OsCam Changelogs

Changeset 11924-ea61ff66

13.01.2026

Remove dead code, simplify functions, drop libm dependency (ea61ff66) · Commits · common / oscam · GitLab

- eliminate dead code: ifd_azbox.c while(ret), ifd_sci.c sh4_stb, reader-dre-st20.c verbose, module-cccam.c is_dcw_corrupted - remove constant parameters:…

git.streamboard.tv

Remove dead code, simplify functions, drop libm dependency

- eliminate dead code: ifd_azbox.c while(ret), ifd_sci.c sh4_stb,

reader-dre-st20.c verbose, module-cccam.c is_dcw_corrupted

- remove constant parameters: chk_is_null_nodeid len (always 8),

CAK7do_cmd len (always 0x10)

- simplify: NULLFREE macro (free(NULL) is safe), cs_strlen,

tolower/toupper without isupper/islower check, ifd_stinger.c

mhz assignment, ifd_sci.c tries++ refactoring

- use MIN/MAX macros in module-cccam.c rating clamping

- refactor reader-conax.c CWPK_CNX with memcpy

- replace fmod with pure C in reader-nagracak7.c, drop libm dependency

- Makefile/CMakeLists.txt: remove libm, keep $(LIB_PTHREAD),

$(LIB_DL), $(LIB_RT) variables for toolchain flexibility

thanks to lpm11

thanks tem_invictus

Changeset 11925-731e29ea

13.01.2026

cleanup deadcode clocktypes (731e29ea) · Commits · common / oscam · GitLab

* Remove librt dependency clock_gettime no longer used after cleanup deadcode clocktypes patch. CLOCKFIX now only uses gettimeofday() which doesn't require…

git.streamboard.tv

cleanup deadcode clocktypes

* Remove librt dependency

clock_gettime no longer used after cleanup deadcode clocktypes patch.

CLOCKFIX now only uses gettimeofday() which doesn't require librt.

* cleanup deadcode clocktypes

thanks to lpm11

Co-authored-by: WXbet

thanks tem_invictus

Changeset 11926-c63a56cf

13.01.2026

fix: security crash guard (c63a56cf) · Commits · common / oscam · GitLab

- Harden DVBAPI filter handling: require a valid curpid before touching ECM fields and abort section-filter setup when the demux PID lookup fails, preventing…

git.streamboard.tv

fix: security crash guard

- Harden DVBAPI filter handling: require a valid curpid before touching ECM fields and abort section-filter setup when the demux PID lookup fails, preventing null-pointer crashes.

- WebIF robustness sweep: gate every popen/fopen/access use and preserve pointer assignments so the UI now reports missing scripts/files instead of dereferencing null handles.

- Reader safety: add missing allocation checks in Conax/DRE code paths and keep Nagra readers’ csystem_data alive after failed init to avoid double-free crashes.

- Crash/diagnostics fixes: protect cs_dumpstack()/detect_valgrind() against failed file opens and clamp the CoolAPI status lookup to stay inside the cnxt_status[] table.

thanks to lpm11

thanks tem_invictus

Changeset 11927-848f5460

13.01.2026

cleanup nagra-merlin code (848f5460) · Commits · common / oscam · GitLab

- Flatten the IRDINFO parser to compute expire_date once and set card_valid_to where applicable, eliminating redundant cs_add_entitlement()/addProvider()…

git.streamboard.tv

cleanup nagra-merlin code

- Flatten the IRDINFO parser to compute expire_date once and set card_valid_to where applicable, eliminating redundant cs_add_entitlement()/addProvider() calls.

- Reuse a single IDEA_KEY_SCHEDULE and drop redundant zeroing of MDC2 buffers since the crypto routines already overwrite them.

- Replace the generic xxxor() helper with a dedicated xor8() to reflect the only actual usage and tighten the CAK7 key builders.

thanks to lpm11

thanks tem_invictus

Changeset 11928-28f2598b

13.01.2026

cleanup reader macros (28f2598b) · Commits · common / oscam · GitLab

* Fix cak7_mode guard mismatch - cak7_mode: used by both READER_NAGRA and READER_NAGRA_MERLIN - cak7type: used only by READER_NAGRA_MERLIN Separate guards save…

git.streamboard.tv

cleanup reader macros

* Fix cak7_mode guard mismatch

- cak7_mode: used by both READER_NAGRA and READER_NAGRA_MERLIN

- cak7type: used only by READER_NAGRA_MERLIN

Separate guards save 1 byte in READER_NAGRA-only builds and

ensure no unused struct members exist in any build configuration.

* cleanup reader macros

- Gate struct s_reader members, WebIF fields, and config tokens behind precise reader macros so builds exclude Videoguard/Nagra/Viaccess-only data when those modules aren’t compiled.

- Wrap AES-key helpers, reader option handlers, and Nagra/Videoguard EMM logic in the same feature flags to keep unused code out of minimal builds.

- Ensure Merlin-only arrays and filters, GPIO/ATR settings, and sendcmd handling compile only with the relevant reader backends.

thanks to lpm11

Co-authored-by: WXbet

thanks tem_invictus

Changeset 11930-c74f8075

14.01.2026

reader-nagra: change cak7_mode guard to READER_NAGRA_MERLIN only (c74f8075) · Commits · common / oscam · GitLab

cak7_mode is a Nagra Merlin specific setting that is only meaningful when READER_NAGRA_MERLIN is compiled. When only READER_NAGRA is enabled, cak7_mode can…

git.streamboard.tv

reader-nagra: change cak7_mode guard to READER_NAGRA_MERLIN only

cak7_mode is a Nagra Merlin specific setting that is only meaningful

when READER_NAGRA_MERLIN is compiled. When only READER_NAGRA is enabled,

cak7_mode can never be set to 1, making the check in reader-nagra.c

pointless.

Changes:

- globals.h: Change guard from (READER_NAGRA || READER_NAGRA_MERLIN) to

READER_NAGRA_MERLIN only, consolidate three consecutive MERLIN blocks

- reader-nagra.c: Add inline #ifdef guard around cak7_mode check in

seca/nagra tunneled card detection

- oscam-config-reader.c: Move cak7_mode into existing READER_NAGRA_MERLIN

block with other Merlin options

thanks WXbet

Changeset 11931-2c8c34c9

14.01.2026

reader-nagra/irdeto: change force_irdeto guard to READER_IRDETO only (2c8c34c9) · Commits · common / oscam · GitLab

force_irdeto forces a card to use the Irdeto reader instead of Nagra. In reader-nagra.c it causes the reader to reject the card so the Irdeto reader can handle…

git.streamboard.tv

reader-nagra/irdeto: change force_irdeto guard to READER_IRDETO only

force_irdeto forces a card to use the Irdeto reader instead of Nagra.

In reader-nagra.c it causes the reader to reject the card so the

Irdeto reader can handle it. This only makes sense when READER_IRDETO

is compiled - otherwise there's no Irdeto reader to take over.

Changes:

- globals.h: Change guard from (READER_NAGRA || READER_IRDETO) to

READER_IRDETO only

- oscam-config-reader.c: Change guard to READER_IRDETO only

- module-webif.c: Change guard to READER_IRDETO only

- reader-nagra.c: Add READER_IRDETO guard around force_irdeto check

thanks WXbet

Changeset 11932-5b7ec3c9

15.01.2026

build: fix is_defined.txt generation for proper webif template filtering (5b7ec3c9) · Commits · common / oscam · GitLab

The is_defined.txt file is used by pages_gen to filter templates based on enabled config options. Previously, this file was only created when explicitly…

git.streamboard.tv

build: fix is_defined.txt generation for proper webif template filtering

The is_defined.txt file is used by pages_gen to filter templates based on enabled config options. Previously, this file was only created when explicitly calling config.sh with --enable/--disable/--restore, but not during normal builds.

The "webif clean" added in 96debcd7 ("Fix webif compression parameter") ensured pages.c was always rebuilt, but also deleted is_defined.txt which broke the filtering mechanism.

Changes:

- Call write_enabled() in make_config_mak() to ensure is_defined.txt is generated on every build

- Remove redundant "webif clean" from Makefile and CMakeLists.txt (write_enabled already deletes pages.c when needed)

- Add config.h dependency to pages.c target to trigger rebuild when config options change

This ensures proper filtering works for:

- Fresh checkouts with default config

- Builds after direct config.h modifications

- Builds after config.sh --enable/--disable changes

thanks WXbet

Changeset 11933-bf023d8c

15.01.2026

webif: embedded wiki help system (bf023d8c) · Commits · common / oscam · GitLab

Features * Offline Help: All parameter descriptions are available directly in the binary * Clickable Parameters: A click on the parameter name opens the help…

git.streamboard.tv

webif: embedded wiki help system

Features

* Offline Help: All parameter descriptions are available directly in the binary

* Clickable Parameters: A click on the parameter name opens the help popup

* Draggable Popup: The popup can be freely moved (also via touch on mobile devices)

* Resizable: Size can be adjusted

* Position Remembered: The horizontal position and size are stored in the browser

* Reset Button: Reset to default position and size

* Wiki Link: The title in the popup is a link to the online wiki for more details

* Directly from OSCam Wiki: Parameters dynamically extracted from wiki pages during the build process

* Automatic Updates: Any changes to the wiki pages are automatically integrated into the binary on the next build

* LZO Compression: Wiki data is compressed like WebIF pages (~64% smaller), controlled via WITH_COMPRESS_WEBIF or USE_COMPRESS

* Smart Filtering: Only help texts for actually compiled modules are included in the binary (based on is_defined.txt)

Advantages

* Available Offline - no internet connection needed - perfect for isolated networks

* Fast - instant display without network latency

* Always Up-to-date - wiki content matches exactly the binary version

* User-friendly - help right where you need it

* Touch Support - also works on tablets and smartphones

* No Tracking - the wiki web server sees no requests from your device

Disadvantages

* Larger Binary - approx. 76 KB with LZO compression, or ~45 KB with UPX binary compression

* More RAM - wiki data is kept in memory

* Build Dependency - wiki markdown files must be present during build

The build process:

- New build option WEBIF_WIKI (default=off)

- Git submodule is automatically initialized and updated

- wiki_gen.c parses all markdown files in the wiki/ folder

- Generates pages_wiki.c and pages_wiki.h with all parameter descriptions

- Compiles everything into the final binary

Technical details

- Position Storage: Browser localStorage (wikiPopupLeft, wikiPopupWidth, wikiPopupHeight)

- API Endpoint: /wiki.json?config=conf&WCF_AMPERSAND¶m=serverip

- Generation: wiki_gen.c parses the markdown files and generates pages_wiki.c

- Compression: Controlled via WITH_COMPRESS_WEBIF (same as WebIF pages). Automatically disabled when using USE_COMPRESS=1 (UPX binary compression) - UPX compresses the entire binary more efficiently, making internal LZO compression redundant.

thanks WXbet

11934

submodule: rework submodule support

submodule: rework submodule support (f9a8ee92) · Commits · common / oscam · GitLab

- Add --submodule option to config.sh for unified submodule handling - Automatically detects git repo vs tarball: uses 'git submodule update' in git repos,…

git.streamboard.tv

- Add --submodule <name> option to config.sh for unified submodule handling

- Automatically detects git repo vs tarball: uses 'git submodule update' in

git repos, falls back to 'git clone --depth 1' for source downloads

- Reads submodule URL from .gitmodules

- Use --remote flag only when branch is defined in .gitmodules (respect pinning)

- Simplify Makefile and CMakeLists.txt submodule handling to single call

- Make submodule init conditional on WEBIF_WIKI

- Remove duplicate GEN output from wiki_gen.c

Changeset 11935-573dab3e

18.01.2026

webif: add BOTTOM navigation link

- css.css: add BOTTOM navigation link and adjust TOP link position

- Both links positioned on the right side (right:10px)

- TOP link: bottom-right in footer

- BOTTOM link: top-right in menu area

- Arrow symbols after text for both links

- menu.html: add BOTTOM link element with class "bottom_link"

- Link anchors to #statusfooter for navigation to page footer

thanks WXbet

Changeset 11936-e1a69473

18.01.2026

webif: fix BOTTOM navigation link

* define bottom_link as a html div container like top_link

thanks WXbet

Changeset 11937-98e5f92f

23.01.2026

webif: fix PCSC devices not shown on scanusb.html

The write_enabled() function generates is_defined.txt which pages_gen

uses to filter templates based on enabled config options. However, it

only wrote config.h defines and missed USE_FLAG based card readers.

CARDREADER_PCSC is controlled via USE_PCSC flag passed at build time,

not a config.h define. Since it was never written to is_defined.txt,

pages_gen filtered out scanusb_pcscbit.html template, causing PCSC

devices to not appear on scanusb.html.

Fixes regression introduced in 5b7ec3c9 (11932).

thanks WXbet

Changeset 11938-5d740155

24.01.2026

webif: add missing wiki link for ACoSC max_ecms_per_minute

thanks WXbet

Changeset 11939-57428976

24.01.2026

dvbapi: remove obsolete dvbapi config options

Remove deprecated [dvbapi] section options that have been obsolete for over 10 years:

- priority

- ignore

- cw_delay

These options were migrated to oscam.dvbapi file long ago.

Remove dvbapi_caidtab_fn() function and related extern declaration

as they are no longer needed.

Users with ancient configs will now see "unknown setting" warnings,

prompting them to migrate to oscam.dvbapi.

(cherry picked from commit e281dfb9)

Co-authored-by: default avatarWXbet <4-WXbet users.noreply.git.streamboard.tv>

thanks WXbet

Changeset 11939-1f8dd311

24.01.2026

pipeline: add check for wiki documentation of config parameters - [ci skip]

- Add new helper 'check-wiki-documentation' in oscam-helper.yml

- Checks if all DEF_OPT_* parameters are documented in wiki

- Maps config files to wiki files:

- oscam-config-global.c -> oscam.conf.md

- oscam-config-account.c -> oscam.user.md

- oscam-config-reader.c -> oscam.server.md

- Colored output matching existing CI style

- Add new job 'wiki-check' in oscam-ci.yml

- Runs in stage 'fixup' after code-cleanup

- Triggers on merge_request_event and schedule

- allow_failure: true (warning only)

thanks WXbet

Changeset 11940-c0b080cd

25.01.2026

reader: add maxparallel feature to limit simultaneous services per reader

This feature allows limiting the number of services that can use a reader

simultaneously, essential for card readers with slot restrictions.

=== NEW CONFIGURATION OPTIONS ===

maxparallel (default: 0 = unlimited)

Maximum number of active services per reader. When reached, the reader

is skipped and other readers are tried (fallover).

paralleltimeout (default: 1000 ms)

Buffer added to the measured ECM interval for slot expiration.

A slot expires when no ECM is received within (measured_interval + timeout).

parallelfactor (default: 1.5)

Multiplier for pending slots to support zapping without blackscreen.

Set to 0 to disable pending slots (strict maxparallel enforcement).

=== ARCHITECTURE ===

Dual-slot system with active and pending services:

- Active slots (size: maxparallel)

Confirmed services actively receiving CWs from this reader.

- Pending slots (size: maxparallel * parallelfactor)

Temporary overflow during channel zapping. Pending services are

promoted to active when slots free up (FIFO), or dropped when

active services need the capacity.

Slot reservation timing:

Slots are reserved when a reader DELIVERS a CW, not when the request

is sent. This prevents readers from blocking capacity for services

they don't end up serving when multiple readers are queried in parallel.

=== BLOCKLIST FOR CLEAN FALLOVER ===

When a pending service is dropped, the client+service combination is

added to a per-reader blocklist. This causes:

- Subsequent ECM requests for blocked combinations to skip this reader

- Clean fallover to other readers without repeated drop cycles

- No log spam from services repeatedly going to pending and getting dropped

Blocklist lifecycle:

- Added: when service is dropped from pending

- Removed: when client zaps to a different service

- Cleared: when an active slot becomes free

=== TYPICAL USE CASE ===

- Reader 1: maxparallel=1 (card allows only 1 service)

- Receiver records Service A on Reader 1, user zaps to Service B

- Service B goes to pending slot (no blackscreen during zap)

- Service A sends ECM -> Service B dropped from pending

- Service B blocklisted on Reader 1 -> falls over to Reader 2

- User stops Service B -> block cleared, Reader 1 available again

thanks WXbet

Changeset 11941-6fb8ad91

30.01.2026

streamrelay: fix fallback host comparison and resource leaks

- Fix fallback host comparison using streq() instead of pointer comparison

- Fix socket leaks in connect_to_stream() on setsockopt/connect failures

- Add safety checks for glistenfd before close operations

- Fix remove_newline_chars() to also handle carriage returns

- NULL key pointers after dvbcsa_bs_key_free() to prevent double-free

- Rework stream_server() using do-while(0) pattern for cleaner error handling

- Some code formatting according to CODING.RULES.txt

thanks WXbet

Changeset 11942-c43582ae

30.01.2026

webif: fix entitlements display for cccam

Separate card sorting functions from cccshare module to allow

cccam clients to view received entitlements in webif even when

MODULE_CCCSHARE is disabled.

This fixes a design issue where MODULE_CCCSHARE controlled both

share functionality (server-side) and entitlements display (client-side),

preventing pure cccam clients from seeing their entitlements.

thanks WXbet