miniupnpd: Enable regex filter
authorDavid Yang <redacted>
Mon, 1 Jul 2024 16:58:07 +0000 (00:58 +0800)
committerJosef Schlehofer <redacted>
Wed, 31 Jul 2024 08:26:01 +0000 (10:26 +0200)
UPnP rules now may have an optional regex filter on requester's
descriptions. This is a countermeasure against some UPnP exploiters
without shutting down UPnP service completely, albeit they can bypass it
by reporting innocent's descriptions maliciously.

Since the filter specifier is optional, existing valid config files will
still work.

This increases the executable's size by 1.3 kB from original 147.7 kB on
i386.

Signed-off-by: David Yang <redacted>
net/miniupnpd/Makefile

index 6933125a6f143e5d012bae7d419126d12d7cce4b..c8900c7050a46eab1bc5fc9798a21a7cfa3d130a 100644 (file)
@@ -79,7 +79,8 @@ CONFIGURE_ARGS = \
        --leasefile \
        --portinuse \
        --firewall=$(BUILD_VARIANT) \
-       --disable-fork
+       --disable-fork \
+       --regex
 
 TARGET_CFLAGS += $(FPIC)
 TARGET_LDFLAGS += -Wl,--gc-sections,--as-needed
git clone https://git.99rst.org/PROJECT