opkg: protect against NULL src