projects / openwrt / staging / chunkeey.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 623cdc4) | patch
base-files: don't evaluate block-device uevent
authorDaniel Golle <daniel@makrotopia.org>
Fri, 2 Feb 2018 00:57:46 +0000 (01:57 +0100)
committerDaniel Golle <daniel@makrotopia.org>
Thu, 15 Feb 2018 13:39:47 +0000 (14:39 +0100)
commitf60be720772cac8a13d7759be14814d14698a45f
tree7df38010cc9129f3dcf31c855d1f81dacaca075ctree | snapshot
parent623cdc4ffeef8e95ba7ab02288c044b2186d121acommit | diff
base-files: don't evaluate block-device uevent

Backport commits fixing the detection of GPT partition names during
preinit and sysupgrade, closing a shell-injection vulnerability.

da52dd0c83 ("base-files: quote values when evaluating uevent")
267873ac9b ("base-files: don't evaluate block-device uevent")

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
package/base-files/files/lib/upgrade/common.sh diff | blob | history
Staging tree of Christian Lamparter