miniupnpd: Enable regex filter

UPnP rules now may have an optional regex filter on requester's
descriptions. This is a countermeasure against some UPnP exploiters
without shutting down UPnP service completely, albeit they can bypass it
by reporting innocent's descriptions maliciously.

Since the filter specifier is optional, existing valid config files will
still work.

This increases the executable's size by 1.3 kB from original 147.7 kB on
i386.

Signed-off-by: David Yang <mmyangfl@gmail.com>
This commit is contained in:
David Yang 2024-07-02 00:58:07 +08:00 committed by Josef Schlehofer
parent 7058ca424a
commit c51ecd6678
1 changed files with 2 additions and 1 deletions

View File

@ -79,7 +79,8 @@ CONFIGURE_ARGS = \
--leasefile \
--portinuse \
--firewall=$(BUILD_VARIANT) \
--disable-fork
--disable-fork \
--regex
TARGET_CFLAGS += $(FPIC)
TARGET_LDFLAGS += -Wl,--gc-sections,--as-needed