[Beta] Asuswrt-Merlin 382.1 Beta is available

[Pir8pete]

@Merlin

The WTFast on the AC86 is broken, can't login, says "*server does not response." in yellow letters under the login fields.

Made another fresh WTF account and it does the same thing. no go




Also I have the 1900P in AP mode (connected Ethernet to the AC86U) and i'm getting this in the logs over and over.

Jul 31 22:35:13 ntp: start NTP update
Jul 31 22:35:40 ntp: start NTP update
Jul 31 22:36:07 ntp: start NTP update
Jul 31 22:36:34 ntp: start NTP update
Jul 31 22:37:01 ntp: start NTP update
Jul 31 22:37:28 ntp: start NTP update
Jul 31 22:37:55 ntp: start NTP update
Jul 31 22:38:22 ntp: start NTP update
Jul 31 22:38:49 ntp: start NTP update
Jul 31 22:39:16 ntp: start NTP update

 

[Broken Hope]

Am I right in thinking the OUI commits will fix the network map not displaying any info for manufacturer?

 

[yk101]

Was lost when I switched to Asus's e2fs build recipes, re-added.

Thank you!

 

[di4b0lik]

Just installed 382.1 Beta 1 on my brand new AC86U, everything seems to work really fine and the transition from my old router (AC68U running latest Merlin) has been flawless and fast.
Only thing i've notice is a very high ram usage wich does persists even after a factory reset (around 390MB used and 127MB free). Is that normal with this router?

 

[RMerlin]

The WTFast on the AC86 is broken, can't login, says "*server does not response." in yellow letters under the login fields.

WTFast is closed source, and outside of my control.

Am I right in thinking the OUI commits will fix the network map not displaying any info for manufacturer?

Yes. The lookup function was lost in the 382 merge (due to Asus's changes to networkmap).

Only thing i've notice is a very high ram usage wich does persists even after a factory reset (around 390MB used and 127MB free). Is that normal with this router?

That's normal. Broadcom reserves 13% of the RAM for buffers for all of its various components, so only 440 MB is available to the system out of 512 MB.

 

[di4b0lik]

That's normal. Broadcom reserves 13% of the RAM for buffers for all of its various components, so only 440 MB is available to the system out of 512 MB.

Is it also normal that 380MB of those 440MB are always used by the system? even after a factory reset?

 

[RMerlin]

Is it also normal that 380MB of those 440MB are always used by the system? even after a factory reset?

Depends what you run on it. My own RT-AC86U only uses 240 MB once booted.

admin@RT-AC86U-DFD8:/tmp/home/root# free -m
             total       used       free     shared    buffers     cached
Mem:        440372     242308     198064          0        920      16244
-/+ buffers/cache:     225144     215228
Swap:            0          0          0

 

[clvk07]

Minidlna hangs when started by the firmware, however manually launching it works. I haven't been able to track down the cause yet.

sorry what do you mean manually? from command prompt? Even if I stop and start UPNP server in the menu it is not working.

 

[MacG32]

Firmware v3.0.0.4.382.18219 released today.

 

[Pir8pete]

Firmware v3.0.0.4.382.18219 released today.

Thx for the update, Asus pushed this out quick.


ASUS RT-AC86U Firmware version 3.0.0.4.382.18219
Security fixed
- Fixed KRACK vulnerability
- Fixed CVE-2017-14491: DNS - 2 byte heap based overflow
- Fixed CVE-2017-14492: DHCP - heap based overflow
- Fixed CVE-2017-14493: DHCP - stack based overflow
- Fixed CVE-2017-14494: DHCP - info leak
- Fixed CVE-2017-14495: DNS - OOM DoS
- Fixed CVE-2017-14496: DNS - DoS Integer underflow
- Fixed CVE-2017-13704 : Bug collision
- Fixed predictable session tokens, logged user IP validation, Logged-in information disclosure (special thanks for Blazej Adamczyk contribution)

Bug Fixed
- Improved compatibility for Qualcomm client card.
- Fixed IGMP snooping related issue.

 

[Pir8pete]

@RMerlin

Should this error be happening in AP mode on 1900P (connected Ethernet to the AC86U) ?
Why can't it reach the net to get it's time? AC86U is blocking it?

I'm getting tons and tons of this in the logs

Jul 31 22:35:13 ntp: start NTP update
Jul 31 22:35:40 ntp: start NTP update
Jul 31 22:36:07 ntp: start NTP update
Jul 31 22:36:34 ntp: start NTP update
Jul 31 22:37:01 ntp: start NTP update
Jul 31 22:37:28 ntp: start NTP update
Jul 31 22:37:55 ntp: start NTP update
Jul 31 22:38:22 ntp: start NTP update
Jul 31 22:38:49 ntp: start NTP update
Jul 31 22:39:16 ntp: start NTP update

 

[RMerlin]

sorry what do you mean manually? from command prompt? Even if I stop and start UPNP server in the menu it is not working.

The issue is when minidlna is launched as a background service, it crashes when detaching itself from the parent process. It was working when I was running it manually for debugging because I was telling it then not to detach itself, so I could get the debug output.

In any case, the issue was simply a bad compile that had USE_DAEMON enabled in minidlna, the issue disappears once the firmware gets recompiled.

Should this error be happening in AP mode on 1900P (connected Ethernet to the AC86U) ?
Why can't it reach the net to get it's time? AC86U is blocking it?

Check your NTP and DNS settings on the AP. This is unrelated to the main router.

 

[RMerlin]

ASUS RT-AC86U Firmware version 3.0.0.4.382.18219
Security fixed
- Fixed KRACK vulnerability
- Fixed CVE-2017-14491: DNS - 2 byte heap based overflow
- Fixed CVE-2017-14492: DHCP - heap based overflow
- Fixed CVE-2017-14493: DHCP - stack based overflow
- Fixed CVE-2017-14494: DHCP - info leak
- Fixed CVE-2017-14495: DNS - OOM DoS
- Fixed CVE-2017-14496: DNS - DoS Integer underflow
- Fixed CVE-2017-13704 : Bug collision
- Fixed predictable session tokens, logged user IP validation, Logged-in information disclosure (special thanks for Blazej Adamczyk contribution)

Bug Fixed
- Improved compatibility for Qualcomm client card.
- Fixed IGMP snooping related issue.

All those DHCP and DNS CVEs have already been fixed in 380.68_4 (and are also included in 382.1 Beta 1).

 

[highwire]

Go to the LAN setup page and enter the IP address for your favorite DNS server in the 'DNS Server 1' field - without this setting the router can't figure out the IP address of the NTP server you have entered in 'Administration -> System -> NTP Server'. The alternative is to enter the IP address of your favorite NTP server directly in Administration -> System -> NTP Server.

@RMerlin

Should this error be happening in AP mode on 1900P (connected Ethernet to the AC86U) ?
Why can't it reach the net to get it's time? AC86U is blocking it?

I'm getting tons and tons of this in the logs

Jul 31 22:35:13 ntp: start NTP update
Jul 31 22:35:40 ntp: start NTP update
Jul 31 22:36:07 ntp: start NTP update
Jul 31 22:36:34 ntp: start NTP update
Jul 31 22:37:01 ntp: start NTP update
Jul 31 22:37:28 ntp: start NTP update
Jul 31 22:37:55 ntp: start NTP update
Jul 31 22:38:22 ntp: start NTP update
Jul 31 22:38:49 ntp: start NTP update
Jul 31 22:39:16 ntp: start NTP update

 

[john9527]

@RMerlin
When you do a merge on this, can you see if you can get a hint on what changed for the KRACK fix? Thanks.

ASUS RT-AC86U Firmware version 3.0.0.4.382.18219
Security fixed
- Fixed KRACK vulnerability

 

[RMerlin]

@RMerlin
When you do a merge on this, can you see if you can get a hint on what changed for the KRACK fix? Thanks.

ASUS RT-AC86U Firmware version 3.0.0.4.382.18219
Security fixed
- Fixed KRACK vulnerability

I suspect it will be in large part in the nas binary. Will be tricky to get a clear picture however, will be quite a large jump between 16466 and 18219

There's no GPL available yet, so for now we'll have to wait.

 

[hvluu]

@RMerlin, have you tried reproducing the error with iptables that I ran across? I’ve tried everything but the problem is still there


Sent from my iPhone using Tapatalk

 

[RMerlin]

@RMerlin, have you tried reproducing the error with iptables that I ran across? I’ve tried everything but the problem is still there

I didn't have time to look into it, I was busy fixing other issues lately after taking a few days off.

 

[RMerlin]

382.1 Beta 2 has been released, for the same three models.

2e8b7ce Updated documentation
c21d7dd rc: Do not prepend 3.0.0.4 to FW version (console boot log, and minidlna config file)
f8702e9 webui: DNSFilter - fix the "Add" button image, better identify the Client field as a MAC
ec8fdf5 webui: fix OUI lookups
9744754 webui: update OUI database
80787fe webui: fixed Ethernet table layout on Sysinfo page
a21c78d e2fs: add back tune2fs (to match AM380)
2bee3b5 Converted changelog-382.txt to Windows format (it's time for Microsoft to add UNIX EOL support to Notepad me thinks - everything else does already)
58e3058 webui: add missing "Custom" DDNS type
7c6e9c0 dnsfilter: split rules across multiple nvram on HND due to 255 chars limit
053ff57 shared: fix nvram_split_get() and enable it
8be8bf7 httpd: remove unused variable
d4db370 dnsfilter: free duplicated string after building iptables rules
3bfea15 openvpn: fix a few cases where we requested the incorrect certificate types at config time.
4d69911 nvram: implemented workarounds and safeguards for HND limiting non-Asus nvram additions to 255 chars max
419fb9c Bump revision to beta 2
e6fadd7 dhd,networkmap: add missing dhd and arpstorm exe recovered from firmware releases
9296183 webui: add missing model-specific files for RT-AC88U and RT-AC3100
62913a4 sdk7114: merge working binary blob for RT-AC88U

 

[MarkSW]

@Merlin

The WTFast on the AC86 is broken, can't login, says "*server does not response." in yellow letters under the login fields.

Made another fresh WTF account and it does the same thing. no go




Also I have the 1900P in AP mode (connected Ethernet to the AC86U) and i'm getting this in the logs over and over.

Jul 31 22:35:13 ntp: start NTP update
Jul 31 22:35:40 ntp: start NTP update
Jul 31 22:36:07 ntp: start NTP update
Jul 31 22:36:34 ntp: start NTP update
Jul 31 22:37:01 ntp: start NTP update
Jul 31 22:37:28 ntp: start NTP update
Jul 31 22:37:55 ntp: start NTP update
Jul 31 22:38:22 ntp: start NTP update
Jul 31 22:38:49 ntp: start NTP update
Jul 31 22:39:16 ntp: start NTP update

Try changing access to router from HTTPS to HTTP in the system settings - the GT5300 has this issue.