<feed xmlns='http://www.w3.org/2005/Atom'>
<title>ubox, branch master</title>
<subtitle>OpenWrt core utilities</subtitle>
<id>https://git.openwrt.org/project/ubox/atom?h=master</id>
<link rel='self' href='https://git.openwrt.org/project/ubox/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/'/>
<updated>2025-10-30T11:10:12Z</updated>
<entry>
<title>ubox validate: port range check fix</title>
<updated>2025-10-30T11:10:12Z</updated>
<author>
<name>Paul Donald</name>
</author>
<published>2024-09-20T15:55:13Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=6f78fa496bf36c55864a41e353df7d13f04b1077'/>
<id>urn:sha1:6f78fa496bf36c55864a41e353df7d13f04b1077</id>
<content type='text'>
The luci GUI allows a single port in a port range field. This additional
check validates a single port if a range was not found.

Signed-off-by: Paul Donald &lt;newtwen+github@gmail.com&gt;
Link: https://github.com/openwrt/ubox/pull/7
Signed-off-by: Robert Marko &lt;robimarko@gmail.com&gt;
</content>
</entry>
<entry>
<title>CMakeLists: update cmake minimum required version to 3.10</title>
<updated>2025-10-03T21:33:39Z</updated>
<author>
<name>Christian Marangi</name>
</author>
<published>2025-10-03T21:33:39Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=c75525a58a7ea1363f96bac9f9b4104971c1eb03'/>
<id>urn:sha1:c75525a58a7ea1363f96bac9f9b4104971c1eb03</id>
<content type='text'>
New cmake version 4.0 requires at least 3.5 version as the minimum
required version with it increased to 3.10 in to-be-released cmake
versions.

Set the minimum required version to 3.10 to future-proof for future
cmake version.

Suggested-by: Hannu Nyman &lt;hannu.nyman@iki.fi&gt;
Signed-off-by: Christian Marangi &lt;ansuelsmth@gmail.com&gt;
</content>
</entry>
<entry>
<title>kmodloader: fix insmod path logic</title>
<updated>2024-04-26T23:26:15Z</updated>
<author>
<name>Tony Ambardar</name>
</author>
<published>2024-04-26T23:21:25Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=85f1053019caf4cd333795760950235ee4529ba7'/>
<id>urn:sha1:85f1053019caf4cd333795760950235ee4529ba7</id>
<content type='text'>
Correct a small typo that breaks logic for insmod path selection.

Fixes: 4c5c45c6beac ("kmodloader: fix invalid write during insmod, CodeQL warnings")
Signed-off-by: Tony Ambardar &lt;itugrok@yahoo.com&gt;
</content>
</entry>
<entry>
<title>kmodloader: support duplicate module names and aliases</title>
<updated>2024-03-02T21:56:56Z</updated>
<author>
<name>Tony Ambardar</name>
</author>
<published>2024-01-27T11:41:56Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=d413903016c4dc9190926e38ff72fbf7d3d69115'/>
<id>urn:sha1:d413903016c4dc9190926e38ff72fbf7d3d69115</id>
<content type='text'>
Allow duplicate keys in the 'modules' avl tree, fixing an indirect memory
leak observed during testing. Given avl keys treat '_' and '-' equally,
some modules may have aliases duplicating their own names under this
mapping, so skip adding these redundant avl tree nodes in alloc_module().

With the above support, update 'modinfo' to print details for all modules
matching the cmdline name, rather than only the first. This is the expected
behaviour and consistent with upstream. The behaviour of other kmodloader
applets, such as boot-time loading or modprobe, remains unchanged.

Signed-off-by: Tony Ambardar &lt;itugrok@yahoo.com&gt;
</content>
</entry>
<entry>
<title>kmodloader: fix memleak adding to avl tree</title>
<updated>2024-03-02T21:56:56Z</updated>
<author>
<name>Tony Ambardar</name>
</author>
<published>2024-01-24T08:17:06Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=1c9aaefc119a908c6a9849e96330443c7439e5d1'/>
<id>urn:sha1:1c9aaefc119a908c6a9849e96330443c7439e5d1</id>
<content type='text'>
Check avl_insert() return value and free node data on error, otherwise this
is observed to directly leak memory.

Fixes: 6e3c6dcf922e ("kmodloader: add module alias awareness")
Signed-off-by: Tony Ambardar &lt;itugrok@yahoo.com&gt;
</content>
</entry>
<entry>
<title>kmodloader: fix invalid write during insmod, CodeQL warnings</title>
<updated>2024-03-02T21:55:18Z</updated>
<author>
<name>Tony Ambardar</name>
</author>
<published>2024-01-25T02:22:56Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=4c5c45c6beac586c994af34a795bc5f2232f5f3d'/>
<id>urn:sha1:4c5c45c6beac586c994af34a795bc5f2232f5f3d</id>
<content type='text'>
Running 'insmod &lt;module&gt;' (without module options) tries to write an empty
option string (1 byte) to a mis-allocated zero-size memory block:

  ==381835== Command: ./insmod unix
  ==381835==
  ==381835== Invalid write of size 1
  ==381835==    at 0x10A874: main_insmod (kmodloader.c:944)
  ==381835==    by 0x10A874: main (kmodloader.c:1383)
  ==381835==  Address 0x4ab6f60 is 0 bytes after a block of size 0 alloc'd
  ==381835==    at 0x4848899: malloc (in vgpreload_memcheck-amd64-linux.so)
  ==381835==    by 0x10A856: main_insmod (kmodloader.c:937)
  ==381835==    by 0x10A856: main (kmodloader.c:1383)

Change main_insmod() to allocate at least 1 byte in this case for the
null-termination. Also rename local 'options' -&gt; 'opts' to avoid confusion
with similar global, as suggested by CodeQL, and clarify pathname logic.

Fixes: c105f22064d6 ("kmodloader: eliminate some hardcoded buffer sizes")
Signed-off-by: Tony Ambardar &lt;itugrok@yahoo.com&gt;
</content>
</entry>
<entry>
<title>kmodloader: improve memory accounting and deallocation</title>
<updated>2024-03-02T17:43:40Z</updated>
<author>
<name>Tony Ambardar</name>
</author>
<published>2024-01-25T02:20:37Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=6a59975afc2c390e64cb7a23798f3b0c10964884'/>
<id>urn:sha1:6a59975afc2c390e64cb7a23798f3b0c10964884</id>
<content type='text'>
Add missing calls to free module_folders and modules data during cleanup,
and ensure that resources are consistently freed on exit paths.

Signed-off-by: Tony Ambardar &lt;itugrok@yahoo.com&gt;
</content>
</entry>
<entry>
<title>CI: add CodeQL workflow test</title>
<updated>2024-03-02T16:35:28Z</updated>
<author>
<name>Christian Marangi</name>
</author>
<published>2024-03-02T16:23:47Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=510157049fab700eaddad45bfcc93bddd28fcd61'/>
<id>urn:sha1:510157049fab700eaddad45bfcc93bddd28fcd61</id>
<content type='text'>
Add CodeQL workflow test to catch security vulnerabilities and enable
suggestion for better code.

All the dependency comes from the build-ubox workflow but all is built
on ubuntu instead of alpine image.

CodeQL queries enabled: security-and-quality

Signed-off-by: Christian Marangi &lt;ansuelsmth@gmail.com&gt;
</content>
</entry>
<entry>
<title>CI: add build test for ubox</title>
<updated>2024-03-02T16:35:18Z</updated>
<author>
<name>Christian Marangi</name>
</author>
<published>2024-03-02T16:11:42Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=13d0432750d376a6211d92aa36252e0e92c55e52'/>
<id>urn:sha1:13d0432750d376a6211d92aa36252e0e92c55e52</id>
<content type='text'>
Add build test for ubox. Use alpine container and install libubox,
libubus, libudebug, ucode and libuci as dependency.

Signed-off-by: Christian Marangi &lt;ansuelsmth@gmail.com&gt;
</content>
</entry>
<entry>
<title>.gitignore: don't ignore .github directory</title>
<updated>2024-03-02T16:10:55Z</updated>
<author>
<name>Christian Marangi</name>
</author>
<published>2024-03-02T16:10:55Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/ubox/commit/?id=da52a854abeb9aa121de2eaf8ce9b59e6504a302'/>
<id>urn:sha1:da52a854abeb9aa121de2eaf8ce9b59e6504a302</id>
<content type='text'>
Don't ignore .github special directory as it does contain specific files
for github CI workflows.

Signed-off-by: Christian Marangi &lt;ansuelsmth@gmail.com&gt;
</content>
</entry>
</feed>
