packages/net/olsrd/files, branch master

olsrd: reject non-address input before eval in olsrd-neigh.sh

2026-08-13T21:21:19Z

olsrd-neigh.sh builds shell variable names from data announced by other nodes in the mesh and passes them through eval: eval IP_${ip//[.:]/_}="$hostname" eval re-parses the string after the quotes have been consumed by the first expansion pass, so a hostname of `x;reboot` announced by a remote node is executed as a command on every node that runs the utility. The values come from the nameservice plugin's hosts file and from the txtinfo plugin, both of which carry unauthenticated remote input. Discard entries containing anything other than the characters that can legitimately appear in an address or hostname before they reach eval, in both places. Reported-by: openwrt-ai[bot] Signed-off-by: Josef Schlehofer Co-authored-by: Claude Fable 5

olsrd: fix respawn_threshold lookup in the IPv6 init script

2026-08-13T21:21:19Z

The UCI option is spelled respawn_threshold, as documented in files/olsrd6.config and as read by files/olsrd4.init, but the IPv6 init script looks up _respawn_threshold. The lookup never matches, so a user-configured value is silently ignored and the built-in default of 3600 is always used. Reported-by: openwrt-ai[bot] Signed-off-by: Josef Schlehofer Co-authored-by: Claude Fable 5

olsrd: add new package

2026-08-13T21:21:19Z

olsrd is the olsr.org implementation of the Optimized Link State Routing protocol, together with its plugins packaged as olsrd-mod-* subpackages. Moved from the openwrt/routing feed, as discussed in https://github.com/openwrt/routing/issues/184. Signed-off-by: Josef Schlehofer Co-authored-by: Claude Fable 5