From c51ecd66788bba7c2dd18206a57e4f1224575553 Mon Sep 17 00:00:00 2001 From: David Yang Date: Tue, 2 Jul 2024 00:58:07 +0800 Subject: [PATCH] miniupnpd: Enable regex filter UPnP rules now may have an optional regex filter on requester's descriptions. This is a countermeasure against some UPnP exploiters without shutting down UPnP service completely, albeit they can bypass it by reporting innocent's descriptions maliciously. Since the filter specifier is optional, existing valid config files will still work. This increases the executable's size by 1.3 kB from original 147.7 kB on i386. Signed-off-by: David Yang --- net/miniupnpd/Makefile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net/miniupnpd/Makefile b/net/miniupnpd/Makefile index 6933125a6f..c8900c7050 100644 --- a/net/miniupnpd/Makefile +++ b/net/miniupnpd/Makefile @@ -79,7 +79,8 @@ CONFIGURE_ARGS = \ --leasefile \ --portinuse \ --firewall=$(BUILD_VARIANT) \ - --disable-fork + --disable-fork \ + --regex TARGET_CFLAGS += $(FPIC) TARGET_LDFLAGS += -Wl,--gc-sections,--as-needed -- 2.30.2