<feed xmlns='http://www.w3.org/2005/Atom'>
<title>busybox-w32/scripts/kconfig, branch master</title>
<subtitle>A mirror of https://github.com/rmyorston/busybox-w32.git
</subtitle>
<id>https://git.lua4.win/busybox-w32/atom?h=master</id>
<link rel='self' href='https://git.lua4.win/busybox-w32/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/'/>
<updated>2026-03-11T10:14:49+00:00</updated>
<entry>
<title>Merge branch 'busybox' into merge</title>
<updated>2026-03-11T10:14:49+00:00</updated>
<author>
<name>Ron Yorston</name>
<email>rmy@pobox.com</email>
</author>
<published>2026-03-11T10:14:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=ede205bd07573813337b5706acb0cae3b127a36f'/>
<id>urn:sha1:ede205bd07573813337b5706acb0cae3b127a36f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>*: placate warnings where strchr/strstr returns constant pointer</title>
<updated>2026-02-15T14:15:30+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-02-15T13:41:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=b668e52c906b664b353d5a99cfa3ff36f73b341d'/>
<id>urn:sha1:b668e52c906b664b353d5a99cfa3ff36f73b341d</id>
<content type='text'>
Newer glibc is now smarter and can propagate const-ness from those!

function                                             old     new   delta
readtoken1                                          3111    3108      -3

Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>Merge branch 'busybox' into merge</title>
<updated>2025-05-19T07:34:32+00:00</updated>
<author>
<name>Ron Yorston</name>
<email>rmy@pobox.com</email>
</author>
<published>2025-05-19T07:34:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=64bf69893bd99c305d13a956389f216e7d15c682'/>
<id>urn:sha1:64bf69893bd99c305d13a956389f216e7d15c682</id>
<content type='text'>
</content>
</entry>
<entry>
<title>archival: disallow path traversals (CVE-2023-39810)</title>
<updated>2025-04-16T01:03:17+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2024-10-02T08:12:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=9a8796436b9b0641e13480811902ea2ac57881d3'/>
<id>urn:sha1:9a8796436b9b0641e13480811902ea2ac57881d3</id>
<content type='text'>
Create new configure option for archival/libarchive based extractions to
disallow path traversals.
As this is a paranoid option and might introduce backward
incompatibility, default it to no.

Fixes: CVE-2023-39810

Based on the patch by Peter Kaestle &lt;peter.kaestle@nokia.com&gt;

function                                             old     new   delta
data_extract_all                                     921     945     +24
strip_unsafe_prefix                                  101     102      +1
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 25/0)               Total: 25 bytes

Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>Update PDCurses</title>
<updated>2025-04-10T18:41:43+00:00</updated>
<author>
<name>Ron Yorston</name>
<email>rmy@pobox.com</email>
</author>
<published>2025-04-10T18:41:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=486c1fcc341472fd8d64b820c3a7934cf3f42132'/>
<id>urn:sha1:486c1fcc341472fd8d64b820c3a7934cf3f42132</id>
<content type='text'>
</content>
</entry>
<entry>
<title>build system: fix ncurses detection</title>
<updated>2024-04-28T14:48:03+00:00</updated>
<author>
<name>Ron Yorston</name>
<email>rmy@pobox.com</email>
</author>
<published>2024-04-28T14:48:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=e21f531c297d1567720c8b0f1c9bab7daf0cfdad'/>
<id>urn:sha1:e21f531c297d1567720c8b0f1c9bab7daf0cfdad</id>
<content type='text'>
Recent versions of gcc fail to build the binary to test for
ncurses because main() is lacking a return type.
</content>
</entry>
<entry>
<title>Update PDCurses</title>
<updated>2024-01-06T12:44:21+00:00</updated>
<author>
<name>Ron Yorston</name>
<email>rmy@pobox.com</email>
</author>
<published>2024-01-06T12:44:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=cdee4a435a7d0d4abac29ea38f8bee9b53e9830e'/>
<id>urn:sha1:cdee4a435a7d0d4abac29ea38f8bee9b53e9830e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>build system: allow monochrome 'make menuconfig'</title>
<updated>2022-11-16T14:43:33+00:00</updated>
<author>
<name>Ron Yorston</name>
<email>rmy@pobox.com</email>
</author>
<published>2022-11-16T14:43:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=13b71ecafba53ebe8e4f88f9af70170b032ba408'/>
<id>urn:sha1:13b71ecafba53ebe8e4f88f9af70170b032ba408</id>
<content type='text'>
'make menuconfig' uses a hardcoded colour palette which may be
difficult to read.  Add support for the 'COLORS' environment
variable.  Setting this to '0' will cause 'make menuconfig' to
be displayed in black and white.

(GitHub issue #273)
</content>
</entry>
<entry>
<title>win32: native make menuconfig: support search</title>
<updated>2022-11-13T15:27:03+00:00</updated>
<author>
<name>Avi Halachmi (:avih)</name>
<email>avihpit@yahoo.com</email>
</author>
<published>2022-11-13T08:43:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=5dd110f70b3a960a1be7fc6070584d764ec7ca60'/>
<id>urn:sha1:5dd110f70b3a960a1be7fc6070584d764ec7ca60</id>
<content type='text'>
Previously, pressing slash to search at the menu aborted the menu
program ('mconf'), because regexp is not available with native mingw.

Now it works, but the search is of plain string rather than regexp.
</content>
</entry>
<entry>
<title>build system: try harder to detect w64devkit</title>
<updated>2022-11-12T08:56:52+00:00</updated>
<author>
<name>Ron Yorston</name>
<email>rmy@pobox.com</email>
</author>
<published>2022-11-12T08:56:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=80732e16e0a73965287a4d31c95831035743c484'/>
<id>urn:sha1:80732e16e0a73965287a4d31c95831035743c484</id>
<content type='text'>
We need to build the supplied PDCurses code when using w64devkit.
This was being detected by checking for the W64DEVKIT environment
variable, but this is only defined if w64devkit is started via
w64devkit.exe.

Set W64DEVKIT ourselves if HOSTCC targets the mingw32 platform.
This won't be the case when cross-compiling on Linux but will
for w64devkit and MSYS2 MINGW32/64.

The build won't work properly for MSYS2 MINGW32/64, but it doesn't
work when using the supplied curses library either.  'make menuconfig'
requires the use of MSYS2 MSYS, and HOSTCC there targets msys.
</content>
</entry>
</feed>
