Telecominfraproject/wlan-ucentral-client

mirror of https://github.com/Telecominfraproject/wlan-ucentral-client.git synced 2026-03-19 22:41:48 +00:00

Go to file

John Crispin d322773dd3 package: replace system() with fork/execvp to prevent shell injection

The url parameter was passed unsanitised into system() via snprintf,
allowing arbitrary command execution through crafted URLs. Replace all
system() calls with a fork/execvp helper that bypasses the shell
entirely, and use unlink() directly for file deletion.

Signed-off-by: John Crispin <john@phrozen.org>

2026-02-09 15:31:27 +01:00

.gitignore

ucentral: rebrand

2020-11-27 10:20:37 +01:00

apply.c

fix time_t format primitives

2023-09-19 07:44:14 +02:00

cert.pem

usync-client: initial import

2020-11-17 18:29:50 +01:00

CMakeLists.txt

ucentral-client: bump minimum CMake version to 3.5

2026-01-31 08:45:54 +01:00

cmd.c

fix time_t format primitives

2023-09-19 07:44:14 +02:00

collide.c

prevent ip-collide script and apply task running in parallel

2023-07-27 12:05:06 +02:00

config.c

fix time_t format primitives

2023-09-19 07:44:14 +02:00

event.c

add periodic telemetry

2023-01-25 16:33:27 +01:00

main.c

ucentral-client: Add command-line options for certificate paths

2025-11-25 07:58:05 +01:00

package.c

package: replace system() with fork/execvp to prevent shell injection

2026-02-09 15:31:27 +01:00

proto.c

ucentral-client: Add discovery metadata to connect payload

2025-08-11 05:37:26 +02:00

README.md

Add README.md

2023-01-25 16:33:27 +01:00

rebootlog.c

crashlog->rebootlog

2023-05-17 16:53:43 +02:00

task.c

prevent ip-collide script and apply task running in parallel

2023-07-27 12:05:06 +02:00

ubus.c

send on/offline events to cloud discovery service

2024-11-12 10:35:52 +01:00

ucentral.h

package: migrate from opkg/ipk to apk for OpenWrt 25.12

2026-02-09 15:30:42 +01:00

upload.c

task: add an additional runqueue for admin commands

2023-01-25 16:33:27 +01:00

README.md

uCentral Client

uCentral Client application for OpenWiFi access points, communicating with the uCentral Gateway.

This software is a part of the OpenWiFi AP NOS.

Developer Notes

The uCentral connection uses the WebSocket protocol, and messages are transferred in JSON-RPC format. Full details of this protocol can be found in a separate document here.

Incoming JSON-RPC messages are handled in proto.c:proto_handle().
Complex actions are executed via task queues (libubox/runqueue.h).
Many actions will fork external programs, notably ucode scripts installed by the ucentral-schema package (see ucentral-schema/command/).

This application registers several ubus methods under the ucentral object, as defined in ubus.c:ubus_object.