߰g` (%  %߿(gP<-gX ߑ@"8(XH0% $gd$$ @ߙ%(% %8 0C`$C$ߤ#߿XߙP 8bb0/ߙ @(%A߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`gX<-g@(ߒ`B0ߞPH@8h %$gd$ߙ$ %8 080/(%% @%@ߙ ߙߙ ߙ % @%ߙH % s ߣBb߿hߙP ߾`߼X߷P߶Hߵ@ߴ8߳0߲(߰ %߱ gp@)g0<-g(ߒ @%%$8 %@߈hߙX$ $e0% (% %@߅h$dH@%  %߿8߼0߲(߱ ߰g@%$g (<$-$g`a %߆hߙ8$dƣ$ %$ 0B@@ ߆h܄ߙ8$dp$ $0B @߆h 0@,#@ ߙ߇h߅h߄hߙd@$d d߅8$ d $0B$߿(߼ ߰g0g@<-H80g\$ߙ@4B g9$$%ߑ8 ߆h %$ dߥߦ % ߆h %$ d$$0B?C%$߿H߼@߱8߰0%gPg<-gל$ߙ@%4B $g9Р$ %߅hߙ@ 0%g9( d$4B@$߿߼߱߰%g gЌ <-,B (g@ ߇h߅h߄hߙd($!d d%ߙ܄%g $ $B -Q%$0B4B $߿(߼ ߱߰g0g <-gh@%ߙ@g9 $ߙ@ %$}g9 ${߿߼߰%g g <-g@%ߙ@g9 $ߙ@ %$]g9 $[߿߼߰%g g$<-g՘4B $ߙ@ (%$Bg9%  ߑd&$ % (- $b-@%$0B4B@`$߅h$ % dH߿߼߱߰%g gP<-gxph`X$\ (ߙ@$4B g9ߒh%$ߕ8$%% fR$%@0%$0 8g(ߕ%(%$"$\$ 4*@q-*@ߙ0/ e(-߹@0% $$4B@$߿߾߼߷߶ߵߴx߳p߲h߱`߰X%gBV (C#`^$ C$nf1W0)0#% e(-ߥ% $($$t g-B.$c<- 0Cg`%$$c$0B@߅h,@ߙ$ dH(,-߿0B-߼߰%g g`<-gtP%߅hߙXgH@%%$!dƘh ` %(`/($0@@,B"@ ߙ߇h߅h߄hߙdհ$d d0 `(%@ -B)0B@ ߆h$dP$ߙ8 (߿h$C%߼`߳X߲P߱H(߰@gp0B@@ ߆h$dƣ$g<-g4ߙ@0%g9%$ %ߙ(%g9%  % ߿߅hߙ@ 0%g9( dXߙg954  %߿߼߱߰%g g<-gД%ߙ@%$g9 $߅hߙ@ 0%g9( dhߙg954  %ߙ %g9% $߿߼߱߰%g gЀ( <-(gA%ߙ@$g9 (%߆hߙ8$ dxߙg954  % $B@ $$B$߿(߼ ߰%g0g0<-g`ߙ@(%$g98( ߑ8 %߆h %$ dLjߥߦ % ߙg954  %߿8߼0߱(߰ %g@g(0<-0B@ 8(g%@ߙg954 ߙ@ %$$g9 ߑ8ߥߦ % ߆h %$ dƧ(߿84B@(߼0߱(߰ %g@gp<-g ߙ@`X%%$$g9xhP %ߙ@8% 0%g % ߙ8@(%` % `0%ߙg954  %߿x߼p߳h߲`߱X߰P%gg`<-P@hXH80g`%@%d߅hߙ謀g9% dǐ@@%ߓߕ(fs"|ߙ(  %@@%% D'@(%`0% %`%  (ߙ(ߙ  %ߙ ߙߥߦg9#  %@ ߇hB߿h߼`ߵXߴP߳H߲@߱8߰0gpߤߥߙx$ dǠ@%@% g`<-P@hXH80g%@%d߅hߙ謀g9% dǨ@@%ߓߕ(fs"|ߙ  %@@%% D'@(%`0% %`%  (ߙߙ  %ߙ ߙߥߦg9#  %@ ߇hB߿h߼`ߵXߴP߳H߲@߱8߰0gpߤߥߙx$ dǠ@%@% gp<-gphߒx%߇h%`d%$ %@%@(%x$ @߇hߙ( dh@(%`0%PXߙ % %߿߼߳x߲p߱h߰`gߤߥd@$@%$  (@߇h@EFߤߥd$@%0 8@߇hHߤߥ$@% d`@ ߙp fߙ@(%PX %$gP@80(XH<-gL0Bߓ%%@ %߆h$dƭ$`% ߔ(% dh@ %@(%`0%`% 0B~@ $(~0B?C@ %`%"-% &B@ߙX % @ %@ %@(%`%`0% ߿X߼PߴH߱0߰(EF@ %`%߲8߳@ g`߿X߼PߴH߳@߲8߱0߰(g`g<-gߓ(%߄h`%dH ߔh g0߂ߕ8(fߧߥ ߦ(߹ ߤ@@%%߿߾߼߷߶ߵߴ߲߳߱߰g߲8@߶0$#Cb`%  %ߙ@0%`8%g`gP %@(%@ H@ߧߧ`ߨhߥPߦX$@ߙfߗx@% $`% DߦPߧX@ %`(%%p x@ ߦ`8Ѐ-ߧhߙ f$PA$߿&fRߧg p<-g P Hߓ(%߄h`%dǸ x h X @ 8$ `g0ߑ%  %`0%@(% % ߙpfF$ %$( ߄h`%d % %@(%`0% %0 8D`% dh %@(%`0% %@ H߄h`% d %@(%`0% %P XB@ %E % FBHB@`%߄h d %@(%`0% %` hBH %E % F߄h`%d ߕx %@(%`0% %x pE$ %  %߄h`% d %@(%`0% % E$ %  %߄h`% d %`0%@(% % Bp %E % F߄h`% d %`0%@(% % Bh %E % F߄h`% d %@(%`0% % BP %E % FBXB@߄h`% d %@(%`0% % BX %E % FB`B@߄h`% d %@(%`0% % B` %E % FB@`%߄h d %@(%`0% % E$ %  %BxB@߄h`% d %@(%`0% % Bx %E % FB@`%߄h d  %`0% % @(%E$ %  %߄h`% dH %`0% % @(%ߧ@$|$|$|߿ x߼ p߶ hߵ `ߴ X߳ P߲ H߱ @߰ 8g ߦߙ$ (%ߙ@0%`(% % Aߐ@@$߅hFfd(%  %@߅hF(d0%  %@߅hF d8%  %@߿ x䎂$㮂gP(<ܐ-XH@80 gx$߿X߼PߴH߳@߲8߱0߰(g`ܲ@%܆0B@%ܣb0B@$cb0+C+@%܂XS`fhߙXfEh  %(BܱXQߙXߔ(%  %` %ߓx%@0%`8%`% @$% fDh$%@0%`8%`% @ߙX%, @g@<-g߂h(dB0E-B8\-0H%@%q$C%q%߿H߼@߱8߰0gPq4B@pߙ(0Bp %ߙ$߿H߼@߱8frf0߰0`(%@ %dg9,X gP߅ߙ %,B@$ꐂq(4B q$C$4BϮ(ߙ( %ߙ<`(%@ %g9+4 d?xxp$C%pp4B pߙ(4Bp %ߙ<`4ƀ`(%@ %frfg9,X 18@dCC&b+q4Bp$0B?C%p($C$߅hߙXd %@$߅hߙXd  %@$߅hߙXd  %@$߅hߙXd@  %@%($D$C%$qq4B$g <-gtߙ(ܐ( dh߿(ߙ( %߼ ߰`0%@(% g0ܢg0WR<-2Bxܵܰg$%%@2ߙ $ߙ@(%`0% %( 0b (%Y ` %2B @ߙ $ߙ@(%`0% %8 @b%Y ` %"@B@2B@@ߙ $ߙ@(%`0% %H P"@ߙ(EF  %"pB@2B@ߙ $ߙ@(%`0% %X `"pߙ(EF  %"HB@2B@ߙ $ ߙ@(%`0% %h p"Hߙ(EF  %"PB@2B@ߙ $ ߙ@(%`0% %x "Pߙ(EF  %"XB@2B@ߙ $ ߙ@(%`0% % "Xߙ(EF  %"`B@2B@ߙ $ ߙ@(%`0% % "`ߙ(EF  %"hB@2B @ߙ $ ߙ@(%`0% % "hߙ(EF  %"xB@2B@@ߙ $ߙ@(%`0% % "xߙ(EF  %"@2B@ߙ $ߙ@(%`0% % %ߙ0%  %"@<B$@ߙ $ߙ@(%`0% % %ߙ0%  %"@<B$@ߙ $ߙ@(%`0% % %ߙ0%  %"@<B$@ߙ $ߙ@(%`0% % %ߙ0%  %"B@<B$@ߙ $ߙ@(%`0% % b%Y0% ` %"(B@<B$@ߙ $ߙ@(%`0% %  b%(Y$ ` %" B@<@B$@ߙ $ߙ@(%`0% %( 0b% Y0% ` %"0B@<B$@ߙ $ߙ@(%`0% %8 @b%0Y0% ` %"0B@<B$@ߙ $ߙ@(%`0% %H P%ߙ0%0  %"8B@(<B$@$ߙ$ ߞ(ߙ@(%`0% %X `68ߙ0 % f-+@  %ނEF% f+ߙ  %0B@;>ߙ $ߙ@(%`0% %h pߙ0$  %"@ߙ$ 0߆hߙ@8%dH$ ghߙ(@(%`0% %x ߞ(%$"0B@ %%-E  F(&+@ߙ  %>0B@&~ߙ (%  %@@(%ߙgh$ @%8% 0%  %@~ߙ $ ߙ@(%`0% % ߙ(  %ߙ(@(%`0% % ~0B@ߙ $!ߙ`0%@(% % ߙ0$  %ߙ `8%f W(%ߙ4   %ߙ  %0B@_ߙ $ߙ$" @%ߙ@(%`0% % ߙ0$ % $"Bd^B-ߢ+@@ߙBdTB8-߂ނB CdVxC--ߢ+@fߢ+@g0B@ބ܂@߹ 0% (%0B@ބU+@y `8% 0% (%f  %1 <<| dBB$+߿߾߼߷߶ߵߴ߲߳߱߰xgB$@O<ߙ $ߙ@(%`0% % ߙ0$  %"(WdVghgj߂(׸-+@/ߞކ ߤ:%d>X` hނdUB-ߢ+@ߤަ%d.X `h@%ߢ߹@0% % fPg hC-ffߙ  %<B$@.<"B@*<ߙ$ ߗ(ߙ@(%`0% % "ߙ0E % ߖ("UdT-+@ %ބ f %@(%`0%% +ߙ  %<B$@6%f40f5%D$cdBU`*ߙ $ߙ@(%`0% % %(%C`$dBUߙ0 %ߖXߗ( ߞ(ނ@ %  %@(%`0%%  ffߙ  %"@< B$@ߙ $ߙ@(%`0% %( 0%ߙ0%  %"B@<@< B$@<@ߙ $ߙ@(%`0% %8 @b%Y0% ` %<@B$@Bߙ$ ߓ(ߙ@(%`0% %P Hߙ0$  %߆h$ dƢ$  %`%X `"0B@ ߆h$ dX$  %`%h p"0B@ ߆h$ dh$  %`%h p"0B@@ ߙ߆h$ dx$  %`%h pߙ  %0Bg0<-gP߂8$dB 8C$ C߂߂dBߙ@gg9  (߿8߼0g@߂dB8dB&gܳ b$C$(ܣ<-8d@g@gH߃80dcP߃dcXc0c%`% 0c`0B %߿߾߼߷߶ߵߴ߲߳߱߰g0B @%ߙf%hg9.  %@%b@ߢ(@%"ߞTdRg8߂@8dB `(T-fT+@`@x` g`pxh ߿VQ2b0C `0C@`+0C@`cd$`#0B@% (%@b@p$(% @b@fR ߙߥD߹ fR@0%f( %@ߥD%ܤ(<y-dcy@g9  @(%%gP<-gߙ(hܕh%`%%(%$gxpX% %߂8dBB@ $ BB0C`!#`߅@ߙgdhf @@%߿߾߼߷߶ߵߴx߳p߲h߰X %߱`g<4cC$@$a{f0ߗ0B@X`8@hޥߙ8 g8߂(1gPgH߂ g8-(+@.h߹  %ߦߤ߹ $(%H PߢP@ߢH@aAߥP߆h߅hߙp8%dȈd@f8 $ߙ ߤhߤ8ߙ h߿ߦXߧ`ߤ(ߙ f+B0B@@$$߲8ߙgX8%@0%  %@@%ߢhgPdRBx-P-P+@ߙB@(%fR %`%PX`hp x@fR@%hߙx@0% (%ߙB@߂dB1g"ߗ@-߂h%dB߂hdB+@[߿B0B@$/bgXߙ@0%gP(% % ߢ@ߥ`%  %@B$B0B @8ߥߦߙ8%$gP$ $߂@C$ bLf@JߙߥHߦPߙX `@ %@fh g@ߢgXXߢ %`%hpx `@ @&1fߙ  %ߙ( %+ ߙ`@ %`(%g8g4gH @ߢHߢHߢPߢHߥ8ߦ@ߙ@f(ߢP 7ߙg fh@߿g0܂h<-ghg@ ߂8xdB0$%HPXC>($ C>߂߂dB8߂8dB`@ܢdCC&b+@~߇@ߙ߂gd` hߤ`)@%ߙ0߇(<$(>d ߖ(ߢ`ߙ0E % ߕ(ߢ`RdQ2-2+@E%4fh f1 %@(%`0%%p x(߂dB8dB&ߤh2ߙ0߇(<$(>d ߕhߢhߙ0E % ߗߢhߖ(RdQ2-gpf@2+@0%4ނ@އIHdh$ %% f1 %@(%`0%% 0B袂ߙ  %ߐ% ߤ`% ߤh߿߾߼߷߶ߵߴ߲߱߰x`%߳g$gpx<-ghߖߙ@8ܑ%%$Hp`XP%( @0%C,b@8%dc:8/8%ߙx (%  %@%,B@ (beߙP p0B@fpߙ@@0% 8%(%g9  %@%A ߙߙ @ %߆h߅hߙp@8%dƥ(d@ f8ߙ  %@ߙ<dB/c߂@0%g (% % @0@% ߙ0E % ߗ %SdR߂߂S-S+@B % h 8%0% fR %%T% @%S+%  %$dBB-+T$ߙ %߾߼x߷p߶hߵ`ߴX߳P߱@߰8@%߲HggP<-g(hߒ@fR$$@%p`Xx% %߳`V*bP@߆h ߙߴ߄h d %+$ $#*`--@D$CX߆hߓ8ߑ$d`% f154 % % ߔh$ߞ($B$ߢߕߢfHg g%  %(%`8%@0%%  %@G$$$B#$ce (g!$ g$ g $f $':1:.1"%`%d$ߥߦߙ8 ߙg954  %߿߾߼߷߶ߵߴx߳p߲h߱`߰X%gߒhߑfE % $ߥߦߙ8 $ % fEߙ(%@%  %ߥ ߦ(`%  %  %%d(-d +$0+@ dd$B00@0g <-g ߙ$ %( %ߤߥ$ ߿($ή߿(߼ ߰g0df$<?`d$g <-gߙ%ܲ%$ (  %"R/@$߿(߼ ߲߱߰g0g<-g߇h߅h߄hߙd$dP dpg <-(g%%%ߙ(% $dEf ߅hdǠߙ $ Ef)߅hdǠߙ $  0%ߑ@8%f1 %$  f|F($$ flF,$ ftF0$0 fdF88%$ f f߅hߙdɀ fߙ(@ %$ $ %%$(-dB0!D%߿(߼ ߰@ % %߲߱$$ g0g0 <%ܤ-8(gd$=%ܥ$_C\(C`` $.CM(C/`$-C$$B0B,B @$,C`G$C$$ߙ@߿8߼0 (% %߱(߰ g9 g@(C{`$~$`C$,B@$$$"dB""dB"߿8߼0߱(߰ g@C$,B@$ߙdd @%f0%% $@$,B@$dd%$$,B@$ߙdd @%f$$ %$B0C,c`߃h0BdcPb-B\-@$߃hxdc0C-Hf"xC-F߇h0#ߙx$d08- @d$$$$ (@ $$$$$ ,B@M$߆hߙ$dɈ$ % @R^$< yX-ek0%$ dXJ$yp$B%,E$eh<>d-BK-@8%fhdɐ`(% d88%fhdɰ8%fh`(%d d88%fhd8%fhd08%fhd`g<-gXߙ%%$0$ ( %@ߙ$$@% dV@@%ߙP @ %ߙ<(% % 7 A @%ߙ% %P#Eߙߙ(% @ %@߳@ߙ   %ߙ4fbC+@ ߙ$ߙ  %ߙH % %W߿(fp(% $@>@%ߙ`0%@(%  %bߙ ߙ ߙ  % Pߙ `(%@ % #ߙH @ %  %߅hߙPS-dʈ@ % @ ߙP߉$ ߙXP%@%8%`0% @(%ߙ `(%@ % @%ߙH @ %ߙ % $ߙH$`0%@(%  %ߙ  %@ %ߙ1 1"(߿(߾ ߼߷߶ߵߴ߲߳߰ %߱g0$$g0<-ܐg( ߓߔ8% `%߿8߼0ߴ(߳ ߲߱߰g@  %% fߙH (ߙH % @%R$D $<$y-, @&dcbh < > dBD-BC-@bhdB0bhdBʠbhdBʨbhdBbhdBʰbhdBʸbhdBbhdBbhdBbhdBbhdBʘgP<-gߙ@Hg@ %(%g9@8Xߐ@ %f,C`  (%߿X8B߼P߲H߱@߰8,Bg`@ %% g<-gt@H08 ߒ@h$d$g@fRgpߥ@ %@%p tg0ߥgP@ %@%pߵߗhߖ@P T߂xPߴh߾8%%(ff2M."@>$-B\-@$0b*ߦ`b(ߤߢxߣXC ++b+@Qߥߤ%pt ߥߤ%PTh8pt ߵPTߴh߾8ゃ<<>>ߦ`ߤ߹(8%(% hA$߿߾߼߷߶ߵߴ߲߳߱߰g$B $ߢ @$$"Q+.$"$.B.s`$Q+@$g0<-0$(8g%b@ߙ`0%ߧ 1P$+2߿88B߼0߰(g@$g܂@8<ܔ-( H0gX@%Y  0&<>-.`,CdB`&&ߓ %`% <$ߙP$$(%> `% < %@%ߙ  %߿H"߼@Rߴ8߳0߲(߱ %߰gP%%g<-g,@%ߙ% ߇@@%ߙ0߇$ dDdC d -d+@߿edc0B߼߰ %߱g ܂gP@<UB(-XH80( g@ ߇h߅h߄hߙd$\d d܂%C$`S-Q *߿X6(ߥBY(ߦ5/  %@-fb-s-c$` D$##C BY0   %B$BB߿X߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`܃%1gP<-XH@80( g%߆h߿X߷H߶@ߵ8ߴ0߳(߲ ߱߰ߙ߼P8%dƯ$@ g`ߙ% % %%@%߂h$UT߂hVPߙ(%  %@ߙ %(% &RW@%߂C-*RV@ߕ$ߙ ߆h߿X߼P߷Hߴ0߲ ߰@% 8%߶@߱` %%߳(ߵ8d$@ g`  %߆h߿X߼P߷Hߴ0߲ ߱߰@%` %߶@߳(%ߵ8@8%d$@ g`g0<-$(8%gT(%$$8%߆hd߿8ߙ %߼0߰($@ g@܆߿8ߙ %߼0߰(( g@@ߙ߆h8%dƯg ߆hߙ@ %@8%dƧ  $@߿8߼0%߰(g@g <-ghߙ08%%0%(% %@߿(ߙ@0% (%  %@ ߙ@߿(߼ @0% (%߲߱ %߰g9x g0߿(߼ ߲߱߰%g0g <-gߙ(%% %C$b ߙ$߿(߼ ߲߳߱߰g0$/  %@P/dF,@ߙ(%  %ߙ$(%  %@ߙ`0%(%  %߿(g%<-0Cg` %߇hd 0C`߈h߈he(0C`߉h߉he)80B@ߊhߊheJ@߆hߙdp $b@db߿߼g ߇hdee)eJ߂hdBgp<-gߙXP% %xh`X% %ߙ %0% ߑ ߙ % $ߙ % $߂ߙI`@%0%@(%8% fߙ % @% %  % % f  % f߿x߼p߳h߱X߰P#߲`gg<-g ߙ8%@%߆h$ dH`@$%߿߼g ߆h$ dX$gP<-g(ߓ8 b?XH@80%%@C%߄hߙ(% d`@$$b?ߙ$/  %@W߅h"UQ/dC,c`3߆h$߿X߼P߷H߶@ߵ8ߴ0߳(߲ ߱߰g`b?C<fsߖ g$&0% (%%  %@ߙ@ %$`0% (%A2@ %ߙ BW&0%#$Cߙ$/ߙ$8 @%dƥ g`(%ߙ<I@ %$ d@@ %$ߙ ,C`߿XQRS,P(dpfs%(@$<y-dcy@g9 0%%g<-gTߙ`% %@0%*@ߙ@$ ߿ߙ@߿߼ (% %߱߰g9 g ߼߱%߰g  0C `4B P$BPgМ <-xg"-dߓ(%-+@߿(߼ ߲߳߱߰g00B@C8` b\$B0B@b\E@`% @ %fdxD-b-b +d0d܄8\$\dcg0( 8<-g~t0Bߔ%ܥ% %(dRBx"-Q-Q+@ ` %߿8ߴ(߲߱ߙ(%߼0߰߳  g@E% fRQ+<y-%dc}gܦܧ܄Ey`@% g $dxg-C-C8+GdB$(<$(><@-e}t`-fFfFc Cg`<-g|ߑߙ"x܂%g0܂ % 1ߙx$f g2ߤx#߿ߙP ߼߱߰,Bgg <-g|Lߙ% %(% %@ ߙ@@0%@(%` % @%A ߙH  %߿(߼ ߲߳߱߰g0<dB+@6g@<-g{ߙ( %% %0%(%80H ߳`ߴ."@ <ߙH ` %߿H߼@ߴ8߳0߲(߱ ߰gP>8Q-$8ߙH f<>8P-T38g(%܄<܂4czC$0<-b+8gz@ߙ8 $@ %߿8$C<>$C߼0߰( -ߢߢߢg@g<-gz߅hߙ%< dp$ A ߙ$+߿߼߲߱߰gg @ % @%@ ߙ%ߙ   %@߿߼$ g@%ߣ ߢbߣ8ߢbߙ ߆(ߙ@%g(%  %@%߆(ߙ@%g (%߿蜂E+`$g<-gx߇h߅h߄hߙdd dEg%܄<܂4czC$<-b+gx|@%ߙ8 $@ %"߿$C<> -߼߱߰g g%܄<܂4czC$<-b+gw@%ߙ8 $@ %"߿$C<> -߼߱߰g g%܄<܂4czC$ <-b+(gwD@ߙ8 $@ %߿($C<>8 -ߢ߼ ߢ߰g0g%܄<܂4czC$ <-b+(gv@ߙ8 $@ %߿($C<>8 -ߢ߼ ߢ߰g0g<-0%$ e gu`%$@C$C$߿߼g $ߥd+@ 0-3ߙ ߿$+@-3ߙ%$܂YH ܂gY@8% g܂gY8 gg܂08( C<-$b gt߇h߅h߄hߙd$ dP dߙ% % %<b$Cߙ@g9  `3߿80"R+@$"@ߙ%@ %$ (%@@%"@ -%+@#+3ߙ@0%  %ߙ(@0%(%  %0"$C%""$C<>-#߿8߼0ߵ(ߴ ߲߳߱߰g@@-3ߙgܓ b<-+(@gsDߙ@g9  ߙ% %% %<b$Cߙ@ B+@&B<߿(>p-q߼ ߲߳߱߰g0g܂08( C<-$grb ߇h߅h߄hߙd$dP dˀߙX%܄%$g ߿8ߙp (%߼0߱( %߰ @0% g@$0BC+@$g<-gq߇h߅h߄hߙd$dP d˨$$(<܂ (>)8E-B܃%,c` 8%܃e<@-eqP @0%(%g<-gqߙ ߿8B߼,Bgg<-gpߙ @$$߿߼ggܙ %(% gg<-gp|߃܂c@%(cߙH` dEh߄h 0% dH߿߼g ܂@߄hP%FG d߿܂Y( ܂Y  ܂Y (%g%܄<܂4czC$<-b+go@%ߙ8 $@ %"߿$C<> -߼߱߰g g(%܄<܂4czC$0<-b+8go(@ߙ8 $@ %߿8$C<>$C߼0߰( -ߢߢߢg@g%܄<܂4czC$<-b+gnp@%ߙ8 $@ %"߿$C<> -߼߱߰g g <%܄-(+gmߙ8 ߙ( %$0 (%߿(߼ ߲߳߱߰g0(>8Q-Dܓ(Q- ߙHfR"+@<ߙH  ` %s%g@<-glߙ%$% % @ ߿ߴ߲߳߰ߙ %߼߱@(% gߒhfB߂hdB߂hdB߂߂B@$߂hdB $dc}-pdC߄hdc}-dddCdB߄hdcdBߙ}-d ]-<d@fd߂ T@1@%ߙ($(%@ % dQ߂8ߙdBfD 0f8ߙ(@%8%fF@(% ` %@@%ߥߙ00% ` %@ @%%߿߼ߴ߲߳߱߰gߙH  % %$g!<-gj!ߗ"ܞ!g8t!!!ߓ%d0<܄xܣ>!D-% %(%`%"!!h!X `ߙ (% @ %@߈p (ߙxg % H%$ @%@@ %0B@"ߙPߙg@ %$ `@%g 0% (%A8@ %ߙ"@2S T߆h߅hߤߙpfRh@P%H%`@%@8%dƥ d@$B  fH(g 0% (%@ߙߣ "bg#x`C-xp߹dB % pPX`ߣ!b߿"ߙP 0B@8`߆hߤߙp`8%dƣ (%BB 0B@0C`0Bߙ $@%ߙ( `(%,C`.ߙ `߆h"@'IHߤߙpdhd( (%@  ߙ (%@%,B@ ߙߙ$ ` %@ߙ $8%`(%  %@#EDCF߅pxd/$(%gp ߙ(R$H(%g( @% 2ߙp @ %ߙ0g `(%@f"9 H@S@ %t#O$߾"߼!߷!߶!ߵ!ߴ!߳!߲!߱!߰!g"g`<-gfPߒhhXH@fR߄hߙ(d@% ߓ %`0%`% @(%ߥߦߙ  %$@0%`%  %߿h߼`߳X߲P߰@ %߱Hgp@%gpx<-@8ph`XPHgf %%C`?߂(<>dߞd-%%+@'߹ޗ  %ߤ@(%`0%%  (ߙ$* % @%@ߧ߹0%(%  %f.B@dBg C-VfR$ ߙ0߇g0$@(% ` % %%<B$@ߙ0% $߅0ߙff ߇Мߙ0$ dR%RdS%b- *^5ghf4-+@ߙޗߥ$  %@ߧ߹0%(%  %@f߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8gff%gpx<-Hph`XP@8gc|% 7( 4<>d%%-%+@$ߙߞ(ߖfW+@%  % %`0%% @(%8%@0%(%`% @ %@f߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8gޤ $*@f߅8ߙg fD߿g@<-gb4ߙ((% %H80 %%% ߔ@@ %`0%@(%% ߣߣ @(ߙD`(%$  0%@(%dB,B@߿H#$/b ߼@ 0%@ %% @(߿H߼@ߴ8߳0߲(߱ ߰gPgP<-XH@ga #܃$b$$b%߄hߙ( dHߦߧߙx`(% @ %@߿Xߙp0B4B $ ߙ0Ef  % ߿X߼P߱H߰@g`gP<X-%ph`xg`L %% %ߙ( ߙ@(%`0%` % "$B0C,c`f߃h0Bdcb-B\-@ߙgP@(% 8%0% fh@ߙ0&Rߕ@@(%` %<ߗ$> f'T+@(߿߾߷߶ߵߴx߲h߱`߰Xߙ` %߼߳p g"  %% ^0%@8%(% %% fT+fߙ@(% % g ߙ@(%e-X$߼` %߳p0@(% ggp<-g\ߙP8g%H0(%ܐ% 8%0%d`xhX@ 69 !$ߕ@ߗ$f'䟢(B+@!(%%  %@@8%V+@<># 8fp-fe% ` %fRg0  %ߙ(`0%@(%  %߿x߼p߷h߶`ߵXߴP߳H߲@߱8߰0ggp<-PH܂xph`Xg[\%`%S# `{$-DCw`tb߂XߖHdf0$B@A`%2@ P(%@$" )%ߙ( d߇hߙ@ %`(%g@%$d (0 @ߙH$1ߢ  %# `$C,c` ߿($ ߄XA߿߼߶xߵpߴh߳`߲X߱P߰HgDD % %0 ( 0# `$C2@fR(S"dB""$B",c`߿($ ߤA߿߼$g8<-gYߙ%ܤH@0( % ߅hߙ$dx@ % @%@ߓH`&4,(ߢ(ߕ@fߗP pxggpf,i(%%ߙPfD %@br@߂X߃E"CC$C(ߙ $߃PbY( ߂P߅XD<8% 4߃h$dcH߄hߙ08@P߃h߂hd̀dcdBH X@@(%߅hdhߕ% $@%$B.B߅h$% d̐@%.B@g`ߞgpߖߗ@ߧߥ0ߦ8% @ %@)ߩߙ8 @ %<&1x|ߢxߒ@fphgg`fR, e(%q% %%p x$߲pbxfR&% D@b$ߨߧHߦ@ߤ`ߥh% ߤ`ߥh$ % gߩߦPߧX@ %`(%@%% @ߢߤߥ% $ ߥpߦx߄XߙH $ߢ@ߧߙH  %@ %$$ߦ߄X߹ @ %ߧ߂XB8@߆h߅hߙ@8%d̠g9 dߧ$ %@%` h߰`@.h@$C-$C8߆h߿H߾@߼8߷0߶(ߵ ߴ߲߳߱߰gP$b(߆hbߙXE  %@)@b@B 0B@ߤߙ (%fc&1ߐX߆hߙp(%f8 dƪdߙ f8$߅hߙ@8%d̨d@g9 @ %%g`<-xph`XPHgSIdx-g ߖߗߞ% %P-%g@P+@ $b$B>0BS.$  (ߥߦߙ ߤߥߤ% @0%ߦ ߧ((%% $`(% `($߿߾߼߷߶xߵpߴh߳`߲X߰H %߱Pgߦ %  %@쏢$Q!fR%<y-dcRtg%y0%@(% gg (<,-$gRLC %$Q߿(߼ ߱߰g0߆h߿(߱߰܄ߙ8$߼ dƣ$ g0 -B.0B@ߙp((BP@ ߆h߆h߿(߼ ߱߰$dƣ$ g0$d̸$ Ϯ(߆h$dH$ Ʈ(g<-gQ$߂0B,@d(߂hܖ8߂hߗXdB߂@%dB\d8 ނ@ ߙ(ߢ(fTfߢ0ߣBb߿ߙP $(%gߕ( ޞ%4dhg$ߓ@ Hg@@(%`0% %`% ߢ8% dD  %`0%@(%`% @ %E`% F߂h% dDp %@(%`0%`% ߄hߙ($df  %@(%`0%`% ߥߦߙ  %߂h% dDp %@(%`0%`%p x%  %`0%@(%`%h `$Pߢ %@0%$`% Xgߙ($(%@ %ޕ ߙ@ % ߑg,Bd@.ߙ(g$(% ` %ߙ @ %߆hߨ߹ 8d$L ` %$`(% %  %@&ߙ @ %@(%dF %  %@ߙ @ %߅8$0#d= %  %@ ߨߤ߹ `8%@0% $0ߥ$ %  %A@?ߢ0$;50%(% %  %@$2sS0#S#b+ߢ(߅8 % % d=A#߾߼߷߶ߵߴ߲߳߱߰gg!<-gL߂!% !! ܒBP ߂%%B@ߙ$'B $@0%BC,b@8%dc:8/8%ߙx(% @ %@%,B@  Bb!ߙP eߙ0  %fB80fBp(bfu- g8߂hߗdB ߂h@dB% +@$/޳cbߙߙp8 ` %8b ߙgg`(% % Qߙ  %@S2b@ߙ %ߙ@(%`0% %H Pߙ(  %@2s`ߙ $ߙ@(%`0% %X `ߙ(  % (ߙ8%(%  %ߙ  %f%ߙ $ߙ@(%`0% %h p߆hߙ(d$ %$x ߙ ߂߆h߅h0ߙp`8%dd@ &fB@@ "@'IHߙdh `(%߆hdƢؒ"0C@`4B@ߙ8 (%g@ "@eߙߙ0fq߇(<$(>  %r2-2+@ߙ"Df1 dh2+ߙ ` %0@ߙ  %ߙ  %)%߾!߼!߷!߶ ߵ ߳ ߲ ߱ ߰ %ߴ g! g<-gHp߂pB,%`h@ 8ߣpߤcf߿ߙP gߙ($(%@ % @߂g߂h(dB@߂@%0dUߒPߥ$@%  %$" "ߙH ߤߙH  %ߙ ߤߙ`߂ (% % ߣp@ߙ8ߢ0@$$0ߥ$ g@g$ί ߙH$`0%ߢ$ g<%gɯ ߙ$  % H`0%$g,% ߦߥߤ8ߙ08 gߙ$  % x`0%$g4% ߥߦߤ8ߙ88 g `0%$g$% `0%$ gH% P`0% %$% X`0% %$% @%$<<C$g<4c`0%$ %%8C$ B%`0%$ %% @%ߤ@ߙ($(% @%ߢ 8ߢH2sߢxr%ߢЯߢP0BߢX<4B8"$3%@@\$xC$gCߢ߆hߪߙg$ dg$dH$  %H`Pg$|@eߢ$C`@$ߣdBb*@Vߢ@߲@%߂h߲dBH߂hdBXP߂hdB`Xߙg$  %ߞ $  %%@% @%߂(ߤH@% ߤ@0%ߥgߙ`8%H%@@%@8 ߣ@߳<r/>Q* }&2#<>q*@v %$ %q/q- ߲@l߷ߤPߙ( ߖxߤߥ@0%`8%%( 0@ߙ( ߤXߤߥ@0%`8%%  @߄hߙ(dp ߞߤ @(%`0%% @߄hߥߢߙH- 0%`8%g@HP Xߙߙ( d̀ߤ @(%`0%% @ߙ߄hߙ( d͘ߤߥ@0%`8%% @tߙ,B@p$ߙp$ ߙ0EggHP ߢ@_ߙ]ߤߙ@g^ $߲$fQ"$\(C8`(C0`$C0d,<߄h0cd-c|-`$LC$xCCߢ(ߙߤ $,B@ߤOߙ $,B@Jr$ߢfSS+@ߙ`(%  %@f$߳ߙ@@0%(%  %@_ߢ-`"/@%4Bѯ4Bߢ@ߙg]4B4B 4B`4B@4BQ+@ ߙߤ  (%@(ߥߙ@@0%  %@/ߢ"/0B@+x߅hߥߣ(/e8+`hp C-h`(%ߤh߹`g`e/@0%g @ߙ8 @ %gߢ"/ ߙX (%  %Aʯ /%ߥ$@%  %3ů@ߥ䏱߾߼߷߶ߵߴ߲߳߱߰gg <-,(g>0%@*ߙH $@%,B@߅h(ߙ`  %@%ߙ8$d  %@$c$ؒ"C$dC$.C$$,C`$@߿(ߙX  %@%߿(߼ ߱%߰g0ߙ($  %$飢ߙ($  %ߙ@$g  %ߓg <-g<ߑߙ(%$"ܐ@%%g(%ߔ ff%$ % %$ % ߙg $ %߂g Dߙ` @%ߙh@0%(%  %@Bߖ$ %% gߙ@(%`0% % $%  %`P(D-$֐pd8(% %*%$2+dF4(+$ 2E$$ߙ hd ld `0%P%B(%Y(@ % @%$ dB$ߙ "bWߙP dB:8/de+%@-3ߙ  %+@-3ߙݏ4BB`P(0%(%@ %%bdX߂8fcdBxߙHgHp` %@`hP @H ߙ0/ ` %@Hb/C/g@(%@ %% `0%ߙ`@(% ` %%߾߼߶ߵߴ߲߳߱%߰gg@<-g9XhߐxߒpH%@%8%0%$ %@%f"8 ߃`H%@%8%0%$ %@% b߃b"(@L$#(|b$$|b ߓ(" 0B@@`%<C%ߓ(`% $ߙ($(%f8@%`% ߙ(f$(% B$C%BX`hpޢȎ$ޢ$@$"0B`COߙ g`@%ߢ`<4clC-,B$(z0c@b%00cC%߅hߙ8%g` d@@< C%؎< C$@4B 2B@#0c@`<#(0c@`>߂fRߕ`T-T+@`%D fRߤ@(%`0%% T+"~0B"<0B4d$b%B@$߄h`% d߄ߙ`@(%`0% x<C%$8߆hBߙhGHdΨ$ $f @< C$@"0B@@߄h" 0B@߄h߅hߙ08%$ dθ<,C4߅hD$ߙ0C%8%$d <,C$D$C%$@#d$$#d-+$D$C%4b$$b,ߙ8 %@ߙ @%$B@yߙ8g`$ߙ0%(% @ %Aߙ BTߙȏ`0B@$C$ؒ<0c8c4D$C%؎@ߙ`߄hߙp(% d@b@%ߙ$g` @ %@%`*R2ߙ   %<:R4cC$R%ߙ`  %"(0B@y߅hߙ<$d d@ %A>"(0B@kߙ ߐhfΐR#ߙ  #߆h߅hߤߙp@@%8%dƣ d@ߙ ߄߿߅hߙ d@(%,B@!߆`ߙ ߄ <ߙ (Dߙd $,B<$4Bd$C%%ߙ $A-",@ߙ"8@ ߙ(߆h߅hߤߙpd dߙ($(%g g`߂hߙ@0%g$< Pߙ $,ߙ $@ߙ %ߙ0%@(% $%-߆ߙ ߄ pGߙ0% $pb 0B@ߙe<  @ %@Iߙ4Bg @7ߣߙ R#AhߐhnfX߄h`%d( ߒ߄@(%`0%@%h p߄h`% d0߄@(%`0%@%X `߄h`% d@߄@(%`0%@%H P߅h߈p߇߆xߙ dP0d0b4B0d0d4B0d4B0d4B0d4B0d< D%0d4B0c@`4B@(0c`0B@g`ߙ8%@0% % @߅h8@߆h߅hߙpdψd f8d 0@5ߙH$D$ % b ߄h`%dH @%.B@'߄ߙfX ߕߞ@%g`ggߥߦ8%% @ %@ ߨߤߥ8%% $/@ߦߙ0$ @ %߄ߙ@ (%ߙ8 @ %$pB(0BpCH߂%$߹ %V( ߙ< @(% @ %A@%ߙ R#@ $$B"(0B@$C%fW$"(0B@<C$@ߙ ߄@ ߙ߅h d߄ߙ8%$ @(%"(0B@0߂hߕdBϸ("خ0TdRT-fT+@`%D fR8%@(%`0% %% T+߄hߙd@dp ߾`@V@%߂hdWπߙX  %@@%ߙXD (%@ߙXߙߦE8%  %@ߙXߢ`ߙ D@%ߙ  %@7$ߙ8$@%4 0%@(% %@4ߙH $ߙ R0B @$B߅hߙdp<  Aߙ $ߙ < AB(0B@$ ߥ߄ߙ fXߦ`@(%C b<4Bb<ߧhߙ ߄ߥ2@@(%ߙg`߅hd @_@%ߤhߣ`$ ` -BE$B,B@dc߅h %d ߅ߙ$fg ߤhߙH @%2@ ߅hߞd%  %߄ߙ8%$ @(%@$C@%߅h %% d߆߄ߙ @(%@$C@%2 ߙ ߅hߖ %% d@ %$<C%߆ߙ ߅@ߙ $C@%  %2$߅h %% dߙ@ %8%0% (%@ %$ݮ"ߕhTdRgߞT-fHgT+@`%D $ߦߙ$ fߤ$8%(%%` h@ߥfR"(0B@߂h'ߒ߇h߄d@% 0%߉h߈h߇p߆ߙP%e)e @(%߂hߔdB(߂h%dB͸߄0%@% $g8 $0d@<@%$-B0D@ߓh0c`3߅h0B @f߄ߙ8%0% `(%$C@%@ $B$-C0cߠC%@ߙ` %$ g`߳@ %@%@#ߙ( g`$@%,B@ @ %އHDߙߓhdg8 fs͠߆hވ84ߙdƥ$ g``%$|$-B0B@@@$B@߳(ߓhfsЏ8@ߙD %ޞH ߆h߅hߨ ߤߙp@P%H%`8%d d@$&f+@vߤߙ (%"(0B@߆@߅ߙP ߄߆߅ߙ fߙ ߄@"(0B@߅ߙ ߄<C%<@%D$@"8@ <@C$@j߇h߇hd߆h߅hߤߙpd  d< C$@"8@ <@C$@X߇h߇hd߆h߅hߤߙpdP d0h%߿߾߼߷߶ߵߴ߳߱p߰h@%߲xgW%ffsͰ$K%ߙ($@(%g ߢ ߙ0߂8@(%dBg @]@%\$-C4cCߣC%Ė%@u0Dd %dzdc(C߳$BLP@%ddߐh$ f0ߐhfxg$<-@g,(ܰ g#d@Hߙ(% %(% %@߄h8ߐ(% dЀb@oBB@߄h%dЈ ߞg@@(%`0% %% B@dW߄h% dH %@(%`0%% ȖB@ߔh߄h%dА ߖg@@(%`0%` %% Eߙx$  ` %% fH` %@(%`0%% B,B@$߄h%d ߖg@@(%`0%` %%p xB$(0B?Cߢ` %%C-E F% fH` %@(%`0%%` hB$|C$@O߄h%dИ ߓg@@(%`0% %`%P XB0B@ ߄h% d %@(%`0%`%@ HB0B@ ߄h% d %@(%`0%`%0 8B0B@@ ߄h% dp %@(%`0%`%  (B0B @ %߄h d0 %@(%`0%`% % fH %@(%`0%`% B(dWB-߂h(߂hdBР0߂hdBШ8ߢ+@ߢ(%dDа ߓg@@(%`0%@ %`% @ %:`%d> % fH@ %@(%`0%`% ߂`(Bߙ$M @ %߂ߦ@ߧH(%$@%$px `(%@`mH@0%߂ %@% @|@d^BH-߂ ߢ+@@% ߤ0@ %@(%`0%`% Вf.@ %`%` h% fH@ %@(%`0%`% ߢ Bߙ$a @ %0B?@ ߦ@% ߤ8@ %@(%`0%`% ߙ  %ߙp@(%`0%@ % % fH@ %@(%`0%`% ߦ@ߧH߹(%$$P X`(%@`NH$|<ߖh>fsߦߥߔb-f֣~+@ %% wA %"A~#`H߿(E"  %@(%fs$߅h$dH%  %"CxC--ߖh߂%f֣ߢb+@m߄h$$0% %% ߥ߹`0% % fsߢߦ@߹  %@@HPgfߙ$fH  %@߿(߾ ߼߷߶ߵߴ߲߳߱߰g0|=$|||=((`H#@`!$0*+@g+`%$` F * $@$|=|$($(<C%d@%|=|)($ .< i%dX%8-00%( @:d &(@)0d,B0`%4`@%@ pC$$f$8/@$$8%$$` piH$%&$0/`$$ 0%$ $ $ 0000@ 0@00 %$P$ $w$M$*%<%(?P@e?}H(PF}E0PC}F0-(>(-|b0<}(>0-(-1b%0+f%|c`)z0Bb%e#`&0E|E0E$|EdB|E(e<4cC$e#(e5'd%|Bb%C%<@e$`$|B@'$H%`$/(eb(#b+%0C`|C0C$e|CdB|C`%$$d$ %%<?4B %p$$C#(E (E$E-$cd |%$$e$%(#(+d  %<4c0$0$dc|e $dcdcdB $E$cd  $|=dE0| (dBx'<D%|cC%@`pe($$C$E#`$x|c`$$ %dcߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d~ߙx% d}ߙx% d|ߙx% d{ߙx% dzߙx% dyߙx% dxߙx% dwߙx% dvߙx% duߙx% dtߙx% dsߙx% drߙx% dqߙx% dpߙx% doߙx% dnߙx% dmߙx% dlߙx% djߙx% diߙx% dhߙx% dgߙx% dfߙx% deߙx% ddߙx% dcߙx% dbߙx% daߙx% d`ߙx% d_ߙx% d^ߙx% d]ߙx% d\ߙx% d[ߙx% dZߙx% dYߙx% dXߙx% dWߙx% dVߙx% dUߙx% dTߙx% dSߙx% dQߙx% dPߙx% dNߙx% dMߙx% dLߙx% dKߙx% dJߙx% dIߙx% dHߙx% dGߙx% dFߙx% dEߙx% dDߙx% dCߙx% dBߙx% dAߙx% d@ߙx% d?ߙx% d>ߙx% d=ߙx% d<ߙx% d9ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dߙx% dg߼߿g ,Dlx0@lT`lx 0``$ $<,Dl8P8$0Lx?456789:;<=  !"#$%&'()*+,-./0123>  ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/adb_wa_append_objadb_wa_append_fromstringadb_wa_sortadb_ro_cmpadb_ro_cmpobjadb_ro_objadb_w_raw_apk_array_truncatei\moFg b -{񌼲g Ėkdؤm޺Mn}8dTWSU߼?dz%}hzsw5xoÇsxݚZm 6Vy/ROv 4e H`S$UQ3ѣES :_|0NSIhOReat]T[XUhvD\@j/L/uJ^AnT`TR-܁ <( 8 +B/5Kj`J- x8kC\Jx̳"I1wv4 o_+aM"g`CYv Fƨ'mDVKXd毭|j3z'uS$}f@s@JܤZv~L_ kF ؠ &za'pNp>gŦL*S*ƨRhfSҶ?c6ȩ6wkm,bT$s>9 V׺K(UX'E:M9]5:UqcTu Pc$Ma0ၐf·Vi>, }CkYT$ S+PHuhި4j`u?N4=gn6񯯸_^F6hV~~cQe_Qx;ܟDэdh$۝GģhԤ')^ZvO>JṎeSԳ6_ 嚸wP nw17Ej9YP CU# 0`JD15x*1؋-E=/OeR'ĤHD][̛CMuuyhZu"i fCa=& 34vrR'g#R. UB3`>Y+ 3AD7anp'+FDPGI0SGDf['z@4?` &6LhAۻ)YIyXNb`RF`THȦQgJ!?1oRFE3(!#E-PeS34ԅQ&Y| N6*m{%GG'aH•@q):M GF-尪gz])s`]b8 )`4:HL{ЙR 2o9FnUVE ))s_Eof7Fv_D>nǎ  UBg CGFC~ py?afE\5heoEm3d^=*(F[E$lj);F N/h$ &M~{]1u\IY"[0#BOAfM2 RFz -|8I9+XbXR[9پ%?$]-Ab[8?Ciq!aC<2h";ēܛ`m/ϓ-;ע-l|jEẒs |PRpU h)M:L*u;qt؀MPڋ(i:b|AgB{0EE\6HPp 2+ lq``7I࠺mZsfOLedzw^;) WPZ41Y43mןlWЩ6EI[m$9N];V ":_ ~Ib; _G`Vf6` Bc+i} tMQ5/vF‡n1a*zYaA3D r28=K*9\l[=tp Y/t XjbcT֮rmU= &n&揢x5d}\ *?YERt8HzCMTiS?bOsϕrB`>HnDTŽʹp:x9M?ݾգ_;35EN\U`FQcD7Ρ򂀒lDكcaXG,E՝ -ۗSE[ŬV2ɼ ,э<7Ě4e)JZ#+CIZOL_.w!A^r#[ec,k:k%7(.;A2◼?/un >\l+HcsYtBO61O[r,AN|a3r֟-L*YlcL=8)Amoq{E5,1zCy7Қ-VQ~\dÉ%4MqjP  }?E*`gc?CS!>G|twa&y&f9Kh @#瑍ARfV3~b˪4| ~;Pd _E>O="[`/~+h`JK[4" q}xĻ~ ul1?w!&6웭D!|vNT'wPe {o%OFXķ'. d뢸7DץԿ+uZ"Aێ{!B 5'%3s9d|G,ͱ9 a~2)4 b,ƈ0l fxZOb3,Lp-lb?0zdm( >tnm`V[,d6Ɣ@h b;Qh|}9]ݽdIOwʂc>!%9rtUفm I2B7:c=hUWis3,ĵ>ƻvaHFG?헷 &b'_= C+L**Xɕ(X bjCE.ۛəl,MH#m@Fl?M? ޥֺ#R.짆9OSe ǜ7p$,9%/Оh?&fђl_S piETxڏb񿩊Y`Gp?>rH킩0l Uovj$:LQBLuxWbK/!#]ȽPǏl_k׺P!U:]=pe=o^ٟL9EAywypS2te;-7@F8vZb#H43ւx QvӢ#IRwpo'7` 8'N+ZV*<#,*~3ʭ^{$ }@@SSv+59@{JuLX7>c⿨ B) Mq;E%a߲ɲlA&0E7,ȀpCFEi7~PVCGO0~XŮ}d,'O*4BL !`'KSaקԅX19k|LZ$yV 9Hʩ'V ]E+>$,au4gQ/iJ2t,Z5s2`{'tNG[ 5p< 0y\9Wj /k['Hi,ְhcm.{ cg55b L7mޥIP՞l].mtH<;&tMO: kGE&#sʕ_$Rs9RIiC OAS՗q⍮a̍_Ί>{^ȇblތ`> uRan;~'c ݾ]c$mmYʶ=?2tYW4A䉥D *vmmߧ5]»;2ݒ \e.Z> ԙQ{/Ѣgg.tjb}(OV.9T/'(.:tJsҫl e`EOnbǏ=[є|]^E eX^y]Wptw/p=D)t9VIa)z]N6Xp?N[MGt_?E?J ?$W:'5L97 cR,O回ylN ~ewӣ/=:%GmD%AEʴ[&Q;.Ǘ0Ƈċ0Sett3o+]iR؟hбp^rckt<wRvE~jp!Ikf$86球ؒT/2M16w<;t݃$){mm:5>Mv(|.ԓsQwb4wX+ב;{I<@W[DT.u6bz67|l =ܒGT,ӛ `= N$EMgr9/9+ 0/Φ7MPUccompressionsign-keyall-matchesavailableFfieldsformatfrominstalledmatchRrecursivesearchsummarizeupgradableworldorphanedclean-protectedcommit-hooksinitramfs-diskless-bootoverlay-from-stdinscriptsssimulateallow-untrustedarchcachecache-dircache-max-agecache-packagescache-predownloadcheck-certificatefforceforce-binary-stdoutforce-broken-worldforce-missing-repositoriesforce-no-chrootforce-non-repositoryforce-old-apkforce-overwriteforce-refreshhhelpiinteractivekeys-dirlegacy-infologfilenetworkpreserve-envpretty-printpreupgrade-dependsprint-archprogressprogress-fdpurgeqquietrepositories-fileXrepositoryrepository-configprootroot-tmpfssynctimeoutUupdate-cacheuvol-managervverboseVversionwaitinstalled: packages: %d dirs: %d files: %d bytes: %lu triggers: %d available: names: %d packages: %d atoms: num: %d %.*s [%.*s]nonedeflateFailed to load signing key: %s: %sERROR: no-yesnoautoAPK_PREUPGRADE_TOKENAPK_SELFUPGRADE_TOKENlaiNgeiThu6ip1TeYou tried to add a non-repository package to system, but it would be lost on next reboot. Enable package caching (apk cache --help) or use --force-non-repository if you know what you are doing.Package '%s' not found%s-%.*s%sinstalleddeleting %s%s-%.*s is required by: No such package: %s-%.*s - %.*sFailed to fix directory permissions<Available:Installed:%*s %sfailed to preserve %s: %sWARNING: Error opening destination '%s': %s%s: %sExtracting %s...*%.*s: unable to select package (or its dependencies)fixing directory %s%s-%.*s%*s %s %.*s %.*s../src/adb.cdb->num_bucketsptrschema->kind == ADB_KIND_ARRAYlib/apk/commit_hooks.detc/apk/commit_hooks.dDownloading %d packages...download(%*i/%i) Downloading %s-%.*s%s-%.*s: %squery failed: %s%s policy: %.*s: %s/installed %.*s%s%.*scoffeeGo and fetch your own coffee.fetch, hold<%s> Package: %s Version: %.*s Depends: %s%sProvides: Status: install ok %s Description: %.*s License: %.*s Installed-Size: %lu Size: %lu %s %.*s %s-%.*s %.*s {%.*s}{%s} [installed] [upgradable from: %s-%.*s] %.*s <%.*s> %s%.*s (%.*s -> %.*s) %s%.*s (%.*s)%Y-%m-%d %H:%M:%SPurging %sWorld updated, but the following packages are not removed due to: %s:audit does not support usermode!%s: relative path skipped.OK+etc @etc/init.d -dev -home -lib/apk -lib/rc/cache -proc -root -run -sys -tmp -var unable to read protected path file: %s: %s1.3.1Help decompression failedAPKGLOBALGENERATIONCOMMITQUERYHelp not foundsynccleanpurgebad dependency: %sUnable to select packages. Run apk fix.%s-%.*s %.*s - mode=%o uid=%d gid=%d%s + mode=%o uid=%d gid=%d%s %c %.*s /bin/busybox/bin/bbsuid/bin/busybox-extras(schema->kind == ADB_KIND_OBJECT || schema->kind == ADB_KIND_ARRAY)schema->kind == ADB_KIND_OBJECT || schema->kind == ADB_KIND_ARRAYschema == tmpl->schema!"invalid object field kind"o->schema->kind == ADB_KIND_ARRAYo->db == no->dbmips64%dapk-tools 3.0.5, compiled for mips64./.apk-new${arch}/${name}-${version}.apk${name}-${version}.${hash:8}.apk/etc/apk/interactive'%s' is not an apk command. See 'apk --help'.noarchTERMdumbAPK_PROGRESS_CHARLANGUTF-8█#etc/apk/cache/usr/sbin/uvolUnable to open root: %s--usermode not allowed as rootUse --usermode to allow creating database as non-rootvar/log/apk.logvar/logUnable to open log: %saAPK_PATH=/usr/sbin:/usr/bin:/sbin:/bin Running `` at %s Failed to open apk database: %s%s%s%sOK:ERRORS;%d unavailable, %d stale;%s %d distinct packages available%lo!!%.*s%s%.*s%s%.*s%s/%sSkipping: %s %sExecuting /%s %sexecuting %s %sExecuting %s %s * %s-%.*s %s: %s: descriptionwebpage%s: %.*s %s-%.*s installed size: %.*s depends onprovides%s-%.*s contains: %s%s%s %s-%.*s triggers: %s: trigger has auto-install rule%s-%.*s affects auto-installation of: replaceslicenseADB block, size: %lu, compat: %d, ver: %dsig v%02x h%02x %02xdata block, size: %luunknown block %d, size: %lu00123456789abcdefghijklmnopqrstuvwxyzQ1packagename([<>~=]version)%Y%m%d.%H%M%S%s: bad package specifiervirtual meta packagecreating empty virtual package'%s' is not a valid %s dependency, format is %sunknown%s%s%s:%.*s %s%s%s%s:%s %s%s%s%s:%.*s %s%s%s=%.*s=(%d bytes)(%ld bytes)disk space will be freedadditional disk space will be used(?)InstallingPurgingReinstallingUpdating pinning[APK unavailable, skipped] ReinstallingReplacingUpgradingDowngrading../src/commit.cNot committing changes due to missing repository tags.NOTE: Consider running apk upgrade with --prune and/or --available. The following packages are no longer available from a repositoryThe following packages will be REMOVEDThe following packages will be DOWNGRADEDThe following NEW packages will be installedThe following packages will be upgradedThe following packages will be reinstalledNeed to download %.*s of packages.After this operation, %.*s of %s.Do you want to continue [Y/n]? Proceeding with upgrade...install(%*i/%i)%s %s %s%.*s (%.*s)%s %s %s%.*s (%.*s -> %.*s)lib/apk/dbetc/apkRefusing to write db without write lock!etc/apk/archtriggersscripts.tarscripts.tar.gzetc/apk/worldSystem state may be inconsistent: failed to write database: %ssyncing disks.../proc/2/stat%d error%s;%s %d packages, %d dirs, %d files, %.*s%s %.*s in %d packages/proc/self/exeIgnored invalid preupgrade dependencies from: %sFailed to perform initial preupgrade, continuing with a full upgrade.This simulation might not reliable as a preupgrade is available.Preupgrading:Continuing with the main upgrade transaction:APK_PREUPGRADE_TOKEN=laiNgeiThu6ip1TeAPK_SELFUPGRADE_TOKEN=laiNgeiThu6ip1Te--no-self-upgradePANIC! Failed to re-execute new apk-tools!Not continuing with upgrade due to missing repository tags.../src/apk_defines.hnum <= hdr->numnameaclsizemtimetargetmodeusergroupxattrsversionmatchfilestriggerpre-installpost-installpre-deinstallpost-deinstallpre-upgradepost-upgradehashesoriginmaintainerurlrepo-commitbuild-timeinstalled-sizefile-sizeprovider-prioritydependsinstall-ifrecommendslayertagsinfopathsscriptsreplaces-prioritypackagespkgname-specpre-commitpost-commit${}BKiBMiBGiBTiBsha1sha256sha512sha256-160 %s: %sworld[%s%s%s%.*s%.*s]%s-%.*s[%s%s%s%.*s]../src/crypto_mbedtls.c!"valid alg"%s%s%s%.*s.listuvol.SIGN..PKGINFO.INSTALLDESCRIPTIONAPKINDEXuvol(%s)uvol(%s): %s: uvol run exec error: %srocreatewriteremoveupdownalg != APK_DIGEST_NONEdctx->alg != APK_DIGEST_NONEfailed to update directory %s: %s%.*s/tmp/run/uvol/.meta/apk../src/database.c!"invalid layer"The repository tag for world dependency '%s%.*s' does not existNot continuing due to stale/unavailable repositories. Use --force-missing-repositories to continue.APKINDEX.${hash:8}.tar.gz%.*s/%.*s/%s://%.*s*%.*stest:${name}Repository %.*s has %d packages without hash%s: %s /proc/self/fd/%d%s: process init: %sAPK_SCRIPT%s=%sAPK_PACKAGE%s: fork: %sfchdir0 %d 1/proc/self/uid_mapdeny/proc/self/setgroups/proc/self/gid_mapproc/procdev/devunsharechrootexecvesatisfies:breaks:../src/io.cctx.index < ARRAY_SIZE(source)lib/apk/keysetc/apk/keys%s (virtual)note:please select one of the 'provided by' packages explicitlyprovided by:%s-%.*s%s (no such package)required by:unable to select packages:error:uninstallablearch:depends:provides:install_if:masked in:--no-networkconflicts:Huh? Error reporter did not find the broken constraints. /.apk..apk.%s-%.*s: ignoring malicious file %s%s-%.*s: %.*s: no dirent in archive%s-%.*s: %.*s: no hard link target (%s) in archive%s-%.*s: overwriting %s owned by %s-%.*s.%s-%.*s: trying to overwrite %s owned by %s-%.*s.%s-%.*s: failed to preserve %s: %s%s-%.*s: failed to extract %s: %s%s (dir)user.This apk-tools is too old to handle installed packagesFDB format error (line %d, entry '%c') = replaces_priorityfailed to read repositories: %s: %s (not removing)%s%s%s%setc Installing file to %s%s%s%s%s-%.*s: failed to commit %s%s%s: %spasswdADBfetch %.*s%s-%.*s: unable to cache package../src/serialize_yaml.cdt->nest < ARRAY_SIZE(dt->flags)7%3i%% 8,file:@...7[%s] * failed to prepare dirs for hook scripts: failed to execute: %s/%s-%.*s.%sdev/nulldev/zerodev/randomdev/urandomdev/console%s-%.*s: failed to create initial device nodes: %s%sExecuting %s-%.*s.%s%s-%.*s.%s: %s%s%s:%d: undefined variable: %.*s%lu/%lu %s %*s%.*s %*s%.*s %.*sexited with error %dkilled by signal %dstopped by signal %dcontinuedstatus unknown %xAPKINDEX.tar.gzPackages.adbset-default%s:%d: invalid option: %.*s%s:%d: invalid variable definition: %.*sndxv2v3%s:%d: unrecogized keyword: %.*s%s:%d: invalid url: %.*sjsonyamldefault../src/serialize_query.c ../src/serialize_json.csizeof pad >= 2*dt->nest"":%lludt->nest < ARRAY_SIZE(dt->end)sizeof pad >= 2*dt->indent- #%%SCHEMA: %08X# %d items# empty object# etc/passwdrootetc/groupC: P: V: A: S: I: T: U: L: o: m: t: c: k:D:p:i:system%s/installedbroken-filesbroken-scriptbroken-xattr'%s' is not a valid world dependency, format is name(@tag)([<>~=]version)*%s*?*-?:,[]{}#&*!|>'"%@`'|pkgnamepkgverpkgdescdependinstall_ifbuilddatecommitprovider_priority!"adb error"ustar -r%s: unrecognized option '%.*s'%s: ambiguous option '%.*s'%s: option '%.*s' does not expect argument (got '%s')%s: option '%.*s' expects an argument%s: invalid argument for option '%.*s': '%s'%s: setting option '%.*s' failed-----BEGIN <=<~~>=>~>><?../src/hash.ch->ops->compare_item != NULL%lu %s%.1f %s%#lo owner permission mtime xattrs%s.tmp.%d%s.tmp/proc/self/fdvar/cache/apko->schema->kind == ADB_KIND_OBJECTi > 0 && i < o->schema->num_fields%s-%.*s %s: %.*s wget-q-T--no-check-certificate-O-Downloading %s-%.*s hash=datahash(unknown)/etc/apk/configapk_APK_CONFIG/lib/apk/configconfigcommand line X1././@LongLinksymlink target owner not found%s: Could not find owner package%s %sis owned by %s-%.*s ustar%.*s/%.*spathlinkpathSCHILY.xattr.APK-TOOLS.checksum.SHA1fetchingopeningopening from cacheupdating and openingupdatingare not installablemight not function properlyInvalid open flags (internal error)Unable to setup the cacheUnable to read databaseUnable to lock databaseAPK_ARCHproc/self/proc/self/proc/sys/vm/memfd_noexeclib/apk/db/lockWaiting for repository lock+etc@etc/init.d!etc/apketc/apk/protected_paths.d/proc/mountsrootfsUnable to find cache directory mount pointetc/apk/repositorieslib/apk/repositories.detc/apk/repositories.d%s %.*s: %sThis apk-tools is OLD! Some packages %s.The indexes contain broken packages which %s.g:r:q:f:R:Z:F:verifystatssearchupgradeupdatequerypolicymanifestlistfixextractdelauditaddadbdumppThTCDPDEHETggeeeeeeeeeiDi$i\apk_dir_foreach_config_file/..//./apk_db_layer_nameJHJJHkkkkkkkkkkHPjjjjjjjjjjjjjjjjjjjjjjjjjjHHjoooooonnnnnnnnnnnnnnnnnnnnapk_digest_ctx_finalapk_digest_ctx_updateapk_digest_ctx_reset_algapk_digest_alg_to_mbedtls_type @ЬπЬЬЬϰЬЬЬЬdЬϘΨΌЬЬЬЬЬЬЬЬЬЬxЬЬЬЬДЬDЬ(`A8AdApABABB@BTB`BBCxser_yaml_start_indentser_yaml_indentQueryErrorPath-TargetOwnerPackageNameVersionHashDescriptionArchLicenseOriginMaintainerURLCommitBuild-TimeInstalled-SizeFile-SizeProvider-PriorityDependsProvidesReplacesInstall-IfRecommendsLayerTagsContentsTriggersScriptsReplaces-PriorityStatusRepositoriesDownload-URLReverse-DependsReverse-Install-Ifser_q_start_indentser_json_start_indentser_json_indentqueryerrorpath-targetownerpackagenameversionhashdescriptionarchlicenseoriginmaintainerurlcommitbuild-timeinstalled-sizefile-sizeprovider-prioritydependsprovidesreplacesinstall-ifrecommendslayertagscontentstriggersscriptsreplaces-prioritystatusrepositoriesdownload-urlreverse-dependsreverse-install-if &+38DIQXcgny ,<Ofile is unchangedunexpected end of fileDNS: non-recoverable failureDNS: address family for host not supportedDNS: transient error (try again later)DNS: no address for hostDNS: name does not existTLS: unspecified errorTLS: server hostname mismatchTLS: server certificate not trustedTLS: client certificate not trustedTLS: handshake failed (client cert needed?)invalid URL (check your repositories file)HTTP 400: Bad RequestHTTP 401: UnauthorizedHTTP 403: ForbiddenHTTP 404: Not FoundHTTP 405: Method Not AllowedHTTP 406: Not AcceptableHTTP 407: Proxy Authentication RequiredHTTP 408: TimeoutHTTP 500: Internal Server ErrorHTTP 501: Not ImplementedHTTP 502: Bad GatewayHTTP 503: Service UnavailableHTTP 504: Gateway TimeoutHTTP: unrecognized server errorcrypto errorcryptographic algorithm not supportedcryptographic key format not recognizedsigning failureUNTRUSTED signatureBAD signaturefile format is invalid or inconsistentfile format is obsolete (e.g. missing embedded checksum)file format not supported (in this applet)package name is invalidpackage version is invaliddependency format is invalidADB compression not supportedADB header errorincompatible ADB versionADB schema errorADB block errorADB signature block errorADB integrity errorADB schema error (no fromstring)ADB schema limit reachedADB package formatv2 database format errorv2 package format errorv2 package integrity errorv2 index format errorcould not find a repo which provides this package (check repositories file and run 'apk update')package name specification is invalidpackage mentioned in index not found (try 'apk update')file integrity errorcache not availableuvol manager not availableuvol erroruvol not supported with --rootremote server returned error (try 'apk update')file not extractedrepositories file syntax errorunsupported repositories file keywordundefined repositories file variable)Fq#Gs)Qc >fv#;Vs +DWp@x)Hnlib/apk/exec_apk_array_truncateij|j@iiijHjPiiiiiiijXijljtk0kk0kHktkXoohoooooooootooqqr@rLqr`q@p aallccheckIindexesllimitttestaallddescriptionexexacthas-originooriginrrdependsaavailableignorellatestpreupgradepreupgrade-onlypruneself-upgradeself-upgrade-onlyaddependsImanifestfullooriginOPprovidersuupgradeableaallLcontentsRdependsddescriptioneexistsinstall-ifinstalledlicensePprovidesrrdependsreplacesrinstall-ifssizettriggerswwebpageWwho-ownsddependsdirectory-permissionsrreinstalluupgradexxattrbuilt-afterllinkpkgname-specooutputsimulatesstdouturldestinationno-chownrrdependsadd-dependenciesaavailableignore-conflictllatestuupgradessimulatebackupcheck-permissionsdetailsfullignore-busybox-symlinkspackagesprotected-pathsrrecursivesysteminitdbllatestno-chownforce-reinstalluupgradeusermodetvirtualformatadb_w_erroradb_ro_kindadb_wo_blobadb_wa_append_apk_array_truncateapk_hash_delete_hashedalphabetaprerccvssvngithgp  #%:F@ 3 0T 3P p  Π    H    p `      `   0    (  0  8 X   @  H  `      H P     p  8    a4 gkcp (  X 0 ` 0 p 0  0  0  0  0    @    0    0           p  P  P (  @          H   X   h  p  H   X h `   ` X ` h x       x     0   @   h         ̴      xdni xbdi Pgkcp ( 0 0   \ h    ( 0 8P     d  P  6 R  / / / \ P   8  l  $ u 7@ 7 7 .8  B .  S B   B h    a a  f,  K F Ft L D   / / / / O P / /l  /t /| /   | @ ϴ :T g4 >HH  0    \  3T 2 4 ˼ -, /l ˼ -, - P V  T U I 0L A (D 0i p o m @t Pc Xk ` p     X   :< ; = SH X  RD 0 R| R` R D l [d   r  mT H dx= rCFM?gdw+mm?ƄMU֢{6nS> "0 8 sL (  a >p / B  d ~ ~  ; /  $ | |p |` |P |@ |0 |  | | { { { { { { { { {p {` {P {@ {0 {  { { z z z z z z z z zp z` zP z@ z0 z  z z y y y y y y y y yp y` yP y@ y0 y  y y x x x x x x x x xp x` xP x@ x0 x  x x w w w w w w w w wp w` wP w@ w0 w  w w v v v v v v v v vp v` vP v@ v0 v  v v u u u u u u u u up u` uP u@ u0 u  u u t t t t t t t t tp t` tP t@ t0 t  t t s s s s s s s s sp s` sP s@ s0 s  s s r r r r r r07070100EA4D280000A1FF00000000000000000000000169F91E1500000005000000080000000100000000000000000000001000000000usr/bin/signifyusign07070100EA4C6D0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000D00000000usr/bin/tail../../bin/busybox07070100EA4CA80000A1FF00000000000000000000000169F91E1500000005000000080000000100000000000000000000000D00000000usr/bin/utplucode07070100EA4C6F0000A1FF00000000000000000000000169F91E1500000011000000080000000100000000000000000000000C00000000usr/bin/tee../../bin/busybox07070100EA4AA9000041ED00000000000000000000000F69F91E1500000000000000080000000100000000000000000000000A00000000usr/share07070100EA4C80000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001000000000usr/share/acl.d07070100EA5662000081A400000000000000000000000169F91E150000005B000000080000000100000000000000000000001F00000000usr/share/acl.d/luci-base.json{ "user": "nobody", "access": { "system": { "methods": [ "board", "info" ] } } } 07070100EA4DCA000081A400000000000000000000000169F91E15000000D9000000080000000100000000000000000000002100000000usr/share/acl.d/dnsmasq_acl.json{ "user": "dnsmasq", "publish": [ "dnsmasq" ], "access": { "hotplug.dhcp": { "methods": [ "call" ] }, "hotplug.neigh": { "methods": [ "call" ] }, "hotplug.tftp": { "methods": [ "call" ] } } } 07070100EA5649000081A400000000000000000000000169F91E150000002B000000080000000100000000000000000000001A00000000usr/share/acl.d/logd.json{ "user": "logd", "publish": [ "log" ] } 07070100EA4C81000081A400000000000000000000000169F91E1500000054000000080000000100000000000000000000001A00000000usr/share/acl.d/ntpd.json{ "user": "ntp", "access": { "hotplug.ntp": { "methods": [ "call" ] } } } 07070100EA5595000081A400000000000000000000000169F91E15000001C1000000080000000100000000000000000000001E00000000usr/share/acl.d/wpad_acl.json{ "user": "network", "access": { "service": { "methods": [ "event" ] }, "wpa_supplicant": { "methods": [ "phy_set_state", "phy_set_macaddr_list", "phy_status" ] }, "hostapd": { "methods": [ "apsta_state" ] }, "udebug": { "methods": [ "get_config" ] } }, "subscribe": [ "udebug" ], "publish": [ "hostapd", "hostapd.*", "wpa_supplicant", "wpa_supplicant.*", "hostapd-auth" ], "send": [ "bss.*", "wps_credentials" ] } 07070100EA558C000041ED00000000000000000000000569F91E1500000000000000080000000100000000000000000000001000000000usr/share/ucode07070100EA5669000041ED00000000000000000000000469F91E1500000000000000080000000100000000000000000000001500000000usr/share/ucode/luci07070100EA5650000081A400000000000000000000000169F91E1500003E54000000080000000100000000000000000000002100000000usr/share/ucode/luci/zoneinfo.uc// Autogenerated by zoneinfo2ucode.pl export default { 'Africa/Abidjan': 'GMT0', 'Africa/Accra': 'GMT0', 'Africa/Addis_Ababa': 'EAT-3', 'Africa/Algiers': 'CET-1', 'Africa/Asmara': 'EAT-3', 'Africa/Bamako': 'GMT0', 'Africa/Bangui': 'WAT-1', 'Africa/Banjul': 'GMT0', 'Africa/Bissau': 'GMT0', 'Africa/Blantyre': 'CAT-2', 'Africa/Brazzaville': 'WAT-1', 'Africa/Bujumbura': 'CAT-2', 'Africa/Cairo': 'EET-2EEST,M4.5.5/0,M10.5.4/24', 'Africa/Casablanca': '<+01>-1', 'Africa/Ceuta': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Africa/Conakry': 'GMT0', 'Africa/Dakar': 'GMT0', 'Africa/Dar_es_Salaam': 'EAT-3', 'Africa/Djibouti': 'EAT-3', 'Africa/Douala': 'WAT-1', 'Africa/El_Aaiun': '<+01>-1', 'Africa/Freetown': 'GMT0', 'Africa/Gaborone': 'CAT-2', 'Africa/Harare': 'CAT-2', 'Africa/Johannesburg': 'SAST-2', 'Africa/Juba': 'CAT-2', 'Africa/Kampala': 'EAT-3', 'Africa/Khartoum': 'CAT-2', 'Africa/Kigali': 'CAT-2', 'Africa/Kinshasa': 'WAT-1', 'Africa/Lagos': 'WAT-1', 'Africa/Libreville': 'WAT-1', 'Africa/Lome': 'GMT0', 'Africa/Luanda': 'WAT-1', 'Africa/Lubumbashi': 'CAT-2', 'Africa/Lusaka': 'CAT-2', 'Africa/Malabo': 'WAT-1', 'Africa/Maputo': 'CAT-2', 'Africa/Maseru': 'SAST-2', 'Africa/Mbabane': 'SAST-2', 'Africa/Mogadishu': 'EAT-3', 'Africa/Monrovia': 'GMT0', 'Africa/Nairobi': 'EAT-3', 'Africa/Ndjamena': 'WAT-1', 'Africa/Niamey': 'WAT-1', 'Africa/Nouakchott': 'GMT0', 'Africa/Ouagadougou': 'GMT0', 'Africa/Porto-Novo': 'WAT-1', 'Africa/Sao_Tome': 'GMT0', 'Africa/Tripoli': 'EET-2', 'Africa/Tunis': 'CET-1', 'Africa/Windhoek': 'CAT-2', 'America/Adak': 'HST10HDT,M3.2.0,M11.1.0', 'America/Anchorage': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Anguilla': 'AST4', 'America/Antigua': 'AST4', 'America/Araguaina': '<-03>3', 'America/Argentina/Buenos_Aires': '<-03>3', 'America/Argentina/Catamarca': '<-03>3', 'America/Argentina/Cordoba': '<-03>3', 'America/Argentina/Jujuy': '<-03>3', 'America/Argentina/La_Rioja': '<-03>3', 'America/Argentina/Mendoza': '<-03>3', 'America/Argentina/Rio_Gallegos': '<-03>3', 'America/Argentina/Salta': '<-03>3', 'America/Argentina/San_Juan': '<-03>3', 'America/Argentina/San_Luis': '<-03>3', 'America/Argentina/Tucuman': '<-03>3', 'America/Argentina/Ushuaia': '<-03>3', 'America/Aruba': 'AST4', 'America/Asuncion': '<-03>3', 'America/Atikokan': 'EST5', 'America/Bahia': '<-03>3', 'America/Bahia_Banderas': 'CST6', 'America/Barbados': 'AST4', 'America/Belem': '<-03>3', 'America/Belize': 'CST6', 'America/Blanc-Sablon': 'AST4', 'America/Boa_Vista': '<-04>4', 'America/Bogota': '<-05>5', 'America/Boise': 'MST7MDT,M3.2.0,M11.1.0', 'America/Cambridge_Bay': 'MST7MDT,M3.2.0,M11.1.0', 'America/Campo_Grande': '<-04>4', 'America/Cancun': 'EST5', 'America/Caracas': '<-04>4', 'America/Cayenne': '<-03>3', 'America/Cayman': 'EST5', 'America/Chicago': 'CST6CDT,M3.2.0,M11.1.0', 'America/Chihuahua': 'CST6', 'America/Ciudad_Juarez': 'MST7MDT,M3.2.0,M11.1.0', 'America/Costa_Rica': 'CST6', 'America/Coyhaique': '<-03>3', 'America/Creston': 'MST7', 'America/Cuiaba': '<-04>4', 'America/Curacao': 'AST4', 'America/Danmarkshavn': 'GMT0', 'America/Dawson': 'MST7', 'America/Dawson_Creek': 'MST7', 'America/Denver': 'MST7MDT,M3.2.0,M11.1.0', 'America/Detroit': 'EST5EDT,M3.2.0,M11.1.0', 'America/Dominica': 'AST4', 'America/Edmonton': 'MST7MDT,M3.2.0,M11.1.0', 'America/Eirunepe': '<-05>5', 'America/El_Salvador': 'CST6', 'America/Fort_Nelson': 'MST7', 'America/Fortaleza': '<-03>3', 'America/Glace_Bay': 'AST4ADT,M3.2.0,M11.1.0', 'America/Goose_Bay': 'AST4ADT,M3.2.0,M11.1.0', 'America/Grand_Turk': 'EST5EDT,M3.2.0,M11.1.0', 'America/Grenada': 'AST4', 'America/Guadeloupe': 'AST4', 'America/Guatemala': 'CST6', 'America/Guayaquil': '<-05>5', 'America/Guyana': '<-04>4', 'America/Halifax': 'AST4ADT,M3.2.0,M11.1.0', 'America/Havana': 'CST5CDT,M3.2.0/0,M11.1.0/1', 'America/Hermosillo': 'MST7', 'America/Indiana/Indianapolis': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Knox': 'CST6CDT,M3.2.0,M11.1.0', 'America/Indiana/Marengo': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Petersburg': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Tell_City': 'CST6CDT,M3.2.0,M11.1.0', 'America/Indiana/Vevay': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Vincennes': 'EST5EDT,M3.2.0,M11.1.0', 'America/Indiana/Winamac': 'EST5EDT,M3.2.0,M11.1.0', 'America/Inuvik': 'MST7MDT,M3.2.0,M11.1.0', 'America/Iqaluit': 'EST5EDT,M3.2.0,M11.1.0', 'America/Jamaica': 'EST5', 'America/Juneau': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Kentucky/Louisville': 'EST5EDT,M3.2.0,M11.1.0', 'America/Kentucky/Monticello': 'EST5EDT,M3.2.0,M11.1.0', 'America/Kralendijk': 'AST4', 'America/La_Paz': '<-04>4', 'America/Lima': '<-05>5', 'America/Los_Angeles': 'PST8PDT,M3.2.0,M11.1.0', 'America/Lower_Princes': 'AST4', 'America/Maceio': '<-03>3', 'America/Managua': 'CST6', 'America/Manaus': '<-04>4', 'America/Marigot': 'AST4', 'America/Martinique': 'AST4', 'America/Matamoros': 'CST6CDT,M3.2.0,M11.1.0', 'America/Mazatlan': 'MST7', 'America/Menominee': 'CST6CDT,M3.2.0,M11.1.0', 'America/Merida': 'CST6', 'America/Metlakatla': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Mexico_City': 'CST6', 'America/Miquelon': '<-03>3<-02>,M3.2.0,M11.1.0', 'America/Moncton': 'AST4ADT,M3.2.0,M11.1.0', 'America/Monterrey': 'CST6', 'America/Montevideo': '<-03>3', 'America/Montserrat': 'AST4', 'America/Nassau': 'EST5EDT,M3.2.0,M11.1.0', 'America/New_York': 'EST5EDT,M3.2.0,M11.1.0', 'America/Nome': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/Noronha': '<-02>2', 'America/North_Dakota/Beulah': 'CST6CDT,M3.2.0,M11.1.0', 'America/North_Dakota/Center': 'CST6CDT,M3.2.0,M11.1.0', 'America/North_Dakota/New_Salem': 'CST6CDT,M3.2.0,M11.1.0', 'America/Nuuk': '<-02>2<-01>,M3.5.0/-1,M10.5.0/0', 'America/Ojinaga': 'CST6CDT,M3.2.0,M11.1.0', 'America/Panama': 'EST5', 'America/Paramaribo': '<-03>3', 'America/Phoenix': 'MST7', 'America/Port-au-Prince': 'EST5EDT,M3.2.0,M11.1.0', 'America/Port_of_Spain': 'AST4', 'America/Porto_Velho': '<-04>4', 'America/Puerto_Rico': 'AST4', 'America/Punta_Arenas': '<-03>3', 'America/Rankin_Inlet': 'CST6CDT,M3.2.0,M11.1.0', 'America/Recife': '<-03>3', 'America/Regina': 'CST6', 'America/Resolute': 'CST6CDT,M3.2.0,M11.1.0', 'America/Rio_Branco': '<-05>5', 'America/Santarem': '<-03>3', 'America/Santiago': '<-04>4<-03>,M9.1.6/24,M4.1.6/24', 'America/Santo_Domingo': 'AST4', 'America/Sao_Paulo': '<-03>3', 'America/Scoresbysund': '<-02>2<-01>,M3.5.0/-1,M10.5.0/0', 'America/Sitka': 'AKST9AKDT,M3.2.0,M11.1.0', 'America/St_Barthelemy': 'AST4', 'America/St_Johns': 'NST3:30NDT,M3.2.0,M11.1.0', 'America/St_Kitts': 'AST4', 'America/St_Lucia': 'AST4', 'America/St_Thomas': 'AST4', 'America/St_Vincent': 'AST4', 'America/Swift_Current': 'CST6', 'America/Tegucigalpa': 'CST6', 'America/Thule': 'AST4ADT,M3.2.0,M11.1.0', 'America/Tijuana': 'PST8PDT,M3.2.0,M11.1.0', 'America/Toronto': 'EST5EDT,M3.2.0,M11.1.0', 'America/Tortola': 'AST4', 'America/Vancouver': 'PST8PDT,M3.2.0,M11.1.0', 'America/Whitehorse': 'MST7', 'America/Winnipeg': 'CST6CDT,M3.2.0,M11.1.0', 'America/Yakutat': 'AKST9AKDT,M3.2.0,M11.1.0', 'Antarctica/Casey': '<+08>-8', 'Antarctica/Davis': '<+07>-7', 'Antarctica/DumontDUrville': '<+10>-10', 'Antarctica/Macquarie': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Antarctica/Mawson': '<+05>-5', 'Antarctica/McMurdo': 'NZST-12NZDT,M9.5.0,M4.1.0/3', 'Antarctica/Palmer': '<-03>3', 'Antarctica/Rothera': '<-03>3', 'Antarctica/Syowa': '<+03>-3', 'Antarctica/Troll': '<+00>0<+02>-2,M3.5.0/1,M10.5.0/3', 'Antarctica/Vostok': '<+05>-5', 'Arctic/Longyearbyen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Asia/Aden': '<+03>-3', 'Asia/Almaty': '<+05>-5', 'Asia/Amman': '<+03>-3', 'Asia/Anadyr': '<+12>-12', 'Asia/Aqtau': '<+05>-5', 'Asia/Aqtobe': '<+05>-5', 'Asia/Ashgabat': '<+05>-5', 'Asia/Atyrau': '<+05>-5', 'Asia/Baghdad': '<+03>-3', 'Asia/Bahrain': '<+03>-3', 'Asia/Baku': '<+04>-4', 'Asia/Bangkok': '<+07>-7', 'Asia/Barnaul': '<+07>-7', 'Asia/Beirut': 'EET-2EEST,M3.5.0/0,M10.5.0/0', 'Asia/Bishkek': '<+06>-6', 'Asia/Brunei': '<+08>-8', 'Asia/Chita': '<+09>-9', 'Asia/Colombo': '<+0530>-5:30', 'Asia/Damascus': '<+03>-3', 'Asia/Dhaka': '<+06>-6', 'Asia/Dili': '<+09>-9', 'Asia/Dubai': '<+04>-4', 'Asia/Dushanbe': '<+05>-5', 'Asia/Famagusta': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Asia/Gaza': 'EET-2EEST,M3.4.4/50,M10.4.4/50', 'Asia/Hebron': 'EET-2EEST,M3.4.4/50,M10.4.4/50', 'Asia/Ho_Chi_Minh': '<+07>-7', 'Asia/Hong_Kong': 'HKT-8', 'Asia/Hovd': '<+07>-7', 'Asia/Irkutsk': '<+08>-8', 'Asia/Jakarta': 'WIB-7', 'Asia/Jayapura': 'WIT-9', 'Asia/Jerusalem': 'IST-2IDT,M3.4.4/26,M10.5.0', 'Asia/Kabul': '<+0430>-4:30', 'Asia/Kamchatka': '<+12>-12', 'Asia/Karachi': 'PKT-5', 'Asia/Kathmandu': '<+0545>-5:45', 'Asia/Khandyga': '<+09>-9', 'Asia/Kolkata': 'IST-5:30', 'Asia/Krasnoyarsk': '<+07>-7', 'Asia/Kuala_Lumpur': '<+08>-8', 'Asia/Kuching': '<+08>-8', 'Asia/Kuwait': '<+03>-3', 'Asia/Macau': 'CST-8', 'Asia/Magadan': '<+11>-11', 'Asia/Makassar': 'WITA-8', 'Asia/Manila': 'PST-8', 'Asia/Muscat': '<+04>-4', 'Asia/Nicosia': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Asia/Novokuznetsk': '<+07>-7', 'Asia/Novosibirsk': '<+07>-7', 'Asia/Omsk': '<+06>-6', 'Asia/Oral': '<+05>-5', 'Asia/Phnom_Penh': '<+07>-7', 'Asia/Pontianak': 'WIB-7', 'Asia/Pyongyang': 'KST-9', 'Asia/Qatar': '<+03>-3', 'Asia/Qostanay': '<+05>-5', 'Asia/Qyzylorda': '<+05>-5', 'Asia/Riyadh': '<+03>-3', 'Asia/Sakhalin': '<+11>-11', 'Asia/Samarkand': '<+05>-5', 'Asia/Seoul': 'KST-9', 'Asia/Shanghai': 'CST-8', 'Asia/Singapore': '<+08>-8', 'Asia/Srednekolymsk': '<+11>-11', 'Asia/Taipei': 'CST-8', 'Asia/Tashkent': '<+05>-5', 'Asia/Tbilisi': '<+04>-4', 'Asia/Tehran': '<+0330>-3:30', 'Asia/Thimphu': '<+06>-6', 'Asia/Tokyo': 'JST-9', 'Asia/Tomsk': '<+07>-7', 'Asia/Ulaanbaatar': '<+08>-8', 'Asia/Urumqi': '<+06>-6', 'Asia/Ust-Nera': '<+10>-10', 'Asia/Vientiane': '<+07>-7', 'Asia/Vladivostok': '<+10>-10', 'Asia/Yakutsk': '<+09>-9', 'Asia/Yangon': '<+0630>-6:30', 'Asia/Yekaterinburg': '<+05>-5', 'Asia/Yerevan': '<+04>-4', 'Atlantic/Azores': '<-01>1<+00>,M3.5.0/0,M10.5.0/1', 'Atlantic/Bermuda': 'AST4ADT,M3.2.0,M11.1.0', 'Atlantic/Canary': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Cape_Verde': '<-01>1', 'Atlantic/Faroe': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Madeira': 'WET0WEST,M3.5.0/1,M10.5.0', 'Atlantic/Reykjavik': 'GMT0', 'Atlantic/South_Georgia': '<-02>2', 'Atlantic/St_Helena': 'GMT0', 'Atlantic/Stanley': '<-03>3', 'Australia/Adelaide': 'ACST-9:30ACDT,M10.1.0,M4.1.0/3', 'Australia/Brisbane': 'AEST-10', 'Australia/Broken_Hill': 'ACST-9:30ACDT,M10.1.0,M4.1.0/3', 'Australia/Darwin': 'ACST-9:30', 'Australia/Eucla': '<+0845>-8:45', 'Australia/Hobart': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Australia/Lindeman': 'AEST-10', 'Australia/Lord_Howe': '<+1030>-10:30<+11>-11,M10.1.0,M4.1.0', 'Australia/Melbourne': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Australia/Perth': 'AWST-8', 'Australia/Sydney': 'AEST-10AEDT,M10.1.0,M4.1.0/3', 'Etc/GMT': 'GMT0', 'Etc/GMT+1': '<-01>1', 'Etc/GMT+10': '<-10>10', 'Etc/GMT+11': '<-11>11', 'Etc/GMT+12': '<-12>12', 'Etc/GMT+2': '<-02>2', 'Etc/GMT+3': '<-03>3', 'Etc/GMT+4': '<-04>4', 'Etc/GMT+5': '<-05>5', 'Etc/GMT+6': '<-06>6', 'Etc/GMT+7': '<-07>7', 'Etc/GMT+8': '<-08>8', 'Etc/GMT+9': '<-09>9', 'Etc/GMT-1': '<+01>-1', 'Etc/GMT-10': '<+10>-10', 'Etc/GMT-11': '<+11>-11', 'Etc/GMT-12': '<+12>-12', 'Etc/GMT-13': '<+13>-13', 'Etc/GMT-14': '<+14>-14', 'Etc/GMT-2': '<+02>-2', 'Etc/GMT-3': '<+03>-3', 'Etc/GMT-4': '<+04>-4', 'Etc/GMT-5': '<+05>-5', 'Etc/GMT-6': '<+06>-6', 'Etc/GMT-7': '<+07>-7', 'Etc/GMT-8': '<+08>-8', 'Etc/GMT-9': '<+09>-9', 'Europe/Amsterdam': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Andorra': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Astrakhan': '<+04>-4', 'Europe/Athens': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Belgrade': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Berlin': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Bratislava': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Brussels': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Bucharest': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Budapest': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Busingen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Chisinau': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Copenhagen': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Dublin': 'IST-1GMT0,M10.5.0,M3.5.0/1', 'Europe/Gibraltar': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Guernsey': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Helsinki': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Isle_of_Man': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Istanbul': '<+03>-3', 'Europe/Jersey': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Kaliningrad': 'EET-2', 'Europe/Kirov': 'MSK-3', 'Europe/Kyiv': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Lisbon': 'WET0WEST,M3.5.0/1,M10.5.0', 'Europe/Ljubljana': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/London': 'GMT0BST,M3.5.0/1,M10.5.0', 'Europe/Luxembourg': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Madrid': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Malta': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Mariehamn': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Minsk': '<+03>-3', 'Europe/Monaco': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Moscow': 'MSK-3', 'Europe/Oslo': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Paris': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Podgorica': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Prague': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Riga': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Rome': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Samara': '<+04>-4', 'Europe/San_Marino': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Sarajevo': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Saratov': '<+04>-4', 'Europe/Simferopol': 'MSK-3', 'Europe/Skopje': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Sofia': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Stockholm': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Tallinn': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Tirane': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Ulyanovsk': '<+04>-4', 'Europe/Vaduz': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vatican': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vienna': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Vilnius': 'EET-2EEST,M3.5.0/3,M10.5.0/4', 'Europe/Volgograd': 'MSK-3', 'Europe/Warsaw': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Zagreb': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Europe/Zurich': 'CET-1CEST,M3.5.0,M10.5.0/3', 'Indian/Antananarivo': 'EAT-3', 'Indian/Chagos': '<+06>-6', 'Indian/Christmas': '<+07>-7', 'Indian/Cocos': '<+0630>-6:30', 'Indian/Comoro': 'EAT-3', 'Indian/Kerguelen': '<+05>-5', 'Indian/Mahe': '<+04>-4', 'Indian/Maldives': '<+05>-5', 'Indian/Mauritius': '<+04>-4', 'Indian/Mayotte': 'EAT-3', 'Indian/Reunion': '<+04>-4', 'Pacific/Apia': '<+13>-13', 'Pacific/Auckland': 'NZST-12NZDT,M9.5.0,M4.1.0/3', 'Pacific/Bougainville': '<+11>-11', 'Pacific/Chatham': '<+1245>-12:45<+1345>,M9.5.0/2:45,M4.1.0/3:45', 'Pacific/Chuuk': '<+10>-10', 'Pacific/Easter': '<-06>6<-05>,M9.1.6/22,M4.1.6/22', 'Pacific/Efate': '<+11>-11', 'Pacific/Fakaofo': '<+13>-13', 'Pacific/Fiji': '<+12>-12', 'Pacific/Funafuti': '<+12>-12', 'Pacific/Galapagos': '<-06>6', 'Pacific/Gambier': '<-09>9', 'Pacific/Guadalcanal': '<+11>-11', 'Pacific/Guam': 'ChST-10', 'Pacific/Honolulu': 'HST10', 'Pacific/Kanton': '<+13>-13', 'Pacific/Kiritimati': '<+14>-14', 'Pacific/Kosrae': '<+11>-11', 'Pacific/Kwajalein': '<+12>-12', 'Pacific/Majuro': '<+12>-12', 'Pacific/Marquesas': '<-0930>9:30', 'Pacific/Midway': 'SST11', 'Pacific/Nauru': '<+12>-12', 'Pacific/Niue': '<-11>11', 'Pacific/Norfolk': '<+11>-11<+12>,M10.1.0,M4.1.0/3', 'Pacific/Noumea': '<+11>-11', 'Pacific/Pago_Pago': 'SST11', 'Pacific/Palau': '<+09>-9', 'Pacific/Pitcairn': '<-08>8', 'Pacific/Pohnpei': '<+11>-11', 'Pacific/Port_Moresby': '<+10>-10', 'Pacific/Rarotonga': '<-10>10', 'Pacific/Saipan': 'ChST-10', 'Pacific/Tahiti': '<-10>10', 'Pacific/Tarawa': '<+12>-12', 'Pacific/Tongatapu': '<+13>-13', 'Pacific/Wake': '<+12>-12', 'Pacific/Wallis': '<+12>-12', }; 07070100EA566D000081A400000000000000000000000169F91E1500000D73000000080000000100000000000000000000001C00000000usr/share/ucode/luci/sys.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { basename, readlink, readfile, open, popen, stat, glob } from 'fs'; export function process_list() { const top = popen('/bin/busybox top -bn1'); let line, list = []; for (let line = top.read('line'); length(line); line = top.read('line')) { let m = match(trim(line), /^([0-9]+) +([0-9]+) +(.+) +([RSDZTWI][ { const s = stat(path); return s?.type == 'file' && s?.perm?.user_exec; }), basename); }; export function init_index(name) { const src = readfile(`/etc/init.d/${basename(name)}`, 2048); const idx = []; for (let m in match(src, /^[[:space:]]*(START|STOP)=('[0-9][0-9]'|"[0-9][0-9]"|[0-9][0-9])[[:space:]]*$/gs)) { switch (m[1]) { case 'START': idx[0] = +trim(m[2], '"\''); break; case 'STOP': idx[1] = +trim(m[2], '"\''); break; } } return length(idx) ? idx : null; }; export function init_enabled(name) { for (let path in glob(`/etc/rc.d/[SK][0-9][0-9]${basename(name)}`)) { const ln = readlink(path); const s1 = stat(index(ln, '/') == 0 ? ln : `/etc/rc.d/${ln}`); const s2 = stat(`/etc/init.d/${basename(name)}`); if (s1?.inode == s2?.inode && s1?.type == 'file' && s1?.perm?.user_exec) return true; } return false; }; export function init_action(name, action) { const s = stat(`/etc/init.d/${basename(name)}`); if (s?.type != 'file' || s?.user_exec == false) return false; return system(`env -i /etc/init.d/${basename(name)} ${action} >/dev/null`); }; 07070100EA566C000081A400000000000000000000000169F91E1500001217000000080000000100000000000000000000002000000000usr/share/ucode/luci/runtime.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { access, basename, stat } from 'fs'; import { cursor } from 'uci'; const template_directory = '/usr/share/ucode/luci/template'; function cut_message(msg) { return trim(replace(msg, /\n--\n.*$/, '')); } function format_nested_exception(ex) { let msg = replace(cut_message(ex.message), /(\n+( \|[^\n]*(\n|$))+)/, (m, m1) => { m1 = replace(m1, /(^|\n) \| ?/g, '$1'); m = match(m1, /^(.+?)\n(In.*line \d+, byte \d+:.+)$/); return `
${cut_message(m ? m[1] : m1)}
${m ? `
${trim(m[2])}
` : ''}
`; }); return `
${cut_message(msg)}
${trim(ex.stacktrace[0].context)}
`; } function format_lua_exception(ex) { let m = match(ex.message, /^(.+)\nstack traceback:\n(.+)$/); return `
${cut_message(m ? m[1] : ex.message)}
${m ? trim(replace(m[2], /(^|\n)\t/g, '$1')) : ex.stacktrace[0].context}
`; } const Class = { init_lua: function(optional) { if (!this.L) { let bridge = this.env.dispatcher.load_luabridge(optional); if (bridge) { let http = this.env.http; this.L = bridge.create(); this.L.set('L', proto({ write: (...args) => http.closed || print(...args) }, this.env)); this.L.invoke('require', 'luci.ucodebridge'); this.env.lua_active = true; } } return this.L; }, is_ucode_template: function(path) { return access(`${template_directory}/${path}.ut`); }, is_lua_template: function(path) { let vm = this.init_lua(true); return vm && access(`${vm.get('_G', 'luci', 'template', 'viewdir')}/${path}.htm`); }, render_ucode: function(path, scope) { let tmplfunc = loadfile(path, { raw_mode: false }); if (this.env.http.closed) render(call, tmplfunc, null, scope ?? {}); else call(tmplfunc, null, scope ?? {}); }, render_lua: function(path, scope) { let vm = this.init_lua(); let render = vm.get('_G', 'luci', 'ucodebridge', 'render'); render.call(path, scope ?? {}); }, trycompile: function(path) { let ucode_path = `${template_directory}/${path}.ut`; if (access(ucode_path)) { try { loadfile(ucode_path, { raw_mode: false }); } catch (ucode_err) { return `Unable to compile '${path}' as ucode template: ${format_nested_exception(ucode_err)}`; } } else { try { let vm = this.init_lua(true); if (vm) vm.get('_G', 'luci', 'ucodebridge', 'compile').call(path); else return `Unable to compile '${path}' as Lua template: Unable to load Lua runtime`; } catch (lua_err) { return `Unable to compile '${path}' as Lua template: ${format_lua_exception(lua_err)}`; } } return true; }, render_any: function(path, scope) { let ucode_path = `${template_directory}/${path}.ut`; scope = proto(scope ?? {}, this.scopes[-1]); push(this.scopes, scope); try { if (access(ucode_path)) this.render_ucode(ucode_path, scope); else this.render_lua(path, scope); } catch (ex) { pop(this.scopes); die(ex); } pop(this.scopes); }, render: function(path, scope) { let self = this; this.env.http.write(render(() => self.render_any(path, scope))); }, call: function(modname, method, ...args) { let vm = this.init_lua(); let lcall = vm.get('_G', 'luci', 'ucodebridge', 'call'); return lcall.call(modname, method, ...args); } }; export default function(env) { const self = proto({ env: env ??= {}, scopes: [ proto(env, global) ], global }, Class); const uci = cursor(); // determine theme let media = uci.get('luci', 'main', 'mediaurlbase'); let status = self.trycompile(`themes/${basename(media)}/header`); if (status !== true) { media = null; self.env.media_error = status; for (let k, v in uci.get_all('luci', 'themes')) { if (substr(k, 0, 1) != '.') { status = self.trycompile(`themes/${basename(v)}/header`); if (status === true) { media = v; break; } } } if (!media) env.dispatcher.error500(`Unable to render any theme header template, last error was:\n${status}`); } self.env.media = media; self.env.theme = basename(media); self.env.resource = uci.get('luci', 'main', 'resourcebase'); self.env.pkgs_update_time = stat('/lib/apk/db/installed')?.mtime ?? stat('/usr/lib/opkg/status')?.mtime ?? 0; self.env.include = (...args) => self.render_any(...args); return self; }; 07070100EA5674000041ED00000000000000000000000469F91E1500000000000000080000000100000000000000000000001E00000000usr/share/ucode/luci/template07070100EA567D000081A400000000000000000000000169F91E15000000E7000000080000000100000000000000000000002600000000usr/share/ucode/luci/template/view.ut{% include('header') %}
{{ _('Loading view…') }}
{% include('footer') %} 07070100EA567C000081A400000000000000000000000169F91E1500000830000000080000000100000000000000000000002900000000usr/share/ucode/luci/template/sysauth.ut{# Copyright 2008 Steven Barth Copyright 2008-2012 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}
{% if (fuser): %}

{{ _('Invalid username and/or password! Please try again.') }}

{% endif %}

{{ _('Authorization Required') }}

{{ _('Please enter your username and password.') }}
{% let https_ports = uci.get('uhttpd', 'main', 'listen_https') ?? []; https_ports = uniq(filter( map( (type(https_ports) == 'string') ? split(https_port, /\s+/) : https_ports, e => +match(e, /\d+$/)?.[0] ), p => (p >= 0 && p <= 65535) )); %} {% include('footer') %} 07070100EA5675000081A400000000000000000000000169F91E150000025B000000080000000100000000000000000000002B00000000usr/share/ucode/luci/template/csrftoken.ut{# Copyright 2015-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

{{ _('Form token mismatch') }}


{{ _('The submitted security token is invalid or already expired!') }}

{{ _(` In order to prevent unauthorized access to the system, your request has been blocked. Click "Continue »" below to return to the previous page. `) }}

Continue »

{% include('footer') %} 07070100EA5679000081A400000000000000000000000169F91E15000004F7000000080000000100000000000000000000002800000000usr/share/ucode/luci/template/footer.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% const rollback = dispatcher.rollback_pending() %} {% if (rollback || trigger_apply || trigger_revert): %} {% endif %} {% if (media_error): %} {% endif %} {% include(`themes/${theme}/footer`) %} 07070100EA5677000081A400000000000000000000000169F91E15000001B3000000080000000100000000000000000000002A00000000usr/share/ucode/luci/template/error404.ut{# Copyright 2008 Steven Barth Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

404 {{ _('Not Found') }}

{{ _('Sorry, the object you requested was not found.') }}

{{ message }}

{{ _('Unable to dispatch') }}: {{ dispatcher.build_url(...ctx.request_path) }} {% include('footer') %} 07070100EA5678000081A400000000000000000000000169F91E1500000467000000080000000100000000000000000000002A00000000usr/share/ucode/luci/template/error500.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#}

{{ title }}

{{ message }}
{% if (exception): %}
{{ exception.message }}
{{ exception.stacktrace[0].context }}
{% endif %}
07070100EA573B000041ED00000000000000000000000369F91E1500000000000000080000000100000000000000000000002500000000usr/share/ucode/luci/template/themes07070100EA573C0000A1FF00000000000000000000000169F91E1500000009000000080000000100000000000000000000003400000000usr/share/ucode/luci/template/themes/bootstrap-darkbootstrap07070100EA573D0000A1FF00000000000000000000000169F91E1500000009000000080000000100000000000000000000003500000000usr/share/ucode/luci/template/themes/bootstrap-lightbootstrap07070100EA573E000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000002F00000000usr/share/ucode/luci/template/themes/bootstrap07070100EA5741000081A400000000000000000000000169F91E1500000541000000080000000100000000000000000000003A00000000usr/share/ucode/luci/template/themes/bootstrap/sysauth.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header', { blank_page: true }) %}
{{ _('Loading view…') }}
{% include('footer', { blank_page: true }) %} 07070100EA573F000081A400000000000000000000000169F91E150000029F000000080000000100000000000000000000003900000000usr/share/ucode/luci/template/themes/bootstrap/footer.ut {% if (!blank_page): %} {% endif %} 07070100EA5740000081A400000000000000000000000169F91E1500000E79000000080000000100000000000000000000003900000000usr/share/ucode/luci/template/themes/bootstrap/header.ut{# Copyright 2008 Steven Barth Copyright 2012 David Menting Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% import { getuid, getspnam } from 'luci.core'; const boardinfo = ubus.call('system', 'board'); const darkpref = (theme == 'bootstrap-dark' ? 'true' : (theme == 'bootstrap-light' ? 'false' : null)); http.prepare_content('text/html; charset=UTF-8'); -%} {{ striptags(`${boardinfo.hostname ?? '?'}${dispatched?.title ? ` | ${_(dispatched.title)}` : ''}`) }} {% if (!darkpref): %} {% endif %} {% if (node?.css): %} {% endif %} {% if (css): %} {% endif %} {% if (!blank_page): %}
{{ striptags(boardinfo.hostname ?? '?') }}
{% if (getuid() == 0 && getspnam('root')?.pwdp === ''): %}

{{ _('No password set!') }}

{{ _('There is no password set on this router. Please configure a root password to protect the web interface.') }}

{% if (dispatcher.lookup("admin/system/admin")): %}
{{ _('Go to password configuration...') }}
{% endif %}
{% endif %} {% if (boardinfo.rootfs_type == "initramfs"): %}

{{ _('System running in recovery (initramfs) mode.') }}

{{ _('No changes to settings will be stored and are lost after rebooting. This mode should only be used to install a firmware upgrade') }}

{% if (dispatcher.lookup("admin/system/flash")): %}
{{ _('Go to firmware upgrade...') }}
{% endif %}
{% endif %} {% endif %} 07070100EA56EF000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000002B00000000usr/share/ucode/luci/template/admin_status07070100EA56F0000081A400000000000000000000000169F91E150000065A000000080000000100000000000000000000003400000000usr/share/ucode/luci/template/admin_status/index.ut{# Copyright 2008 Steven Barth Copyright 2008-2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include('header') %}

{{ _('Status') }}

{{ _('Loading view…') }}
{% include('footer') %} 07070100EA567B000081A400000000000000000000000169F91E150000041F000000080000000100000000000000000000002800000000usr/share/ucode/luci/template/header.ut{# Copyright 2022 Jo-Philipp Wich Licensed to the public under the Apache License 2.0. -#} {% include(`themes/${theme}/header`); -%} 07070100EA566A000081A400000000000000000000000169F91E1500005A0A000000080000000100000000000000000000002300000000usr/share/ucode/luci/dispatcher.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { open, stat, glob, lsdir, unlink, basename } from 'fs'; import { striptags, entityencode } from 'html'; import { connect } from 'ubus'; import { cursor } from 'uci'; import { rand } from 'math'; import { openlog, syslog, closelog, LOG_INFO, LOG_WARNING, LOG_AUTHPRIV } from 'log'; import { hash, load_catalog, change_catalog, translate, ntranslate, getuid } from 'luci.core'; import { revision as luciversion, branch as luciname } from 'luci.version'; import { default as LuCIRuntime } from 'luci.runtime'; import { urldecode } from 'luci.http'; let ubus = connect(); let uci = cursor(); let indexcache = "/tmp/luci-indexcache"; let http, runtime, tree, luabridge; function error404(msg) { http.status(404, 'Not Found'); try { runtime.render('error404', { message: msg ?? 'Not found' }); } catch { http.header('Content-Type', 'text/plain; charset=UTF-8'); http.write(msg ?? 'Not found'); } return false; } function error500(msg, ex) { if (!http.eoh) { http.status(500, 'Internal Server Error'); http.header('Content-Type', 'text/html; charset=UTF-8'); } try { runtime.render('error500', { title: ex?.type ?? 'Runtime exception', message: replace( msg, /(\s)((\/[A-Za-z0-9_.-]+)+:\d+|\[string "[^"]+"\]:\d+)/g, '$1$2' ), exception: ex }); } catch { http.write('\n'); http.write(`

${trim(msg)}

\n`); if (ex) { http.write(`

${trim(ex.message)}

\n`); http.write(`
${trim(ex.stacktrace[0].context)}
\n`); } } exit(0); } function load_luabridge(optional) { if (luabridge == null) { try { luabridge = require('lua'); } catch (ex) { luabridge = false; if (!optional) error500('No Lua runtime installed'); } } return luabridge; } function determine_request_language() { let lang = uci.get('luci', 'main', 'lang') || 'auto'; if (lang == 'auto') { for (let tag in split(http.getenv('HTTP_ACCEPT_LANGUAGE'), ',')) { tag = split(trim(split(tag, ';')?.[0]), '-'); if (tag) { let cc = tag[1] ? `${tag[0]}_${lc(tag[1])}` : null; if (cc && uci.get('luci', 'languages', cc)) { lang = cc; break; } else if (uci.get('luci', 'languages', tag[0])) { lang = tag[0]; break; } } } } if (lang == 'auto') lang = 'en'; else lang = replace(lang, '_', '-'); if (load_catalog(lang, '/usr/lib/lua/luci/i18n')) change_catalog(lang); return lang; } function determine_version() { let res = { luciname, luciversion }; for (let f = open("/etc/os-release"), l = f?.read?.("line"); l; l = f.read?.("line")) { let kv = split(l, '=', 2); switch (kv[0]) { case 'NAME': res.distname = trim(kv[1], '"\' \n'); break; case 'VERSION': res.distversion = trim(kv[1], '"\' \n'); break; case 'HOME_URL': res.disturl = trim(kv[1], '"\' \n'); break; case 'BUILD_ID': res.distrevision = trim(kv[1], '"\' \n'); break; } } return res; } function read_jsonfile(path, defval) { let rv; try { rv = json(open(path, "r")); } catch (e) { rv = defval; } return rv; } function read_cachefile(file, reader) { let euid = getuid(), fstat = stat(file), fuid = fstat?.uid, perm = fstat?.perm; if (euid != fuid || perm?.group_read || perm?.group_write || perm?.group_exec || perm?.other_read || perm?.other_write || perm?.other_exec) return null; return reader(file); } function check_fs_depends(spec) { for (let path, kind in spec) { if (kind == 'directory') { if (!length(lsdir(path))) return false; } else if (kind == 'executable') { let fstat = stat(path); if (fstat?.type != 'file' || fstat?.user_exec == false) return false; } else if (kind == 'file') { let fstat = stat(path); if (fstat?.type != 'file') return false; } else if (kind == 'absent') { if (stat(path) != null) return false; } } return true; } function check_uci_depends_options(conf, s, opts) { if (type(opts) == 'string') { return (s['.type'] == opts); } else if (opts === true) { for (let option, value in s) if (ord(option) != 46) return true; } else if (type(opts) == 'object') { for (let option, value in opts) { let sval = s[option]; if (type(sval) == 'array') { if (!(value in sval)) return false; } else if (value === true) { if (sval == null) return false; } else { if (sval != value) return false; } } } return true; } function check_uci_depends_section(conf, sect) { for (let section, options in sect) { let stype = match(section, /^@([A-Za-z0-9_-]+)$/); if (stype) { let found = false; uci.load(conf); uci.foreach(conf, stype[1], (s) => { if (check_uci_depends_options(conf, s, options)) { found = true; return false; } }); if (!found) return false; } else { let s = uci.get_all(conf, section); if (!s || !check_uci_depends_options(conf, s, options)) return false; } } return true; } function check_uci_depends(conf) { for (let config, values in conf) { if (values == true) { let found = false; uci.load(config); uci.foreach(config, null, () => { found = true }); if (!found) return false; } else if (type(values) == 'object') { if (!check_uci_depends_section(config, values)) return false; } } return true; } function check_depends(spec) { if (type(spec?.depends?.fs) in ['array', 'object']) { let satisfied = false; let alternatives = (type(spec.depends.fs) == 'array') ? spec.depends.fs : [ spec.depends.fs ]; for (let alternative in alternatives) { if (check_fs_depends(alternative)) { satisfied = true; break; } } if (!satisfied) return false; } if (type(spec?.depends?.uci) in ['array', 'object']) { let satisfied = false; let alternatives = (type(spec.depends.uci) == 'array') ? spec.depends.uci : [ spec.depends.uci ]; for (let alternative in alternatives) { if (check_uci_depends(alternative)) { satisfied = true; break; } } if (!satisfied) return false; } return true; } function check_acl_depends(require_groups, groups) { if (length(require_groups)) { let writable = false; for (let group in require_groups) { let read = ('read' in groups?.[group]); let write = ('write' in groups?.[group]); if (!read && !write) return null; if (write) writable = true; } return writable; } return true; } function hash_filelist(files) { let hashval = 0x1b756362; for (let file in files) { let st = stat(file); if (st) hashval = hash(sprintf("%x|%x|%x", st.ino, st.mtime, st.size), hashval); } return hashval; } function build_pagetree() { let tree = { action: { type: 'firstchild' } }; let schema = { action: 'object', auth: 'object', cors: 'bool', depends: 'object', order: 'int', setgroup: 'string', setuser: 'string', title: 'string', wildcard: 'bool', firstchild_ineligible: 'bool' }; let files = glob('/usr/share/luci/menu.d/*.json', '/usr/lib/lua/luci/controller/*.lua', '/usr/lib/lua/luci/controller/*/*.lua'); let cachefile; if (indexcache) { cachefile = sprintf('%s.%08x.json', indexcache, hash_filelist(files)); let res = read_cachefile(cachefile, read_jsonfile); if (res) return res; for (let path in glob(indexcache + '.*.json')) unlink(path); } for (let file in files) { let data; if (substr(file, -5) == '.json') data = read_jsonfile(file); else if (load_luabridge(true)) data = runtime.call('luci.dispatcher', 'process_lua_controller', file); else warn(`Lua controller ${file} present but no Lua runtime installed.\n`); if (type(data) == 'object') { for (let path, spec in data) { if (type(spec) == 'object') { let node = tree; let has_wildcard = false; for (let s in match(path, /[^\/]+/g)) { if (s[0] == '*') { node.wildcard = true; has_wildcard = true; break; } node.children ??= {}; node.children[s[0]] ??= { satisfied: true }; node = node.children[s[0]]; } if (node !== tree) { for (let k, t in schema) if (type(spec[k]) == t) node[k] = spec[k]; /* Preserve distinct actions for wildcard vs. base path */ if (has_wildcard && type(spec.action) == 'object') node.wildcardaction = spec.action; else if (type(spec.action) == 'object') node.action = spec.action; node.satisfied = check_depends(spec); } } } } } if (cachefile) { let fd = open(cachefile, 'w', 0600); if (fd) { fd.write(tree); fd.close(); } } return tree; } function apply_tree_acls(node, acl) { for (let name, spec in node?.children) apply_tree_acls(spec, acl); if (node?.depends?.acl) { switch (check_acl_depends(node.depends.acl, acl["access-group"])) { case null: node.satisfied = false; break; case false: node.readonly = true; break; } } } function menu_json(acl) { tree ??= build_pagetree(); if (acl) apply_tree_acls(tree, acl); return tree; } function ctx_append(ctx, name, node) { ctx.path ??= []; push(ctx.path, name); ctx.acls ??= []; push(ctx.acls, ...(node?.depends?.acl || [])); ctx.auth = node.auth || ctx.auth; ctx.cors = node.cors || ctx.cors; ctx.suid = node.setuser || ctx.suid; ctx.sgid = node.setgroup || ctx.sgid; return ctx; } function session_retrieve(sid, allowed_users) { let sdat = ubus.call("session", "get", { ubus_rpc_session: sid }); let sacl = ubus.call("session", "access", { ubus_rpc_session: sid }); if (type(sdat?.values?.token) == 'string' && (!length(allowed_users) || sdat?.values?.username in allowed_users)) { // uci:set_session_id(sid) return { sid, data: sdat.values, acls: length(sacl) ? sacl : {} }; } return null; } function randomid(num_bytes) { let bytes = []; while (num_bytes-- > 0) push(bytes, sprintf('%02x', rand() % 256)); return join('', bytes); } function session_setup(user, pass, path) { let timeout = uci.get('luci', 'sauth', 'sessiontime'); let login = ubus.call("session", "login", { username: user, password: pass, timeout: timeout ? +timeout : null }); openlog('dispatcher.uc'); if (type(login?.ubus_rpc_session) == 'string') { ubus.call("session", "set", { ubus_rpc_session: login.ubus_rpc_session, values: { token: randomid(16) } }); syslog(LOG_INFO|LOG_AUTHPRIV, sprintf("luci: accepted login on /%s for %s from %s", join('/', path), user || "?", http.getenv("REMOTE_ADDR") || "?")); return session_retrieve(login.ubus_rpc_session); } syslog(LOG_WARNING|LOG_AUTHPRIV, sprintf("luci: failed login on /%s for %s from %s", join('/', path), user || "?", http.getenv("REMOTE_ADDR") || "?")); closelog(); } function check_authentication(method) { let m = match(method, /^([[:alpha:]]+):(.+)$/); let sid; switch (m?.[1]) { case 'cookie': sid = http.getcookie(m[2]); break; case 'param': sid = http.formvalue(m[2]); break; case 'query': sid = http.formvalue(m[2], true); break; } return sid ? session_retrieve(sid) : null; } function is_authenticated(auth) { for (let method in auth?.methods) { let session = check_authentication(method); if (session) return session; } return null; } function node_weight(node) { let weight = min(node.order ?? 9999, 9999); if (node.auth?.login) weight += 10000; return weight; } function clone(src) { switch (type(src)) { case 'array': return map(src, clone); case 'object': let dest = {}; for (let k, v in src) dest[k] = clone(v); return dest; default: return src; } } function resolve_firstchild(node, session, login_allowed, ctx) { let candidate, candidate_ctx; for (let name, child in node.children) { if (!child.satisfied) continue; if (!session) session = is_authenticated(node.auth); let cacl = child.depends?.acl; let login = !session && (login_allowed || child.auth?.login); if (login || check_acl_depends(cacl, session?.acls?.["access-group"]) != null) { if (child.title && type(child.action) == "object") { let child_ctx = ctx_append(clone(ctx), name, child); if (child.action.type == "firstchild") { if (!candidate || node_weight(candidate) > node_weight(child)) { let have_grandchild = resolve_firstchild(child, session, login, child_ctx); if (have_grandchild) { candidate = child; candidate_ctx = child_ctx; } } } else if (!child.firstchild_ineligible) { if (!candidate || node_weight(candidate) > node_weight(child)) { candidate = child; candidate_ctx = child_ctx; } } } } } if (!candidate) return false; for (let k, v in candidate_ctx) ctx[k] = v; return true; } function resolve_page(tree, request_path) { let node = tree; let login = false; let session = null; let ctx = {}; for (let i, s in request_path) { node = node.children?.[s]; if (!node?.satisfied) break; ctx_append(ctx, s, node); if (!session) session = is_authenticated(node.auth); if (!login && node.auth?.login) login = true; /* If this node is marked as wildcard, check if the next segment * matches a child node. Only apply wildcard behaviour (capturing * remaining segments as args) if no child matches, allowing * deeper routes like foo/bar/* to work alongside * foo/* */ if (node.wildcard) { let next_segment = request_path[i + 1]; let has_matching_child = next_segment && node.children?.[next_segment]?.satisfied; if (!has_matching_child) { ctx.request_args = []; ctx.request_path = ctx.path ? [ ...ctx.path ] : []; while (++i < length(request_path)) { push(ctx.request_path, request_path[i]); push(ctx.request_args, request_path[i]); } break; } } } if (node?.action?.type == 'firstchild') resolve_firstchild(node, session, login, ctx); ctx.acls ??= {}; ctx.path ??= []; ctx.request_args ??= []; ctx.request_path ??= request_path ? [ ...request_path ] : []; ctx.authsession = session?.sid; ctx.authtoken = session?.data?.token; ctx.authuser = session?.data?.username; ctx.authacl = session?.acls; node = tree; for (let s in ctx.path) { node = node.children[s]; assert(node, "Internal node resolve error"); } return { node, ctx, session }; } function require_post_security(target, args) { if (target?.type == 'arcombine') return require_post_security(length(args) ? target?.targets?.[1] : target?.targets?.[0], args); if (type(target?.post) == 'object') { for (let param_name, required_val in target.post) { let request_val = http.formvalue(param_name); if ((type(required_val) == 'string' && request_val != required_val) || (required_val == true && request_val == null)) return false; } return true; } return (target?.post == true); } function test_post_security(authtoken) { if (http.getenv("REQUEST_METHOD") != "POST") { http.status(405, "Method Not Allowed"); http.header("Allow", "POST"); return false; } if (http.formvalue("token") != authtoken) { http.status(403, "Forbidden"); runtime.render("csrftoken"); return false; } return true; } function build_url(...path) { let url = [ http.getenv('SCRIPT_NAME') ?? '' ]; for (let p in path) if (match(p, /^[A-Za-z0-9_%.\/,;-]+$/)) push(url, '/', p); if (length(url) == 1) push(url, '/'); return join('', url); } function lookup(...segments) { let node = menu_json(); let path = []; for (let segment in segments) for (let name in split(segment, '/')) push(path, name); for (let name in path) { node = node.children[name]; if (!node) return null; if (node.leaf) break; } return { node, url: build_url(...path) }; } function rollback_pending() { const now = time(); const rv = ubus.call('session', 'get', { ubus_rpc_session: '00000000000000000000000000000000', keys: [ 'rollback' ] }); if (type(rv?.values?.rollback?.token) != 'string' || type(rv?.values?.rollback?.session) != 'string' || type(rv?.values?.rollback?.timeout) != 'int' || rv.values.rollback.timeout <= now) return false; return { remaining: rv.values.rollback.timeout - now, session: rv.values.rollback.session, token: rv.values.rollback.token }; } let dispatch; function render_action(fn) { const data = render(fn); http.write_headers(); http.output(data); } function run_action(request_path, lang, tree, resolved, action) { switch ((type(action) == 'object') ? action.type : 'none') { case 'template': if (runtime.is_ucode_template(action.path)) runtime.render(action.path, {}); else render_action(() => { runtime.call('luci.dispatcher', 'render_lua_template', action.path); }); break; case 'view': runtime.render('view', { view: action.path }); break; case 'call': render_action(() => { runtime.call(action.module, action.function, ...(action.parameters ?? []), ...resolved.ctx.request_args ); }); break; case 'function': const mod = require(action.module); assert(type(mod[action.function]) == 'function', `Module '${action.module}' does not export function '${action.function}'`); render_action(() => { call(mod[action.function], mod, runtime.env, ...(action.parameters ?? []), ...resolved.ctx.request_args ); }); break; case 'cbi': render_action(() => { runtime.call('luci.dispatcher', 'invoke_cbi_action', action.path, null, ...resolved.ctx.request_args ); }); break; case 'form': render_action(() => { runtime.call('luci.dispatcher', 'invoke_form_action', action.path, ...resolved.ctx.request_args ); }); break; case 'alias': dispatch(http, [ ...split(action.path, '/'), ...resolved.ctx.request_args ]); break; case 'rewrite': dispatch(http, [ ...splice([ ...request_path ], 0, action.remove), ...split(action.path, '/'), ...resolved.ctx.request_args ]); break; case 'firstchild': if (!length(tree.children)) { error404("No root node was registered, this usually happens if no module was installed.\n" + "Install luci-mod-admin-full and retry. " + "If the module is already installed, try removing the /tmp/luci-indexcache file."); break; } /* fall through */ case 'none': error404(`No page is registered at '/${entityencode(join("/", resolved.ctx.request_path))}'.\n` + "If this url belongs to an extension, make sure it is properly installed.\n" + "If the extension was recently installed, try removing the /tmp/luci-indexcache file."); break; default: error500(`Unhandled action type ${action?.type ?? '?'}`); } } dispatch = function(_http, path) { http = _http; let version = determine_version(); let lang = determine_request_language(); runtime = runtime || LuCIRuntime({ http, ubus, uci, ctx: {}, version, config: { main: uci.get_all('luci', 'main') ?? {}, apply: uci.get_all('luci', 'apply') ?? {} }, dispatcher: { rollback_pending, is_authenticated, load_luabridge, lookup, menu_json, build_url, randomid, error404, error500, lang }, striptags, entityencode, _: (...args) => translate(...args) ?? args[0], N_: (...args) => ntranslate(...args) ?? (args[0] == 1 ? args[1] : args[2]), }); try { let menu = menu_json(); path ??= map(match(http.getenv('PATH_INFO'), /[^\/]+/g), m => urldecode(m[0])); let resolved = resolve_page(menu, path); runtime.env.ctx = resolved.ctx; runtime.env.dispatched = resolved.node; runtime.env.requested ??= resolved.node; if (length(resolved.ctx.auth)) { let session = is_authenticated(resolved.ctx.auth); if (!session && resolved.ctx.auth.login) { let user = http.getenv('HTTP_AUTH_USER'); let pass = http.getenv('HTTP_AUTH_PASS'); if (user == null && pass == null) { user = http.formvalue('luci_username'); pass = http.formvalue('luci_password'); } if (user != null && pass != null) session = session_setup(user, pass, resolved.ctx.request_path); if (!session) { resolved.ctx.path = []; http.status(403, 'Forbidden'); http.header('X-LuCI-Login-Required', 'yes'); let scope = { duser: 'root', fuser: user }; let theme_sysauth = `themes/${basename(runtime.env.media)}/sysauth`; if (runtime.is_ucode_template(theme_sysauth) || runtime.is_lua_template(theme_sysauth)) { try { return runtime.render(theme_sysauth, scope); } catch (e) { runtime.env.media_error = `${e}`; } } return runtime.render('sysauth', scope); } let cookie_name = (http.getenv('HTTPS') == 'on') ? 'sysauth_https' : 'sysauth_http', cookie_secure = (http.getenv('HTTPS') == 'on') ? '; secure' : ''; http.header('Set-Cookie', `${cookie_name}=${session.sid}; path=${build_url()}; SameSite=strict; HttpOnly${cookie_secure}`); http.redirect(build_url(...resolved.ctx.request_path)); return; } if (!session) { http.status(403, 'Forbidden'); http.header('X-LuCI-Login-Required', 'yes'); return; } resolved.ctx.authsession ??= session.sid; resolved.ctx.authtoken ??= session.data?.token; resolved.ctx.authuser ??= session.data?.username; resolved.ctx.authacl ??= session.acls; /* In case the Lua runtime was already initialized, e.g. by probing legacy * theme header templates, make sure to update the session ID of the uci * module. */ if (runtime.L) { runtime.L.invoke('require', 'luci.model.uci'); runtime.L.get('luci', 'model', 'uci').invoke('set_session_id', session.sid); } } if (length(resolved.ctx.acls)) { let perm = check_acl_depends(resolved.ctx.acls, resolved.ctx.authacl?.['access-group']); if (perm == null) { http.status(403, 'Forbidden'); return; } if (resolved.node) resolved.node.readonly = !perm; } let action = resolved.node.action; /* If this node matched a wildcard and we have request args, * prefer the wildcard-specific action when defined. */ if (length(resolved.ctx.request_args) && type(resolved.node.wildcardaction) == 'object') action = resolved.node.wildcardaction; if (action?.type == 'arcombine') action = length(resolved.ctx.request_args) ? action.targets?.[1] : action.targets?.[0]; if (resolved.ctx.cors && http.getenv('REQUEST_METHOD') == 'OPTIONS') { http.status(200, 'OK'); http.header('Access-Control-Allow-Origin', http.getenv('HTTP_ORIGIN') ?? '*'); http.header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS'); return; } if (require_post_security(action) && !test_post_security(resolved.ctx.authtoken)) return; run_action(path, lang, menu, resolved, action); } catch (ex) { error500('Unhandled exception during request dispatching', ex); } }; export default dispatch; 07070100EA566E000081A400000000000000000000000169F91E15000000CC000000080000000100000000000000000000001F00000000usr/share/ucode/luci/uhttpd.uc{% import dispatch from 'luci.dispatcher'; import request from 'luci.http'; global.handle_request = function(env) { let req = request(env, uhttpd.recv, uhttpd.send); dispatch(req); req.close(); }; 07070100EA566B000081A400000000000000000000000169F91E1500003392000000080000000100000000000000000000001D00000000usr/share/ucode/luci/http.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { urlencode as _urlencode, urldecode as _urldecode, urlencoded_parser, multipart_parser, header_attribute, ENCODE_IF_NEEDED, ENCODE_FULL, DECODE_IF_NEEDED, DECODE_PLUS } from 'lucihttp'; import { error as fserror, stdin, stdout, mkstemp } from 'fs'; // luci.http module scope export let HTTP_MAX_CONTENT = 1024*100; // 100 kB maximum content size // Decode a mime encoded http message body with multipart/form-data // Content-Type. Stores all extracted data associated with its parameter name // in the params table within the given message object. Multiple parameter // values are stored as tables, ordinary ones as strings. // If an optional file callback function is given then it is fed with the // file contents chunk by chunk and only the extracted file name is stored // within the params table. The callback function will be called subsequently // with three arguments: // o Table containing decoded (name, file) and raw (headers) mime header data // o String value containing a chunk of the file data // o Boolean which indicates whether the current chunk is the last one (eof) export function mimedecode_message_body(src, msg, file_cb) { let len = 0, maxlen = +msg.env.CONTENT_LENGTH; let err, header, field, parser; parser = multipart_parser(msg.env.CONTENT_TYPE, function(what, buffer, length) { if (what == parser.PART_INIT) { field = {}; } else if (what == parser.HEADER_NAME) { header = lc(buffer); } else if (what == parser.HEADER_VALUE && header) { if (lc(header) == 'content-disposition' && header_attribute(buffer, null) == 'form-data') { field.name = header_attribute(buffer, 'name'); field.file = header_attribute(buffer, 'filename'); field[1] = field.file; } field.headers = field.headers || {}; field.headers[header] = buffer; } else if (what == parser.PART_BEGIN) { return !field.file; } else if (what == parser.PART_DATA && field.name && length > 0) { if (field.file) { if (file_cb) { file_cb(field, buffer, false); msg.params[field.name] = msg.params[field.name] || field; } else { if (!field.fd) field.fd = mkstemp(field.name); if (field.fd) { field.fd.write(buffer); msg.params[field.name] = msg.params[field.name] || field; } } } else { field.value = buffer; } } else if (what == parser.PART_END && field.name) { if (field.file && msg.params[field.name]) { if (file_cb) file_cb(field, '', true); else if (field.fd) field.fd.seek(0); } else { let val = msg.params[field.name]; if (type(val) == 'array') push(val, field.value || ''); else if (val != null) msg.params[field.name] = [ val, field.value || '' ]; else msg.params[field.name] = field.value || ''; } field = null; } else if (what == parser.ERROR) { err = buffer; } return true; }, HTTP_MAX_CONTENT); while (true) { let chunk = src(); len += length(chunk); if (maxlen && len > maxlen + 2) die('Message body size exceeds Content-Length'); if (!parser.parse(chunk)) die(err); if (chunk == null) break; } }; // Decode an urlencoded http message body with application/x-www-urlencoded // Content-Type. Stores all extracted data associated with its parameter name // in the params table within the given message object. Multiple parameter // values are stored as tables, ordinary ones as strings. export function urldecode_message_body(src, msg) { let len = 0, maxlen = +msg.env.CONTENT_LENGTH; let err, name, value, parser; parser = urlencoded_parser(function (what, buffer, length) { if (what == parser.TUPLE) { name = null; value = null; } else if (what == parser.NAME) { name = _urldecode(buffer, DECODE_PLUS); } else if (what == parser.VALUE && name) { let val = msg.params[name]; if (type(val) == 'array') push(val, _urldecode(buffer, DECODE_PLUS) || ''); else if (val != null) msg.params[name] = [ val, _urldecode(buffer, DECODE_PLUS) || '' ]; else msg.params[name] = _urldecode(buffer, DECODE_PLUS) || ''; } else if (what == parser.ERROR) { err = buffer; } return true; }, HTTP_MAX_CONTENT); while (true) { let chunk = src(); len += length(chunk); if (maxlen && len > maxlen + 2) die('Message body size exceeds Content-Length'); if (!parser.parse(chunk)) die(err); if (chunk == null) break; } }; // This function will examine the Content-Type within the given message object // to select the appropriate content decoder. // Currently the application/x-www-urlencoded and application/form-data // mime types are supported. If the encountered content encoding can't be // handled then the whole message body will be stored unaltered as 'content' // property within the given message object. export function parse_message_body(src, msg, filecb) { if (msg.env.CONTENT_LENGTH || msg.env.REQUEST_METHOD == 'POST') { let ctype = header_attribute(msg.env.CONTENT_TYPE, null); // Is it multipart/mime ? if (ctype == 'multipart/form-data') return mimedecode_message_body(src, msg, filecb); // Is it application/x-www-form-urlencoded ? else if (ctype == 'application/x-www-form-urlencoded') return urldecode_message_body(src, msg); // Unhandled encoding // If a file callback is given then feed it chunk by chunk, else // store whole buffer in message.content let sink; // If we have a file callback then feed it if (type(filecb) == 'function') { let meta = { name: 'raw', encoding: msg.env.CONTENT_TYPE }; sink = (chunk) => { if (chunk != null) return filecb(meta, chunk, false); else return filecb(meta, null, true); }; } // ... else append to .content else { let chunks = [], len = 0; sink = (chunk) => { len += length(chunk); if (len > HTTP_MAX_CONTENT) die('POST data exceeds maximum allowed length'); if (chunk != null) { push(chunks, chunk); } else { msg.content = join('', chunks); msg.content_length = len; } }; } // Pump data... while (true) { let chunk = src(); sink(chunk); if (chunk == null) break; } return true; } return false; }; export function build_querystring(q) { let s = []; for (let k, v in q) { push(s, length(s) ? '&' : '?', _urlencode(k, ENCODE_IF_NEEDED | ENCODE_FULL) || k, '=', _urlencode(v, ENCODE_IF_NEEDED | ENCODE_FULL) || v ); } return join('', s); }; export function urlencode(value) { if (value == null) return null; value = '' + value; return _urlencode(value, ENCODE_IF_NEEDED | ENCODE_FULL) || value; }; export function urldecode(value, decode_plus) { if (value == null) return null; value = '' + value; return _urldecode(value, DECODE_IF_NEEDED | (decode_plus ? DECODE_PLUS : 0)) || value; }; // Extract and split urlencoded data pairs, separated bei either "&" or ";" // from given url or string. Returns a table with urldecoded values. // Simple parameters are stored as string values associated with the parameter // name within the table. Parameters with multiple values are stored as array // containing the corresponding values. export function urldecode_params(url, tbl) { let parser, name, value; let params = tbl || {}; parser = urlencoded_parser(function(what, buffer, length) { if (what == parser.TUPLE) { name = null; value = null; } else if (what == parser.NAME) { name = _urldecode(buffer); } else if (what == parser.VALUE && name) { params[name] = _urldecode(buffer) || ''; } return true; }); if (parser) { let m = match(('' + (url || '')), /[^?]*$/); parser.parse(m ? m[0] : ''); parser.parse(null); } return params; }; // Encode each key-value-pair in given table to x-www-urlencoded format, // separated by '&'. Tables are encoded as parameters with multiple values by // repeating the parameter name with each value. export function urlencode_params(tbl) { let enc = []; for (let k, v in tbl) { if (type(v) == 'array') { for (let v2 in v) { if (length(enc)) push(enc, '&'); push(enc, _urlencode(k), '=', _urlencode('' + v2)); } } else { if (length(enc)) push(enc, '&'); push(enc, _urlencode(k), '=', _urlencode('' + v)); } } return join(enc, ''); }; // Default IO routines suitable for CGI invocation let avail_len = +getenv('CONTENT_LENGTH'); const default_source = () => { let rlen = min(avail_len, 4096); if (rlen == 0) { stdin.close(); return null; } let chunk = stdin.read(rlen); if (chunk == null) die(`Input read error: ${fserror()}`); avail_len -= length(chunk); return chunk; }; const default_sink = (...chunks) => { for (let chunk in chunks) stdout.write(chunk); stdout.flush(); }; const Class = { formvalue: function(name, noparse) { if (!noparse && !this.parsed_input) this._parse_input(); if (name != null) return this.message.params[name]; else return this.message.params; }, formvaluetable: function(prefix) { let vals = {}; prefix = (prefix || '') + '.'; if (!this.parsed_input) this._parse_input(); for (let k, v in this.message.params) if (index(k, prefix) == 0) vals[substr(k, length(prefix))] = '' + v; return vals; }, content: function() { if (!this.parsed_input) this._parse_input(); return this.message.content; }, getcookie: function(name) { return header_attribute(`cookie; ${this.getenv('HTTP_COOKIE') ?? ''}`, name); }, getenv: function(name) { if (name != null) return this.message.env[name]; else return this.message.env; }, setfilehandler: function(callback) { if (type(callback) == 'resource' && type(callback.call) == 'function') this.filehandler = (...args) => callback.call(...args); else if (type(callback) == 'function') this.filehandler = callback; else die('Invalid callback argument for setfilehandler()'); if (!this.parsed_input) return; // If input has already been parsed then uploads are stored as unlinked // temporary files pointed to by open file handles in the parameter // value table. Loop all params, and invoke the file callback for any // param with an open file handle. for (let name, value in this.message.params) { while (value?.fd) { let data = value.fd.read(1024); let eof = (length(data) == 0); this.filehandler(value, data, eof); if (eof) { value.fd.close(); value.fd = null; } } } }, _parse_input: function() { parse_message_body( this.input, this.message, this.filehandler ); this.parsed_input = true; }, close: function() { this.write_headers(); this.closed = true; }, header: function(key, value) { this.headers ??= {}; this.headers[lc(key)] = value; }, prepare_content: function(mime) { if (!this.headers?.['content-type']) { if (mime == 'application/xhtml+xml') { if (index(this.getenv('HTTP_ACCEPT'), mime) == -1) { mime = 'text/html; charset=UTF-8'; this.header('Vary', 'Accept'); } } this.header('Content-Type', mime); } }, status: function(code, message) { this.status_code = code ?? 200; this.status_message = message ?? 'OK'; }, write_headers: function() { if (this.eoh) return; if (!this.status_code) this.status(); if (!this.headers?.['content-type']) this.header('Content-Type', 'text/html; charset=UTF-8'); if (!this.headers?.['cache-control']) { this.header('Cache-Control', 'no-cache'); this.header('Expires', '0'); } if (!this.headers?.['x-frame-options']) this.header('X-Frame-Options', 'SAMEORIGIN'); if (!this.headers?.['x-xss-protection']) this.header('X-XSS-Protection', '1; mode=block'); if (!this.headers?.['x-content-type-options']) this.header('X-Content-Type-Options', 'nosniff'); this.output('Status: '); this.output(this.status_code); this.output(' '); this.output(this.status_message); this.output('\r\n'); for (let k, v in this.headers) { this.output(k); this.output(': '); this.output(v); this.output('\r\n'); } this.output('\r\n'); this.eoh = true; }, // If the content chunk is nil this function will automatically invoke close. write: function(content) { if (content != null && !this.closed) { this.write_headers(); this.output(content); return true; } else { this.close(); } }, redirect: function(url) { this.status(302, 'Found'); this.header('Location', url ?? '/'); this.close(); }, write_json: function(value) { this.write(sprintf('%.J', value)); }, urlencode, urlencode_params, urldecode, urldecode_params, build_querystring }; export default function(env, sourcein, sinkout) { return proto({ input: sourcein ?? default_source, output: sinkout ?? default_sink, // File handler nil by default to let .content() work file: null, // HTTP-Message table message: { env, headers: {}, params: urldecode_params(env?.QUERY_STRING ?? '') }, parsed_input: false }, Class); }; 07070100EA5670000041ED00000000000000000000000369F91E1500000000000000080000000100000000000000000000002000000000usr/share/ucode/luci/controller07070100EA5671000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000002600000000usr/share/ucode/luci/controller/admin07070100EA5672000081A400000000000000000000000169F91E1500000FC1000000080000000100000000000000000000002F00000000usr/share/ucode/luci/controller/admin/index.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { load_catalog, change_catalog, get_translations } from 'luci.core'; const ubus_types = [ null, 'array', 'object', 'string', null, // INT64 'number', null, // INT16, 'boolean', 'double' ]; function ubus_reply(id, data, code, errmsg) { const reply = { jsonrpc: '2.0', id }; if (errmsg) reply.error = { code, message: errmsg }; else if (type(code) == 'object') reply.result = code; else if (data != null) reply.result = [ code, data ]; else reply.result = [ code ]; return reply; } function ubus_access(sid, obj, fun) { return (ubus.call('session', 'access', { ubus_rpc_session: sid, scope: 'ubus', object: obj, function: fun })?.access == true); } function ubus_request(req) { if (type(req?.method) != 'string' || req?.jsonrpc != '2.0' || req?.id == null) return ubus_reply(null, null, -32600, 'Invalid request'); if (req.method == 'call') { if (type(req?.params) != 'array' || length(req.params) < 3) return ubus_reply(null, null, -32600, 'Invalid parameters'); let sid = req.params[0], obj = req.params[1], fun = req.params[2], arg = req.params[3] ?? {}; if (type(arg) != 'object' || exists(arg, 'ubus_rpc_session')) return ubus_reply(req.id, null, -32602, 'Invalid parameters'); if (sid == '00000000000000000000000000000000' && ctx.authsession) sid = ctx.authsession; if (!ubus_access(sid, obj, fun)) return ubus_reply(req.id, null, -32002, 'Access denied'); arg.ubus_rpc_session = sid; // clear error ubus.error(); const res = ubus.call(obj, fun, arg); return ubus_reply(req.id, res, ubus.error(true) ?? 0); } if (req.method == 'list') { if (req?.params == null || (type(req.params) == 'array' && length(req.params) == 0)) { return ubus_reply(req.id, null, ubus.list()); } else if (type(req.params) == 'array') { const rv = {}; for (let param in req.params) { if (type(param) != 'string') return ubus_reply(req.id, null, -32602, 'Invalid parameters'); for (let m, p in ubus.list(param)?.[0]) { for (let pn, pt in p) { rv[param] ??= {}; rv[param][m] ??= {}; rv[param][m][pn] = ubus_types[pt] ?? 'unknown'; } } } return ubus_reply(req.id, null, rv); } else { return ubus_reply(req.id, null, -32602, 'Invalid parameters') } } return ubus_reply(req.id, null, -32601, 'Method not found') } return { action_ubus: function() { let request; try { request = json(http.content()); } catch { request = null; } http.prepare_content('application/json; charset=UTF-8'); if (type(request) == 'object') http.write_json(ubus_request(request)); else if (type(request) == 'array') http.write_json(map(request, ubus_request)); else http.write_json(ubus_reply(null, null, -32700, 'Parse error')) }, action_translations: function(reqlang) { if (reqlang != null && reqlang != dispatcher.lang) { load_catalog(reqlang, '/usr/lib/lua/luci/i18n'); change_catalog(reqlang); } http.prepare_content('application/javascript; charset=UTF-8'); http.write('window.TR={'); get_translations((key, val) => http.write(sprintf('"%08x":%J,', key, val))); http.write('};'); }, action_logout: function() { const url = dispatcher.build_url(); if (ctx.authsession) { ubus.call('session', 'destroy', { ubus_rpc_session: ctx.authsession }); if (http.getenv('HTTPS') == 'on') http.header('Set-Cookie', `sysauth_https=; expires=Thu, 01 Jan 1970 01:00:00 GMT; path=${url}`); else http.header('Set-Cookie', `sysauth_http=; expires=Thu, 01 Jan 1970 01:00:00 GMT; path=${url}`); } http.redirect(url); }, action_menu: function() { const session = dispatcher.is_authenticated({ methods: [ 'cookie:sysauth_https', 'cookie:sysauth_http' ] }); const menu = dispatcher.menu_json(session?.acls ?? {}) ?? {}; http.prepare_content('application/json; charset=UTF-8'); http.write_json(menu); } }; 07070100EA5673000081A400000000000000000000000169F91E1500000CE8000000080000000100000000000000000000002D00000000usr/share/ucode/luci/controller/admin/uci.uc// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. import { STATUS_NO_DATA, STATUS_PERMISSION_DENIED } from 'ubus'; let last_ubus_error; const ubus_error_map = [ 200, 'OK', 400, 'Invalid command', 400, 'Invalid argument', 404, 'Method not found', 404, 'Not found', 204, 'No data', 403, 'Permission denied', 504, 'Timeout', 500, 'Not supported', 500, 'Unknown error', 503, 'Connection failed', 500, 'Out of memory', 400, 'Parse error', 500, 'System error', ]; function ubus_call(object, method, args) { ubus.error(); // clear previous error let res = ubus.call(object, method, args); last_ubus_error = ubus.error(true); return res ?? !last_ubus_error; } function ubus_state_to_http(err) { let code = ubus_error_map[(err << 1) + 0] ?? 200; let msg = ubus_error_map[(err << 1) + 1] ?? 'OK'; http.status(code, msg); if (code != 204) { http.prepare_content('text/plain'); http.write(msg); } } function uci_apply(rollback) { if (rollback) { const timeout = +(config?.apply?.rollback ?? 90) || 0; const success = ubus_call('uci', 'apply', { ubus_rpc_session: ctx.authsession, timeout: max(timeout, 90), rollback: true }); if (success) { const token = dispatcher.randomid(16); ubus.call('session', 'set', { ubus_rpc_session: '00000000000000000000000000000000', values: { rollback: { token, session: ctx.authsession, timeout: time() + timeout } } }); return token; } return null; } else { let changes = ubus_call('uci', 'changes', { ubus_rpc_session: ctx.authsession })?.changes; for (let config in changes) if (!ubus_call('uci', 'commit', { ubus_rpc_session: ctx.authsession, config })) return false; return ubus_call('uci', 'apply', { ubus_rpc_session: ctx.authsession, rollback: false }); } } function uci_confirm(token) { const data = ubus.call('session', 'get', { ubus_rpc_session: '00000000000000000000000000000000', keys: [ 'rollback' ] })?.values?.rollback; if (type(data?.token) != 'string' || type(data?.session) != 'string' || type(data?.timeout) != 'int' || data.timeout < time()) { last_ubus_error = STATUS_NO_DATA; return false; } if (token != data.token) { last_ubus_error = STATUS_PERMISSION_DENIED; return false; } if (!ubus_call('uci', 'confirm', { ubus_rpc_session: data.session })) return false; ubus_call('session', 'set', { ubus_rpc_session: '00000000000000000000000000000000', values: { rollback: {} } }); return true; } return { action_apply_rollback: function() { const token = uci_apply(true); if (token) { http.prepare_content('application/json; charset=UTF-8'); http.write_json({ token }); } else { ubus_state_to_http(last_ubus_error); } }, action_apply_unchecked: function() { uci_apply(false); ubus_state_to_http(last_ubus_error); }, action_confirm: function() { uci_confirm(http.formvalue('token')); ubus_state_to_http(last_ubus_error); }, action_revert: function() { for (let config in ubus_call('uci', 'changes', { ubus_rpc_session: ctx.authsession })?.changes) if (!ubus_call('uci', 'revert', { ubus_rpc_session: ctx.authsession, config })) break; ubus_state_to_http(last_ubus_error); } }; 07070100EA566F000081A400000000000000000000000169F91E1500000063000000080000000100000000000000000000002000000000usr/share/ucode/luci/version.ucexport const revision = '26.124.63982~650a6ca', branch = 'LuCI (HEAD detached at 650a6ca) branch'; 07070100EA55D0000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001500000000usr/share/ucode/wifi07070100EA55D9000081A400000000000000000000000169F91E1500000A41000000080000000100000000000000000000002100000000usr/share/ucode/wifi/validate.uc'use strict'; import { log } from 'wifi.common'; import * as fs from 'fs'; const schemas = { device: json(fs.readfile('/usr/share/schema/wireless.wifi-device.json')).properties, iface: json(fs.readfile('/usr/share/schema/wireless.wifi-iface.json')).properties, vlan: json(fs.readfile('/usr/share/schema/wireless.wifi-vlan.json')).properties, station: json(fs.readfile('/usr/share/schema/wireless.wifi-station.json')).properties, }; const types = { "array": 1, "string": 3, "number": 5, "boolean": 7, }; function dump_option(schema, key) { let _key = (schema[key].type == 'alias') ? schema[key].default : key; return [ key, types[schema[_key].type] ]; } export function dump_options() { let dump = { "name": "mac80211", }; for (let k, v in schemas) { dump[k] = []; for (let option in v) push(dump[k], dump_option(v, option)); }; printf('%J\n', dump); return 0; }; function abort(msg) { log(msg); die(); } function validate_value(schema, key, value) { switch(schema.type) { case 'number': value = +value; if (schema.minimum && value < schema.minimum) abort(`${key}: ${value} is lower than the minimum value`); if (schema.maximum && value > schema.maximum) abort(`${key}: ${value} is larger than the maximum value`); if (schema.enum && !(value in schema.enum)) abort(`${key}: ${value} has to be one of ${schema.enum}`); break; case 'boolean': value = !!+value; break; case 'string': if (schema.enum && !(value in schema.enum)) abort(`${key}: ${value} has to be one of ${schema.enum}`); break; case 'array': if (type(value) != 'array') value = [ value ]; if (schema.items?.type) for (let k, v in value) value[k] = validate_value(schema.items, key, v); break; } return value; } export function validate(schema, dict) { schema = schemas[schema]; /* complain about anything that is not in the schema */ for (let k, v in dict) { if (substr(k, 0, 1) == '.') continue; if (schema[k]) continue; log(`${k} is not present in the schema`); } /* convert all aliases */ for (let k, v in dict) { if (schema[k]?.type != 'alias') continue; if (schema[k].default == null) abort(`${k} alias does not have a default value`); dict[schema[k].default] = v; delete dict[k]; } /* set defaults */ for (let k, v in schema) { if (schema[k]?.type == 'alias') continue; if (dict[k] != null || schema[k].default == null) continue; dict[k] = schema[k].default; } /* validate value constraints */ for (let k, v in dict) { if (!schema[k]) continue; dict[k] = validate_value(schema[k], k, v); } }; 07070100EA55D6000081A400000000000000000000000169F91E1500000431000000080000000100000000000000000000001F00000000usr/share/ucode/wifi/netifd.uc'use strict'; import { log } from 'wifi.common'; import * as fs from 'fs'; const CMD_UP = 0; const CMD_SET_DATA = 1; const CMD_PROCESS_ADD = 2; const CMD_PROCESS_KILL_ALL = 3; const CMD_SET_RETRY = 4; export function notify(command, params, data) { params ??= {}; data ??= {}; global.ubus.call('network.wireless', 'notify', { command, device: global.radio, ...params, data }); }; export function set_up() { notify(CMD_UP); }; export function set_data(data) { notify(CMD_SET_DATA, null, data); }; export function add_process(exe, pid, required, keep) { exe = fs.realpath(exe); notify(CMD_PROCESS_ADD, null, { pid, exe, required, keep }); }; export function set_retry(retry) { notify(CMD_SET_RETRY, null, { retry }); }; export function set_vif(interface, ifname) { notify(CMD_SET_DATA, { interface }, { ifname }); }; export function set_vlan(interface, ifname, vlan) { notify(CMD_SET_DATA, { interface, vlan }, { ifname }); }; export function setup_failed(reason) { log(`Device setup failed: ${reason}`); printf('%s\n', reason); set_retry(false); }; 07070100EA55D2000081A400000000000000000000000169F91E1500003BB2000000080000000100000000000000000000001B00000000usr/share/ucode/wifi/ap.uc'use strict'; import * as libuci from 'uci'; import { md5 } from 'digest'; import * as fs from 'fs'; import { append, append_raw, append_value, append_vars, append_string_vars, comment, push_config, set_default, touch_file } from 'wifi.common'; import * as netifd from 'wifi.netifd'; import * as iface from 'wifi.iface'; function iface_setup(config) { switch(config.fixup) { case 'owe': config.ignore_broadcast_ssid = true; config.ssid = config.ssid + 'OWE'; break; case 'owe-transition': let ifname = config.ifname; config.ifname = config.owe_transition_ifname; config.owe_transition_ifname = ifname; config.owe_transition_ssid = config.ssid + 'OWE'; config.encryption = 'none'; config.ignore_broadcast_ssid = false; iface.prepare(config); break; } comment('Setup interface: ' + config.ifname); config.bridge = config.network_bridge; config.snoop_iface = config.network_ifname; if (!config.wds) config.wds_bridge = null; else config.wds_sta = true; if (!config.idx) append('interface', config.ifname); else append('bss', config.ifname); if (config.multicast_to_unicast || config.proxy_arp) config.ap_isolate = 1; if (config.proxy_arp) set_default(config, 'na_mcast_to_ucast', true); append('bssid', config.macaddr); config.ssid2 = config.ssid; config.wmm_enabled = 1; append_string_vars(config, [ 'ssid2' ]); append_vars(config, [ 'ctrl_interface', 'ap_isolate', 'max_num_sta', 'ap_max_inactivity', 'airtime_bss_weight', 'airtime_bss_limit', 'airtime_sta_weight', 'bss_load_update_period', 'chan_util_avg_period', 'disassoc_low_ack', 'skip_inactivity_poll', 'ignore_broadcast_ssid', 'uapsd_advertisement_enabled', 'utf8_ssid', 'multi_ap', 'multi_ap_vlanid', 'multi_ap_profile', 'tdls_prohibit', 'bridge', 'wds_sta', 'wds_bridge', 'snoop_iface', 'vendor_elements', 'nas_identifier', 'radius_acct_interim_interval', 'ocv', 'beacon_prot', 'spp_amsdu', 'multicast_to_unicast', 'preamble', 'proxy_arp', 'per_sta_vif', 'mbo', 'bss_transition', 'wnm_sleep_mode', 'wnm_sleep_mode_no_keys', 'qos_map_set', 'max_listen_int', 'dtim_period', 'wmm_enabled', 'start_disabled', 'na_mcast_to_ucast', 'no_probe_resp_if_max_sta', ]); } function iface_authentication_server(config) { for (let server in config.auth_server_addr) { append('auth_server_addr', server); append_vars(config, [ 'auth_server_port', 'auth_server_shared_secret' ]); } append_vars(config, [ 'radius_auth_req_attr' ]); } function iface_accounting_server(config) { for (let server in config.acct_server_addr) { append('acct_server_addr', server); append_vars(config, [ 'acct_server_port', 'acct_server_shared_secret' ]); } append_vars(config, [ 'radius_acct_req_attr' ]); } function iface_auth_type(config) { if (config.auth_type in [ 'sae', 'owe', 'eap2', 'eap192' ]) { config.ieee80211w = 2; config.sae_require_mfp = 1; if (!config.ppsk) set_default(config, 'sae_pwe', 2); } if (config.auth_type in [ 'psk-sae', 'eap-eap2' ]) { set_default(config, 'ieee80211w', 1); if (config.rsn_override) config.rsn_override_mfp = 2; config.sae_require_mfp = 1; if (!config.ppsk) set_default(config, 'sae_pwe', 2); } if (config.own_ip_addr) config.dynamic_own_ip_addr = null; if (!config.wpa) config.wpa_disable_eapol_key_retries = null; switch(config.auth_type) { case 'none': case 'owe': config.wps_possible = 1; config.wps_state = 1; append_string_vars(config, [ 'owe_transition_ssid' ]); append_vars(config, [ 'owe_transition_bssid', 'owe_transition_ifname', ]); break; case 'psk': case 'psk2': case 'sae': case 'psk-sae': config.vlan_possible = 1; config.wps_possible = 1; if (config.ppsk) { iface_authentication_server(config); config.macaddr_acl = 2; config.wpa_psk_radius = 2; } else if (length(config.key) == 64) { config.wpa_psk = config.key; } else if (length(config.key) >= 8 && length(config.key) <= 63) { config.wpa_passphrase = config.key; } else if (config.key) { netifd.setup_failed('INVALID_WPA_PSK'); } if (config.auth_type in [ 'psk', 'psk-sae' ]) { set_default(config, 'wpa_psk_file', `/var/run/hostapd-${config.ifname}.psk`); touch_file(config.wpa_psk_file); } if (config.auth_type in [ 'sae', 'psk-sae' ]) { set_default(config, 'sae_password_file', `/var/run/hostapd-${config.ifname}.sae`); touch_file(config.sae_password_file); } break; case 'eap': case 'eap2': case 'eap-eap2': case 'eap192': config.vlan_possible = 1; if (config.fils) { set_default(config, 'erp_domain', config.mobility_domain); set_default(config, 'erp_domain', substr(md5(config.ssid + '\n'), 0, 8)); set_default(config, 'fils_realm', config.erp_domain); set_default(config, 'erp_send_reauth_start', 1); set_default(config, 'fils_cache_id', substr(md5(config.fils_realm + '\n'), 0, 4)); } if (!config.eap_server) { iface_authentication_server(config); iface_accounting_server(config); } if (config.radius_das_client && config.radius_das_secret) { set_default(config, 'radius_das_port', 3799); config.radius_das_client = config.radius_das_client + ' ' + config.radius_das_secret; } set_default(config, 'eapol_version', config.wpa & 1); if (!config.eapol_version) config.eapol_version = null; append('eapol_key_index_workaround', '1'); append('ieee8021x', '1'); break; } append_vars(config, [ 'sae_require_mfp', 'sae_password_file', 'sae_pwe', 'sae_track_password', 'time_advertisement', 'time_zone', 'wpa_group_rekey', 'wpa_ptk_rekey', 'wpa_gmk_rekey', 'wpa_strict_rekey', 'macaddr_acl', 'wpa_psk_radius', 'wpa_psk', 'wpa_passphrase', 'wpa_psk_file', 'eapol_version', 'dynamic_vlan', 'radius_request_cui', 'eap_reauth_period', 'radius_das_client', 'radius_das_port', 'own_ip_addr', 'dynamic_own_ip_addr', 'wpa_disable_eapol_key_retries', 'auth_algs', 'wpa', 'wpa_pairwise', 'erp_domain', 'fils_realm', 'erp_send_reauth_start', 'fils_cache_id' ]); } function iface_ppsk(config) { if (!(config.auth_type in [ 'none', 'owe', 'psk', 'sae', 'psk-sae', 'wep' ]) || !config.auth_server_addr) return; iface_authentication_server(config); append('macaddr_acl', '2'); } function iface_wps(config) { push_config(config, 'config_methods', 'wps_pushbutton', 'push_button'); push_config(config, 'config_methods', 'wps_label', 'label'); if (config.multi_ap == 1) config.wps_possible = false; if (config.wps_possible && length(config.config_methods)) { config.eap_server = 1; set_default(config, 'wps_state', 2); if (config.ext_registrar && config.network_bridge) set_default(config, 'upnp_iface', config.network_bridge); if (config.multi_ap && config.multi_ap_backhaul_ssid) { append_string_vars(config, [ 'multi_ap_backhaul_ssid' ]); if (length(config.multi_ap_backhaul_key) == 64) append('multi_ap_backhaul_wpa_psk', config.multi_ap_backhaul_key); else if (length(config.multi_ap_backhaul_key) > 8) append('multi_ap_backhaul_wpa_passphrase', config.multi_ap_backhaul_key); else netifd.setup_failed('INVALID_WPA_PSK'); } append_vars(config, [ 'wps_state', 'device_type', 'device_name', 'config_methods', 'wps_independent', 'eap_server', 'ap_pin', 'ap_setup_locked', 'upnp_iface' ]); } } function iface_rrm(config) { set_default(config, 'rrm_neighbor_report', config.ieee80211k); set_default(config, 'rrm_beacon_report', config.ieee80211k); append_vars(config, [ 'rrm_neighbor_report', 'rrm_beacon_report', 'rnr', 'ftm_responder', ]); } function iface_ftm(config, phy_features) { if (!phy_features.ftm_responder || !config.ftm_responder) return; append_vars(config, [ 'ftm_responder', 'lci', 'civic' ]); } function iface_macfilter(config) { let path = `/var/run/hostapd-${config.ifname}.maclist`; switch(config.macfilter) { case 'allow': append('accept_mac_file', path); append('macaddr_acl', 1); config.vlan_possible = 1; break; case 'deny': append('deny_mac_file', path); append('macaddr_acl', 0); break; default: return; } let file = fs.open(path, 'w'); if (!file) { warn(`Failed to open ${path}`); return; } if (config.maclist) file.write(join('\n', config.maclist)); let macfile = fs.readfile(config.macfile); if (macfile) file.write(macfile); file.close(); } function iface_vlan(interface, config, vlans) { let path = `/var/run/hostapd-${config.ifname}.vlan`; let file = fs.open(path, 'w'); for (let k, vlan in vlans) if (vlan.config.name && vlan.config.vid) { let ifname = `${config.ifname}-${vlan.config.name}`; file.write(`${vlan.config.vid} ${ifname}\n`); netifd.set_vlan(interface, ifname, k); } file.close(); set_default(config, 'vlan_file', path); append_vars(config, [ 'vlan_file' ]); if (!config.vlan_possible || !config.dynamic_vlan) return; set_default(config, 'vlan_no_bridge', !config.vlan_bridge); append_vars(config, [ 'dynamic_vlan', 'vlan_naming', 'vlan_bridge', 'vlan_no_bridge', 'vlan_tagged_interface' ]); } function iface_wpa_stations(config, stas) { let path = `/var/run/hostapd-${config.ifname}.psk`; let file = fs.open(path, 'w'); for (let k, sta in stas) if (sta.config.mac && sta.config.key) { for (let mac in sta.config.mac) { let station = `${mac} ${sta.config.key}\n`; if (sta.config.vid) station = `vlanid=${sta.config.vid} ` + station; file.write(station); } } file.close(); set_default(config, 'wpa_psk_file', path); } function iface_sae_stations(config, stas) { let path = `/var/run/hostapd-${config.ifname}.sae`; let file = fs.open(path, 'w'); for (let k, sta in stas) if (sta.config.mac && sta.config.key) { for (let mac in sta.config.mac) { if (mac == '00:00:00:00:00:00') mac = 'ff:ff:ff:ff:ff:ff'; let station = `${sta.config.key}|mac=${mac}`; if (sta.config.vid) station = station + `|vlanid=${sta.config.vid}`; station = station + '\n'; file.write(station); } } file.close(); set_default(config, 'sae_password_file', path); } function iface_eap_server(config) { if (!config.eap_server) return; set_default(config, 'eap_server', true); set_default(config, 'eap_server_erp', true); append_vars(config, [ 'eap_server', 'eap_server_erp', 'eap_user_file', 'ca_cert', 'server_cert', 'private_key', 'private_key_passwd', 'server_id', ]); } function iface_roaming(config) { if (!config.ieee80211r || config.wpa < 2) return; set_default(config, 'mobility_domain', substr(md5(config.ssid + '\n'), 0, 4)); set_default(config, 'ft_psk_generate_local', config.auth_type == 'psk'); set_default(config, 'ft_iface', config.network_ifname); if (!config.ft_psk_generate_local) { if (!config.r0kh || !config.r1kh) { if (!config.auth_secret && !config.key) netifd.setup_failed('FT_KEY_CANT_BE_DERIVED'); let ft_key = md5(`${config.mobility_domain}/${config.auth_secret ?? config.key}`); set_default(config, 'r0kh', [ 'ff:ff:ff:ff:ff:ff,*,' + ft_key ]); set_default(config, 'r1kh', [ '00:00:00:00:00:00,00:00:00:00:00:00,' + ft_key ]); } for (let name in [ 'r0kh', 'r1kh' ]) for (let val in config[name]) append(name, join(' ', split(val, ',', 3))); append_vars(config, [ 'r1_key_holder', 'r0_key_lifetime', 'pmk_r1_push' ]); } append_vars(config, [ 'mobility_domain', 'ft_psk_generate_local', 'ft_over_ds', 'reassociation_deadline', 'ft_iface' ]); } function iface_mfp(config) { if (!config.ieee80211w || config.wpa < 2) { append('ieee80211w', 0); return; } if (config.auth_type == 'eap192') config.group_mgmt_cipher = 'BIP-GMAC-256'; else config.group_mgmt_cipher = config.ieee80211w_mgmt_cipher ?? 'AES-128-CMAC'; append_vars(config, [ 'ieee80211w', 'group_mgmt_cipher', 'assoc_sa_query_max_timeout', 'assoc_sa_query_retry_timeout' ]); } function iface_key_caching(config) { if (config.wpa < 2) return; if (config.network_bridge && config.rsn_preauth) { set_default(config, 'okc', true); config.rsn_preauth_interfaces = config.network_bridge; append_vars(config, [ 'rsn_preauth', 'rsn_preauth_interfaces' ]); } else { set_default(config, 'okc', (config.auth_type in [ 'sae', 'psk-sae', 'owe' ])); } if (!config.okc && !config.fils) config.disable_pmksa_caching = 1; append_vars(config, [ 'okc', 'disable_pmksa_caching' ]); } function iface_hs20(config) { if (!config.hs20) return; append_vars(config, [ 'hs20', 'disable_dgaf', 'anqp_domain_id', 'hs20_deauth_req_timeout', 'hs20_wan_metrics', 'hs20_operating_class', 'hs20_t_c_filename', 'hs20_t_c_timestamp', 'hs20_t_c_server_url', 'hs20_conn_capab' ]); } function iface_interworking(config) { if (!config.iw_enabled) return; config.interworking = true; if (config.domain_name) config.domain_name = join(',', config.domain_name); if (config.anqp_3gpp_cell_net) config.domain_name = join(',', config.anqp_3gpp_cell_net); append_vars(config, [ 'interworking', 'internet', 'asra', 'uesa', 'access_network_type', 'hessid', 'venue_group', 'venue_type', 'network_auth_type', 'gas_address3', 'roaming_consortium', 'anqp_elem', 'nai_realm', 'venue_name', 'venue_url', 'domain_name', 'anqp_3gpp_cell_net', ]); } export function generate(interface, data, config, vlans, stas, phy_features) { config.ctrl_interface = '/var/run/hostapd'; config.start_disabled = data.ap_start_disabled; iface_setup(config); iface.parse_encryption(config, data.config); if (data.config.band == '6g') { if (config.auth_type == 'psk-sae') config.auth_type = 'sae'; if (config.auth_type == 'eap-eap2') config.auth_type = 'eap2'; } if (config.auth_type in [ 'psk', 'psk-sae' ]) iface_wpa_stations(config, stas); if (config.auth_type in [ 'sae', 'psk-sae' ]) iface_sae_stations(config, stas); iface_auth_type(config); iface_accounting_server(config); iface_ppsk(config); iface_wps(config); iface_rrm(config); iface_ftm(config, phy_features); iface_macfilter(config); iface_vlan(interface, config, vlans); iface_eap_server(config); iface_roaming(config); iface_mfp(config); iface_key_caching(config); iface_hs20(config); iface_interworking(config); iface.wpa_key_mgmt(config); append_vars(config, [ 'wpa_key_mgmt', ]); if (config.rsn_override_key_mgmt || config.rsn_override_pairwise) { config.rsn_override_mfp ??= config.ieee80211w; config.rsn_override_key_mgmt ??= config.wpa_key_mgmt; config.rsn_override_pairwise ??= config.wpa_pairwise; append_vars(config, [ 'rsn_override_key_mgmt', 'rsn_override_pairwise', 'rsn_override_mfp' ]); if (config.mlo) { config.rsn_override_mfp_2 ??= config.rsn_override_mfp; config.rsn_override_key_mgmt_2 ??= config.rsn_override_key_mgmt; config.rsn_override_pairwise_2 ??= config.rsn_override_pairwise; append_vars(config, [ 'rsn_override_key_mgmt_2', 'rsn_override_pairwise_2', 'rsn_override_mfp_2' ]); } } /* raw options */ for (let raw in config.hostapd_bss_options) append_raw(raw); if (config.mlo) { append_raw('mld_ap=1'); if (data.config.radio != null) append_raw('mld_link_id=' + data.config.radio); } if (config.default_macaddr) append_raw('#default_macaddr'); else if (config.random_macaddr) append_raw('#random_macaddr'); }; 07070100EA55D4000081A400000000000000000000000169F91E150000476C000000080000000100000000000000000000002000000000usr/share/ucode/wifi/hostapd.uc'use strict'; import { append, append_raw, append_vars, dump_config, flush_config, set_default, wiphy_info, wiphy_band } from 'wifi.common'; import { validate } from 'wifi.validate'; import * as netifd from 'wifi.netifd'; import * as iface from 'wifi.iface'; import * as nl80211 from 'nl80211'; import * as ap from 'wifi.ap'; import * as fs from 'fs'; const NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER = 33; const NL80211_EXT_FEATURE_RADAR_BACKGROUND = 61; let phy_features = {}; let phy_capabilities = {}; /* make sure old style UCI and hwmode and newer band properties are correctly resolved */ function set_device_defaults(config) { /* validate the hw mode */ if (config.hw_mode in [ '11a', '11b', '11g', '11ad' ]) config.hw_mode = substr(config.hw_mode, 2); else if (config.channel > 14) config.hw_mode = 'a'; else config.hw_mode = 'g'; /* validate band */ if (config.band == '2g') config.hw_mode = 'g'; else if (config.band in [ '5g', '6g', '60g' ]) config.hw_mode = 'a'; else switch (config.hw_mode) { case 'a': config.band = '5g'; break; case 'ad': config.band = '60g'; break; default: config.band = '2g'; break; } } /* setup sylog / stdout */ function device_log_append(config) { let log_mask = 0; for (let k in [ 'log_mlme', 'log_iapp', 'log_driver', 'log_wpa', 'log_radius', 'log_8021x', 'log_80211' ]) { log_mask <<= 1; log_mask |= config[k] ? 1 : 0; } append('logger_syslog', log_mask); append('logger_syslog_level', config.log_level); append('logger_stdout', log_mask); append('logger_stdout_level', config.log_level); } /* setup country code */ function device_country_code(config) { let status = global.ubus.call('network.wireless', 'status'); for (let name, radio in status) { if (!radio.config.country) continue; config.country_code = radio.config.country; } if (!exists(config, 'country_code')) return; if (config.hw_mode != 'a') delete config.ieee80211h; append_vars(config, [ 'country_code', 'country3', 'ieee80211h' ]); if (config.ieee80211d) append_vars(config, [ 'ieee80211d', 'local_pwr_constraint', 'spectrum_mgmt_required' ]); } /* setup cell density */ function device_cell_density_append(config) { switch (config.hw_mode) { case 'b': if (config.cell_density == 1) { config.supported_rates ??= [ 5500, 11000 ]; config.basic_rates ??= [ 5500, 11000 ]; } else if (config.cell_density > 2) { config.supported_rates ??= [ 11000 ]; config.basic_rates ??= [ 11000 ]; } ;; case 'g': if (config.cell_density in [ 0, 1 ]) { if (!config.legacy_rates) { config.supported_rates ??= [ 6000, 9000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 6000, 12000, 24000 ]; } else if (config.cell_density == 1) { config.supported_rates ??= [ 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 5500, 11000 ]; } } else if (config.cell_density == 2 || (config.cell_density > 3 && config.legacy_rates)) { if (!config.legacy_rates) { config.supported_rates ??= [ 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 12000, 24000 ]; } else { config.supported_rates ??= [ 11000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 11000 ]; } } else if (config.cell_density > 2) { config.supported_rates ??= [ 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 24000 ]; } ;; case 'a': switch (config.cell_density) { case 1: config.supported_rates ??= [ 6000, 9000, 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 6000, 12000, 24000 ]; break; case 2: config.supported_rates ??= [ 12000, 18000, 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 12000, 24000 ]; break; case 3: config.supported_rates ??= [ 24000, 36000, 48000, 54000 ]; config.basic_rates ??= [ 24000 ]; break; } } } function device_rates(config) { for (let key in [ 'supported_rates', 'basic_rates' ]) config[key] = map(config[key], x => x / 100); append_vars(config, [ 'beacon_rate', 'supported_rates', 'basic_rates' ]); } function device_htmode_append(config) { config.channel_offset = config.band == '6g' ? 1 : 0; /* 802.11n */ config.ieee80211n = 0; if (config.band != '6g') { if (config.htmode in [ 'VHT20', 'HT20', 'HE20', 'EHT20' ]) { config.ieee80211n = 1; config.ht_capab = ''; } if (config.htmode in [ 'HT40', 'HT40+', 'HT40-', 'VHT40', 'VHT80', 'VHT160', 'HE40', 'HE80', 'HE160', 'EHT40', 'EHT80', 'EHT160' ]) { config.ieee80211n = 1; if (!config.channel) config.ht_capab = '[HT40+]'; else switch (config.hw_mode) { case 'a': switch (((config.channel / 4) + config.channel_offset) % 2) { case 0: config.ht_capab = '[HT40-]'; break; case 1: config.ht_capab = '[HT40+]'; break; } break; default: switch (config.htmode) { case 'HT40+': case 'HT40-': config.ht_capab = '[' + config.htmode + ']'; break; default: if (config.channel < 7) config.ht_capab = '[HT40+]'; else config.ht_capab = '[HT40-]'; break; } } } if (config.ieee80211n) { let ht_capab = phy_capabilities.ht_capa; if (ht_capab & 0x1 && config.ldpc) config.ht_capab += '[LDPC]'; if (ht_capab & 0x10 && config.greenfield) config.ht_capab += '[GF]'; if (ht_capab & 0x20 && config.short_gi_20) config.ht_capab += '[SHORT-GI-20]'; if (ht_capab & 0x40 && config.short_gi_40) config.ht_capab += '[SHORT-GI-40]'; if (ht_capab & 0x80 && config.tx_stbc) config.ht_capab += '[TX-STBC]'; if (ht_capab & 0x800 && config.max_amsdu) config.ht_capab += '[MAX-AMSDU-7935]'; if (ht_capab & 0x1000 && config.dsss_cck_40) config.ht_capab += '[DSSS_CCK-40]'; let rx_stbc = [ '', '[RX-STBC1]', '[RX-STBC12]', '[RX-STBC123]' ]; config.ht_capab += rx_stbc[min(config.rx_stbc, (ht_capab >> 8) & 3)]; append_vars(config, [ 'ieee80211n', 'ht_coex', 'ht_capab' ]); } } /* 802.11ac */ config.ieee80211ac = 1; config.vht_oper_centr_freq_seg0_idx = 0; config.vht_oper_chwidth = 0; switch (config.htmode) { case 'VHT20': case 'HE20': case 'EHT20': break; case 'VHT40': case 'HE40': case 'EHT40': config.vht_oper_centr_freq_seg0_idx = config.channel + (((config.channel / 4) + config.channel_offset) % 2 ? 2 : -2); break; case 'VHT80': case 'HE80': case 'EHT80': let delta = [ -6, 6, 2, -2 ]; config.vht_oper_centr_freq_seg0_idx = config.channel + delta[((config.channel / 4) + config.channel_offset) % 4]; config.vht_oper_chwidth = 1; break; case 'VHT160': case 'HE160': case 'EHT160': let vht_oper_centr_freq_seg0_idx_map = [[ 64, 50 ], [ 128, 114 ], [ 177, 163 ]]; if (config.band == '6g') vht_oper_centr_freq_seg0_idx_map = [ [ 29, 15 ], [ 61, 47 ], [ 93, 79 ], [ 125, 111 ], [ 157, 143 ], [ 189, 175 ], [ 221, 207 ]]; for (let k, v in vht_oper_centr_freq_seg0_idx_map) if (config.channel >= (v[0] - 28) && config.channel <= v[0]) { config.vht_oper_centr_freq_seg0_idx = v[1]; break; } config.vht_oper_chwidth = 2; break; default: config.ieee80211ac = 0; break; } config.eht_oper_chwidth = config.vht_oper_chwidth; config.eht_oper_centr_freq_seg0_idx = config.vht_oper_centr_freq_seg0_idx; if (config.band == '6g') { config.ieee80211ac = 0; switch(config.htmode) { case 'HE20': case 'EHT20': config.op_class = 131; break; case 'EHT320': let eht_center_seg0_map = [ [ 61, 31 ], [ 125, 95 ], [ 189, 159 ], [ 221, 191 ] ]; for (let k, v in eht_center_seg0_map) if (config.channel <= v[0]) { config.eht_oper_centr_freq_seg0_idx = v[1]; break; } config.op_class = 137; config.eht_oper_chwidth = 7; /* * Set HE operation values for 160MHz backward compatibility * with WiFi 6E clients. Pick the 160MHz half that contains * the primary channel. */ config.he_oper_chwidth = 3; if (config.channel < config.eht_oper_centr_freq_seg0_idx) config.he_oper_centr_freq_seg0_idx = config.eht_oper_centr_freq_seg0_idx - 16; else config.he_oper_centr_freq_seg0_idx = config.eht_oper_centr_freq_seg0_idx + 16; break; case 'HE40': case 'HE80': case 'HE160': case 'EHT40': case 'EHT80': case 'EHT160': config.op_class = 132 + config.eht_oper_chwidth; break; } append_vars(config, [ 'op_class' ]); } if (config.ieee80211ac && config.hw_mode == 'a') { /* VHT capab */ if (config.vht_oper_chwidth < 2) { config.vht160 = 0; config.short_gi_160 = 0; } set_default(config, 'tx_queue_data2_burst', '2.0'); let vht_capab = phy_capabilities.vht_capa; config.vht_capab = ''; if (vht_capab & 0x10 && config.rxldpc) config.vht_capab += '[RXLDPC]'; if (vht_capab & 0x20 && config.short_gi_80) config.vht_capab += '[SHORT-GI-80]'; if (vht_capab & 0x40 && config.short_gi_160) config.vht_capab += '[SHORT-GI-160]'; if (vht_capab & 0x80 && config.tx_stbc_2by1) config.vht_capab += '[TX-STBC-2BY1]'; if (vht_capab & 0x800 && config.su_beamformer) config.vht_capab += '[SU-BEAMFORMER]'; if (vht_capab & 0x1000 && config.su_beamformee) config.vht_capab += '[SU-BEAMFORMEE]'; if (vht_capab & 0x80000 && config.mu_beamformer) config.vht_capab += '[MU-BEAMFORMER]'; if (vht_capab & 0x100000 && config.mu_beamformee) config.vht_capab += '[MU-BEAMFORMEE]'; if (vht_capab & 0x200000 && config.vht_txop_ps) config.vht_capab += '[VHT-TXOP-PS]'; if (vht_capab & 0x400000 && config.htc_vht) config.vht_capab += '[HTC-VHT]'; if (vht_capab & 0x10000000 && config.rx_antenna_pattern) config.vht_capab += '[RX-ANTENNA-PATTERN]'; if (vht_capab & 0x20000000 && config.tx_antenna_pattern) config.vht_capab += '[TX-ANTENNA-PATTERN]'; let rx_stbc = [ '', '[RX-STBC-1]', '[RX-STBC-12]', '[RX-STBC-123]', '[RX-STBC-1234]' ]; config.vht_capab += rx_stbc[min(config.rx_stbc, (vht_capab >> 8) & 7)]; if (vht_capab & 0x800 && config.su_beamformer) config.vht_capab += '[SOUNDING-DIMENSION-' + min(((vht_capab >> 16) & 3) + 1, config.beamformer_antennas) + ']'; if (vht_capab & 0x1000 && config.su_beamformee) config.vht_capab += '[BF-ANTENNA-' + min(((vht_capab >> 13) & 3) + 1, config.beamformee_antennas) + ']'; /* supported Channel widths */ if ((vht_capab & 0xc) == 8 && config.vht160 >= 2) config.vht_capab += '[VHT160-80PLUS80]'; else if (((vht_capab & 0xc) == 4 || (vht_capab & 0xc) == 8) && config.vht160 >= 1) config.vht_capab += '[VHT160]'; /* maximum MPDU length */ if ((vht_capab & 3) > 1 && config.vht_max_mpdu >= 11454) config.vht_capab += '[MAX-MPDU-11454]'; else if ((vht_capab & 3) && config.vht_max_mpdu >= 7991) config.vht_capab += '[MAX-MPDU-7991]'; /* maximum A-MPDU length exponent */ let max_a_mpdu_len_exp = (vht_capab >> 20) & 0x38; for (let exp = 7; exp; exp--) if (max_a_mpdu_len_exp >= (0x8 * exp) && exp <= config.vht_max_a_mpdu_len_exp) { config.vht_capab += '[MAX-A-MPDU-LEN-EXP' + exp + ']'; break; } /* whether or not the STA supports link adaptation using VHT variant */ let vht_link_adapt = vht_capab & 0xC000000; if (vht_link_adapt >= 0xC000000 && config.vht_link_adapt > 3) config.vht_capab += '[VHT-LINK-ADAPT-3]'; if (vht_link_adapt >= 0x8000000 && config.vht_link_adapt > 2) config.vht_capab += '[VHT-LINK-ADAPT-2]'; append_vars(config, [ 'ieee80211ac', 'vht_oper_chwidth', 'vht_oper_centr_freq_seg0_idx', 'vht_capab' ]); } /* 802.11ax */ if (wildcard(config.htmode, 'HE*') || wildcard(config.htmode, 'EHT*')) { let he_phy_cap = phy_capabilities.he_phy_cap; let he_mac_cap = phy_capabilities.he_mac_cap; config.ieee80211ax = true; if (config.hw_mode == 'a') { /* * Only set HE values from VHT if not already set. * For 6GHz 320MHz, these are pre-set for 160MHz backward * compatibility with WiFi 6E clients. */ if (!config.he_oper_chwidth) config.he_oper_chwidth = config.vht_oper_chwidth; if (!config.he_oper_centr_freq_seg0_idx) config.he_oper_centr_freq_seg0_idx = config.vht_oper_centr_freq_seg0_idx; } if (config.band == "6g") { config.stationary_ap = true; append_vars(config, [ 'he_6ghz_reg_pwr_type', ]); } if (config.he_bss_color_enabled) { if (config.he_spr_non_srg_obss_pd_max_offset) config.he_spr_sr_control |= 1 << 2; if (!config.he_spr_psr_enabled) config.he_spr_sr_control |= 1; append_vars(config, [ 'he_bss_color', 'he_spr_non_srg_obss_pd_max_offset', 'he_spr_sr_control' ]); } if (!(he_phy_cap[3] & 0x80)) config.he_su_beamformer = false; if (!(he_phy_cap[4] & 0x1)) config.he_su_beamformee = false; if (!(he_phy_cap[4] & 0x2)) config.he_mu_beamformer = false; if (!(he_phy_cap[7] & 0x1)) config.he_spr_psr_enabled = false; if (!(he_mac_cap[0] & 0x1)) config.he_twt_required= false; append_vars(config, [ 'ieee80211ax', 'he_oper_chwidth', 'he_oper_centr_freq_seg0_idx', 'he_su_beamformer', 'he_su_beamformee', 'he_mu_beamformer', 'he_twt_required', 'he_default_pe_duration', 'he_rts_threshold', 'he_mu_edca_qos_info_param_count', 'he_mu_edca_qos_info_q_ack', 'he_mu_edca_qos_info_queue_request', 'he_mu_edca_qos_info_txop_request', 'he_mu_edca_ac_be_aifsn', 'he_mu_edca_ac_be_aci', 'he_mu_edca_ac_be_ecwmin', 'he_mu_edca_ac_be_ecwmax', 'he_mu_edca_ac_be_timer', 'he_mu_edca_ac_bk_aifsn', 'he_mu_edca_ac_bk_aci', 'he_mu_edca_ac_bk_ecwmin', 'he_mu_edca_ac_bk_ecwmax', 'he_mu_edca_ac_bk_timer', 'he_mu_edca_ac_vi_ecwmin', 'he_mu_edca_ac_vi_ecwmax', 'he_mu_edca_ac_vi_aifsn', 'he_mu_edca_ac_vi_aci', 'he_mu_edca_ac_vi_timer', 'he_mu_edca_ac_vo_aifsn', 'he_mu_edca_ac_vo_aci', 'he_mu_edca_ac_vo_ecwmin', 'he_mu_edca_ac_vo_ecwmax', 'he_mu_edca_ac_vo_timer', ]); } if (wildcard(config.htmode, 'EHT*')) { config.ieee80211be = true; append_vars(config, [ 'ieee80211be' ]); if (config.hw_mode == 'a') append_vars(config, [ 'eht_oper_chwidth', 'eht_oper_centr_freq_seg0_idx' ]); } append_vars(config, [ 'tx_queue_data2_burst', 'stationary_ap' ]); } function device_extended_features(data, flag) { return !!(data[flag / 8] | (1 << (flag % 8))); } function device_capabilities(config) { let phy = config.phy; phy = wiphy_info(phy); let band = wiphy_band(phy, config.band); phy_capabilities.ht_capa = band.ht_capa ?? 0; phy_capabilities.vht_capa = band.vht_capa ?? 0; for (let iftype in band.iftype_data) { if (!iftype.iftypes.ap) continue; phy_capabilities.he_mac_cap = iftype.he_cap_mac; phy_capabilities.he_phy_cap = iftype.he_cap_phy; } phy_features.ftm_responder = device_extended_features(phy.extended_features, NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER); phy_features.radar_background = device_extended_features(phy.extended_features, NL80211_EXT_FEATURE_RADAR_BACKGROUND); } function generate(config) { if (!config) die(`${config.path} is an unknown phy`); device_capabilities(config); append('driver', 'nl80211'); set_device_defaults(config); device_log_append(config); device_country_code(config); device_cell_density_append(config); device_rates(config); /* beacon */ append_vars(config, [ 'beacon_int', 'beacon_rate', 'rnr_beacon' ]); /* wpa_supplicant co-exist */ append_vars(config, [ 'noscan' ]); /* airtime */ if (config.airtime_mode) append_vars(config, [ 'airtime_mode' ]); /* assoc/thresholds */ append_vars(config, [ 'rssi_reject_assoc_rssi', 'rssi_reject_assoc_timeout', 'rssi_ignore_probe_request', 'iface_max_num_sta' ]); /* ACS / Radar*/ if (!phy_features.radar_background || config.band != '5g') delete config.enable_background_radar; else set_default(config, 'enable_background_radar', false); append_vars(config, [ 'acs_chan_bias', 'acs_exclude_dfs', 'enable_background_radar' ]); /* TX Power */ append_vars(config, [ 'min_tx_power' ]); /* hwmode, channel, op_class, ... */ append_vars(config, [ 'hw_mode', 'channel', 'rts_threshold', 'chanlist' ]); if (config.hw_mode in [ 'a', 'g' ] && config.require_mode in [ 'n', 'ac', 'ax' ]) { let require_mode = { n: 'require_ht', ac: 'require_vht', ax: 'require_he' }; config.legacy_rates = false; append(require_mode[config.require_mode], 1); } device_htmode_append(config); if (config.ieee80211ax || config.ieee80211be) append_vars(config, [ 'mbssid' ]); /* 6G power mode */ if (config.band != '6g') append_vars(config, [ 'reg_power_type' ]); /* raw options */ for (let raw in config.hostapd_options) append_raw(raw); } let iface_idx = 0; function setup_interface(interface, data, config, vlans, stas, phy_features, fixup) { config = { ...config, fixup }; config.idx = iface_idx++; ap.generate(interface, data, config, vlans, stas, phy_features); } export function setup(data) { let file_name = `/var/run/hostapd-${data.phy}${data.vif_phy_suffix}.conf`; flush_config(); if (fs.stat(file_name)) fs.rename(file_name, file_name + '.prev'); data.config.phy = data.phy; generate(data.config); if (data.config.num_global_macaddr) append('\n#num_global_macaddr', data.config.num_global_macaddr); if (data.config.macaddr_base) append('\n#macaddr_base', data.config.macaddr_base); let has_ap; for (let k, interface in data.interfaces) { if (interface.config.mode != 'ap') continue; interface.config.network_bridge = interface.bridge; interface.config.network_ifname = interface['bridge-ifname']; let owe = interface.config.encryption == 'owe' && interface.config.owe_transition; setup_interface(k, data, interface.config, interface.vlans, interface.stas, phy_features, owe ? 'owe' : null ); if (owe) setup_interface(k, data, interface.config, interface.vlans, interface.stas, phy_features, 'owe-transition'); has_ap = true; } let config = dump_config(file_name); let msg = { phy: data.phy, radio: data.config.radio, config: has_ap ? file_name : "", prev_config: file_name + '.prev' }; if (!global.ubus.list('hostapd')) system('ubus wait_for hostapd'); let ret = global.ubus.call('hostapd', 'config_set', msg); if (ret) netifd.add_process('/usr/sbin/hostapd', ret.pid, true, true); else netifd.setup_failed('HOSTAPD_START_FAILED'); }; 07070100EA55D5000081A400000000000000000000000169F91E150000171A000000080000000100000000000000000000001E00000000usr/share/ucode/wifi/iface.uc'use strict'; import { append_value, log } from 'wifi.common'; import * as fs from 'fs'; export function parse_encryption(config, dev_config) { if (!config.encryption) return; let encryption = split(config.encryption, '+', 2); config.wpa = 0; for (let k, v in { 'wpa2*': 2, 'wpa3*': 2, '*psk2*': 2, 'psk3*': 2, 'sae*': 2, 'owe*': 2, 'wpa*mixed*': 3, '*psk*mixed*': 3, 'wpa*': 1, '*psk*': 1, }) if (wildcard(config.encryption, k)) { config.wpa = v; break; } config.wpa_pairwise = null; if (config.wpa) config.wpa_pairwise = (config.hw_mode == 'ad') ? 'GCMP' : 'CCMP'; config.auth_type = encryption[0] ?? 'none'; let wpa3_pairwise = config.wpa_pairwise; if (wildcard(dev_config?.htmode, 'EHT*') || wildcard(dev_config?.htmode, 'HE*')) wpa3_pairwise = 'GCMP-256 ' + wpa3_pairwise; switch(config.auth_type) { case 'owe': config.auth_type = 'owe'; break; case 'wpa3-192': config.auth_type = 'eap192'; break; case 'wpa3-mixed': config.auth_type = 'eap-eap2'; break; case 'wpa3': config.auth_type = 'eap2'; break; case 'psk': case 'psk2': case 'psk-mixed': config.auth_type = 'psk'; wpa3_pairwise = null; break; case 'sae': case 'psk3': config.auth_type = 'sae'; break; case 'psk3-mixed': case 'sae-mixed': config.auth_type = 'psk-sae'; break; case 'wpa': case 'wpa2': case 'wpa-mixed': config.auth_type = 'eap'; wpa3_pairwise = null; break; default: config.wpa_pairwise = null; wpa3_pairwise = null; break; } switch(encryption[1]){ case 'tkip+aes': case 'tkip+ccmp': case 'aes+tkip': case 'ccmp+tkip': config.wpa_pairwise = 'CCMP TKIP'; break; case 'ccmp256': config.wpa_pairwise = 'CCMP-256'; break; case 'aes': case 'ccmp': config.wpa_pairwise = 'CCMP'; break; case 'tkip': config.wpa_pairwise = 'TKIP'; break; case 'gcmp256': config.wpa_pairwise = 'GCMP-256'; break; case 'gcmp': config.wpa_pairwise = 'GCMP'; break; default: if (config.encryption == 'wpa3-192') { config.wpa_pairwise = 'GCMP-256'; break; } if (!wpa3_pairwise) break; if (config.rsn_override && wpa3_pairwise != config.wpa_pairwise) config.rsn_override_pairwise = wpa3_pairwise; else config.wpa_pairwise = wpa3_pairwise; break; } }; export function wpa_key_mgmt(config) { if (!config.wpa) return; switch(config.auth_type) { case 'psk': case 'psk2': append_value(config, 'wpa_key_mgmt', 'WPA-PSK'); if (config.wpa >= 2 && config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-PSK'); if (config.ieee80211w) append_value(config, 'wpa_key_mgmt', 'WPA-PSK-SHA256'); break; case 'eap': append_value(config, 'wpa_key_mgmt', 'WPA-EAP'); if (config.wpa >= 2 && config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP'); if (config.ieee80211w) append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SHA256'); break; case 'eap192': append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SUITE-B-192'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP-SHA384'); break; case 'eap-eap2': append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP'); if (config.rsn_override) config.rsn_override_key_mgmt = config.wpa_key_mgmt; append_value(config, 'wpa_key_mgmt', 'WPA-EAP'); break; case 'eap2': append_value(config, 'wpa_key_mgmt', 'WPA-EAP-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-EAP'); break; case 'sae': append_value(config, 'wpa_key_mgmt', 'SAE'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-SAE'); break; case 'psk-sae': append_value(config, 'wpa_key_mgmt', 'SAE'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-SAE'); if (config.rsn_override) { config.rsn_override_key_mgmt = config.wpa_key_mgmt; append_value(config, 'rsn_override_key_mgmt_2', 'SAE-EXT-KEY'); if (config.ieee80211r) append_value(config, 'rsn_override_key_mgmt_2', 'FT-SAE-EXT-KEY'); } if (config.rsn_override > 1) delete config.wpa_key_mgmt; append_value(config, 'wpa_key_mgmt', 'WPA-PSK'); if (config.ieee80211w) append_value(config, 'wpa_key_mgmt', 'WPA-PSK-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-PSK'); break; case 'owe': append_value(config, 'wpa_key_mgmt', 'OWE'); break; } if (config.fils) { switch(config.auth_type) { case 'eap192': append_value(config, 'wpa_key_mgmt', 'FILS-SHA384'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-FILS-SHA384'); break; case 'eap-eap2': case 'eap2': case 'eap': append_value(config, 'wpa_key_mgmt', 'FILS-SHA256'); if (config.ieee80211r) append_value(config, 'wpa_key_mgmt', 'FT-FILS-SHA256'); if (!config.rsn_override_key_mgmt) break; append_value(config, 'rsn_override_key_mgmt', 'FILS-SHA256'); if (config.ieee80211r) append_value(config, 'rsn_override_key_mgmt', 'FT-FILS-SHA256'); break; } } config.key_mgmt = config.wpa_key_mgmt; }; function macaddr_random() { let f = fs.open("/dev/urandom", "r"); let addr = f.read(6); addr = map(split(addr, ""), (v) => ord(v)); addr[0] &= ~1; addr[0] |= 2; return join(":", map(addr, (v) => sprintf("%02x", v))); } let mac_idx = 0; export function prepare(data, phy, num_global_macaddr, macaddr_base) { if (!data.macaddr) { let pipe = fs.popen(`ucode /usr/share/hostap/wdev.uc ${phy} get_macaddr id=${mac_idx} num_global=${num_global_macaddr} mbssid=${data.mbssid ?? 0} macaddr_base=${macaddr_base ?? ""}`); data.macaddr = trim(pipe.read("all"), '\n'); pipe.close(); data.default_macaddr = true; mac_idx++; } else if (data.macaddr == 'random') { data.macaddr = macaddr_random(); data.random_macaddr = true; } log(`Preparing interface: ${data.ifname} with MAC: ${data.macaddr}`); }; 07070100EA55D7000081A400000000000000000000000169F91E1500001E37000000080000000100000000000000000000002300000000usr/share/ucode/wifi/supplicant.uc'use strict'; import { append, append_raw, append_vars, network_append, network_append_raw, network_append_vars, network_append_string_vars, set_default, dump_network, flush_network, wiphy_info, wiphy_band } from 'wifi.common'; import * as netifd from 'wifi.netifd'; import * as iface from 'wifi.iface'; import * as fs from 'fs'; function set_fixed_freq(data, config) { if (!data.frequency) return; set_default(config, 'fixed_freq', 1); set_default(config, 'frequency', data.frequency); if (data.htmode in [ 'VHT80', 'HE80', 'EHT80' ]) set_default(config, 'max_oper_chwidth', 1); else if (data.htmode in [ 'VHT160', 'HE160', 'EHT160' ]) set_default(config, 'max_oper_chwidth', 2); else if (data.htmode in [ 'EHT320' ]) set_default(config, 'max_oper_chwidth', 9); else if (data.htmode in [ 'VHT20', 'VHT40', 'HE20', 'HE40', 'EHT20', 'EHT40' ]) set_default(config, 'max_oper_chwidth', 0); else set_default(config, 'disable_vht', true); if (data.htmode in [ 'NOHT' ]) set_default(config, 'disable_ht', true); else if (data.htmode in [ 'HT20', 'VHT20', 'HE20', 'EHT20' ]) set_default(config, 'disable_ht40', true); else if (data.htmode in [ 'VHT40', 'VHT80', 'VHT160', 'HE40', 'HE80', 'HE160', 'EHT40', 'EHT80', 'EHT160', 'EHT320' ]) set_default(config, 'ht40', true); if (wildcard(data.htmode, 'VHT*')) set_default(config, 'vht', 1); } export function ratestr(rate) { if (rate == null) return rate; let rem = (rate / 100) % 10; rate = int(rate / 1000); if (rem > 0) rate += "." + rem; return "" + rate; }; export function ratelist(rates) { if (length(rates) < 1) return null; return join(",", map(rates, (rate) => ratestr(rate))); }; function setup_sta(data, config) { iface.parse_encryption(config); if (config.auth_type in [ 'sae', 'owe', 'eap2', 'eap192' ]) config.ieee80211w = 2; else if (config.auth_type in [ 'psk-sae' ] && !config.ieee80211w) config.ieee80211w = 1; if ((wildcard(data.htmode, 'EHT*') || wildcard(data.htmode, 'HE*')) && config.rsn_override) config.rsn_overriding = 1; else config.rsn_overriding = 0; set_default(config, 'ieee80211r', 0); set_default(config, 'sae_pwe', 2); set_default(config, 'multi_ap', 0); set_default(config, 'multi_profile', 1); set_default(config, 'default_disabled', 0); config.scan_ssid = 1; switch(config.mode) { case 'sta': set_default(config, 'multi_ap_backhaul_sta', config.multi_ap); break; case 'adhoc': config.ap_scan = 2; config.scan_ssid = 0; network_append('mode', 1); set_fixed_freq(data, config); break; case 'mesh': config.ssid = config.mesh_id; config.scan_ssid = null; network_append('mode', 5); set_fixed_freq(data, config); if (config.encryption && config.encryption != 'none') config.key_mgmt = 'SAE'; config.ieee80211w = null; break; } if (config.mode != 'mesh' ) { switch(config.wpa) { case 1: config.proto = 'WPA'; break; case 2: config.proto = 'RSN'; break; } } switch(config.auth_type) { case 'none': break; case 'owe': iface.wpa_key_mgmt(config); break; case 'wps': config.key_mgmt = 'WPS'; break; case 'psk': case 'psk2': case 'sae': case 'psk-sae': if (config.mode != 'mesh') iface.wpa_key_mgmt(config); if (config.mode == 'mesh' || config.auth_type == 'sae') config.sae_password = `"${config.key}"`; else config.psk = `"${config.key}"`; break; case 'eap': case 'eap2': case 'eap192': iface.wpa_key_mgmt(config); set_default(config, 'erp', config.fils); if (config.ca_cert_usesystem && fs.stat('/etc/ssl/certs/ca-certificates.crt')) config.ca_cert = '/etc/ssl/certs/ca-certificates.crt'; switch(config.eap_type) { case 'fast': case 'peap': case 'ttls': set_default(config, 'auth', 'MSCHAPV2'); if (config.auth == 'EAP-TLS') { if (config.ca_cert2_usesystem && fs.stat('/etc/ssl/certs/ca-certificates.crt')) config.ca_cert2 = '/etc/ssl/certs/ca-certificates.crt'; } break; } } if (config.wpa_pairwise == 'GCMP') { config.pairwise = 'GCMP'; config.group = 'GCMP'; } config.key_mgmt ??= 'NONE'; config.basic_rate = ratelist(config.basic_rate); config.mcast_rate = ratestr(config.mcast_rate); network_append_string_vars(config, [ 'ssid', 'identity', 'anonymous_identity', 'password', 'ca_cert', 'ca_cert2', 'client_cert', 'client_cert2', 'subject_match', 'private_key', 'private_key_passwd', 'private_key2', 'private_key2_passwd', ]); network_append_vars(config, [ 'rsn_overriding', 'scan_ssid', 'noscan', 'disabled', 'multi_ap_profile', 'multi_ap_backhaul_sta', 'ocv', 'beacon_prot', 'key_mgmt', 'sae_pwe', 'psk', 'sae_password', 'pairwise', 'group', 'bssid', 'proto', 'mesh_fwding', 'mesh_rssi_threshold', 'frequency', 'fixed_freq', 'disable_ht', 'disable_ht40', 'disable_vht', 'vht', 'max_oper_chwidth', 'ht40', 'beacon_int', 'ieee80211w', 'basic_rate', 'mcast_rate', 'altsubject_match', 'domain_match', 'domain_suffix_match', 'bssid_blacklist', 'bssid_whitelist', 'erp', ]); } function freq_in_range(freq_ranges, freq) { if (!freq_ranges) return true; freq *= 1000; for (let range in freq_ranges) if (freq >= range.start && freq <= range.end) return true; } function wiphy_frequencies(phy, band, radio) { phy = wiphy_info(phy); band = wiphy_band(phy, band); if (!band) return; let ranges; for (let r in phy.radios) if (r.index == radio) ranges = r.freq_ranges; let freqs = []; for (let chan in band.freqs) if (!chan.disabled && freq_in_range(ranges, chan.freq)) push(freqs, chan.freq); if (length(freqs) > 0) return freqs; } export function generate(config_list, data, interface) { flush_network(); if (interface.bridge && (interface.config.mode == 'adhoc' || (interface.config.mode == 'sta' && !interface.config.wds && !interface.config.multi_ap))){ netifd.setup_failed('BRIDGE_NOT_ALLOWED'); return 1; } interface.config.country = data.config.country_code; interface.config.beacon_int = data.config.beacon_int; if (!data.config.scan_list) data.config.scan_list = wiphy_frequencies(data.phy, data.config.band, data.config.radio); if (data.config.scan_list) interface.config.freq_list = join(" ", data.config.scan_list); append_vars(interface.config, [ 'country', 'beacon_int', 'freq_list' ]); setup_sta(data.config, interface.config); let file_name = `/var/run/wpa-supplicant-${interface.config.ifname}.conf`; if (fs.stat(file_name)) fs.rename(file_name, file_name + '.prev'); dump_network(file_name); let config = { mode: interface.config.mode, ctrl: '/var/run/wpa_supplicant', iface: interface.config.ifname, config: file_name, '4addr': !!interface.config.wds, mlo: !!interface.config.mlo, freq_list: data.config.scan_list, powersave: false }; if (!interface.config.default_macaddr) config.macaddr = interface.config.macaddr; if (interface.config.wds) config.bridge = interface.bridge; push(config_list, config); return config; }; export function setup(config, data) { if (!global.ubus.list('wpa_supplicant')) system('ubus wait_for wpa_supplicant'); let ret = global.ubus.call('wpa_supplicant', 'config_set', { phy: data.phy, radio: data.config.radio, config, defer: true, num_global_macaddr: data.config.num_global_macaddr, macaddr_base: data.config.macaddr_base ?? "", }); if (ret) netifd.add_process('/usr/sbin/wpa_supplicant', ret.pid, true, true); else netifd.setup_failed('SUPPLICANT_START_FAILED'); }; export function start(data) { global.ubus.call('wpa_supplicant', 'config_set', { phy: data.phy, radio: data.config.radio, num_global_macaddr: data.config.num_global_macaddr, macaddr_base: data.config.macaddr_base ?? "", }); }; 07070100EA55D3000081A400000000000000000000000169F91E1500000CBD000000080000000100000000000000000000001F00000000usr/share/ucode/wifi/common.uc'use strict'; import * as libubus from 'ubus'; import * as nl80211 from 'nl80211'; import * as fs from 'fs'; global.ubus = libubus.connect(); let config_data = ''; let network_data = ''; const nl80211_bands = [ '2g', '5g', '60g', '6g' ]; export function wiphy_info(phy) { let idx = +fs.readfile(`/sys/class/ieee80211/${phy}/index`); return nl80211.request(nl80211.const.NL80211_CMD_GET_WIPHY, nl80211.const.NLM_F_DUMP, { wiphy: idx, split_wiphy_dump: true }); }; export function wiphy_band(info, band) { let band_idx = index(nl80211_bands, band); if (band_idx < 0 || !info) return; return info.wiphy_bands[band_idx]; }; export function log(msg) { printf(`wifi-scripts: ${msg}\n`); }; export function append_raw(value) { config_data += value + '\n'; }; export function append(key, value) { if (value == null) return; switch (type(value)) { case 'array': value = join(' ', value); break; case 'bool': value = value ? 1 : 0; break; } append_raw(key + '=' + value); }; function escape_string(value) { let chars = map(split(value, ''), (v) => ord(v)); if (length(filter(chars, (v) => (v < 32 || v >= 128))) > 0) return hexenc(value); return `"${value}"`; } export function append_string(key, value) { if (value == null) return; append(key, escape_string(value)); }; export function append_vars(dict, keys) { for (let key in keys) append(key, dict[key]); }; export function append_string_vars(dict, keys) { for (let key in keys) append_string(key, dict[key]); }; export function network_append_raw(value) { network_data += value + '\n'; }; export function network_append(key, value) { if (value == null) return; switch (type(value)) { case 'array': value = join(' ', value); break; case 'bool': value = value ? 1 : 0; break; } network_append_raw('\t' + key + '=' + value); }; export function network_append_string(key, value) { if (value == null) return; network_append_raw('\t' + key + '=' + escape_string(value)); }; export function network_append_vars(dict, keys) { for (let key in keys) network_append(key, dict[key]); }; export function network_append_string_vars(dict, keys) { for (let key in keys) network_append_string(key, dict[key]); }; export function set_default(dict, key, value) { if (dict[key] == null) dict[key] = value; }; export function push_config(dict, key, option, value) { if (!dict[option]) return; dict[key] ??= []; push(dict[key], value); }; export function touch_file(filename) { let file = fs.open(filename, "a"); if (file) file.close(); else log('Failed to touch ' + filename); }; export function append_value(config, key, value) { if (!config[key]) config[key] = value; else config[key] += ' ' + value; }; export function comment(comment) { append_raw('\n# ' + comment); }; export function dump_config(file) { if (file) fs.writefile(file, config_data); return config_data; }; export function dump_network(file) { config_data += 'network={\n'; config_data += network_data;; config_data += '}\n'; if (file) fs.writefile(file, config_data); return config_data; }; export function flush_config() { config_data = ''; }; export function flush_network() { config_data = ''; network_data = ''; }; 07070100EA55D8000081A400000000000000000000000169F91E150000090A000000080000000100000000000000000000001E00000000usr/share/ucode/wifi/utils.uc'use strict'; import { readfile, realpath, lsdir } from "fs"; import * as nl80211 from "nl80211"; function phy_filename(phy, name) { return `/sys/class/ieee80211/${phy}/${name}`; } function phy_file(phy, name) { return readfile(phy_filename(phy, name)); } function phy_index(phy) { return +phy_file(phy, "index"); } function phy_path_match(phy, path) { let phy_path = realpath(phy_filename(phy, "device")); return substr(phy_path, -length(path)) == path; } function __find_phy_by_path(phys, path) { if (!path) return null; path = split(path, "+"); phys = filter(phys, (phy) => phy_path_match(phy, path[0])); phys = sort(phys, (a, b) => phy_index(a) - phy_index(b)); return phys[+path[1]]; } function find_phy_by_macaddr(phys, macaddr) { macaddr = lc(macaddr); return filter(phys, (phy) => phy_file(phy, "macaddr") == macaddr)[0]; } function rename_phy_by_name(phys, name, rename) { let data = json(readfile("/etc/board.json")).wlan; if (!data) return; data = data[name]; if (!data) return; let prev_name = __find_phy_by_path(phys, data.path); if (!prev_name) return; if (!rename) return true; let idx = phy_index(prev_name); nl80211.request(nl80211.const.NL80211_CMD_SET_WIPHY, 0, { wiphy: idx, wiphy_name: name }); let prev_idx = index(phys, prev_name); if (prev_idx >= 0) phys[prev_idx] = name; return true; } function find_phy_by_path(phys, path) { let name = __find_phy_by_path(phys, path); if (!name) return; let data = json(readfile("/etc/board.json")).wlan; if (!data || data[name]) return name; for (let cur_name, cur_data in data) { if (!phy_path_match(name, cur_data.path)) continue; let idx = phy_index(name); nl80211.request(nl80211.const.NL80211_CMD_SET_WIPHY, 0, { wiphy: idx, wiphy_name: cur_name }); return cur_name; } return name; } function find_phy_by_name(phys, name, rename) { if (index(phys, name) >= 0) return name; if (!rename_phy_by_name(phys, name, rename)) return; if (!rename) return name; return index(phys, name) < 0 ? null : name; } export function find_phy(config, rename) { let phys = lsdir("/sys/class/ieee80211"); return find_phy_by_path(phys, config.path) ?? find_phy_by_macaddr(phys, config.macaddr) ?? find_phy_by_name(phys, config.phy, rename); }; 07070100EA55CF000081A400000000000000000000000169F91E1500003CDE000000080000000100000000000000000000001A00000000usr/share/ucode/iwinfo.uc'use strict'; import * as nl80211 from 'nl80211'; import * as libubus from 'ubus'; import { readfile, stat } from "fs"; let wifi_devices = json(readfile('/usr/share/wifi_devices.json')); let countries = json(readfile('/usr/share/iso3166.json')); let board_data = json(readfile('/etc/board.json')); let ubus = libubus.connect(); export let phys; let interfaces; let wireless_status; function find_phy(wiphy) { for (let k, phy in phys) if (phy && phy.wiphy == wiphy) return phy; return null; } function get_survey(iface) { let channels = nl80211.request(nl80211.const.NL80211_CMD_GET_SURVEY, nl80211.const.NLM_F_DUMP, { dev: iface.ifname }); for (let channel in channels) if (channel.survey_info?.frequency == iface.wiphy_freq) return channel.survey_info; return null; } function get_noise(iface) { return iface.survey?.noise ?? -100; } function get_country(iface) { let reg = nl80211.request(nl80211.const.NL80211_CMD_GET_REG, 0, { dev: iface.ifname }); return reg.reg_alpha2 ?? ''; } function get_max_power(iface) { let phy = find_phy(iface.wiphy); for (let k, band in phy.wiphy_bands) if (band) for (let freq in band.freqs) if (freq.freq == iface.wiphy_freq) return freq.max_tx_power;; return 0; } function get_hardware_id(iface) { let hw = { type: 'nl80211', id: 'Generic MAC80211', power_offset: 0, channel_offset: 0, }; let path = `/sys/class/ieee80211/phy${iface.wiphy}/device/`; if (stat(path + 'vendor')) { let data = []; for (let lookup in [ 'vendor', 'device', 'subsystem_vendor', 'subsystem_device' ]) push(data, trim(readfile(path + lookup), '\n')); for (let device in wifi_devices.pci) { let match = 0; for (let i = 0; i < 4; i++) if (lc(data[i]) == lc(device[i])) match++; if (match == 4) { hw.type = `${data[0]}:${data[1]} ${data[2]}:${data[3]}`; hw.power_offset = device[4]; hw.channel_offset = device[5]; hw.id = `${device[6]} ${device[7]}`; } } } let compatible = trim(readfile(`/sys/class/net/${iface.ifname}/device/of_node/compatible`), '\n'); if (compatible && wifi_devices.compatible[compatible]) { hw.id = wifi_devices.compatible[compatible][0] + ' ' + wifi_devices.compatible[compatible][1]; hw.compatible = compatible; hw.type = 'embedded'; } return hw; } const iftypes = [ 'Unknown', 'Ad-Hoc', 'Client', 'Master', 'Master (VLAN)', 'WDS', 'Monitor', 'Mesh Point', 'P2P Client', 'P2P Go', ]; export let ifaces = {}; export function update() { phys = nl80211.request(nl80211.const.NL80211_CMD_GET_WIPHY, nl80211.const.NLM_F_DUMP, { split_wiphy_dump: true }); interfaces = nl80211.request(nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP); wireless_status = ubus.call('network.wireless', 'status'); ifaces = {}; for (let k, v in interfaces) { let iface = ifaces[v.ifname] = v; iface.mode = iftypes[iface.iftype] ?? 'unknown', iface.survey = get_survey(iface); iface.noise = get_noise(iface); iface.country = get_country(iface); iface.max_power = get_max_power(iface); iface.assoclist = nl80211.request(nl80211.const.NL80211_CMD_GET_STATION, nl80211.const.NLM_F_DUMP, { dev: v.ifname }) ?? []; iface.hardware = get_hardware_id(iface); iface.bss_info = ubus.call('hostapd', 'bss_info', { iface: v.ifname }); if (!iface.bss_info) iface.bss_info = ubus.call('wpa_supplicant', 'bss_info', { iface: v.ifname }); } for (let radio, data in wireless_status) for (let k, v in data.interfaces) { if (!v.ifname || !ifaces[v.ifname]) continue; ifaces[v.ifname].ssid = v.config.ssid || v.config.mesh_id; ifaces[v.ifname].radio = data.config; let bss_info = ifaces[v.ifname].bss_info; let owe_transition_ifname = bss_info?.owe_transition_ifname; if (v.config.owe_transition && ifaces[owe_transition_ifname]) { ifaces[v.ifname].owe_transition_ifname = owe_transition_ifname; ifaces[owe_transition_ifname].ssid = v.config.ssid; ifaces[owe_transition_ifname].radio = data.config; ifaces[owe_transition_ifname].owe_transition_ifname = v.ifname } } }; function format_channel(freq) { if (freq < 1000) return 0; if (freq == 2484) return 14; if (freq == 5935) return 2; if (freq < 2484) return (freq - 2407) / 5; if (freq >= 4910 && freq <= 4980) return (freq - 4000) / 5; if (freq < 5950) return (freq - 5000) / 5; if (freq <= 45000) return (freq - 5950) / 5; if (freq >= 58320 && freq <= 70200) return (freq - 56160) / 2160; return 'unknown'; } function format_band(freq) { if (freq == 5935) return '6'; if (freq < 2484) return '2.4'; if (freq < 5950) return '5'; if (freq <= 45000) return '6'; return '60'; } function format_frequency(freq) { return freq ? sprintf('%.03f', freq / 1000.0) : 'unknown'; } function format_rate(rate) { return rate ? sprintf('%.01f', rate / 10.0) : 'unknown'; } function format_expected_throughput(rate) { return rate ? sprintf('%.01f', rate / 1000.0) : 'unknown'; } function format_mgmt_key(key) { switch(+key) { case 1: return '802.1x'; case 2: return 'WPA PSK'; case 3: return 'FT 802.1x'; case 4: return 'FT PSK'; case 5: case 11: // deprecated 802.1x-suiteB-SHA256 return '802.1x-SHA256'; case 6: return 'WPA PSK-SHA256'; case 8: // SAE with SHA256 case 24: // SAE using group-dependent hash return 'SAE'; case 9: // FT SAE with SHA256 case 25: // FT SAE using group-dependent hash return 'FT SAE'; case 12: return '802.1x-192bit'; case 13: return 'FT 802.1x-SHA384'; case 14: return 'FILS-SHA256'; case 15: return 'FILS-SHA384'; case 16: return 'FT FILS-SHA256'; case 17: return 'FT FILS-SHA384'; case 18: return 'OWE'; case 19: return 'FT PSK-SHA384'; case 20: return 'WPA PSK-SHA384'; } return null; } function assoc_flags(data) { const assoc_mhz = { width_40: 40, width_80: 80, width_80p80: '80+80', width_160: 160, width_320: 320, width_10: 10, width_5: 5 }; let mhz = 'unknown'; for (let k, v in assoc_mhz) if (data[k]) mhz = v; const assoc_flags = { mcs: { mcs: 'MCS', }, vht_mcs: { vht_mcs: 'VHT-MCS', vht_nss: 'VHT-NSS', }, he_mcs: { he_mcs: 'HE-MCS', he_nss: 'HE-NSS', he_gi: 'HE-GI', he_dcm: 'HE-DCM', }, eht_mcs: { eht_mcs: 'EHT-MCS', eht_nss: 'EHT-NSS', eht_gi: 'EHT-GI', }, }; let flags = []; for (let k, v in assoc_flags) { if (!data[k]) continue; let first = 0; for (let name, flag in v) { if (data[name] == null) continue; push(flags, `${flag} ${data[name]}`); if (!first++) push(flags, `${mhz}MHz`); } } return flags; } function dbm2mw(dbm) { const LOG10_MAGIC = 1.25892541179; let res = 1.0; let ip = dbm / 10; let fp = dbm % 10; for (let k = 0; k < ip; k++) res *= 10; for (let k = 0; k < fp; k++) res *= LOG10_MAGIC; return int(res); } function dbm2quality(dbm) { let quality = dbm; if (quality < -110) quality = -110; else if (quality > -40) quality = -40; quality += 110; return quality; } function hwmodelist(name) { const mode = { 'HT*': 'n', 'VHT*': 'ac', 'HE*': 'ax', 'EHT*': 'be' }; let iface = ifaces[name]; let phy = board_data.wlan?.['phy' + iface.wiphy]; if (!phy || !iface.radio?.band) return ''; let htmodes = phy.info.bands[uc(iface.radio.band)].modes; let list = []; if (iface.radio.band == '2g' && 'NOHT' in htmodes) push(list, 'g/b'); for (let k, v in mode) for (let htmode in htmodes) if (wildcard(htmode, k)) push(list, v); return join('/', reverse(uniq(list))); } export function assoclist(dev) { let stations = ifaces[dev].assoclist; let ret = {}; for (let station in stations) { let sta = { mac: uc(station.mac), signal: station.sta_info.signal_avg, noise: ifaces[dev].noise, snr: station.sta_info.signal_avg - ifaces[dev].noise, inactive_time: station.sta_info.inactive_time, rx: { bitrate: format_rate(station.sta_info.rx_bitrate?.bitrate ?? 0), bitrate_raw: station.sta_info.rx_bitrate?.bitrate ?? 0, packets: station.sta_info.rx_packets ?? 0, flags: assoc_flags(station.sta_info.rx_bitrate ?? {}), }, tx: { bitrate: format_rate(station.sta_info.tx_bitrate?.bitrate ?? 0), bitrate_raw: station.sta_info.tx_bitrate?.bitrate ?? 0, packets: station.sta_info.tx_packets ?? 0, flags: assoc_flags(station.sta_info.tx_bitrate ?? {}), }, expected_throughput: format_expected_throughput(station.sta_info.expected_throughput ?? 0), }; ret[sta.mac] = sta; } return ret; }; export function freqlist(name) { const freq_flags = { no_10mhz: 'NO_10MHZ', no_20mhz: 'NO_20MHZ', no_ht40_minus: 'NO_HT40-', no_ht40_plus: 'NO_HT40+', no_80mhz: 'NO_80MHZ', no_160mhz: 'NO_160MHZ', indoor_only: 'INDOOR_ONLY', no_ir: 'NO_IR', no_he: 'NO_HE', radar: 'RADAR_DETECTION', }; let iface = ifaces[name]; let phy = find_phy(iface.wiphy); let channels = []; for (let k, band in phy.wiphy_bands) { if (!band) continue; let band_name = format_band(band.freqs[0].freq); for (let freq in band.freqs) { if (freq.disabled) continue; let channel = { freq: format_frequency(freq.freq), band: band_name, channel: format_channel(freq.freq), flags: [], active: iface.wiphy_freq == freq.freq, }; for (let k, v in freq_flags) if (freq[k]) push(channel.flags, v); push(channels, channel); } } return channels; }; export function info(name) { let order = []; for (let iface, data in ifaces) push(order, iface); let list = []; for (let iface in sort(order)) { if (name && iface != name) continue; let data = ifaces[iface]; let dev = { iface, ssid: data.ssid, mac: data.mac, mode: data.mode, channel: format_channel(data.wiphy_freq), freq: format_frequency(data.wiphy_freq), htmode: data.radio?.htmode, center_freq1: format_channel(data.center_freq1) || 'unknown', center_freq2: format_channel(data.center_freq2) || 'unknown', txpower: data.wiphy_tx_power_level / 100, noise: data.noise, signal: 0, bitrate: 0, encryption: 'unknown', hwmode: hwmodelist(iface), phy: 'phy' + data.wiphy, vaps: 'no', hw_type: data.hardware.type, hw_id: data.hardware.id, power_offset: data.hardware.power_offset || 'none', channel_offset: data.hardware.channel_offset || 'none', }; let phy = find_phy(data.wiphy); for (let limit in phy.interface_combinations?.[0]?.limits) if (limit.types?.ap && limit.max > 1) dev.vaps = 'yes'; if (data.bss_info) { if (data.bss_info.wpa_key_mgmt && data.bss_info.wpa_pairwise) dev.encryption = `${replace(data.bss_info.wpa_key_mgmt, ' ', ' / ')} (${data.bss_info.wpa_pairwise})`; else if (data.owe_transition_ifname) dev.encryption = 'none (OWE transition)'; else dev.encryption = 'none'; } let stations = assoclist(iface); for (let k, station in stations) { dev.signal += station.signal; dev.bitrate += station.tx.bitrate_raw; } dev.signal /= length(data.assoclist) || 1; dev.bitrate /= length(data.assoclist) || 1; dev.bitrate = format_rate(dev.bitrate); dev.quality = dbm2quality(dev.signal); if (data.owe_transition_ifname) dev.owe_transition_ifname = data.owe_transition_ifname; push(list, dev); } return list; }; export function htmodelist(name) { let iface = ifaces[name]; let phy = board_data.wlan?.['phy' + iface.wiphy]; if (!phy || !iface.radio.band) return []; return filter(phy.info.bands[uc(iface.radio.band)].modes, (v) => v != 'NOHT'); }; export function txpowerlist(name) { let iface = ifaces[name]; let max_power = iface.max_power / 100; let match = iface.wiphy_tx_power_level / 100; let list = []; for (let power = 0; power <= max_power; power++) { let txpower = { dbm: power, mw: dbm2mw(power), active: power == match, }; push(list, txpower); } return list; }; export function countrylist(dev) { let iface = ifaces[dev]; let list = { active: iface.country, countries, }; return list; }; function scan_extension(ext, cell) { const eht_chan_width = [ '20 MHz', '40 MHz', '80 MHz', '160 MHz', '320 MHz']; switch(ord(ext, 0)) { case 36: let offset = 7; if (!(ord(ext, 3) & 0x2)) break; if (ord(ext, 2) & 0x40) offset += 3; if (ord(ext, 2) & 0x80) offset += 1; cell.he = { chan_width: eht_chan_width[ord(ext, offset + 1) & 0x3], center_chan_1: ord(ext, offset + 2), center_chan_2: ord(ext, offset + 3), }; break; case 106: if (!(ord(ext, 1) & 0x1)) break; cell.eht = { chan_width: eht_chan_width[ord(ext, 6) & 0x7], center_chan_1: ord(ext, 7), center_chan_2: ord(ext, 8), }; break; } }; export function scan(dev) { const rsn_cipher = [ 'NONE', 'WEP-40', 'TKIP', 'WRAP', 'CCMP', 'WEP-104', 'AES-OCB', 'CKIP', 'GCMP', 'GCMP-256', 'CCMP-256' ]; const ht_chan_offset = [ 'no secondary', 'above', '[reserved]', 'below' ]; const vht_chan_width = [ '20 or 40 MHz', '80 MHz', '80+80 MHz', '160 MHz' ]; const ht_chan_width = [ '20 MHz', '40 MHz or higher' ]; const SCAN_FLAG_AP = (1<<2); let params = { dev, scan_flags: SCAN_FLAG_AP, scan_ssids: [ '' ], }; let res = nl80211.request(nl80211.const.NL80211_CMD_TRIGGER_SCAN, 0, params); if (res === false) { printf("Unable to trigger scan: " + nl80211.error() + "\n"); exit(1); } res = nl80211.waitfor([ nl80211.const.NL80211_CMD_NEW_SCAN_RESULTS, nl80211.const.NL80211_CMD_SCAN_ABORTED ], 5000); if (!res) { printf("Netlink error while awaiting scan results: " + nl80211.error() + "\n"); exit(1); } else if (res.cmd == nl80211.const.NL80211_CMD_SCAN_ABORTED) { printf("Scan aborted by kernel\n"); exit(1); } let scan = nl80211.request(nl80211.const.NL80211_CMD_GET_SCAN, nl80211.const.NLM_F_DUMP, { dev }); let cells = []; for (let k, bss in scan) { bss = bss.bss; let cell = { bssid: uc(bss.bssid), frequency: format_frequency(bss.frequency), band: format_band(bss.frequency), channel: format_channel(bss.frequency), dbm: bss.signal_mbm / 100, }; if (bss.capability & (1 << 1)) cell.mode = 'Ad-Hoc'; else if (bss.capability & (1 << 0)) cell.mode = 'Master'; else cell.mode = 'Mesh Point'; cell.quality = dbm2quality(cell.dbm); for (let ie in bss.information_elements) switch(ie.type) { case 0: case 114: cell.ssid = ie.data; break; case 7: cell.country = substr(ie.data, 0, 2); break; case 48: cell.crypto = { group: rsn_cipher[ord(ie.data, 5)] ?? '', pair: [], key_mgmt: [], }; let offset = 6; let count = ord(ie.data, offset); offset += 2; for (let i = 0; i < count; i++) { let key = rsn_cipher[ord(ie.data, offset + 3)]; if (key) push(cell.crypto.pair, key); offset += 4; } count = ord(ie.data, offset); offset += 2; for (let i = 0; i < count; i++) { let key = format_mgmt_key(ord(ie.data, offset + 3)); if (key) push(cell.crypto.key_mgmt, key); offset += 4; } break; case 61: cell.ht = { primary_channel: ord(ie.data, 0), secondary_chan_off: ht_chan_offset[ord(ie.data, 1) & 0x3], chan_width: ht_chan_width[(ord(ie.data, 1) & 0x4) >> 2], }; break; case 192: cell.vht = { chan_width: vht_chan_width[ord(ie.data, 0)], center_chan_1: ord(ie.data, 1), center_chan_2: ord(ie.data, 2), }; break; case 255: scan_extension(ie.data, cell); break; }; push(cells, cell); } return cells; }; update(); 07070100EA558D000081A400000000000000000000000169F91E150001380E000000080000000100000000000000000000001700000000usr/share/ucode/fw4.ucconst fs = require("fs"); const uci = require("uci"); const ubus = require("ubus"); const STATEFILE = "/var/run/fw4.state"; const PARSE_LIST = 0x01; const FLATTEN_LIST = 0x02; const NO_INVERT = 0x04; const UNSUPPORTED = 0x08; const REQUIRED = 0x10; const DEPRECATED = 0x20; const ipv4_icmptypes = { "any": [ 0xFF, 0, 0xFF ], "echo-reply": [ 0, 0, 0xFF ], "pong": [ 0, 0, 0xFF ], /* Alias */ "destination-unreachable": [ 3, 0, 0xFF ], "network-unreachable": [ 3, 0, 0 ], "host-unreachable": [ 3, 1, 1 ], "protocol-unreachable": [ 3, 2, 2 ], "port-unreachable": [ 3, 3, 3 ], "fragmentation-needed": [ 3, 4, 4 ], "source-route-failed": [ 3, 5, 5 ], "network-unknown": [ 3, 6, 6 ], "host-unknown": [ 3, 7, 7 ], "network-prohibited": [ 3, 9, 9 ], "host-prohibited": [ 3, 10, 10 ], "TOS-network-unreachable": [ 3, 11, 11 ], "TOS-host-unreachable": [ 3, 12, 12 ], "communication-prohibited": [ 3, 13, 13 ], "host-precedence-violation": [ 3, 14, 14 ], "precedence-cutoff": [ 3, 15, 15 ], "source-quench": [ 4, 0, 0xFF ], "redirect": [ 5, 0, 0xFF ], "network-redirect": [ 5, 0, 0 ], "host-redirect": [ 5, 1, 1 ], "TOS-network-redirect": [ 5, 2, 2 ], "TOS-host-redirect": [ 5, 3, 3 ], "echo-request": [ 8, 0, 0xFF ], "ping": [ 8, 0, 0xFF ], /* Alias */ "router-advertisement": [ 9, 0, 0xFF ], "router-solicitation": [ 10, 0, 0xFF ], "time-exceeded": [ 11, 0, 0xFF ], "ttl-exceeded": [ 11, 0, 0xFF ], /* Alias */ "ttl-zero-during-transit": [ 11, 0, 0 ], "ttl-zero-during-reassembly": [ 11, 1, 1 ], "parameter-problem": [ 12, 0, 0xFF ], "ip-header-bad": [ 12, 0, 0 ], "required-option-missing": [ 12, 1, 1 ], "timestamp-request": [ 13, 0, 0xFF ], "timestamp-reply": [ 14, 0, 0xFF ], "address-mask-request": [ 17, 0, 0xFF ], "address-mask-reply": [ 18, 0, 0xFF ] }; const ipv6_icmptypes = { /* "name": [ type-code, code-min, code-max ] */ "destination-unreachable": [ 1, 0, 0xFF ], "no-route": [ 1, 0, 0 ], "communication-prohibited": [ 1, 1, 1 ], "address-unreachable": [ 1, 3, 3 ], "port-unreachable": [ 1, 4, 4 ], "packet-too-big": [ 2, 0, 0xFF ], "time-exceeded": [ 3, 0, 0xFF ], "ttl-exceeded": [ 3, 0, 0xFF ], /* Alias */ "ttl-zero-during-transit": [ 3, 0, 0 ], "ttl-zero-during-reassembly": [ 3, 1, 1 ], "parameter-problem": [ 4, 0, 0xFF ], "bad-header": [ 4, 0, 0 ], "unknown-header-type": [ 4, 1, 1 ], "unknown-option": [ 4, 2, 2 ], "echo-request": [ 128, 0, 0xFF ], "ping": [ 128, 0, 0xFF ], /* Alias */ "echo-reply": [ 129, 0, 0xFF ], "pong": [ 129, 0, 0xFF ], /* Alias */ /* only code zero (0) */ "multicast-listener-query": [ 130, 0, 0xFF ], "multicast-listener-report": [ 131, 0, 0xFF ], "multicast-listener-done": [ 132, 0, 0xFF ], "router-solicitation": [ 133, 0, 0xFF ], "router-advertisement": [ 134, 0, 0xFF ], "neighbour-solicitation": [ 135, 0, 0xFF ], "neighbor-solicitation": [ 135, 0, 0xFF ], /* Alias */ "neighbour-advertisement": [ 136, 0, 0xFF ], "neighbor-advertisement": [ 136, 0, 0xFF ], /* Alias */ "redirect": [ 137, 0, 0xFF ], /* codes 0, 1, 255 */ "router-renumbering": [ 138, 0, 0xFF ], /* codes 0, 1, 2 */ "node-info-query": [ 139, 0, 0xFF ], /* codes 0, 1, 2 */ "node-info-response": [ 140, 0, 0xFF ], "inverse-neighbour-discovery-solicitation-message": [ 141, 0, 0xFF ], "inverse-neighbor-discovery-solicitation-message": [ 141, 0, 0xFF ], /* Alias */ "inverse-neighbour-discovery-advertisement-message": [ 142, 0, 0xFF ], "inverse-neighbor-discovery-advertisement-message": [ 142, 0, 0xFF ], /* Alias */ "v2-multicast-listener-report": [ 143, 0, 0xFF ], "home-agent-address-discovery-request-message": [ 144, 0, 0xFF ], "home-agent-address-discovery-reply-message": [ 145, 0, 0xFF ], "mobile-prefix-solicitation": [ 146, 0, 0xFF ], "mobile-prefix-advertisement": [ 147, 0, 0xFF ], /* SEND */ "certification-path-solicitation-message": [ 148, 0, 0xFF ], "certification-path-advertisement-message": [ 149, 0, 0xFF ], "seamoby-protocol-message": [ 150, 0, 0xFF ], /* IPv6 multicast: FF02:0:0:0:0:0:0:6A, no code fields */ "multicast-router-advertisement": [ 151, 0, 0xFF ], "multicast-router-solicitation": [ 152, 0, 0xFF ], "multicast-router-termination": [ 153, 0, 0xFF ], /* codes 0-5, 6-255 */ "fmipv6-message": [ 154, 0, 0xFF ], "rpl-control-message": [ 155, 0, 0xFF ], "ilnpv6-locator-update-message": [ 156, 0, 0xFF ], /* codes 0-4, 5-15 */ "duplicate-address-request": [ 157, 0, 0xFF ], /* codes 0-4, 5-15 */ "duplicate-address-confirmation": [ 158, 0, 0xFF ], /* Multicast Protocol for Low-Power */ "mpl-control-message": [ 159, 0, 0xFF ], /* codes 0, 1-255 */ "extended-echo-request": [ 160, 0, 0xFF ], "extended-ping": [ 160, 0, 0xFF ], /* Alias */ /* codes 0-4, 5-255 */ "extended-echo-reply": [ 161, 0, 0xFF ], "extended-pong": [ 161, 0, 0xFF ] /* Alias */ }; const dscp_classes = { "CS0": 0x00, "CS1": 0x08, "CS2": 0x10, "CS3": 0x18, "CS4": 0x20, "CS5": 0x28, "CS6": 0x30, "CS7": 0x38, "BE": 0x00, "LE": 0x01, "AF11": 0x0a, "AF12": 0x0c, "AF13": 0x0e, "AF21": 0x12, "AF22": 0x14, "AF23": 0x16, "AF31": 0x1a, "AF32": 0x1c, "AF33": 0x1e, "AF41": 0x22, "AF42": 0x24, "AF43": 0x26, "EF": 0x2e }; function to_mask(bits, v6) { let m = [], n = false; if (bits < 0) { n = true; bits = -bits; } if (bits > (v6 ? 128 : 32)) return null; for (let i = 0; i < (v6 ? 16 : 4); i++) { let b = (bits < 8) ? bits : 8; m[i] = (n ? ~(0xff << (8 - b)) : (0xff << (8 - b))) & 0xff; bits -= b; } return arrtoip(m); } function to_bits(mask) { let a = iptoarr(mask); if (!a) return null; let bits = 0; for (let i = 0, z = false; i < length(a); i++) { z ||= !a[i]; while (!z && (a[i] & 0x80)) { a[i] = (a[i] << 1) & 0xff; bits++; } if (a[i]) return null; } return bits; } function apply_mask(addr, mask) { let a = iptoarr(addr); if (!a) return null; if (type(mask) == "int") { for (let i = 0; i < length(a); i++) { let b = (mask < 8) ? mask : 8; a[i] &= (0xff << (8 - b)) & 0xff; mask -= b; } } else { let m = iptoarr(mask); if (!m || length(a) != length(m)) return null; for (let i = 0; i < length(a); i++) a[i] &= m[i]; } return arrtoip(a); } function to_array(x) { if (type(x) == "array") return x; if (x == null) return []; if (type(x) == "object") return [ x ]; x = trim("" + x); return (x == "") ? [] : split(x, /[ \t]+/); } function filter_pos(x) { let rv = filter(x, e => !e.invert); return length(rv) ? rv : null; } function filter_neg(x) { let rv = filter(x, e => e.invert); return length(rv) ? rv : null; } function null_if_empty(x) { return length(x) ? x : null; } function subnets_split_af(x) { let rv = {}; for (let ag in to_array(x)) { for (let a in filter(ag.addrs, a => (a.family == 4))) push(rv[0] ||= [], { ...a, invert: ag.invert }); for (let a in filter(ag.addrs, a => (a.family == 6))) push(rv[1] ||= [], { ...a, invert: ag.invert }); } if (rv[0] || rv[1]) rv.family = (!rv[0] ^ !rv[1]) ? (rv[0] ? 4 : 6) : 0; return rv; } function subnets_group_by_masking(x) { let groups = [], plain = [], nc = [], invert_plain = [], invert_masked = []; for (let a in to_array(x)) { if (a.bits == -1 && !a.invert) push(nc, a); else if (!a.invert) push(plain, a); else if (a.bits == -1) push(invert_masked, a); else push(invert_plain, a); } for (let a in nc) push(groups, [ null, null_if_empty(invert_plain), [ a, ...invert_masked ] ]); if (length(plain)) { push(groups, [ plain, null_if_empty(invert_plain), null_if_empty(invert_masked) ]); } else if (!length(groups)) { push(groups, [ null, null_if_empty(invert_plain), null_if_empty(invert_masked) ]); } return groups; } function ensure_tcpudp(x) { if (length(filter(x, p => (p.name == "tcp" || p.name == "udp")))) return true; let rest = filter(x, p => !p.any), any = filter(x, p => p.any); if (length(any) && !length(rest)) { splice(x, 0); push(x, { name: "tcp" }, { name: "udp" }); return true; } return false; } let is_family = (x, v) => (!x.family || x.family == v); let family_is_ipv4 = (x) => (!x.family || x.family == 4); let family_is_ipv6 = (x) => (!x.family || x.family == 6); function infer_family(f, objects) { let res = f; let by = null; for (let i = 0; i < length(objects); i += 2) { let objs = to_array(objects[i]), desc = objects[i + 1]; for (let obj in objs) { if (!obj || !obj.family || obj.family == res) continue; if (!res) { res = obj.family; by = obj.desc; continue; } return by ? `references IPv${obj.family} only ${desc} but is restricted to IPv${res} by ${by}` : `is restricted to IPv${res} but referenced ${desc} is IPv${obj.family} only`; } } return res; } function map_setmatch(set, match, proto) { if (!set || (('inet_service' in set.types) && proto != 'tcp' && proto != 'udp')) return null; let fields = []; for (let i, t in set.types) { let dir = ((match.dir?.[i] || set.directions[i] || 'src') == 'src' ? 's' : 'd'); switch (t) { case 'ipv4_addr': fields[i] = `ip ${dir}addr`; break; case 'ipv6_addr': fields[i] = `ip6 ${dir}addr`; break; case 'ether_addr': if (dir != 's') return NaN; fields[i] = 'ether saddr'; break; case 'inet_service': fields[i] = `${proto} ${dir}port`; break; } } return fields; } function resolve_lower_devices(devstatus, devname) { let dir = fs.opendir(`/sys/class/net/${devname}`); let devs = []; if (dir) { switch (devstatus[devname]?.devtype) { case 'vlan': case 'bridge': let e; while ((e = dir.read()) != null) if (index(e, "lower_") === 0) push(devs, ...resolve_lower_devices(devstatus, substr(e, 6))); break; default: push(devs, devname); break; } dir.close(); } return devs; } function nft_json_command(...args) { let cmd = [ "/usr/sbin/nft", "--terse", "--json", ...args ]; let nft = fs.popen(join(" ", cmd), "r"); let info; if (nft) { try { info = filter(json(nft.read("all"))?.nftables, item => (type(item) == "object" && !item.metainfo)); } catch (e) { warn(`Unable to parse nftables JSON output: ${e}\n`); } nft.close(); } else { warn(`Unable to popen() ${cmd}: ${fs.error()}\n`); } return info || []; } function nft_try_hw_offload(devices) { let nft_test = ` add table inet fw4-hw-offload-test; add flowtable inet fw4-hw-offload-test ft { hook ingress priority 0; devices = { "${join('", "', devices)}" }; flags offload; } `; let rc = system(`/usr/sbin/nft -c '${replace(nft_test, "'", "'\\''")}' 2>/dev/null`); return (rc == 0); } return { read_kernel_version: function() { let fd = fs.open("/proc/version", "r"), v = 0; if (fd) { let m = match(fd.read("line"), /^Linux version ([0-9]+)\.([0-9]+)(\.([0-9]+))?/); v = m ? (+m[1] << 24) | (+m[2] << 16) | (+m[4]) : 0; fd.close(); } return v; }, resolve_hw_offload_devices: function() { if (!this.default_option("flow_offloading_hw")) return null; let devstatus = null; let devices = null; let bus = ubus.connect(); if (bus) { devstatus = bus.call("network.device", "status") || {}; bus.disconnect(); } for (let zone in this.zones()) for (let device in zone.related_physdevs) push(devices ||= [], ...resolve_lower_devices(devstatus, device)); if (!devices) return null; devices = sort(uniq(devices)); if (!nft_try_hw_offload(devices)) { this.warn('Hardware flow offloading unavailable, falling back to software offloading'); this.state.defaults.flow_offloading_hw = false; return null; } return devices; }, resolve_offload_devices: function() { if (!this.default_option("flow_offloading")) return []; let devices = this.resolve_hw_offload_devices(); if (!devices) { devices = []; for (let zone in this.zones()) for (let device in zone.related_physdevs) if (fs.access(`/sys/class/net/${device}`)) push(devices, device); devices = sort(uniq(devices)); } return devices; }, check_set_types: function() { let sets = {}; for (let item in nft_json_command("list", "sets", "inet")) if (item.set?.table == "fw4") sets[item.set.name] = (type(item.set.type) == "array") ? item.set.type : [ item.set.type ]; return sets; }, check_flowtable: function() { for (let item in nft_json_command("list", "flowtables", "inet")) if (item.flowtable?.table == "fw4" && item.flowtable?.name == "ft") return true; return false; }, read_state: function() { let fd = fs.open(STATEFILE, "r"); let state = null; if (fd) { try { state = json(fd.read("all")); } catch (e) { warn(`Unable to parse '${STATEFILE}': ${e}\n`); } fd.close(); } return state; }, read_ubus: function() { let self = this, ifaces, services, rules = [], networks = {}, bus = ubus.connect(); if (bus) { ifaces = bus.call("network.interface", "dump"); services = bus.call("service", "get_data", { "type": "firewall" }); bus.disconnect(); } else { warn(`Unable to connect to ubus: ${ubus.error()}\n`); } // // Gather logical network information from ubus // if (type(ifaces?.interface) == "array") { for (let ifc in ifaces.interface) { let net = { up: ifc.up, device: ifc.l3_device ?? ifc.device, physdev: ifc.device, zone: ifc.data?.zone }; if (type(ifc["ipv4-address"]) == "array") { for (let addr in ifc["ipv4-address"]) { push(net.ipaddrs ||= [], { family: 4, addr: addr.address, mask: to_mask(addr.mask, false), bits: addr.mask }); } } if (type(ifc["ipv6-address"]) == "array") { for (let addr in ifc["ipv6-address"]) { push(net.ipaddrs ||= [], { family: 6, addr: addr.address, mask: to_mask(addr.mask, true), bits: addr.mask }); } } if (type(ifc["ipv6-prefix-assignment"]) == "array") { for (let addr in ifc["ipv6-prefix-assignment"]) { if (addr["local-address"]) { push(net.ipaddrs ||= [], { family: 6, addr: addr["local-address"].address, mask: to_mask(addr["local-address"].mask, true), bits: addr["local-address"].mask }); } } } if (type(ifc.data?.firewall) == "array") { let n = 0; for (let rulespec in ifc.data.firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${ifc.interface}[${ifc.proto}] ${rulespec.type || 'rule'} ${n}` : rulespec.name, device: rulespec.device ?? ifc.l3_device ?? ifc.device }); n++; } } networks[ifc.interface] = net; } } // // Gather firewall rule definitions from ubus services // if (type(services) == "object") { for (let svcname, service in services) { if (type(service?.firewall) == "array") { let n = 0; for (let rulespec in services[svcname].firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${svcname} ${rulespec.type || 'rule'} ${n}` : rulespec.name }); n++; } } for (let svcinst, instance in service) { if (type(instance?.firewall) == "array") { let n = 0; for (let rulespec in instance.firewall) { push(rules, { ...rulespec, name: (rulespec.type != 'ipset') ? `ubus:${svcname}[${svcinst}] ${rulespec.type || 'rule'} ${n}` : rulespec.name }); n++; } } } } } return { networks: networks, ubus_rules: rules }; }, load: function(use_statefile) { let self = this; this.state = use_statefile ? this.read_state() : null; this.cursor = uci.cursor(); this.cursor.load("firewall"); this.cursor.load("/usr/share/firewall4/helpers"); if (!this.state) this.state = this.read_ubus(); this.kernel = this.read_kernel_version(); // // Read helper mapping // this.cursor.foreach("helpers", "helper", h => self.parse_helper(h)); // // Read default policies // this.cursor.foreach("firewall", "defaults", d => self.parse_defaults(d)); if (!this.state.defaults) this.parse_defaults({}); // // Build list of ipsets // if (!this.state.ipsets) { map(filter(this.state.ubus_rules, n => (n.type == "ipset")), s => self.parse_ipset(s)); this.cursor.foreach("firewall", "ipset", s => self.parse_ipset(s)); } // // Build list of logical zones // if (!this.state.zones) this.cursor.foreach("firewall", "zone", z => self.parse_zone(z)); // // Build list of rules // map(filter(this.state.ubus_rules, r => (r.type == "rule")), r => self.parse_rule(r)); this.cursor.foreach("firewall", "rule", r => self.parse_rule(r)); // // Build list of forwardings // this.cursor.foreach("firewall", "forwarding", f => self.parse_forwarding(f)); // // Build list of redirects // map(filter(this.state.ubus_rules, r => (r.type == "redirect")), r => self.parse_redirect(r)); this.cursor.foreach("firewall", "redirect", r => self.parse_redirect(r)); // // Build list of snats // map(filter(this.state.ubus_rules, n => (n.type == "nat")), n => self.parse_nat(n)); this.cursor.foreach("firewall", "nat", n => self.parse_nat(n)); // // Build list of includes // this.cursor.foreach("firewall", "include", i => self.parse_include(i)); // // Discover automatic includes // if (this.default_option("auto_includes")) { for (let position in [ 'ruleset-pre', 'ruleset-post', 'table-pre', 'table-post', 'chain-pre', 'chain-post' ]) for (let chain in (position in [ 'chain-pre', 'chain-post' ]) ? fs.lsdir(`/usr/share/nftables.d/${position}`) : [ null ]) for (let path in fs.glob(`/usr/share/nftables.d/${position}${chain ? `/${chain}` : ''}/*.nft`)) if (fs.access(path)) this.parse_include({ type: 'nftables', position, chain, path }); } if (use_statefile) { let fd = fs.open(STATEFILE, "w"); if (fd) { fd.write({ zones: this.state.zones, ipsets: this.state.ipsets, networks: this.state.networks, ubus_rules: this.state.ubus_rules, includes: this.state.includes }); fd.close(); } else { warn(`Unable to write '${STATEFILE}': ${fs.error()}\n`); } } }, warn: function(fmt, ...args) { if (getenv("QUIET")) return; let msg = sprintf(fmt, ...args); if (getenv("TTY")) warn(`\033[33m${msg}\033[m\n`); else warn(`[!] ${msg}\n`); }, get: function(sid, opt) { return this.cursor.get("firewall", sid, opt); }, get_all: function(sid) { return this.cursor.get_all("firewall", sid); }, parse_options: function(s, spec) { let rv = {}; for (let key, val in spec) { let datatype = `parse_${val[0]}`, defval = val[1], flags = val[2] || 0, parsefn = (flags & PARSE_LIST) ? "parse_list" : "parse_opt"; let res = this[parsefn](s, key, datatype, defval, flags); if (res !== res) return false; if (type(res) == "object" && res.invert && (flags & NO_INVERT)) { this.warn_section(s, `option '${key}' must not be negated`); return false; } if (res != null) { if (flags & DEPRECATED) this.warn_section(s, `option '${key}' is deprecated by fw4`); else if (flags & UNSUPPORTED) this.warn_section(s, `option '${key}' is not supported by fw4`); else rv[key] = res; } } for (let opt in s) { if (index(opt, '.') != 0 && opt != 'type' && !exists(spec, opt)) { this.warn_section(s, `specifies unknown option '${opt}'`); } } return rv; }, parse_subnet: function(subnet) { let parts = split(subnet, "/"); let a, b, m, n; switch (length(parts)) { case 2: a = iptoarr(parts[0]); m = iptoarr(parts[1]); if (!a) return null; if (m) { if (length(a) != length(m)) return null; b = to_bits(parts[1]); /* allow non-contiguous masks such as `::ffff:ffff:ffff:ffff` */ if (b == null) { b = -1; for (let i, x in m) a[i] &= x; } m = arrtoip(m); } else { b = +parts[1]; if (type(b) != "int") return null; m = to_mask(b, length(a) == 16); b = max(-1, b); } return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), mask: m, bits: b }]; case 1: parts = split(parts[0], "-"); switch (length(parts)) { case 2: a = iptoarr(parts[0]); b = iptoarr(parts[1]); if (a && b && length(a) == length(b)) { return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), addr2: arrtoip(b), range: true }]; } break; case 1: a = iptoarr(parts[0]); if (a) { return [{ family: (length(a) == 16) ? 6 : 4, addr: arrtoip(a), mask: to_mask(length(a) * 8, length(a) == 16), bits: length(a) * 8 }]; } n = this.state.networks[parts[0]]; if (n) return [ ...(n.ipaddrs || []) ]; } } return null; }, parse_enum: function(val, choices) { if (type(val) == "string") { val = lc(val); for (let i = 0; i < length(choices); i++) if (lc(substr(choices[i], 0, length(val))) == val) return choices[i]; } return null; }, section_id: function(sid) { let s = this.get_all(sid); if (!s) return null; if (s[".anonymous"]) { let c = 0; this.cursor.foreach("firewall", s[".type"], function(ss) { if (ss[".name"] == s[".name"]) return false; c++; }); return `@${s['.type']}[${c}]`; } return s[".name"]; }, warn_section: function(s, msg) { if (s[".name"]) { if (s.name) this.warn("Section %s (%s) %s", this.section_id(s[".name"]), s.name, msg); else this.warn("Section %s %s", this.section_id(s[".name"]), msg); } else { if (s.name) this.warn("ubus %s (%s) %s", s.type || "rule", s.name, msg); else this.warn("ubus %s %s", s.type || "rule", msg); } }, parse_policy: function(val) { return this.parse_enum(val, [ "accept", "reject", "drop" ]); }, parse_bool: function(val) { if (val == "1" || val == "on" || val == "true" || val == "yes") return true; else if (val == "0" || val == "off" || val == "false" || val == "no") return false; else return null; }, parse_family: function(val) { if (val == 'any' || val == 'all' || val == '*') return 0; else if (val == 'inet' || index(val, '4') > -1) return 4; else if (index(val, '6') > -1) return 6; return null; }, parse_zone_ref: function(val) { if (val == null) return null; if (val == '*') return { any: true }; for (let zone in this.state.zones) { if (zone.name == val) { return { any: false, zone: zone }; } } return null; }, parse_device: function(val) { let rv = this.parse_invert(val); if (!rv) return null; if (rv.val == '*') rv.any = true; else rv.device = rv.val; return rv; }, parse_direction: function(val) { if (val == 'in' || val == 'ingress') return false; else if (val == 'out' || val == 'egress') return true; return null; }, parse_setmatch: function(val) { let rv = this.parse_invert(val); if (!rv) return null; rv.val = trim(replace(rv.val, /^[^ \t]+/, function(m) { rv.name = m; return ''; })); let dir = split(rv.val, /[ \t,]/); for (let i = 0; i < 3 && i < length(dir); i++) { if (dir[i] == "dst" || dir[i] == "dest") (rv.dir ||= [])[i] = "dst"; else if (dir[i] == "src") (rv.dir ||= [])[i] = "src"; } return length(rv.name) ? rv : null; }, parse_cthelper: function(val) { let rv = this.parse_invert(val); if (!rv) return null; let helper = filter(this.state.helpers, h => (h.name == rv.val))?.[0]; return helper ? { ...rv, ...helper } : null; }, parse_protocol: function(val) { let p = this.parse_invert(val); if (!p) return null; p.val = lc(p.val); switch (p.val) { case 'all': case 'any': case '*': p.any = true; break; case '1': case 'icmp': p.name = 'icmp'; break; case '58': case 'icmpv6': case 'ipv6-icmp': p.name = 'ipv6-icmp'; break; case 'tcpudp': return [ { invert: p.invert, name: 'tcp' }, { invert: p.invert, name: 'udp' } ]; case '6': p.name = 'tcp'; break; case '17': p.name = 'udp'; break; default: p.name = p.val; } return (p.any || length(p.name)) ? p : null; }, parse_mac: function(val) { let mac = this.parse_invert(val); let m = mac ? match(mac.val, /^([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})[:-]([0-9a-f]{1,2})$/i) : null; if (!m) return null; mac.mac = sprintf('%02x:%02x:%02x:%02x:%02x:%02x', hex(m[1]), hex(m[2]), hex(m[3]), hex(m[4]), hex(m[5]), hex(m[6])); return mac; }, parse_port: function(val) { let port = this.parse_invert(val); let m = port ? match(port.val, /^([0-9]{1,5})([-:]([0-9]{1,5}))?$/i) : null; if (!m) return null; if (m[3]) { let min_port = +m[1]; let max_port = +m[3]; if (min_port > max_port || min_port < 0 || max_port < 0 || min_port > 65535 || max_port > 65535) return null; port.min = min_port; port.max = max_port; } else { let pn = +m[1]; if (pn != pn || pn < 0 || pn > 65535) return null; port.min = pn; port.max = pn; } return port; }, parse_network: function(val) { let rv = this.parse_invert(val); if (!rv) return null; let nets = this.parse_subnet(rv.val); if (nets === null) return null; if (length(nets)) rv.addrs = [ ...nets ]; return rv; }, parse_icmptype: function(val) { let rv = {}; if (exists(ipv4_icmptypes, val)) { rv.family = 4; rv.type = ipv4_icmptypes[val][0]; rv.code_min = ipv4_icmptypes[val][1]; rv.code_max = ipv4_icmptypes[val][2]; } if (exists(ipv6_icmptypes, val)) { rv.family = rv.family ? 0 : 6; rv.type6 = ipv6_icmptypes[val][0]; rv.code6_min = ipv6_icmptypes[val][1]; rv.code6_max = ipv6_icmptypes[val][2]; } if (!exists(rv, "family")) { let m = match(val, /^([0-9]+)(\/([0-9]+))?$/); if (!m) return null; if (m[3]) { rv.type = +m[1]; rv.code_min = +m[3]; rv.code_max = rv.code_min; } else { rv.type = +m[1]; rv.code_min = 0; rv.code_max = 0xFF; } if (rv.type > 0xFF || rv.code_min > 0xFF || rv.code_max > 0xFF) return null; rv.family = 0; rv.type6 = rv.type; rv.code6_min = rv.code_min; rv.code6_max = rv.code_max; } return rv; }, parse_invert: function(val) { if (val == null) return null; let rv = { invert: false }; rv.val = trim(replace(val, /^[ \t]*!/, () => (rv.invert = true, ''))); return length(rv.val) ? rv : null; }, parse_limit: function(val) { let rv = this.parse_invert(val); let m = rv ? match(rv.val, /^([0-9]+)(\/([a-z]+))?$/) : null; if (!m) return null; let n = +m[1]; let u = m[3] ? this.parse_enum(m[3], [ "second", "minute", "hour", "day" ]) : "second"; if (!u) return null; rv.rate = n; rv.unit = u; return rv; }, parse_int: function(val) { let n = +val; return (n == n) ? n : null; }, parse_date: function(val) { let d = match(val, /^([0-9]{4})(-([0-9]{1,2})(-([0-9]{1,2})(T([0-9:]+))?)?)?$/); if (d == null || d[1] < 1970 || d[1] > 2038 || d[3] > 12 || d[5] > 31) return null; let t = this.parse_time(d[7] ?? "0"); if (t == null) return null; return { year: +d[1], month: +d[3] || 1, day: +d[5] || 1, ...t }; }, parse_time: function(val) { let t = match(val, /^([0-9]{1,2})(:([0-9]{1,2})(:([0-9]{1,2}))?)?$/); if (t == null || t[1] > 23 || t[3] > 59 || t[5] > 59) return null; return { hour: +t[1], min: +t[3], sec: +t[5] }; }, parse_weekdays: function(val) { let rv = this.parse_invert(val); if (!rv) return null; for (let day in to_array(rv.val)) { day = this.parse_enum(day, [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ]); if (!day) return null; (rv.days ||= {})[day] = true; } rv.days = keys(rv.days); return rv.days ? rv : null; }, parse_monthdays: function(val) { let rv = this.parse_invert(val); if (!rv) return null; for (let day in to_array(rv.val)) { day = +day; if (day < 1 || day > 31) return null; (rv.days ||= [])[day] = true; } return rv.days ? rv : null; }, parse_mark: function(val) { let rv = this.parse_invert(val); let m = rv ? match(rv.val, /^(0?x?[0-9a-f]+)(\/(0?x?[0-9a-f]+))?$/i) : null; if (!m) return null; let n = +m[1]; if (n != n || n > 0xFFFFFFFF) return null; rv.mark = n; rv.mask = 0xFFFFFFFF; if (m[3]) { n = +m[3]; if (n != n || n > 0xFFFFFFFF) return null; rv.mask = n; } return rv; }, parse_dscp: function(val) { let rv = this.parse_invert(val); if (!rv) return null; rv.val = uc(rv.val); if (exists(dscp_classes, rv.val)) { rv.dscp = dscp_classes[rv.val]; } else { let n = +rv.val; if (n != n || n < 0 || n > 0x3F) return null; rv.dscp = n; } return rv; }, parse_target: function(val) { return this.parse_enum(val, [ "accept", "reject", "drop", "notrack", "helper", "mark", "dscp", "dnat", "snat", "masquerade", "accept", "reject", "drop" ]); }, parse_reject_code: function(val) { return this.parse_enum(val, [ "tcp-reset", "port-unreachable", "admin-prohibited", "host-unreachable", "no-route" ]); }, parse_reflection_source: function(val) { return this.parse_enum(val, [ "internal", "external" ]); }, parse_ipsettype: function(val) { let m = match(val, /^(src|dst|dest)_(.+)$/); let t = this.parse_enum(m ? m[2] : val, [ "ip", "port", "mac", "net", "set" ]); return t ? [ (!m || m[1] == 'src') ? 'src' : 'dst', t ] : null; }, parse_ipsetentry: function(val, set) { let values = split(val, /[ \t]+/); if (length(values) != length(set.types)) return null; let rv = []; let ip, mac, port; for (let i, t in set.types) { switch (t) { case 'ipv4_addr': ip = filter(this.parse_subnet(values[i]), a => (a.family == 4)); switch (length(ip) ?? 0) { case 0: return null; case 1: break; default: this.warn("Set entry '%s' resolves to multiple addresses, using first one", values[i]); } rv[i] = ("net" in set.fw4types) ? `${ip[0].addr}/${ip[0].bits}` : ip[0].addr; break; case 'ipv6_addr': ip = filter(this.parse_subnet(values[i]), a => (a.family == 6)); switch (length(ip) ?? 0) { case 0: return null; case 1: break; case 2: this.warn("Set entry '%s' resolves to multiple addresses, using first one", values[i]); } rv[i] = ("net" in set.fw4types) ? `${ip[0].addr}/${ip[0].bits}` : ip[0].addr; break; case 'ether_addr': mac = this.parse_mac(values[i]); if (!mac || mac.invert) return null; rv[i] = mac.mac; break; case 'inet_service': port = this.parse_port(values[i]); if (!port || port.invert || port.min != port.max) return null; rv[i] = port.min; break; default: rv[i] = values[i]; } } return length(rv) ? rv : null; }, parse_includetype: function(val) { return this.parse_enum(val, [ "script", "nftables" ]); }, parse_includeposition: function(val) { return replace(this.parse_enum(val, [ "ruleset-prepend", "ruleset-postpend", "ruleset-append", "table-prepend", "table-postpend", "table-append", "chain-prepend", "chain-postpend", "chain-append" ]), "postpend", "append"); }, parse_identifier: function(val) { return match(val, /^[a-zA-Z_.][a-zA-Z0-9\/_.-]*$/)?.[0]; }, parse_string: function(val) { return "" + val; }, parse_opt: function(s, opt, fn, defval, flags) { let val = s[opt]; if (val === null) { if (flags & REQUIRED) { this.warn_section(s, `option '${opt}' is mandatory but not set`); return NaN; } val = defval; } if (type(val) == "array") { this.warn_section(s, `option '${opt}' must not be a list`); return NaN; } else if (val == null) { return null; } let res = this[fn](val); if (res === null) { this.warn_section(s, `option '${opt}' specifies invalid value '${val}'`); return NaN; } return res; }, parse_list: function(s, opt, fn, defval, flags) { let val = s[opt]; let rv = []; if (val == null) { if (flags & REQUIRED) { this.warn_section(s, `option '${opt}' is mandatory but not set`); return NaN; } val = defval; } for (val in to_array(val)) { let res = this[fn](val); if (res === null) { this.warn_section(s, `option '${opt}' specifies invalid value '${val}'`); return NaN; } if (flags & FLATTEN_LIST) push(rv, ...to_array(res)); else push(rv, res); } return length(rv) ? rv : null; }, quote: function(s, force) { if (force === true || !match(s, /^([0-9A-Fa-f:.\/-]+)( \. [0-9A-Fa-f:.\/-]+)*$/)) return `"${replace(s, '"', "'")}"`; return s; }, cidr: function(a) { if (a.range) return `${a.addr}-${a.addr2}`; if ((a.family == 4 && a.bits == 32) || (a.family == 6 && a.bits == 128)) return a.addr; if (a.bits >= 0) return `${apply_mask(a.addr, a.bits)}/${a.bits}`; return `${a.addr}/${a.mask}`; }, host: function(a, v6brackets) { return a.range ? `${a.addr}-${a.addr2}` : (a.family == 6 && v6brackets) ? `[${apply_mask(a.addr, a.bits)}]` : apply_mask(a.addr, a.bits); }, port: function(p) { if (p.min == p.max) return `${p.min}`; return `${p.min}-${p.max}`; }, set: function(v, force) { let seen = {}; v = filter(to_array(v), item => !seen[item]++); if (force || length(v) != 1) return `{ ${join(', ', map(v, this.quote))} }`; return this.quote(v[0]); }, concat: function(v) { return join(' . ', to_array(v)); }, ipproto: function(family) { switch (family) { case 4: return "ip"; case 6: return "ip6"; } }, nfproto: function(family, human_readable) { switch (family) { case 4: return human_readable ? "IPv4" : "ipv4"; case 6: return human_readable ? "IPv6" : "ipv6"; default: return human_readable ? "IPv4/IPv6" : null; } }, l4proto: function(family, proto) { switch (proto.name) { case 'icmp': switch (family ?? 0) { case 0: return this.set(['icmp', 'ipv6-icmp']); case 6: return 'ipv6-icmp'; } default: return proto.name; } }, datetime: function(stamp) { return sprintf('"%04d-%02d-%02d %02d:%02d:%02d"', stamp.year, stamp.month, stamp.day, stamp.hour, stamp.min, stamp.sec); }, date: function(stamp) { return sprintf('"%04d-%02d-%02d"', stamp.year, stamp.month, stamp.day); }, datestamp: function(stamp) { return exists(stamp, 'hour') ? this.datetime(stamp) : this.date(stamp); }, time: function(stamp) { return sprintf('"%02d:%02d:%02d"', stamp.hour, stamp.min, stamp.sec); }, hex: function(n) { return sprintf('0x%x', n); }, is_loopback_dev: function(dev) { return !!(+fs.readfile(`/sys/class/net/${dev}/flags`) & 0x8); }, is_loopback_addr: function(addr) { return (index(addr, "127.") == 0 || addr == "::1" || addr == "::1/128"); }, filter_loopback_devs: function(devs, invert) { return null_if_empty(filter(devs, d => (this.is_loopback_dev(d) == invert))); }, filter_loopback_addrs: function(addrs, invert) { return null_if_empty(filter(addrs, a => (this.is_loopback_addr(a) == invert))); }, input_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.input != 'reject') ? this.state.defaults.input : 'drop'; }, output_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.output != 'reject') ? this.state.defaults.output : 'drop'; }, forward_policy: function(reject_as_drop) { return (!reject_as_drop || this.state.defaults.forward != 'reject') ? this.state.defaults.forward : 'drop'; }, default_option: function(flag) { return this.state.defaults[flag]; }, helpers: function() { return this.state.helpers; }, zones: function() { return this.state.zones; }, rules: function(chain) { return filter(this.state.rules, r => (r.chain == chain)); }, redirects: function(chain) { return filter(this.state.redirects, r => (r.chain == chain)); }, ipsets: function() { return this.state.ipsets; }, includes: function(position, chain) { let stmts = []; let pad = ''; let pre = ''; switch (position) { case 'table-prepend': case 'table-append': pad = '\t'; pre = '\n'; break; case 'chain-prepend': case 'chain-append': pad = '\t\t'; break; default: pre = '\n'; } push(stmts, pre); for (let inc in this.state.includes) if (inc.type == 'nftables' && inc.position == position && (!chain || inc.chain == chain)) push(stmts, `${pad}include "${inc.path}"\n`); print(length(stmts) > 1 ? join('', stmts) : ''); }, parse_setfile: function(set, cb) { let fd = fs.open(set.loadfile, "r"); if (!fd) { warn(`Unable to load file '${set.loadfile}' for set '${set.name}': ${fs.error()}\n`); return; } let count = 0; for (let line = fd.read("line"); length(line); line = fd.read("line")) { line = trim(line); if (length(line) == 0 || ord(line) == 35) continue; let v = this.parse_ipsetentry(line, set); if (!v) { this.warn(`Skipping invalid entry '${line}' in file '${set.loadfile}' for set '${set.name}'`); continue; } cb(v); count++; } fd.close(); return count; }, print_setentries: function(set) { let first = true; let printer = (entry) => { if (first) { print("\t\telements = {\n"); first = false; } print("\t\t\t", join(" . ", entry), ",\n"); }; map(set.entries, printer); if (set.loadfile) this.parse_setfile(set, printer); if (!first) print("\t\t}\n"); }, parse_helper: function(data) { let helper = this.parse_options(data, { name: [ "string", null, REQUIRED ], description: [ "string" ], module: [ "string" ], family: [ "family" ], proto: [ "protocol", null, PARSE_LIST | FLATTEN_LIST | NO_INVERT ], port: [ "port", null, NO_INVERT ] }); if (helper === false) { this.warn("Helper definition '%s' skipped due to invalid options", data.name || data['.name']); return; } else if (helper.proto.any) { this.warn("Helper definition '%s' must not specify wildcard protocol", data.name || data['.name']); return; } else if (length(helper.proto) > 1) { this.warn("Helper definition '%s' must not specify multiple protocols", data.name || data['.name']); return; } helper.available = (fs.stat(`/sys/module/${helper.module}`)?.type == "directory"); push(this.state.helpers ||= [], helper); }, parse_defaults: function(data) { if (this.state.defaults) { this.warn_section(data, ": ignoring duplicate defaults section"); return; } let defs = this.parse_options(data, { input: [ "policy", "drop" ], output: [ "policy", "drop" ], forward: [ "policy", "drop" ], drop_invalid: [ "bool" ], tcp_reject_code: [ "reject_code", "tcp-reset" ], any_reject_code: [ "reject_code", "port-unreachable" ], syn_flood: [ "bool" ], synflood_protect: [ "bool" ], synflood_rate: [ "limit", "25/second" ], synflood_burst: [ "int", "50" ], tcp_syncookies: [ "bool", "1" ], tcp_ecn: [ "int" ], tcp_window_scaling: [ "bool", "1" ], accept_redirects: [ "bool" ], accept_source_route: [ "bool" ], auto_helper: [ "bool", "1" ], custom_chains: [ "bool", null, UNSUPPORTED ], disable_ipv6: [ "bool", null, UNSUPPORTED ], flow_offloading: [ "bool", "0" ], flow_offloading_hw: [ "bool", "0" ], auto_includes: [ "bool", "1" ] }); if (defs.synflood_protect === null) defs.synflood_protect = defs.syn_flood; delete defs.syn_flood; this.state.defaults = defs; }, parse_zone: function(data) { let zone = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "identifier", null, REQUIRED ], family: [ "family" ], network: [ "device", null, PARSE_LIST ], device: [ "device", null, PARSE_LIST ], subnet: [ "network", null, PARSE_LIST ], input: [ "policy", this.state.defaults ? this.state.defaults.input : "drop" ], output: [ "policy", this.state.defaults ? this.state.defaults.output : "drop" ], forward: [ "policy", this.state.defaults ? this.state.defaults.forward : "drop" ], masq: [ "bool" ], masq_allow_invalid: [ "bool" ], masq_src: [ "network", null, PARSE_LIST ], masq_dest: [ "network", null, PARSE_LIST ], masq6: [ "bool" ], extra: [ "string", null, UNSUPPORTED ], extra_src: [ "string", null, UNSUPPORTED ], extra_dest: [ "string", null, UNSUPPORTED ], mtu_fix: [ "bool" ], custom_chains: [ "bool", null, UNSUPPORTED ], log: [ "int" ], log_limit: [ "limit" ], auto_helper: [ "bool", "1" ], helper: [ "cthelper", null, PARSE_LIST ], counter: [ "bool", "1" ] }); if (zone === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!zone.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } for (let helper in zone.helper) { if (!helper.available) { this.warn_section(data, `uses unavailable ct helper '${zone.helper.name}'`); } } if (zone.mtu_fix && this.kernel < 0x040a0000) { this.warn_section(data, "option 'mtu_fix' requires kernel 4.10 or later"); return; } if (this.state.defaults?.auto_helper === false) zone.auto_helper = false; let match_devices = []; let related_physdevs = []; let related_subnets = []; let related_ubus_networks = []; let match_subnets, masq_src_subnets, masq_dest_subnets; for (let name, net in this.state.networks) { if (net.zone === zone.name) push(related_ubus_networks, { invert: false, device: name }); } zone.network = [ ...to_array(zone.network), ...related_ubus_networks ]; for (let e in zone.network) { if (exists(this.state.networks, e.device)) { let net = this.state.networks[e.device]; if (net.device) { push(match_devices, { invert: e.invert, device: net.device }); } if (net.physdev && !e.invert) push(related_physdevs, net.physdev); push(related_subnets, ...(net.ipaddrs || [])); } } push(match_devices, ...to_array(zone.device)); match_subnets = subnets_split_af(zone.subnet); masq_src_subnets = subnets_split_af(zone.masq_src); masq_dest_subnets = subnets_split_af(zone.masq_dest); push(related_subnets, ...(match_subnets[0] || []), ...(match_subnets[1] || [])); let match_rules = []; let add_rule = (family, devices, subnets, zone) => { let r = {}; r.family = family; r.devices_pos = null_if_empty(devices[0]); r.devices_neg = null_if_empty(devices[1]); r.devices_neg_wildcard = null_if_empty(devices[2]); r.subnets_pos = map(subnets[0], this.cidr); r.subnets_neg = map(subnets[1], this.cidr); r.subnets_masked = subnets[2]; push(match_rules, r); }; let family = infer_family(zone.family, [ match_subnets, "subnet list" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); return; } // group non-inverted device matches into wildcard and non-wildcard ones let devices = [], plain_devices = [], plain_invert_devices = [], wildcard_invert_devices = []; for (let device in match_devices) { let m = match(device.device, /^([^+]*)(\+)?$/); if (!m) { this.warn_section(data, `skipping invalid wildcard pattern '${device.device}'`); continue; } // filter `+` (match any device) since nftables does not support // wildcard only matches if (!device.invert && m[0] == '+') continue; // replace inverted `+` (match no device) with invalid pattern if (device.invert && m[0] == '+') { device.device = '/never/'; device.invert = false; } // replace "name+" matches with "name*" else if (m[2] == '+') device.device = m[1] + '*'; device.wildcard = !!m[2]; if (!device.invert && device.wildcard) push(devices, [ [ device.device ], plain_invert_devices, wildcard_invert_devices ]); else if (!device.invert) push(plain_devices, device.device); else if (device.wildcard) push(wildcard_invert_devices, device.device); else push(plain_invert_devices, device.device); } if (length(plain_devices)) push(devices, [ plain_devices, plain_invert_devices, wildcard_invert_devices ]); else if (!length(devices)) push(devices, [ null, plain_invert_devices, wildcard_invert_devices ]); // emit zone jump rules for each device group if (length(match_devices) || length(match_subnets[0]) || length(match_subnets[1])) { for (let devgroup in devices) { // check if there's no AF specific bits, in this case we can do AF agnostic matching if (!family && !length(match_subnets[0]) && !length(match_subnets[1])) { add_rule(0, devgroup, [], zone); } // we need to emit one or two AF specific rules else { if (!family || family == 4) for (let subnets in subnets_group_by_masking(match_subnets[0])) add_rule(4, devgroup, subnets, zone); if (!family || family == 6) for (let subnets in subnets_group_by_masking(match_subnets[1])) add_rule(6, devgroup, subnets, zone); } } } zone.family = family; zone.match_rules = match_rules; zone.masq4_src_subnets = subnets_group_by_masking(masq_src_subnets[0]); zone.masq4_dest_subnets = subnets_group_by_masking(masq_dest_subnets[0]); zone.masq6_src_subnets = subnets_group_by_masking(masq_src_subnets[1]); zone.masq6_dest_subnets = subnets_group_by_masking(masq_dest_subnets[1]); zone.sflags = {}; zone.sflags[zone.input] = true; zone.dflags = {}; zone.dflags[zone.output] = true; zone.dflags[zone.forward] = true; zone.match_devices = map(filter(match_devices, d => !d.invert), d => d.device); zone.match_subnets = map(filter(related_subnets, s => !s.invert && s.bits != -1), this.cidr); zone.related_subnets = related_subnets; zone.related_physdevs = related_physdevs; if (zone.masq || zone.masq6) zone.dflags.snat = true; if ((zone.auto_helper && !(zone.masq || zone.masq6)) || length(zone.helper)) { zone.dflags.helper = true; for (let helper in (length(zone.helper) ? zone.helper : this.state.helpers)) { if (!helper.available) continue; for (let proto in helper.proto) { push(this.state.rules ||= [], { chain: `helper_${zone.name}`, family: helper.family, name: helper.description || helper.name, proto: proto, src: zone, dports_pos: [ this.port(helper.port) ], target: "helper", set_helper: helper }); } } } push(this.state.zones ||= [], zone); }, parse_forwarding: function(data) { let fwd = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string" ], family: [ "family" ], src: [ "zone_ref", null, REQUIRED ], dest: [ "zone_ref", null, REQUIRED ] }); if (fwd === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!fwd.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } let add_rule = (family, fwd) => { let f = { ...fwd, family: family, proto: { any: true } }; f.name ||= `Accept ${fwd.src.any ? "any" : fwd.src.zone.name} to ${fwd.dest.any ? "any" : fwd.dest.zone.name} ${family ? `${this.nfproto(family, true)} ` : ''}forwarding`; f.chain = fwd.src.any ? "forward" : `forward_${fwd.src.zone.name}`; if (fwd.dest.any) f.target = "accept"; else f.jump_chain = `accept_to_${fwd.dest.zone.name}`; push(this.state.rules ||= [], f); }; /* inherit family restrictions from related zones */ let family = infer_family(fwd.family, [ fwd.src?.zone, "source zone", fwd.dest?.zone, "destination zone" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); return; } add_rule(family, fwd); if (fwd.dest.zone) fwd.dest.zone.dflags.accept = true; }, parse_rule: function(data) { let rule = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], _name: [ "string", null, DEPRECATED ], family: [ "family" ], src: [ "zone_ref" ], dest: [ "zone_ref" ], device: [ "device", null, NO_INVERT ], direction: [ "direction" ], ipset: [ "setmatch" ], helper: [ "cthelper" ], set_helper: [ "cthelper", null, NO_INVERT ], proto: [ "protocol", "tcpudp", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network", null, PARSE_LIST ], src_mac: [ "mac", null, PARSE_LIST ], src_port: [ "port", null, PARSE_LIST ], dest_ip: [ "network", null, PARSE_LIST ], dest_port: [ "port", null, PARSE_LIST ], icmp_type: [ "icmptype", null, PARSE_LIST ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], set_mark: [ "mark", null, NO_INVERT ], set_xmark: [ "mark", null, NO_INVERT ], dscp: [ "dscp" ], set_dscp: [ "dscp", null, NO_INVERT ], counter: [ "bool", "1" ], log: [ "string" ], log_limit: [ "limit" ], target: [ "target" ] }); if (rule === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!rule.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (rule.target in ["helper", "notrack"] && (!rule.src || !rule.src.zone)) { this.warn_section(data, `must specify a source zone for target '${rule.target}'`); return; } else if (rule.target == "dscp" && !rule.set_dscp) { this.warn_section(data, "must specify option 'set_dscp' for target 'dscp'"); return; } else if (rule.target == "mark" && !rule.set_mark && !rule.set_xmark) { this.warn_section(data, "must specify option 'set_mark' or 'set_xmark' for target 'mark'"); return; } else if (rule.target == "helper" && !rule.set_helper) { this.warn_section(data, "must specify option 'set_helper' for target 'helper'"); return; } else if (rule.device?.any) { this.warn_section(data, "must not specify '*' as device"); return; } switch (this.parse_bool(rule.log)) { case true: rule.log = `${rule.name}: `; break; case false: delete rule.log; } let ipset; if (rule.ipset) { ipset = filter(this.state.ipsets, s => (s.name == rule.ipset.name))?.[0]; if (!ipset) { this.warn_section(data, `references unknown set '${rule.ipset.name}'`); return; } if (('inet_service' in ipset.types) && !ensure_tcpudp(rule.proto)) { this.warn_section(data, "references named set with port match but no UDP/TCP protocol, ignoring section"); return; } } let need_src_action_chain = (rule) => (rule.src?.zone?.log && rule.target != "accept"); let add_rule = (family, proto, saddrs, daddrs, sports, dports, icmptypes, icmpcodes, ipset, rule) => { let r = { ...rule, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(length(sports) || length(dports)), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(sports), this.port), sports_neg: map(filter_neg(sports), this.port), dports_pos: map(filter_pos(dports), this.port), dports_neg: map(filter_neg(dports), this.port), smacs_pos: map(filter_pos(rule.src_mac), m => m.mac), smacs_neg: map(filter_neg(rule.src_mac), m => m.mac), icmp_types: map(icmptypes, i => (family == 4 ? i.type : i.type6)), icmp_codes: map(icmpcodes, ic => `${(family == 4) ? ic.type : ic.type6} . ${(family == 4) ? ic.code_min : ic.code6_min}`) }; if (!length(r.icmp_types)) delete r.icmp_types; if (!length(r.icmp_codes)) delete r.icmp_codes; if (r.set_mark) { r.set_xmark = { invert: r.set_mark.invert, mark: r.set_mark.mark, mask: r.set_mark.mark | r.set_mark.mask }; delete r.set_mark; } let set_types = map_setmatch(ipset, rule.ipset, proto.name); if (set_types !== set_types) { this.warn_section(data, "destination MAC address matching not supported"); return; } else if (set_types) { r.ipset = { ...r.ipset, fields: set_types }; } if (r.target == "notrack") { r.chain = `notrack_${r.src.zone.name}`; r.src.zone.dflags.notrack = true; } else if (r.target == "helper") { r.chain = `helper_${r.src.zone.name}`; r.src.zone.dflags.helper = true; } else if (r.target == "mark" || r.target == "dscp") { if ((r.src?.any && r.dest?.any) || (r.src?.zone && r.dest?.zone)) r.chain = "mangle_forward"; else if (r.src?.any && r.dest?.zone) r.chain = "mangle_postrouting"; else if (r.src?.zone && r.dest?.any) r.chain = "mangle_prerouting"; else if (r.src && !r.dest) r.chain = "mangle_input"; else r.chain = "mangle_output"; if (r.src?.zone) { r.src.zone.dflags[r.target] = true; r.iifnames = null_if_empty(r.src.zone.match_devices); } if (r.dest?.zone) { r.dest.zone.dflags[r.target] = true; r.oifnames = null_if_empty(r.dest.zone.match_devices); } } else { r.chain = "output"; if (r.src) { if (!r.src.any) r.chain = `${r.dest ? "forward" : "input"}_${r.src.zone.name}`; else r.chain = r.dest ? "forward" : "input"; } if (r.dest && !r.src) { if (!r.dest.any) r.chain = sprintf("output_%s", r.dest.zone.name); else r.chain = "output"; } if (r.target && r.dest && !r.dest.any) { r.jump_chain = `${r.target}_to_${r.dest.zone.name}`; r.dest.zone.dflags[r.target] = true; } else if (r.target && need_src_action_chain(r)) { r.jump_chain = `${r.target}_from_${r.src.zone.name}`; r.src.zone.sflags[r.target] = true; } else if (r.target == "reject") r.jump_chain = "handle_reject"; } if (r.device) r[r.direction ? "oifnames" : "iifnames"] = [ r.device.device ]; push(this.state.rules ||= [], r); }; for (let proto in rule.proto) { let sip, dip, sports, dports, itypes4, itypes6; let family = rule.family; switch (proto.name) { case "icmp": itypes4 = filter(rule.icmp_type || [], family_is_ipv4); itypes6 = filter(rule.icmp_type || [], family_is_ipv6); break; case "ipv6-icmp": family = 6; itypes6 = filter(rule.icmp_type || [], family_is_ipv6); break; case "tcp": case "udp": sports = rule.src_port; dports = rule.dest_port; break; } sip = subnets_split_af(rule.src_ip); dip = subnets_split_af(rule.dest_ip); family = infer_family(family, [ ipset, "set match", sip, "source IP", dip, "destination IP", rule.src?.zone, "source zone", rule.dest?.zone, "destination zone", rule.helper, "helper match", rule.set_helper, "helper to set" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } let has_ipv4_specifics = (length(sip[0]) || length(dip[0]) || length(itypes4) || rule.dscp !== null); let has_ipv6_specifics = (length(sip[1]) || length(dip[1]) || length(itypes6) || rule.dscp !== null); /* if no family was configured, infer target family from IP addresses */ if (family === null) { if (has_ipv4_specifics && !has_ipv6_specifics) family = 4; else if (has_ipv6_specifics && !has_ipv4_specifics) family = 6; else family = 0; } /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && rule.target != "dscp" && !has_ipv4_specifics && !has_ipv6_specifics) { add_rule(0, proto, [], [], sports, dports, null, null, ipset, rule); } /* we need to emit one or two AF specific rules */ else { if (family == 0 || family == 4) { let icmp_types = filter(itypes4, i => (i.code_min == 0 && i.code_max == 0xFF)); let icmp_codes = filter(itypes4, i => (i.code_min != 0 || i.code_max != 0xFF)); for (let saddrs in subnets_group_by_masking(sip[0])) { for (let daddrs in subnets_group_by_masking(dip[0])) { if (length(icmp_types) || (!length(icmp_types) && !length(icmp_codes))) add_rule(4, proto, saddrs, daddrs, sports, dports, icmp_types, null, ipset, rule); if (length(icmp_codes)) add_rule(4, proto, saddrs, daddrs, sports, dports, null, icmp_codes, ipset, rule); } } } if (family == 0 || family == 6) { let icmp_types = filter(itypes6, i => (i.code_min == 0 && i.code_max == 0xFF)); let icmp_codes = filter(itypes6, i => (i.code_min != 0 || i.code_max != 0xFF)); for (let saddrs in subnets_group_by_masking(sip[1])) { for (let daddrs in subnets_group_by_masking(dip[1])) { if (length(icmp_types) || (!length(icmp_types) && !length(icmp_codes))) add_rule(6, proto, saddrs, daddrs, sports, dports, icmp_types, null, ipset, rule); if (length(icmp_codes)) add_rule(6, proto, saddrs, daddrs, sports, dports, null, icmp_codes, ipset, rule); } } } } } }, parse_redirect: function(data) { let redir = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], _name: [ "string", null, DEPRECATED ], family: [ "family" ], src: [ "zone_ref" ], dest: [ "zone_ref" ], ipset: [ "setmatch" ], helper: [ "cthelper", null, NO_INVERT ], proto: [ "protocol", "tcpudp", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network" ], src_mac: [ "mac", null, PARSE_LIST ], src_port: [ "port" ], src_dip: [ "network" ], src_dport: [ "port" ], dest_ip: [ "network" ], dest_port: [ "port" ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], reflection: [ "bool", "1" ], reflection_src: [ "reflection_source", "internal" ], reflection_zone: [ "zone_ref", null, PARSE_LIST ], counter: [ "bool", "1" ], log: [ "string" ], log_limit: [ "limit" ], target: [ "target", "dnat" ] }); if (redir === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!redir.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!(redir.target in ["dnat", "snat"])) { this.warn_section(data, "has invalid target specified, defaulting to dnat"); redir.target = "dnat"; } switch (this.parse_bool(redir.log)) { case true: redir.log = `${redir.name}: `; break; case false: delete redir.log; } let ipset; if (redir.ipset) { ipset = filter(this.state.ipsets, s => (s.name == redir.ipset.name))?.[0]; if (!ipset) { this.warn_section(data, `references unknown set '${redir.ipset.name}'`); return; } if (('inet_service' in ipset.types) && !ensure_tcpudp(redir.proto)) { this.warn_section(data, "references named set with port match but no UDP/TCP protocol, ignoring section"); return; } } let resolve_dest = (redir) => { for (let zone in this.state.zones) { for (let zone_addr in zone.related_subnets) { for (let dest_addr in redir.dest_ip.addrs) { if (dest_addr.family != zone_addr.family) continue; let a = apply_mask(dest_addr.addr, zone_addr.mask); let b = apply_mask(zone_addr.addr, zone_addr.mask); if (a != b) continue; redir.dest = { any: false, zone: zone }; return true; } } } return false; }; if (redir.target == "dnat") { if (!redir.src) return this.warn_section(data, "has no source specified"); else if (redir.src.any) return this.warn_section(data, "must not have source '*' for dnat target"); else if (redir.dest_ip && redir.dest_ip.invert) return this.warn_section(data, "must not specify a negated 'dest_ip' value"); else if (redir.dest_ip && length(filter(redir.dest_ip.addrs, a => a.bits == -1))) return this.warn_section(data, "must not use non-contiguous masks in 'dest_ip'"); if (!redir.dest && redir.dest_ip && resolve_dest(redir)) this.warn_section(data, `does not specify a destination, assuming '${redir.dest.zone.name}'`); if (!redir.dest_port) redir.dest_port = redir.src_dport; if (redir.reflection && redir.dest?.zone && redir.src.zone.masq) { redir.dest.zone.dflags.accept = true; redir.dest.zone.dflags.dnat = true; redir.dest.zone.dflags.snat = true; } if (redir.helper) redir.src.zone.dflags.helper = true; redir.src.zone.dflags[redir.target] = true; } else { if (!redir.dest) return this.warn_section(data, "has no destination specified"); else if (redir.dest.any) return this.warn_section(data, "must not have destination '*' for snat target"); else if (!redir.src_dip) return this.warn_section(data, "has no 'src_dip' option specified"); else if (redir.src_dip.invert) return this.warn_section(data, "must not specify a negated 'src_dip' value"); else if (length(filter(redir.src_dip.addrs, a => a.bits == -1))) return this.warn_section(data, "must not use non-contiguous masks in 'src_dip'"); else if (redir.src_mac) return this.warn_section(data, "must not use 'src_mac' option for snat target"); else if (redir.helper) return this.warn_section(data, "must not use 'helper' option for snat target"); redir.dest.zone.dflags[redir.target] = true; } let add_rule = (family, proto, saddrs, daddrs, raddrs, sport, dport, rport, ipset, redir) => { let r = { ...redir, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(sport || dport || rport), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(to_array(sport)), this.port), sports_neg: map(filter_neg(to_array(sport)), this.port), dports_pos: map(filter_pos(to_array(dport)), this.port), dports_neg: map(filter_neg(to_array(dport)), this.port), smacs_pos: map(filter_pos(redir.src_mac), m => m.mac), smacs_neg: map(filter_neg(redir.src_mac), m => m.mac), raddr: raddrs ? raddrs[0] : null, rport: rport }; let set_types = map_setmatch(ipset, redir.ipset, proto.name); if (set_types !== set_types) { this.warn_section(data, "destination MAC address matching not supported"); return; } else if (set_types) { r.ipset = { ...r.ipset, fields: set_types }; } switch (r.target) { case "dnat": r.chain = `dstnat_${r.src.zone.name}`; r.src.zone.dflags.dnat = true; if (!r.raddr) r.target = "redirect"; break; case "snat": r.chain = `srcnat_${r.dest.zone.name}`; r.dest.zone.dflags.snat = true; break; } push(this.state.redirects ||= [], r); }; let to_hostaddr = (a) => { let bits = (a.family == 4) ? 32 : 128; return { family: a.family, addr: apply_mask(a.addr, bits), bits: bits }; }; for (let proto in redir.proto) { let sip, dip, rip, iip, eip, refip, sport, dport, rport; let family = redir.family; if (proto.name == "ipv6-icmp") family = 6; switch (redir.target) { case "dnat": sip = subnets_split_af(redir.src_ip); dip = subnets_split_af(redir.src_dip); rip = subnets_split_af(redir.dest_ip); switch (proto.name) { case "tcp": case "udp": sport = redir.src_port; dport = redir.src_dport; rport = redir.dest_port; break; } break; case "snat": sip = subnets_split_af(redir.src_ip); dip = subnets_split_af(redir.dest_ip); rip = subnets_split_af(redir.src_dip); switch (proto.name) { case "tcp": case "udp": sport = redir.src_port; dport = redir.dest_port; rport = redir.src_dport; break; } break; } family = infer_family(family, [ ipset, "set match", sip, "source IP", dip, "destination IP", rip, "rewrite IP", redir.src?.zone, "source zone", redir.dest?.zone, "destination zone", redir.helper, "helper match" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } /* build reflection rules */ if (redir.target == "dnat" && redir.reflection && (length(rip[0]) || length(rip[1])) && redir.src?.zone && redir.dest?.zone) { let refredir = { name: `${redir.name} (reflection)`, helper: redir.helper, // XXX: this likely makes no sense for reflection rules //src_mac: redir.src_mac, limit: redir.limit, limit_burst: redir.limit_burst, start_date: redir.start_date, stop_date: redir.stop_date, start_time: redir.start_time, stop_time: redir.stop_time, weekdays: redir.weekdays, mark: redir.mark }; let eaddrs = length(dip) ? dip : subnets_split_af({ addrs: map(redir.src.zone.related_subnets, to_hostaddr) }); let rzones = length(redir.reflection_zone) ? redir.reflection_zone : [ redir.dest ]; for (let rzone in rzones) { if (!is_family(rzone, family)) { this.warn_section(data, `is restricted to IPv${family} but referenced reflection zone is IPv${rzone.family} only, skipping`); continue; } let iaddrs = subnets_split_af({ addrs: rzone.zone.related_subnets }); let refaddrs = (redir.reflection_src == "internal") ? iaddrs : eaddrs; for (let i = 0; i <= 1; i++) { if (redir.src.zone[i ? "masq6" : "masq"] && length(rip[i])) { let snat_addr = refaddrs[i]?.[0]; /* For internal reflection sources try to find a suitable candiate IP * among the reflection zone subnets which is within the same subnet * as the original DNAT destination. If we can't find any matching * one then simply take the first candidate. */ if (redir.reflection_src == "internal") { for (let zone_addr in rzone.zone.related_subnets) { if (zone_addr.family != rip[i][0].family) continue; let r = apply_mask(rip[i][0].addr, zone_addr.mask); let a = apply_mask(zone_addr.addr, zone_addr.mask); if (r != a) continue; snat_addr = zone_addr; break; } } if (!snat_addr) { this.warn_section(data, `${redir.reflection_src || "external"} rewrite IP cannot be determined, disabling reflection`); } else if (!length(iaddrs[i])) { this.warn_section(data, "internal address range cannot be determined, disabling reflection"); } else if (!length(eaddrs[i])) { this.warn_section(data, "external address range cannot be determined, disabling reflection"); } else { refredir.src = rzone; refredir.dest = null; refredir.target = "dnat"; for (let saddrs in subnets_group_by_masking(iaddrs[i])) for (let daddrs in subnets_group_by_masking(eaddrs[i])) add_rule(i ? 6 : 4, proto, saddrs, daddrs, rip[i], sport, dport, rport, null, refredir); refredir.src = null; refredir.dest = rzone; refredir.target = "snat"; for (let daddrs in subnets_group_by_masking(rip[i])) for (let saddrs in subnets_group_by_masking(iaddrs[i])) add_rule(i ? 6 : 4, proto, saddrs, daddrs, [ to_hostaddr(snat_addr) ], null, rport, null, null, refredir); } } } } } if (length(rip[0]) > 1 || length(rip[1]) > 1) this.warn_section(data, "specifies multiple rewrite addresses, using only first one"); let has_ip4_addr = length(sip[0]) || length(dip[0]) || length(rip[0]), has_ip6_addr = length(sip[1]) || length(dip[1]) || length(rip[1]), has_any_addr = has_ip4_addr || has_ip6_addr; /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && !has_any_addr) { /* for backwards compatibility, treat unspecified family as IPv4 unless user explicitly requested any (0) */ if (family == null) family = 4; add_rule(family, proto, [], [], null, sport, dport, rport, ipset, redir); } /* we need to emit one or two AF specific rules */ else { if ((!family || family == 4) && (!has_any_addr || has_ip4_addr)) { for (let saddrs in subnets_group_by_masking(sip[0])) for (let daddrs in subnets_group_by_masking(dip[0])) add_rule(4, proto, saddrs, daddrs, rip[0], sport, dport, rport, ipset, redir); } if ((!family || family == 6) && (!has_any_addr || has_ip6_addr)) { for (let saddrs in subnets_group_by_masking(sip[1])) for (let daddrs in subnets_group_by_masking(dip[1])) add_rule(6, proto, saddrs, daddrs, rip[1], sport, dport, rport, ipset, redir); } } } }, parse_nat: function(data) { let snat = this.parse_options(data, { enabled: [ "bool", "1" ], name: [ "string", this.section_id(data[".name"]) ], family: [ "family" ], src: [ "zone_ref" ], device: [ "string" ], ipset: [ "setmatch", null, UNSUPPORTED ], proto: [ "protocol", "all", PARSE_LIST | FLATTEN_LIST ], src_ip: [ "network" ], src_port: [ "port" ], snat_ip: [ "network", null, NO_INVERT ], snat_port: [ "port", null, NO_INVERT ], dest_ip: [ "network" ], dest_port: [ "port" ], extra: [ "string", null, UNSUPPORTED ], limit: [ "limit" ], limit_burst: [ "int" ], connlimit_ports: [ "bool" ], utc_time: [ "bool" ], start_date: [ "date" ], stop_date: [ "date" ], start_time: [ "time" ], stop_time: [ "time" ], weekdays: [ "weekdays" ], monthdays: [ "monthdays", null, UNSUPPORTED ], mark: [ "mark" ], counter: [ "bool", "1" ], log: [ "string" ], target: [ "target", "masquerade" ] }); if (snat === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!snat.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!(snat.target in ["accept", "snat", "masquerade"])) { this.warn_section(data, "has invalid target specified, defaulting to masquerade"); snat.target = "masquerade"; } if (snat.target == "snat" && !snat.snat_ip && !snat.snat_port) { this.warn_section(data, "needs either 'snat_ip' or 'snat_port' for target snat, ignoring section"); return; } else if (snat.target != "snat" && snat.snat_ip) { this.warn_section(data, "must not use 'snat_ip' for non-snat target, ignoring section"); return; } else if (snat.target != "snat" && snat.snat_port) { this.warn_section(data, "must not use 'snat_port' for non-snat target, ignoring section"); return; } if ((snat.snat_port || snat.src_port || snat.dest_port) && !ensure_tcpudp(snat.proto)) { this.warn_section(data, "specifies ports but no UDP/TCP protocol, ignoring section"); return; } if (snat.snat_ip && length(filter(snat.snat_ip.addrs, a => a.bits == -1 || a.invert))) { this.warn_section(data, "must not use inversion or non-contiguous masks in 'snat_ip', ignoring section"); return; } switch (this.parse_bool(snat.log)) { case true: snat.log = `${snat.name}: `; break; case false: delete snat.log; } let add_rule = (family, proto, saddrs, daddrs, raddrs, sport, dport, rport, snat) => { let n = { ...snat, family: family, proto: proto, has_addrs: !!(saddrs[0] || saddrs[1] || saddrs[2] || daddrs[0] || daddrs[1] || daddrs[2]), has_ports: !!(sport || dport), saddrs_pos: map(saddrs[0], this.cidr), saddrs_neg: map(saddrs[1], this.cidr), saddrs_masked: saddrs[2], daddrs_pos: map(daddrs[0], this.cidr), daddrs_neg: map(daddrs[1], this.cidr), daddrs_masked: daddrs[2], sports_pos: map(filter_pos(to_array(sport)), this.port), sports_neg: map(filter_neg(to_array(sport)), this.port), dports_pos: map(filter_pos(to_array(dport)), this.port), dports_neg: map(filter_neg(to_array(dport)), this.port), raddr: raddrs ? raddrs[0] : null, rport: rport, chain: snat.src?.zone ? `srcnat_${snat.src.zone.name}` : "srcnat" }; push(this.state.redirects ||= [], n); }; for (let proto in snat.proto) { let sip, dip, rip, sport, dport, rport; let family = snat.family; sip = subnets_split_af(snat.src_ip); dip = subnets_split_af(snat.dest_ip); rip = subnets_split_af(snat.snat_ip); switch (proto.name) { case "tcp": case "udp": sport = snat.src_port; dport = snat.dest_port; rport = snat.snat_port; break; } if (length(rip[0]) > 1 || length(rip[1]) > 1) this.warn_section(data, "specifies multiple rewrite addresses, using only first one"); family = infer_family(family, [ sip, "source IP", dip, "destination IP", rip, "rewrite IP", snat.src?.zone, "source zone" ]); if (type(family) == "string") { this.warn_section(data, `${family}, skipping`); continue; } if (snat.src?.zone) snat.src.zone.dflags.snat = true; /* if no family was configured, infer target family from IP addresses */ if (family === null) { if ((length(sip[0]) || length(dip[0]) || length(rip[0])) && !length(sip[1]) && !length(dip[1]) && !length(rip[1])) family = 4; else if ((length(sip[1]) || length(dip[1]) || length(rip[1])) && !length(sip[0]) && !length(dip[0]) && !length(rip[0])) family = 6; else family = 4; /* default to IPv4 only for backwards compatibility, unless an explict family any was configured */ } /* check if there's no AF specific bits, in this case we can do an AF agnostic rule */ if (!family && !length(sip[0]) && !length(sip[1]) && !length(dip[0]) && !length(dip[1]) && !length(rip[0]) && !length(rip[1])) { add_rule(0, proto, [], [], null, sport, dport, rport, snat); } /* we need to emit one or two AF specific rules */ else { if (family == 0 || family == 4) for (let saddr in subnets_group_by_masking(sip[0])) for (let daddr in subnets_group_by_masking(dip[0])) add_rule(4, proto, saddr, daddr, rip[0], sport, dport, rport, snat); if (family == 0 || family == 6) for (let saddr in subnets_group_by_masking(sip[1])) for (let daddr in subnets_group_by_masking(dip[1])) add_rule(6, proto, saddr, daddr, rip[1], sport, dport, rport, snat); } } }, parse_include: function(data) { let inc = this.parse_options(data, { enabled: [ "bool", "1" ], path: [ "string", null, REQUIRED ], type: [ "includetype", "script" ], fw4_compatible: [ "bool", data.path != "/etc/firewall.user" ], family: [ "family", null, UNSUPPORTED ], reload: [ "bool", null, UNSUPPORTED ], position: [ "includeposition" ], chain: [ "identifier" ] }); if (!inc.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (inc.type == "script" && !inc.fw4_compatible) { this.warn_section(data, "is not marked as compatible with fw4, ignoring section"); this.warn_section(data, "requires 'option fw4_compatible 1' to be considered compatible"); return; } for (let opt in [ "table", "chain", "position" ]) { if (inc.type != "nftables" && inc[opt]) { this.warn_section(data, `must not specify '${opt}' for non-nftables includes, ignoring section`); return; } } switch (inc.position ??= 'table-append') { case 'ruleset-prepend': case 'ruleset-append': case 'table-prepend': case 'table-append': if (inc.chain) this.warn_section(data, `specifies 'chain' which has no effect for position ${inc.position}`); delete inc.chain; break; case 'chain-prepend': case 'chain-append': if (!inc.chain) { this.warn_section(data, `must specify 'chain' for position ${inc.position}, ignoring section`); return; } break; } let path = fs.readlink(inc.path) ?? inc.path; if (!fs.access(path)) { this.warn_section(data, `specifies unreachable path '${path}', ignoring section`); return; } if (!data['.name']) this.warn(`Automatically including '${path}'`); push(this.state.includes ||= [], { ...inc, path }); }, parse_ipset: function(data) { let ipset = this.parse_options(data, { enabled: [ "bool", "1" ], reload_set: [ "bool" ], counters: [ "bool" ], comment: [ "string" ], name: [ "identifier", null, REQUIRED ], family: [ "family", "4" ], storage: [ "string", null, UNSUPPORTED ], match: [ "ipsettype", null, PARSE_LIST ], iprange: [ "string", null, UNSUPPORTED ], portrange: [ "string", null, UNSUPPORTED ], netmask: [ "int", null, UNSUPPORTED ], maxelem: [ "int" ], hashsize: [ "int", null, UNSUPPORTED ], timeout: [ "int", "-1" ], external: [ "string", null, UNSUPPORTED ], entry: [ "string", null, PARSE_LIST ], loadfile: [ "string" ] }); if (ipset === false) { this.warn_section(data, "skipped due to invalid options"); return; } else if (!ipset.enabled) { this.warn_section(data, "is disabled, ignoring section"); return; } if (!length(ipset.match)) { this.warn_section(data, "has no datatypes assigned"); return; } let dirs = map(ipset.match, m => m[0]), types = map(ipset.match, m => m[1]), interval = false; if (("ip" in types || "net" in types) && ipset.family == 0) { this.warn_section(data, "must not specify family 'any' when matching type 'ip' or 'net'"); return; } if ("set" in types) { this.warn_section(data, "match type 'set' is not supported"); return; } if ("net" in types) { if (this.kernel < 0x05060000) { this.warn_section(data, "match type 'net' requires kernel 5.6 or later"); return; } interval = true; } let s = { ...ipset, fw4types: types, types: map(types, (t) => { switch (t) { case 'ip': case 'net': return (ipset.family == 4) ? 'ipv4_addr' : 'ipv6_addr'; case 'mac': return 'ether_addr'; case 'port': return 'inet_service'; } }), directions: dirs, interval: interval }; if (s.interval) push(s.flags ??= [], 'interval'); if (s.timeout >= 0) push(s.flags ??= [], 'timeout'); s.entries = filter(map(ipset.entry, (e) => { let v = this.parse_ipsetentry(e, s); if (!v) this.warn_section(data, `ignoring invalid ipset entry '${e}'`); return v; }), (e) => (e != null)); push(this.state.ipsets ||= [], s); } }; 07070100EA5781000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001600000000usr/share/ucode/utils07070100EA5782000081ED00000000000000000000000169F91E1500002941000000080000000100000000000000000000002200000000usr/share/ucode/utils/argparse.uc//------------------------------------------------------------------------------ // argparse.uc - Argument Parser for ucode // Copyright (c) 2024-2025 Eric Fahlgren // SPDX-License-Identifier: GPL-2.0-only // vim: set noexpandtab softtabstop=8 shiftwidth=8 syntax=javascript: //------------------------------------------------------------------------------ // All uses of 'assert' in the argparse module indicate programming errors, // and never user input errors. If you define an argument incorrectly, // an assertion will be raised, whereas if a user enters an incorrect // command line, then 'usage' or 'usage_short' is called. // // To dump the list of actions, try this: // $ ucode -p 'import { ArgActions } from "utils.argparse"; keys(ArgActions);' const VERSION = "2026.04.09~5d6760b5-r1"; import { cursor } from 'uci'; import { basename, dirname, realpath } from 'fs'; const isnan = (x) => x != x; export const ArgActions = { // Static class of standard actions for arguments. // All functions have the prototype: // fn(self, params) // where // self = an ArgParser object // params = object with optional parameters, typically, but not restricted // to: // name = option name // value = option value // msg = any associated output message store: function(self, params) { // We don't flag multiple stores, last one wins. assert(params.name, "'store' action requires an option name"); assert(params.value, "'store' action requires a value"); self.options[params.name] = params.value; }, storex: function(self, params) { // Exclusive version of store, multiple stores generates an error. if (self.options[params.name]) { let p = this.long || this.short; this.usage_short(self, {exit: 1, prefix: `ERROR: '${p}' may only be used once per invocation:\n ${this.help}`}); } this.store(self, params); }, store_int: function(self, params) { assert(params.name, "'store_int' action requires an option name"); assert(params.value, "'store_int' action requires a value"); let value = int(params.value); let error = null; if (isnan(value)) error = `invalid integer '${params.value}'`; else if ("lower" in this && value < this.lower) error = `${value} below lower bound ${this.lower}`; else if ("upper" in this && value > this.upper) error = `${value} above upper bound ${this.upper}`; if (error) this.usage_short(self, {exit: 1, prefix: `ERROR: ${error}`}); self.options[params.name] = value; }, file: function(self, params) { assert(params.name, "'file' action requires an option name"); assert(params.value, "'file' action requires a value"); if (params.value) { let dir = realpath(dirname(params.value)); if (! dir) { let msg = `'${params.name}' value '${params.value}' must contain a valid directory path.`; this.usage_short(self, {exit: 1, prefix: `ERROR: ${msg}`}); } let file = dir + "/" + basename(params.value); self.options[params.name] = file; } }, enum: function(self, params) { assert(params.name, "'enum' action requires an option name"); assert(params.value, "'enum' action requires a value"); assert(this.one_of, "'enum' requires a 'one_of' list of values"); if (! (params.value in this.one_of)) { let msg = `'${params.name}' must be one of ${join(", ", this.one_of)}, not '${params.value}'`; this.usage_short(self, {exit: 1, prefix: `ERROR: ${msg}`}); } self.options[params.name] = params.value; }, set: function(self, params) { assert(params.name, "'set' action requires an option name"); assert(type(self.options[params.name]) == "bool", `missing default value for '${params.name}'?`); let value = exists(params, "value") ? params.value : true; self.options[params.name] = value in [true, "true", 1, "1", "yes", "on"]; }, inc: function(self, params) { assert(params.name, "'inc' action requires an option name"); assert(type(self.options[params.name]) == "int", `missing default value for '${params.name}'?`); let value = exists(params, "value") ? int(params.value) : (self.options[params.name] + 1); self.options[params.name] = value; }, dec: function(self, params) { assert(params.name, "'dec' action requires an option name"); assert(type(self.options[params.name]) == "int", `missing default value for '${params.name}'?`); let value = exists(params, "value") ? int(params.value) : (self.options[params.name] - 1); self.options[params.name] = value; }, version: function(self, params) { self.show_version(); }, usage_short: function(self, params) { // Produce a short usage message. 'params' may contain 'prefix' // or 'suffix'. let shorts = []; for (let arg in self) { if (! arg.name || ! arg.help) continue; if ("position" in arg) { push(shorts, uc(arg.name)); } else { let name = arg.short || arg.long; // deal with "nargs" ... let v = arg.nargs > 0 ? ` ${uc(arg.name)}` : ""; push(shorts, `[${name}${v}]`); } } if ("prefix" in params) printf("%s\n", params.prefix); printf(`Usage: ${self.program_string} %s\n`, join(" ", shorts)); if ("suffix" in params) printf("%s\n", params.suffix); if ("exit" in params) exit(params.exit); }, usage: function(self, params) { self.show_version(); // params: optional {msg} if (params?.msg) printf("\n%s\n", params.msg); if (self.prologue) print(self.prologue); this.usage_short(self, {prefix: ""}); for (let arg in self) { if (! arg.help) continue; // Explicitly ignore items without help. if ("position" in arg) { printf("\n %s - %s, must be one of:\n", uc(arg.name), arg.help); for (let n,v in arg.one_of) { if (v.help) { printf(" %-8s - %s\n", n, v.help); } } printf("\n"); } else { let out = ""; if (arg.short) out += arg.short; if (arg.long) { if (length(out)) out += "/"; out += arg.long; } if (arg.nargs > 0) out += " " + uc(arg.name); printf(" %-20s - %s\n", out, arg.help); } } if (self.epilogue) print(self.epilogue); if ("exit" in params) exit(params.exit); }, }; export const ArgParser = { // Singleton class for a program's command line argument parsing. program_string: null, // User-defined name of program. version_string: null, // User-defined version string. prologue: null, // Text to put before argument list in usage. epilogue: null, // Text to put after argument list in usage. options: null, // Collected results from parsing. has_required: false, // Did the user specify any required arguments? show_version: function() { printf("%s\n", this.version_string ?? "no version string set"); }, set_prog_info: function(ver, prog) { // Allow user to set the version string, and optionally the // program string. proto(this).version_string = ver; proto(this).program_string = prog ?? split(sourcepath(1), "/")[-1]; }, set_bookends: function(prologue, epilogue) { proto(this).prologue = prologue; proto(this).epilogue = epilogue; }, init: function() { // Build initial options table. // Could use a bunch of error checking added to verify // non-duplicate short and long, etc. proto(this).options = {}; // Build the result cache, populate with defaults. for (let i = 0, arg = this[i]; i < length(this); i++, arg = this[i]) { assert(arg.short || arg.long || "position" in arg, `arg definition must contain at least one of 'short', 'long' or 'position'\n ${arg}`); arg = this[i] = proto(arg, ArgActions); // Cast each arg to actions type. if (arg.name) { this.options[arg.name] = "default" in arg ? arg.default : null; } if (type(arg.action) == "string") { // Look up our canned actions. assert(arg.action in ArgActions, `action '${arg.action}' is not defined`); arg.action = ArgActions[arg.action]; } if ("position" in arg) { // Positional arguments are required. proto(this).has_required = true; } } }, get_arg: function(arg, position) { for (let opt in this) { if (position == opt.position) { if (arg in opt.one_of) return opt; ArgActions.usage_short(this, {exit: 1, prefix: `ERROR: '${arg}' is not valid here, expected ${uc(opt.name)}`}); } if (arg in [opt.short, opt.long]) { return opt; } } return null; }, get_by_name: function(name) { for (let opt in this) { if (opt.name == name) return opt; } return null; }, add_config: function(uci_section) { let uci = cursor(); for (let file, section in uci_section) { let cfg = uci.get_all(file, section); for (let name, value in cfg) { let opt = this.get_by_name(name); if (opt) { opt.action(this, {name: name, value: value}); } } } }, parse: function(argv, uci_section) { // Parse the argument vector. If no value for 'argv' is // supplied, then use global ARGV. // // uci_section is an object with file and section names to // be used to override default values. argv ??= ARGV; this.init(); if (uci_section) { this.add_config(uci_section); } if (this.has_required && length(argv) == 0) { ArgActions.usage_short(this, {exit: 1, suffix: "Try '-h' for full help."}); } let iarg = 0; let narg = length(argv); while (iarg < narg) { let arg = argv[iarg]; let opt = this.get_arg(arg, iarg); iarg++; if (! opt) { ArgActions.usage(this, {exit: 1, msg: `ERROR: '${arg}' is not a valid command or option`}); } let action_args = {}; if ("name" in opt) { action_args.name = opt.name; } if ("position" in opt) { action_args.value = arg; } if ("nargs" in opt && opt.nargs > 0) { if (opt.nargs > narg-iarg) { ArgActions.usage(this, {exit: 1, msg: `ERROR: '${arg}' requires ${opt.nargs} values`}); } if (opt.nargs == 1) { action_args.value = argv[iarg]; } else { action_args.value = slice(argv, iarg, iarg+opt.nargs); } iarg += opt.nargs; } opt.action(this, action_args); if ("auto_exit" in opt) { // The auto_exit parameter value is the exit status code. exit(opt.auto_exit); } } return this.options; }, }; // argparse module provides a few canned option definitions. export let DEFAULT_HELP = { short: "-h", long: "--help", action: "usage", auto_exit: 1, help: "Show this message and quit." }; export let DEFAULT_VERSION = { long: "--version", action: "version", auto_exit: 0, help: "Show the program version and terminate." }; 07070100EA557B000041ED00000000000000000000000369F91E1500000000000000080000000100000000000000000000001400000000usr/share/firewall407070100EA557E000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001E00000000usr/share/firewall4/templates07070100EA5584000081A400000000000000000000000169F91E1500000168000000080000000100000000000000000000002B00000000usr/share/firewall4/templates/zone-jump.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress: (direction in ["output", "srcnat"]), rule }) -%} jump {{ direction }}_{{ zone.name }} comment "!fw4: Handle {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} {{ direction }} {{ (direction == 'helper') ? "assignment" : "traffic" }}" 07070100EA5581000081A400000000000000000000000169F91E15000014D3000000080000000100000000000000000000002600000000usr/share/firewall4/templates/rule.uc{%+ if (rule.family && !rule.has_addrs): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (!rule.proto.any && !rule.has_ports && !rule.icmp_types && !rule.icmp_codes): -%} meta l4proto {{ fw4.l4proto(rule.family, rule.proto) }} {%+ endif -%} {%+ if (rule.iifnames): -%} iifname {{ fw4.set(rule.iifnames) }} {%+ endif -%} {%+ if (rule.oifnames): -%} oifname {{ fw4.set(rule.oifnames) }} {%+ endif -%} {%+ if (rule.saddrs_pos): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(rule.saddrs_pos) }} {%+ endif -%} {%+ if (rule.saddrs_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.saddrs_neg) }} {%+ endif -%} {%+ for (let a in rule.saddrs_masked): -%} {{ fw4.ipproto(rule.family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (rule.daddrs_pos): -%} {{ fw4.ipproto(rule.family) }} daddr {{ fw4.set(rule.daddrs_pos) }} {%+ endif -%} {%+ if (rule.daddrs_neg): -%} {{ fw4.ipproto(rule.family) }} daddr != {{ fw4.set(rule.daddrs_neg) }} {%+ endif -%} {%+ for (let a in rule.daddrs_masked): -%} {{ fw4.ipproto(rule.family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (rule.sports_pos): -%} {{ rule.proto.name }} sport {{ fw4.set(rule.sports_pos) }} {%+ endif -%} {%+ if (rule.sports_neg): -%} {{ rule.proto.name }} sport != {{ fw4.set(rule.sports_neg) }} {%+ endif -%} {%+ if (rule.dports_pos): -%} {{ rule.proto.name }} dport {{ fw4.set(rule.dports_pos) }} {%+ endif -%} {%+ if (rule.dports_neg): -%} {{ rule.proto.name }} dport != {{ fw4.set(rule.dports_neg) }} {%+ endif -%} {%+ if (rule.smacs_pos): -%} ether saddr {{ fw4.set(rule.smacs_pos) }} {%+ endif -%} {%+ if (rule.smacs_neg): -%} ether saddr != {{ fw4.set(rule.smacs_neg) }} {%+ endif -%} {%+ if (rule.icmp_types): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type {{ fw4.set(rule.icmp_types) }} {%+ endif -%} {%+ if (rule.icmp_codes): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type . {{ (rule.family == 4) ? "icmp" : "icmpv6" }} code {{ fw4.set(rule.icmp_codes, true) }} {%+ endif -%} {%+ if (rule.helper): -%} ct helper{% if (rule.helper.invert): %} !={% endif %} {{ fw4.quote(rule.helper.name, true) }} {%+ endif -%} {%+ if (rule.limit): -%} limit rate {{ rule.limit.rate }}/{{ rule.limit.unit }} {%- if (rule.limit_burst): %} burst {{ rule.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (rule.start_date && rule.stop_date): -%} meta time {{ fw4.datestamp(rule.start_date) }}-{{ fw4.datestamp(rule.stop_date) }} {%+ elif (rule.start_date): -%} meta time >= {{ fw4.datestamp(rule.start_date) }} {%+ elif (rule.stop_date): -%} meta time <= {{ fw4.datestamp(rule.stop_date) }} {%+ endif -%} {%+ if (rule.start_time && rule.stop_time): -%} meta hour {{ fw4.time(rule.start_time) }}-{{ fw4.time(rule.stop_time) }} {%+ elif (rule.start_time): -%} meta hour >= {{ fw4.time(rule.start_time) }} {%+ elif (rule.stop_time): -%} meta hour <= {{ fw4.time(rule.stop_time) }} {%+ endif -%} {%+ if (rule.weekdays): -%} meta day{% if (rule.weekdays.invert): %} !={% endif %} {{ fw4.set(rule.weekdays.days) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(rule.mark.mask) }} {{ rule.mark.invert ? '!=' : '==' }} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (rule.mark.invert): %} !={% endif %} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.dscp): -%} {{ fw4.ipproto(rule.family) }} dscp{% if (rule.dscp.invert): %} !={% endif %} {{ fw4.hex(rule.dscp.dscp) }} {%+ endif -%} {%+ if (rule.ipset): -%} {{ fw4.concat(rule.ipset.fields) }}{{ rule.ipset.invert ? ' !=' : '' }} @{{ rule.ipset.name }} {%+ endif -%} {%+ if (rule.log && rule.log_limit): -%} limit rate {{ rule.log_limit.rate }}/{{ rule.log_limit.unit }} log prefix {{ fw4.quote(rule.log, true) }} {%+ include("rule.uc", { fw4, zone, rule: { ...rule, log: 0 } }) %} {%+ elif (rule.log && zone?.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix {{ fw4.quote(rule.log, true) }} {%+ include("rule.uc", { fw4, zone, rule: { ...rule, log: 0 } }) %} {%+ else -%} {%+ if (rule.counter): -%} counter {%+ endif -%} {%+ if (rule.log): -%} log prefix {{ fw4.quote(rule.log, true) }} {%+ endif -%} {%+ if (rule.target == "mark"): -%} meta mark set {{ (rule.set_xmark.mask == 0xFFFFFFFF) ? fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mark == 0) ? `mark and ${fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF)}` : (rule.set_xmark.mark == rule.set_xmark.mask) ? `mark or ${fw4.hex(rule.set_xmark.mark)}` : (rule.set_xmark.mask == 0) ? `mark xor ${fw4.hex(rule.set_xmark.mark)}` : `mark and ${fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF)} xor ${fw4.hex(rule.set_xmark.mark)}` }} {%+ elif (rule.target == "dscp"): -%} {{ fw4.ipproto(rule.family) }} dscp set {{ fw4.hex(rule.set_dscp.dscp) }} {%+ elif (rule.target == "notrack"): -%} notrack {%+ elif (rule.target == "helper"): -%} ct helper set {{ fw4.quote(rule.set_helper.name, true) }} {%+ elif (rule.jump_chain): -%} jump {{ rule.jump_chain }} {%+ elif (rule.target): -%} {{ rule.target }} {%+ endif -%} comment {{ fw4.quote(`!fw4: ${rule.name}`, true) }} {%+ endif -%} 07070100EA5582000081A400000000000000000000000169F91E1500003ABD000000080000000100000000000000000000002900000000usr/share/firewall4/templates/ruleset.uc{% let flowtable_devices = fw4.resolve_offload_devices(); let available_helpers = filter(fw4.helpers(), h => h.available); let defined_ipsets = fw4.ipsets(); let zones_with_limits = filter(fw4.zones(), z => z.log_limit); -%} table inet fw4 flush table inet fw4 {% if (fw4.check_flowtable()): %} delete flowtable inet fw4 ft {% endif %} {% fw4.includes('ruleset-prepend') %} table inet fw4 { {% if (length(flowtable_devices) > 0): %} # # Flowtable # flowtable ft { hook ingress priority 0; devices = {{ fw4.set(flowtable_devices, true) }}; counter; {% if (fw4.default_option("flow_offloading_hw")): %} flags offload; {% endif %} } {% endif %} {% if (length(available_helpers)): %} # # CT helper definitions # {% for (let helper in available_helpers): %} {% for (let proto in helper.proto): %} ct helper {{ helper.name }} { type {{ fw4.quote(helper.name, true) }} protocol {{ proto.name }}; } {% endfor %} {% endfor %} {% endif %} {% if (length(defined_ipsets)): %} # # Set definitions # {% for (let set in defined_ipsets): %} set {{ set.name }} { {% if (set.comment): %} comment {{ fw4.quote(set.comment, true) }} {% endif %} type {{ fw4.concat(set.types) }} {% if (set.maxelem > 0): %} size {{ set.maxelem }} {% endif %} {% if (set.timeout > 0): %} timeout {{ set.timeout }}s {% endif %} {% if (set.interval): %} auto-merge {% endif %} {% if (set.flags): %} flags {{ join(',', set.flags) }} {% endif %} {% fw4.print_setentries(set) %} } {% endfor %} {% endif %} # # Defines # {% for (let zone in fw4.zones()): %} define {{ replace(zone.name, /^[0-9]/, '_$&') }}_devices = {{ fw4.set(zone.match_devices, true) }} define {{ replace(zone.name, /^[0-9]/, '_$&') }}_subnets = {{ fw4.set(zone.match_subnets, true) }} {% endfor %} {% if (length(zones_with_limits)): %} # # Limits # {% for (let zone in zones_with_limits): %} limit {{ zone.name }}.log_limit { comment "{{ zone.name }} log limit" rate {{ zone.log_limit.rate }}/{{ zone.log_limit.unit }} } {% endfor %} {% endif %} # # User includes # include "/etc/nftables.d/*.nft" {% fw4.includes('table-prepend') %} # # Filter rules # chain input { type filter hook input priority filter; policy {{ fw4.input_policy(true) }}; iif "lo" accept comment "!fw4: Accept traffic from loopback" {% fw4.includes('chain-prepend', 'input') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle inbound flows" {% if (fw4.default_option("synflood_protect") && fw4.default_option("synflood_rate")): %} tcp flags & (fin | syn | rst | ack) == syn jump syn_flood comment "!fw4: Rate limit TCP syn packets" {% endif %} {% for (let rule in fw4.rules("input")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "input" }) %} {% endfor; endfor %} {% if (fw4.input_policy() == "reject"): %} jump handle_reject {% endif %} {% fw4.includes('chain-append', 'input') %} } chain forward { type filter hook forward priority filter; policy {{ fw4.forward_policy(true) }}; {% if (length(flowtable_devices) > 0): %} meta l4proto { tcp, udp } flow offload @ft; {% endif %} {% fw4.includes('chain-prepend', 'forward') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle forwarded flows" {% for (let rule in fw4.rules("forward")): %} {%+ include("rule.uc", { fw4, zone: (rule.src?.zone?.log_limit ? rule.src.zone : rule.dest?.zone), rule }) %} {% endfor %} {% for (let zone in fw4.zones()): for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "forward" }) %} {% endfor; endfor %} {% fw4.includes('chain-append', 'forward') %} {% if (fw4.forward_policy() == "reject"): %} jump handle_reject {% endif %} } chain output { type filter hook output priority filter; policy {{ fw4.output_policy(true) }}; oif "lo" accept comment "!fw4: Accept traffic towards loopback" {% fw4.includes('chain-prepend', 'output') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle outbound flows" {% for (let rule in fw4.rules("output")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% for (let rule in zone.match_rules): %} {% if (zone.dflags.helper): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, true); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, true); %} {% if (devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "helper" }) %} {% endif %} {% endif %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "output" }) %} {% endfor %} {% endfor %} {% fw4.includes('chain-append', 'output') %} {% if (fw4.output_policy() == "reject"): %} jump handle_reject {% endif %} } chain prerouting { type filter hook prerouting priority filter; policy accept; {% for (let zone in fw4.zones()): %} {% if (zone.dflags.helper): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, false); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, false); %} {% if (rule.devices_neg || rule.subnets_neg || devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "helper" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} } chain handle_reject { meta l4proto tcp reject with {{ (fw4.default_option("tcp_reject_code") != "tcp-reset") ? `icmpx type ${fw4.default_option("tcp_reject_code")}` : "tcp reset" }} comment "!fw4: Reject TCP traffic" reject with {{ (fw4.default_option("any_reject_code") != "tcp-reset") ? `icmpx type ${fw4.default_option("any_reject_code")}` : "tcp reset" }} comment "!fw4: Reject any other traffic" } {% if (fw4.default_option("synflood_protect") && fw4.default_option("synflood_rate")): let r = fw4.default_option("synflood_rate"); let b = fw4.default_option("synflood_burst"); %} chain syn_flood { limit rate {{ r.rate }}/{{ r.unit }} {%- if (b): %} burst {{ b }} packets{% endif %} return comment "!fw4: Accept SYN packets below rate-limit" drop comment "!fw4: Drop excess packets" } {% endif %} {% for (let zone in fw4.zones()): %} chain input_{{ zone.name }} { {% fw4.includes('chain-prepend', `input_${zone.name}`) %} {% for (let rule in fw4.rules(`input_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% if (zone.dflags.dnat): %} ct status dnat accept comment "!fw4: Accept port redirections" {% endif %} {% fw4.includes('chain-append', `input_${zone.name}`) %} jump {{ zone.input }}_from_{{ zone.name }} } chain output_{{ zone.name }} { {% fw4.includes('chain-prepend', `output_${zone.name}`) %} {% for (let rule in fw4.rules(`output_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% fw4.includes('chain-append', `output_${zone.name}`) %} jump {{ zone.output }}_to_{{ zone.name }} } chain forward_{{ zone.name }} { {% fw4.includes('chain-prepend', `forward_${zone.name}`) %} {% for (let rule in fw4.rules(`forward_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} {% if (zone.dflags.dnat): %} ct status dnat accept comment "!fw4: Accept port forwards" {% endif %} {% fw4.includes('chain-append', `forward_${zone.name}`) %} jump {{ zone.forward }}_to_{{ zone.name }} {% if (fw4.forward_policy() != "accept" && (zone.log & 1)): %} {%+ if (zone.log_limit): %}limit name "{{ zone.name }}.log_limit" {%+ endif -%} log prefix "{{ fw4.forward_policy() }} {{ zone.name }} forward: " {% endif %} } {% if (zone.dflags.helper): %} chain helper_{{ zone.name }} { {% for (let rule in fw4.rules(`helper_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} } {% endif %} {% for (let verdict in ["accept", "reject", "drop"]): %} {% if (zone.sflags[verdict]): %} chain {{ verdict }}_from_{{ zone.name }} { {% for (let rule in zone.match_rules): %} {%+ include("zone-verdict.uc", { fw4, zone, rule, egress: false, verdict }) %} {% endfor %} } {% endif %} {% if (zone.dflags[verdict]): %} chain {{ verdict }}_to_{{ zone.name }} { {% for (let rule in zone.match_rules): %} {% if (!fw4.default_option("drop_invalid") && verdict == "accept" && (zone.masq || zone.masq6) && !zone.masq_allow_invalid): %} {%+ include("zone-drop-invalid.uc", { fw4, zone, rule }) %} {% endif %} {%+ include("zone-verdict.uc", { fw4, zone, rule, egress: true, verdict }) %} {% endfor %} } {% endif %} {% endfor %} {% endfor %} # # NAT rules # chain dstnat { type nat hook prerouting priority dstnat; policy accept; {% fw4.includes('chain-prepend', 'dstnat') %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags.dnat): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "dstnat" }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'dstnat') %} } chain srcnat { type nat hook postrouting priority srcnat; policy accept; {% fw4.includes('chain-prepend', 'srcnat') %} {% for (let redirect in fw4.redirects("srcnat")): %} {%+ include("redirect.uc", { fw4, zone: null, redirect }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags.snat): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-jump.uc", { fw4, zone, rule, direction: "srcnat" }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'srcnat') %} } {% for (let zone in fw4.zones()): %} {% if (zone.dflags.dnat): %} chain dstnat_{{ zone.name }} { {% fw4.includes('chain-prepend', `dstnat_${zone.name}`) %} {% for (let redirect in fw4.redirects(`dstnat_${zone.name}`)): %} {%+ include("redirect.uc", { fw4, zone, redirect }) %} {% endfor %} {% fw4.includes('chain-append', `dstnat_${zone.name}`) %} } {% endif %} {% if (zone.dflags.snat): %} chain srcnat_{{ zone.name }} { {% fw4.includes('chain-prepend', `srcnat_${zone.name}`) %} {% for (let redirect in fw4.redirects(`srcnat_${zone.name}`)): %} {%+ include("redirect.uc", { fw4, zone, redirect }) %} {% endfor %} {% if (zone.masq): %} {% for (let saddrs in zone.masq4_src_subnets): %} {% for (let daddrs in zone.masq4_dest_subnets): %} {%+ include("zone-masq.uc", { fw4, zone, family: 4, saddrs, daddrs }) %} {% endfor %} {% endfor %} {% endif %} {% if (zone.masq6): %} {% for (let saddrs in zone.masq6_src_subnets): %} {% for (let daddrs in zone.masq6_dest_subnets): %} {%+ include("zone-masq.uc", { fw4, zone, family: 6, saddrs, daddrs }) %} {% endfor %} {% endfor %} {% endif %} {% fw4.includes('chain-append', `srcnat_${zone.name}`) %} } {% endif %} {% endfor %} # # Raw rules (notrack) # chain raw_prerouting { type filter hook prerouting priority raw; policy accept; {% for (let zone in fw4.zones()): %} {% if (zone.dflags["notrack"]): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, false); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, false); %} {% if (rule.devices_neg || rule.subnets_neg || devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "notrack" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'raw_prerouting') %} } chain raw_output { type filter hook output priority raw; policy accept; {% fw4.includes('chain-prepend', 'raw_output') %} {% for (let zone in fw4.zones()): %} {% if (zone.dflags["notrack"]): %} {% for (let rule in zone.match_rules): %} {% let devices_pos = fw4.filter_loopback_devs(rule.devices_pos, true); %} {% let subnets_pos = fw4.filter_loopback_addrs(rule.subnets_pos, true); %} {% if (devices_pos || subnets_pos): %} {%+ include("zone-jump.uc", { fw4, zone, rule: { ...rule, devices_pos, subnets_pos }, direction: "notrack" }) %} {% endif %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'raw_output') %} } {% for (let zone in fw4.zones()): %} {% if (zone.dflags.notrack): %} chain notrack_{{ zone.name }} { {% for (let rule in fw4.rules(`notrack_${zone.name}`)): %} {%+ include("rule.uc", { fw4, zone, rule }) %} {% endfor %} } {% endif %} {% endfor %} # # Mangle rules # chain mangle_prerouting { type filter hook prerouting priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_prerouting') %} {% for (let rule in fw4.rules("mangle_prerouting")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_prerouting') %} } chain mangle_postrouting { type filter hook postrouting priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_postrouting') %} {% for (let rule in fw4.rules("mangle_postrouting")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.mtu_fix): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-mssfix.uc", { fw4, zone, rule, egress: true }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'mangle_postrouting') %} } chain mangle_input { type filter hook input priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_input') %} {% for (let rule in fw4.rules("mangle_input")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_input') %} } chain mangle_output { type route hook output priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_output') %} {% for (let rule in fw4.rules("mangle_output")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% fw4.includes('chain-append', 'mangle_output') %} } chain mangle_forward { type filter hook forward priority mangle; policy accept; {% fw4.includes('chain-prepend', 'mangle_forward') %} {% for (let rule in fw4.rules("mangle_forward")): %} {%+ include("rule.uc", { fw4, zone: null, rule }) %} {% endfor %} {% for (let zone in fw4.zones()): %} {% if (zone.mtu_fix): %} {% for (let rule in zone.match_rules): %} {%+ include("zone-mssfix.uc", { fw4, zone, rule, egress: false }) %} {% endfor %} {% endif %} {% endfor %} {% fw4.includes('chain-append', 'mangle_forward') %} } {% fw4.includes('table-append') %} } {% fw4.includes('ruleset-append') %} 07070100EA5580000081A400000000000000000000000169F91E150000125C000000080000000100000000000000000000002A00000000usr/share/firewall4/templates/redirect.uc{%+ if (redirect.family && !redirect.has_addrs): -%} meta nfproto {{ fw4.nfproto(redirect.family) }} {%+ endif -%} {%+ if (!redirect.proto.any && !redirect.has_ports): -%} meta l4proto {{ (redirect.proto.name == 'icmp' && redirect.family == 6) ? 'ipv6-icmp' : redirect.proto.name }} {%+ endif -%} {%+ if (redirect.device): -%} oifname {{ fw4.quote(redirect.device, true) }} {%+ endif -%} {%+ if (redirect.saddrs_pos): -%} {{ fw4.ipproto(redirect.family) }} saddr {{ fw4.set(redirect.saddrs_pos) }} {%+ endif -%} {%+ if (redirect.saddrs_neg): -%} {{ fw4.ipproto(redirect.family) }} saddr != {{ fw4.set(redirect.saddrs_neg) }} {%+ endif -%} {%+ for (let a in redirect.saddrs_masked): -%} {{ fw4.ipproto(redirect.family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (redirect.daddrs_pos): -%} {{ fw4.ipproto(redirect.family) }} daddr {{ fw4.set(redirect.daddrs_pos) }} {%+ endif -%} {%+ if (redirect.daddrs_neg): -%} {{ fw4.ipproto(redirect.family) }} daddr != {{ fw4.set(redirect.daddrs_neg) }} {%+ endif -%} {%+ for (let a in redirect.daddrs_masked): -%} {{ fw4.ipproto(redirect.family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (redirect.sports_pos): -%} {{ redirect.proto.name }} sport {{ fw4.set(redirect.sports_pos) }} {%+ endif -%} {%+ if (redirect.sports_neg): -%} {{ redirect.proto.name }} sport != {{ fw4.set(redirect.sports_neg) }} {%+ endif -%} {%+ if (redirect.dports_pos): -%} {{ redirect.proto.name }} dport {{ fw4.set(redirect.dports_pos) }} {%+ endif -%} {%+ if (redirect.dports_neg): -%} {{ redirect.proto.name }} dport != {{ fw4.set(redirect.dports_neg) }} {%+ endif -%} {%+ if (redirect.smacs_pos): -%} ether saddr {{ fw4.set(redirect.smacs_pos) }} {%+ endif -%} {%+ if (redirect.smacs_neg): -%} ether saddr != {{ fw4.set(redirect.smacs_neg) }} {%+ endif -%} {%+ if (redirect.helper): -%} ct helper{% if (redirect.helper.invert): %} !={% endif %} {{ fw4.quote(redirect.helper.name, true) }} {%+ endif -%} {%+ if (redirect.limit): -%} limit rate {{ redirect.limit.rate }}/{{ redirect.limit.unit }} {%- if (redirect.limit_burst): %} burst {{ redirect.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (redirect.start_date && redirect.stop_date): -%} meta time {{ fw4.datestamp(redirect.start_date) }}-{{ fw4.datestamp(redirect.stop_date) }} {%+ elif (redirect.start_date): -%} meta time >= {{ fw4.datestamp(redirect.start_date) }} {%+ elif (redirect.stop_date): -%} meta time <= {{ fw4.datestamp(redirect.stop_date) }} {%+ endif -%} {%+ if (redirect.start_time && redirect.stop_time): -%} meta hour {{ fw4.time(redirect.start_time) }}-{{ fw4.time(redirect.stop_time) }} {%+ elif (redirect.start_time): -%} meta hour >= {{ fw4.time(redirect.start_time) }} {%+ elif (redirect.stop_time): -%} meta hour <= {{ fw4.time(redirect.stop_time) }} {%+ endif -%} {%+ if (redirect.weekdays): -%} meta day{% if (redirect.weekdays.invert): %} !={% endif %} {{ fw4.set(redirect.weekdays.days) }} {%+ endif -%} {%+ if (redirect.mark && redirect.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(redirect.mark.mask) }} {{ redirect.mark.invert ? '!=' : '==' }} {{ fw4.hex(redirect.mark.mark) }} {%+ endif -%} {%+ if (redirect.mark && redirect.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (redirect.mark.invert): %} !={% endif %} {{ fw4.hex(redirect.mark.mark) }} {%+ endif -%} {%+ if (redirect.ipset): -%} {{ fw4.concat(redirect.ipset.fields) }}{{ redirect.ipset.invert ? ' !=' : '' }} @{{ redirect.ipset.name }} {%+ endif -%} {%+ if (redirect.log && redirect.log_limit): -%} limit rate {{ redirect.log_limit.rate }}/{{ redirect.log_limit.unit }} log prefix {{ fw4.quote(redirect.log, true) }} {%+ include("redirect.uc", { fw4, zone, redirect: { ...redirect, log: 0 } }) %} {%+ elif (redirect.log && zone?.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix {{ fw4.quote(redirect.log, true) }} {%+ include("redirect.uc", { fw4, zone, redirect: { ...redirect, log: 0 } }) %} {%+ else -%} {%+ if (redirect.counter): -%} counter {%+ endif -%} {%+ if (redirect.log): -%} log prefix {{ fw4.quote(redirect.log, true) }} {%+ endif -%} {% if (redirect.target == "redirect"): -%} redirect{% if (redirect.rport): %} to {{ fw4.port(redirect.rport) }}{% endif %} {%- elif (redirect.target == "accept" || redirect.target == "masquerade"): -%} {{ redirect.target }} {%- else -%} {{ redirect.target }} {{ redirect.raddr ? fw4.host(redirect.raddr, redirect.rport != null) : '' }} {%- if (redirect.rport): %}:{{ fw4.port(redirect.rport) }}{% endif %} {% endif %} comment {{ fw4.quote(`!fw4: ${redirect.name}`, true) }} {% endif -%} 07070100EA5585000081A400000000000000000000000169F91E15000003A5000000080000000100000000000000000000002B00000000usr/share/firewall4/templates/zone-masq.ucmeta nfproto {{ fw4.nfproto(family) }} {%+ if (saddrs && saddrs[0]): -%} {{ fw4.ipproto(family) }} saddr {{ fw4.set(map(saddrs[0], fw4.cidr)) }} {%+ endif -%} {%+ if (saddrs && saddrs[1]): -%} {{ fw4.ipproto(family) }} saddr != {{ fw4.set(map(saddrs[1], fw4.cidr)) }} {%+ endif -%} {%+ for (let a in (saddrs ? saddrs[2] : [])): -%} {{ fw4.ipproto(family) }} saddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} {%+ if (daddrs && daddrs[0]): -%} {{ fw4.ipproto(family) }} daddr {{ fw4.set(map(daddrs[0], fw4.cidr)) }} {%+ endif -%} {%+ if (daddrs && daddrs[1]): -%} {{ fw4.ipproto(family) }} daddr != {{ fw4.set(map(daddrs[1], fw4.cidr)) }} {%+ endif -%} {%+ for (let a in (daddrs ? daddrs[2] : [])): -%} {{ fw4.ipproto(family) }} daddr & {{ a.mask }} {{ a.invert ? '!=' : '==' }} {{ a.addr }} {%+ endfor -%} masquerade comment "!fw4: Masquerade {{ fw4.nfproto(family, true) }} {{ zone.name }} traffic" 07070100EA5588000081A400000000000000000000000169F91E1500000360000000080000000100000000000000000000002E00000000usr/share/firewall4/templates/zone-notrack.uc{%+ let devs = fw4.filter_loopback_devs(fw4.devices_pos, output), nets = fw4.filter_loopback_addrs(fw4.subnets_pos, output); if (!((output && (length(devs) || length(nets))) || (!output && (rule.devices_neg || rule.subnets_neg || length(devs) || length(nets))))) return; -%} {%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (length(devs)): -%} iifname {{ fw4.set(devs) }} {%+ endif -%} {%+ if (rule.devices_neg): -%} iifname != {{ fw4.set(rule.devices_neg) }} {%+ endif -%} {%+ if (length(nets)): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(nets) }} {%+ endif -%} {%+ if (rule.subnets_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.subnets_neg) }} {%+ endif -%} jump notrack_{{ zone.name }} comment "!fw4: {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} CT bypass" 07070100EA5589000081A400000000000000000000000169F91E150000038B000000080000000100000000000000000000002E00000000usr/share/firewall4/templates/zone-verdict.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress, rule }) -%} {%+ if (verdict != "accept" && (zone.log & 1) && zone.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix "{{ verdict }} {{ zone.name }} {{ egress ? "out" : "in" }}: " {%+ include("zone-verdict.uc", { fw4, zone: { ...zone, log: 0 }, rule, egress, verdict }) %} {%+ else -%} {%+ if (zone.counter): -%} counter {%+ endif -%} {%+ if (verdict != "accept" && (zone.log & 1)): -%} log prefix "{{ verdict }} {{ zone.name }} {{ egress ? "out" : "in" }}: " {%+ endif -%} {% if (verdict == "reject"): -%} jump handle_reject comment "!fw4: reject {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} traffic" {% else -%} {{ verdict }} comment "!fw4: {{ verdict }} {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} traffic" {% endif -%} {% endif -%} 07070100EA5587000081A400000000000000000000000169F91E1500000194000000080000000100000000000000000000002D00000000usr/share/firewall4/templates/zone-mssfix.uc{%+ if (rule.family): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ include("zone-match.uc", { egress, rule }) -%} tcp flags syn / syn,fin,rst tcp option maxseg size set rt mtu {%+ if (zone.log & 2): -%} log prefix "MSSFIX {{ zone.name }} out: " {%+ endif -%} comment "!fw4: Zone {{ zone.name }} {{ fw4.nfproto(rule.family, true) }} {{ egress ? "egress" : "ingress" }} MTU fixing" 07070100EA5583000081A400000000000000000000000169F91E1500000266000000080000000100000000000000000000003300000000usr/share/firewall4/templates/zone-drop-invalid.uc{%+ if (zone.masq ^ zone.masq6): -%} meta nfproto {{ fw4.nfproto(zone.masq ? 4 : 6) }} {%+ endif -%} {%+ include("zone-match.uc", { egress: true, rule }) -%} ct state invalid {%+ if ((zone.log & 1) && zone.log_limit): -%} limit name "{{ zone.name }}.log_limit" log prefix "drop {{ zone.name }} invalid ct state: " {%+ include("zone-drop-invalid.uc", { fw4, zone: { ...zone, log: 0 }, rule }) %} {%+ else -%} {%+ if (zone.counter): -%} counter {%+ endif -%} {%+ if (zone.log & 1): -%} log prefix "drop {{ zone.name }} invalid ct state: " {%+ endif -%} drop comment "!fw4: Prevent NAT leakage" {%+ endif -%} 07070100EA557F000081A400000000000000000000000169F91E15000010F7000000080000000100000000000000000000002D00000000usr/share/firewall4/templates/mangle-rule.uc{%+ for (let src_devices in rule.src?.zone) } {%+ if (rule.family && !rule.has_addrs): -%} meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%} {%+ if (!rule.proto.any && !rule.has_ports && !rule.icmp_types && !rule.icmp_codes): -%} meta l4proto {{ (rule.proto.name == 'icmp' && rule.family == 6) ? 'ipv6-icmp' : rule.proto.name }} {%+ endif -%} {%+ if (rule.saddrs_pos): -%} {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(rule.saddrs_pos) }} {%+ endif -%} {%+ if (rule.saddrs_neg): -%} {{ fw4.ipproto(rule.family) }} saddr != {{ fw4.set(rule.saddrs_neg) }} {%+ endif -%} {%+ if (rule.daddrs_pos): -%} {{ fw4.ipproto(rule.family) }} daddr {{ fw4.set(rule.daddrs_pos) }} {%+ endif -%} {%+ if (rule.daddrs_neg): -%} {{ fw4.ipproto(rule.family) }} daddr != {{ fw4.set(rule.daddrs_neg) }} {%+ endif -%} {%+ if (rule.sports_pos): -%} {{ rule.proto.name }} sport {{ fw4.set(rule.sports_pos) }} {%+ endif -%} {%+ if (rule.sports_neg): -%} {{ rule.proto.name }} sport != {{ fw4.set(rule.sports_neg) }} {%+ endif -%} {%+ if (rule.dports_pos): -%} {{ rule.proto.name }} dport {{ fw4.set(rule.dports_pos) }} {%+ endif -%} {%+ if (rule.dports_neg): -%} {{ rule.proto.name }} dport != {{ fw4.set(rule.dports_neg) }} {%+ endif -%} {%+ if (rule.smacs_pos): -%} ether saddr {{ fw4.set(rule.smacs_pos) }} {%+ endif -%} {%+ if (rule.smacs_neg): -%} ether saddr != {{ fw4.set(rule.smacs_neg) }} {%+ endif -%} {%+ if (rule.icmp_types): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type {{ fw4.set(rule.icmp_types) }} {%+ endif -%} {%+ if (rule.icmp_codes): -%} {{ (rule.family == 4) ? "icmp" : "icmpv6" }} type . {{ (rule.family == 4) ? "icmp" : "icmpv6" }} code {{ fw4.set(rule.icmp_codes, true) }} {%+ endif -%} {%+ if (rule.helper): -%} ct helper{% if (rule.helper.invert): %} !={% endif %} {{ fw4.quote(rule.helper.name, true) }} {%+ endif -%} {%+ if (rule.limit): -%} limit rate {{ rule.limit.rate }}/{{ rule.limit.unit }} {%- if (rule.limit_burst): %} burst {{ rule.limit_burst }} packets{% endif %} {%+ endif -%} {%+ if (rule.start_date): -%} meta time >= {{ exists(rule.start_date, "hour") ? fw4.datetime(rule.start_date) : fw4.date(rule.start_date) }} {%+ endif -%} {%+ if (rule.stop_date): -%} meta time <= {{ exists(rule.stop_date, "hour") ? fw4.datetime(rule.stop_date) : fw4.date(rule.stop_date) }} {%+ endif -%} {%+ if (rule.start_time): -%} meta hour >= {{ fw4.time(rule.start_time) }} {%+ endif -%} {%+ if (rule.stop_time): -%} meta hour <= {{ fw4.time(rule.stop_time) }} {%+ endif -%} {%+ if (rule.weekdays): -%} meta day{% if (rule.weekdays.invert): %} !={% endif %} {{ fw4.set(rule.weekdays.days) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask < 0xFFFFFFFF): -%} meta mark and {{ fw4.hex(rule.mark.mask) }} {{ rule.mark.invert ? '!=' : '==' }} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.mark && rule.mark.mask == 0xFFFFFFFF): -%} meta mark{% if (rule.mark.invert): %} !={% endif %} {{ fw4.hex(rule.mark.mark) }} {%+ endif -%} {%+ if (rule.dscp): -%} dscp{% if (rule.dscp.invert): %} !={% endif %} {{ fw4.hex(rule.dscp.dscp) }} {%+ endif -%} {%+ if (rule.ipset): -%} {{ fw4.concat(rule.ipset.fields) }}{{ rule.ipset.invert ? ' !=' : '' }} @{{ rule.ipset.name }} {%+ endif -%} {%+ if (rule.counter): -%} counter {%+ endif -%} {%+ if (rule.log): -%} log prefix {{ fw4.quote(rule.log, true) }} {%+ endif -%} {%+ if (rule.target == "mark"): -%} meta mark set {{ (rule.set_xmark.mask == 0xFFFFFFFF) ? fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mark == 0) ? 'mark and ' + fw4.hex(~rule.set_xmark.mask & 0xFFFFFFFF) : (rule.set_xmark.mark == rule.set_xmark.mask) ? 'mark or ' + fw4.hex(rule.set_xmark.mark) : (rule.set_xmark.mask == 0) ? 'mark xor ' + fw4.hex(rule.set_xmark.mark) : 'mark and ' + fw4.hex(~r.set_xmark.mask & 0xFFFFFFFF) + ' xor ' + fw4.hex(r.set_xmark.mark) }} {%+ elif (rule.target == "dscp"): -%} {{ fw4.ipproto(rule.family) }} dscp set {{ fw4.hex(rule.set_dscp.dscp) }} {%+ elif (rule.target == "notrack"): -%} notrack {%+ elif (rule.target == "helper"): -%} ct helper set {{ fw4.quote(rule.set_helper.name, true) }} {%+ elif (rule.jump_chain): -%} jump {{ rule.jump_chain }} {%+ elif (rule.target): -%} {{ rule.target }} {%+ endif -%} comment {{ fw4.quote(`!fw4: ${rule.name}`, true) }} 07070100EA5586000081A400000000000000000000000169F91E1500000358000000080000000100000000000000000000002C00000000usr/share/firewall4/templates/zone-match.uc{%+ if (rule.devices_pos): -%} {{ egress ? "oifname" : "iifname" }} {{ fw4.set(rule.devices_pos) }} {%+ endif -%} {%+ if (rule.devices_neg): -%} {{ egress ? "oifname" : "iifname" }} != {{ fw4.set(rule.devices_neg) }} {%+ endif -%} {%+ for (let wcndev in rule.devices_neg_wildcard): -%} {{ egress ? "oifname" : "iifname" }} != {{ fw4.quote(wcndev) }} {%+ endfor -%} {%+ if (rule.subnets_pos): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} {{ fw4.set(rule.subnets_pos) }} {%+ endif -%} {%+ if (rule.subnets_neg): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} != {{ fw4.set(rule.subnets_neg) }} {%+ endif -%} {%+ for (let subnet in rule.subnets_masked): -%} {{ fw4.ipproto(rule.family) }} {{ egress ? "daddr" : "saddr" }} & {{ subnet.mask }} {{ subnet.invert ? '!=' : '==' }} {{ subnet.addr }} {%+ endfor -%} 07070100EA557D000081A400000000000000000000000169F91E1500000BC8000000080000000100000000000000000000001C00000000usr/share/firewall4/main.uc{% let fw4 = require("fw4"); function read_state() { let state = fw4.read_state(); if (!state) { warn("Unable to read firewall state - do you need to start the firewall?\n"); exit(1); } return state; } function reload_sets() { let state = read_state(), sets = fw4.check_set_types(); for (let set in state.ipsets) { if (!set.loadfile && !length(set.entries)) continue; if (!exists(sets, set.name)) { warn(`Named set '${set.name}' does not exist - do you need to restart the firewall?\n`); continue; } else if (fw4.concat(sets[set.name]) != fw4.concat(set.types)) { warn(`Named set '${set.name}' has a different type - want '${fw4.concat(set.types)}' but is '${fw4.concat(sets[set.name])}' - do you need to restart the firewall?\n`); continue; } let first = true; let printer = (entry) => { if (first) { print(`add element inet fw4 ${set.name} {\n`); first = false; } print(` ${join(" . ", entry)},\n`); }; print(`flush set inet fw4 ${set.name}\n`); map(set.entries, printer); if (set.loadfile) fw4.parse_setfile(set, printer); if (!first) print("}\n\n"); } } function render_ruleset(use_statefile) { fw4.load(use_statefile); include("templates/ruleset.uc", { fw4, type, exists, length, include }); } function lookup_network(net) { let state = read_state(); for (let zone in state.zones) { for (let network in (zone.network || [])) { if (network.device == net) { print(zone.name, "\n"); exit(0); } } } exit(1); } function lookup_device(dev) { let state = read_state(); for (let zone in state.zones) { for (let rule in (zone.match_rules || [])) { if (dev in rule.devices_pos) { print(zone.name, "\n"); exit(0); } } } exit(1); } function lookup_zone(name, dev) { let state = read_state(); for (let zone in state.zones) { if (zone.name == name) { let devices = []; map(zone.match_rules, (r) => push(devices, ...(r.devices_pos || []))); if (dev) { if (dev in devices) { print(dev, "\n"); exit(0); } exit(1); } if (length(devices)) print(join("\n", devices), "\n"); exit(0); } } exit(1); } function run_includes() { let state = read_state(), paths = []; for (let inc in state.includes) { if (inc.type != 'script') continue; let path = replace(inc.path, "'", "'\\''"); let rc = system([ 'sh', '-c', `exec 1000>&-; config() { echo "You cannot use UCI in firewall includes!" >&2; exit 1; }; . '${path}'` ], 30000); if (rc != 0) warn(`Include '${inc.path}' failed with exit code ${rc}\n`); } } switch (getenv("ACTION")) { case "start": return render_ruleset(true); case "print": return render_ruleset(false); case "reload-sets": return reload_sets(); case "network": return lookup_network(getenv("OBJECT")); case "device": return lookup_device(getenv("OBJECT")); case "zone": return lookup_zone(getenv("OBJECT"), getenv("DEVICE")); case "includes": return run_includes(); } 07070100EA557C000081A400000000000000000000000169F91E1500000893000000080000000100000000000000000000001C00000000usr/share/firewall4/helpersconfig helper option name 'amanda' option description 'Amanda backup and archiving proto' option module 'nf_conntrack_amanda' option family 'any' option proto 'udp' option port '10080' config helper option name 'ftp' option description 'FTP passive connection tracking' option module 'nf_conntrack_ftp' option family 'any' option proto 'tcp' option port '21' config helper option name 'RAS' option description 'RAS proto tracking' option module 'nf_conntrack_h323' option family 'any' option proto 'udp' option port '1719' config helper option name 'Q.931' option description 'Q.931 proto tracking' option module 'nf_conntrack_h323' option family 'any' option proto 'tcp' option port '1720' config helper option name 'irc' option description 'IRC DCC connection tracking' option module 'nf_conntrack_irc' option family 'ipv4' option proto 'tcp' option port '6667' config helper option name 'netbios-ns' option description 'NetBIOS name service broadcast tracking' option module 'nf_conntrack_netbios_ns' option family 'ipv4' option proto 'udp' option port '137' config helper option name 'pptp' option description 'PPTP VPN connection tracking' option module 'nf_conntrack_pptp' option family 'ipv4' option proto 'tcp' option port '1723' config helper option name 'sane' option description 'SANE scanner connection tracking' option module 'nf_conntrack_sane' option family 'any' option proto 'tcp' option port '6566' config helper option name 'sip' option description 'SIP VoIP connection tracking' option module 'nf_conntrack_sip' option family 'any' option proto 'udp' option port '5060' config helper option name 'snmp' option description 'SNMP monitoring connection tracking' option module 'nf_conntrack_snmp' option family 'ipv4' option proto 'udp' option port '161' config helper option name 'tftp' option description 'TFTP connection tracking' option module 'nf_conntrack_tftp' option family 'any' option proto 'udp' option port '69' config helper option name 'rtsp' option description 'RTSP connection tracking' option module 'nf_conntrack_rtsp' option family 'ipv4' option proto 'tcp' option port '554' 07070100EA5663000041ED00000000000000000000000369F91E1500000000000000080000000100000000000000000000000F00000000usr/share/luci07070100EA5664000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001600000000usr/share/luci/menu.d07070100EA5665000081A400000000000000000000000169F91E15000009FD000000080000000100000000000000000000002500000000usr/share/luci/menu.d/luci-base.json{ "admin": { "title": "Administration", "order": 10, "action": { "type": "firstchild", "recurse": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ], "login": true } }, "admin/status": { "title": "Status", "order": 10, "action": { "type": "firstchild", "preferred": "overview", "recurse": true } }, "admin/system": { "title": "System", "order": 20, "action": { "type": "firstchild", "preferred": "system", "recurse": true } }, "admin/services": { "title": "Services", "order": 40, "action": { "type": "firstchild", "recurse": true } }, "admin/network": { "title": "Network", "order": 50, "action": { "type": "firstchild", "recurse": true } }, "admin/vpn": { "title": "VPN", "order": 70, "action": { "type": "firstchild", "recurse": true } }, "admin/translations/*": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_translations" }, "auth": {} }, "admin/ubus/*": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_ubus" }, "auth": {} }, "admin/logout": { "title": "Log out", "order": 999, "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_logout" }, "depends": { "acl": [ "luci-base" ] }, "firstchild_ineligible": true }, "admin/uci": { "action": { "type": "firstchild" } }, "admin/uci/revert": { "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_revert", "post": true } }, "admin/uci/apply_rollback": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_apply_rollback", "post": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ] } }, "admin/uci/apply_unchecked": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_apply_unchecked", "post": true }, "auth": { "methods": [ "cookie:sysauth_https", "cookie:sysauth_http" ] } }, "admin/uci/confirm": { "cors": true, "action": { "type": "function", "module": "luci.controller.admin.uci", "function": "action_confirm" }, "auth": {} }, "admin/menu": { "action": { "type": "function", "module": "luci.controller.admin.index", "function": "action_menu" }, "auth": {} } } 07070100EA5711000081A400000000000000000000000169F91E1500000AFF000000080000000100000000000000000000002B00000000usr/share/luci/menu.d/luci-mod-system.json{ "admin/system/system": { "title": "System", "order": 1, "action": { "type": "view", "path": "system/system" }, "depends": { "acl": [ "luci-mod-system-config" ] } }, "admin/system/admin": { "title": "Administration", "order": 2, "action": { "type": "firstchild" }, "depends": { "acl": [ "luci-mod-system-config", "luci-mod-system-ssh" ] } }, "admin/system/admin/password": { "title": "Router Password", "order": 1, "action": { "type": "view", "path": "system/password" }, "depends": { "acl": [ "luci-mod-system-config" ] } }, "admin/system/admin/dropbear": { "title": "SSH Access", "order": 2, "action": { "type": "view", "path": "system/dropbear" }, "depends": { "acl": [ "luci-mod-system-ssh" ], "fs": { "/usr/sbin/dropbear": "executable" } } }, "admin/system/admin/sshkeys": { "title": "SSH-Keys", "order": 3, "action": { "type": "view", "path": "system/sshkeys" }, "depends": { "acl": [ "luci-mod-system-ssh" ], "fs": { "/usr/sbin/dropbear": "executable" } } }, "admin/system/admin/uhttpd": { "title": "HTTP(S) Access", "order": 4, "action": { "type": "view", "path": "system/uhttpd" }, "depends": { "acl": [ "luci-mod-system-uhttpd" ], "fs": { "/usr/sbin/uhttpd": "executable" } } }, "admin/system/admin/repokeys": { "title": "Repo Public Keys", "order": 5, "action": { "type": "view", "path": "system/repokeys" }, "depends": { "acl": [ "luci-mod-system-repokeys" ] } }, "admin/system/startup": { "title": "Startup", "order": 45, "action": { "type": "view", "path": "system/startup" }, "depends": { "acl": [ "luci-mod-system-init" ] } }, "admin/system/crontab": { "title": "Scheduled Tasks", "order": 46, "action": { "type": "view", "path": "system/crontab" }, "depends": { "acl": [ "luci-mod-system-cron" ] } }, "admin/system/mounts": { "title": "Mount Points", "order": 50, "action": { "type": "view", "path": "system/mounts" }, "depends": { "acl": [ "luci-mod-system-mounts" ], "fs": { "/sbin/block": "executable" } } }, "admin/system/leds": { "title": "LED Configuration", "order": 60, "action": { "type": "view", "path": "system/leds" }, "depends": { "acl": [ "luci-mod-system-config" ], "fs": { "/sys/class/leds": "directory" } } }, "admin/system/flash": { "title": "Backup / Flash Firmware", "order": 70, "action": { "type": "view", "path": "system/flash" }, "depends": { "acl": [ "luci-mod-system-flash" ] } }, "admin/system/reboot": { "title": "Reboot", "order": 90, "action": { "type": "view", "path": "system/reboot" }, "depends": { "acl": [ "luci-mod-system-reboot" ] } } } 07070100EA56D8000081A400000000000000000000000169F91E150000074C000000080000000100000000000000000000002C00000000usr/share/luci/menu.d/luci-mod-network.json{ "admin/network/switch": { "title": "Switch", "order": 20, "action": { "type": "view", "path": "network/switch" }, "depends": { "acl": [ "luci-mod-network-config" ], "fs": { "/sbin/swconfig": "executable" }, "uci": { "network": { "@switch": true } } } }, "admin/network/wireless": { "title": "Wireless", "order": 15, "action": { "type": "view", "path": "network/wireless" }, "depends": { "acl": [ "luci-mod-network-config" ], "uci": { "wireless": { "@wifi-device": true } } } }, "admin/network/remote_addr/*": { "action": { "type": "call", "module": "luci.controller.admin.network", "function": "remote_addr" } }, "admin/network/network": { "title": "Interfaces", "order": 10, "action": { "type": "view", "path": "network/interfaces" }, "depends": { "acl": [ "luci-mod-network-config" ] } }, "admin/network/routes": { "title": "Routing", "order": 30, "action": { "type": "view", "path": "network/routes" }, "depends": { "acl": [ "luci-mod-network-config" ] } }, "admin/network/dhcp": { "title": "DHCP", "order": 40, "action": { "type": "view", "path": "network/dhcp" }, "depends": { "acl": [ "luci-mod-network-dhcp" ], "fs": [ { "/usr/sbin/odhcpd": "executable" }, { "/usr/sbin/dnsmasq": "executable" } ], "uci": { "dhcp": true } } }, "admin/network/dns": { "title": "DNS", "order": 45, "action": { "type": "view", "path": "network/dns" }, "depends": { "acl": [ "luci-mod-network-dns" ], "fs": { "/usr/sbin/dnsmasq": "executable" }, "uci": { "dhcp": true } } }, "admin/network/diagnostics": { "title": "Diagnostics", "order": 50, "action": { "type": "view", "path": "network/diagnostics" }, "depends": { "acl": [ "luci-mod-network-diagnostics" ] } } } 07070100EA56C9000081A400000000000000000000000169F91E15000004D9000000080000000100000000000000000000002D00000000usr/share/luci/menu.d/luci-app-firewall.json{ "admin/network/firewall": { "title": "Firewall", "order": 60, "action": { "type": "alias", "path": "admin/network/firewall/zones" }, "depends": { "acl": [ "luci-app-firewall" ], "fs": { "/sbin/fw3": "executable" }, "uci": { "firewall": true } } }, "admin/network/firewall/zones": { "title": "General Settings", "order": 10, "action": { "type": "view", "path": "firewall/zones" } }, "admin/network/firewall/forwards": { "title": "Port Forwards", "order": 20, "action": { "type": "view", "path": "firewall/forwards" } }, "admin/network/firewall/rules": { "title": "Traffic Rules", "order": 30, "action": { "type": "view", "path": "firewall/rules" } }, "admin/network/firewall/snats": { "title": "NAT Rules", "order": 40, "action": { "type": "view", "path": "firewall/snats" } }, "admin/network/firewall/ipsets": { "title": "IP Sets", "order": 45, "action": { "type": "view", "path": "firewall/ipsets" } }, "admin/network/firewall/custom": { "title": "Custom Rules", "order": 50, "action": { "type": "view", "path": "firewall/custom" }, "depends": { "fs": { "/usr/share/fw3/helpers.conf": "file" } } } } 07070100EA56C4000081A400000000000000000000000169F91E15000000CF000000080000000100000000000000000000003400000000usr/share/luci/menu.d/luci-app-package-manager.json{ "admin/system/package-manager": { "title": "Software", "order": 30, "action": { "type": "view", "path": "package-manager" }, "depends": { "acl": [ "luci-app-package-manager" ] } } } 07070100EA575C000081A400000000000000000000000169F91E150000024F000000080000000100000000000000000000003700000000usr/share/luci/menu.d/luci-app-attendedsysupgrade.json{ "admin/system/attendedsysupgrade": { "title": "Attended Sysupgrade", "order": 60, "action": { "type": "firstchild" }, "depends": { "acl": [ "luci-app-attendedsysupgrade" ], "uci": { "attendedsysupgrade": true } } }, "admin/system/attendedsysupgrade/overview": { "title": "Overview", "order": 1, "action": { "type": "view", "path": "attendedsysupgrade/overview" } }, "admin/system/attendedsysupgrade/configuration": { "title": "Configuration", "order": 2, "action": { "type": "view", "path": "attendedsysupgrade/configuration" } } } 07070100EA56EC000081A400000000000000000000000169F91E1500000CFB000000080000000100000000000000000000002B00000000usr/share/luci/menu.d/luci-mod-status.json{ "admin/status/overview": { "title": "Overview", "order": 1, "action": { "type": "template", "path": "admin_status/index" }, "depends": { "acl": [ "luci-mod-status-index" ] } }, "admin/status/routes": { "title": "Routing", "order": 2, "action": { "type": "view", "path": "status/routes" }, "depends": { "acl": [ "luci-mod-status-routes" ], "fs": [ { "/usr/libexec/ip-tiny": "absent", "/usr/libexec/ip-full": "absent" } ] } }, "admin/status/routesj": { "title": "Routing", "order": 2, "action": { "type": "view", "path": "status/routesj" }, "depends": { "acl": [ "luci-mod-status-routes-json" ], "fs": [ { "/usr/libexec/ip-tiny": "executable" }, { "/usr/libexec/ip-full": "executable" } ] } }, "admin/status/iptables": { "title": "Firewall", "order": 3, "action": { "type": "view", "path": "status/iptables" }, "depends": { "acl": [ "luci-mod-status-firewall" ], "fs": [ { "/usr/sbin/nft": "absent", "/usr/sbin/iptables": "executable" }, { "/usr/sbin/nft": "absent", "/usr/sbin/ip6tables": "executable" } ] } }, "admin/status/nftables": { "title": "Firewall", "order": 3, "action": { "type": "view", "path": "status/nftables" }, "depends": { "acl": [ "luci-mod-status-firewall" ], "fs": { "/usr/sbin/nft": "executable" } } }, "admin/status/nftables/iptables": { "action": { "type": "view", "path": "status/iptables" } }, "admin/status/logs": { "title": "System Log", "order": 4, "action": { "type": "alias", "path": "admin/status/logs/syslog" }, "depends": { "acl": [ "luci-mod-status-logs" ] } }, "admin/status/logs/syslog": { "title": "System Log", "order": 1, "action": { "type": "view", "path": "status/syslog" } }, "admin/status/logs/dmesg": { "title": "Kernel Log", "order": 2, "action": { "type": "view", "path": "status/dmesg" } }, "admin/status/processes": { "title": "Processes", "order": 6, "action": { "type": "view", "path": "status/processes" }, "depends": { "acl": [ "luci-mod-status-processes" ] } }, "admin/status/channel_analysis": { "title": "Channel Analysis", "order": 7, "action": { "type": "view", "path": "status/channel_analysis" }, "depends": { "acl": [ "luci-mod-status-channel_analysis" ], "uci": { "wireless": { "@wifi-device": true } } } }, "admin/status/realtime": { "title": "Realtime Graphs", "order": 7, "action": { "type": "alias", "path": "admin/status/realtime/load" }, "depends": { "acl": [ "luci-mod-status-realtime" ] } }, "admin/status/realtime/load": { "title": "Load", "order": 1, "action": { "type": "view", "path": "status/load" } }, "admin/status/realtime/bandwidth": { "title": "Bandwidth", "order": 2, "action": { "type": "view", "path": "status/bandwidth" } }, "admin/status/realtime/wireless": { "title": "Wireless", "order": 3, "action": { "type": "view", "path": "status/wireless" }, "depends": { "uci": { "wireless": { "@wifi-device": true } } } }, "admin/status/realtime/connections": { "title": "Connections", "order": 4, "action": { "type": "view", "path": "status/connections" } } } 07070100EA2BB7000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001300000000usr/share/ucitrack07070100EA56DB000081A400000000000000000000000169F91E1500000048000000080000000100000000000000000000003400000000usr/share/ucitrack/luci-mod-network-interfaces.json{ "config": "network", "init": "network", "affects": [ "dhcp" ] } 07070100EA56DD000081A400000000000000000000000169F91E1500000038000000080000000100000000000000000000003200000000usr/share/ucitrack/luci-mod-network-wireless.json{ "config": "wireless", "affects": [ "network" ] } 07070100EA56DA000081A400000000000000000000000169F91E1500000047000000080000000100000000000000000000003100000000usr/share/ucitrack/luci-mod-network-dnsmasq.json{ "config": "dhcp", "init": "dnsmasq", "affects": [ "odhcpd" ] } 07070100EA5714000081A400000000000000000000000169F91E1500000035000000080000000100000000000000000000002F00000000usr/share/ucitrack/luci-mod-system-mounts.json{ "config": "fstab", "exec": "/sbin/block mount" } 07070100EA56DC000081A400000000000000000000000169F91E150000002B000000080000000100000000000000000000003000000000usr/share/ucitrack/luci-mod-network-odhcpd.json{ "config": "odhcpd", "init": "odhcpd" } 07070100EA5713000081A400000000000000000000000169F91E150000002F000000080000000100000000000000000000003100000000usr/share/ucitrack/luci-mod-system-dropbear.json{ "config": "dropbear", "init": "dropbear" } 07070100EA2641000081A400000000000000000000000169F91E1500000069000000080000000100000000000000000000002A00000000usr/share/ucitrack/luci-app-firewall.json{ "config": "firewall", "init": "firewall", "affects": [ "luci-splash", "qos", "miniupnpd" ] } 07070100EA5715000081A400000000000000000000000169F91E150000007B000000080000000100000000000000000000002F00000000usr/share/ucitrack/luci-mod-system-system.json{ "config": "system", "init": "led", "exec": "/etc/init.d/log reload", "affects": [ "luci_statistics", "dhcp" ] } 07070100EA55BE000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001100000000usr/share/schema07070100EA55C5000081A400000000000000000000000169F91E15000002AD000000080000000100000000000000000000002C00000000usr/share/schema/wireless.wifi-station.json{ "$id": "https://openwrt.org/wifi.station.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi Station Schema", "type": "object", "properties": { "iface": { "description": "List of interfaces this station is associated with", "type": "array", "items": { "type": "string" } }, "mac": { "description": "The station's MAC addresses", "type": "array", "items": { "type": "string" }, "default": ["00:00:00:00:00:00"] }, "key": { "description": "The passphrase that shall be used", "type": "string" }, "vid": { "description": "The VLAN Id used by the station", "type": "string" } } } 07070100EA55C0000081A400000000000000000000000169F91E1500004E0A000000080000000100000000000000000000002B00000000usr/share/schema/wireless.wifi-device.json{ "$id": "https://openwrt.org/wifi.device.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi Device Schema", "type": "object", "properties": { "acs_chan_bias": { "description": "Can be used to increase (or decrease) the likelihood of a specific channel to be selected by the ACS algorithm", "type": "string" }, "acs_exclude_dfs": { "description": "Exclude DFS channels from ACS", "type": "boolean", "default": false }, "airtime_mode": { "description": "Set the airtime policy operating mode", "type": "number", "default": 0, "minimum": 0, "maximum": 3 }, "antenna_gain": { "description": "Reduction in antenna gain from regulatory maximum in dBi", "type": "number", "default": 0 }, "assoc_sa_query_max_timeout": { "description": "Association SA Query maximum timeout", "type": "number" }, "assoc_sa_query_retry_timeout": { "description": "Association SA Query retry timeout", "type": "number" }, "auth_cache": { "type": "alias", "default": "okc" }, "background_radar": { "type": "alias", "default": "enable_background_radar" }, "band": { "description": "The wireless band thatthe radio shall operate on", "type": "string", "enum": [ "2g", "5g", "6g", "60g" ] }, "basic_rate": { "type": "alias", "default": "basic_rates" }, "basic_rates": { "description": "Set the supported basic rates. Each basic_rate is measured in kb/s. This option only has an effect on ap and adhoc wifi-ifaces. ", "type": "array", "items": { "type": "number" } }, "beacon_int": { "description": "Set the beacon interval. This is the time interval between beacon frames, measured in units of 1.024 ms. hostapd permits this to be set between 15 and 65535. This option only has an effect on ap and adhoc wifi-ifaces", "type": "number", "default": 100, "minimum": 15, "maximum": 65535 }, "beacon_rate": { "description": "Beacon frame TX rate configuration", "type": "string" }, "beamformee_antennas": { "description": "Beamformee antenna override", "type": "number", "default": 4 }, "beamformer_antennas": { "description": "Beamformer antenna override", "type": "number", "default": 4 }, "bssid": { "description": "Overrides the MAC address used for the Wi-Fi interface. Warning: if the MAC address specified is a multicast address, this override will fail silently. To avoid this problem, ensure that the mac address specified is a valid unicast mac address", "type": "string" }, "cell_density": { "description": "Configures data rates based on the coverage cell density. Normal configures basic rates to 6, 12, 24 Mbps if legacy_rates is 0, else to 5.5, 11 Mbps. High configures basic rates to 12, 24 Mbps if legacy_rates is 0, else to the 11 Mbps rate. Very High configures 24 Mbps as the basic rate. Supported rates lower than the minimum basic rate are not offered. The basic_rate and supported_rates options overrides this option. 0 = Disabled, 1 = Normal, 2 = High, 3 = Very High", "type": "number", "default": 0, "minimum": 0, "maximum": 3 }, "chanbw": { "description": "Specifies a narrow channel width in MHz, possible values are: 5, 10, 20", "type": "number", "enum": [ 5, 10, 20 ] }, "channel": { "description": "Specifies the wireless channel. “auto” defaults to the lowest available channel, or utilizes the ACS algorithm depending on hardware/driver support", "type": "string" }, "channels": { "type": "alias", "default": "chanlist" }, "channel_list": { "type": "alias", "default": "chanlist" }, "chanlist": { "description": "Use specific channels, when channel is in “auto” mode. This option allows hostapd to select one of the provided channels when a channel should be automatically selected. Channels can be provided as range using hyphen ('-') or individual channels can be specified by space (' ') separated values", "type": "array", "items": { "type": "string" } }, "country": { "type": "alias", "default": "country_code" }, "country3": { "description": "The third octet of the Country String (dot11CountryString)", "type": "string" }, "country_code": { "description": "Specifies the two-letter country code (e.g. EN or DE), affects the available channels and transmission powers", "type": "string" }, "country_ie": { "type": "alias", "default": "ieee80211d" }, "disabled": { "description": "When set to 1, wireless network is disabled", "type": "boolean", "default": false }, "distance": { "description": "Distance between the ap and the furthest client in meters", "type": "number", "default": 0 }, "doth": { "type": "alias", "default": "ieee80211h" }, "dsss_cck_40": { "description": "DSSS/CCK Mode in 40 MHz allowed in Beacon, Measurement Pilot and Probe Response frames", "type": "boolean", "default": true }, "enable_background_radar": { "description": "This feature allows CAC to be run on dedicated radio RF chains", "type": "boolean" }, "frag": { "description": "Fragmentation threshold", "type": "number" }, "greenfield": { "description": "Receive Greenfield - treats pre-80211n traffic as noise", "type": "boolean", "default": false }, "he_bss_color": { "description": "BSS color to be announced", "type": "number", "minimum": 1, "maximum": 128, "default": 128 }, "he_bss_color_enabled": { "description": "Enable BSS color", "type": "boolean", "default": true }, "he_default_pe_duration": { "description": "The duration of PE field in an HE PPDU in us", "type": "number", "default": 4, "enum": [ 4, 8, 12, 16 ] }, "he_mu_beamformer": { "description": "HE multiple user beamformer support", "type": "boolean", "default": true }, "he_mu_edca_ac_be_aci": { "type": "number", "default": 0 }, "he_mu_edca_ac_be_aifsn": { "type": "number", "default": 8 }, "he_mu_edca_ac_be_ecwmax": { "type": "number", "default": 10 }, "he_mu_edca_ac_be_ecwmin": { "type": "number", "default": 9 }, "he_mu_edca_ac_be_timer": { "type": "number", "default": 255 }, "he_mu_edca_ac_bk_aci": { "type": "number", "default": 1 }, "he_mu_edca_ac_bk_aifsn": { "type": "number", "default": 15 }, "he_mu_edca_ac_bk_ecwmax": { "type": "number", "default": 10 }, "he_mu_edca_ac_bk_ecwmin": { "type": "number", "default": 9 }, "he_mu_edca_ac_bk_timer": { "type": "number", "default": 255 }, "he_mu_edca_ac_vi_aci": { "type": "number", "default": 2 }, "he_mu_edca_ac_vi_aifsn": { "type": "number", "default": 5 }, "he_mu_edca_ac_vi_ecwmax": { "type": "number", "default": 7 }, "he_mu_edca_ac_vi_ecwmin": { "type": "number", "default": 5 }, "he_mu_edca_ac_vi_timer": { "type": "number", "default": 255 }, "he_mu_edca_ac_vo_aci": { "type": "number", "default": 3 }, "he_mu_edca_ac_vo_aifsn": { "type": "number", "default": 5 }, "he_mu_edca_ac_vo_ecwmax": { "type": "number", "default": 7 }, "he_mu_edca_ac_vo_ecwmin": { "type": "number", "default": 5 }, "he_mu_edca_ac_vo_timer": { "type": "number", "default": 255 }, "he_mu_edca_qos_info_param_count": { "type": "number", "default": 0 }, "he_mu_edca_qos_info_q_ack": { "type": "number", "default": 0 }, "he_mu_edca_qos_info_queue_request": { "type": "number", "default": 0 }, "he_mu_edca_qos_info_txop_request": { "type": "number", "default": 0 }, "he_oper_centr_freq_seg0_idx": { "description": "", "type": "string" }, "he_oper_chwidth": { "description": "", "type": "string" }, "he_6ghz_reg_pwr_type": { "description": "This config is to set the 6 GHz Access Point type.", "type": "number", "minimum": 0, "maximum": 4, "default": 0 }, "he_rts_threshold": { "description": "Duration of STA transmission", "type": "number", "default": 1023 }, "he_spr_non_srg_obss_pd_max_offset": { "description": "", "type": "number" }, "he_spr_psr_enabled": { "description": "", "type": "boolean", "default": false }, "he_spr_sr_control": { "description": "", "type": "number", "default": 3 }, "he_su_beamformee": { "description": "", "type": "boolean", "default": true }, "he_su_beamformer": { "description": "", "type": "boolean", "default": true }, "he_twt_required": { "description": "", "type": "boolean", "default": false }, "hostapd_options": { "type": "array", "items": { "type": "string" } }, "ht_coex": { "description": "Disable honoring 40 MHz intolerance in coexistence flags of stations", "type": "boolean", "default": false }, "htc_vht": { "description": "STA supports receiving a VHT variant HT Control field", "type": "boolean", "default": true }, "htmode": { "description": "Specifies the high throughput mode", "type": "string", "enum": [ "NOHT", "HT20", "HT40-", "HT40+", "HT40", "VHT20", "VHT40", "VHT80", "VHT160", "HE20", "HE40", "HE80", "HE160", "EHT20", "EHT40", "EHT80", "EHT160", "EHT320" ] }, "hwmode": { "type": "alias", "default": "hw_mode" }, "hw_mode": { "description": "Legacy way, use the band property instead", "type": "string", "enum": [ "11a", "11b", "11g", "11ad" ] }, "ieee80211d": { "description": "Enables IEEE 802.11d country IE (information element) advertisement in beacon and probe response frames. This IE contains the country code and channel/power map. Requires country", "type": "boolean", "default": true }, "ieee80211h": { "description": "This enables radar detection and DFS support", "type": "boolean", "default": true }, "ieee80211w": { "description": "Whether management frame protection (MFP) is enabled", "type": "number", "minimum": 0, "maximum": 2 }, "ieee80211w_max_timeout": { "type": "alias", "default": "assoc_sa_query_max_timeout" }, "ieee80211w_mgmt_cipher": { "description": "Cypher used for MFP", "type": "string" }, "ieee80211w_retry_timeout": { "type": "alias", "default": "assoc_sa_query_retry_timeout" }, "ifname_prefix": { "description": "Default ifname prefix for this radio", "type": "string" }, "iface_max_num_sta": { "description": "Limits the maximum allowed number of associated clients", "type": "number" }, "ldpc": { "description": " LDPC (Low-Density Parity-Check code) capability ", "type": "boolean", "default": true }, "legacy_rates": { "description": "Allow legacy 802.11b data rates (used by cell_density)", "type": "boolean", "default": false }, "local_pwr_constraint": { "description": "Add Power Constraint element to Beacon and Probe Response frame", "type": "number", "minimum": 0, "maximum": 255 }, "log_80211": { "description": "Enable IEEE 802.11 logging", "type": "boolean", "default": true }, "log_8021x": { "description": "Enable IEEE 802.1X logging", "type": "boolean", "default": true }, "log_driver": { "description": "Enable driver interface logging", "type": "boolean", "default": true }, "log_iapp": { "description": "Enable iapp logging", "type": "boolean", "default": true }, "log_level": { "description": "Log severity", "type": "number", "default": 2, "minimum": 0, "maximum": 4 }, "log_mlme": { "description": "Enable MLME logging", "type": "boolean", "default": true }, "log_radius": { "description": "Enable Radius logging", "type": "boolean", "default": true }, "log_wpa": { "description": "Enable WPA logging", "type": "boolean", "default": true }, "logger_stdout": { "description": "Log to stdout", "type": "boolean", "default": true }, "logger_stdout_level": { "description": "Log severity", "type": "number", "default": 2, "minimum": 0, "maximum": 4 }, "logger_syslog": { "description": "Log to syslog", "type": "boolean", "default": true }, "logger_syslog_level": { "description": "Syslog severity", "type": "number", "default": 2, "minimum": 0, "maximum": 4 }, "macaddr": { "type": "alias", "default": "bssid" }, "macaddr_base": { "type": "string", "description": "Base MAC address used for deriving interface MAC addresses" }, "max_amsdu": { "description": "Maximum A-MSDU length of 7935 octects (3839 octets if option set to 0)", "type": "boolean", "default": true }, "maxassoc": { "type": "alias", "default": "iface_max_num_sta" }, "mbssid": { "description": "Multiple BSSID Advertisement in IEEE 802.11ax IEEE Std 802.11ax-2021 added a feature where instead of multiple interfaces on a common radio transmitting individual Beacon frames, those interfaces can form a set with a common Beacon frame transmitted for all Set minimum permitted max TX power (in dBm) for ACS and DFS channel selection", "type": "number", "default": 0, "minimum": 0, "maximum": 2 }, "min_tx_power": { "description": "Set minimum permitted max TX power (in dBm) for ACS and DFS channel selection", "type": "number", "default": 0 }, "mu_beamformee": { "description": "Supports operation as an MU beamformee", "type": "boolean", "default": true }, "mu_beamformer": { "description": " Supports operation as an MU beamformer", "type": "boolean", "default": true }, "multiple_bssid": { "type": "alias", "default": "mbssid" }, "num_global_macaddr": { "description": "The number of MACs that this radio can use", "type": "number", "default": 1 }, "noscan": { "description": "Do not scan for overlapping BSSs in HT40+/- mode.", "type": "boolean", "default": false }, "okc": { "description": "Enable Opportunistic Key Caching", "type": "boolean" }, "path": { "description": "Alternative to phy used to identify the device based paths in /sys/devices", "type": "string" }, "phy": { "description": "Name of the phy, as described in board.json", "type": "string" }, "radio": { "description": "Index of the phy radio (for multi-radio PHYs)", "type": "number", "default": -1 }, "reg_power_type": { "type": "alias", "default": "he_6ghz_reg_pwr_type" }, "require_mode": { "description": "Sets the minimum client capability level mode that connecting clients must support to be allowed to connect", "type": "string", "enum": [ "n", "ac", "ax" ] }, "rnr_beacon": { "description": "", "type": "string" }, "rsn_preauth": { "description": "Enable IEEE 802.11i/RSN/WPA2 pre-authentication", "type": "boolean" }, "rssi_ignore_probe_request": { "description": "Ignore Probe Request frames if RSSI is below given threshold (in dBm)", "type": "number", "default": 0 }, "rssi_reject_assoc_rssi": { "description": "Reject STA association if RSSI is below given threshold (in dBm)", "type": "number", "default": 0 }, "rssi_reject_assoc_timeout": { "description": "Association retry delay in seconds allowed by the STA if RSSI has not met the threshold", "type": "number", "default": 30, "minimum": 0, "maximum": 255 }, "rts": { "description": "Override the RTS/CTS threshold", "type": "number" }, "rts_threshold": { "description": "RTS/CTS threshold", "type": "number", "minimum": -1, "maximum": 65535 }, "rx_antenna_pattern": { "description": "Rx antenna pattern does not change during the lifetime of an association", "type": "boolean", "default": true }, "rx_stbc": { "description": "Supports reception of PPDUs using STBC", "type": "number", "default": 3, "minimum": 0, "maximum": 4 }, "rxantenna": { "description": "Specifies the antenna for receiving, the value may be driver specific, usually it is 1 for the first and 2 for the second antenna. Specifying 0 enables automatic selection by the driver if supported. This option has no effect if diversity is enabled", "type": "number" }, "rxldpc": { "description": "Supports receiving LDPC coded pkts", "type": "boolean", "default": true }, "scan_list": { "description": "List of frequencies (in MHz) to scan when looking for networks in client mode", "type": "array", "items": { "type": "number" } }, "short_gi_160": { "description": "Short GI for 160 MHz", "type": "boolean", "default": true }, "short_gi_20": { "description": "Short GI for 20 MHz", "type": "boolean", "default": true }, "short_gi_40": { "description": "Short GI for 40 MHz", "type": "boolean", "default": true }, "short_gi_80": { "description": "Short GI for 80 MHz", "type": "boolean", "default": true }, "spectrum_mgmt_required": { "description": "Set Spectrum Management subfield in the Capability Information field", "type": "boolean", "default": false }, "stationary_ap": { "description": "Stationary AP config indicates that the AP doesn't move hence location data can be considered as always up to date.", "type": "boolean", "default": true }, "su_beamformee": { "description": "Single user beamformee", "type": "boolean", "default": true }, "su_beamformer": { "description": "Single user beamformer", "type": "boolean", "default": true }, "supported_rates": { "description": "Set the supported data rates. Each supported rate is measured in kb/s. This option only has an effect on ap and adhoc wifi-ifaces. This must be a superset of the rates set in basic_rate. The minimum basic rate should also be the minimum supported rate. It is recommended to use the cell_density option instead", "type": "array", "items": { "type": "number" } }, "tx_antenna_pattern": { "description": "Tx antenna pattern does not change during the lifetime of an association", "type": "boolean", "default": true }, "tx_burst": { "type": "alias", "default": "tx_queue_data2_burst" }, "tx_queue_data2_burst": { "description": "", "type": "number" }, "tx_stbc": { "description": "Transmit STBC (Space-Time Block Coding)", "type": "boolean", "default": true }, "tx_stbc_2by1": { "description": "Supports transmission of at least 2×1 STBC", "type": "boolean", "default": true }, "txantenna": { "description": "Specifies the antenna for transmitting, values are identical to rxantenna", "type": "number" }, "txpower": { "description": "Specifies the maximum desired transmission power in dBm. The actual txpower used depends on regulatory requirements", "type": "number" }, "type": { "description": "Device type (only mac80211 supported)", "type": "string" }, "vht160": { "description": "Supported channel widths. 0 == 160MHz and 80+80 MHz not supported, 1 == 160 MHz supported, 2 == 160MHz and 80+80 MHz supported", "type": "number", "minimum": 0, "maximum": 2, "default": 2 }, "vht_link_adapt": { "description": "TA supports link adaptation using VHT variant HT Control field", "type": "number", "minimum": 0, "maximum": 3 }, "vht_max_a_mpdu_len_exp": { "description": "Indicates the maximum length of A-MPDU pre-EOF padding that the STA can recv", "type": "number", "minimum": 0, "maximum": 7, "default": 7 }, "vht_max_mpdu": { "description": "Maximum MPDU length", "type": "number", "enum": [ 3895, 7991, 11454 ], "default": 11454 }, "vht_txop_ps": { "description": "VHT TXOP PS mode", "type": "boolean", "default": true } } } 07070100EA55CC000081A400000000000000000000000169F91E150000055C000000080000000100000000000000000000002900000000usr/share/schema/wireless.wifi-vlan.json{ "$id": "https://openwrt.org/wifi.vlan.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi VLAN Schema", "type": "object", "properties": { "bridge_isolate": { "description": "Enable bridge port isolation for the wireless interface", "type": "boolean" }, "iface": { "description": "List of interfaces this VLAN is associated with", "type": "array", "items": { "type": "string" } }, "isolate": { "description": "Isolates wireless clients from each other", "type": "boolean" }, "multicast_to_unicast": { "description": "Request that the AP will do multicast-to-unicast conversion for ARP, IPv4, and IPv6 frames", "type": "boolean" }, "name": { "description": "VLAN name", "type": "string" }, "network": { "description": "Specifies one or multiple logical network interfaces declared in the network configuration, each one should be a L3 bridge to be able to attach this L2 wireless interface.", "type": "array", "items": { "type": "string" } }, "network_vlan": { "description": "Make a wireless interface a tagged member of extra VLANs", "type": "array", "items": { "type": "string" } }, "proxy_arp": { "description": "Proxy ARP", "type": "boolean" }, "vid": { "description": "VLAN ID", "type": "string" } } } 07070100EA55C2000081A400000000000000000000000169F91E15000073D1000000080000000100000000000000000000002A00000000usr/share/schema/wireless.wifi-iface.json{ "$id": "https://openwrt.org/wifi.iface.json", "$schema": "http://json-schema.org/draft-07/schema#", "description": "OpenWrt WiFi Interface Schema", "type": "object", "properties": { "access_network_type": { "description": "Interworking Access Network Type", "type": "number", "minimum": 0, "maximum": 15 }, "acct_interval": { "type": "alias", "default": "radius_acct_interim_interval" }, "acct_port": { "type": "alias", "default": "acct_server_port" }, "acct_secret": { "type": "alias", "default": "acct_server_shared_secret" }, "acct_server": { "type": "alias", "default": "acct_server_addr" }, "acct_server_addr": { "description": "RADIUS accounting server to handle client authentication", "type": "array", "items": { "type": "string" } }, "acct_server_port": { "description": "RADIUS accounting port", "type": "number", "default": 1813 }, "acct_server_shared_secret": { "description": "Shared accounting RADIUS secret", "type": "string" }, "airtime_bss_limit": { "description": "Whether the current BSS should be limited (when airtime_mode=3)", "type": "boolean" }, "airtime_bss_weight": { "description": "Per-BSS airtime weight. In multi-BSS mode, set for each BSS and hostapd will configure station weights to enforce the correct ratio between BSS weights depending on the number of active stations", "type": "number" }, "airtime_sta_weight": { "description": "Static configuration of station weights (when airtime_mode=1). Kernel default weight is 256", "type": "array", "items": { "type": "string" } }, "altsubject_match": { "description": "Semicolon separated string of entries to be matched against the alternative subject name of the authentication server certificate", "type": "array", "items": { "type": "string" } }, "altsubject_match2": { "type": "array" }, "anonymous_identity": { "description": "Anonymous identity string for EAP", "type": "string" }, "anqp_3gpp_cell_net": { "description": "3GPP Cellular Network information", "type": "array", "items": { "type": "string" } }, "anqp_domain_id": { "description": "An identifier for a set of APs in an ESS that share the same common ANQP information", "type": "number", "minimum": 0, "maximum": 65535, "default": 0 }, "ap_isolate": { "description": "Isolates wireless clients from each other, only applicable in ap mode", "type": "boolean", "default": false }, "ap_max_inactivity": { "description": "Station inactivity limit in seconds: If a station does not send anything in ap_max_inactivity seconds, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not ACKed, the station will be disassociated and then deauthenticated", "type": "number" }, "ap_pin": { "description": "Static access point PIN for WPS", "type": "string" }, "ap_setup_locked": { "description": "AP can be configured into a locked state where new WPS Registrar are not accepted", "type": "boolean" }, "anqp_elem": { "description": "Arbitrary ANQP-element configuration", "type": "array", "items": { "type": "string" } }, "asra": { "description": "Additional Step Required for Access", "type": "boolean", "default": false }, "assoc_sa_query_max_timeout": { "description": "Specifies the 802.11w Association SA Query maximum timeout.", "type": "number", "minimum": 1, "maximum": 4294967295 }, "assoc_sa_query_retry_timeout": { "description": "Association SA Query retry timeout", "type": "number", "minimum": 1, "maximum": 4294967295 }, "auth": { "description": "Defines the phase 2 (inner) authentication method, only applicable if eap_type is peap or ttl", "type": "string" }, "auth_cache": { "type": "alias", "default": "okc" }, "auth_port": { "type": "alias", "default": "auth_server_port" }, "auth_secret": { "type": "alias", "default": "auth_server_shared_secret" }, "auth_server": { "type": "alias", "default": "auth_server_addr" }, "auth_server_addr": { "description": "RADIUS authentication server to handle client authentication", "type": "array", "items": { "type": "string" } }, "auth_server_port": { "description": "RADIUS authentication port", "type": "number", "default": 1812 }, "auth_server_shared_secret": { "description": "Shared authentication RADIUS secret", "type": "string" }, "basic_rate": { "type": "array" }, "beacon_prot": { "description": "Management frame protection for Beacon frames", "type": "boolean" }, "bridge_isolate": { "description": "Enable bridge port isolation for the wireless interface", "type": "boolean" }, "bss_load_update_period": { "description": "BSS Load update period (in BUs)", "type": "number", "default": 60 }, "bss_transition": { "description": "BSS Transition Management", "type": "boolean" }, "bssid": { "description": "Override the BSSID of the network", "type": "string" }, "bssid_blacklist": { "type": "array" }, "bssid_whitelist": { "type": "array" }, "ca_cert": { "description": "Specifies the path the CA certificate used for authentication", "type": "string" }, "ca_cert2_usesystem": { "type": "boolean" }, "ca_cert_usesystem": { "type": "boolean" }, "chan_util_avg_period": { "description": "Channel utilization averaging period (in BUs)", "type": "number", "default": 600 }, "civic": { "description": "The content of a location civic measurement subelement", "type": "string" }, "client_cert": { "description": "File path to client certificate file (PEM/DER)", "type": "string" }, "dae_client": { "type": "alias", "default": "radius_das_client" }, "dae_port": { "type": "alias", "default": "radius_das_port" }, "dae_secret": { "type": "alias", "default": "radius_das_secret" }, "default_disabled": { "type": "alias", "default": "disabled" }, "device": { "description": "Devices to enable this interface on (wifi-device section names)", "type": "array", "items": { "type": "string" } }, "device_name": { "description": "Primary Device Name used by WPS", "type": "string", "default": "OpenWrt AP" }, "device_type": { "description": "Primary Device Type used by WPS", "type": "string", "default": "6-0050F204-1" }, "disabled": { "description": "Do not bring the interface up automatically", "type": "boolean" }, "disable_dgaf": { "description": "Disable Downstream Group-Addressed Forwarding", "type": "boolean", "default": false }, "disassoc_low_ack": { "description": "Disassociate stations based on excessive transmission failures or other indications of connection loss. This depends on the driver capabilities and may not be available with all drivers.", "type": "boolean", "default": true }, "domain_match": { "type": "array", "items": { "type": "string" } }, "domain_match2": { "type": "array" }, "domain_name" : { "type": "array", "items": { "type": "string" } }, "domain_suffix_match": { "type": "array", "items": { "type": "string" } }, "domain_suffix_match2": { "type": "array" }, "dtim_period": { "description": "Set the DTIM (delivery traffic information message) period. There will be one DTIM per this many beacon frames. This may be set between 1 and 255. This option only has an effect on ap wifi-ifaces.", "type": "number", "default": 2, "minimum": 1, "maximum": 255 }, "dynamic_ownip": { "type": "alias", "default": "dynamic_own_ip_addr" }, "dynamic_own_ip_addr": { "type": "boolean" }, "dynamic_vlan": { "description": "Allow RADIUS authentication server to decide which VLAN is used for the stations (0 = disabled, 1 = optional, 2 = required)", "type": "number", "enum": [ 0, 1, 2 ], "default": 0 }, "eap_reauth_period": { "description": "EAP reauthentication period in seconds", "type": "number" }, "eap_server": { "description": "Use integrated EAP server instead of external RADIUS authentication server", "type": "boolean" }, "eap_type": { "type": "string" }, "eap_user_file": { "description": "Path for EAP server user database", "type": "string" }, "eapol_version": { "description": "IEEE 802.1X/EAPOL version", "type": "number", "enum": [ 1, 2 ] }, "enable": { "description": "Enable the interface", "type": "boolean", "default": true }, "encryption": { "type": "string" }, "esr": { "description": "Emergency services reachable", "type": "boolean", "default": false }, "ext_registrar": { "description": "WPS UPnP interface", "type": "boolean" }, "fils": { "description": "Enable FILS", "type": "boolean" }, "fils_dhcp": { "description": "DHCP server for FILS HLP. Set to '*' for automatic lookup.", "type": "string" }, "ft_iface": { "description": "Inter-AP communication interface for 802.11r", "type": "string" }, "ft_over_ds": { "description": "Whether to enable FT-over-DS", "type": "boolean", "default": false }, "ft_psk_generate_local": { "description": "Whether to generate FT response locally for PSK networks. This avoids use of PMK-R1 push/pull from other APs with FT-PSK networks as the required information (PSK and other session data) is already locally available.", "type": "boolean" }, "ftm_responder": { "description": "Publish fine timing measurement (FTM) responder functionality", "type": "boolean" }, "gas_address3": { "type": "string" }, "hidden": { "type": "alias", "default": "ignore_broadcast_ssid" }, "hessid": { "description": "Homogeneous ESS identifier", "type": "string" }, "hostapd_bss_options": { "description": "Additional raw options to be added", "type": "array", "items": { "type": "string" } }, "hs20": { "description": "Enable Hotspot 2.0 support", "type": "boolean" }, "hs20_conn_capab": { "description": "Connection Capability", "type": "array", "items": { "type": "string" } }, "hs20_deauth_req_timeout": { "description": "Deauthentication request timeout", "type": "number", "default": 60 }, "hs20_operating_class": { "description": "Operating Class Indication", "type": "string" }, "hs20_t_c_filename": { "description": "Terms and Conditions information", "type": "string" }, "hs20_t_c_server_url": { "description": "Terms and Conditions server", "type": "string" }, "hs20_t_c_timestamp": { "description": "Terms and Conditions timestamp", "type": "string" }, "hs20_wan_metrics": { "description": "WAN Metrics", "type": "string" }, "identity": { "description": "Identity string for EAP", "type": "string" }, "ieee80211k": { "description": "Enables Radio Resource Measurement (802.11k) support", "type": "boolean" }, "ieee80211r": { "description": "Enables fast BSS transition (802.11r) support.", "type": "boolean" }, "ieee80211w": { "description": "Enables MFP (802.11w) support (0 = disabled, 1 = optional, 2 = required). Requires the 'full' version of wpad/hostapd and support from the Wi-Fi driver", "type": "number", "enum": [ 0, 1, 2 ] }, "ieee80211w_max_timeout": { "type": "alias", "default": "assoc_sa_query_max_timeout" }, "ieee80211w_mgmt_cipher": { "description": "Group Management cypher", "type": "string" }, "ieee80211w_retry_timeout": { "type": "alias", "default": "assoc_sa_query_retry_timeout" }, "ifname": { "description": "Specifies a custom name for the Wi-Fi interface, which is otherwise automatically named. Maximum length: 15 characters", "type": "string" }, "ignore_broadcast_ssid": { "description": "Disables the broadcasting of beacon frames if set to 1 and, in doing so, hides the ESSID. Where the ESSID is hidden, clients may fail to roam and airtime efficiency may be significantly reduced.", "type": "boolean", "default": false }, "internet": { "description": "Whether the network provides connectivity to the Internet", "type": "boolean", "default": true }, "isolate": { "type": "alias", "default": "ap_isolate" }, "iw_access_network_type": { "type": "alias", "default": "access_network_type" }, "iw_anqp_3gpp_cell_net": { "type": "alias", "default": "anqp_3gpp_cell_net" }, "iw_anqp_elem": { "type": "alias", "default": "anqp_elem" }, "iw_asra": { "type": "alias", "default": "asra" }, "iw_domain_name": { "type": "alias", "default": "domain_name" }, "iw_enabled": { "type": "boolean", "default": false }, "iw_esr": { "type": "alias", "default": "esr" }, "iw_gas_address3": { "type": "alias", "default": "gas_address3" }, "iw_hessid": { "type": "alias", "default": "hessid" }, "iw_internet": { "type": "alias", "default": "internet" }, "iw_ipaddr_type_availability": { "type": "number" }, "iw_nai_realm": { "type": "alias", "default": "nai_realm" }, "iw_network_auth_type": { "type": "alias", "default": "network_auth_type" }, "iw_qos_map_set": { "type": "alias", "default": "qos_map_set" }, "roaming_consortium": { "type": "alias", "default": "roaming_consortium" }, "iw_uesa": { "type": "alias", "default": "uesa" }, "iw_venue_group": { "type": "alias", "default": "venue_group" }, "iw_venue_name": { "type": "alias", "default": "venue_name" }, "iw_venue_type": { "type": "alias", "default": "venue_type" }, "iw_venue_url": { "type": "alias", "default": "venue_url" }, "key": { "description": "Encryption key", "type": "string" }, "lci": { "description": "The content of a LCI measurement subelement", "type": "string" }, "macaddr": { "description": "Override the BSSID of the network", "type": "string" }, "macfile": { "description": "File containing a list MACs used by the macfilter", "type": "string" }, "macfilter": { "description": "Allow/deny associations based on the clients MAC", "type": "string", "enum": [ "allow", "deny" ] }, "maclist": { "description": "List of MACs used by the macfilter option", "type": "array", "items": { "type": "string" } }, "manufacturer": { "description": "Manufacturer used by WPS", "type": "string", "default": "www.openwrt.org" }, "max_inactivity": { "type": "alias", "default": "ap_max_inactivity" }, "max_listen_int": { "type": "alias", "default": "max_listen_interval" }, "max_listen_interval": { "description": "How many Beacon periods STAs are allowed to remain asleep", "type": "number" }, "max_num_sta": { "description": "Maximum number of stations allowed in station table", "type": "number" }, "maxassoc": { "type": "alias", "default": "max_num_sta" }, "mbo": { "description": "Multiband Operation", "type": "boolean" }, "mcast_rate": { "description": "Allowed multicast rate", "type": "number" }, "mesh_auto_open_plinks": { "type": "boolean" }, "mesh_awake_window": { "type": "number" }, "mesh_confirm_timeout": { "type": "number" }, "mesh_element_ttl": { "type": "number" }, "mesh_fwding": { "description": "Enable 802.11s layer-2 routing and forwarding", "type": "boolean" }, "mesh_nolearn": { "description": "Disable 802.11s path discovery", "type": "boolean" }, "mesh_gate_announcements": { "type": "number" }, "mesh_holding_timeout": { "type": "number" }, "mesh_hwmp_active_path_timeout": { "type": "number" }, "mesh_hwmp_active_path_to_root_timeout": { "type": "number" }, "mesh_hwmp_confirmation_interval": { "type": "number" }, "mesh_hwmp_max_preq_retries": { "type": "number" }, "mesh_hwmp_net_diameter_traversal_time": { "type": "number" }, "mesh_hwmp_preq_min_interval": { "type": "number" }, "mesh_hwmp_rann_interval": { "type": "number" }, "mesh_hwmp_root_interval": { "type": "number" }, "mesh_hwmp_rootmode": { "type": "number" }, "mesh_id": { "type": "string" }, "mesh_max_peer_links": { "type": "number" }, "mesh_max_retries": { "type": "number" }, "mesh_min_discovery_timeout": { "type": "number" }, "mesh_path_refresh_time": { "type": "number" }, "mesh_plink_timeout": { "type": "number" }, "mesh_power_mode": { "type": "string" }, "mesh_retry_timeout": { "type": "number" }, "mesh_rssi_threshold": { "type": "number" }, "mesh_sync_offset_max_neighor": { "type": "number" }, "mesh_ttl": { "type": "number" }, "mlo": { "description": "Multi-Link Operation", "type": "boolean" }, "mobility_domain": { "description": "DID is used to indicate a group of APs between which a STA can use Fast BSS Transition.", "type": "string" }, "mode": { "type": "string" }, "multi_ap": { "description": "Enable Multi-AP functionality", "type": "number" }, "multi_ap_vlanid": { "description": "Multi-AP Default VLAN ID", "type": "number" }, "multi_ap_profile": { "description": "Multi-AP Profile", "type": "number" }, "multi_ap_backhaul_key": { "type": "string" }, "multi_ap_backhaul_ssid": { "description": "Multi-AP backhaul BSS SSID", "type": "string" }, "multicast_to_unicast": { "description": "Request that the AP will do multicast-to-unicast conversion for ARP, IPv4, and IPv6 frames ", "type": "boolean" }, "multicast_to_unicast_all": { "type": "alias", "default": "multicast_to_unicast" }, "na_mcast_to_ucast": { "description": "IPv6 Neighbor Advertisement multicast-to-unicast conversion", "type": "boolean" }, "nas_identifier": { "description": "NAS-Identifier string for RADIUS messages", "type": "string" }, "nai_realm": { "description": "NAI Realm information", "type": "array", "items": { "type": "string" } }, "nasid": { "type": "alias", "default": "nas_identifier" }, "network": { "description": "Specifies one or multiple logical network interfaces declared in the network configuration, each one should be a L3 bridge to be able to attach this L2 wireless interface.", "type": "array", "items": { "type": "string" } }, "network_auth_type": { "description": "Network Authentication Type", "type": "string" }, "network_vlan": { "description": "Make a wireless interface a tagged member of extra VLANs", "type": "array", "items": { "type": "string" } }, "no_probe_resp_if_max_sta": { "description": "Do not answer probe requests if iface_max_num_sta was reached", "type": "boolean" }, "ocv": { "description": "Operating Channel Validation", "type": "number", "minimum": 0, "maximum": 15 }, "okc": { "description": "PMKSA and Opportunistic Key Caching", "type": "boolean" }, "owe_transition": { "description": "Indicate that an OWE BSS shall automatically add an unencrypted transition interface", "type": "boolean" }, "owe_transition_bssid": { "description": "Pointer to the matching open/OWE BSS", "type": "string" }, "owe_transition_ifname": { "description": "Alternatively, OWE transition mode BSSID/SSID can be configured with a reference to a BSS operated by this hostapd process.", "type": "string" }, "owe_transition_ssid": { "description": "The SSID used by the OWE transition device", "type": "string" }, "ownip": { "type": "alias", "default": "own_ip_addr" }, "own_ip_addr": { "description": "The own IP address of the access point", "type": "string" }, "password:wpakey": { "type": "string" }, "pbc_in_m1": { "description": "WPS capability discovery workaround for PBC with Windows 7", "type": "boolean" }, "per_sta_vif": { "description": "Per-Station AP_VLAN interface mode", "type": "boolean" }, "pmk_r1_push": { "description": "Whether PMK-R1 push is enabled at R0KH", "type": "boolean", "default": false }, "port:port": { "type": "number" }, "powersave": { "type": "boolean" }, "ppsk": { "description": "Lookup PSK2 Keys up via a Radius server", "type": "boolean" }, "preamble": { "description": "Short Preamble", "type": "boolean", "default": true }, "priv_key": { "type": "string" }, "priv_key_pwd": { "type": "string" }, "private_key": { "description": "Private key matching with the server certificate for EAP-TLS/PEAP/TTLS", "type": "string" }, "private_key_passwd": { "description": "Passphrase for private key", "type": "string" }, "proxy_arp": { "description": "Proxy ARP", "type": "boolean" }, "qos_map_set": { "description": "QoS Map Set configuration", "type": "string", "default": "0,0,2,16,1,1,255,255,18,22,24,38,40,40,44,46,48,56" }, "r0_key_lifetime": { "description": "Default lifetime of the PMK-R0 in seconds", "type": "number" }, "r0kh": { "description": "List of R0KHs in the same Mobility Domain", "type": "array", "items": { "type": "string" } }, "r1_key_holder": { "description": "PMK-R1 Key Holder identifier", "type": "string" }, "r1kh": { "description": "List of R1KHs in the same Mobility Domain", "type": "array", "items": { "type": "string" } }, "radios": { "type": "array", "items": { "type": "string" } }, "radius_acct_interim_interval": { "description": "Interim accounting update interval", "type": "number" }, "radius_acct_req_attr": { "description": "Additional Accounting-Request attributes", "type": "array", "items": { "type": "string" } }, "radius_auth_req_attr": { "description": "Additional Access-Request attributes", "type": "array", "items": { "type": "string" } }, "radius_client_addr": { "description": "RADIUS client forced local IP address for the access point", "type": "string" }, "radius_das_client": { "description": "DAS client (the host that can send Disconnect/CoA requests)", "type": "string" }, "radius_das_port": { "description": "Dynamic Authorization Extensions port", "type": "number" }, "radius_das_secret": { "description": "Dynamic Authorization Extensions secret", "type": "string" }, "radius_request_cui" :{ "description": "Request Chargeable-User-Identity (RFC 4372)", "type": "boolean" }, "reassociation_deadline": { "description": "Reassociation deadline in time units", "type": "number", "minimum": 1000, "maximum": 65535, "default": 20000 }, "request_cui": { "type": "alias", "default": "radius_request_cui" }, "rrm_beacon_report": { "description": "Enable beacon report via radio measurements", "type": "boolean" }, "rrm_neighbor_report": { "description": "Enable neighbor report via radio measurements", "type": "boolean" }, "rnr": { "description": "Enable reduced neighbor reporting", "type": "boolean" }, "roaming_consortium": { "description": "Roaming Consortium List", "type": "array", "items": { "type": "string" } }, "rsn_preauth": { "type": "boolean" }, "rsn_override": { "type": "number", "description": "Use RSNE override IE WPA3 compatibility (0: disabled, 1: enabled, 2:force WPA2 for older devices)", "default": 1 }, "sae_password_file": { "description": "External file containing VLAN SAE MAC address triplets", "type": "string" }, "sae_pwe": { "description": "SAE mechanism for PWE derivation", "type": "number", "enum": [ 0, 1, 2 ] }, "sae_require_mfp": { "description": "Require MFP for all associations using SAE", "type": "boolean" }, "sae_track_password": { "description": "Tracking of SAE password use", "type": "number" }, "server:host": { "type": "string" }, "server_cert": { "description": "Server certificate (PEM or DER file) for EAP-TLS/PEAP/TTLS", "type": "string" }, "server_id": { "description": "Server identity", "type": "string" }, "short_preamble": { "type": "alias", "default": "preamble" }, "skip_inactivity_poll": { "description": "The inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP", "type": "boolean", "default": false }, "spp_amsdu": { "description": "Signaling and Payload Protected A-MSDU", "type": "boolean" }, "ssid": { "type": "string" }, "ssid:string": { "type": "string" }, "start_disabled": { "type": "number" }, "subject_match": { "description": "Substring to be matched against the subject of the authentication server certificate", "type": "string" }, "subject_match2": { "type": "string" }, "supported_rates": { "type": "array" }, "tdls_prohibit": { "description": "Prohibit use of TDLS in this BSS", "type": "boolean" }, "time_advertisement": { "description": "Time advertisement", "type": "number", "enum": [ 0, 2 ] }, "time_zone": { "description": "Local time zone as specified in 8.3 of IEEE Std 1003.1-2004", "type": "string" }, "uapsd": { "type": "alias", "default": "uapsd_advertisement_enabled" }, "uapsd_advertisement_enabled": { "description": "WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]", "type": "boolean", "default": true }, "uesa": { "description": "Unauthenticated emergency service accessible", "type": "boolean", "default": false }, "utf8_ssid": { "description": "Whether the SSID is to be interpreted using UTF-8 encoding", "type": "boolean", "default": true }, "vendor_elements": { "description": "Additional vendor specific elements for Beacon and Probe Response frames", "type": "array", "items": { "type": "string" } }, "venue_group": { "type": "string" }, "venue_name": { "description": "Venue Name information", "type": "array", "items": { "type": "string" } }, "venue_type": { "type": "string" }, "venue_url": { "description": "Venue URL information", "type": "array", "items": { "type": "string" } }, "vlan_bridge": { "description": "Bridge (prefix) to add the wifi and the tagged interface to.", "type": "string" }, "vlan_file": { "type": "string" }, "vlan_naming": { "description": "When hostapd creates a VLAN interface on vlan_tagged_interfaces, it needs to know how to name it.", "type": "boolean", "default": true }, "vlan_no_bridge": { "description": "To not setup a bridge for dynamic vlans", "type": "boolean" }, "vlan_tagged_interface": { "type": "string" }, "wds": { "type": "boolean" }, "wds_bridge": { "description": "If bridge parameter is set, the WDS STA interface will be added to the same bridge by default", "type": "string" }, "wds_sta": { "description": "If bridge parameter is set, the WDS STA interface will be added to the same bridge by default", "type": "boolean" }, "wnm_sleep_mode": { "description": "WNM-Sleep Mode (extended sleep mode for stations)", "type": "boolean" }, "wnm_sleep_mode_no_keys": { "description": "WNM-Sleep Mode GTK/IGTK workaround", "type": "boolean" }, "wpa_disable_eapol_key_retries": { "description": "Workaround for key reinstallation attacks", "type": "boolean", "default": false }, "wpa_gmk_rekey": { "description": "Time interval for rekeying GMK (master key used internally to generate GTKs)", "type": "number" }, "wpa_group_rekey": { "description": "Time interval for rekeying GTK (broadcast/multicast encryption keys)", "type": "number" }, "wpa_master_rekey": { "type": "alias", "default": "wpa_gmk_rekey" }, "wpa_pair_rekey": { "type": "alias", "default": "wpa_ptk_rekey" }, "wpa_psk_file": { "description": "External file conatining VLAN PSK MAC address triplets", "type": "string" }, "wpa_ptk_rekey": { "description": "Maximum lifetime for PTK in seconds", "type": "number" }, "wpa_strict_rekey": { "description": "Rekey GTK when any STA that possesses the current GTK is leaving the BSS", "type": "boolean" }, "wps_ap_setup_locked": { "type": "alias", "default": "ap_setup_locked" }, "wps_device_name": { "type": "alias", "default": "device_name" }, "wps_device_type": { "type": "alias", "default": "device_type" }, "wps_independent": { "description": "Whether to manage this interface independently from other WPS interfaces", "type": "number", "default": true }, "wps_label": { "description": "Support WPS labels", "type": "boolean" }, "wps_manufacturer": { "type": "alias", "default": "manufacturer" }, "wps_pbc_in_m1": { "type": "alias", "default": "pbc_in_m1" }, "wps_pin": { "type": "alias", "default": "ap_pin" }, "wps_pushbutton": { "description": "Support WPS pushbutton", "type": "boolean" } } } 07070100EA4D0C000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001100000000usr/share/udhcpc07070100EA4D0D000081ED00000000000000000000000169F91E1500000544000000080000000100000000000000000000002000000000usr/share/udhcpc/default.script#!/bin/sh [ -z "$1" ] && echo "Error: should be run by udhcpc" && exit 1 set_classless_routes() { local max=128 local type while [ -n "$1" -a -n "$2" -a $max -gt 0 ]; do [ ${1##*/} -eq 32 ] && type=host || type=net echo "udhcpc: adding route for $type $1 via $2" route add -$type "$1" gw "$2" dev "$interface" max=$(($max-1)) shift 2 done } setup_interface() { echo "udhcpc: ip addr add $ip/${subnet:-255.255.255.0} broadcast ${broadcast:-+} dev $interface" ip addr add $ip/${subnet:-255.255.255.0} broadcast ${broadcast:-+} dev $interface [ -n "$router" ] && [ "$router" != "0.0.0.0" ] && [ "$router" != "255.255.255.255" ] && { echo "udhcpc: setting default routers: $router" local valid_gw="" for i in $router ; do route add default gw $i dev $interface valid_gw="${valid_gw:+$valid_gw|}$i" done eval $(route -n | awk ' /^0.0.0.0\W{9}('$valid_gw')\W/ {next} /^0.0.0.0/ {print "route del -net "$1" gw "$2";"} ') } # CIDR STATIC ROUTES (rfc3442) [ -n "$staticroutes" ] && set_classless_routes $staticroutes [ -n "$msstaticroutes" ] && set_classless_routes $msstaticroutes } applied= case "$1" in deconfig) ip -4 addr flush dev "$interface" ;; renew) setup_interface update ;; bound) setup_interface ifup ;; esac # user rules [ -f /etc/udhcpc.user ] && . /etc/udhcpc.user exit 0 07070100EA5636000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001400000000usr/share/libiwinfo07070100EA5637000081A400000000000000000000000169F91E150000461D000000080000000100000000000000000000002000000000usr/share/libiwinfo/devices.txt# libiwinfo hardware database # vendor id | device id | subsystem vendor id | subsystem device id | # txpower offset | frequency offset | "vendor name" | "device name" 0x0777 0x11ac 0x0777 0xe7f9 0 0 "Ubiquiti" "LiteBeam 5AC" 0xffff 0xffff 0xffff 0xb102 0 0 "Ubiquiti" "PowerStation2 (18V)" 0xffff 0xffff 0xffff 0xb202 0 0 "Ubiquiti" "PowerStation2 (16D)" 0xffff 0xffff 0xffff 0xb302 0 0 "Ubiquiti" "PowerStation2 (EXT)" 0xffff 0xffff 0xffff 0xb105 0 0 "Ubiquiti" "PowerStation5 (22V)" 0xffff 0xffff 0xffff 0xb305 0 0 "Ubiquiti" "PowerStation5 (EXT)" 0xffff 0xffff 0xffff 0xc302 0 0 "Ubiquiti" "PicoStation2" 0xffff 0xffff 0xffff 0xc3a2 10 0 "Ubiquiti" "PicoStation2 HP" 0xffff 0xffff 0xffff 0xa105 0 0 "Ubiquiti" "WispStation5" 0xffff 0xffff 0xffff 0xa002 10 0 "Ubiquiti" "LiteStation2" 0xffff 0xffff 0xffff 0xa005 5 0 "Ubiquiti" "LiteStation5" 0xffff 0xffff 0xffff 0xc002 10 0 "Ubiquiti" "NanoStation2" 0xffff 0xffff 0xffff 0xc005 5 0 "Ubiquiti" "NanoStation5" 0xffff 0xffff 0xffff 0xc102 10 0 "Ubiquiti" "NanoStation Loco2" 0xffff 0xffff 0xffff 0xc105 5 0 "Ubiquiti" "NanoStation Loco5" 0xffff 0xffff 0xffff 0xc202 10 0 "Ubiquiti" "Bullet2" 0xffff 0xffff 0xffff 0xc205 5 0 "Ubiquiti" "Bullet5" 0x168c 0xffff 0x0777 0xe002 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe003 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe005 5 0 "Ubiquiti" "NanoStation M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe006 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe009 6 0 "Ubiquiti" "NanoStation Loco M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe012 10 0 "Ubiquiti" "NanoStation M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe035 3 0 "Ubiquiti" "NanoStation M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe0a2 2 0 "Ubiquiti" "NanoStation Loco M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe0a5 1 0 "Ubiquiti" "NanoStation Loco M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe102 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe105 5 0 "Ubiquiti" "Rocket M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe112 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe115 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1a3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1a5 5 0 "Ubiquiti" "PowerBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1b2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b5 5 0 "Ubiquiti" "Rocket M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1b6 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1b9 6 0 "Ubiquiti" "Rocket M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1c3 3 0 "Ubiquiti" "Rocket M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c5 5 0 "Ubiquiti" "Rocket M5 GPS" /* airOS XM */ 0x168c 0xffff 0x0777 0xe1c5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1d2 10 0 "Ubiquiti" "Rocket M2 Titanium" /* airOS XM/XW */ 0x168c 0xffff 0x0777 0xe1d3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1d5 5 0 "Ubiquiti" "airOS XM/XW" 0x168c 0xffff 0x0777 0xe1d9 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1e3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe1e5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe202 12 0 "Ubiquiti" "Bullet M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe205 6 0 "Ubiquiti" "Bullet M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe212 1 0 "Ubiquiti" "AirGrid M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe215 1 0 "Ubiquiti" "AirGrid M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe232 2 0 "Ubiquiti" "NanoBridge M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe233 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe235 1 0 "Ubiquiti" "NanoBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe239 6 0 "Ubiquiti" "NanoBridge M9" /* airOS XM */ 0x168c 0xffff 0x0777 0xe242 9 0 "Ubiquiti" "AirGrid M2 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe243 3 0 "Ubiquiti" "NanoBridge M3" /* airOS XM */ 0x168c 0xffff 0x0777 0xe245 6 0 "Ubiquiti" "AirGrid M5 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe252 9 0 "Ubiquiti" "AirGrid M2 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe255 6 0 "Ubiquiti" "AirGrid M5 HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2a3 3 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2a5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2b2 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2b5 1 0 "Ubiquiti" "NanoBridge M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2b9 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2c2 10 0 "Ubiquiti" "NanoBeam M2 Int" /* airOS XW */ 0x168c 0xffff 0x0777 0xe2c3 6 0 "Ubiquiti" "Bullet M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe2c4 6 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe2d2 12 0 "Ubiquiti" "Bullet M2 Titanium HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe2d4 6 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe2d5 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe2e5 4 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe302 12 0 "Ubiquiti" "PicoStation M2" /* airOS XM */ 0x168c 0xffff 0x0777 0xe305 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe345 6 0 "Ubiquiti" "WispStation M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe3a5 5 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe3b5 6 0 "Ubiquiti" "airOS XM/XW" 0x168c 0xffff 0x0777 0xe3e5 4 0 "Ubiquiti" "PowerBeam M5 300" /* airOS XW */ 0x168c 0xffff 0x0777 0xe402 10 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe405 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe4a2 1 0 "Ubiquiti" "AirRouter" /* airOS XM */ 0x168c 0xffff 0x0777 0xe4a5 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe4b2 9 0 "Ubiquiti" "AirRouter HP" /* airOS XM */ 0x168c 0xffff 0x0777 0xe4d5 5 0 "Ubiquiti" "Rocket M5 Titanium" /* airOS XW */ 0x168c 0xffff 0x0777 0xe4e5 4 0 "Ubiquiti" "PowerBeam M5 400" /* airOS XW */ 0x168c 0xffff 0x0777 0xe5e5 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe6a2 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6b2 1 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6b5 5 0 "Ubiquiti" "Rocket M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe6c2 6 0 "Ubiquiti" "airOS XM" 0x168c 0xffff 0x0777 0xe6e5 4 0 "Ubiquiti" "PowerBeam M5 400 ISO" /* airOS XW */ 0x168c 0xffff 0x0777 0xe7f8 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe805 5 0 "Ubiquiti" "airOS XM" /* e.g. NanoStation M5, Bullet M5 */ 0x168c 0xffff 0x0777 0xe812 6 0 "Ubiquiti" "NanoBeam M2 13" /* airOS XW */ 0x168c 0xffff 0x0777 0xe815 4 0 "Ubiquiti" "NanoBeam M5 16" /* airOS XW */ 0x168c 0xffff 0x0777 0xe825 4 0 "Ubiquiti" "NanoBeam M5 19" /* airOS XW */ 0x168c 0xffff 0x0777 0xe835 6 0 "Ubiquiti" "AirGrid M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe845 1 0 "Ubiquiti" "NanoStation Loco M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe855 5 0 "Ubiquiti" "NanoStation M5 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe865 6 0 "Ubiquiti" "LiteBeam M5" /* airOS XW */ 0x168c 0xffff 0x0777 0xe866 6 0 "Ubiquiti" "NanoStation M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe867 2 0 "Ubiquiti" "NanoStation Loco M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe868 7 0 "Ubiquiti" "Rocket M2 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe869 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe875 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe879 2 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe885 4 0 "Ubiquiti" "PowerBeam M5 620 XW" /* airOS XW */ 0x168c 0xffff 0x0777 0xe895 4 0 "Ubiquiti" "airOS XW" 0x168c 0xffff 0x0777 0xe8a5 1 0 "Ubiquiti" "NanoStation Loco M5" /* airOS XM */ 0x168c 0xffff 0x0777 0xe8b5 5 0 "Ubiquiti" "airOS XM" 0x168c 0x001b 0x0777 0x3002 10 0 "Ubiquiti" "XR2" 0x168c 0x001b 0x7777 0x3002 10 0 "Ubiquiti" "XR2" 0x168c 0x001b 0x0777 0x3b02 10 0 "Ubiquiti" "XR2.3" 0x168c 0x001b 0x0777 0x3c02 10 0 "Ubiquiti" "XR2.6" 0x168c 0x001b 0x0777 0x3b03 10 0 "Ubiquiti" "XR3-2.8" 0x168c 0x001b 0x0777 0x3c03 10 0 "Ubiquiti" "XR3-3.6" 0x168c 0x001b 0x0777 0x3003 10 0 "Ubiquiti" "XR3" 0x168c 0x001b 0x0777 0x3004 10 0 "Ubiquiti" "XR4" 0x168c 0x001b 0x0777 0x3005 10 0 "Ubiquiti" "XR5" 0x168c 0x001b 0x7777 0x3005 10 0 "Ubiquiti" "XR5" 0x168c 0x001b 0x0777 0x3007 10 0 "Ubiquiti" "XR7" 0x168c 0x001b 0x0777 0x3009 10 -1520 "Ubiquiti" "XR9" 0x168c 0x001b 0x168c 0x2063 0 0 "Atheros" "AR5413" 0x168c 0x0013 0x168c 0x1042 1 0 "Ubiquiti" "SRC" 0x168c 0x0013 0x0777 0x2041 10 0 "Ubiquiti" "SR2" 0x168c 0x0013 0x0777 0x2004 6 0 "Ubiquiti" "SR4" 0x168c 0x0013 0x7777 0x2004 6 0 "Ubiquiti" "SR4" 0x168c 0x0013 0x0777 0x1004 6 0 "Ubiquiti" "SR4C" 0x168c 0x0013 0x7777 0x1004 6 0 "Ubiquiti" "SR4C" 0x168c 0x0013 0x168c 0x2042 7 0 "Ubiquiti" "SR5" 0x168c 0x0013 0x7777 0x2009 12 -1500 "Ubiquiti" "SR9" 0x168c 0x0027 0x168c 0x2082 7 0 "Ubiquiti" "SR71A" 0x168c 0x0027 0x0777 0x4082 7 0 "Ubiquiti" "SR71" 0x168c 0x0029 0x0777 0x4005 7 0 "Ubiquiti" "SR71-15" 0x168c 0x002a 0x0777 0xe302 12 0 "Ubiquiti" "PicoStation M2" /* ToDo: confirm offset - Correct! */ 0x168c 0x002a 0x0777 0xe012 12 0 "Ubiquiti" "NanoStation M2" /* ToDo: confirm offset - Wrong! */ 0x168c 0x002a 0x0777 0xe005 5 0 "Ubiquiti" "NanoStation M5" /* ToDo: confirm offset - Correct! */ 0x168c 0x002a 0x0777 0xe202 12 0 "Ubiquiti" "Bullet M2" 0x168c 0x002a 0x0777 0xe805 5 0 "Ubiquiti" "Bullet M5" 0x168c 0x002a 0x0777 0xe345 0 0 "Ubiquiti" "WispStation M5" /* ToDo: confirm offset - Wrong! */ 0x168c 0x0029 0x168c 0xa094 0 0 "Atheros" "AR9220" 0x168c 0x0029 0x168c 0xa095 0 0 "Atheros" "AR9223" 0x168c 0x002a 0x168c 0xa093 0 0 "Atheros" "AR9280" 0x168c 0x002b 0x168c 0xa091 0 0 "Atheros" "AR9285" 0x168c 0x002d 0x168c 0x209a 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x1a3b 0x1121 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x0777 0xe0a2 8 0 "Ubiquiti" "NanoStation Loco M2 (XM)" /* wrong offset! */ 0x168c 0x002e 0x168c 0x30a4 0 0 "Atheros" "AR9287" 0x168c 0x002e 0x168c 0xa199 0 0 "Atheros" "AR9287" 0x168c 0x0030 0x168c 0x3112 0 0 "Atheros" "AR9380" 0x168c 0x0030 0x168c 0x3114 0 0 "Atheros" "AR9390" 0x168c 0x0033 0x168c 0xa120 0 0 "Atheros" "AR9580" 0x168c 0x0033 0x168c 0xa136 0 0 "Atheros" "AR9580" 0x168c 0x0033 0x168c 0x3123 0 0 "Atheros" "AR9590" 0x168c 0x0033 0x19b6 0xd014 0 0 "MikroTik" "R11e-5HnD" 0x168c 0x0033 0x19b6 0xd057 0 0 "MikroTik" "R11e-5HnDr2" 0x168c 0x0033 0x19b6 0xd016 0 0 "MikroTik" "R11e-2HPnD" 0x168c 0x0034 0x17aa 0x3214 0 0 "Atheros" "AR9462" 0x168c 0x003c 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9880" 0x168c 0x003c 0x168c 0x3223 0 0 "Qualcomm Atheros" "QCA9880" 0x168c 0x003c 0x1a56 0x1420 0 0 "Qualcomm Atheros" "QCA9862" 0x168c 0x003c 0x19b6 0xd03c 0 0 "Mikrotik" "R11e-5HacT" 0x168c 0x003c 0x19b6 0xd075 0 0 "Mikrotik" "R11e-5HacD" 0x168c 0x003e 0x168c 0x3361 0 0 "Qualcomm Atheros" "QCA6174" 0x168c 0x0040 0x168c 0x0002 0 0 "Qualcomm Atheros" "QCA9990" 0x168c 0x0046 0x168c 0xcafe 0 0 "Qualcomm Atheros" "QCA9984" 0x168c 0x0050 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9887" 0x168c 0x0056 0x0000 0x0000 0 0 "Qualcomm Atheros" "QCA9886" 0x17cb 0x1104 0x17cb 0x1104 0 0 "Qualcomm Atheros" "QCN6024/9024/9074" 0x1814 0x3051 0x1814 0x0007 0 0 "Ralink" "Rt3051" /* needs fixing */ 0x1814 0x3052 0x1814 0x0008 0 0 "Ralink" "Rt3052" /* needs fixing */ 0x1814 0x3091 0x1814 0x3091 0 0 "Ralink" "RT5592" 0x1814 0x3350 0x1814 0x000b 0 0 "Ralink" "Rt3350" /* needs fixing */ 0x1814 0x3662 0x1814 0x000d 0 0 "Ralink" "Rt3662" /* needs fixing */ 0x11ab 0x2a55 0x11ab 0x0000 0 0 "Marvell" "88W8864" 0x02df 0x9135 0x0000 0x0000 0 0 "Marvell" "88W8887" 0x11ab 0x2b40 0x11ab 0x0000 0 0 "Marvell" "88W8964" 0x02df 0x9141 0x0000 0x0000 0 0 "Marvell" "88W8997" 0x14c3 0x0608 0x14c3 0x0608 0 0 "AMD" "RZ608" 0x14c3 0x7603 0x14c3 0x7603 0 0 "MediaTek" "MT7603E" 0x14c3 0x7610 0x14c3 0x7610 0 0 "MediaTek" "MT7610E" 0x14c3 0x7612 0x14c3 0x7612 0 0 "MediaTek" "MT7612E" 0x14c3 0x7663 0x14c3 0x7663 0 0 "MediaTek" "MT7613BE" 0x14c3 0x7615 0x7615 0x14c3 0 0 "MediaTek" "MT7615E" 0x14c3 0x7628 0x14c3 0x0004 0 0 "MediaTek" "MT76x8" 0x14c3 0x7650 0x14c3 0x7650 0 0 "MediaTek" "MT7610E" 0x14c3 0x7662 0x14c3 0x7662 0 0 "MediaTek" "MT76x2E" 0x14c3 0x7915 0x14c3 0x7915 0 0 "MediaTek" "MT7915E" 0x14c3 0x7906 0x14c3 0x7906 0 0 "MediaTek" "MT7916AN" 0x14c3 0x7925 0x1a3b 0x6002 0 0 "MediaTek" "MT7925E" 0x14c3 0x7990 0x14C3 0x6639 0 0 "MediaTek" "MT7996E" 0x14c3 0x7992 0x14c3 0x7992 0 0 "MediaTek" "MT7992E" 0x14e4 0xaa52 0x14e4 0xaa52 0 0 "Broadcom" "BCM43602" 0x02d0 0xa9a6 0x0000 0x0000 0 0 "Cypress" "CYW43455" 0x02d0 0x4345 0x0000 0x0000 0 0 "Cypress" "CYW43455" 0x1ae9 0x0310 0x1ae9 0x0000 0 0 "Wilocity" "Wil6210" # USB devices # 0x0000 | 0x0000 | vendor id | product id | ... # mt7601u/usb.c 0x0000 0x0000 0x148f 0x7601 0 0 "MediaTek" "MT7601U" # mt7921/usb.c 0x0000 0x0000 0x0e8d 0x7961 0 0 "MediaTek" "MT7921AU" # mt76x2/usb.c 0x0000 0x0000 0x0b05 0x1833 0 0 "ASUS" "USB-AC54" 0x0000 0x0000 0x0b05 0x17eb 0 0 "ASUS" "USB-AC55" 0x0000 0x0000 0x0b05 0x180b 0 0 "ASUS" "USB-N53 B1" 0x0000 0x0000 0x0e8d 0x7612 0 0 "Aukey" "USBAC1200" /* Alfa AWUS036ACM */ 0x0000 0x0000 0x057c 0x8503 0 0 "AVM" "FRITZ!WLAN AC860" 0x0000 0x0000 0x7392 0xb711 0 0 "Edimax" "EW-7722UAC" 0x0000 0x0000 0x0e8d 0x7632 0 0 "High Cloud" "HC-M7662BU1" 0x0000 0x0000 0x2c4e 0x0103 0 0 "Mercury" "UD13" 0x0000 0x0000 0x0846 0x9053 0 0 "Netgear" "A6210" 0x0000 0x0000 0x045e 0x02e6 0 0 "Microsoft" "XBox One Wireless Adapter" 0x0000 0x0000 0x045e 0x02fe 0 0 "Microsoft" "XBox One Wireless Adapter" # mt76x0/usb.c 0x0000 0x0000 0x148f 0x7610 0 0 "MediaTek" "MT7610U" 0x0000 0x0000 0x13b1 0x003e 0 0 "Linksys" "AE6000" 0x0000 0x0000 0x0e8d 0x7610 0 0 "Sabrent" "NTWLAC" 0x0000 0x0000 0x7392 0xa711 0 0 "Edimax" "7711MAC" 0x0000 0x0000 0x148f 0x761a 0 0 "TP-Link" "TL-WDN5200" 0x0000 0x0000 0x0b05 0x17d1 0 0 "ASUS" "USB-AC51" 0x0000 0x0000 0x0b05 0x17db 0 0 "ASUS" "USB-AC50" 0x0000 0x0000 0x0df6 0x0075 0 0 "Sitecom" "WLA-3100" 0x0000 0x0000 0x2019 0xab31 0 0 "Planex" "GW-450D" 0x0000 0x0000 0x2001 0x3d02 0 0 "D-Link" "DWA-171 rev B1" 0x0000 0x0000 0x0586 0x3425 0 0 "Zyxel" "NWD6505" 0x0000 0x0000 0x07b8 0x7610 0 0 "AboCom" "AU7212" 0x0000 0x0000 0x04bb 0x0951 0 0 "I-O DATA" "WN-AC433UK" 0x0000 0x0000 0x057c 0x8502 0 0 "AVM" "FRITZ!WLAN AC430" 0x0000 0x0000 0x293c 0x5702 0 0 "Comcast" "Xfinity KXW02AAA" 0x0000 0x0000 0x20f4 0x806b 0 0 "TRENDnet" "TEW-806UBH" 0x0000 0x0000 0x7392 0xc711 0 0 "Devolo" "WiFi Stick ac" 0x0000 0x0000 0x0df6 0x0079 0 0 "Sitecom" "WL-356" 0x0000 0x0000 0x2357 0x0123 0 0 "TP-Link" "T2UHP US v1" 0x0000 0x0000 0x2357 0x010b 0 0 "TP-Link" "T2UHP UN v1" 0x0000 0x0000 0x2357 0x0105 0 0 "TP-Link" "Archer T1U" 0x0000 0x0000 0x0e8d 0x7630 0 0 "MediaTek" "MT7630U" 0x0000 0x0000 0x0e8d 0x7650 0 0 "MediaTek" "MT7650U" # mt7615/usb.c 0x0000 0x0000 0x0e8d 0x7663 0 0 "MediaTek" "MT7663U" 0x0000 0x0000 0x043e 0x310c 0 0 "LG" "LGSBWAC02" # rtl8xxxu/rtl8xxxu_core.c 0x0000 0x0000 0x0bda 0x8176 0 0 "Realtek" "RTL8188CU" 0x0000 0x0000 0x0bda 0xf179 0 0 "Realtek" "RTL8188FTV" # FDT compatible strings # "compatible" | txpower offset | frequency offset | ... "qca,ar9130-wmac" 0 0 "Atheros" "AR9130" "qca,ar9330-wmac" 0 0 "Atheros" "AR9330" "qca,ar9340-wmac" 0 0 "Atheros" "AR9340" "qca,qca9530-wmac" 0 0 "Qualcomm Atheros" "QCA9530" "qca,qca9550-wmac" 0 0 "Qualcomm Atheros" "QCA9550" "qca,qca9560-wmac" 0 0 "Qualcomm Atheros" "QCA9560" "qcom,ipq4019-wifi" 0 0 "Qualcomm Atheros" "IPQ4019" "qcom,ipq5018-wifi" 0 0 "Qualcomm Atheros" "IPQ5018" "qcom,ipq6018-wifi" 0 0 "Qualcomm Atheros" "IPQ6018" "qcom,ipq8074-wifi" 0 0 "Qualcomm Atheros" "IPQ8074" "qcom,qcn6122-wifi" 0 0 "Qualcomm Atheros" "QCN6102/QCN6122" "mediatek,mt7622-wmac" 0 0 "MediaTek" "MT7622" "mediatek,mt7628-wmac" 0 0 "MediaTek" "MT7628" "mediatek,mt7981-wmac" 0 0 "MediaTek" "MT7981" "mediatek,mt7986-wmac" 0 0 "MediaTek" "MT7986" "ralink,rt2880-wmac" 0 0 "Ralink" "Rt2880" "ralink,rt3050-wmac" 0 0 "Ralink" "Rt3050" "ralink,rt3352-wmac" 0 0 "Ralink" "Rt3352" "ralink,rt3883-wmac" 0 0 "Ralink" "Rt3883" "ralink,rt5350-wmac" 0 0 "Ralink" "Rt5350" "ralink,rt7620-wmac" 0 0 "MediaTek" "MT7620" 07070100EA5596000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001100000000usr/share/hostap07070100EA55BD000081A400000000000000000000000169F91E15000016BA000000080000000100000000000000000000002000000000usr/share/hostap/wifi-detect.uc#!/usr/bin/env ucode 'use strict'; import { readfile, writefile, realpath, glob, basename, unlink, open, rename } from "fs"; import { is_equal } from "/usr/share/hostap/common.uc"; let nl = require("nl80211"); let board_file = "/etc/board.json"; let prev_board_data = json(readfile(board_file)); let board_data = json(readfile(board_file)); function phy_idx(name) { return +rtrim(readfile(`/sys/class/ieee80211/${name}/index`)); } function phy_path(name) { let devpath = realpath(`/sys/class/ieee80211/${name}/device`); devpath = replace(devpath, /^\/sys\/devices\//, ""); if (match(devpath, /^platform\/.*\/pci/)) devpath = replace(devpath, /^platform\//, ""); let dev_phys = map(glob(`/sys/class/ieee80211/${name}/device/ieee80211/*`), basename); sort(dev_phys, (a, b) => phy_idx(a) - phy_idx(b)); let ofs = index(dev_phys, name); if (ofs > 0) devpath += `+${ofs}`; return devpath; } function cleanup() { let wlan = board_data.wlan; for (let name in wlan) if (substr(name, 0, 3) == "phy") delete wlan[name]; else delete wlan[name].info; } function wiphy_get_entry(phy, path) { board_data.wlan ??= {}; let wlan = board_data.wlan; for (let name in wlan) if (wlan[name].path == path) return wlan[name]; wlan[phy] = { path: path }; return wlan[phy]; } function freq_to_channel(freq) { if (freq < 1000) return 0; if (freq == 2484) return 14; if (freq == 5935) return 2; if (freq < 2484) return (freq - 2407) / 5; if (freq >= 4910 && freq <= 4980) return (freq - 4000) / 5; if (freq < 5950) return (freq - 5000) / 5; if (freq <= 45000) return (freq - 5950) / 5; if (freq >= 58320 && freq <= 70200) return (freq - 56160) / 2160; return 0; } function freq_range_match(ranges, freq) { freq *= 1000; for (let range in ranges) { if (freq >= range[0] && freq <= range[1]) return true; } return false; } function wiphy_detect() { let phys = nl.request(nl.const.NL80211_CMD_GET_WIPHY, nl.const.NLM_F_DUMP, { split_wiphy_dump: true }); if (!phys) return; for (let phy in phys) { if (!phy) continue; let name = phy.wiphy_name; let path = phy_path(name); let info = { antenna_rx: phy.wiphy_antenna_avail_rx, antenna_tx: phy.wiphy_antenna_avail_tx, bands: {}, radios: [] }; for (let radio in phy.radios) { // S1G is not supported yet radio.freq_ranges = filter(radio.freq_ranges, (range) => range.end > 2000000 ); if (!length(radio.freq_ranges)) continue; push(info.radios, { index: radio.index, freq_ranges: map(radio.freq_ranges, (range) => [ range.start, range.end ] ), bands: {} }); } let bands = info.bands; for (let band in phy.wiphy_bands) { if (!band || !band.freqs) continue; let freq = band.freqs[0].freq; let band_info = {}; let band_name; if (freq > 50000) band_name = "60G"; else if (freq > 5900) band_name = "6G"; else if (freq > 4000) band_name = "5G"; else if (freq > 2000) band_name = "2G"; else continue; bands[band_name] = band_info; if (band.ht_capa > 0) band_info.ht = true; if (band.vht_capa > 0) band_info.vht = true; let he_phy_cap = 0; let eht_phy_cap = 0; for (let ift in band.iftype_data) { if (!ift.he_cap_phy) continue; band_info.he = true; he_phy_cap |= ift.he_cap_phy[0]; if (!ift.eht_cap_phy) continue; band_info.eht = true; eht_phy_cap |= ift.eht_cap_phy[0]; } if (band_name != "2G" && (he_phy_cap & 0x18) || ((band.vht_capa >> 2) & 0x3)) band_info.max_width = 160; else if (band_name != "2G" && (he_phy_cap & 4) || band.vht_capa > 0) band_info.max_width = 80; else if ((band.ht_capa & 0x2) || (he_phy_cap & 0x2)) band_info.max_width = 40; else band_info.max_width = 20; let modes = band_info.modes = [ "NOHT" ]; if (band_info.ht) push(modes, "HT20"); if (band_info.vht) push(modes, "VHT20"); if (band_info.he) push(modes, "HE20"); if (band_info.eht) push(modes, "EHT20"); if (band.ht_capa & 0x2) { push(modes, "HT40"); if (band_info.vht) push(modes, "VHT40") } if (he_phy_cap & 2) push(modes, "HE40"); if (eht_phy_cap && he_phy_cap & 2) push(modes, "EHT40"); for (let radio in info.radios) { let freq_match = filter(band.freqs, (freq) => freq_range_match(radio.freq_ranges, freq.freq) ); if (!length(freq_match)) continue; let radio_band = {}; radio.bands[band_name] = radio_band; freq_match = filter(freq_match, (freq) => !freq.disabled ); let freq = freq_match[0]; if (freq) radio_band.default_channel = freq_to_channel(freq.freq); } for (let freq in band.freqs) { if (freq.disabled) continue; let chan = freq_to_channel(freq.freq); if (!chan) continue; band_info.default_channel = chan; break; } if (band_name == "2G") continue; if (he_phy_cap & 4) push(modes, "HE40"); if (eht_phy_cap && he_phy_cap & 4) push(modes, "EHT40"); if (band_info.vht) push(modes, "VHT80"); if (he_phy_cap & 4) push(modes, "HE80"); if (eht_phy_cap && he_phy_cap & 4) push(modes, "EHT80"); if ((band.vht_capa >> 2) & 0x3) push(modes, "VHT160"); if (he_phy_cap & 0x18) push(modes, "HE160"); if (eht_phy_cap && he_phy_cap & 0x18) push(modes, "EHT160"); if (eht_phy_cap & 2) push(modes, "EHT320"); } let entry = wiphy_get_entry(name, path); entry.info = info; } } cleanup(); wiphy_detect(); if (!is_equal(prev_board_data, board_data)) { let new_file = board_file + ".new"; unlink(new_file); let f = open(new_file, "wx"); if (!f) exit(1); f.write(sprintf("%.J\n", board_data)); f.close(); rename(new_file, board_file); } 07070100EA57AA000081A400000000000000000000000169F91E150000442A000000080000000100000000000000000000002300000000usr/share/hostap/wpa_supplicant.uclet libubus = require("ubus"); import * as uloop from "uloop"; import { open, readfile } from "fs"; import { wdev_create, wdev_set_mesh_params, wdev_remove, is_equal, wdev_set_up, vlist_new, phy_open } from "common"; let ubus = libubus.connect(); function ex_handler(e) { e = split(`${e}\n${e.stacktrace[0].context}`, '\n'); for (let line in e) wpas.printf(line); return libubus.STATUS_UNKNOWN_ERROR; } libubus.guard(ex_handler); wpas.data.mld = {}; wpas.data.config = {}; wpas.data.iface_phy = {}; wpas.data.iface_ubus = {}; wpas.data.macaddr_list = {}; function iface_stop(iface) { let ifname = iface.config.iface; if (!iface.running) return; delete wpas.data.iface_phy[ifname]; wpas.remove_iface(ifname); wdev_remove(ifname); iface.running = false; } function iface_start(phydev, iface, macaddr_list) { let phy = phydev.name; if (iface.running) return; let ifname = iface.config.iface; let wdev_config = {}; for (let field in iface.config) wdev_config[field] = iface.config[field]; if (!wdev_config.macaddr) wdev_config.macaddr = phydev.macaddr_next(); wpas.data.iface_phy[ifname] = phy; wdev_remove(ifname); let ret = phydev.wdev_add(ifname, wdev_config); if (ret) wpas.printf(`Failed to create device ${ifname}: ${ret}`); wdev_set_up(ifname, true); wpas.add_iface(iface.config); iface.running = true; } function iface_cb(new_if, old_if) { if (old_if && new_if && is_equal(old_if.config, new_if.config)) { new_if.running = old_if.running; return; } if (new_if && old_if) wpas.printf(`Update configuration for interface ${old_if.config.iface}`); else if (old_if) wpas.printf(`Remove interface ${old_if.config.iface}`); if (old_if) iface_stop(old_if); } function prepare_config(config, radio) { config.config_data = readfile(config.config); return { config }; } function phy_dev_open(phy_name) { let phy = wpas.data.config[phy_name]; if (!phy) { warn(`Missing phy config for ${phy_name}\n`); return; } let phydev = phy_open(phy.name, phy.radio); if (!phydev) return; let macaddr_list = wpas.data.macaddr_list[phy_name]; phydev.macaddr_init(macaddr_list, { num_global: phy.num_global_macaddr, macaddr_base: phy.macaddr_base, }); return phydev; } function start_pending(phy_name) { let phy = wpas.data.config[phy_name]; if (!phy || !phy.data) return; let phydev = phy_dev_open(phy_name); if (!phydev) { wpas.printf(`Could not open phy ${phy_name}`); return; } for (let ifname in phy.data) iface_start(phydev, phy.data[ifname]); } function phy_name(phy, radio) { if (!phy) return null; if (radio != null && radio >= 0) phy += "." + radio; return phy; } function mld_remove(data) { if (!data.radio_mask_up) return; let name = data.name; wpas.printf(`Remove MLD interface ${name}`); wpas.remove_iface(name); wdev_remove(name); data.radio_mask_up = 0; } function mld_first_phy(data) { let mask = data.radio_mask_present; for (let i = 0; mask; i++, mask >>= 1) if (mask & 1) return i; } function mld_radio_index(data, freq) { let phys = data.phy_config; for (let i = 0; i < length(phys); i++) if (phys[i] && index(phys[i].freq_list, freq) >= 0) return i; } function mld_add(data, phy_list) { let name = data.name; phy_list ??= []; wpas.printf(`Add MLD interface ${name}`); let radio = mld_first_phy(data); if (radio == null) return; let phy_name = data.phy + '.' + radio; let phydev = phy_list[phy_name]; if (!phydev) { phydev = phy_dev_open(phy_name); if (!phydev) return; phy_list[phy_name] = phydev; } let wdev_config = { ...data.config, radio_mask: data.radio_mask }; if (!wdev_config.macaddr) wdev_config.macaddr = phydev.macaddr_next(); let ret = phydev.wdev_add(name, wdev_config); if (ret) wpas.printf(`Failed to create device ${name}: ${ret}`); let first_config = data.phy_config[radio]; wdev_set_up(name, true); wpas.add_iface(first_config); let iface = wpas.interfaces[name]; if (!iface) { wpas.printf(`Interface ${name} not found after adding\n`); wpas.remove_iface(name); wdev_remove(name); return; } if (length(data.freq_list) > 0) iface.config('freq_list', data.freq_list); data.radio_mask_up = data.radio_mask_present; } function mld_remove_links(data) { // TODO mld_remove(data); } function mld_add_links(data) { // TODO: incremental update mld_remove(data); mld_add(data); } function mld_set_config(config) { let prev_mld = { ...wpas.data.mld }; let new_mld = {}; let phy_list = {}; let new_config = !length(prev_mld); wpas.printf(`Set MLD config: ${keys(config)}`); for (let name, data in config) { let prev = prev_mld[name]; if (prev && is_equal(prev.config, data)) { new_mld[name] = prev; delete prev_mld[name]; continue; } let radio_mask = 0; for (let r in data.radios) if (r != null) radio_mask |= 1 << r; new_mld[name] = { name, config: data, phy: data.phy, phy_config: [], radio_mask, radio_mask_up: 0, radio_mask_present: 0, }; } for (let name, data in prev_mld) mld_remove(data); wpas.data.mld = new_mld; } function mld_set_iface_config(name, data, radio, config) { wpas.printf(`Set MLD interface ${name} radio ${radio} config: ${keys(config)}`); data.phy_config[radio] = config; if (config) data.radio_mask_present |= 1 << radio; else data.radio_mask_present &= ~(1 << radio); let freq_list; for (let config in data.phy_config) { if (!config || !config.freq_list) continue; if (!freq_list) freq_list = [ ...config.freq_list ]; else push(freq_list, ...config.freq_list); } data.freq_list = freq_list; } function mld_update_iface(name, data) { if (!data.radio_mask_up) return; if (!data.radio_mask_present) { mld_remove(data); return; } let mask = data.radio_mask_up & ~data.radio_mask_present; if (!mask) return; mld_remove_links(data); } function mld_update_phy(phy, ifaces) { for (let name, data in wpas.data.mld) { if (data.phy != phy.name) continue; mld_set_iface_config(name, data, phy.radio, ifaces[name]); mld_update_iface(name, data); } } function mld_start() { if (wpas.data.mld_pending) return; wpas.printf(`Start pending MLD interfaces\n`); let phy_list = {}; for (let name, data in wpas.data.mld) { wpas.printf(`MLD interface ${name} present=${data.radio_mask_present} up=${data.radio_mask_up}`); let add_mask = data.radio_mask_present & ~data.radio_mask_up; if (!add_mask) continue; if (!data.radio_mask_up) mld_add(data, phy_list); else mld_add_links(data); } } function mld_bss_allowed(data, bss) { if (!data.freq_list) return true; return index(data.freq_list, bss.freq) >= 0; } function set_config(config_name, phy_name, radio, num_global_macaddr, macaddr_base, config_list) { let phy = wpas.data.config[config_name]; if (radio < 0) radio = null; if (!phy) { phy = vlist_new(iface_cb, false); phy.name = phy_name; wpas.data.config[config_name] = phy; } phy.radio = radio; phy.num_global_macaddr = num_global_macaddr; phy.macaddr_base = macaddr_base; let values = []; let mlo_ifaces = {}; for (let config in config_list) if (config.mlo) mlo_ifaces[config.iface] = config; else push(values, [ config.iface, prepare_config(config) ]); mld_update_phy(phy, mlo_ifaces); phy.update(values); } function iface_status_fill_radio_link(mld, radio, msg, link) { let config = mld.phy_config[radio]; if (!config) return; let freq_list = config.freq_list; if (!freq_list) return; if (!link || index(freq_list, link.frequency) < 0) return; msg.frequency = link.frequency; msg.sec_chan_offset = link.sec_chan_offset; } function iface_status_fill_radio(mld, radio, msg, status) { if (status.links) for (let link in status.links) iface_status_fill_radio_link(mld, radio, msg, link); else iface_status_fill_radio_link(mld, radio, msg, status); } let main_obj = { phy_set_state: { args: { phy: "", radio: 0, stop: true, }, call: function(req) { let name = phy_name(req.args.phy, req.args.radio); if (!name || req.args.stop == null) return libubus.STATUS_INVALID_ARGUMENT; let phy = wpas.data.config[name]; if (!phy) return libubus.STATUS_NOT_FOUND; let radio_mask = phy.radio != null ? (1 << phy.radio) : 0; if (req.args.stop) { for (let ifname in phy.data) iface_stop(phy.data[ifname]); for (let name, data in wpas.data.mld) { data.radio_mask_present &= ~radio_mask; if (data.radio_mask_up & radio_mask) mld_update_iface(name, data); } } else { start_pending(name); let found; for (let name, data in wpas.data.mld) { if (!(data.radio_mask & radio_mask)) continue; data.radio_mask_present |= radio_mask; found = true; } if (found) mld_start(); } return 0; } }, phy_set_macaddr_list: { args: { phy: "", radio: 0, macaddr: [], }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; wpas.data.macaddr_list[phy] = req.args.macaddr; return 0; } }, phy_status: { args: { phy: "", radio: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; phy = wpas.data.config[phy]; if (!phy) return libubus.STATUS_NOT_FOUND; let ifnames = keys(phy.data); let radio_mask = phy.radio != null ? (1 << phy.radio) : 0; for (let name, data in wpas.data.mld) if (data.radio_mask_up & radio_mask) push(ifnames, name); for (let ifname in ifnames) { try { let iface = wpas.interfaces[ifname]; if (!iface) continue; let status = iface.status(); if (!status) continue; if (status.state == "INTERFACE_DISABLED") continue; if (phy.data[ifname]) { status.ifname = ifname; return status; } let ret = { ifname, state: status.state, }; let mld = wpas.data.mld[ifname]; iface_status_fill_radio(mld, phy.radio, ret, status); return ret; } catch (e) { ex_handler(e); continue; } } return libubus.STATUS_NOT_FOUND; } }, iface_status: { args: { name: "" }, call: function(req) { let iface = wpas.interfaces[req.args.name]; if (!iface) return libubus.STATUS_NOT_FOUND; return iface.status(); }, }, mld_set: { args: { config: {} }, call: function(req) { if (!req.args.config) return libubus.STATUS_INVALID_ARGUMENT; wpas.data.mld_pending = true; mld_set_config(req.args.config); return 0; } }, mld_start: { args: {}, call: function(req) { wpas.data.mld_pending = false; mld_start(); return 0; } }, config_set: { args: { phy: "", radio: 0, num_global_macaddr: 0, macaddr_base: "", config: [], defer: true, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; wpas.printf(`Set new config for phy ${phy}`); if (req.args.config) set_config(phy, req.args.phy, req.args.radio, req.args.num_global_macaddr, req.args.macaddr_base, req.args.config); if (!req.args.defer) uloop.timer(100, () => start_pending(phy)); return { pid: wpas.getpid() }; } }, config_add: { args: { driver: "", iface: "", bridge: "", hostapd_ctrl: "", ctrl: "", config: "", }, call: function(req) { if (!req.args.iface || !req.args.config) return libubus.STATUS_INVALID_ARGUMENT; if (wpas.add_iface(req.args) < 0) return libubus.STATUS_INVALID_ARGUMENT; return { pid: wpas.getpid() }; } }, config_remove: { args: { iface: "" }, call: function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; wpas.remove_iface(req.args.iface); return 0; } }, bss_info: { args: { iface: "", }, call: function(req) { let ifname = req.args.iface; if (!ifname) return libubus.STATUS_INVALID_ARGUMENT; let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; let status = iface.ctrl("STATUS"); if (!status) return libubus.STATUS_NOT_FOUND; let ret = {}; status = split(status, "\n"); for (let line in status) { line = split(line, "=", 2); ret[line[0]] = line[1]; } return ret; } }, }; wpas.data.ubus = ubus; wpas.data.obj = ubus.publish("wpa_supplicant", main_obj); wpas.udebug_set("wpa_supplicant", wpas.data.ubus); function iface_event(type, name, data) { let ubus = wpas.data.ubus; data ??= {}; data.name = name; let req = wpas.data.obj.notify(`iface.${type}`, data, null, null, null, -1); if (req) req.abort(); ubus.call("service", "event", { type: `wpa_supplicant.${name}.${type}`, data: {} }); } function iface_hostapd_notify(ifname, iface, state) { let status = iface.status(); let ubus = wpas.data.ubus; let msg = {}; let mld = wpas.data.mld[ifname]; switch (state) { case "DISCONNECTED": case "AUTHENTICATING": case "SCANNING": msg.up = false; break; case "INTERFACE_DISABLED": case "INACTIVE": msg.up = true; break; case "COMPLETED": msg.up = true; if (!mld) { msg.frequency = status.frequency; msg.sec_chan_offset = status.sec_chan_offset; } break; default: return; } if (!mld) { msg.phy = wpas.data.iface_phy[ifname]; if (!msg.phy) { wpas.printf(`no PHY for ifname ${ifname}`); return; } ubus.call("hostapd", "apsta_state", msg); return; } let radio_mask = mld.radio_mask; for (let i = 0; radio_mask; i++, radio_mask >>= 1) { if (!(radio_mask & 1)) { wpas.printf(`skip radio ${i}`); continue; } let radio_msg = { ...msg, phy: mld.phy, radio: i, }; if (state == "COMPLETED") iface_status_fill_radio(mld, i, radio_msg, status); ubus.call("hostapd", "apsta_state", radio_msg); } } function iface_channel_switch(ifname, iface, info) { let msg = { up: true, csa: true, csa_count: info.csa_count ? info.csa_count - 1 : 0, frequency: info.frequency, sec_chan_offset: info.sec_chan_offset, }; let mld = wpas.data.mld[ifname]; if (mld) { msg.phy = mld.phy; msg.radio = mld_radio_index(mld, info.frequency); if (msg.radio == null) { wpas.printf(`PHY ${mld.phy} radio for frequency ${info.frequency} not found`); return; } } else { msg.phy = wpas.data.iface_phy[ifname]; if (!msg.phy) { wpas.printf(`no PHY for ifname ${ifname}`); return; } } ubus.call("hostapd", "apsta_state", msg); } function iface_ubus_remove(ifname) { let obj = wpas.data.iface_ubus[ifname]; if (!obj) return; obj.remove(); delete wpas.data.iface_ubus[ifname]; } function iface_ubus_notify(ifname, event) { let obj = wpas.data.iface_ubus[ifname]; if (!obj) return; obj.notify('ctrl-event', { event }, null, null, null, -1); } function iface_ubus_add(ifname) { let ubus = wpas.data.ubus; iface_ubus_remove(ifname); let obj = ubus.publish(`wpa_supplicant.${ifname}`, { reload: { args: {}, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; iface.ctrl("RECONFIGURE"); return 0; }, }, wps_start: { args: { multi_ap: true }, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; iface.ctrl(`WPS_PBC multi_ap=${+req.args.multi_ap}`); return 0; }, }, wps_cancel: { args: {}, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; iface.ctrl("WPS_CANCEL"); return 0; }, }, control: { args: { command: "" }, call: (req) => { let iface = wpas.interfaces[ifname]; if (!iface) return libubus.STATUS_NOT_FOUND; return { result: iface.ctrl(req.args.command) }; }, }, }); wpas.data.iface_ubus[ifname] = obj; } return { shutdown: function() { for (let phy in wpas.data.config) set_config(phy, []); wpas.ubus.disconnect(); }, bss_allowed: function(ifname, bss) { let mld = wpas.data.mld[ifname]; if (!mld) return true; return mld_bss_allowed(mld, bss); }, iface_add: function(name, obj) { iface_ubus_add(name); iface_event("add", name); }, iface_remove: function(name, obj) { iface_event("remove", name); iface_ubus_remove(name); }, ctrl_event: function(name, iface, ev) { iface_ubus_notify(name, ev); }, state: function(ifname, iface, state) { let event_data = iface.status(); event_data.name = ifname; iface_event("state", ifname, event_data); try { iface_hostapd_notify(ifname, iface, state); if (state != "COMPLETED") return; let phy = wpas.data.iface_phy[ifname]; if (!phy) return; let phy_data = wpas.data.config[phy]; if (!phy_data) return; let iface_data = phy_data.data[ifname]; if (!iface_data) return; let wdev_config = iface_data.config; if (!wdev_config || wdev_config.mode != "mesh") return; wdev_set_mesh_params(ifname, wdev_config); } catch (e) { ex_handler(e); } }, event: function(ifname, iface, ev, info) { if (ev == "CH_SWITCH_STARTED") iface_channel_switch(ifname, iface, info); }, wps_credentials: function(ifname, iface, cred) { cred.ifname = ifname; ubus.event("wps_credentials", cred); } }; 07070100EA55BC000081A400000000000000000000000169F91E15000010B5000000080000000100000000000000000000001900000000usr/share/hostap/wdev.uc#!/usr/bin/env ucode 'use strict'; import { vlist_new, is_equal, wdev_set_mesh_params, wdev_remove, wdev_set_up, phy_open } from "/usr/share/hostap/common.uc"; import { readfile, writefile, basename, readlink, glob } from "fs"; let libubus = require("ubus"); let keep_devices = {}; let phy_name = shift(ARGV); let command = shift(ARGV); let phy, phydev; function iface_stop(wdev) { if (keep_devices[wdev.ifname]) return; wdev_remove(wdev.ifname); } function iface_start(wdev) { let ifname = wdev.ifname; if (readfile(`/sys/class/net/${ifname}/ifindex`)) { wdev_set_up(ifname, false); wdev_remove(ifname); } let wdev_config = {}; for (let key in wdev) wdev_config[key] = wdev[key]; if (!wdev_config.macaddr && wdev.mode != "monitor") wdev_config.macaddr = phydev.macaddr_next(); phydev.wdev_add(ifname, wdev_config); wdev_set_up(ifname, true); let htmode = wdev.htmode || "NOHT"; if (wdev.freq) system(`iw dev ${ifname} set freq ${wdev.freq} ${htmode}`); if (wdev.mode == "adhoc") { let cmd = ["iw", "dev", ifname, "ibss", "join", wdev.ssid, wdev.freq, htmode, "fixed-freq" ]; if (wdev.bssid) push(cmd, wdev.bssid); for (let key in [ "beacon-interval", "basic-rates", "mcast-rate", "keys" ]) if (wdev[key]) push(cmd, key, wdev[key]); system(cmd); } else if (wdev.mode == "mesh") { let cmd = [ "iw", "dev", ifname, "mesh", "join", wdev.ssid ]; if (wdev.freq) { push(cmd, "freq", wdev.freq); if (htmode && htmode != "NOHT") push(cmd, htmode); } for (let key in [ "basic-rates", "mcast-rate", "beacon-interval" ]) if (wdev[key]) push(cmd, key, wdev[key]); system(cmd); wdev_set_mesh_params(ifname, wdev); } } function iface_cb(new_if, old_if) { if (old_if && new_if && is_equal(old_if, new_if)) return; if (old_if) iface_stop(old_if); if (new_if) iface_start(new_if); } function drop_inactive(config) { for (let key in config) { if (!readfile(`/sys/class/net/${key}/ifindex`)) delete config[key]; } } function add_ifname(config) { for (let key in config) config[key].ifname = key; } function delete_ifname(config) { for (let key in config) delete config[key].ifname; } function add_existing(phydev, config) { phydev.for_each_wdev((wdev) => { if (config[wdev]) return; if (trim(readfile(`/sys/class/net/${wdev}/operstate`)) == "down") config[wdev] = {}; }); } function usage() { warn(`Usage: ${basename(sourcepath())} [] Commands: set_config [ - get phy MAC address for vif index `); exit(1); } const commands = { set_config: function(args) { let statefile = `/var/run/wdev-${phy_name}.json`; let new_config = shift(args); for (let dev in ARGV) keep_devices[dev] = true; if (!new_config) usage(); new_config = json(new_config); if (!new_config) { warn("Invalid configuration\n"); exit(1); } let old_config = readfile(statefile); if (old_config) old_config = json(old_config); let config = vlist_new(iface_cb); if (type(old_config) == "object") config.data = old_config; add_existing(phydev, config.data); add_ifname(config.data); drop_inactive(config.data); let ubus = libubus.connect(); let data = ubus.call("hostapd", "config_get_macaddr_list", { phy: phydev.name, radio: phydev.radio ?? -1 }); let macaddr_list = []; if (type(data) == "object" && data.macaddr) macaddr_list = data.macaddr; ubus.disconnect(); phydev.macaddr_init(macaddr_list); add_ifname(new_config); config.update(new_config); drop_inactive(config.data); delete_ifname(config.data); writefile(statefile, sprintf("%J", config.data)); }, get_macaddr: function(args) { let data = {}; for (let arg in args) { arg = split(arg, "=", 2); data[arg[0]] = arg[1]; } let macaddr = phydev.macaddr_generate(data); if (!macaddr) { warn(`Could not get MAC address for phy ${phy_name}\n`); exit(1); } print(macaddr + "\n"); }, }; if (!phy_name || !command | !commands[command]) usage(); let phy_split = split(phy_name, ":"); phydev = phy_open(phy_split[0], phy_split[1]); phy = phydev.phy; if (!phydev) { warn(`PHY ${phy_name} does not exist\n`); exit(1); } commands[command](ARGV); 07070100EA57A8000081A400000000000000000000000169F91E1500007AE5000000080000000100000000000000000000001C00000000usr/share/hostap/hostapd.uclet libubus = require("ubus"); import { open, readfile, access } from "fs"; import { wdev_remove, is_equal, vlist_new, phy_is_fullmac, phy_open, wdev_set_radio_mask, wdev_set_up } from "common"; let ubus = libubus.connect(null, 60); function ex_handler(e) { e = split(`${e}\n${e.stacktrace[0].context}`, '\n'); for (let line in e) hostapd.printf(line); return libubus.STATUS_UNKNOWN_ERROR; } libubus.guard(ex_handler); hostapd.data.config = {}; hostapd.data.pending_config = {}; hostapd.data.file_fields = { vlan_file: true, wpa_psk_file: true, sae_password_file: true, rxkh_file: true, accept_mac_file: true, deny_mac_file: true, eap_user_file: true, ca_cert: true, server_cert: true, server_cert2: true, private_key: true, private_key2: true, dh_file: true, eap_sim_db: true, }; hostapd.data.iface_fields = { ft_iface: true, upnp_iface: true, snoop_iface: true, bridge: true, iapp_interface: true, }; hostapd.data.bss_info_fields = { // radio hw_mode: true, channel: true, ieee80211ac: true, ieee80211ax: true, // bss bssid: true, ssid: true, wpa: true, wpa_key_mgmt: true, wpa_pairwise: true, auth_algs: true, ieee80211w: true, owe_transition_ifname: true, }; hostapd.data.mld = {}; function iface_remove(cfg) { if (!cfg || !cfg.bss || !cfg.bss[0] || !cfg.bss[0].ifname) return; for (let bss in cfg.bss) if (!bss.mld_ap) wdev_remove(bss.ifname); } function iface_gen_config(config, start_disabled) { let str = `data: ${join("\n", config.radio.data)} channel=${config.radio.channel} `; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; let type = i > 0 ? "bss" : "interface"; let nasid = bss.nasid ?? replace(bss.bssid, ":", ""); let bssid = bss.bssid; if (bss.mld_ap) bssid += "\nmld_addr=" + bss.mld_bssid; str += ` ${type}=${bss.ifname} bssid=${bssid} ${join("\n", bss.data)} nas_identifier=${nasid} `; if (start_disabled) str += ` start_disabled=1 `; } return str; } function iface_freq_info(iface, config, params) { let freq = params.frequency; if (!freq) return null; let sec_offset = params.sec_chan_offset; if (sec_offset != -1 && sec_offset != 1) sec_offset = 0; let width = 0; for (let line in config.radio.data) { if (!sec_offset && match(line, /^ht_capab=.*HT40/)) { sec_offset = null; // auto-detect continue; } let val = match(line, /^(vht_oper_chwidth|he_oper_chwidth)=(\d+)/); if (!val) continue; val = int(val[2]); if (val > width) width = val; } if (freq < 4000) width = 0; return hostapd.freq_info(freq, sec_offset, width); } function iface_add(phy, config, phy_status) { let config_inline = iface_gen_config(config, !!phy_status); let bss = config.bss[0]; let ret = hostapd.add_iface(`bss_config=${phy}:${config_inline}`); if (ret < 0) return false; if (!phy_status) return true; let iface = hostapd.interfaces[phy]; if (!iface) return false; let freq_info = iface_freq_info(iface, config, phy_status); return iface.start(freq_info) >= 0; } function iface_config_macaddr_list(config) { let macaddr_list = {}; for (let name, mld in hostapd.data.mld) if (mld.macaddr) macaddr_list[mld.macaddr] = -1; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (!bss.default_macaddr) macaddr_list[bss.bssid] = i; } return macaddr_list; } function iface_update_supplicant_macaddr(phydev, config) { let macaddr_list = []; for (let name, mld in hostapd.data.mld) if (mld.macaddr) push(macaddr_list, mld.macaddr); for (let bss in config.bss) push(macaddr_list, bss.bssid); ubus.defer("wpa_supplicant", "phy_set_macaddr_list", { phy: phydev.phy, radio: phydev.radio ?? -1, macaddr: macaddr_list }); } function __iface_pending_next(pending, state, ret, data) { let config = pending.config; let phydev = pending.phydev; let phy = pending.phy; let bss = config.bss[0]; if (pending.defer) pending.defer.abort(); delete pending.defer; switch (state) { case "init": iface_update_supplicant_macaddr(phydev, config); return "create_bss"; case "create_bss": if (!bss.mld_ap) { let err = phydev.wdev_add(bss.ifname, { mode: "ap", radio: phydev.radio, }); if (err) { hostapd.printf(`Failed to create ${bss.ifname} on phy ${phy}: ${err}`); return null; } } pending.call("wpa_supplicant", "phy_status", { phy: phydev.phy, radio: phydev.radio ?? -1, }); return "check_phy"; case "check_phy": let phy_status = data; if (phy_status && phy_status.state == "COMPLETED") { if (iface_add(phy, config, phy_status)) return "done"; hostapd.printf(`Failed to bring up phy ${phy} ifname=${bss.ifname} with supplicant provided frequency`); } pending.call("wpa_supplicant", "phy_set_state", { phy: phydev.phy, radio: phydev.radio ?? -1, stop: true }); return "wpas_stopped"; case "wpas_stopped": if (!iface_add(phy, config)) hostapd.printf(`hostapd.add_iface failed for phy ${phy} ifname=${bss.ifname}`); pending.call("wpa_supplicant", "phy_set_state", { phy: phydev.phy, radio: phydev.radio ?? -1, stop: false }); return null; case "done": default: delete hostapd.data.pending_config[phy]; break; } } function iface_pending_next(ret, data) { let pending = true; let cfg = this; while (pending) { try { this.next_state = __iface_pending_next(cfg, this.next_state, ret, data); if (!this.next_state) { __iface_pending_next(cfg, "done"); return; } } catch(e) { hostapd.printf(`Exception: ${e}\n${e.stacktrace[0].context}`); return; } pending = !this.defer; } } function iface_pending_abort() { this.next_state = "done"; this.next(); } function iface_pending_ubus_call(obj, method, arg) { let ubus = hostapd.data.ubus; let pending = this; this.defer = ubus.defer(obj, method, arg, (ret, data) => { delete pending.defer; pending.next(ret, data) }); } const iface_pending_proto = { next: iface_pending_next, call: iface_pending_ubus_call, abort: iface_pending_abort, }; function iface_pending_init(phydev, config) { let phy = phydev.name; let pending = proto({ next_state: "init", phydev: phydev, phy: phy, config: config, next: iface_pending_next, }, iface_pending_proto); hostapd.data.pending_config[phy] = pending; pending.next(); } function iface_macaddr_init(phydev, config, macaddr_list) { let macaddr_data = { num_global: config.num_global_macaddr ?? 1, macaddr_base: config.macaddr_base, mbssid: config.mbssid ?? 0, }; return phydev.macaddr_init(macaddr_list, macaddr_data); } function iface_restart(phydev, config, old_config) { let phy = phydev.name; let pending = hostapd.data.pending_config[phy]; if (pending) pending.abort(); hostapd.remove_iface(phy); iface_remove(old_config); iface_remove(config); if (!config.bss || !config.bss[0]) { hostapd.printf(`No bss for phy ${phy}`); return; } iface_macaddr_init(phydev, config, iface_config_macaddr_list(config)); for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (bss.default_macaddr) bss.bssid = phydev.macaddr_next(); } iface_pending_init(phydev, config); } function array_to_obj(arr, key, start) { let obj = {}; start ??= 0; for (let i = start; i < length(arr); i++) { let cur = arr[i]; obj[cur[key]] = cur; } return obj; } function find_array_idx(arr, key, val) { for (let i = 0; i < length(arr); i++) if (arr[i][key] == val) return i; return -1; } function bss_reload_psk(bss, config, old_config) { if (is_equal(old_config.hash.wpa_psk_file, config.hash.wpa_psk_file)) return; old_config.hash.wpa_psk_file = config.hash.wpa_psk_file; if (!is_equal(old_config, config)) return; let ret = bss.ctrl("RELOAD_WPA_PSK"); ret ??= "failed"; hostapd.printf(`Reload WPA PSK file for bss ${config.ifname}: ${ret}`); } function normalize_rxkhs(txt) { const pat = { sep: "\x20", mac: "([[:xdigit:]]{2}:?){5}[[:xdigit:]]{2}", r0kh_id: "[\x21-\x7e]{1,48}", r1kh_id: "([[:xdigit:]]{2}:?){5}[[:xdigit:]]{2}", key: "[[:xdigit:]]{32,}", r0kh: function() { return "r0kh=" + this.mac + this.sep + this.r0kh_id; }, r1kh: function() { return "r1kh=" + this.mac + this.sep + this.r1kh_id; }, rxkh: function() { return "(" + this.r0kh() + "|" + this.r1kh() + ")" + this.sep + this.key; }, }; let rxkhs = filter( split(txt, "\n"), (line) => match(line, regexp("^" + pat.rxkh() + "$")) ) ?? []; rxkhs = map(rxkhs, function(k) { k = split(k, " ", 3); k[0] = lc(k[0]); if(match(k[0], /^r1kh/)) { k[1] = lc(k[1]); } if(!k[2] = hostapd.rkh_derive_key(k[2])) { return; } return join(" ", k); }); return join("\n", sort(filter(rxkhs, length))); } function bss_reload_rxkhs(bss, config, old_config) { let bss_rxkhs = join("\n", sort(split(bss.ctrl("GET_RXKHS"), "\n"))); let bss_rxkhs_hash = hostapd.sha1(bss_rxkhs); if (is_equal(config.hash.rxkh_file, bss_rxkhs_hash)) { if (is_equal(old_config.hash.rxkh_file, config.hash.rxkh_file)) return; } old_config.hash.rxkh_file = config.hash.rxkh_file; if (!is_equal(old_config, config)) return; let ret = bss.ctrl("RELOAD_RXKHS"); ret ??= "failed"; hostapd.printf(`Reload RxKH file for bss ${config.ifname}: ${ret}`); } function remove_file_fields(config) { return filter(config, (line) => !match(line, /^\s*$/) && !match(line, /^\s*#/) && !hostapd.data.file_fields[split(line, "=")[0]] ); } function bss_remove_file_fields(config) { let new_cfg = {}; for (let key in config) new_cfg[key] = config[key]; new_cfg.data = remove_file_fields(new_cfg.data); new_cfg.hash = {}; for (let key in config.hash) new_cfg.hash[key] = config.hash[key]; delete new_cfg.hash.wpa_psk_file; delete new_cfg.hash.sae_password_file; delete new_cfg.hash.vlan_file; return new_cfg; } function bss_ifindex_list(config) { config = filter(config, (line) => !!hostapd.data.iface_fields[split(line, "=")[0]]); return join(",", map(config, (line) => { try { let file = "/sys/class/net/" + split(line, "=")[1] + "/ifindex"; let val = trim(readfile(file)); return val; } catch (e) { return ""; } })); } function bss_config_hash(config) { return hostapd.sha1(remove_file_fields(config) + bss_ifindex_list(config)); } function bss_find_existing(config, prev_config, prev_hash) { let hash = bss_config_hash(config.data); for (let i = 0; i < length(prev_config.bss); i++) { if (!prev_hash[i] || hash != prev_hash[i]) continue; prev_hash[i] = null; return i; } return -1; } function get_config_bss(name, config, idx) { if (!config.bss[idx]) { hostapd.printf(`Invalid bss index ${idx}`); return; } let ifname = config.bss[idx].ifname; if (!ifname) { hostapd.printf(`Could not find bss ${config.bss[idx].ifname}`); return; } let if_bss = hostapd.bss[name]; if (!if_bss) { hostapd.printf(`Could not find interface ${name} bss list`); return; } return if_bss[ifname]; } function iface_reload_config(name, phydev, config, old_config) { let phy = phydev.name; if (!old_config || !is_equal(old_config.radio, config.radio)) return false; if (is_equal(old_config.bss, config.bss)) return true; if (hostapd.data.pending_config[name]) return false; if (!old_config.bss || !old_config.bss[0]) return false; let iface = hostapd.interfaces[name]; let iface_name = old_config.bss[0].ifname; if (!iface) { hostapd.printf(`Could not find previous interface ${iface_name}`); return false; } if (iface.state() != "ENABLED") { hostapd.printf(`Interface ${iface_name} is not fully configured`); return false; } let first_bss = get_config_bss(name, old_config, 0); if (!first_bss) { hostapd.printf(`Could not find bss of previous interface ${iface_name}`); return false; } let macaddr_list = iface_config_macaddr_list(config); let bss_list = []; let bss_list_cfg = []; let prev_bss_hash = []; for (let bss in old_config.bss) { let hash = bss_config_hash(bss.data); push(prev_bss_hash, bss_config_hash(bss.data)); } // Step 1: find (possibly renamed) interfaces with the same config // and store them in the new order (with gaps) for (let i = 0; i < length(config.bss); i++) { let prev; // For fullmac devices, the first interface needs to be preserved, // since it's treated as the master if (!i && phy_is_fullmac(phy)) { prev = 0; prev_bss_hash[0] = null; } else { prev = bss_find_existing(config.bss[i], old_config, prev_bss_hash); } if (prev < 0) continue; let cur_config = config.bss[i]; let prev_config = old_config.bss[prev]; if (prev_config.force_reload) { delete prev_config.force_reload; continue; } let prev_bss = get_config_bss(name, old_config, prev); if (!prev_bss) return false; // try to preserve MAC address of this BSS by reassigning another // BSS if necessary if ((cur_config.default_macaddr || cur_config.random_macaddr) && cur_config.random_macaddr == prev_config.random_macaddr && cur_config.default_macaddr == prev_config.default_macaddr && !macaddr_list[prev_config.bssid]) { macaddr_list[prev_config.bssid] = i; cur_config.bssid = prev_config.bssid; } bss_list[i] = prev_bss; bss_list_cfg[i] = old_config.bss[prev]; } if (config.mbssid && !bss_list_cfg[0]) { hostapd.printf("First BSS changed with MBSSID enabled"); return false; } // Step 2: if none were found, rename and preserve the first one if (length(bss_list) == 0) { // can't change the bssid of the first bss if (config.bss[0].bssid != old_config.bss[0].bssid) { if (!config.bss[0].default_macaddr) { hostapd.printf(`BSSID of first interface changed: ${lc(old_config.bss[0].bssid)} -> ${lc(config.bss[0].bssid)}`); return false; } config.bss[0].bssid = old_config.bss[0].bssid; } let prev_bss = get_config_bss(name, old_config, 0); if (!prev_bss) return false; macaddr_list[config.bss[0].bssid] = 0; bss_list[0] = prev_bss; bss_list_cfg[0] = old_config.bss[0]; prev_bss_hash[0] = null; } // Step 3: delete all unused old interfaces for (let i = 0; i < length(prev_bss_hash); i++) { if (!prev_bss_hash[i]) continue; let prev_bss = get_config_bss(name, old_config, i); if (!prev_bss) return false; let ifname = old_config.bss[i].ifname; hostapd.printf(`Remove bss '${ifname}' on phy '${name}'`); prev_bss.delete(); if (!old_config.bss[i].mld_ap) wdev_remove(ifname); } // Step 4: rename preserved interfaces, use temporary name on duplicates let rename_list = []; for (let i = 0; i < length(bss_list); i++) { if (!bss_list[i]) continue; let old_ifname = bss_list_cfg[i].ifname; let new_ifname = config.bss[i].ifname; if (old_ifname == new_ifname) continue; if (hostapd.bss[name][new_ifname]) { new_ifname = "tmp_" + substr(hostapd.sha1(new_ifname), 0, 8); push(rename_list, i); } hostapd.printf(`Rename bss ${old_ifname} to ${new_ifname}`); if (!bss_list[i].rename(new_ifname)) { hostapd.printf(`Failed to rename bss ${old_ifname} to ${new_ifname}`); return false; } bss_list_cfg[i].ifname = new_ifname; } // Step 5: rename interfaces with temporary names for (let i in rename_list) { let new_ifname = config.bss[i].ifname; if (!bss_list[i].rename(new_ifname)) { hostapd.printf(`Failed to rename bss to ${new_ifname}`); return false; } bss_list_cfg[i].ifname = new_ifname; } // Step 6: assign BSSID for newly created interfaces macaddr_list = iface_macaddr_init(phydev, config, macaddr_list); for (let i = 0; i < length(config.bss); i++) { if (bss_list[i]) continue; let bsscfg = config.bss[i]; let mac_idx = macaddr_list[bsscfg.bssid]; if (mac_idx < 0) macaddr_list[bsscfg.bssid] = i; if (mac_idx == i) continue; // statically assigned bssid of the new interface is in conflict // with the bssid of a reused interface. reassign the reused interface if (!bsscfg.default_macaddr) { // can't update bssid of the first BSS, need to restart if (!mac_idx < 0) return false; bsscfg = config.bss[mac_idx]; } let addr = phydev.macaddr_next(i); if (!addr) { hostapd.printf(`Failed to generate mac address for phy ${name}`); return false; } bsscfg.bssid = addr; } let config_inline = iface_gen_config(config); // Step 7: fill in the gaps with new interfaces for (let i = 0; i < length(config.bss); i++) { let ifname = config.bss[i].ifname; let bss = bss_list[i]; if (bss) continue; hostapd.printf(`Add bss ${ifname} on phy ${name}`); bss_list[i] = iface.add_bss(config_inline, i); if (!bss_list[i]) { hostapd.printf(`Failed to add new bss ${ifname} on phy ${name}`); return false; } } // Step 8: update interface bss order if (!iface.set_bss_order(bss_list)) { hostapd.printf(`Failed to update BSS order on phy '${name}'`); return false; } // Step 9: update config for (let i = 0; i < length(config.bss); i++) { if (!bss_list_cfg[i]) continue; let ifname = config.bss[i].ifname; let bss = bss_list[i]; if (is_equal(config.bss[i], bss_list_cfg[i])) continue; if (is_equal(bss_remove_file_fields(config.bss[i]), bss_remove_file_fields(bss_list_cfg[i]))) { hostapd.printf(`Update config data files for bss ${ifname}`); if (bss.set_config(config_inline, i, true) < 0) { hostapd.printf(`Could not update config data files for bss ${ifname}`); return false; } else { bss.ctrl("RELOAD_WPA_PSK"); continue; } } bss_reload_psk(bss, config.bss[i], bss_list_cfg[i]); bss_reload_rxkhs(bss, config.bss[i], bss_list_cfg[i]); if (is_equal(config.bss[i], bss_list_cfg[i])) continue; hostapd.printf(`Reload config for bss '${config.bss[0].ifname}' on phy '${name}'`); if (bss.set_config(config_inline, i) < 0) { hostapd.printf(`Failed to set config for bss ${ifname}`); return false; } } return true; } function bss_check_mld(phydev, iface_name, bss) { if (!bss.ifname) return; let mld_data = hostapd.data.mld[bss.ifname]; if (!mld_data || !mld_data.ifname || !mld_data.macaddr) return; bss.mld_bssid = mld_data.macaddr; mld_data.iface[iface_name] = true; if (!access('/sys/class/net/' + bss.ifname, 'x')) mld_data.has_wdev = false; if (mld_data.has_wdev) return true; hostapd.printf(`Create MLD interface ${bss.ifname} on phy ${phydev.name}, radio mask: ${mld_data.radio_mask}`); let err = phydev.wdev_add(bss.ifname, { mode: "ap", macaddr: mld_data.macaddr, radio_mask: mld_data.radio_mask, }); wdev_set_up(bss.ifname, true); if (err) { hostapd.printf(`Failed to create MLD ${bss.ifname} on phy ${phydev.name}: ${err}`); delete mld_data.iface[iface_name]; return; } mld_data.has_wdev = true; return true; } function iface_check_mld(phydev, name, config) { phydev = phy_open(phydev.phy); for (let mld_name, mld_data in hostapd.data.mld) delete mld_data.iface[name]; for (let i = 0; i < length(config.bss); i++) { let bss = config.bss[i]; if (!bss.mld_ap) continue; if (!bss_check_mld(phydev, name, bss)) { hostapd.printf(`Skip MLD interface ${name} on phy ${phydev.name}`); splice(config.bss, i--, 1); } } for (let mld_name, mld_data in hostapd.data.mld) { if (length(mld_data.iface) > 0) continue; hostapd.printf(`Remove MLD interface ${mld_name}`); wdev_remove(mld_name); delete mld_data.has_wdev; } } function iface_config_remove(name, old_config) { hostapd.remove_iface(name); return iface_remove(old_config); } function iface_set_config(name, config) { let old_config = hostapd.data.config[name]; hostapd.data.config[name] = config; let phy = config.phy; let phydev = phy_open(phy, config.radio_idx); if (!phydev) { hostapd.printf(`Failed to open phy ${phy}`); return false; } config.orig_bss = [ ...config.bss ]; iface_check_mld(phydev, name, config); if (!length(config.bss)) return iface_config_remove(name, old_config); try { let ret = iface_reload_config(name, phydev, config, old_config); if (ret) { iface_update_supplicant_macaddr(phydev, config); hostapd.printf(`Reloaded settings for phy ${name}`); return 0; } } catch (e) { hostapd.printf(`Error reloading config: ${e}\n${e.stacktrace[0].context}`); } hostapd.printf(`Restart interface for phy ${name}`); let ret = iface_restart(phydev, config, old_config); return ret; } function config_add_bss(config, name) { let bss = { ifname: name, data: [], hash: {} }; push(config.bss, bss); return bss; } function iface_load_config(phy, radio, filename) { if (radio < 0) radio = null; let config = { phy, radio_idx: radio, radio: { data: [] }, bss: [], orig_file: filename, }; let f = open(filename, "r"); if (!f) return config; let bss; let line; while ((line = rtrim(f.read("line"), "\n")) != null) { let val = split(line, "=", 2); if (!val[0]) continue; if (val[0] == "interface") { bss = config_add_bss(config, val[1]); break; } if (val[0] == "channel") { config.radio.channel = val[1]; continue; } if (val[0] == "#num_global_macaddr") config[substr(val[0], 1)] = int(val[1]); else if (val[0] == "#macaddr_base") config[substr(val[0], 1)] = val[1]; else if (val[0] == "mbssid") config[val[0]] = int(val[1]); push(config.radio.data, line); } while ((line = rtrim(f.read("line"), "\n")) != null) { if (line == "#default_macaddr") bss.default_macaddr = true; if (line == "#random_macaddr") bss.random_macaddr = true; let val = split(line, "=", 2); if (!val[0]) continue; if (val[0] == "bssid") { bss.bssid = lc(val[1]); continue; } if (val[0] == "nas_identifier") bss.nasid = val[1]; if (val[0] == "mld_ap") bss[val[0]] = int(val[1]); if (val[0] == "bss") { bss = config_add_bss(config, val[1]); continue; } if (hostapd.data.file_fields[val[0]]) { if (val[0] == "rxkh_file") { bss.hash[val[0]] = hostapd.sha1(normalize_rxkhs(readfile(val[1]))); } else { bss.hash[val[0]] = hostapd.sha1(readfile(val[1])); } } push(bss.data, line); } f.close(); return config; } function phy_name(phy, radio) { if (!phy) return null; if (radio != null && radio >= 0) phy += "." + radio; return phy; } function bss_config(bss_name) { for (let phy, config in hostapd.data.config) { if (!config) continue; for (let bss in config.bss) if (bss.ifname == bss_name) return [ config, bss ]; } } function mld_rename_bss(data, name) { if (data.ifname == name) return true; // TODO: handle rename gracefully return false; } function mld_add_bss(name, data, phy_list, i) { let config = data.config; if (!config.phy) return; hostapd.printf(`Add MLD interface ${name}`); wdev_remove(name); let phydev = phy_list[config.phy]; if (!phydev) { phydev = phy_open(config.phy, 0); if (!phydev) return; let macaddr_list = {}; let phy_config = hostapd.data.config[phy_name(config.phy, 0)]; if (phy_config) macaddr_list = iface_config_macaddr_list(phy_config); iface_macaddr_init(phydev, data.config, macaddr_list); phy_list[config.phy] = phydev; } data.macaddr = config.macaddr; if (!data.macaddr) { data.macaddr = phydev.macaddr_next(); data.default_macaddr = true; } let radio_mask = 0; for (let r in config.radios) if (r != null) radio_mask |= 1 << r; data.radio_mask = radio_mask; data.ifname = name; } function mld_find_matching_config(list, config) { for (let name, data in list) if (is_equal(data.config, config)) return name; } function mld_reload_interface(name) { let config = hostapd.data.config[name]; if (!config) return; config = { ...config }; config.bss = config.orig_bss; iface_set_config(name, config); } function mld_set_config(config) { let prev_mld = { ...hostapd.data.mld }; let new_mld = {}; let phy_list = {}; let new_config = !length(prev_mld); hostapd.printf(`Set MLD config: ${keys(config)}`); // find renamed/new interfaces for (let name, data in config) { let prev = mld_find_matching_config(prev_mld, data); if (prev) { let data = prev_mld[prev]; if (mld_rename_bss(data, name)) { new_mld[name] = data; delete prev_mld[prev]; continue; } } new_mld[name] = { config: data, iface: {}, }; } let reload_iface = {}; for (let name, data in prev_mld) { delete hostapd.data.mld[name]; if (!data.ifname) continue; for (let iface, bss_list in hostapd.bss) { if (!bss_list[name]) continue; reload_iface[iface] = true; } } for (let name in reload_iface) mld_reload_interface(name); for (let name, data in prev_mld) { if (data.ifname) hostapd.printf(`Remove MLD interface ${name}`); wdev_remove(name); } // add new interfaces hostapd.data.mld = new_mld; for (let name, data in new_mld) if (!data.ifname) mld_add_bss(name, data, phy_list); if (!new_config) return; hostapd.printf(`Reload all interfaces`); for (let name in hostapd.data.config) mld_reload_interface(name); } let main_obj = { reload: { args: { phy: "", radio: 0, }, call: function(req) { let phy_list = req.args.phy ? [ phy_name(req.args.phy, req.args.radio) ] : keys(hostapd.data.config); for (let phy_name in phy_list) { let phy = hostapd.data.config[phy_name]; let config = iface_load_config(phy.phy, phy.radio_idx, phy.orig_file); iface_set_config(phy_name, config); } return 0; } }, apsta_state: { args: { phy: "", radio: 0, up: true, frequency: 0, sec_chan_offset: 0, csa: true, csa_count: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (req.args.up == null || !phy) return libubus.STATUS_INVALID_ARGUMENT; let config = hostapd.data.config[phy]; if (!config || !config.bss || !config.bss[0] || !config.bss[0].ifname) return 0; let iface = hostapd.interfaces[phy]; if (!iface) return 0; if (!req.args.up) { iface.stop(); return 0; } let freq_info; if (req.args.frequency) { freq_info = iface_freq_info(iface, config, req.args); if (!freq_info) return libubus.STATUS_UNKNOWN_ERROR; if (req.args.csa) { freq_info.csa_count = req.args.csa_count ?? 10; let ret = iface.switch_channel(freq_info); if (!ret) return libubus.STATUS_UNKNOWN_ERROR; return 0; } } let ret = iface.start(freq_info); if (!ret) return libubus.STATUS_UNKNOWN_ERROR; return 0; } }, config_get_macaddr_list: { args: { phy: "", radio: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!phy) return libubus.STATUS_INVALID_ARGUMENT; let ret = { macaddr: [], }; let config = hostapd.data.config[phy]; if (!config) return ret; ret.macaddr = map(config.bss, (bss) => bss.bssid); return ret; } }, switch_channel: { args: { phy: "", radio: 0, csa_count: 0, sec_channel: 0, oper_chwidth: 0, frequency: 0, center_freq1: 0, center_freq2: 0, }, call: function(req) { let phy = phy_name(req.args.phy, req.args.radio); if (!req.args.frequency || !phy) return libubus.STATUS_INVALID_ARGUMENT; let iface = hostapd.interfaces[phy]; if (!iface) return libubus.STATUS_NOT_FOUND; req.args.csa_count ??= 10; let ret = iface.switch_channel(req.args); if (!ret) return libubus.STATUS_UNKNOWN_ERROR; return 0; }, }, mld_set: { args: { config: {} }, call: function(req) { if (!req.args.config) return libubus.STATUS_INVALID_ARGUMENT; mld_set_config(req.args.config); return { pid: hostapd.getpid() }; } }, config_reset: { args: { }, call: function(req) { for (let name in hostapd.data.config) iface_set_config(name); mld_set_config({}); return 0; } }, config_set: { args: { phy: "", radio: 0, config: "", prev_config: "", }, call: function(req) { let phy = req.args.phy; let radio = req.args.radio; let name = phy_name(phy, radio); let file = req.args.config; let prev_file = req.args.prev_config; if (!phy) return libubus.STATUS_INVALID_ARGUMENT; if (prev_file && !hostapd.data.config[name]) { let config = iface_load_config(phy, radio, prev_file); if (config) config.radio.data = []; hostapd.data.config[name] = config; } let config = iface_load_config(phy, radio, file); hostapd.printf(`Set new config for phy ${name}: ${file}`); iface_set_config(name, config); if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("reload", { phy, radio }); return { pid: hostapd.getpid() }; } }, config_add: { args: { iface: "", config: "", }, call: function(req) { if (!req.args.iface || !req.args.config) return libubus.STATUS_INVALID_ARGUMENT; if (hostapd.add_iface(`bss_config=${req.args.iface}:${req.args.config}`) < 0) return libubus.STATUS_INVALID_ARGUMENT; return { pid: hostapd.getpid() }; } }, config_remove: { args: { iface: "" }, call: function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; hostapd.remove_iface(req.args.iface); return 0; } }, bss_info: { args: { iface: "" }, call: function(req) { if (!req.args.iface) return libubus.STATUS_INVALID_ARGUMENT; let config = bss_config(req.args.iface); if (!config) return libubus.STATUS_NOT_FOUND; let bss = config[1]; config = config[0]; let ret = {}; for (let line in [ ...config.radio.data, ...bss.data ]) { let fields = split(line, "=", 2); let name = fields[0]; if (hostapd.data.bss_info_fields[name]) ret[name] = fields[1]; } return ret; } }, }; hostapd.data.ubus = ubus; hostapd.data.obj = ubus.publish("hostapd", main_obj); let auth_obj = {}; hostapd.data.auth_obj = ubus.publish("hostapd-auth", auth_obj); hostapd.udebug_set("hostapd", hostapd.data.ubus); function bss_event(type, name, data) { let ubus = hostapd.data.ubus; data ??= {}; data.name = name; hostapd.data.obj.notify(`bss.${type}`, data, null, null, null, -1); ubus.call("service", "event", { type: `hostapd.${name}.${type}`, data: {} }); } return { shutdown: function() { for (let phy in hostapd.data.config) iface_set_config(phy); hostapd.udebug_set(null); hostapd.ubus.disconnect(); }, bss_create: function(phy, name, obj) { phy = hostapd.data.config[phy]; if (!phy) return; if (phy.radio_idx != null && phy.radio_idx >= 0) wdev_set_radio_mask(name, 1 << phy.radio_idx); }, bss_add: function(phy, name, obj) { bss_event("add", name); }, bss_reload: function(phy, name, obj, reconf) { bss_event("reload", name, { reconf: reconf != 0 }); }, bss_remove: function(phy, name, obj) { bss_event("remove", name); }, sta_auth: function(iface, sta) { let msg = { iface, sta }; let ret = {}; let data_cb = (type, data) => { ret = { ...ret, ...data }; }; if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("sta_auth", msg, data_cb, null, null, 1000); return ret; }, sta_connected: function(iface, sta, data) { let msg = { iface, sta, ...data }; let ret = {}; let data_cb = (type, data) => { ret = { ...ret, ...data }; }; if (hostapd.data.auth_obj) hostapd.data.auth_obj.notify("sta_connected", msg, data_cb, null, null, 1000); return ret; }, }; 07070100EA55B7000081A400000000000000000000000169F91E15000024B3000000080000000100000000000000000000001B00000000usr/share/hostap/common.ucimport * as nl80211 from "nl80211"; import * as rtnl from "rtnl"; import { readfile, glob, basename, readlink, open } from "fs"; const iftypes = { ap: nl80211.const.NL80211_IFTYPE_AP, mesh: nl80211.const.NL80211_IFTYPE_MESH_POINT, sta: nl80211.const.NL80211_IFTYPE_STATION, adhoc: nl80211.const.NL80211_IFTYPE_ADHOC, monitor: nl80211.const.NL80211_IFTYPE_MONITOR, }; const mesh_params = { mesh_retry_timeout: "retry_timeout", mesh_confirm_timeout: "confirm_timeout", mesh_holding_timeout: "holding_timeout", mesh_max_peer_links: "max_peer_links", mesh_max_retries: "max_retries", mesh_ttl: "ttl", mesh_element_ttl: "element_ttl", mesh_auto_open_plinks: "auto_open_plinks", mesh_hwmp_max_preq_retries: "hwmp_max_preq_retries", mesh_path_refresh_time: "path_refresh_time", mesh_min_discovery_timeout: "min_discovery_timeout", mesh_hwmp_active_path_timeout: "hwmp_active_path_timeout", mesh_hwmp_preq_min_interval: "hwmp_preq_min_interval", mesh_hwmp_net_diameter_traversal_time: "hwmp_net_diam_trvs_time", mesh_hwmp_rootmode: "hwmp_rootmode", mesh_hwmp_rann_interval: "hwmp_rann_interval", mesh_gate_announcements: "gate_announcements", mesh_sync_offset_max_neighor: "sync_offset_max_neighbor", mesh_rssi_threshold: "rssi_threshold", mesh_hwmp_active_path_to_root_timeout: "hwmp_path_to_root_timeout", mesh_hwmp_root_interval: "hwmp_root_interval", mesh_hwmp_confirmation_interval: "hwmp_confirmation_interval", mesh_awake_window: "awake_window", mesh_plink_timeout: "plink_timeout", mesh_fwding: "forwarding", mesh_power_mode: "power_mode", mesh_nolearn: "nolearn" }; function wdev_remove(name) { nl80211.request(nl80211.const.NL80211_CMD_DEL_INTERFACE, 0, { dev: name }); } function __phy_is_fullmac(phyidx) { let data = nl80211.request(nl80211.const.NL80211_CMD_GET_WIPHY, 0, { wiphy: phyidx }); return !data.software_iftypes.monitor; } function phy_is_fullmac(phy) { let phyidx = int(trim(readfile(`/sys/class/ieee80211/${phy}/index`))); return __phy_is_fullmac(phyidx); } function find_reusable_wdev(phyidx) { if (!__phy_is_fullmac(phyidx)) return null; let data = nl80211.request( nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP, { wiphy: phyidx }); for (let res in data) if (trim(readfile(`/sys/class/net/${res.ifname}/operstate`)) == "down") return res.ifname; return null; } function wdev_set_radio_mask(name, mask) { nl80211.request(nl80211.const.NL80211_CMD_SET_INTERFACE, 0, { dev: name, vif_radio_mask: mask }); } function wdev_create(phy, name, data) { let phyidx = int(readfile(`/sys/class/ieee80211/${phy}/index`)); wdev_remove(name); if (!iftypes[data.mode]) return `Invalid mode: ${data.mode}`; let req = { wiphy: phyidx, ifname: name, iftype: iftypes[data.mode], }; if (data["4addr"]) req["4addr"] = data["4addr"]; if (data.macaddr) req.mac = data.macaddr; if (data.radio_mask > 0) req.vif_radio_mask = data.radio_mask; else if (data.radio != null && data.radio >= 0) req.vif_radio_mask = 1 << data.radio; nl80211.error(); let reuse_ifname = find_reusable_wdev(phyidx); if (reuse_ifname && (reuse_ifname == name || rtnl.request(rtnl.const.RTM_SETLINK, 0, { dev: reuse_ifname, ifname: name}) != false)) { req.dev = req.ifname; delete req.ifname; nl80211.request(nl80211.const.NL80211_CMD_SET_INTERFACE, 0, req); } else { nl80211.request( nl80211.const.NL80211_CMD_NEW_INTERFACE, nl80211.const.NLM_F_CREATE, req); } let error = nl80211.error(); if (error) return error; if (data.powersave != null) { nl80211.request(nl80211.const.NL80211_CMD_SET_POWER_SAVE, 0, { dev: name, ps_state: data.powersave ? 1 : 0}); } return null; } function wdev_set_mesh_params(name, data) { let mesh_cfg = {}; for (let key in mesh_params) { let val = data[key]; if (val == null) continue; mesh_cfg[mesh_params[key]] = int(val); } if (!length(mesh_cfg)) return null; nl80211.request(nl80211.const.NL80211_CMD_SET_MESH_CONFIG, 0, { dev: name, mesh_params: mesh_cfg }); return nl80211.error(); } function wdev_set_up(name, up) { rtnl.request(rtnl.const.RTM_SETLINK, 0, { dev: name, change: 1, flags: up ? 1 : 0 }); } function phy_sysfs_file(phy, name) { return trim(readfile(`/sys/class/ieee80211/${phy}/${name}`)); } function macaddr_split(str) { return map(split(str, ":"), (val) => hex(val)); } function macaddr_join(addr) { return join(":", map(addr, (val) => sprintf("%02x", val))); } function wdev_macaddr(wdev) { return trim(readfile(`/sys/class/net/${wdev}/address`)); } const phy_proto = { macaddr_init: function(used, options) { this.macaddr_options = options ?? {}; this.macaddr_list = {}; if (type(used) == "object") for (let addr in used) this.macaddr_list[addr] = used[addr]; else for (let addr in used) this.macaddr_list[addr] = -1; this.for_each_wdev((wdev) => { let macaddr = wdev_macaddr(wdev); this.macaddr_list[macaddr] ??= -1; }); return this.macaddr_list; }, macaddr_generate: function(data) { let phy = this.phy; let radio_idx = this.radio; let idx = int(data.id ?? 0); let mbssid = int(data.mbssid ?? 0) > 0; let num_global = int(data.num_global ?? 1); let use_global = !mbssid && idx < num_global; let base_addr = phy_sysfs_file(phy, "macaddress"); if (!base_addr) return null; let base_mask = phy_sysfs_file(phy, "address_mask"); if (!base_mask) return null; if (base_mask == "00:00:00:00:00:00") base_mask = "ff:ff:ff:ff:ff:ff"; if (data.macaddr_base) base_addr = data.macaddr_base; else if (base_mask == "ff:ff:ff:ff:ff:ff" && (radio_idx > 0 || idx >= num_global)) { let addrs = split(phy_sysfs_file(phy, "addresses"), "\n"); if (radio_idx != null) { if (radio_idx && radio_idx < length(addrs)) base_addr = addrs[radio_idx]; else idx += radio_idx * 16; } else { if (idx < length(addrs)) return addrs[idx]; } } if (!idx && !mbssid) return base_addr; let addr = macaddr_split(base_addr); let mask = macaddr_split(base_mask); let type; if (mbssid) type = "b5"; else if (use_global) type = "add"; else if (mask[0] > 0) type = "b1"; else if (mask[5] < 0xff) type = "b5"; else type = "add"; switch (type) { case "b1": if (!(addr[0] & 2)) idx--; addr[0] |= 2; addr[0] ^= idx << 2; break; case "b5": if (mbssid) addr[0] |= 2; addr[5] ^= idx; break; default: for (let i = 5; i > 0; i--) { addr[i] += idx; if (addr[i] < 256) break; addr[i] %= 256; } break; } return macaddr_join(addr); }, macaddr_next: function(val) { let data = this.macaddr_options ?? {}; let list = this.macaddr_list; for (let i = 0; i < 32; i++) { data.id = i; let mac = this.macaddr_generate(data); if (!mac) return null; if (list[mac] != null) continue; list[mac] = val != null ? val : -1; return mac; } }, wdev_add: function(name, data) { let phydev = this; wdev_create(this.phy, name, { ...data, radio: this.radio, }); }, for_each_wdev: function(cb) { let wdevs = nl80211.request( nl80211.const.NL80211_CMD_GET_INTERFACE, nl80211.const.NLM_F_DUMP, { wiphy: this.idx } ); let mac_wdev = {}; for (let wdev in wdevs) { if (wdev.iftype == nl80211.const.NL80211_IFTYPE_AP_VLAN) continue; if (this.radio != null && wdev.vif_radio_mask != null && wdev.vif_radio_mask != (1 << this.radio)) continue; mac_wdev[wdev.mac] = wdev; } for (let wdev in wdevs) { if (!mac_wdev[wdev.mac]) continue; cb(wdev.ifname); } } }; function phy_open(phy, radio) { let phyidx = readfile(`/sys/class/ieee80211/${phy}/index`); if (!phyidx) return null; let name = phy; if (radio === "" || radio < 0) radio = null; if (radio != null) name += "." + radio; return proto({ phy, name, radio, idx: int(phyidx), }, phy_proto); } const vlist_proto = { update: function(values, arg) { let data = this.data; let cb = this.cb; let seq = { }; let new_data = {}; let old_data = {}; this.data = new_data; if (type(values) == "object") { for (let key in values) { old_data[key] = data[key]; new_data[key] = values[key]; delete data[key]; } } else { for (let val in values) { let cur_key = val[0]; let cur_obj = val[1]; old_data[cur_key] = data[cur_key]; new_data[cur_key] = val[1]; delete data[cur_key]; } } for (let key in data) { cb(null, data[key], arg); delete data[key]; } for (let key in new_data) cb(new_data[key], old_data[key], arg); } }; function is_equal(val1, val2) { let t1 = type(val1); if (t1 != type(val2)) return false; if (t1 == "array") { if (length(val1) != length(val2)) return false; for (let i = 0; i < length(val1); i++) if (!is_equal(val1[i], val2[i])) return false; return true; } else if (t1 == "object") { for (let key in val1) if (!is_equal(val1[key], val2[key])) return false; for (let key in val2) if (val1[key] == null) return false; return true; } else { return val1 == val2; } } function vlist_new(cb) { return proto({ cb: cb, data: {} }, vlist_proto); } export { wdev_remove, wdev_create, wdev_set_mesh_params, wdev_set_radio_mask, wdev_set_up, is_equal, vlist_new, phy_is_fullmac, phy_open }; 07070100EA4DCB000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001200000000usr/share/dnsmasq07070100EA4DE20000818000000000000000000000000169F91E1500000137000000080000000100000000000000000000001F00000000usr/share/dnsmasq/rfc6761.conf# RFC6761 included configuration file for dnsmasq # # includes a list of domains that should not be forwarded to Internet name servers # to reduce burden on them, asking questions that they won't know the answer to. server=/bind/ server=/invalid/ server=/local/ server=/localhost/ server=/onion/ server=/test/ 07070100EA4DE10000818000000000000000000000000169F91E1500000154000000080000000100000000000000000000002900000000usr/share/dnsmasq/dhcpbogushostname.conf# dhcpbogushostname.conf included configuration file for dnsmasq # # includes a list of hostnames that should not be associated with dhcp leases # in response to CERT VU#598349 # file included by default, option dhcpbogushostname 0 to disable dhcp-name-match=set:dhcp_bogus_hostname,localhost dhcp-name-match=set:dhcp_bogus_hostname,wpad 07070100EA558A000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001500000000usr/share/nftables.d07070100EA558B000081A400000000000000000000000169F91E15000003DF000000080000000100000000000000000000001C00000000usr/share/nftables.d/READMEThis directory may contain partial nftables files which are automatically included into the nftables ruleset generated by the fw4 program. Only accessible files (no broken symlinks, no files with insufficient permissions) with an `*.nft` file extension are considered. The include position of each file within the overall ruleset is derived from the file path: - Files in ./ruleset-pre/ and ./ruleset-post/ are included before and after the `table inet fw4 { ... }` declaration respectively - Files in ./table-pre/ and ./table-post/ are included before the first chain and after the last chain declaration within the fw4 table respectively - Files in ./chain-pre/${chain}/ and ./chain-post/${chain}/ are included before the first and after the last rule within the mentioned chain of the fw4 table respectively Automatic inclusion of these files can be disabled by setting the global `auto_includes` option to `0` within the defaults section of /etc/config/firewall. 07070100EA55B4000081A400000000000000000000000169F91E1500001413000000080000000100000000000000000000001700000000usr/share/iso3166.json{ "00": "World", "AD": "Andorra", "AE": "United Arab Emirates", "AF": "Afghanistan", "AG": "Antigua and Barbuda", "AI": "Anguilla", "AL": "Albania", "AM": "Armenia", "AN": "Netherlands Antilles", "AO": "Angola", "AQ": "Antarctica", "AR": "Argentina", "AS": "American Samoa", "AT": "Austria", "AU": "Australia", "AW": "Aruba", "AX": "Aland Islands", "AZ": "Azerbaijan", "BA": "Bosnia and Herzegovina", "BB": "Barbados", "BD": "Bangladesh", "BE": "Belgium", "BF": "Burkina Faso", "BG": "Bulgaria", "BH": "Bahrain", "BI": "Burundi", "BJ": "Benin", "BL": "Saint Barthelemy", "BM": "Bermuda", "BN": "Brunei Darussalam", "BO": "Bolivia", "BR": "Brazil", "BS": "Bahamas", "BT": "Bhutan", "BV": "Bouvet Island", "BW": "Botswana", "BY": "Belarus", "BZ": "Belize", "CA": "Canada", "CC": "Cocos (Keeling) Islands", "CD": "Congo", "CF": "Central African Republic", "CG": "Congo", "CH": "Switzerland", "CI": "Cote d'Ivoire", "CK": "Cook Islands", "CL": "Chile", "CM": "Cameroon", "CN": "China", "CO": "Colombia", "CR": "Costa Rica", "CU": "Cuba", "CV": "Cape Verde", "CX": "Christmas Island", "CY": "Cyprus", "CZ": "Czech Republic", "DE": "Germany", "DJ": "Djibouti", "DK": "Denmark", "DM": "Dominica", "DO": "Dominican Republic", "DZ": "Algeria", "EC": "Ecuador", "EE": "Estonia", "EG": "Egypt", "EH": "Western Sahara", "ER": "Eritrea", "ES": "Spain", "ET": "Ethiopia", "FI": "Finland", "FJ": "Fiji", "FK": "Falkland Islands", "FM": "Micronesia", "FO": "Faroe Islands", "FR": "France", "GA": "Gabon", "GB": "United Kingdom", "GD": "Grenada", "GE": "Georgia", "GF": "French Guiana", "GG": "Guernsey", "GH": "Ghana", "GI": "Gibraltar", "GL": "Greenland", "GM": "Gambia", "GN": "Guinea", "GP": "Guadeloupe", "GQ": "Equatorial Guinea", "GR": "Greece", "GS": "South Georgia", "GT": "Guatemala", "GU": "Guam", "GW": "Guinea-Bissau", "GY": "Guyana", "HK": "Hong Kong", "HM": "Heard and McDonald Islands", "HN": "Honduras", "HR": "Croatia", "HT": "Haiti", "HU": "Hungary", "ID": "Indonesia", "IE": "Ireland", "IL": "Israel", "IM": "Isle of Man", "IN": "India", "IO": "Chagos Islands", "IQ": "Iraq", "IR": "Iran", "IS": "Iceland", "IT": "Italy", "JE": "Jersey", "JM": "Jamaica", "JO": "Jordan", "JP": "Japan", "KE": "Kenya", "KG": "Kyrgyzstan", "KH": "Cambodia", "KI": "Kiribati", "KM": "Comoros", "KN": "Saint Kitts and Nevis", "KP": "North Korea", "KR": "South Korea", "KW": "Kuwait", "KY": "Cayman Islands", "KZ": "Kazakhstan", "LA": "Laos", "LB": "Lebanon", "LC": "Saint Lucia", "LI": "Liechtenstein", "LK": "Sri Lanka", "LR": "Liberia", "LS": "Lesotho", "LT": "Lithuania", "LU": "Luxembourg", "LV": "Latvia", "LY": "Libyan Arab Jamahiriya", "MA": "Morocco", "MC": "Monaco", "MD": "Moldova", "ME": "Montenegro", "MF": "Saint Martin (French part)", "MG": "Madagascar", "MH": "Marshall Islands", "MK": "Macedonia", "ML": "Mali", "MM": "Myanmar", "MN": "Mongolia", "MO": "Macao", "MP": "Northern Mariana Islands", "MQ": "Martinique", "MR": "Mauritania", "MS": "Montserrat", "MT": "Malta", "MU": "Mauritius", "MV": "Maldives", "MW": "Malawi", "MX": "Mexico", "MY": "Malaysia", "MZ": "Mozambique", "NA": "Namibia", "NC": "New Caledonia", "NE": "Niger", "NF": "Norfolk Island", "NG": "Nigeria", "NI": "Nicaragua", "NL": "Netherlands", "NO": "Norway", "NP": "Nepal", "NR": "Nauru", "NU": "Niue", "NZ": "New Zealand", "OM": "Oman", "PA": "Panama", "PE": "Peru", "PF": "French Polynesia", "PG": "Papua New Guinea", "PH": "Philippines", "PK": "Pakistan", "PL": "Poland", "PM": "Saint Pierre and Miquelon", "PN": "Pitcairn", "PR": "Puerto Rico", "PS": "Palestinian Territory", "PT": "Portugal", "PW": "Palau", "PY": "Paraguay", "QA": "Qatar", "RE": "Reunion", "RO": "Romania", "RS": "Serbia", "RU": "Russian Federation", "RW": "Rwanda", "SA": "Saudi Arabia", "SB": "Solomon Islands", "SC": "Seychelles", "SD": "Sudan", "SE": "Sweden", "SG": "Singapore", "SH": "St. Helena and Dependencies", "SI": "Slovenia", "SJ": "Svalbard and Jan Mayen", "SK": "Slovakia", "SL": "Sierra Leone", "SM": "San Marino", "SN": "Senegal", "SO": "Somalia", "SR": "Suriname", "ST": "Sao Tome and Principe", "SV": "El Salvador", "SY": "Syrian Arab Republic", "SZ": "Swaziland", "TC": "Turks and Caicos Islands", "TD": "Chad", "TF": "French Southern Territories", "TG": "Togo", "TH": "Thailand", "TJ": "Tajikistan", "TK": "Tokelau", "TL": "Timor-Leste", "TM": "Turkmenistan", "TN": "Tunisia", "TO": "Tonga", "TR": "Turkey", "TT": "Trinidad and Tobago", "TV": "Tuvalu", "TW": "Taiwan", "TZ": "Tanzania", "UA": "Ukraine", "UG": "Uganda", "UM": "U.S. Minor Outlying Islands", "US": "United States", "UY": "Uruguay", "UZ": "Uzbekistan", "VA": "Vatican City State", "VC": "St. Vincent and Grenadines", "VE": "Venezuela", "VG": "Virgin Islands, British", "VI": "Virgin Islands, U.S.", "VN": "Viet Nam", "VU": "Vanuatu", "WF": "Wallis and Futuna", "WS": "Samoa", "YE": "Yemen", "YT": "Mayotte", "ZA": "South Africa", "ZM": "Zambia", "ZW": "Zimbabwe" } 07070100EA4C9C000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001200000000usr/share/libubox07070100EA4C9D000081A400000000000000000000000169F91E1500001D91000000080000000100000000000000000000001A00000000usr/share/libubox/jshn.sh# functions for parsing and generating json _json_get_var() { # dest=$1 # var=$2 eval "$1=\"\$${JSON_PREFIX}$2\"" } _json_set_var() { # var=$1 local ___val="$2" eval "${JSON_PREFIX}$1=\"\$___val\"" } __jshn_raw_append() { # var=$1 local value="$2" local sep="${3:- }" eval "export -- \"$1=\${$1:+\${$1}\${value:+\$sep}}\$value\"" } _jshn_append() { # var=$1 local _a_value="$2" eval "${JSON_PREFIX}$1=\"\${${JSON_PREFIX}$1}\${${JSON_PREFIX}$1:+ }\$_a_value\"" } _get_var() { # var=$1 # value=$2 eval "$1=\"\$$2\"" } _set_var() { # var=$1 local __val="$2" eval "$1=\"\$__val\"" } _json_inc() { # var=$1 # dest=$2 let "${JSON_PREFIX}$1 += 1" "$2 = ${JSON_PREFIX}$1" } _json_add_generic() { # type=$1 # name=$2 # value=$3 # cur=$4 local var if [ "${4%%[0-9]*}" = "J_A" ]; then _json_inc "S_$4" var else var="${2//[^a-zA-Z0-9_]/_}" [[ "$var" == "$2" ]] || export -- "${JSON_PREFIX}N_${4}_${var}=$2" fi export -- \ "${JSON_PREFIX}${4}_$var=$3" \ "${JSON_PREFIX}T_${4}_$var=$1" _jshn_append "JSON_UNSET" "${4}_$var" _jshn_append "K_$4" "$var" } _json_add_table() { # name=$1 # type=$2 # itype=$3 local cur seq _json_get_var cur JSON_CUR _json_inc JSON_SEQ seq local table="J_$3$seq" _json_set_var "U_$table" "$cur" export -- "${JSON_PREFIX}K_$table=" unset "${JSON_PREFIX}S_$table" _json_set_var JSON_CUR "$table" _jshn_append "JSON_UNSET" "$table" _json_add_generic "$2" "$1" "$table" "$cur" } _json_close_table() { local _s_cur _json_get_var _s_cur JSON_CUR _json_get_var "${JSON_PREFIX}JSON_CUR" "U_$_s_cur" } json_set_namespace() { local _new="$1" local _old="$2" [ -n "$_old" ] && _set_var "$_old" "$JSON_PREFIX" JSON_PREFIX="$_new" } json_cleanup() { local unset tmp _json_get_var unset JSON_UNSET for tmp in $unset J_V; do unset \ ${JSON_PREFIX}U_$tmp \ ${JSON_PREFIX}K_$tmp \ ${JSON_PREFIX}S_$tmp \ ${JSON_PREFIX}T_$tmp \ ${JSON_PREFIX}N_$tmp \ ${JSON_PREFIX}$tmp done unset \ ${JSON_PREFIX}JSON_SEQ \ ${JSON_PREFIX}JSON_CUR \ ${JSON_PREFIX}JSON_UNSET } json_init() { json_cleanup export -n ${JSON_PREFIX}JSON_SEQ=0 export -- \ ${JSON_PREFIX}JSON_CUR="J_V" \ ${JSON_PREFIX}K_J_V= } json_add_object() { _json_add_table "$1" object T } json_close_object() { _json_close_table } json_add_array() { _json_add_table "$1" array A } json_close_array() { _json_close_table } json_add_string() { local cur _json_get_var cur JSON_CUR _json_add_generic string "$1" "$2" "$cur" } json_push_string() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic string "" "$1" "$cur" } json_add_int() { local cur _json_get_var cur JSON_CUR _json_add_generic int "$1" "$2" "$cur" } json_push_int() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic int "" "$1" "$cur" } json_add_boolean() { local cur _json_get_var cur JSON_CUR _json_add_generic boolean "$1" "$2" "$cur" } json_push_boolean() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic boolean "" "$1" "$cur" } json_add_double() { local cur _json_get_var cur JSON_CUR _json_add_generic double "$1" "$2" "$cur" } json_push_double() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic double "" "$1" "$cur" } json_add_null() { local cur _json_get_var cur JSON_CUR _json_add_generic null "$1" "" "$cur" } json_push_null() { local cur _json_get_var cur JSON_CUR [ "${cur%%[0-9]*}" = "J_A" ] || { [ -n "$_json_no_warning" ] || \ echo "WARNING: Not in an array" >&2 return 1 } _json_add_generic null "" "" "$cur" } json_add_fields() { while [ "$#" -gt 0 ]; do local field="$1" shift local name="${field%%=*}" local val="${field#*=}" [ "$name" != "$val" ] || val="" local type="${name#*:}" [ "$type" != "$name" ] || type=string name="${name%%:*}" case "$type" in string|int|boolean|double) local cur _json_get_var cur JSON_CUR _json_add_generic "$type" "$name" "$val" "$cur" ;; esac done } json_get_index() { local __dest="$1" local __cur __parent __seq _json_get_var __cur JSON_CUR _json_get_var __parent "U_$__cur" if [ "${__parent%%[0-9]*}" != "J_A" ]; then [ -n "$_json_no_warning" ] || \ echo "WARNING: Not inside an array" >&2 return 1 fi __seq="S_$__parent" eval "export -- \"$__dest=\${$__seq}\"; [ -n \"\${$__seq+x}\" ]" } # functions read access to json variables json_compact() { JSON_NONEWLINE=1 JSON_INDENT= } json_pretty() { JSON_NONEWLINE= JSON_INDENT=1 } json_load() { eval "`jshn -r "$1"`" } json_load_file() { eval "`jshn -R "$1"`" } json_dump() { jshn "$@" ${JSON_PREFIX:+-p "$JSON_PREFIX"} ${JSON_NONEWLINE:+-n} ${JSON_INDENT:+-i} -w } json_get_type() { # target=$2 local __dest="$1" local __cur _json_get_var __cur JSON_CUR local __var="${JSON_PREFIX}T_${__cur}_${2//[^a-zA-Z0-9_]/_}" eval "export -- \"$__dest=\${$__var}\"; [ -n \"\${$__var+x}\" ]" } json_get_keys() { local __dest="$1" local _tbl_cur if [ -n "$2" ]; then json_get_var _tbl_cur "$2" else _json_get_var _tbl_cur JSON_CUR fi local __var="${JSON_PREFIX}K_${_tbl_cur}" eval "export -- \"$__dest=\${$__var}\"; [ -n \"\${$__var+x}\" ]" } json_get_values() { local _v_dest="$1" local _v_keys _v_val _select= local _json_no_warning=1 unset "$_v_dest" [ -n "$2" ] && { json_select "$2" || return 1 _select=1 } json_get_keys _v_keys set -- $_v_keys while [ "$#" -gt 0 ]; do json_get_var _v_val "$1" __jshn_raw_append "$_v_dest" "$_v_val" shift done [ -n "$_select" ] && json_select .. return 0 } json_get_var() { local __dest="$1" local __cur _json_get_var __cur JSON_CUR local __var="${JSON_PREFIX}${__cur}_${2//[^a-zA-Z0-9_]/_}" eval "export -- \"$__dest=\${$__var:-$3}\"; [ -n \"\${$__var+x}\${3+x}\" ]" } json_get_vars() { while [ "$#" -gt 0 ]; do local _var="$1"; shift if [ "$_var" != "${_var#*:}" ]; then json_get_var "${_var%%:*}" "${_var%%:*}" "${_var#*:}" else json_get_var "$_var" "$_var" fi done } json_select() { local target="$1" local type local cur [ -z "$target" ] && { _json_set_var JSON_CUR "J_V" return 0 } [[ "$target" == ".." ]] && { _json_get_var cur JSON_CUR _json_get_var cur "U_$cur" _json_set_var JSON_CUR "$cur" return 0 } json_get_type type "$target" case "$type" in object|array) json_get_var cur "$target" _json_set_var JSON_CUR "$cur" ;; *) [ -n "$_json_no_warning" ] || \ echo "WARNING: Variable '$target' does not exist or is not an array/object" >&2 return 1 ;; esac } json_is_a() { # target=$1 # type=$2 local type json_get_type type "$1" [ "$type" = "$2" ] } json_for_each_item() { [ "$#" -ge 2 ] || return 0 local function="$1"; shift local target="$1"; shift local type val json_get_type type "$target" case "$type" in object|array) local keys key json_select "$target" json_get_keys keys for key in $keys; do json_get_var val "$key" eval "$function \"\$val\" \"\$key\" \"\$@\"" done json_select .. ;; *) json_get_var val "$target" eval "$function \"\$val\" \"\" \"\$@\"" ;; esac } 07070100EA4AAA000041ED00000000000000000000000469F91E1500000000000000080000000100000000000000000000000F00000000usr/share/rpcd07070100EA4AAB000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001500000000usr/share/rpcd/acl.d07070100EA5666000081A400000000000000000000000169F91E15000003F6000000080000000100000000000000000000002400000000usr/share/rpcd/acl.d/luci-base.json{ "unauthenticated": { "description": "Allow system feature probing", "read": { "ubus": { "luci": [ "getFeatures" ] } } }, "luci-base": { "description": "Grant access to basic LuCI procedures", "read": { "file": { "/": [ "list" ], "/*": [ "list" ] }, "ubus": { "file": [ "list" ], "uci": [ "changes", "get" ] }, "uci": [ "system", "luci" ] }, "write": { "cgi-io": [ "upload" ], "file": { "/etc/luci-uploads/*": [ "write" ] }, "ubus": { "file": [ "remove" ], "uci": [ "add", "apply", "confirm", "delete", "order", "rename", "set" ] } } }, "luci-base-network-status": { "description": "Grant access to network status information", "read": { "ubus": { "luci-rpc": [ "getBoardJSON", "getHostHints", "getNetworkDevices", "getWirelessDevices" ], "network": [ "get_proto_handlers" ], "network.device": [ "status" ], "network.interface": [ "dump" ] }, "uci": [ "luci", "network", "wireless" ] } } } 07070100EA5712000081A400000000000000000000000169F91E1500001248000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/luci-mod-system.json{ "luci-mod-system-config": { "description": "Grant access to system configuration", "read": { "ubus": { "luci": [ "getLEDs", "getTimezones", "getUSBDevices", "getUnixtime" ], "rc": [ "list" ] }, "uci": [ "luci", "system" ] }, "write": { "ubus": { "luci": [ "setLocaltime", "setPassword" ], "rc": [ "init" ] }, "uci": [ "luci", "system" ] } }, "luci-mod-system-ssh": { "description": "Grant access to SSH configuration", "read": { "file": { "/etc/dropbear/authorized_keys": [ "read" ] }, "ubus": { "file": [ "read" ] }, "uci": [ "dropbear" ] }, "write": { "file": { "/etc/dropbear/authorized_keys": [ "write" ] }, "ubus": { "file": [ "write" ], "luci": [ "setLocaltime" ] }, "uci": [ "dropbear" ] } }, "luci-mod-system-repokeys": { "description": "Grant access to Software Repository Public Key management", "read": { "file": { "/etc/opkg/keys/*": [ "read" ], "/etc/apk/keys/*": [ "read" ] } }, "write": { "file": { "/etc/opkg/keys/*": [ "write" ], "/etc/apk/keys/*": [ "write" ] } } }, "luci-mod-system-uhttpd": { "description": "Grant access to uHTTPd configuration", "read": { "uci": [ "uhttpd" ] }, "write": { "uci": [ "uhttpd" ] } }, "luci-mod-system-init": { "description": "Grant access to startup configuration", "read": { "file": { "/etc/rc.local": [ "read" ] }, "ubus": { "file": [ "read" ], "rc": [ "list" ] } }, "write": { "file": { "/etc/rc.local": [ "write" ] }, "ubus": { "file": [ "write" ], "rc": [ "init" ] } } }, "luci-mod-system-cron": { "description": "Grant access to crontab configuration", "read": { "file": { "/etc/crontabs/root": [ "read" ] }, "ubus": { "file": [ "read" ] } }, "write": { "file": { "/etc/crontabs/root": [ "write" ], "/etc/init.d/cron reload": [ "exec" ] }, "ubus": { "file": [ "write" ] } } }, "luci-mod-system-mounts": { "description": "Grant access to mount configuration", "read": { "file": { "/etc/filesystems": [ "read" ], "/proc/filesystems": [ "read" ], "/usr/bin/btrfsck": [ "list" ], "/usr/bin/ntfsfix": [ "list" ], "/usr/sbin/e2fsck": [ "list" ], "/usr/sbin/fsck.f2fs": [ "list" ], "/usr/sbin/fsck.fat": [ "list" ] }, "ubus": { "file": [ "read", "stat" ], "luci": [ "getBlockDevices", "getMountPoints" ] }, "uci": [ "fstab" ] }, "write": { "file": { "/etc/crontabs/root": [ "write" ], "/bin/umount": [ "exec" ], "/sbin/block": [ "exec" ] }, "ubus": { "file": [ "exec", "write" ], "luci": [ "setBlockDetect" ] }, "uci": [ "fstab" ] } }, "luci-mod-system-flash": { "description": "Grant access to flash operations", "read": { "cgi-io": [ "backup", "download" ], "file": { "/dev/mtdblock[0-9]*": [ "read" ], "/etc/sysupgrade.conf": [ "read" ], "/lib/upgrade/platform.sh": [ "list" ], "/proc/mounts": [ "read" ], "/proc/mtd": [ "read" ], "/proc/partitions": [ "read" ], "/proc/sys/kernel/hostname": [ "read" ], "/sbin/sysupgrade --list-backup": [ "exec" ] }, "ubus": { "file": [ "exec", "read", "stat" ] } }, "write": { "cgi-io": [ "upload" ], "file": { "/bin/tar -tzf /tmp/backup.tar.gz": [ "exec" ], "/etc/sysupgrade.conf": [ "write" ], "/sbin/firstboot -r -y": [ "exec" ], "/sbin/reboot": [ "exec" ], "/sbin/sysupgrade --force /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -n --force /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -u /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --force -u -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -n /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -u /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade -u -k /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade --restore-backup /tmp/backup.tar.gz": [ "exec" ], "/sbin/sysupgrade --test /tmp/firmware.bin": [ "exec" ], "/sbin/sysupgrade /tmp/firmware.bin": [ "exec" ], "/tmp/backup.tar.gz": [ "write" ], "/tmp/firmware.bin": [ "write" ] }, "ubus": { "file": [ "exec", "remove", "write" ], "system": [ "validate_firmware_image" ] } } }, "luci-mod-system-reboot": { "description": "Allow rebooting the device", "write": { "file": { "/sbin/reboot": [ "exec" ] }, "ubus": { "file": [ "exec" ], "system": [ "reboot" ] } } } } 07070100EA56D9000081A400000000000000000000000169F91E1500000861000000080000000100000000000000000000002B00000000usr/share/rpcd/acl.d/luci-mod-network.json{ "luci-mod-network-config": { "description": "Grant access to network configuration", "read": { "cgi-io": [ "exec" ], "file": { "/etc/iproute2/rt_tables": [ "read" ], "/proc/sys/net/ipv6/conf/*/mtu": [ "read" ], "/proc/sys/net/ipv6/conf/*/hop_limit": [ "read" ], "/usr/libexec/luci-peeraddr": [ "exec" ], "/proc/sys/net/ipv[46]/conf/*": [ "read" ], "/sys/class/net/*/brport/*": [ "read" ] }, "ubus": { "file": [ "exec" ], "iwinfo": [ "assoclist", "countrylist", "freqlist", "txpowerlist" ], "luci": [ "getSwconfigFeatures", "getSwconfigPortState" ] }, "uci": [ "dhcp", "firewall", "network", "wireless", "system" ] }, "write": { "cgi-io": [ "exec" ], "file": { "/sbin/ifup": [ "exec" ], "/sbin/ifdown": [ "exec" ], "/sbin/wifi": [ "exec" ] }, "ubus": { "file": [ "exec" ], "hostapd.*": [ "del_client" ], "iwinfo": [ "scan" ] }, "uci": [ "dhcp", "firewall", "network", "wireless" ] } }, "luci-mod-network-dns": { "description": "Grant access to DNS configuration", "read": { "ubus": { "luci-rpc": [ "getHostHints" ] }, "uci": [ "dhcp" ] }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-network-dhcp": { "description": "Grant access to DHCP configuration", "read": { "ubus": { "luci-rpc": [ "getDHCPLeases", "getDUIDHints", "getHostHints", "getNetworkDevices" ], "fingerprint": [ "fingerprint" ], "service": [ "list" ] }, "uci": [ "dhcp" ] }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-network-diagnostics": { "description": "Grant access to network diagnostic tools", "read": { "file": { "/bin/ping": [ "exec" ], "/bin/ping6": [ "exec", "list" ], "/bin/traceroute": [ "exec" ], "/bin/traceroute6": [ "exec", "list" ], "/usr/bin/nslookup": [ "exec" ], "/usr/bin/ping": [ "exec" ], "/usr/bin/ping6": [ "exec", "list" ], "/usr/bin/traceroute": [ "exec" ], "/usr/bin/traceroute6": [ "exec", "list" ], "/usr/bin/arp-scan": [ "exec", "list" ] }, "ubus": { "file": [ "exec", "stat" ] }, "uci": [ "luci" ] } } } 07070100EA56CA000081A400000000000000000000000169F91E150000019B000000080000000100000000000000000000002C00000000usr/share/rpcd/acl.d/luci-app-firewall.json{ "luci-app-firewall": { "description": "Grant access to firewall configuration", "read": { "file": { "/etc/firewall.user": [ "read" ] }, "ubus": { "file": [ "read" ], "luci": [ "getConntrackHelpers" ] }, "uci": [ "firewall" ] }, "write": { "file": { "/etc/firewall.user": [ "write" ] }, "ubus": { "file": [ "write" ] }, "uci": [ "firewall" ] } } } 07070100EA56C5000081A400000000000000000000000169F91E15000004FF000000080000000100000000000000000000003300000000usr/share/rpcd/acl.d/luci-app-package-manager.json{ "luci-app-package-manager": { "description": "Grant access to package management", "read": { "cgi-io": [ "exec" ], "file": { "/usr/libexec/package-manager-call list-installed": [ "exec" ], "/usr/libexec/package-manager-call list-available": [ "exec" ], "/etc/opkg.conf": [ "read" ], "/etc/opkg/*.conf": [ "read" ], "/etc/apk/repositories": [ "read" ], "/etc/apk/repositories.d/distfeeds.list": [ "read" ], "/etc/apk/repositories.d/customfeeds.list": [ "read" ] }, "ubus": { "luci": [ "getMountPoints" ] } }, "write": { "file": { "/usr/libexec/package-manager-call install": [ "exec" ], "/usr/libexec/package-manager-call install *": [ "exec" ], "/usr/libexec/package-manager-call remove *": [ "exec" ], "/usr/libexec/package-manager-call update": [ "exec" ], "/usr/libexec/package-manager-call upgrade": [ "exec" ], "/usr/libexec/package-manager-call upgrade *": [ "exec" ], "/etc/opkg.conf": [ "write" ], "/etc/opkg/*.conf": [ "write" ], "/etc/apk/repositories": [ "write" ], "/etc/apk/repositories.d/distfeeds.list": [ "write" ], "/etc/apk/repositories.d/customfeeds.list": [ "write" ], "/tmp/upload.ipk": [ "write" ], "/tmp/upload.apk": [ "write" ] } } } } 07070100EA575D000081A400000000000000000000000169F91E150000021A000000080000000100000000000000000000003600000000usr/share/rpcd/acl.d/luci-app-attendedsysupgrade.json{ "luci-app-attendedsysupgrade": { "description": "Grant UCI access to LuCI app attendedsysupgrade", "read": { "ubus": { "rpc-sys": [ "upgrade_start", "packagelist" ], "system": [ "board", "info" ], "uci": [ "get" ] }, "file": { "/sys/firmware/efi": [ "list" ] }, "uci": [ "attendedsysupgrade" ] }, "write": { "cgi-io": [ "upload" ], "ubus": { "uci": [ "set", "commit" ] }, "uci": [ "attendedsysupgrade" ] } } } 07070100EA56EE000081A400000000000000000000000169F91E15000009CF000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/luci-mod-status.json{ "luci-mod-status-realtime": { "description": "Grant access to realtime statistics", "read": { "file": { "/etc/services": [ "read" ] }, "ubus": { "luci": [ "getConntrackList", "getRealtimeStats" ], "luci-rpc": [ "getHostHints", "getNetworkDevices", "getDHCPLeases" ], "network.rrdns": [ "lookup" ] } } }, "luci-mod-status-processes": { "description": "Grant access to process status", "read": { "ubus": { "luci": [ "getProcessList" ] } }, "write": { "file": { "/bin/kill": [ "exec" ] }, "ubus": { "file": [ "exec" ] } } }, "luci-mod-status-logs": { "description": "Grant access to system logs", "read": { "cgi-io": [ "exec" ], "file": { "/bin/dmesg -r": [ "exec" ], "/usr/libexec/syslog-wrapper": [ "exec" ] }, "ubus": { "log": [ "read" ], "file": [ "stat" ] } } }, "luci-mod-status-routes": { "description": "Grant access to routing status", "read": { "file": { "/sbin/ip -[46] neigh show": [ "exec" ], "/sbin/ip -[46] route show table all": [ "exec" ], "/sbin/ip -[46] rule show": [ "exec" ] }, "ubus": { "file": [ "exec" ], "fingerprint": [ "fingerprint" ] } } }, "luci-mod-status-routes-json": { "description": "Grant access to routing status", "read": { "file": { "/sbin/ip -[46] -j neigh show": [ "exec" ], "/sbin/ip -[46] -j route show table all": [ "exec" ], "/sbin/ip -[46] -j rule show": [ "exec" ] }, "ubus": { "file": [ "exec" ], "fingerprint": [ "fingerprint" ] } } }, "luci-mod-status-channel_analysis": { "description": "Grant access to wireless channel status", "read": { "ubus": { "iwinfo": [ "info", "freqlist", "scan" ] } } }, "luci-mod-status-firewall": { "description": "Grant access to firewall status", "read": { "cgi-io": [ "exec" ], "file": { "/usr/sbin/nft --terse --json list ruleset": [ "exec" ], "/usr/sbin/iptables --line-numbers -w -nvxL -t *": [ "exec" ], "/usr/sbin/ip6tables --line-numbers -w -nvxL -t *": [ "exec" ], "/usr/sbin/ip6tables": [ "list" ], "/usr/sbin/iptables-save": [ "exec" ], "/usr/sbin/ip6tables-save": [ "exec" ] }, "ubus": { "file": [ "stat" ] } }, "write": { "cgi-io": [ "exec" ], "file": { "/etc/init.d/firewall restart": [ "exec" ], "/usr/sbin/iptables -Z": [ "exec" ], "/usr/sbin/ip6tables -Z": [ "exec" ] }, "ubus": { "file": [ "exec" ] } } } } 07070100EA4AAC000081A400000000000000000000000169F91E15000000B3000000080000000100000000000000000000002A00000000usr/share/rpcd/acl.d/unauthenticated.json{ "unauthenticated": { "description": "Access controls for unauthenticated requests", "read": { "ubus": { "session": [ "access", "login" ] } } } } 07070100EA56ED000081A400000000000000000000000169F91E15000005FF000000080000000100000000000000000000003000000000usr/share/rpcd/acl.d/luci-mod-status-index.json{ "luci-mod-status-index": { "description": "Grant access to main status display", "read": { "file": { "/etc/board.json": [ "read" ], "/proc/sys/net/netfilter/nf_conntrack_count": [ "read" ], "/proc/sys/net/netfilter/nf_conntrack_max": [ "read" ], "/www/luci-static/resources/view/status/include": [ "list" ] }, "ubus": { "luci": [ "getVersion", "getUnixtime", "getOdhcp6cStats" ], "file": [ "list", "read" ], "system": [ "board", "info" ] } }, "write": { "uci": [ "dhcp" ] } }, "luci-mod-status-index-storage": { "description": "Grant access to Storage and Mount status display", "read": { "ubus": { "luci": [ "getMountPoints" ], "system": [ "info" ] } } }, "luci-mod-status-index-dhcp": { "description": "Grant access to DHCP status display", "read": { "ubus": { "luci-rpc": [ "getDHCPLeases" ], "fingerprint": [ "fingerprint" ] } } }, "luci-mod-status-index-dsl": { "description": "Grant access to DSL status display", "read": { "ubus": { "dsl": [ "metrics" ] } } }, "luci-mod-status-index-ports": { "description": "Grant access to port status display", "read": { "ubus": { "luci": [ "getBuiltinEthernetPorts" ] } } }, "luci-mod-status-index-wifi": { "description": "Grant access to wireless status display", "read": { "ubus": { "iwinfo": [ "assoclist" ] } }, "write": { "ubus": { "hostapd.*": [ "del_client", "wps_start", "wps_cancel", "wps_status" ] } } } } 07070100EA5667000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000001500000000usr/share/rpcd/ucode07070100EA5668000081A400000000000000000000000169F91E1500003F21000000080000000100000000000000000000001A00000000usr/share/rpcd/ucode/luci// Copyright 2022 Jo-Philipp Wich // Licensed to the public under the Apache License 2.0. 'use strict'; import { stdin, access, dirname, basename, open, popen, glob, lsdir, readfile, readlink, realpath, error } from 'fs'; import { cursor } from 'uci'; import { init_list, init_index, init_enabled, init_action, conntrack_list, process_list } from 'luci.sys'; import { revision, branch } from 'luci.version'; import { statvfs, uname } from 'luci.core'; import { connect } from 'ubus'; import timezones from 'luci.zoneinfo'; function shellquote(s) { return `'${replace(s, "'", "'\\''")}'`; } function callPackageVersionCheck(pkg) { let version = ""; if ( access('/bin/opkg') ) { // <= v24.10 let fd = popen('opkg list-installed ' + shellquote(pkg) + ' 2>/dev/null'); if (fd) { const re = regexp('^' + pkg + ' - (.+)$', 's'); const m = match(fd.read('all'), re); version = m?.[1]; fd.close(); } } else if ( access('/usr/bin/apk') ) { // > v24.10 let fd = popen('apk list -I ' + shellquote(pkg) + ' 2>/dev/null'); if (fd) { const re = regexp('^' + pkg + '-(.+)$', 's'); const m = match(fd.read('all'), re); version = m?.[1]; fd.close(); } } return version; } const methods = { getVersion: { call: function(request) { return { revision, branch }; } }, getInitList: { args: { name: 'name' }, call: function(request) { let scripts = {}; for (let name in filter(init_list(), i => !request.args.name || i == request.args.name)) { let idx = init_index(name); scripts[name] = { index: idx?.[0], stop: idx?.[1], enabled: init_enabled(name) }; } return length(scripts) ? scripts : { error: 'No such init script' }; } }, setInitAction: { args: { name: 'name', action: 'action' }, call: function(request) { switch (request.args.action) { case 'enable': case 'disable': case 'start': case 'stop': case 'restart': case 'reload': const rc = init_action(request.args.name, request.args.action); if (rc === false) return { error: 'No such init script' }; return { result: rc == 0 }; default: return { error: 'Invalid action' }; } } }, getUnixtime: { call: function(request) { // time() ; Returns the current UNIX epoch. return { result: time() }; } }, setLocaltime: { args: { localtime: 0 }, call: function(request) { let t = localtime(request.args.localtime); if (t) { system(sprintf('date -s "%04d-%02d-%02d %02d:%02d:%02d" >/dev/null', t.year, t.mon, t.mday, t.hour, t.min, t.sec)); system('/etc/init.d/sysfixtime restart >/dev/null'); } return { result: request.args.localtime }; } }, getTimezones: { call: function(request) { let tz = trim(readfile('/etc/TZ')); let zn = cursor()?.get?.('system', '@system[0]', 'zonename'); let result = {}; for (let zone, tzstring in timezones) { result[zone] = { tzstring }; if (zn == zone) result[zone].active = true; }; return result; } }, getLEDs: { call: function() { let result = {}; for (let led in lsdir('/sys/class/leds')) { let s; result[led] = { triggers: [] }; s = trim(readfile(`/sys/class/leds/${led}/trigger`)); for (let trigger in split(s, ' ')) { push(result[led].triggers, trim(trigger, '[]')); if (trigger != result[led].triggers[-1]) result[led].active_trigger = result[led].triggers[-1]; } s = readfile(`/sys/class/leds/${led}/brightness`); result[led].brightness = +s; s = readfile(`/sys/class/leds/${led}/max_brightness`); result[led].max_brightness = +s; } return result; } }, getUSBDevices: { call: function() { let result = { devices: [], ports: [] }; for (let path in glob('/sys/bus/usb/devices/[0-9]*/manufacturer')) { let id = basename(dirname(path)); push(result.devices, { id, vid: trim(readfile(`/sys/bus/usb/devices/${id}/idVendor`)), pid: trim(readfile(`/sys/bus/usb/devices/${id}/idProduct`)), vendor: trim(readfile(path)), product: trim(readfile(`/sys/bus/usb/devices/${id}/product`)), speed: +readfile(`/sys/bus/usb/devices/${id}/speed`) }); } for (let path in glob('/sys/bus/usb/devices/*/*-port[0-9]*')) { let port = basename(path); let link = readlink(`${path}/device`); push(result.ports, { port, device: basename(link) }); } return result; } }, getConntrackHelpers: { call: function() { const uci = cursor(); let helpers = []; let package; if (uci.load('/usr/share/firewall4/helpers')) package = 'helpers'; else if (uci.load('/usr/share/fw3/helpers.conf')) package = 'helpers.conf'; if (package) { uci.foreach(package, 'helper', (s) => { push(helpers, { name: s.name, description: s.description, module: s.module, family: s.family, proto: s.proto, port: s.port }); }); } return { result: helpers }; } }, getFeatures: { call: function() { let result = { firewall: access('/sbin/fw3') == true, firewall4: access('/sbin/fw4') == true, opkg: access('/bin/opkg') == true, bonding: access('/sys/module/bonding'), mii_tool: access('/usr/sbin/mii-tool'), offloading: access('/sys/module/xt_FLOWOFFLOAD/refcnt') == true || access('/sys/module/nft_flow_offload/refcnt') == true, br2684ctl: access('/usr/sbin/br2684ctl') == true, swconfig: access('/sbin/swconfig') == true, zram: access('/sys/class/zram-control') == true, sysntpd: readlink('/usr/sbin/ntpd') != null, ipv6: access('/proc/net/ipv6_route') == true, dropbear: access('/usr/sbin/dropbear') == true, cabundle: access('/etc/ssl/certs/ca-certificates.crt') == true, relayd: access('/usr/sbin/relayd') == true, apk: access('/usr/bin/apk') == true, wifi: access('/sbin/wifi') == true, ufpd: access('/usr/sbin/ufpd') == true, vrf: access('/sys/module/vrf/refcnt') == true, // vrf.ko is loaded netifd_vrf: false, mptcp: access('/proc/sys/net/mptcp/enabled'), }; const wifi_features = [ '11ac', '11ax', '11be', '11r', 'acs', 'eap', 'mesh', 'ocv', 'owe', 'sae', 'suiteb192', 'wep', 'wps', ]; if (access('/usr/sbin/hostapd')) { result.hostapd = { cli: access('/usr/sbin/hostapd_cli') == true }; for (let feature in wifi_features) result.hostapd[feature] = system(`/usr/sbin/hostapd -v${feature} >/dev/null 2>/dev/null`) == 0; } if (access('/usr/sbin/wpa_supplicant')) { result.wpasupplicant = { cli: access('/usr/sbin/wpa_cli') == true }; for (let feature in wifi_features) result.wpasupplicant[feature] = system(`/usr/sbin/wpa_supplicant -v${feature} >/dev/null 2>/dev/null`) == 0; } let fd = popen('dnsmasq --version 2>/dev/null'); if (fd) { const m = match(fd.read('all'), /^Compile time options: (.+)$/s); for (let opt in split(m?.[1], ' ')) { let f = replace(opt, 'no-', '', 1); result.dnsmasq ??= {}; result.dnsmasq[lc(f)] = (f == opt); } fd.close(); } result.odhcpd = false; fd = popen('odhcpd -h 2>/dev/null'); if (fd) { const output = fd.read('all'); if (output) { result.odhcpd = {}; const m = match(output, /^Features: (.+)$/s); for (let opt in split(m?.[1], ' ')) { let f = replace(opt, 'no-', '', 1); result.odhcpd[lc(f)] = (f == opt); } } fd.close(); } // This check can be removed after v25 release result.netifd_vrf = match(callPackageVersionCheck('netifd'), /^20[0-9][0-9]/s)?.[0] >= 2025; fd = popen('ipset --help 2>/dev/null'); if (fd) { for (let line = fd.read('line'), flag = false; length(line); line = fd.read('line')) { if (line == 'Supported set types:\n') { flag = true; } else if (flag) { const m = match(line, /^ +([\w:,]+)\t+([0-9]+)\t/); if (m) { result.ipset ??= {}; result.ipset[m[1]] ??= +m[2]; } } } fd.close(); } return result; } }, getSwconfigFeatures: { args: { switch: 'switch0' }, call: function(request) { // Parse some common switch properties from swconfig help output. const swc = popen(`swconfig dev ${shellquote(request.args.switch)} help 2>/dev/null`); if (swc) { let is_port_attr = false; let is_vlan_attr = false; let result = {}; for (let line = swc.read('line'); length(line); line = swc.read('line')) { if (match(line, /^\s+--vlan/)) { is_vlan_attr = true; } else if (match(line, /^\s+--port/)) { is_vlan_attr = false; is_port_attr = true; } else if (match(line, /cpu @/)) { result.switch_title = match(line, /^switch[0-9]+: \w+\((.+)\)/)?.[1]; result.num_vlans = match(line, /vlans: ([0-9]+)/)?.[1] ?? 16; result.min_vid = 1; } else if (match(line, /: (pvid|tag|vid)/)) { if (is_vlan_attr) result.vid_option = match(line, /: (\w+)/)?.[1]; } else if (match(line, /: enable_vlan4k/)) { result.vlan4k_option = 'enable_vlan4k'; } else if (match(line, /: enable_vlan/)) { result.vlan_option = 'enable_vlan'; } else if (match(line, /: enable_learning/)) { result.learning_option = 'enable_learning'; } else if (match(line, /: enable_mirror_rx/)) { result.mirror_option = 'enable_mirror_rx'; } else if (match(line, /: max_length/)) { result.jumbo_option = 'max_length'; } } swc.close(); if (!length(result)) return { error: 'No such switch' }; return result; } else { return { error: error() }; } } }, getSwconfigPortState: { args: { switch: 'switch0' }, call: function(request) { const swc = popen(`swconfig dev ${shellquote(request.args.switch)} show 2>/dev/null`); if (swc) { let ports = [], port; for (let line = swc.read('line'); length(line); line = swc.read('line')) { if (match(line, /^VLAN [0-9]+:/) && length(ports)) break; let pnum = match(line, /^Port ([0-9]+):/)?.[1]; if (pnum) { port = { port: +pnum, duplex: false, speed: 0, link: false, auto: false, rxflow: false, txflow: false }; push(ports, port); } if (port) { let m; if (match(line, /full[ -]duplex/)) port.duplex = true; if ((m = match(line, / speed:([0-9]+)/)) != null) port.speed = +m[1]; if ((m = match(line, /([0-9]+) Mbps/)) != null && !port.speed) port.speed = +m[1]; if ((m = match(line, /link: ([0-9]+)/)) != null && !port.speed) port.speed = +m[1]; if (match(line, /(link|status): ?up/)) port.link = true; if (match(line, /auto-negotiate|link:.*auto/)) port.auto = true; if (match(line, /link:.*rxflow/)) port.rxflow = true; if (match(line, /link:.*txflow/)) port.txflow = true; } } swc.close(); if (!length(ports)) return { error: 'No such switch' }; return { result: ports }; } else { return { error: error() }; } } }, setPassword: { args: { username: 'root', password: 'password' }, call: function(request) { const u = shellquote(request.args.username); const p = shellquote(request.args.password); return { result: system(`(echo ${p}; sleep 1; echo ${p}) | /bin/busybox passwd ${u} >/dev/null 2>&1`) == 0 }; } }, getBlockDevices: { call: function() { const block = popen('/sbin/block info 2>/dev/null'); if (block) { let result = {}; for (let line = block.read('line'); length(line); line = block.read('line')) { let dev = match(line, /^\/dev\/([^:]+):/)?.[1]; if (dev) { let e = result[dev] = { dev: `/dev/${dev}`, size: +readfile(`/sys/class/block/${dev}/size`) * 512 }; for (let m in match(line, / (\w+)="([^"]+)"/g)) e[lc(m[1])] = m[2]; } } block.close(); const swaps = open('/proc/swaps', 'r'); if (swaps) { for (let line = swaps.read('line'); length(line); line = swaps.read('line')) { let m = match(line, /^(\/\S+)\s+\S+\s+(\d+)/); if (m) { let dev = replace(m[1], /\\(\d\d\d)/g, (_, n) => chr(int(n, 8))); result[`swap:${m[1]}`] = { dev, type: 'swap', size: +m[2] * 1024 }; } } swaps.close(); } return result; } else { return { error: 'Unable to execute block utility' }; } } }, setBlockDetect: { call: function() { return { result: system('/sbin/block detect > /etc/config/fstab') == 0 }; } }, getMountPoints: { call: function() { const fd = open('/proc/mounts', 'r'); if (fd) { let result = []; for (let line = fd.read('line'); length(line); line = fd.read('line')) { const m = split(line, ' '); const device = replace(m[0], /\\([0-9][0-9][0-9])/g, (m, n) => chr(int(n, 8))); const mount = replace(m[1], /\\([0-9][0-9][0-9])/g, (m, n) => chr(int(n, 8))); const stat = statvfs(mount); if (stat?.blocks > 0) { push(result, { device, mount, size: stat.bsize * stat.blocks, avail: stat.bsize * stat.bavail, free: stat.bsize * stat.bfree }); } } fd.close(); return { result }; } else { return { error: error() }; } } }, getRealtimeStats: { args: { mode: 'interface', device: 'eth0' }, call: function(request) { let flags; if (request.args.mode == 'interface') flags = `-i ${shellquote(request.args.device)}`; else if (request.args.mode == 'wireless') flags = `-r ${shellquote(request.args.device)}`; else if (request.args.mode == 'conntrack') flags = '-c'; else if (request.args.mode == 'load') flags = '-l'; else return { error: 'Invalid mode' }; const fd = popen(`luci-bwc ${flags}`, 'r'); if (fd) { let result; try { result = { result: json(`[${fd.read('all')}]`) }; } catch (err) { result = { error: err }; } return result; } else { return { error: error() }; } } }, getConntrackList: { call: function() { return { result: conntrack_list() }; } }, getProcessList: { call: function() { return { result: process_list() }; } }, getBuiltinEthernetPorts: { call: function() { let fd = open('/etc/board.json', 'r'); let board = fd ? json(fd) : {}; let ports = []; for (let k in [ 'lan', 'wan' ]) { if (!board?.network?.[k]) continue; if (type(board.network[k].ports) == 'array') { for (let ifname in board.network[k].ports) { push(ports, { role: k, device: ifname }); } } else if (type(board.network[k].device) == 'string') { push(ports, { role: k, device: board.network[k].device }); } } /* Workaround for targets that do not enumerate all netdevs in board.json */ if (uname().machine in [ 'x86_64' ] && match(ports[0]?.device, /^eth\d+$/)) { let bus = realpath(`/sys/class/net/${ports[0].device}/device/subsystem`); for (let netdev in lsdir('/sys/class/net')) { if (!match(netdev, /^eth\d+$/)) continue; if (length(filter(ports, port => port.device == netdev))) continue; if (realpath(`/sys/class/net/${netdev}/device/subsystem`) != bus) continue; push(ports, { role: 'unknown', device: netdev }); } } return { result: ports }; } }, getOdhcp6cStats: { call: function() { const ubus = connect(); const devs = ubus.call('network.device', 'status'); if (!devs) return false; const dev_stats = {}; for (let dev in devs) { const m = ubus.call(`odhcp6c.${dev}`, 'get_statistics'); // not all interfaces are exposed unless odhcp6c runs on it if (!m) continue; push(dev_stats, dev); dev_stats[dev] = m; } return { result: dev_stats }; } } }; return { luci: methods }; 07070100EA55B6000081A400000000000000000000000169F91E1500004C55000000080000000100000000000000000000001C00000000usr/share/wifi_devices.json{ "pci": [ [ "0x0777", "0x11ac", "0x0777", "0xe7f9", 0, 0, "Ubiquiti", "LiteBeam, 5AC" ], [ "0xffff", "0xffff", "0xffff", "0xb102", 0, 0, "Ubiquiti", "PowerStation2, (18V)" ], [ "0xffff", "0xffff", "0xffff", "0xb202", 0, 0, "Ubiquiti", "PowerStation2, (16D)" ], [ "0xffff", "0xffff", "0xffff", "0xb302", 0, 0, "Ubiquiti", "PowerStation2, (EXT)" ], [ "0xffff", "0xffff", "0xffff", "0xb105", 0, 0, "Ubiquiti", "PowerStation5, (22V)" ], [ "0xffff", "0xffff", "0xffff", "0xb305", 0, 0, "Ubiquiti", "PowerStation5, (EXT)" ], [ "0xffff", "0xffff", "0xffff", "0xc302", 0, 0, "Ubiquiti", "PicoStation2" ], [ "0xffff", "0xffff", "0xffff", "0xc3a2", 10, 0, "Ubiquiti", "PicoStation2, HP" ], [ "0xffff", "0xffff", "0xffff", "0xa105", 0, 0, "Ubiquiti", "WispStation5" ], [ "0xffff", "0xffff", "0xffff", "0xa002", 10, 0, "Ubiquiti", "LiteStation2" ], [ "0xffff", "0xffff", "0xffff", "0xa005", 5, 0, "Ubiquiti", "LiteStation5" ], [ "0xffff", "0xffff", "0xffff", "0xc002", 10, 0, "Ubiquiti", "NanoStation2" ], [ "0xffff", "0xffff", "0xffff", "0xc005", 5, 0, "Ubiquiti", "NanoStation5" ], [ "0xffff", "0xffff", "0xffff", "0xc102", 10, 0, "Ubiquiti", "NanoStation, Loco2" ], [ "0xffff", "0xffff", "0xffff", "0xc105", 5, 0, "Ubiquiti", "NanoStation, Loco5" ], [ "0xffff", "0xffff", "0xffff", "0xc202", 10, 0, "Ubiquiti", "Bullet2" ], [ "0xffff", "0xffff", "0xffff", "0xc205", 5, 0, "Ubiquiti", "Bullet5" ], [ "0x168c", "0xffff", "0x0777", "0xe002", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe003", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe005", 5, 0, "Ubiquiti", "NanoStation, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe006", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe009", 6, 0, "Ubiquiti", "NanoStation, Loco, M9" ], [ "0x168c", "0xffff", "0x0777", "0xe012", 10, 0, "Ubiquiti", "NanoStation, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe035", 3, 0, "Ubiquiti", "NanoStation, M3" ], [ "0x168c", "0xffff", "0x0777", "0xe0a2", 2, 0, "Ubiquiti", "NanoStation, Loco, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe0a5", 1, 0, "Ubiquiti", "NanoStation, Loco, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe102", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe105", 5, 0, "Ubiquiti", "Rocket, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe112", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe115", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1a3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1a5", 5, 0, "Ubiquiti", "PowerBridge, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe1b2", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1b3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1b5", 5, 0, "Ubiquiti", "Rocket, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe1b6", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1b9", 6, 0, "Ubiquiti", "Rocket, M9" ], [ "0x168c", "0xffff", "0x0777", "0xe1c2", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1c3", 3, 0, "Ubiquiti", "Rocket, M3" ], [ "0x168c", "0xffff", "0x0777", "0xe1c5", 5, 0, "Ubiquiti", "Rocket, M5, GPS" ], [ "0x168c", "0xffff", "0x0777", "0xe1c5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1d2", 10, 0, "Ubiquiti", "Rocket, M2, Titanium" ], [ "0x168c", "0xffff", "0x0777", "0xe1d3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1d5", 5, 0, "Ubiquiti", "airOS, XM/XW" ], [ "0x168c", "0xffff", "0x0777", "0xe1d9", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1e3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe1e5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe202", 12, 0, "Ubiquiti", "Bullet, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe205", 6, 0, "Ubiquiti", "Bullet, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe212", 1, 0, "Ubiquiti", "AirGrid, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe215", 1, 0, "Ubiquiti", "AirGrid, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe232", 2, 0, "Ubiquiti", "NanoBridge, M2" ], [ "0x168c", "0xffff", "0x0777", "0xe233", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe235", 1, 0, "Ubiquiti", "NanoBridge, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe239", 6, 0, "Ubiquiti", "NanoBridge, M9" ], [ "0x168c", "0xffff", "0x0777", "0xe242", 9, 0, "Ubiquiti", "AirGrid, M2, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe243", 3, 0, "Ubiquiti", "NanoBridge, M3" ], [ "0x168c", "0xffff", "0x0777", "0xe245", 6, 0, "Ubiquiti", "AirGrid, M5, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe252", 9, 0, "Ubiquiti", "AirGrid, M2, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe255", 6, 0, "Ubiquiti", "AirGrid, M5, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe2a3", 3, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2a5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2b2", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2b5", 1, 0, "Ubiquiti", "NanoBridge, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe2b9", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2c2", 10, 0, "Ubiquiti", "NanoBeam, M2, Int" ], [ "0x168c", "0xffff", "0x0777", "0xe2c3", 6, 0, "Ubiquiti", "Bullet, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe2c4", 6, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe2d2", 12, 0, "Ubiquiti", "Bullet, M2, Titanium, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe2d4", 6, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe2d5", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe2e5", 4, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe302", 12, 0, "Ubiquiti", "PicoStation, M2"], [ "0x168c", "0xffff", "0x0777", "0xe305", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe345", 6, 0, "Ubiquiti", "WispStation, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe3a5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe3b5", 6, 0, "Ubiquiti", "airOS, XM/XW" ], [ "0x168c", "0xffff", "0x0777", "0xe3e5", 4, 0, "Ubiquiti", "PowerBeam, M5, 300" ], [ "0x168c", "0xffff", "0x0777", "0xe402", 10, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe405", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe4a2", 1, 0, "Ubiquiti", "AirRouter" ], [ "0x168c", "0xffff", "0x0777", "0xe4a5", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe4b2", 9, 0, "Ubiquiti", "AirRouter, HP" ], [ "0x168c", "0xffff", "0x0777", "0xe4d5", 5, 0, "Ubiquiti", "Rocket, M5, Titanium" ], [ "0x168c", "0xffff", "0x0777", "0xe4e5", 4, 0, "Ubiquiti", "PowerBeam, M5, 400" ], [ "0x168c", "0xffff", "0x0777", "0xe5e5", 4, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe6a2", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe6b2", 1, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe6b5", 5, 0, "Ubiquiti", "Rocket, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe6c2", 6, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe6e5", 4, 0, "Ubiquiti", "PowerBeam, M5, 400, ISO" ], [ "0x168c", "0xffff", "0x0777", "0xe7f8", 2, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe805", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0xffff", "0x0777", "0xe812", 6, 0, "Ubiquiti", "NanoBeam, M2, 13" ], [ "0x168c", "0xffff", "0x0777", "0xe815", 4, 0, "Ubiquiti", "NanoBeam, M5, 16" ], [ "0x168c", "0xffff", "0x0777", "0xe825", 4, 0, "Ubiquiti", "NanoBeam, M5, 19" ], [ "0x168c", "0xffff", "0x0777", "0xe835", 6, 0, "Ubiquiti", "AirGrid, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe845", 1, 0, "Ubiquiti", "NanoStation, Loco, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe855", 5, 0, "Ubiquiti", "NanoStation, M5, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe865", 6, 0, "Ubiquiti", "LiteBeam, M5" ], [ "0x168c", "0xffff", "0x0777", "0xe866", 6, 0, "Ubiquiti", "NanoStation, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe867", 2, 0, "Ubiquiti", "NanoStation, Loco, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe868", 7, 0, "Ubiquiti", "Rocket, M2, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe869", 2, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe875", 4, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe879", 2, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe885", 4, 0, "Ubiquiti", "PowerBeam, M5, 620, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe895", 4, 0, "Ubiquiti", "airOS, XW" ], [ "0x168c", "0xffff", "0x0777", "0xe8a5", 1, 0, "Ubiquiti", "NanoStation, Loco, M5"], [ "0x168c", "0xffff", "0x0777", "0xe8b5", 5, 0, "Ubiquiti", "airOS, XM" ], [ "0x168c", "0x001b", "0x0777", "0x3002", 10, 0, "Ubiquiti", "XR2" ], [ "0x168c", "0x001b", "0x7777", "0x3002", 10, 0, "Ubiquiti", "XR2" ], [ "0x168c", "0x001b", "0x0777", "0x3b02", 10, 0, "Ubiquiti", "XR2.3" ], [ "0x168c", "0x001b", "0x0777", "0x3c02", 10, 0, "Ubiquiti", "XR2.6" ], [ "0x168c", "0x001b", "0x0777", "0x3b03", 10, 0, "Ubiquiti", "XR3-2.8" ], [ "0x168c", "0x001b", "0x0777", "0x3c03", 10, 0, "Ubiquiti", "XR3-3.6" ], [ "0x168c", "0x001b", "0x0777", "0x3003", 10, 0, "Ubiquiti", "XR3" ], [ "0x168c", "0x001b", "0x0777", "0x3004", 10, 0, "Ubiquiti", "XR4" ], [ "0x168c", "0x001b", "0x0777", "0x3005", 10, 0, "Ubiquiti", "XR5" ], [ "0x168c", "0x001b", "0x7777", "0x3005", 10, 0, "Ubiquiti", "XR5" ], [ "0x168c", "0x001b", "0x0777", "0x3007", 10, 0, "Ubiquiti", "XR7" ], [ "0x168c", "0x001b", "0x0777", "0x3009", 10, -1520, "Ubiquiti", "XR9" ], [ "0x168c", "0x001b", "0x168c", "0x2063", 0, 0, "Atheros", "AR5413" ], [ "0x168c", "0x0013", "0x168c", "0x1042", 1, 0, "Ubiquiti", "SRC" ], [ "0x168c", "0x0013", "0x0777", "0x2041", 10, 0, "Ubiquiti", "SR2" ], [ "0x168c", "0x0013", "0x0777", "0x2004", 6, 0, "Ubiquiti", "SR4" ], [ "0x168c", "0x0013", "0x7777", "0x2004", 6, 0, "Ubiquiti", "SR4" ], [ "0x168c", "0x0013", "0x0777", "0x1004", 6, 0, "Ubiquiti", "SR4C" ], [ "0x168c", "0x0013", "0x7777", "0x1004", 6, 0, "Ubiquiti", "SR4C" ], [ "0x168c", "0x0013", "0x168c", "0x2042", 7, 0, "Ubiquiti", "SR5" ], [ "0x168c", "0x0013", "0x7777", "0x2009", 12, -1500, "Ubiquiti", "SR9" ], [ "0x168c", "0x0027", "0x168c", "0x2082", 7, 0, "Ubiquiti", "SR71A" ], [ "0x168c", "0x0027", "0x0777", "0x4082", 7, 0, "Ubiquiti", "SR71" ], [ "0x168c", "0x0029", "0x0777", "0x4005", 7, 0, "Ubiquiti", "SR71-15" ], [ "0x168c", "0x002a", "0x0777", "0xe302", 12, 0, "Ubiquiti", "PicoStation, M2" ], [ "0x168c", "0x002a", "0x0777", "0xe012", 12, 0, "Ubiquiti", "NanoStation, M2" ], [ "0x168c", "0x002a", "0x0777", "0xe005", 5, 0, "Ubiquiti", "NanoStation, M5" ], [ "0x168c", "0x002a", "0x0777", "0xe202", 12, 0, "Ubiquiti", "Bullet, M2" ], [ "0x168c", "0x002a", "0x0777", "0xe805", 5, 0, "Ubiquiti", "Bullet, M5" ], [ "0x168c", "0x002a", "0x0777", "0xe345", 0, 0, "Ubiquiti", "WispStation, M5" ], [ "0x168c", "0x0029", "0x168c", "0xa094", 0, 0, "Atheros", "AR9220" ], [ "0x168c", "0x0029", "0x168c", "0xa095", 0, 0, "Atheros", "AR9223" ], [ "0x168c", "0x002a", "0x168c", "0xa093", 0, 0, "Atheros", "AR9280" ], [ "0x168c", "0x002b", "0x168c", "0xa091", 0, 0, "Atheros", "AR9285" ], [ "0x168c", "0x002d", "0x168c", "0x209a", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x002e", "0x1a3b", "0x1121", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x002e", "0x0777", "0xe0a2", 8, 0, "Ubiquiti", "NanoStation, Loco, M2, (XM)" ], [ "0x168c", "0x002e", "0x168c", "0x30a4", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x002e", "0x168c", "0xa199", 0, 0, "Atheros", "AR9287" ], [ "0x168c", "0x0030", "0x168c", "0x3112", 0, 0, "Atheros", "AR9380" ], [ "0x168c", "0x0030", "0x168c", "0x3114", 0, 0, "Atheros", "AR9390" ], [ "0x168c", "0x0033", "0x168c", "0xa120", 0, 0, "Atheros", "AR9580" ], [ "0x168c", "0x0033", "0x168c", "0xa136", 0, 0, "Atheros", "AR9580" ], [ "0x168c", "0x0033", "0x168c", "0x3123", 0, 0, "Atheros", "AR9590" ], [ "0x168c", "0x0033", "0x19b6", "0xd014", 0, 0, "MikroTik", "R11e-5HnD" ], [ "0x168c", "0x0033", "0x19b6", "0xd057", 0, 0, "MikroTik", "R11e-5HnDr2" ], [ "0x168c", "0x0033", "0x19b6", "0xd016", 0, 0, "MikroTik", "R11e-2HPnD" ], [ "0x168c", "0x0034", "0x17aa", "0x3214", 0, 0, "Atheros", "AR9462" ], [ "0x168c", "0x003c", "0x0000", "0x0000", 0, 0, "Qualcomm Atheros", "QCA9880" ], [ "0x168c", "0x003c", "0x168c", "0x3223", 0, 0, "Qualcomm Atheros", "QCA9880" ], [ "0x168c", "0x003c", "0x1a56", "0x1420", 0, 0, "Qualcomm Atheros", "QCA9862" ], [ "0x168c", "0x003c", "0x19b6", "0xd03c", 0, 0, "Mikrotik", "R11e-5HacT" ], [ "0x168c", "0x003c", "0x19b6", "0xd075", 0, 0, "Mikrotik", "R11e-5HacD" ], [ "0x168c", "0x003e", "0x168c", "0x3361", 0, 0, "Qualcomm Atheros", "QCA6174" ], [ "0x168c", "0x0046", "0x168c", "0xcafe", 0, 0, "Qualcomm Atheros", "QCA9984" ], [ "0x168c", "0x0040", "0x168c", "0x0002", 0, 0, "Qualcomm Atheros", "QCA9990" ], [ "0x168c", "0x0046", "0x0777", "0xe535", 0, 0, "Qualcomm Atheros", "QCA9994" ], [ "0x168c", "0x0046", "0x0777", "0xe5a2", 0, 0, "Qualcomm Atheros", "QCA9994" ], [ "0x168c", "0x0050", "0x0000", "0x0000", 0, 0, "Qualcomm Atheros", "QCA9887" ], [ "0x168c", "0x0056", "0x0000", "0x0000", 0, 0, "Qualcomm Atheros", "QCA9886" ], [ "0x17cb", "0x1104", "0x17cb", "0x1104", 0, 0, "Qualcomm Atheros", "QCN6024/9024/9074" ], [ "0x1814", "0x3051", "0x1814", "0x0007", 0, 0, "Ralink", "Rt3051" ], [ "0x1814", "0x3052", "0x1814", "0x0008", 0, 0, "Ralink", "Rt3052" ], [ "0x1814", "0x3350", "0x1814", "0x000b", 0, 0, "Ralink", "Rt3350" ], [ "0x1814", "0x3662", "0x1814", "0x000d", 0, 0, "Ralink", "Rt3662" ], [ "0x11ab", "0x2a55", "0x11ab", "0x0000", 0, 0, "Marvell", "88W8864" ], [ "0x02df", "0x9135", "0x0000", "0x0000", 0, 0, "Marvell", "88W8887" ], [ "0x11ab", "0x2b40", "0x11ab", "0x0000", 0, 0, "Marvell", "88W8964" ], [ "0x02df", "0x9141", "0x0000", "0x0000", 0, 0, "Marvell", "88W8997" ], [ "0x14c3", "0x0608", "0x14c3", "0x0608", 0, 0, "AMD", "RZ608" ], [ "0x14c3", "0x7603", "0x14c3", "0x7603", 0, 0, "MediaTek", "MT7603E" ], [ "0x14c3", "0x7610", "0x14c3", "0x7610", 0, 0, "MediaTek", "MT7610E" ], [ "0x14c3", "0x7612", "0x14c3", "0x7612", 0, 0, "MediaTek", "MT7612E" ], [ "0x14c3", "0x7663", "0x14c3", "0x7663", 0, 0, "MediaTek", "MT7613BE" ], [ "0x14c3", "0x7615", "0x7615", "0x14c3", 0, 0, "MediaTek", "MT7615E" ], [ "0x14c3", "0x7628", "0x14c3", "0x0004", 0, 0, "MediaTek", "MT76x8" ], [ "0x14c3", "0x7650", "0x14c3", "0x7650", 0, 0, "MediaTek", "MT7610E" ], [ "0x14c3", "0x7662", "0x14c3", "0x7662", 0, 0, "MediaTek", "MT76x2E" ], [ "0x14c3", "0x7915", "0x14c3", "0x7915", 0, 0, "MediaTek", "MT7915E" ], [ "0x14c3", "0x7906", "0x14c3", "0x7906", 0, 0, "MediaTek", "MT7916AN" ], [ "0x14c3", "0x7990", "0x14C3", "0x6639", 0, 0, "MediaTek", "MT7996E" ], [ "0x14c3", "0x7992", "0x14C3", "0x7992", 0, 0, "MediaTek", "MT7992E" ], [ "0x14e4", "0xaa52", "0x14e4", "0xaa52", 0, 0, "Broadcom", "BCM43602" ], [ "0x02d0", "0xa9a6", "0x0000", "0x0000", 0, 0, "Cypress", "CYW43455" ], [ "0x02d0", "0x4345", "0x0000", "0x0000", 0, 0, "Cypress", "CYW43455" ], [ "0x1ae9", "0x0310", "0x1ae9", "0x0000", 0, 0, "Wilocity", "Wil6210" ], [ "0x0000", "0x0000", "0x148f", "0x7601", 0, 0, "MediaTek", "MT7601U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7961", 0, 0, "MediaTek", "MT7921AU" ], [ "0x0000", "0x0000", "0x0b05", "0x1833", 0, 0, "ASUS", "USB-AC54" ], [ "0x0000", "0x0000", "0x0b05", "0x17eb", 0, 0, "ASUS", "USB-AC55" ], [ "0x0000", "0x0000", "0x0b05", "0x180b", 0, 0, "ASUS", "USB-N53, B1" ], [ "0x0000", "0x0000", "0x0e8d", "0x7612", 0, 0, "Aukey", "USBAC1200" ], [ "0x0000", "0x0000", "0x057c", "0x8503", 0, 0, "AVM", "FRITZ!WLAN, AC860" ], [ "0x0000", "0x0000", "0x7392", "0xb711", 0, 0, "Edimax", "EW-7722UAC" ], [ "0x0000", "0x0000", "0x0e8d", "0x7632", 0, 0, "High, Cloud", "HC-M7662BU1" ], [ "0x0000", "0x0000", "0x2c4e", "0x0103", 0, 0, "Mercury", "UD13" ], [ "0x0000", "0x0000", "0x0846", "0x9053", 0, 0, "Netgear", "A6210" ], [ "0x0000", "0x0000", "0x045e", "0x02e6", 0, 0, "Microsoft", "XBox, One, Wireless, Adapter" ], [ "0x0000", "0x0000", "0x045e", "0x02fe", 0, 0, "Microsoft", "XBox, One, Wireless, Adapter" ], [ "0x0000", "0x0000", "0x148f", "0x7610", 0, 0, "MediaTek", "MT7610U" ], [ "0x0000", "0x0000", "0x13b1", "0x003e", 0, 0, "Linksys", "AE6000" ], [ "0x0000", "0x0000", "0x0e8d", "0x7610", 0, 0, "Sabrent", "NTWLAC" ], [ "0x0000", "0x0000", "0x7392", "0xa711", 0, 0, "Edimax", "7711MAC" ], [ "0x0000", "0x0000", "0x148f", "0x761a", 0, 0, "TP-Link", "TL-WDN5200" ], [ "0x0000", "0x0000", "0x0b05", "0x17d1", 0, 0, "ASUS", "USB-AC51" ], [ "0x0000", "0x0000", "0x0b05", "0x17db", 0, 0, "ASUS", "USB-AC50" ], [ "0x0000", "0x0000", "0x0df6", "0x0075", 0, 0, "Sitecom", "WLA-3100" ], [ "0x0000", "0x0000", "0x2019", "0xab31", 0, 0, "Planex", "GW-450D" ], [ "0x0000", "0x0000", "0x2001", "0x3d02", 0, 0, "D-Link", "DWA-171, rev, B1" ], [ "0x0000", "0x0000", "0x0586", "0x3425", 0, 0, "Zyxel", "NWD6505" ], [ "0x0000", "0x0000", "0x07b8", "0x7610", 0, 0, "AboCom", "AU7212" ], [ "0x0000", "0x0000", "0x04bb", "0x0951", 0, 0, "I-O, DATA", "WN-AC433UK" ], [ "0x0000", "0x0000", "0x057c", "0x8502", 0, 0, "AVM", "FRITZ!WLAN, AC430" ], [ "0x0000", "0x0000", "0x293c", "0x5702", 0, 0, "Comcast", "Xfinity, KXW02AAA" ], [ "0x0000", "0x0000", "0x20f4", "0x806b", 0, 0, "TRENDnet", "TEW-806UBH" ], [ "0x0000", "0x0000", "0x7392", "0xc711", 0, 0, "Devolo", "WiFi, Stick, ac" ], [ "0x0000", "0x0000", "0x0df6", "0x0079", 0, 0, "Sitecom", "WL-356" ], [ "0x0000", "0x0000", "0x2357", "0x0123", 0, 0, "TP-Link", "T2UHP, US, v1" ], [ "0x0000", "0x0000", "0x2357", "0x010b", 0, 0, "TP-Link", "T2UHP, UN, v1" ], [ "0x0000", "0x0000", "0x2357", "0x0105", 0, 0, "TP-Link", "Archer, T1U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7630", 0, 0, "MediaTek", "MT7630U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7650", 0, 0, "MediaTek", "MT7650U" ], [ "0x0000", "0x0000", "0x0e8d", "0x7663", 0, 0, "MediaTek", "MT7663U" ], [ "0x0000", "0x0000", "0x043e", "0x310c", 0, 0, "LG", "LGSBWAC02" ], [ "0x0000", "0x0000", "0x0bda", "0x8176", 0, 0, "Realtek", "RTL8188CU" ], [ "0x0000", "0x0000", "0x0bda", "0xf179", 0, 0, "Realtek", "RTL8188FTV" ] ], "compatible": { "qca,ar9130-wifi": [ "Atheros", "AR9130" ], "qca,ar9330-wifi": [ "Atheros", "AR9330" ], "qca,ar9340-wifi": [ "Atheros", "AR9340" ], "qca,qca9530-wifi": [ "Qualcomm Atheros", "QCA9530" ], "qca,qca9550-wifi": [ "Qualcomm Atheros", "QCA9550" ], "qca,qca9560-wifi": [ "Qualcomm Atheros", "QCA9560" ], "qcom,ipq4019-wifi": [ "Qualcomm Atheros", "IPQ4019" ], "qcom,ipq6018-wifi": [ "Qualcomm Atheros", "IPQ6018" ], "qcom,ipq8074-wifi": [ "Qualcomm Atheros", "IPQ8074" ], "mediatek,mt7622-wmac": [ "MediaTek", "MT7622" ], "mediatek,mt7628-wmac": [ "MediaTek", "MT7628" ], "mediatek,mt7981-wmac": [ "MediaTek", "MT7981" ], "mediatek,mt7986-wmac": [ "MediaTek", "MT7986" ], "ralink,rt2880-wmac": [ "Ralink", "Rt2880" ], "ralink,rt3050-wmac": [ "Ralink", "Rt3050" ], "ralink,rt3352-wmac": [ "Ralink", "Rt3352" ], "ralink,rt3883-wmac": [ "Ralink", "Rt3883" ], "ralink,rt5350-wmac": [ "Ralink", "Rt5350" ], "ralink,rt7620-wmac": [ "MediaTek", "MT7620" ] } } 07070100EA4C7A000041ED00000000000000000000000269F91E1500000000000000080000000100000000000000000000000900000000usr/sbin07070100EA55170000A1FF00000000000000000000000169F91E1500000006000000080000000100000000000000000000001300000000usr/sbin/mkfs.ext3mke2fs07070100EA55160000A1FF00000000000000000000000169F91E1500000006000000080000000100000000000000000000001300000000usr/sbin/mkfs.ext2mke2fs07070100EA57A40000A1FF00000000000000000000000169F91E1500000004000000080000000100000000000000000000001100000000usr/sbin/hostapdwpad07070100EA5598000081ED00000000000000000000000169F91E15000327F8000000080000000100000000000000000000000C00000000usr/sbin/iwELF @@8 @@ @ @8 8 8pX X X    H H HNOp p p@@dtQdtRH H H&&/lib/ld-musl-mips64-sf.so.1@l|  `  o P X   0  p  p5@ #ppp p 6pZp"poo  oo jCZL" 9. /6A'5E:V+-B> & X7RN #8, UCH03D*1=F(%M!)$42?<SI;QJ@WGTPKYO   `  R  0  o #   o o op o` oP_ o@ o0| o E o oX n n n nB n n n nO np* n` nP n@[ n0" n  nm nX m m m? m6 m m m mN mpf m`p mP4 m@W m0? m  m m l l' l lG l l l-"G lb lp l` lPw l@( l0 l  l l k k kt k k~ k ki k6 kp"n k` kPd k@  k0 k  k k je j j j__RLD_MAP_init_fini__register_frame_info__deregister_frame_info__libc_start_mainnla_putstrchrsscanfstrcmpstrtoulstrlenputchargenlmsg_attrdatagenlmsg_attrlennla_parseif_indextonamenl_socket_add_membershipsstderrfputsnl_cb_allocnl_cb_setnl_recvmsgsnl_cb_putnla_oknla_next__floatunsidf__muldf3strncmpstrtod__truncdfsf2__mulsf3__fixsfsi__stack_chk_guardstrtok_r__stack_chk_fail__addsf3__fixunssfsi__floatsisf__nesf2nlmsg_allocfprintfnlmsg_freeexitsnprintfopenreadcloseatoistrnlenstrtoll__errno_locationif_nametoindexgenlmsg_putnl_send_auto_completenl_cb_errcallocmemcpymemcmpstrtolmallocstrrchrmemsetgettimeofdaylocaltimestrftimestdoutfflushnl_socket_allocgenl_connectnl_socket_freesetsockoptgenl_ctrl_resolvestrerrorclock_gettimesprintf__fixdfsistrcasecmp__ltdf2__gtdf2__adddf3__fixunsdfsistrcpylibnl-tiny.so.1libgcc_s.so.1libc.so__start___cmd__stop___cmdGCC_4.2.0GLIBC_2.0GCC_3.0| '`` ii y&Pg߼߿g g`<-gܢHߔX($0hXP@8d)(%߅Hߙ%D d@߂X$&pC(#fQ߅Hߙ$ d@߅H߅H߄Hߙ(d d%߿h߼`߶XߵPߴH߳@߲8߱0%߰(gp߅Hߙ$ d@ߙߙ`f%g9? &% @ %@ ߂h߄HߙE d$ߙ` @C$߂h߄HߙE d($ߙߤ @6߅Hߙdp % ߒPgg@BfR*@@߅H@%f'&$@% ` %@%$u$߱ kߙ(߄Hޅ( d߅Hߙ`$d@g9<  %߄Pߙ dt@߄Pߙ dtPߙ ߤ߿hߢߙ D$g$  $߅HߤߙH dPA߂h߄HߙE dX$߅Hߙ$dx  %@߅H*@ߙ  %$C$#@%f'&$bߙ(@% 8%0%$ߙd  %@ߙ(*@@%f'&$  %@ ߙ`g9 $('/(@@% 8%0%$ߙ`(%g9? %ߙߙ߂h # Q߅Hߙ@8%@0%d  %%%vhw`^/ %(-<-$$ g<-gߙ߈ ߇(0%߄0H% d߿߼gg<-gPߐX(@߂P@ߙP߄X dH$(߿߼߰g g<-g߂@߅X߄Xߙd( dH߿߼g%%<y-dcb8Y b@ E%$$%%<y-,@!dc4bH dBD-BC-@bPdBobPdBobPdBobPdBobPdBpbPdBpbPdBpbPdBp bPdBp(bPdBo< -d܂P܃8dBb܂@@%<(-d\ܢX$C(ܣPܤ8dcܣ@dB(b%$$< - d܂P܃8dB\b܂X܃@dB(b%$< -d܂P܃8dBb܂@@%+< -d܂`܃8dBRb܂@@%<y-$dch,@ bPdBpX$ bPdBpbPdBp`bPdBp0bPdBpp< -d܂`܃8dBab܂@@%%%g<-gߙ8% $߿߼gg<-gߙ8% $߿߼gg<-gLߙ8% $߿߼gg@<-$g%%%%6$ ߙ$-` % gPgL@/ߙ߅PgH8%dp ` %$b%L$,B@%PHb(+YB(+WC+@U$%F  %$B$b +$߿߼ߵߴ߲߳߱߰g$ $ g`g\gXgTgtgpglgh'gd߅Pg|0 gx8%dp` %( ,C`"L$,c`$B %$C(+$%fe%#+`f$߅P 8%dp` % ,C%<y-dcyh %(% 0%g<-g߅Pߙ dp+߃`߄8߿dcP߃@߼b%g$g <-gd%߅Pߙd|( %@ ߅P$ߙg$$S  %@ % ߿(ߙdp  %@$߿(߼ ߱߰g0裠$F<y-dcy`g9"< $g<-g%߅Pߙdp %@$߅Pߙdq  %@ $߅Pߙdq  %@$$"%߿߼߱߰g $g0<-gߑX(f1 8%% %$ߙ$ `(%@<>P-B-߿8߼0ߴ(߳ ߲߱߰g@&f1(%(@1g <-g<ߒX$fP((@( ߅Pߙdq ` %@߅PQ(߂P߃8߿(dB b߂@߳P߼ ߲߱߰%g0ߙdq ` %@߂P$$F $$߿(߼ ߰g0g <-g~hߙ$%( gߣc`ߙg$$ % @%a%$|g <-g}ߙ$ %g( ߣc` ,C`%߿(߼ ߰g0$g <-g}\ߙ$ %g( ߣc` ,C`%߿(߼ ߰g0$$F1g <-g|߄Pߙdp%(  (%@ $"@$ߙ$ g  %ߣc` ߙg$$? % @%a%$|$߿(߼ ߱߰g0$$F$$C $$߿8߼0߳(߲ ߱߰g@g0<-g|(߄Pߙdp%`(% 8% %@ $b@$ߙ$ g ` %ߣc`ߙg`8%$$@ % @$|$B%߄Pߙ dq @$ߙ$  gߣc`ߙ`8%$$R % A$|%gpx<-ph`XPH@8gz$߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8g$%%$$߂P%dBq(߂P%dBq0g(%%%%<ߣ>b-^ߙߥ  %@ߙ$$fRP*@-ߙ $ߙg($$> % (A,$|ߥ  %@ߙ $$ߥ % $ ߤ($C,c` $c$c@%fR@%$g($$= % (@ ߙ%$F $$߿(߼ ߰g0@g <-gxߙ$ %( g,c`ߣc`ߙg$$Y % @%a%$|$F=g (<"-@0gw߄Pߙ%dq8  (%@ߙ8%0%$ߙ  %A%$|߿(߼ ߱߰g0$ g  %ߣc`<$B4cC+` $C`g$$Yݣ$$g0<-$ 8(gv%0%߅Pߙdq@  %@Aߙ0%g  %ߣc`%ߙg@8%$$i % @ ߙ@8%$$j % @%a%$|$߿8߼0߳(߲ ߱߰g@$$ߙg0% `(%@%ߢB@$ߙD0% `(%ߣc`$$$F $$߿8߼0߲(߱ ߰g@g0 8(<B-gu@%@$ߙ%$  gߣc`@@%1߄Pߙ (% dqH@ ߄Pg$$ ߙ  %@%ߙ (% dqP@߄Pg$$ ߙ (% dq`@g$$ $|$$gP<-gt40ߙ %X@8(H%% %ߙ0 8%$4 @ %@a&q ߙ9%$ g gߣc`9ߙfߙp  %@ ߅Pߙ8%$$ @ %@E&1 f߅Pߙ dqh@$$3߅Pߙdqp  %@#߅Pߙg $$5@ % @$$"%$߿X߼PߴH߳@߲8߱0߰(g`8%$$&@ % @&q %fߙdqx  %@$ߙg $$5@ % A$(@ $$߿H߼@߳8߲0߱(߰ gPg@<-gr48ߙ` %H0( %% %ߙ0`8%$4  %@0ߙpEg ` %@$ߙ`8%$$  %@"߅PSߙdqp ` %@߅Pߙg$$5 % %@ߙD$  gߣc`ߙg $$& % A$ߙdqx ` %@ߙ$g$$5 % $:+S%$Fg<-gpߙ % %ߙ0 8%$  %@$|%߿߼߱߰g $$Fg<-gpߙ % %ߙ0 8%$$  %@$|%߿߼߱߰g $g<-go|߄Hߙ( d߿߼gg<-go@߄Hߙ( d߿߼gg<-go߄Pߙ( dq߿߼gg<-gnȔ߄Pߙ( dq߿߼gg<-gn߄Hߙ( d߿߼gg<-gnP߄Pߙ( dq߿߼gg<-gn߄Pߙ( dq߿߼gg<-gm،߄Pߙ( dq߿߼gg<-gm$ߙ(C$C$C߄P߄Pdp ߿߼g߄Pdq߄Pdqdqg<-gm ߄Pߙ( dq߿߼g$F1g <-gl%߅Pߙd|(  %@߅Pߙdp  %@%߄Pߙ( (% dq$߿(߼ ߱߰g0$ߙg $$] % @%a%$|$g<-gl,`ߙ(߃X%dc߄PC-0%E dq߿߼g߄H dh߿g <-gk߄PߐXߙߑPdqf(f f1rߙ( % f(߿(߼ ߲߱߰g0g<- gk ߙ`g98 $߿߼߰g $$ߙ`g9#  %@ ߃P߄Pߙ((% dr ߙ`g98 $߄8dc߃@b%g<-gjh߄Pߙ drH߂P߃8߿dBɜb߂@߼@%gg<-gj߄Pߙ dr߂`߃8߿dBQb߂@߼@%g܂@^g0<-gi %%܅߄Pߙ(dr(8%% %"+@ ."P+@4߿8$ ߄P@߄Pߙ(ߑP(%dr%f1s %P-ߙ(E % fS*@P-߄Hd ߙ  ߿8߄PEߙ( ds߿8߼0ߴ(߳ ߲߱߰g@߄Pds(9߼0߱8%@0%ߴ(߲(%` %߰߳  g@g܂0<-gh8Qߙx%  %߄Pߙ( 0%@(% ds`@&ߙ`g9l D߄Pߙ(@(% dsx@ߙ(߄PE ds@ߙ(߄PE ds @߿Eߙ(߄P ds߿߼߱߰g 8@$BC,C` $@߅P߅PdsH߄Pߙ( dsC ߅Pdp(߅PdsPds@߅PdsXgX<-gf0ߓPߙ(%fdsH(h`P@8 % %$$Cߙ($C$C߄Pds 8@ߙ(E߄Pߙ( dtߙ( fds zߙ % ߕPߙP$  "-߂PߞPdBtftgsߙ$   % @%QߙP $ $$CYߙ($CX$C߄Pds 8@ߙ(E  %ߙ(  %ߙ((/ߤ 0%( fߙ(߿h@%B@>ߙP $ ߙ % ߕPfss-ftߙ % $ ߙ(" @(%` % @%(/ߙ(0%( % fߙߙP $ ߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gp߄P~ds߄P{dt %߄PdtߙP $ ߒPfRsgX<8-'h`PH@0( gdB*$@ܷܳ߂X߄PE(ߙ(dt  ߞ߄Pߙdt@ ߑ߄PߙdtP >/߅H߄Pߙ(ddtx ߄Pߙdt %߂HdB߂`dB<<>Q*`߄Pߙ dt߄Pߙ du߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gp%%-P;8@8ߙ (%@1(@ % @ <߅Hߙ`0%dg9<  %%<>-R@B8PB(@B @ `ߙD `(%@ߥ߹0% @ %&<>Q*@<&@g<-gaߙP $ ߿߼gg<-ga`ߙP$  %߄Pߙ( duؒ߃X0BdcC-߄PEߙ( du߃X0Bdc߄PC-Eߙ( dv ߿߼߰g g0<-g`߂PߙPdBv@߂P$ dBo߂P(dBp߂P%dBo8 @(%,B@߆PdB ]-F߄Pߙ( dvP߄Pߙ( dvp߄Pߙ( dv߄Pߙ( dv߿8߼0߰(g@dp(g<-g_ߙP$  %*8E%߄P*(%ߙ(0 dv߄Pߙ( dv*8E%߄P*(%ߙ(0 dw߿߼߰g gX<-g_80ߔPߓ`H$ߖP h`P@(%%fsAfw."@ ߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ ߰gp8R%B%2W&"*@%ߙ`gg9A ߒP߄Pߙ( (%dw fRwQ!21ߙ(@ % f2QߙP $ ߿h$$ *.g`% f߄Pߙ(@0%(%dw %@!ߙ(ߙP $ &1`% g.@ߙ(߄PdwHߙ &1f fwh&1f7/-21@߄Pdw % &Rg2Rg<-g\ߙP$ % % ߙ(߄P0dx ߿߼߱߰g ߄P(%dxgh<-g\pߙP$ xp`XPH@80(% %߄Pߙ(8%0R`0%(%dx8B% ߄Pߙ(3dxh 32R2w@2߄Pߙ dx߄P0E*(%ߙ(,- dxߙ߄P dx<?aߙ߄P dx2ߙ߄P dyߙ߄P dy߄Pߙ(2? dy@2@@ߙ߄P dyX߄Pߙ dyp߄Pߙ(@(%dy ߕH߂P@%dBy߂P%dByfHߙ(ߤ@&^% 2R$B(xߙ  %$ߙ()*" @߄P߄Pdyߙ ߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(gߤߙ( d$ߙ(dy $ aQ*@-߄Pdz$߄Pߙ(Edz0&R 2R߿x2#*1 ߙ(߄PdzP߄PߓPdzp-%fsz$ PQ-ߙ(E` % f14Q-ߙP $ ߄PEߙ( dz߄Pߙ( dz2$C)ߙ$C)$C"߄P߄Pdo 2@ߙ߄P dz߄Pߙ((0 d{߄PEߙ( d{0߄PEߙ( d{X߄PEߙ( d{do߄Pdo߄PdzgP<-gX$ߙP$ X@80%( HgBߙPfE` %8Q %߄Pߙ(&1`(%d{ 21." @W߿X2P%0S0B@ ߄PE ߙ(0 d{$ "G߿X$ $ 2b @2b@&2+@;2b@@2b&2+@42b@P-EB߄P*(%ߙ($&~f$%%Q ߢ "8@ ߢ L"$Cߢ ߙߥ8 $" ߢ dB ߢdBߣ@<>b-Q ߢ"(@ߢ"8Wߢ"$8C$C$Bߢߙߥ  $@ߣ$b'"@'ߢdB@$R$CG$$BD$(@@f%90 ߤ (%@8@%ߢ0@Q"@ ߤ9(@%8%`0% (%+߿ߙ @ @%߂h߄HEdxߙ $ߕXߙ( +  x(ߙ + x @%@%@ߙ߂h߄PߙE d($Xߙ  %ߙ  %ߙ@ ` %Xߢ*)GX%@%0%(% ` %$BP$BS$B gXX$$ߙ ` %@N߂h9(ߦߤ@%8% `(%@ԯXߢߙP 0ߙ0$Bߢ`(%D 0@ߙ߆PgX$8%dƃ$ % X߇`ߙ@%d$$  %߇`ߙ@%d$$  %߇`ߙ@%d$(%  %X@ߙ0ߢD (%XXgX$$XgX$$߄HEodMfg`<8-$XPH0h@( gd%%`Md߅Hߙd% %@%&3f$ߙ`g9Sd @ %@.@%ߙ`&p$  %@>@%W߂Hf$dB"߂H%dB"S(*)<ߙP0%@% 8%(%g9 @ %ߙ % @% ߿h ߈Hߙ`e g$0%$g9ZL @ %߿h߼`߷X߶PߵHߴ@߳8߲0߱(%߰ gp%>-Bdcd$g <-g߂HߙPdB߂P@%%8%$(%g9dBp( @߂P߂XB(@ ߂Pߙ$  %0b4Bb߂P߃8߿(dBېb߂@߰߼ @%g0gP<-g߅Xߙhg$ %d %xp% %߅XߒPߙg8$(d  % fRޢ8%@%$(%` %@% @ @%ߑXf1("@ߙ" @߿߄Hߙ d߿߼߶ߵߴ߲߳x߱p%߰hg (% % %" @߄Hߙ((% dޢ@%8%$(%` %@%P 8@%g<-g߂H%dB(߂H-dB0 ߂`߃8dBab߂@@%߿߼g ߙP@%8%$g9 (%$C@߿$g@<-(0 H8(g%%%@_%ߑPߙf%q  %@ f1qߑPߙf%q  %@Pf1q߂XQH$q #ߙ`$$  %@^@%Bq#߂HfdB`߂H%dB8B-&ss(*5dB0%ߔP@%f8%(%%  %ߙ % @%`߿Hߙ`g9Sd  %@ $#߆Hߙ`H%@%8%d$g9ZL  %$#C߇X߄Hߙ d@߿H߼@߶8ߵ0ߴ(߲߱߰`%߳ gP$E$cdB߿H߼@߶8߳ ߲ 0%(%߱ߵ0 %%߰ߴ(0@%d0 gP$g0 < -ܐ0gߙf(% %  ߙp(% % @%ߙ@%@8% 0%$T gߢH@ߥ@߂h߄HEdPߙ $߿ ߼ ߱ ߰ g ߐ߂h߄HEdh߄Hd$% dߥX%߂h߄HEd߄H$d d%g@<- H80(g7%ߙg%$  %ߙ0F$  %ߢB@ $$߿H߼@߳8߲0߱(߰ gPSߙp%g @ %@ߙ@8%$$  %@g ߙ$$7  %߂P߃8dBb߂@@%g$g<-gl߅Xߙ$d %@-."@߂HdBHC-B\-@߄Hdߙ( ߿߼߱߰g ߄Hd߄Hd߄Hd߄Hd߄Hߙ( @%d ߿߅Xߙ$d  %@ ߙ(."@߂HdBxC-B\-@߄Hd߄Hd߄Hd߄Hd ߄Hd0߄Hd@߄HdP߄H @%dg`<-$h`XxpPHg %%%?*8E%߄H*ߙ((%0d`&sfR2s ?ߕ`g?fA.b %@% ߄Hߙ((% dx߄H(%dߙ( ߿߾߼߷߶xߵpߴh߳`߲X߱P߰Hg &p߄Hߙ( d߂P@ %dB4@% ߙP$  2.@fQ%  %߄HTB8T%%2&P*@% %% fR߄Hߙ(d %*@ߙP$  &sb/2pf.@7-%  %߄Hߥd$  &߹@ % fR*3"8S%b%2b@%&P*@߄H %% f2߄Hߙ(d %߂XdB߂X ߂HdB(*@ߙP$  fߢ#2s&p2.@O4-8P% %% %߄Hߙ(dx 22@2߄Hߙ( d2@߄Hߙ( d0B$ߙ(C%$C$C߄H߄Hd 0B$Cߙ($C$C߄H߄Hd 2@@2߄Hߙ( d02@2߄Hߙ( d@2@2߄Hߙ( dP2@2߄Hߙ( dh2@ߙ(߄H d2 ߄Hߙ( d߄Hߙ( (%d&p 2.@.f8R%B%2T8&BP*@$߄H %% &s߄H(%ߙ(dt# 2pfR.@2- %% &߄Hߙ(d 2߹ % f1ߙP $ ߿߄Hߙ((%d ߒPP!fRw2%ߙ(@ % f12"PߙP $  $ ߥߙ$ @ %@W$߄H$߄H߄HGFEߙ(@%d 'fR߄Hd ߙ( 'fR *߄Hd0ߢ ߙ$dE @ %@G߅X&0C,c`Oߙ(ߣ(0Bb-B\-@߄Hd8߄HdH߄HdP߄Hdh߄Hdx߄Hd߄Hd߄Hd߄Hd߄Hd߄Hd߄Hd߄Hd߄Hd߄Hd ߄Hd(߄Hd8߄HdH߄HdXߙ$d @ %@ߙ($ $ ߄HGFE@%d߄Hdh߄Hdpd߄Hd߄Hdd߄Hd߄Hd J%<Y-dBDHYP8%0%EH@%d g9 d<Y-dBLDHYP8%0%EH@%d g9 dg<-g߄Hߙ(d% %߅HߙP߿߼ 8%0%߱߰dh$ %g9 g gh<g-H8(xp`XP@0g%%%@ %%(%$ $ $ #(`$$ߖX$$f*B@&B"*@" %߿x߾p߼h߷`߶XߵPߴH߳@߲8߱0߰(g$Cf0*`@%FFdF%dc #C-,@$$V-C`BU$@  x - ߨf 0% -ߙ`g99 $."@߄Hߙ(ߞPd%0- gs3 ߙ(ߙP $ $CdBC#-e % fs7d߅Xߙf$d  %@-߅X,@$߄XdPD-C` BU$@ xE-&&@%f0 -ߙ(߄Hd@ %߂P&sd^sS*@-ߙ(E % f1ߙ$d  %@),@$߄XdD-B@ %$b-BU$@xߙ(߄HdX %߂P&sd^sS*@-ߙ(E % f1ߙ(߄Hdp $߂Pd^wS*@~-ߙ(E % f11 ߄Hߙ dq,m@$߄Xd`D-C` BU$@xE-ߨ&&fYߙ(߄Hd %߂Pd^wf1S*@K-ߙ(E  %f1Fߙ(߄Hd $߂PdSwf1$cb*@6-ߙ(E ` %f1g <-gtߙx$ %g( ߣc` <C+`%߿(߼ ߰g04g <-gߙx$ %g( ߣc` (C`%߿(߼ ߰g0$$,B@_g@<-g8 %߅Pߙdq8 %(H0% %@߅Hߙd  %@$߅PߙdqH % $@߄Pߙ((% dq*$%ߙg8%$$a % @`&:$߄Hߙ dߙxD$  (%ߣc`ߙg$$b % @%a%$|߿H߼@ߴ8߳0߲(߱ ߰gP+$g0<-(8(  g$߿8߼0߳(߲ ߱%߰g@ߙp% % %@ ߙ߂h߄PEߙ d~H$߄H% d @@%$ߙ g@ @%߂h߅HDߙ@0% d(ߙ8%$$ @ %@ߙ  8%$3 @ %A߿8$|g <-gߙ%P% p@ ߙ @ߙ@ ߤ$߿߼߷߶ߵߴ߲߳߱߰%߾g&,C` <ߣX>b-B\-@-P߅HߙdH  %@k$߅HߙdP  %@g߅HߙdX  %@߅H6s|%ߙd`  %@߅H6sߙdh  %@߅H6sߙdx  %@߅H6s@ߙd  %@B$߅Hߙ$ d  %@߅Hߙ$ d  %@߅H @($=߇Hߙd$$  %@ ߇Hdߙ$$  %A9%%$|ߙ@ ߤߙ@ ߤ ߙ  %@ߙ @ %zߙ  %w߿Cߙf $/  %@@%(%ߞp@g`@ %% @ghf@ %% H@zߙߧ$$  %@ߧHߙ6s%&ߢP*@[@ ߴpߙ  -@@%@ R+@P+-B3ߙ0%@(%  %  -+@$+-"3ߙ0%  (%ߙ08%0!$*  %@ߙ@ߢ8@߇Hߢ0@ߢ@ߢߙF0$-  %ߢ@@ߢߙF0$,  %`ߙߢ @ߙgh$$ % h@yߢ(@ߙu%ߙd  %@$߅Hߙd  %@$߅Hߙd  %@߅Hߙd  %@%X$-ߙD$ gx ߙHߢB@ % ߣb-ߣxbߢH&ߤhgh$(%ߙ Ap6%@ߙ @ %-Dߙgp %@a@%(ߙ@-Bߙ@ % ߧߤ0(%-Pߙ  %ߙdV % @@%$r"ߢf$"+@+ߢ-+@ߙ4@ߢ-+ߙߦ (%-%-ߙD$  gx@% @$$(8$0$$$߂H%dB%%%(@80 %%$|X@T-3ߙ@6-3ߙ$%ߙߤd@0% $A ߢ0ߙ@6s@ߙgh$$ % hA'ߢ ߙ@ߢ(@.$8%0%$  %A%ߙ@gܐ0<-g$$BߙC$<8%0%4> -A߿%߼%߰g (@$$߿߾߼߷߶xߵpߴh߳`߲X߱P߰Hgg`<-gdߙXߒPph`PH%xfR% %4, %@% @%@ @%g<ߙ@8%$$ %< A4$|@%  %@@%&g4g8 ߂HߗdBf1%(>ߙ$:  %@@%ߙh$:  %ߙߧߦ ߥ(  %$b6@%  %@@%8ߙߧ$$ % <@ߙ4ߧ$$ % <@(%0 %% &ߢf1(%%  %`(%%  %y%gX<-g,ߙP(%@ %4#g9 h`PH@80% %@c ߕ`@%gf#7ߙ$= % @'dV@&f1%  %@-@%߄Pߙ((% dr ߙ`g98 $@%ߙ`g98 $߿h߾`߼X߷P߶Hߵ@ߴ8߳0߲(߱ %߰gp*@߄Hߙ((%d $6&f1Y(%  %@0% $Cߙ(߄Hd߄H d8$0%@(% @ %@ߙD0 `(%߿h$|g <-g8ߗx 0$ߣxb߿ߙ ߙ% %%%% %ߙ08%$ @ %@$|'*@fq߅Hߙd dH@߅Hߙg8H%g,fg'(%  %@ߙ(%@ % ,@fb&s#"-*@ߙP߅Hߙ$ d@ ߅HߔHg0$ߙ0@0%f %@ %gXg8f$ V0ߙߧ$$ @ %@(&*@f1߅Hߙ$ d@M߅H$ߙX g8@ %ߢ8B@ߙ ߃HߙxeH @ %ߙ @ %ߙg,$$k@ % ,A,{$| ߥߙ @ %ߙH@(% @ %ߙ@ % @%0DߢS-Dߢ8B@ecߙ fsߙ@(%  %@[ߙ0ߦߥ %@ %~ߙX$ &*@7f1߅Hߙ$ d@߅Hߙ$$  g8ߣ8c`=ߙg,$$ @ % ,@&*@f1߅Hߙ$ dh@ߙPߙ$$  g8ߣ8c`!ߙg,$$ @ % ,@f1&ߙP4pg9 @ %@@%*@߅Hߙ$ dx@߅Pߙ$ d|g,@ߙ$,$$ @ %@}f1&D0ߙ `(%ߙ @% 8%0%@(%  %@%飠,߾߼߷߶ߵߴ߲߳߱%߰gg <-gHߙP% %4Eg9( @ ߙg $$ %@%$ Aߙ$|߿(߼ ߱߰g00  (%߂`߃8dBP b߂@@%$F $߿8߼0߳(߲ ߱߰g@g0<-gߙ0%%g 8( @%ߢB@$ߙP4Eg9  %@ @%ߙg`8%$$ % Aߙ$|`8%$$ % @ߙ0  (%߂`߃8dBP b߂@@%g0<-8( "gxߙP% %4Eg9 %@ @%ߙg $$ %$ A ߙ$|߿8߼0߲(߱ %߰g@$0 @(%߿8$g0<-8( "gߙP% %4Eg9 %@ @%ߙg $$ %$ A ߙ$|߿8߼0߲(߱ %߰g@$0 @(%߿8$gP<-gߙ8ߔ`0%%$(%H@( X%gg f %P*` <$߿X߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`>b-D$0%(%% f1@ꗤ $B0BxB-Cd%ܤCgP<-gߙ8ߔ`0%%$(%H@( X%gg f %P*` <$߿X߼P߶Hߵ@ߴ8߳0߲(߱ ߰g`>b-D$0%(%% f1@ꗤ $B0BxB-Cd%ܤCg<-g d$$( gC0 +@+-3+@ߙ-3ߙ, L ߿ߢ߼g g<-gߙ@%d $G߿߼gg`<-gXh%߇Xߙ(xp%%d$  %%  %@߄Hߙ( d%߿߼ߴ߲߳x߱p߰hg  %$b߂HdH߆Hߙ8%dƎ@(%  %"-߆Hߙ(/ %8%dƏ E(/-$b ߆Hߙ(/ %`8%d E(/-ߓHߙ(/ %ffE(/ ߴ -߆Hߙ(/ %dƏ E(/-ߙ(/ %ffE(/ ߴ -߆Hߙ(/ %dƏ E(/-ߙ(/ %ffE(/ ߴ -߆Hߙ(/ %dƏ E(/-ߙ(/ %ffE(/ ߴ  -߆Hߙ(/ %dƏ E(/-ߙ(/ %ffE(/ ߴ( -߆Hߙ(/ %dƏ E(/-ߙ(/ %ffE(/ ߴ0 -߆Hߙ(/ %dƏ E(/-ߙ(/ %ffE(/ ߴ@ -߆Hߙ(/ %dƏ E(/-ߙ(/ %ffE(/ ߴH -߆Hߙ(/ %dƏ E(/-߆Pߙ(/ %dsE(/ ߳P` -߆Hߙ(/g %dƏ E(/-//߂H;dH@g0 < -ܒ0gߙfR @ %%(%  ߙp(%@ % @%ߙ`0%@%@8%$T gߦp߇X߂h߄HEd ߙ ߿ ߼ ߳ ߲ ߱ ߰ $g ߙPd$g9 g0@߂h߄HEd8ߥ8ߙgd @ %߄Hߙ(@(% d`ߢ@ ߙ8D (%߄Hߙ((% dhߢx@E$ߙ($߄Hdp ߙP $ ߤߙPg9 <;4cC`<dcB@߄Hߙ(d(C` 0ߤH*ߙPg9 $<@(%<dBB@@<4B߄Hߙ(dH#`H@<54B@`@@$8@<4Bx8@ 0ߢ@@ Eߢ@bߙ(߄HF dߢP@ߙ(߄HE d8ߢX@ߙ(߄HR dX2B@2B߄Hߙ( dh2B@ߙ(߄H dp߄Hߙ(@(% dߢh@ ߄HF$d@ߙ(dx0 (ߢp@ߙ(߄HE dߢ@ߙ(߄HE d߲`@&ߢf1ߢ@6߿  4߄Hߙ dߤߙP$$g9 d$߄H[d߄HXd߄H dU߄H d(@fSߥFF ߄Hߙ$d ` %@߄Hߙ dEߙP$$g9 ` %ߢg < -ܐ0gߙf(% % ( ߙp(% % @%ߙ@%@8% 0%$T ghߢ@ߙ(߄HE d(ߢ@ߙ(߄HE d@ߢ@ߙ(߄HE d`ߦ=߇XߙPd$ g9 g@ ߢ`߄Hߙ( d%߿ (߼ ߱ ߰ g 0@ߙ(߄HE dxߢ@ߙ(߄HE dߢ@ߙ(߄HE dߢ8@ߙ(߄HE dߢ@@ߙ(߄HE dߢH@ߙ(߄HE d$g `< H-ܐ0gߙf(% % h P Xߙp(% % @%ߙ 0%@%@8%$T gߦp߇X߂h߄HEd ߙ ߿ h߼ `߲ X߱ P߰ H$g pߙPd $ g9 gH@ߒ߂h߄HEd8ߥg0d %@% gߥh %@% dߢߙ8D (%߄Hߙ(8% 0%(% d8ߢX@ߙ(߄HE dHߢ`@ߙ(߄HE dHߢP@ߙ(߄HE dHߢh@ߙ(߄HE dHߢx@ߙ(߄HE dHߢ@ߙ(߄HE dHߢp@ߙ(߄HE dPߢ@ߙ(߄HE dHߢ@߄Hߙ(E dHߙP $ ߿ hg < -ܑ0g׬ߙf1  %%(%  ߙp(% % @%ߙ@0%@%@8%$T gߦ  ߙP$߿ ߼ ߳ ߲ ߱ ߰ g 8%$g9 g@$ߒHߐXfffRXf" ]-"X@ ߙ( @ %  $XߙP $ f($dB ]-DX  ߙP $ $g < -ܑ0gDߙf1  %%(%  ߙp(% % @%ߙ@0%@%@8%$T gߦ߇X߂h߄HEd ߙ ߿ ߼ ߵ ߴ ߳ ߲ ߱ ߰ $g ߙPd$g9 gP@߂h߄HEd8ߥXߢ@ߒg8d %@% g ߢ0ߙ8D `(%ߢ@$UߢXߣ`WdE@% gߴ @#fߙ$(%  %@ (%@%  %߄Hߙ( (% d`ߒPfRsߢ$BCM$C~ߙ(@߿ ߄Hߙ(`0% (% d(%@%  %$ ߢdE+`+f3ߙ$  %ߢC$b߄Hߙ(`0% (% dߤߙP@%$0%$g9 d`dB 3ߙ+` +f3ߙߒH$ % fRߢ`dB 3ߙؒ @)ߙ(߄Hg(% dߤ$   @$$ߙP@%0%$g9 dߢ@8%Gߢ`@ߙ(߄HF@(% dߢ$BCA߿ >߄H`0% (%d ߤ߄H`0% (%d8%gp < p-ܐ0gXߙf(% %  xߙp(% % @%ߙ 0%@%@8%$T gߦpߐP߂h߄HEdߙ ߿ ߼ ߱ x߰ p$g ߇Xfd$+% gh@ߢx߂h߄HEd8@ߣ`ߙ(߄HfE d(ߢ@ߣ`ߙ(߄HfE dHߢ@߄Hߙ(E dhߤߙ0 (%߄Hߙ((% dߤߙ0 (%߄Hߙ((% dߦ߇X$d`%  %@ߙ(߂h߄HEd߄H dߢ@%ߙ(߄H d߅Hdߢ@ߙ(߄H d߅Hdߢ@ߙ(߄H dߢ ߄Hߙ(E d(ߢ(߄HEߙ( d@ߙP $ ߅Hd@g@<x-ܐ0gߙf %%(% ߙp(% % @%g ߙ@%@8%@0%$T ` % ߢ(@ߐHP"P(%߄Hߙ( dX0ߐHfߦ@ߙ(߄Hd(% d`ߢ8@߄Hߙ(F(% dߤ ߙPg9 ߄Hߙ(@0%(% dߥP ߙg d @ %߄Hߙ(@0%(% dߢ@ߙ(߄H(% dߥߙd$ 0ߙP $ ߢH@ ߙ8 D߄Hߙ(@0%(% d ߢPߢ(@ߙ(߄HF(% dߢP@ ߙ(߄H(% dߙ`g9;h ` %ߙP $ ߢ0@ ߄HG$d@ߙ((%d8 0ߦhߙPg H%$$$g9H  %߄Hߙ( 0%(% dߢ@ B@ߢ ߄Hߙ((% d(ߢ @ߙ(߄H(%d8 ߓPߢ ߔ`dQBߕH$Bfsf;hߙЏ  %@/g ߢ @߿Q ߙ(߄HߒH(%d% fR2"@ߙ((% @ %B &ߙP $ ߿߼߶ߵߴ߲߳߱߰x$gߐHb-B\-@߆H߅Hdƛd f&14ߢI߆Hdƛ(%߆H߅Hdƛd߆H߅Hdƛd߆H߅HdƜd8߆H߅HdƜHd`߆H߅HdƜpd߆H߅HdƜd߆H߅HdƜd߆H߅HdƜd ߆H߅HdƝ0dX߆H߅HdƝpd߆H߅HdƝd߆H߅Hdƞd ߆H߅Hdƞ0dX߆H߅Hdƞhd߆H߅Hdƞd߆H߅Hdƞd0߆H߅HdƟHdp߆H߅HdƟd߆H߅HdƟd߆H߅HdƠ8d`߆H߅HdƠpd߆H߅HdƠd߆H߅HdƠd߆H߅HdƠ~d߆H߅Hdơyd ߆H߅Hdơ@td`߆H߅Hdơxod߆H߅Hdơjd߆H߅Hdơed߆H߅HdƢ(`dP߆H߅HdƢh[d߆H߅HdƢVd߆H߅HdƢQd߆H߅Hdƣ(Ld`߆H߅HdƣGd߆H߅HdƣBd߆H߅Hdƣ=d߆H߅HdƤ8d ߆H߅HdƤ03dP߆H߅HdƤX.dx߆H߅HdƤ)d߆H߅HdƤ$d߆H߅Hdƥ dH߆H߅HdƥXd߆H߅Hdƥd߆H߅Hdƥd߆H߅HdƦ d@߆H߅HdƦhd߆H߅HdƦd߆H߅HdƦd ߆H߅HdƧ0d`߆H߅HdƧpd߆H߅HdƧd߆H߅Hdƨd(߆H߅Hdƨ8d`߆H߅Hdƨpd߆H߅Hdƨd߆H߅Hdƨd߆H߅HdƩ(dH߆H߅HdƩ`d߆H߅HdƩd߆H߅HdƩd߆H߅HdƩd߆H߅Hdƪ0d`߆H߅Hdƪpd߆H߅Hdƪd߆H߅Hdƪd߄Hߙ dߢ߄HJIHG FEJߙ(IHGF E d0߰ xߢ@ߙ(߄HE d(ߢ@ߙ߄H d@ߢ@ߙ߄H dPߢ@"߄HdQBߔH$B<&s?fhgߙЏ  %@=$ߢ @@ߙ(߄HE d ߢ H@ߙ߄HdP ߒPߢ HߓPdQBfRش$BfsߙЏ  %@f0ߢ P@dPBߑHߒP$BߓHf1(fRشߙЏ  %@M 8%@ߙ߄H d8ߣ bN߿Hߙ "S$Cߙߙ  %8% 0%$ @%  %@ߢ0@#ߙ(߄HP d2@2߄Hߙ( d2@2߄Hߙ( d2@ߙ(߄H d2ߙP߄Hߙ( dߙP $ ߢ8@iߙ(߄HP d2@2߄Hߙ( d2@2߄Hߙ( d2@2߄Hߙ( d2@2߄Hߙ( d2@2 ߄Hߙ( d2 @2@߄Hߙ( d2@@2߄Hߙ( d 2@2߄Hߙ( d(2@2߄Hߙ( d02@2߄Hߙ( d82@2߄Hߙ( d@2@2߄Hߙ( dH2@ߙ(߄H dP2 ߙP߄Hߙ( dXߙP $ ߢ@@ߙ(߄HE d`ߢH@ߙ(߄HE dߢ@ߙ߄H dߢ@ߙ߄H dߢ @ߙ߄H dߢ(@ߙ߄H dߢP@ߙ߄H dߢX@ߙ߄H dߙ % g@%d"ߔH$BߙЏ  %@$ߙ % g@%0B?CB(C`$C $Cߙ(߄HEd$C߄Hd߄Hdpߙ( ߄H dg`%8%0% $ߤߙ(ߢ@ ߄H dߙP $ ߙ % g@%C$b@߄Hd0b@ (߆HfdƮg@%  %@ߙ߄Hdߙ  %ff@% gߙ % g@%߾@߼8߷0߶(ߵ ߴ߲߳߱߰ $gPg0<-g߇Xߙ((0%%dP$"8 g@ߣcߣ `$ߣ(`$߿8߼0߰(g@$<gܣ4B8 p H<ܑ0-b$ X P x h ` @g`f2@2g%ߙܴܵ % (%<dcB@CD-Q$%`O<ߙ  %ߙ$(%` % @%߆Hߙ8dƯp$` % 8%߄H`(%dߙ( ߙ(% @ %ߙp(%@ % @%ߙ@%@8%0%$T ` %ߢ@3ߣ`1ߙ8Dg0 (%ߣߙ(@#e߄H0%d(% %$$`,%@7$$g߄Hߙ( djC/T/dB@F߄Hd0(߄Hd ߤ`߰ߙH ߄Hߙ(@(%dȌDߙ8g0 (%߄H(%dߙ( $*cߐP$q߄H߄Hdߙ( ߢ $BC=,C`ߙ`ߣ@g98 dߥ߄Hߙ(@0%d d@ߢ@߄HEߙ( dX߄Hd $C.ߢ߄Hߙ( d d߄Hߙ(@(% dhߙP $ ߂ ߙ D߿ x߼ pߵ hߴ `߳ X߲ P߱ H߰ @$g ߢߙ`Eߢg98 D߄Hߙ(@0% dߙ`g98 D߄Hߙ(@(% dߢߤhfߢg%Q @߂ ߤp% g@߂ P߄Hߙ d(ߙx  %߄Hߙ(@8%0% (% d8` `@ ߙГ @߄HdP ߄Hdp@߂ @߂ ߄Hߙdߥgߙd  %߄H(%dߙ( ߥߙd  %߄H(%d@7 ߄H@(%9d@/ߢ@߄HEߙ(dgܢ 0<-ܒ08( g@$%%E *#<߿8߼0ߴ(߳ ߲߱߰$g@>b-DB%   %fsC*`<ߎߔP%%f@>-BDDdcg<-g$ߙ(C$C$C߄H߄Hd ߿߼g߄Hd߄Hddg`<-gߙXP%%(%g(Hxph` %ߢ(ߢ0"@߄Hߙ(F(% d$ ߙPg9 ߄Hߙ(@0%(% d"H@߄Hߙ(F(% d0$ߙPg9 ߄Hߙ(@0%(% dH"P@ߙ(߄HF(% dp"X@ߙ(߄HF(% d"`@ߙ(߄HF(% d"@߄Hߙ(F(% d$ ߙPg9 ߄Hߙ(@(% d$ ߙPg9 ߄Hߙ(@0%(% dߓPfsh`% $@8%"8@߄Hߙ(F(% d`% $@8%"h@ߙ(߄HF(% d"@߄Hߙ(F(% d($ ߙPg9 ߄Hߙ(@0%(% dH$@ ߙ0gp `(%߄Hߙ(`0%(% d`$8 ߙPg9 ߄Hߙ(@0%(% dx$p ߙ0gp `(%߄Hߙ(`0%(% d$ ߙPg9 ߄Hߙ(@0%(% d"@ߙ(߄HF(% d"@ߙ(߄HF(% d"@@ߙ(߄HF(% d#` $gpG8߄Hߙ((%:@d8 04N@L߅Hߙ@ % d@@F@%ߙgp$(% % f߄Hߙ(0%(%dH ߞXߔP$B$߂P%dBH%fߙЏ$ ` %@`0%@&ߙ(߄H0%(% d"@ߙ(߄HF(% d "@ߙ(߄HF(% d`ߙ(gH$ g8@ߙ(߄H dp&xF߇Xߙ(dx$ gp@ߢ߄Hߙ( dߢ@ߙ(߄HF(% dߢ@ߙ(߄HF(% d߲x@ ߄Hߙ((% d B@ߙ(߄Hd8 ߲@ ߄Hߙ((% dHB@ߙ(߄Hd8 ߲@ ߄Hߙ((% d`B@ߙ(߄Hdx "@ߙ(߄HF(% d"P@1ߙHgp$ <;ߢp6RRߙP$Pߣxg9<f1B@ C-߄HR@ߙ((%d@%0Q  8ߣ$bߣߙ((% b@t/Q d-߄Hd0 f0/߿߾߼߷߶xߵpߴh߳`߲X߱P߰Hg߄H0%d  (%ߤ@% ߄Hߙ(@(% dߤH% ߄Hߙ(@(% dߤP% ߄Hߙ(@(% dߤX% ߄Hߙ(@(% dߦh /߉H߹$:G %e)@%(# $-ߙ` %g$ &@%߄HUd@߄H`d@߄Hkd<(-dpܢPܤ8dB\ܢ@C%C%0cC%"< $D%g0<-g ߓHߒH(8%%$%$fRfs#-c2 d$`&e'$ߙ( ` %ߙ((% @ %(%%&$M@ߙP߄Hߙ( dߙP $ ߿8߼0ߴ(߳ ߲߱߰g@ߙP $ @ߙP(%$ $-(%(*g<-gܰ߅Hߙd  %@߅Hߙd  %@߅Hߙd  %@ ߅Hߙd  %@߅Hߙd  %@%%߂XdB `߿߼߰g ߂XdB ߂XdB$E$@.g<-g%(%߄Pߙ( dt$ *@$$߅H߅Hd߄Hߙ( d߿߼߰g $߅Hd߅Hd߅Hdg@<-g(0(ߕPߔH8 H%%%%f$fzߙq -F(% &1$P-F(% f&1߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gPgP<-gd0ߔHH@8( X%%%g f$$ߙ$: @ %@@%@dQߙ0%(% @ % ,C` p- bf %$*#$߿X߼P߷H߶@ߵ8ߴ0߳(߲ ߱߰g`g0<-8(  gd$߿8߼0߳(߲ ߱%߰g@ߙp%g` % %@ @%߂h߄PߙEd~H $߿8$"ߙ`8%$$ @ %@߂P߃8dB\b߂@@$|gP<-XH@80( g$߿X߼PߴH߳@߲8߰( %߱0g`ߙp%g %% %@ ߙ߂h߄PߙEd~H $߿X8%$$@ % &q@A*"@#߅Hߙ d@%ߙXf߅Hߙ d@ߙX g@ %ߢB@ߙX ߙg$$6@ % @&1 ߂P߃8dB\b߂@@ g@ %ߢB@$ߙX ߙg$$)@ % A$|&q*"@f߅HgP<-(XH@80(g@ $߿X߼PߴH߳@߲8߱0%߰(g`ߙp%g %% %@ ߄H߂h߄PEd~Hߙ $߿Xߙ% d@@%$ߙ0% g@%ߢ@ B@$߂h߄HEd($bߙ8%$$ @ %@ ߙg $$@ % A߿X$|gP<-(XH@80(g<@ $߿X߼PߴH߳@߲8߱0%߰(g`ߙp%g %% %@ ߄H߂h߄PEd~Hߙ $߿Xߙ% d@@%$ߙ0% g@%ߢ@ B@$߂h߄HEd@$bߙ8%$$ @ %@ ߙg$$@ % A߿X$|g$P<-,BXH@80( g@ $߿X߼PߵHߴ@߳8߲0߰  %߱(g`ߙp%g %% %@ ߙ߂h߄PEߙd~H $ 8%$$ ` %@&߄HߙE d@@%U߅Pߙdq8 % &@ ߅PߙdqH % $@߄Pߙ((%dq%ߙg8%$$` % A$|$ߙ߄Hߙ dD0% gߙ8%$$` % A߿X$|:+g@<-gߙH( 80% %ߙ` z$d `@@%@%gߙ$: @ %@@%@dPߙ$(% @ %ߣc` ,c` ߙbfdBb%ߙ % %߿H߼@ߵ8ߴ0߳(߲ ߰ %߱gPg<-, g@ 8%߃X<>dcC-B@ ߿ߐX߆HߙdƼX$d f($B,BeLf(߿߼߰g (@7$ 0$//( @$$@$,BG@$@$B(>@$x4*@$@$BZ<$B0!,B.i@ $p@$B$$%g0<-gpߓH( 8%%%fsp$ $@%Q*@ ߿8߼0ߵ(ߴ ߲߳߱߰g@P-E$,B^@ $\ ߙ( %ߙP fߙ($  ` %g<-g$߿߾߼߷߶ߵߴ߳߱߰@%߲g %%%G %ߙ%$  g(g$`ߢ(B@=      %.@S$$ P!$B g@%$0#0 bW#ߞXނgH%ߙߥ @G@%<>x°-ߢ߅HߙV-gp$PdP@ % ߅HgHߙ %$$d <$C%$ (+$c<>+`g $BFgM0 %P!&J.$B$B$ &$g.$ "$&r@ߖXނf%%ߙߥ @C$<>8Ѐ-,C`"߃Hdcb-B\-@$ $+ߣ%$f0+e$P(<(>(+$BGdc0 . $E$g0%$0+$c<>+`g $BGd0 P!&f%$$B'$ބ@"ߙgp$  (%ߣpc`P$C`" K#$B ބ@ߙ$  (%ߣpc` $$*%$C`%$"p.ߢ@ߢԬP"$%*@<>-߅Hߙބ dx@ߢ&S*@ߙބ$  g("ߢ(B@&$$%$$@ߢ߿%%ߢ%$<>dBg C-Pa&<>dBC-PpY&<>dBC-PQ&Fg0<-gTߙ(g @8%%$$&8  %@ ߙ"@8%$$" % A ߙ$|߿8߼0߲(߱ ߰g@"@8%$$ % @$"C>$C=@ ߙ@8%$$' % @$|" @ ߙ@8%$$ % @$|"@ ߙ@8%$$# % @$|"@ ߙ@8%$$ % @$|"@ ߙ@8%$$B % @%ȯ "$ +@ߙ @8%$$' %$ g<-gX,ߙ(@(%߃H0%xdc C-B@ ߄H@(% d߿߼g߄H d߿g<-,g@%0%߂HdB8C-B\-@߅Hd߄Hߙ( dp߿߼g߅Hd߅Hd(߅Hd0߅Hd8߅Hd@߅HdH߅HdP߅Hdg<-g(%%߄Hߙ( d2@2߄Hߙ d2@Yߙ߄Hd 0B@Tߙ߄Hd 2@2 ߄Hߙ d82 @2@߄Hߙ dP2@@2߄Hߙ d`2@߄Hߙ dp0B@;ߙ߄Hd 2@2߄Hߙ d2@6ߙ߄Hd 2@2ߙ߄Hd0 2@@ߙ߄H d`߿߄Hߙ dx߿߼߰g ߄Hd$C$߄HdC2߄Hd$C $߄Hd߄Hd߄Hd߄HdHC߄Hdg ( * <0-(%g%23߄Hߙ( dߒPߙ(`5fR2"@߄H d߿(߼ ߳߱ %@%߲߰ g0߄H d@%  %2"@ߙ߄Hd ߄H(0ߙ(dX d߄Hdߙ ߿(߼ ߲߳߱߰g0߄Hd0߄H d@%  %߄Hdg@<-g~l%%(%߄Hߙ(dH80(  ߄Hߙ( d2$Cߙ$C$C߄Hd ߄Hߙ( d@2$2$`ߓHfsC-S-C`%߄Hߙd0 2@2 ߄Hߙ d2 @2@߄Hߙ d2@@2߄Hߙ d2@2߄Hߙ dp2@2߄Hߙ d2@<߄Hߙ d<P$@<߄Hߙ d(<P$@< ߄Hߙ d@< P$@<@߄Hߙ dX<@P$@<߄Hߙ dh<P$@< ߄Hߙ dx< P$@߄Hߙ d ߄Hߙd ߕP0"8P%ߓH%ߖH2$fyfsߙ(@(%  %@$BP0B$Cߙ$C$C߄H߄Hd &R$ B߄H%"*8E%*ߙ((%0d ߓH߄Hߙd  ߔH0"8P%%ߖH2$fsfHߙ(@(% fy@$BP0B$Cߙ$C$Cf߄Hd &R$ Bߙ(%"*8E%߄H*(%0d80 2 m߅H߅Hd@߄Hߙ( d`߿H߼@߶8ߵ0ߴ(߳ ߲߱߰gP߄H d ߄H d(߄Hd0E$ߒPCfF $Ff0$Bb$`$ ߙ$  2߄Hd`߄Pdp߄Hdx߄HfR @% d$$`߄H@%dC-b- e߄He @% d߄He@% d߄He@% dߙP $ UdS` %QfH` % %dg<-gx%%%%@H %ߐHf߄Hߙ((%dÐ @%߂HfTd^ðbߙ(0E*(%0 % fs߄Hߙ dB0B@ߙ(߄H(% døB0B@ߙ(߄H(% dЖB0B@ߙ(߄H(% dF20ߙ(߄H(% dF3zߙ(߄H(% d0F0ߙ(߄H(% d`F00ߙ(߄H(% dĐF10ߙ(߄H(% dB0B@ߙ(߄H(% dB0B@ߙ(߄H(% dB0B@ߙ(߄H(% dB0B@ߙ(߄H(% dB0B @ߙ(߄H(% d0B0B@@ߙ(߄H(% dHB@ߙ(߄H(% d`B0B@ߙ(߄H(% dŀB0B@ߙ(߄H(% dŘF00ߙ(߄H(% dŨB0B @ߙ(߄H(% dؖB0B@@ߙ(߄H(% dC0bC%Aߙ(߄H(% dB0B@ߙ(߄H(% d@B0B@ߙ(߄H(% dhB0B@ߙ(߄H(% dxB0B@ߙ(߄H(% dƈB0B@߄Hߙ((% dƨB0B @߄Hߙ((% dȖB0B@@߄Hߙ((% dؖB0F20%10߄Hߙ((% dB0B@߄Hߙ((% dB0B@ߙ(߄H(% dHB0B@߄Hߙ((% d`߄Hߙ(ߓP(%dLj$fsz $ 2-ߙ(E` % fRT2-߄Hߙ d"0B@߄Hߙ((% dǨ"0B@߄Hߙ((% d"0B@߄Hߙ((% dؖ"0B@߄Hߙ((% d"0B @߄Hߙ((% d"0B@@߄Hߙ((% d0&20߄Hߙ((% dH"0B@߄Hߙ($(% dh"0B @߄Hߙ((% dȀ"0B@@߄Hߙ((% dȠ"0F20%10߄Hߙ((% dЖ"0B@߄Hߙ((% d"0B@߄Hߙ((% d"0B@߄Hߙ((% d0"0B@߄Hߙ((% dH"0B @߄Hߙ((% d`"0B@@߄Hߙ((% dx#0bC%A߄Hߙ((% dɘ&20߄Hߙ((% d"0B@$߄Hߙ((% d&20߄Hߙ((% d"0B @߄Hߙ($(% d("0B@@߄Hߙ((% dH"@߄Hߙ((% dp"0B@߄Hߙ((% dʈ"0B@߄Hߙ((% dʠ&00߄Hߙ((% dʸ&1B0߄Hߙ((% d&20߄Hߙ((% d&20߄Hߙ((% d0"0B@@߄Hߙ((% dX"@߄Hߙ((% dx"0B@߄Hߙ((% d˘"0B@߄Hߙ((% d˸"0B@߄Hߙ((% dؖ"0B@߄Hߙ((% d"0B@߄Hߙ((% d("0B @߄Hߙ((% dH"0B@@߄Hߙ((% dp#0bC%A߄Hߙ((% d̘"0B@߄Hߙ((% d̸"0B@߄Hߙ((% dЖ"0B@߄Hߙ((% d&20߄Hߙ((% d "0B@@߄Hߙ((% d8"@߄Hߙ((% dP"0B@߄Hߙ((% dh"0B@߄Hߙ((% d͐"0B@߄Hߙ((% d͸"0B@߄Hߙ((% d"0B@߄Hߙ((% d"0B @߄Hߙ((% d0&10߄Hߙ((% dX" 0B@߄Hߙ((% dp" 0B@߄Hߙ((% dΠ" 0B@߄Hߙ((% dȖ" 0B@߄Hߙ((% d" 0B@߄Hߙ((% d" 0B @߃H߄Hߙ((% d8߃H%dcx ߃H%dcπ(߃Hdcp0߃HdcÈ`߃Hdch$p$rߣ gpxߣ(ߣ0dC d-c$d$dD`B8<>+`afsߣ<>s-gxb-߂Hߦ`dBψX߂HdBϰ@߂PdByH߂HdBHPߢߙ(GߤX(% %bߙ(0RB%ߤ@@'2R(%R% 2R$BD(xߙ ߤP$ߢߦh@8fsfߢ8$C+@ߢT-#߿#0bC%AߑH߄Hߙ((%d% f1V*@-ߙP $ ߿߾߼߷߶ߵߴ߲߳߱߰gߐHf@$ߤHߙ( d$Eߙ(  %fg@<-gf( ߒPߑH8$Bߔ80Hd $f1fRsߙЏ   %@ ߿H߼@ߴ8߳0߲(߱ ߰gP`ߙ(  %%0? %ߙ(@(% @ %ߙ % g @%gpx<-p`XPH@h8gf%%% %@`%ߐHf߄Hߙ((%d ߖPeߙ(fz ߞHeߙ( fzߙ gČb0B@ߙ(߄H(% db0B@ߙ(߄H(% d8b0B@ߙ(߄H(% dXb0B@ߙ(߄H(% dЈb0B@ߙ(߄H(% dиb0B @ߙ(߄H(% dؒf1ߙ(߄H(% db0B@ߙ(߄H(% d b0B@ߙ(߄H(% dPb0B@ߙ(߄H(% dhb0B@ߙ(߄H(% dѠf1B0߄Hߙ((% d߄Hߙ((%d %fz $ 3-ߙ(Eߤ  fsv3-ߙgČ ߓPfs``% $0B@`%߄Hߙ((% d`% $0B@`%߄Hߙ((% d(`% $0B@`%߄Hߙ((% d``% $0B@`%߄Hߙ((% dɘ`% $0B @`%߄Hߙ((% dp`% $0B@@`%߄Hߙ((% dʈ`% $0C` `%߄Hߙ(0F(% d҈`% $0C` `%߄Hߙ(0F(% dҨ`% $0C` `%߄Hߙ(B0F(% d`% $<b$` `%߄Hߙ(0F(% d`% $<8b$` `%߄Hߙ(0F(% d(`% $<b$` `%߄Hߙ(0F(% d``% $<b$``%߄Hߙ((% dX`% $<b$``%߄Hߙ((% dx`% $<b$``%߄Hߙ((% dӘ`% $<b$``%߄Hߙ((% d`% $< b$``%߄Hߙ((% d`% $<@b$``%߄Hߙ((% d`% $A`%߄Hߙ((% d(`% $0B@`%߄Hߙ((% dp`% $0B@`%߄Hߙ((% d `% $0B@`%߄Hߙ((% d@`% $0B@`%߄Hߙ((% dh`% $0C` `%߄Hߙ(0F(% dԘ`% $0B@`%߄Hߙ((% dΠ`% $0B@`%߄Hߙ((% d԰`% $0B@`%߄Hߙ((% d`% $0B@`%߄Hߙ((% d`% $0C0` `%߄Hߙ(0F(% d0`% $<4cC$` `%߄Hߙ(0F(% dX`% $<xb$` ߓP߄Hߙ(0F(% dՈߓPfs``% $<b$``%߄Hߙ((% dը`% $<b$``%߄Hߙ((% d`% $<b$``%߄Hߙ((% d`% $<b$``%߄Hߙ((% d0`% $<b$``%߄Hߙ((% dX`% $<b$``%߄Hߙ((% dր`% $< b$``%߄Hߙ((% d֠`% $<@b$``%߄Hߙ((% d`% $A`%߄Hߙ((% d`% $0B@`%߄Hߙ((% d`% $0B@߄Hߙ((% d@0bC%I0B0C`G0C߄Hߙ(ߖP(%dx% fzߣ<>C+`1B-߄Hߙd ߕX߂Hfd^נ߂HfWdB޶Gߙ(00%(% % fRGߤߙ(9:0%(% f߿߾߼x߷p߶hߵ`ߴX߳P߲H߱@߰8gߐH:f@ߙ(E % &ߣ0C`r߄Hn0B0B@0ߣ߄Hߙ(ߗP(%dfUf^% fzߙ( % f߄Hߙd ߖX߂HfdBנ߂HdB ߙ(ߤ00%(% fߤ ߙ(9:0%(% fߣ$b`% $0B@߄Hߙ(ߗPfU(%d fR % fzߙ( % fV߄Hߙd ߖX߂Hfd^נ߂HdBߙ(00%(% % fߤߙ(9:0%(% fUw@߄Hߙ((%d %߂P$d^zV-ߙ(E % fV-߄Hߙd ߗXfB߂HfdBנ ߂H@%dB(ߙ(ߤ 00%(% fߤ(ߙ(9:0%(% fߢV^ߢ@?`% $0B@9߿߄Hߙ((%d@ ߑHߢf1-ߙ(  %fߙP $ $߿g0<-gWD%%(%߄Hߙ(( ߕHߔHd8%fXf` %߄Hߙ d`߿8߼0ߵ(ߴ ߲߳߱߰g@2@p-ߙ( (%  %p-ߙ(E % fg@<-gVdߙ0$H8( % @[ߙ % @%@@%$ ߙ@  % ߿H߼@߳8߲0߱(߰ gP߅HߙHdh @ %ߙX%$ H%@%@8%0%(%  %߇HߙdP$$ %$| @ (%ߙ0 @ %A߆P ߙ  %ߙ@ߙg `8%$ %$ ߇Xߙ`@%$$  %߇`ߙg$(%  % @ߙ0@Ꮲ߯ (% @ % $g<-gTߙd $F߿߼gg<-gTpߙ8% 0%߿߼g(@!g<- gT8%߅Hߙ dp@ $ߙ$  %߂P߃8dBhtb߂@@%߿߼߰g $g<-gSߙg $߿߼g $$BC$<> - /gH<-gS@߂ߙB(%$ %gxXP80( @(08@HPX`h pߙ$ (%g %ߙ$ (%g %ߙ$ (%g  %ߙ$ (%g  %߂H dBx߂HdB؈߂Hh`XPH8@0x%%% (pߢߣC*`Iߙ` ߙhgx g8@$ߙpg  gH@$@ߙpg gX@$ߢPߙpg  gh@ߢP@ߢ`ߢH@ߢX@$߅Hߙdx  %@@%߅Hߙdـ  %@߅Hߙdو  %@y$ߗx4Z%  %@x@%f$|<ߣ>b-Wߥ  %@ߙߢ@b$g(gp$ߢdBߥ  %@ ߢߢ@P$g(g8p$ߙdEؘ  %@ ߅Hߢ@@$g0gXx$ߙdب  %@ ߅Hߢ @0$g0gx$ ߙdظ  %@ ߅H!$g8g$ߙd  %@ ߅H`$g 8gx$ߙd  %@ ߅H$gg @$ߙd  %@ ߅H@$gg@$ߙd  %@ ߅H$gg @$ߙd  %@$߅Hߙd  %@$߅Hߙd  %@$߅Hߙd   %@$߅Hߙd(  %@$߅Hߙd8  %@$߅Hߙd@  %@$߅HߙdH  %@$߅HߙdX  %@$߅Hߙdh  %@$&",C`߃H<>dcxb-B\-@ߙX % g @%ߢ B@ߙ߂HE8  %@ߙ8߂HE@  %@|ߤ(ߢ(CߙP$bߢp(%C- % ߙ @ %ߣbߙx0%g   %ߣ c`b,C``ߣ0ߥ0c$dߤx-bߢ8B(Cd`Sߤ8$Cߣb-WߢB(Cd`Gߤ$Cߣ@ߙx %0% g ߤ 8@%,B@+${h$H$P$X$`$$$$$$%ߙhg g(@W$߃ߤc߿Xߙ @o$%$ߢ@ߢ@% 4 ߣXߢHC%ߣC%ߣC%@Kߢ%4  %@s@%ߢ@ߢߙg$  %ߢ@ߙgX$  %ߙg($$  %ߢHߙgH$$  %ߢH@ߢXߙ$$  %ߢX@ߢߙ$$  %ߢ@ߢߙ2&$  %ߢ@oߙ$  %0ߙ (%ߢ@ߢ @ߙx` @ ߣ`ߢPC%ߣC%ߣC%@Jߙx4  %@@%ߢ@ߢ ߙg8$  %ߢ @ߙg$  %`ߙg8$$  %@ߢPߙgX$$  %ߢP@ߢ`ߙ$$  %ߢ`@ߢߙ$$  %ߢ@ߢߙ2&$  %ߢ@oߙ$  %0ߙ (%ߢߣC%@"ߙx4  %@@%ߢߙgh$$  %ߢ@ߢߙ2&$  %ߢ@oߙ$  %0ߙ @(%0ߙ (%%߾P߼H߷@߶8ߵ0ߴ(߳ ߲߱߰g`g <-gFߙ%ܐ0(%g0 fߙ(% %߶0 ߵ8ߙp(% % @%ߙ@0%@%@8%$T g ߦߗX߂h߄HEdߙ ߿߾߼߷߶ߵߴ߲߳߱߰$gߔ(gfX$+% ` %@ߐ߂h߄HEd8ߥgXd@ %% g@ߢ ߙ8D (%߄Hߙ(0%@(% dِߢ@߄Hߙ(E d٨ߢ@ߙ(߄HE dٸߢ@ߙ@C,c`g C߂HdBC-B\-@߅Hd  %߄Hߙ((% dߢ@ߙ(߄HE d(ߢ@ B@߅H߅Hdx߄Hߙ( dHߢ(@ B@߅H߅Hdx߄Hߙ( dhߢp@ߙ(߄H dڐߙ ߤpߢx@ߙ(߄H dڨߙ ߤxߢ@ߙ(߄H dߙ ߤ߰Xx0B@ ߄Hߙ( d 0B@ߙ(߄Hdx 0B @ ߄Hߙ( d 0B @ߙ(߄Hdx 0B@ ߄Hߙ( d 0B@ߙ(߄Hdx 0B@ ߄Hߙ( d 0B@ߙ(߄Pdq( 0B@ ߄Hߙ( d( 0B@tߙ(߄Hdx 0B@ ߄Hߙ( d8 0B@fߙ(߄Hdx 0B@@ ߄Hߙ( dH 0B@@Xߙ(߄Hdx ` %߆Hߓdƌ`%  (%$߄Hߙ(dX@( (-ߢ@dPBߕHߖH$BߞHfxf۸ߙЏ  %@48%ߙP $ ߿߅Hd߅Hd߅Hd߅Hd߅Hd߅H d߅H dd'd߄HUd߄Hcd߄Hqd߄Pdq0߄Hd߄Hd߄Hd0%$T% g0ߢ @"ߙ(E  %ߥ`߹d @ %ߙ(@(% gۈߦgp߂h߄HEdۘfX$+@ %% @0%ߤ`%  (%ߙ % g@%g<-g?߇Xߙ(0%%dP$ % @ ߙ߆H$dd  %߿߼߱߰gߢ(@H$ @߆H$dd %@ 8"-ߢ@ ߆Hߙ0(/G %d dd-ߢ0@ ߆Hߙ0(/G %d dd-ߢ@߆Hߙ0(/ %d  dd-ߢ@@߆Hߙ0(/ %d( dd-ߢH@߆Hߙ0(/ %d0 dd-ߢP@߆Hߙ0(/ %d@ dd-ߢ@߆Hߙ0(/ %dH dd-ߢ@߆Hߙ0(/ %dP dd-ߢ@߆Hߙ0(/ %dX dd-ߢ@߆Hߙ0(/ %d` dd-ߢ@߆Hߙ0(/ %dh dd-ߢ@߆Hߙ0(/ %dp dd-ߢ @߆Hߙ0(/ %dx dd-ߢ8@ ߆Hߙ0(/G %d܈ dd-ߢh@ ߆Hߙ0(/G %dܘ dd-ߢp@ ߆Hߙ0(/G %dܨ dd-ߢx@ ߆Hߙ0(/G %dܸ dd-ߢ@ ߆Hߙ0(/G %d dd-ߢ@ ߆Hߙ0(/G %d dd-ߢ@ ߆Hߙ0(/G %d dd-ߢ@ ߆Hߙ0(/G %d dd-ߢ@ ߆Hߙ0(/G %d dd-ߢ@߆H0(/Gߙddd  %ߢ@߆HH߆H$dd  %"-g @< 0-ܐ0g;,ߙf %(% H 8ߙp %(% @%ߙ 0%@%@8%$Tg gߢߙ8D (%߄Hߙ((% d@ߦ(߇X߂h߄HEdXߙ ߿ H߼ @߱ 8߰ 0$g Pߙ(d$  g @ߢ(߂h߄HEd8@ Eߢ8@J߆H߆Hd0߄Hߙ( dpߢ0@߄Hߙ(E d݈ߤ@ߙH ߄Hߙ(@(% dݠߤHߙH ߄Hߙ(@(% dߤPߙH ߄Hߙ(@(% dߤXߙH ߄Hߙ(@(% dߤxߙH ߄Hߙ(@(% d0ߤ`ߙH ߄H@(%ߙ(dXd@ߙx% dYߙx% dXߙx% dWߙx% dVߙx% dUߙx% dTߙx% dRߙx% dQߙx% dPߙx% dOߙx% dNߙx% dKߙx% dJߙx% dIߙx% dHߙx% dGߙx% dFߙx% dEߙx% dDߙx% dCߙx% dBߙx% dAߙx% d@ߙx% d?ߙx% d>ߙx% d=ߙx% d<ߙx% d;ߙx% d:ߙx% d8ߙx% d7ߙx% d6ߙx% d5ߙx% d4ߙx% d3ߙx% d2ߙx% d1ߙx% d0ߙx% d/ߙx% d.ߙx% d-ߙx% d,ߙx% d+ߙx% d*ߙx% d)ߙx% d(ߙx% d'ߙx% d&ߙx% d%ߙx% d$ߙx% d#ߙx% d"ߙx% d!ߙx% d ߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% dߙx% d ߙx% d ߙx% d ߙx% d ߙx% d ߙx% dߙx% dg߼߿g 20 MHz (no HT)20 MHz40 MHz80 MHz80+80 MHz160 MHz5 MHz10 MHz320 MHzunknownthe wireless core upon initializationa usera drivera country IEBUG%u:%u-%u%u:%u,%u,%u,%u,%u,%u,%u,%u,%u,%u,%u,%u%u:%u,%u,%u,%u,%u,%u,%u,%u,%u,%u-qoffactivelightdeep-u-bradioshortlongautoalllimitmemory_limitquantumauthopenshared%d milliseconds%d TUs%u milliseconds%d secondsundefined%d dBmInvalid parameter: %s %s (%d) Possible mesh parameters are: - %s Could not find the parameter %s. DEST ADDR NEXT HOP IFACE SN METRIC QLEN EXPTIME DTIM DRET FLAGS HOP_COUNT PATH_CHANGEDEST ADDR PROXY NODE IFACE %s: NO HTHT20HT40-HT40+channel %d (%d MHz), width: %s, center1: %d MHz, center2: %d MHz, punctured: 0x%x %sphy dev wdev %s %.*s Usage: %s [options] command Options: --debug enable netlink debugging --version show version (%s) Commands: Commands that use the netdev ('dev') can also be given the 'wdev' instead to identify the device. You can omit the 'phy' or 'dev' if the identification is unique, e.g. "iw wlan0 info" or "iw phy0 info". (Don't when scripting.) Do NOT screenscrape this tool, we don't consider its output stable. * primary channel: %d * secondary channel offset: %s * STA channel width: %s 20 or 40 MHz * channel width: %d (%s) * center freq segment 1: %d * center freq segment 2: %d * VHT basic MCS set: 0x%.2x%.2x * station count: %d * channel utilisation: %d/255 * available admission capacity: %d [*32us] * malformed capability * Group capa: 0x%.2x, Device capa: 0x%.2x * malformed device info * Unknown TLV (%#.2x, %d bytes): %.2x * bogus tail data (%d): DGAF: %i Unexpected length: %i HE Operation Parameters: (0x%02x%02x%02x) Default PE Duration: %hhu TWT Required TXOP Duration RTS Threshold: %hu VHT Operation Information Present Co-Hosted BSS ER SU Disable 6 GHz Operation Information Present BSS Color: %hhu Partial BSS Color BSS Color Disabled Basic HE-MCS NSS Set: 0x%04x %d streams: MCS 0-%d VHT Operation Info: Invalid VHT Operation Info: 0x%02x%02x%02x Max Co-Hosted BSSID: Invalid Max Co-Hosted BSSID: %hhu 6 GHz Operation Info: Invalid 6 GHz Operation Information: 0x%02x Primary Channel: %hhu Channel Width: 80+80 or 160 MHz Duplicate Beacon: True Regulatory Info: %hhu Center Frequency Segment 0: %hhu Center Frequency Segment 1: %hhu Minimum Rate: %hhu MLD MAC: %s Link ID: %d EML Capabilities: 0x%04x EMLSR Support EMLMR Support MLD Capabilities and Operations: 0x%04x Maximum Number of Simultaneous Links: %d EHT Operation Parameters: (0x%02x) EHT Default PE Duration Group Addressed BU Indication Limit Group Addressed BU Indication Exponent: 0x%01x Basic EHT-MCS And Nss Set: 0x EHT Operation Info: Invalid EHT Operation Info: 0xinvalid bandwidth (%d) Disabled Subchannel Bitmap: 0x%02x%02x HWSIM PS: %d nl80211 features: 0x%x * split wiphy dump%s %s %s Power save: %s configregulatorymlmevendornaninvalid mac address invalid destination mac address next_hopinvalid next hop mac address not a valid ISO/IEC 3166-1 alpha2 Special non-alpha2 usable entries: 00 World Regulatory domain failed to allocate netlink callbacks -f-t-T-rusableavailableunavailableBand %d: * %d MHz [%d] (disabled) Maximum TX power: %.1f dBm No IR Passive scan No IBSS Radar detection Channel widths: 20MHz HT40- HT40+ VHT80 VHT160 DFS state: %s (for %lu sec) DFS CAC time: %u ms (self-managed)DFS-UNSETDFS-FCCDFS-ETSIDFS-JPDFS-invalidNo alpha2No reg rulesphy#%d%s globalcountry %c%c: %s (%d - %d @ %d), (N/A, %d), (%u ms), (N/A)NO-OFDM, %sNO-CCKNO-INDOORNO-OUTDOORDFSPTP-ONLYAUTO-BWIR-CONCURRENTNO-HT40MINUSNO-HT40PLUSNO-80MHZNO-160MHZNO-HENO-320MHZNO-EHT, NO-IRPASSIVE-SCANNO-IBSSfixed-freqbeacon-intervalbasic-rates,mcast-ratemumimo-groupidInvalid groupID: %s %2xFailed reading groupID mumimo-follow-macInvalid MAC address typeadhocibssocbmonitormasterapYou need to run a management daemon, e.g. hostapd, see http://wireless.kernel.org/en/users/Documentation/hostapd for more information on how to do that. __ap__ap_vlanwdsmanagedmgdstationmpmesh__p2pcl__p2pdev__p2pgo__naninvalid interface type %s mesh_idaddr4addr4addr error flagsflags error radiosInvalid radio list failed to allocate flags unknown flag %s BSSID: %s SSID: Band Info: %u Channel Info: %u /sys/class/ieee80211/%s/index/var/run/netns%s/%sInvalid parameter: pid(%s) nameInvalid parameter: nsname(%s) , [%s%d] ERROR: received positive netlink error code %d kernel reports: %*s failed to allocate netlink message building message failed -wconnectestablishfeaturesNot connected.MLD %s stats: linkget_bssget_staregdumptriggerscan aborted!KEY_IDX missing! ATTR_KEY_DATA missing! KeyATTR_KEY_SEQ missing! Key seqUse group cipher suiteWEP-40TKIPCCMPWEP-104%.02x-%.02x-%.02x:%dAES-128-CMACNO-GROUPGCMPGCMP-256BIP-GMAC-128BIP-GMAC-256BIP-CMAC-256 * Version: %d * Group cipher: %s * Pairwise ciphers: %s * Group cipher: * Pairwise ciphers: * Authentication suites: %s * Authentication suites:IEEE 802.1XPSKFT/IEEE 802.1XFT/PSKIEEE 802.1X/SHA-256PSK/SHA-256TDLS/TPKSAEFT/SAEIEEE 802.1X/SUITE-BIEEE 802.1X/SUITE-B-192FT/IEEE 802.1X/SHA-384FILS/SHA-256FILS/SHA-384FT/FILS/SHA-256FT/FILS/SHA-384OWEFT/PSK/SHA-384PSK/SHA-384SAE-EXT-KEYFT/SAE-EXT-KEYOSENDPP * Capabilities: PreAuth NoPairwise 1-PTKSA-RC 2-PTKSA-RC 4-PTKSA-RC 16-PTKSA-RC 1-GTKSA-RC 2-GTKSA-RC 4-GTKSA-RC 16-GTKSA-RC MFP-required MFP-capable Peerkey-enabled SPP-AMSDU-capable SPP-AMSDU-required Extended-Key-ID (0x%.4x) * %d PMKIDs * Group mgmt cipher suite: * bogus tail data (%d): Vendor specific: data: MS/WiFi %#.2x, data: WFA %#.2x, data: Vendor specific: OUI %.2x:%.2x:%.2x, data: Extension IE: Unknown Extension ID (%d): Unknown IE (%d):fixedMissing TX power level argument.frameinvalid frame pattern: %p freqieslowpriflushap-forcecolocduration-mandatoryrandomiserandomizessidpassivemeshidduration%u:%dMust specify a value for %s. %s must be set to active, light or deep. %s must be set to a number between 0 and %u dtim-periodvendor_syncTIDfailed to parse nested TXQ stats attributes! %s %s qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets %s %ubss info missing! failed to parse nested attributes! BSS %s(on %s) -- authenticated -- associated -- joined -- unknown status: %d last seen: %llu.%.3llus [boottime] TSF: %llu usec (%llud, %.2lld:%.2llu:%.2llu) freq: %d.%d freq: %d beacon interval: %d TUs capability: ESS IBSS signal: %d.%.2d dBm signal: %d/100 last seen: %d ms ago Information elements from Probe Response frame: Information elements from Beacon frame:Packet limit: %u pkts Memory limit: %u bytes Quantum: %u bytes Number of queues: %u Backlog: %u pkts Memory usage: %u bytes Packet limit overflows: %u Memory limit overflows: %u Hash collisions: %u mpath info missing! %s %s %s %u 0x%x%s = !! inconsistent MLD address information (%s) Connected to %s (on %s) Link %d BSSID %s Authenticated with %s (on %s) Joined IBSS %s (on %s) %sfreq: %d.%d sta stats missing! RX: %u bytes (%u packets) TX: %u bytes (%u packets) signal: %d dBm rx bitrate: %s tx bitrate: %s failed to parse nested bss parameters! bss flags: CTS-protection%sshort-preamble%sshort-slot-time dtim period: %d beacon int: %dphy#%d %sInterface %s %sUnnamed/non-netdev interface %s ifindex %d %s wdev 0x%llx %s addr %s %s ssid %s type %s %s wiphy %d %s %s txpower %d.%.2d dBm %s multicast TXQ:%s %s 4addr: on %s MLD with links: %s - link ID %2d link addr %s %s %s txpower %d.%.2d dBm%s Radios:, STA/AP BI must match%s%svalid interface combinations: %s * #{ } <= %u, %s total <= %d, #channels <= %d%s, radar detect widths: {%s %s }Wiphy %s wiphy index: %u Band %d: HE Iftypes: EHT Iftypes: Frequencies: * %d.%d MHz * %d MHz [%d]disabled (%.1f dBm)no IRpassive scanno ibssradar detection max # scan SSIDs: %d max scan IEs length: %d bytes max # sched scan SSIDs: %d max # match sets: %d max # scan plans: %d max scan plan interval: %d max scan plan iterations: %d Fragmentation threshold: %d RTS threshold: %d Retry short long limit: %d Retry short limit: %d Retry long limit: %d Coverage class: %d (up to %dm) Available Antennas: TX %#x RX %#x Configured Antennas: TX %#x RX %#x Supported interface modes%s: %s * %s interface combinations are not supported Device supports roaming. Device supports AP-side u-APSD. HT Capability overrides: * MCS: %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx %02hhx * maximum A-MSDU length * supported channel width * short GI for 40 MHz * max A-MPDU length exponent * min MPDU start spacing ERROR: capabilities mask is too short, expected: %d, received: %d Device supports T-DLS. Supported extended features:VHT-IBSSVHT_IBSS * [ %s ]: %s RRMMU-MIMO snifferMU_MIMO_AIR_SNIFFERscan start timestampSCAN_START_TIMEBSS last beacon/probe TSFBSS_PARENT_TSFscan dwell settingSET_SCAN_DWELLlegacy beacon rate settingBEACON_RATE_LEGACYHT beacon rate settingBEACON_RATE_HTVHT beacon rate settingBEACON_RATE_VHTSTA FILS (Fast Initial Link Setup)FILS_STArandomized TA while not associatedMGMT_TX_RANDOM_TArandomized TA while associatedMGMT_TX_RANDOM_TA_CONNECTEDsched_scan for BSS with better RSSI reportSCHED_SCAN_RELATIVE_RSSImultiple CQM_RSSI_THOLD recordsCQM_RSSI_LISTFILS shared key authentication offloadFILS_SK_OFFLOAD4-way handshake with PSK in station mode4WAY_HANDSHAKE_STA_PSK4-way handshake with 802.1X in station mode4WAY_HANDSHAKE_STA_1XFILS max channel attribute override with dwell timeFILS_MAX_CHANNEL_TIMEaccepts broadcast probe responseACCEPT_BCAST_PROBE_RESPprobe request TX at high rate (at least 5.5Mbps)OCE_PROBE_REQ_HIGH_TX_RATEprobe request tx deferral and suppressionOCE_PROBE_REQ_DEFERRAL_SUPPRESSIONMFP_OPTIONAL value in ATTR_USE_MFPMFP_OPTIONALlow span scanLOW_SPAN_SCANlow power scanLOW_POWER_SCANhigh accuracy scanHIGH_ACCURACY_SCANDFS offloadDFS_OFFLOADcontrol port over nl80211CONTROL_PORT_OVER_NL80211ack signal level supportACK_SIGNAL_SUPPORTFQ-CoDel-enabled intermediate TXQsTXQSuse random sequence numbers in scansSCAN_RANDOM_SNuse probe request with only rate IEs in scansSCAN_MIN_PREQ_CONTENTcan safely replace PTK 0 when rekeyingCAN_REPLACE_PTK0enable FTM (Fine Time Measurement) responderENABLE_FTM_RESPONDERairtime fairness schedulingAIRTIME_FAIRNESSPMKSA caching supported in AP modeAP_PMKSA_CACHINGband specific RSSI thresholds for scheduled scanSCHED_SCAN_BAND_SPECIFIC_RSSI_THOLDExtended Key ID supportEXT_KEY_IDTX power control per stationSTA_TX_PWRSAE offload supportSAE_OFFLOADVLAN offload supportVLAN_OFFLOADAirtime Queue Limits (AQL)AQLbeacon protection supportBEACON_PROTECTIONdisable pre-auth over nl80211 control port supportCONTROL_PORT_NO_PREAUTHprotected Target Wake Time (TWT) supportPROTECTED_TWTdeletion of IBSS station supportDEL_IBSS_STAmgmt frame registration for multicastMULTICAST_REGISTRATIONSbeacon prot. for clients supportBEACON_PROTECTION_CLIENTscan on kHz frequency supportSCAN_FREQ_KHZtx status for nl80211 control port supportCONTROL_PORT_OVER_NL80211_TX_STATUSOperating Channel Validation (OCV) supportOPERATING_CHANNEL_VALIDATIONAP mode PSK offload support4WAY_HANDSHAKE_AP_PSKAP mode SAE authentication offload supportSAE_OFFLOAD_APFILS discovery frame transmission supportFILS_DISCOVERYunsolicated broadcast probe response transmission supportUNSOL_BCAST_PROBE_RESPHE beacon rate support (AP/mesh)BEACON_RATE_HEsecure LTF measurement protocol supportSECURE_LTFsecure RTT measurement protocol supportSECURE_RTTsupport for MFP in range measurement negotiation/procedurePROT_RANGE_NEGO_AND_MEASUREBSS coloring supportBSS_COLORFILS crypto offloadFILS_CRYPTO_OFFLOADRadar background supportRADAR_BACKGROUNDcan change MAC address while upPOWERED_ADDR_CHANGEpreamble puncturing in AP modePUNCTsecure NAN supportSECURE_NANrandom auth/deauth transmitter addressAUTH_AND_DEAUTH_RANDOM_TAOWE DH element handling offload (client)OWE_OFFLOADOWE DH element handling offload (AP)OWE_OFFLOAD_APDFS channel use under concurrent DFS masterDFS_CONCURRENTSPP A-MSDU supportSPP_AMSDU_SUPPORT Coalesce support: * Maximum %u coalesce rules supported * Each rule contains up to %u patterns of %u-%u bytes, maximum packet offset %u bytes * Maximum supported coalescing delay %u msecs Peer measurement (PMSR) Malformed PMSR Max peers: %d REPORT_AP_TSF RANDOMIZE_MAC_ADDR FTM (Fine time measurement or Flight time measurement) Preambles: LEGACY HT VHT DMG Bandwidth: 20_NOHT 20 40 80 80P80 160 5 10 1 2 4 8 16 320 MAX_BURSTS_EXPONENT: %d MAX_FTMS_PER_BURST: %d ASAP NON_ASAP REQ_LCI REQ_CIVICLOC TRIGGER_BASED NON_TRIGGER_BASED PMSR type is missing Maximum associated stations in AP mode: %u Supported wiphy radios: * Idx %u: Frequency Range: %u MHz - %u MHzRadio's Radio level interface combinations are not supported RTS Threshold: %d * Globally Global interface combinations are not supported%Y-%m-%d %H:%M:%S[%s.%06lu]: %llu.%06llu: %s (phy #%d): phy #%d: wdev 0x%llx (phy #%d): %s: wdev 0x%llx: regulatory domain change (phy): regulatory domain change: set to %s by %s request on phy%dset to world roaming by %s requestcustom world roaming rules in place on phy%d by %s requestintersection used due to a request made by %sunknown source (upgrade this utility)beacon hint:phy%d %d MHz [%d]: o Initiating radiation enabled o active scan enabled o ibss enablednew station %s del station %s unknown event %d --debug--versioniw version %s helpFailed to allocate netlink socket. Failed to connect to generic netlink. nl80211nl80211 not found. devphywdevUsage: %s [options] command failed: %s (%d) ACTIVELIGHT SLEEPDEEP SLEEPUNKNOWN%sinactive time: %u ms%srx bytes: %llu%srx bytes: %u%srx packets: %u%stx bytes: %llu%stx bytes: %u%stx packets: %u%stx retries: %u%stx failed: %u%sbeacon loss: %u beacon rx: %llu%srx drop misc: %llu%ssignal: %d %sdBm%ssignal avg: %d %sdBm%sbeacon signal avg: %d dBm%sToffset: %llu us%stx bitrate: %s%stx duration: %lld us%srx bitrate: %s%srx duration: %lld us%slast ack signal:%d dBm%savg ack signal: %d dBm%sairtime weight: %d%sexpected throughput: %u.%uMbps-v%sMSDU:%sTID rx tx tx retries tx failedfailed to parse nested stats attributes! %llu %llu%sTXQs:%sfailed to parse nested bss param attributes!%sDTIM period: %u%sbeacon interval:%u%sCTS protection: yes no%sshort preamble:%sshort slot time:yesno%sconnected time: %u seconds%sassociated at [boottime]: %llu.%.3llus%sassociated at: %llu msHE capabilitiesHE OperationEHT OperationMulti-LinkEHT capabilitiesP2PHotSpot 2.0 IndicationHotSpot 2.0 OSENOWE Transition ModeWPASSIDBSS LoadHT capabilitiesRSNHT operationSecondary Channel OffsetMESH IDVHT capabilitiesVHT operationanyno secondaryabove[reserved!]belowmesh_retry_timeoutmesh_confirm_timeoutmesh_holding_timeoutmesh_max_peer_linksmesh_max_retriesmesh_ttlmesh_element_ttlmesh_auto_open_plinksmesh_hwmp_max_preq_retriesmesh_path_refresh_timemesh_min_discovery_timeoutmesh_hwmp_active_path_timeoutmesh_hwmp_preq_min_intervalmesh_hwmp_net_diameter_traversal_timemesh_hwmp_rootmodemesh_hwmp_rann_intervalmesh_gate_announcementsmesh_fwdingmesh_sync_offset_max_neighormesh_rssi_thresholdmesh_hwmp_active_path_to_root_timeoutmesh_hwmp_root_intervalmesh_hwmp_confirmation_intervalmesh_power_modemesh_awake_windowmesh_plink_timeoutmesh_connected_to_gatemesh_nolearnmesh_connected_to_asnonefcsfailplcpfailcontrolotherbsscook%d, plink_actionvlanairtime_weighttxpwr3/41/2x2undef(%s NSS) :%02x%xsubtypereason-codeinvalid vlan id invalid airtime weight Unknown mode (%d)\x%.2xpunct Maximum RX AMPDU length %d bytes (exponent: 0x0%02x) Maximum RX AMPDU length: unrecognized bytes (exponent: %d) No restriction1/4 usec1/2 usec1 usec2 usec4 usec8 usec16 usecBUG (spacing more than 3 bits!) Minimum RX AMPDU time spacing: %s (0x%02x) Capabilities: 0x%02x RX LDPC HT20 HT20/HT40 Static SM Power Save Dynamic SM Power Save SM Power Save disabled RX Greenfield RX HT20 SGI RX HT40 SGI TX STBC No RX STBC RX STBC 1-stream RX STBC 2-streams RX STBC 3-streams HT Delayed Block Ack Max AMSDU length: 7935 bytes Max AMSDU length: 3839 bytes No DSSS/CCK HT40 DSSS/CCK HT40 40 MHz Intolerant L-SIG TXOP protection HT Max RX data rate: %d Mbps HT TX/RX MCS rate indexes supported: HT RX MCS rate indexes supported: TX unequal modulation supported TX unequal modulation not supported HT TX Max spatial streams: %d HT TX MCS rate indexes supported may differ HT TX MCS rate indexes are undefinednot VHT Capabilities (0x%.8x): Max MPDU length: 3895799111454(reserved) Supported Channel Width: neither 160 nor 80+80160 MHz, 80+80 MHz20MHz40MHz80MHz160MHz80+80MHz short GI (80 MHz) short GI (160/80+80 MHz) SU Beamformer SU Beamformee MU Beamformer MU Beamformee VHT TXOP PS +HTC-VHT RX antenna pattern consistency TX antenna pattern consistency VHT RX MCS set:MCS 0-7MCS 0-8MCS 0-9 VHT RX highest supported: %d Mbps VHT TX MCS set: VHT TX highest supported: %d Mbps VHT extended NSS: %ssupported RX%s HE MAC Capabilities (0x%04x%s +HTC HE Supported %s TWT Requester %s TWT Responder %s Dynamic BA Fragementation Level: %d %s Maximum number of MSDUS Fragments: %d %s Minimum Payload size of 128 bytes: %d %s Trigger Frame MAC Padding Duration: %d %s Multi-TID Aggregation Support: %d %s All Ack %s TRS %s BSR %s Broadcast TWT %s 32-bit BA Bitmap %s MU Cascading %s Ack-Enabled Aggregation %s OM Control %s OFDMA RA %s Maximum A-MPDU Length Exponent: %d %s A-MSDU Fragmentation %s Flexible TWT Scheduling %s RX Control Frame to MultiBSS %s BSRP BQRP A-MPDU Aggregation %s QTP %s BQR %s SRP Responder Role %s NDP Feedback Report %s OPS %s A-MSDU in A-MPDU %s Multi-TID Aggregation TX: %d %s HE Subchannel Selective Transmission %s UL 2x996-Tone RU %s OM Control UL MU Data Disable RX %s HE PHY Capabilities: (0x%s HE40/2.4GHz %s HE40/HE80/5GHz %s HE160/5GHz %s HE160/HE80+80/5GHz %s 242 tone RUs/2.4GHz %s 242 tone RUs/5GHz %s Punctured Preamble RX: %d %s Device Class: %d %s LDPC Coding in Payload %s HE SU PPDU with 1x HE-LTF and 0.8us GI %s Midamble Rx Max NSTS: %d %s NDP with 4x HE-LTF and 3.2us GI %s STBC Tx <= 80MHz %s STBC Rx <= 80MHz %s Doppler Tx %s Doppler Rx %s Full Bandwidth UL MU-MIMO %s Partial Bandwidth UL MU-MIMO %s DCM Max Constellation: %d %s DCM Max NSS Tx: %d %s DCM Max Constellation Rx: %d %s DCM Max NSS Rx: %d %s Rx HE MU PPDU from Non-AP STA %s SU Beamformer %s SU Beamformee %s MU Beamformer %s Beamformee STS <= 80MHz: %d %s Beamformee STS > 80MHz: %d %s Sounding Dimensions <= 80MHz: %d %s Sounding Dimensions > 80MHz: %d %s Ng = 16 SU Feedback %s Ng = 16 MU Feedback %s Codebook Size SU Feedback %s Codebook Size MU Feedback %s Triggered SU Beamforming Feedback %s Triggered MU Beamforming Feedback %s Triggered CQI Feedback %s Partial Bandwidth Extended Range %s Partial Bandwidth DL MU-MIMO %s PPE Threshold Present %s SRP-based SR %s Power Boost Factor ar %s HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI %s Max NC: %d %s STBC Tx > 80MHz %s STBC Rx > 80MHz %s HE ER SU PPDU 4x HE-LTF 0.8us GI %s 20MHz in 40MHz HE PPDU 2.4GHz %s 20MHz in 160/80+80MHz HE PPDU %s 80MHz in 160/80+80MHz HE PPDU %s HE ER SU PPDU 1x HE-LTF 0.8us GI %s Midamble Rx 2x & 1x HE-LTF %s DCM Max BW: %d %s Longer Than 16HE SIG-B OFDM Symbols %s Non-Triggered CQI Feedback %s TX 1024-QAM %s RX 1024-QAM %s RX Full BW SU Using HE MU PPDU with Compression SIGB %s RX Full BW SU Using HE MU PPDU with Non-Compression SIGB <= 80160%s HE %s MCS and NSS set %s MHz %s %d streams: TX%s PPE Threshold 0x%02x %s EHT MAC Capabilities (0x%s EPCS Priority Access Supported %s EHT OM Control Supported %s Triggered TXOP Sharing Mode 1 Supported %s Triggered TXOP Sharing Mode 2 Supported %s Restricted TWP Supported %s SCS Traffic Description Supported %s Maximum MPDU Length: %d %s Maximum A_MPDU Length Exponent Extension %s EHT TRS Supported %s TXOP Return In TXOP Sharing Mode 2 Supported %s Two BQRs Supported %s EHT Link Adaptation Supported: %d %s EHT PHY Capabilities (0x%s 320MHz in 6GHz Supported %s 242-tone RU in BW wider than 20MHz Supported %s NDP With EHT-LTF And 3.2 µs GI %s Beamformee SS (80MHz): %d %s Beamformee SS (160MHz): %d %s Beamformee SS (320MHz): %d %s Number Of Sounding Dimensions (80MHz): %d %s Number Of Sounding Dimensions (160MHz): %d %s Number Of Sounding Dimensions (320MHz): %d %s Codebook size (4, 2) SU Feedback %s Codebook size (7, 5) MU Feedback %s Triggered MU Beamforming Partial BW Feedback %s PSR-Based SR Support %s Power Boost Factor Support %s EHT MU PPDU With 4 EHT-LTF And 0.8 µs GI %s Max Nc: %d %s Tx 1024-QAM And 4096-QAM < 242-tone RU %s Rx 1024-QAM And 4096-QAM < 242-tone RU %s PPE Thresholds Present %s Common Nominal Packet Padding: %d %s Maximum Number Of Supported EHT-LTFs: %d %s Support of MCS 15: %d %s Support Of EHT DUP In 6 GHz %s Support For 20MHz Rx NDP With Wider Bandwidth %s Non-OFDMA UL MU-MIMO (80MHz) %s Non-OFDMA UL MU-MIMO (160MHz) %s Non-OFDMA UL MU-MIMO (320MHz) %s MU Beamformer (80MHz) %s MU Beamformer (160MHz) %s MU Beamformer (320MHz) %s TB Sounding Feedback Rate Limit %s Rx 1024-QAM In Wider Bandwidth DL OFDMA Supported %s Rx 4096-QAM In Wider Bandwidth DL OFDMA Supported %s EHT-MCS Map (20 MHz Non-AP STA) (0x%s Rx Max NSS for MCS %s: %u %s Tx Max NSS for MCS %s: %u %s EHT-MCS Map (BW <= 80) (0x%s EHT-MCS Map (BW = 160) (0x%s EHT-MCS Map (BW = 320) (0x%s EHT PPE Thresholds %s: %02x nlctrl--radiolegacy-2.4legacy-5ht-mcs-2.4ht-mcs-5vht-mcs-2.4vht-mcs-5he-mcs-2.4he-mcs-5he-mcs-6sgi-2.4sgi-5lgi-2.4lgi-5he-gi-2.4he-gi-5he-gi-6he-ltf-2.4he-ltf-5he-ltf-60.81.63.2Station %s (on %s) mesh llid: %d mesh plid: %dLISTENOPN_SNTOPN_RCVDCNF_RCVDESTABHOLDINGBLOCKED mesh plink: %s mesh airtime link metric: %d mesh connected to gate: %s mesh connected to auth server: %s mesh local PS mode: mesh peer PS mode: mesh non-peer PS mode: authorized: authenticated: associated: preamble: WMM/WME: MFP: TDLS peer: current time: %llu ms Link %u: address: %slink sta stats missing! failed to parse nested rate attributes!%d.%d MBit/s(unknown) MCS %d VHT-MCS %d 40MHz 80MHz 80P80MHz 160MHz 320MHz 1MHz 2MHz 4MHz 8MHz 16MHz short GI VHT-NSS %d HE-MCS %d HE-NSS %d HE-GI %d HE-DCM %d HE-RU-ALLOC %d EHT-MCS %d EHT-NSS %d EHT-GI %d EHT-RU-ALLOC %d [in use]Survey data from %s survey data missing! frequency: %u MHz%s noise: %d dBm channel active time: %llu ms channel busy time: %llu ms extension channel busy time: %llu ms channel receive time: %llu ms channel BSS receive time: %llu ms channel transmit time: %llu ms bitrates[legacy-<2.4|5> *] [ht-mcs-<2.4|5> *] [vht-mcs-<2.4|5> [he-mcs-<2.4|5|6> *] [sgi-2.4|lgi-2.4] [sgi-5|lgi-5] [he-gi-<2.4|5|6> <0.8|1.6|3.2>] [he-ltf-<2.4|5|6> <1|2|4>]Sets up the specified rate masks. Not passing any arguments would clear the existing mask (if any).disconnectDisconnect from the current network.[-w] [] [] [auth open|shared] [key 0:abcde d:1:6162636465] [mfp:req/opt/no]Join the network with the given SSID (and frequency, BSSID). With -w, wait for the connect to finish or fail. [key 0:abcde d:1:6162636465]Authenticate with the given network. event[-t|-T|-r] [-f]Monitor events from the kernel. -t - print timestamp -T - print absolute, human-readable timestamp -r - print relative timestamp -f - print full frame for auth/assoc etc.getpssetpsstopqueueshwsimwakequeuesleaveLeave the current IBSS cell.join [NOHT|HT20|HT40+|HT40-|5MHz|10MHz|80MHz] [fixed-freq] [] [beacon-interval ] [basic-rates ] [mcast-rate ] [key d:0:abcde]Join the IBSS cell with the given SSID, if it doesn't exist create it on the given frequency. When fixed frequency is requested, don't join/create a cell on a different frequency. When a fixed BSSID is requested use that BSSID and do not adopt another cell's BSSID even if it has higher TSF and the same SSID. If an IBSS is created, create it with the specified basic-rates, multicast-rate and beacon-interval.infoShow capabilities for the specified wireless device.listList all wireless devices and their capabilities.add type [mesh_id ] [4addr on|off] [flags *] [addr ] [radios all|[,...]]Add a new virtual interface with the given configuration. Valid interface types are: managed, ibss, monitor, mesh, wds. The flags are only used for monitor interfaces, valid flags are: none: no special flags fcsfail: show frames with FCS errors control: show control frames otherbss: show frames from other BSSes cook: use cooked mode active: use active mode (ACK incoming unicast packets) mumimo-groupid : use MUMIMO according to a group id mumimo-follow-mac : use MUMIMO according to a MAC address The mesh_id is used only for mesh mode.delRemove this virtual interfaceinterfaceShow information for this interface.*Set monitor flags. Valid flags are: none: no special flags fcsfail: show frames with FCS errors control: show control frames otherbss: show frames from other BSSes cook: use cooked mode active: use active mode (ACK incoming unicast packets) mumimo-groupid : use MUMIMO according to a group id mumimo-follow-mac : use MUMIMO according to a MAC addressList all network interfaces for wireless hardware.Set interface type/mode. Valid interface types are: managed, ibss, monitor, mesh, wds.Set interface 4addr (WDS) mode.noack_mapSet the NoAck map for the TIDs. (0x0009 = BE, 0x0006 = BK, 0x0030 = VI, 0x00C0 = VO)mcast_rateSet the multicast bitrate.[command]Print usage for all or a specific command, e.g. "help wowlan" or "help wowlan enable".keyget Retrieve a key and key sequence. Print information about the current connection, if any.mesh_param= [=]*Set mesh parameter (run command without any to see available ones).[]Retrieve mesh parameter (run command without any to see available ones).List all supported mesh parameters [[freq ] [basic-rates ]], [mcast-rate ] [beacon-interval