From: David Yang <redacted>
Date: Mon, 1 Jul 2024 16:58:07 +0000 (+0800)
Subject: miniupnpd: Enable regex filter
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=c51ecd66788bba7c2dd18206a57e4f1224575553;p=openwrt-packages.git

miniupnpd: Enable regex filter

UPnP rules now may have an optional regex filter on requester's
descriptions. This is a countermeasure against some UPnP exploiters
without shutting down UPnP service completely, albeit they can bypass it
by reporting innocent's descriptions maliciously.

Since the filter specifier is optional, existing valid config files will
still work.

This increases the executable's size by 1.3 kB from original 147.7 kB on
i386.

Signed-off-by: David Yang <redacted>
---

diff --git a/net/miniupnpd/Makefile b/net/miniupnpd/Makefile
index 6933125a6..c8900c705 100644
--- a/net/miniupnpd/Makefile
+++ b/net/miniupnpd/Makefile
@@ -79,7 +79,8 @@ CONFIGURE_ARGS = \
 	--leasefile \
 	--portinuse \
 	--firewall=$(BUILD_VARIANT) \
-	--disable-fork
+	--disable-fork \
+	--regex
 
 TARGET_CFLAGS += $(FPIC)
 TARGET_LDFLAGS += -Wl,--gc-sections,--as-needed