You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
openwrt/package
Daniel Golle 267873ac9b
base-files: don't evaluate block-device uevent
Current code and also before commit da52dd0c83 was vulnerable to shell
injection using volume lables in the GPT partition table of block
devices. Given that partition names can be freely defined in GPT tables
we really shouldn't evaluate a string which is potentially crafted with
evil intentions. Hence rather use `export -n` to absorb the uevent's
variables into the environment.

Fixes commit da52dd0c83 (base-files: quote values when evaluating uevent)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[mschiffer@universe-factory.net: suggested export -n usage]
6 years ago
..
base-files base-files: don't evaluate block-device uevent 6 years ago
boot kexec-tools: bump version to 2.0.16 6 years ago
devel valgrind: Fix compile on ARM64 6 years ago
firmware ipq-wifi: drop OpenMesh A42 board-2.bin 6 years ago
kernel kernel: add IEEE-1284 parallel port support 6 years ago
libs bunwind: build for ARM64 6 years ago
network odhcp6c: fix appending of emtpy sendopt value (FS#1336) 6 years ago
system tools: add iucode-tool 6 years ago
utils build: add hardened builds with PIE (ASLR) support 6 years ago
Makefile build: remove package preconfig feature 7 years ago