miniupnpc: bump to 2.0.20170509 (#4362)
authorKevin Darbyshire-Bryant <kdarbyshirebryant@users.noreply.github.com>
Sat, 20 May 2017 08:16:21 +0000 (09:16 +0100)
committerSteven Barth <steven@midlink.org>
Sat, 20 May 2017 08:16:21 +0000 (10:16 +0200)
Fix CVE-2017-8798

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
net/miniupnpc/Makefile
net/miniupnpc/patches/100-no_minixml_test.patch
net/miniupnpc/patches/200-miniupnpc_desc.patch

index 9ea93636ad1a186d0e69a3cbc7b69552d371db5b..c41766a4891056740809e2ffb91ce5ab10b89ff0 100644 (file)
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=miniupnpc
-PKG_VERSION:=2.0.20161216
+PKG_VERSION:=2.0.20170509
 PKG_RELEASE:=1
 
 PKG_SOURCE_URL:=http://miniupnp.free.fr/files
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
-PKG_HASH:=01e14408d6fc628de9afabc4417b84adeaba4c0ec517e7b8e278cb2993dafd3e
+PKG_HASH:=d3c368627f5cdfb66d3ebd64ca39ba54d6ff14a61966dbecb8dd296b7039f16a
 PKG_MAINTAINER:=Steven Barth <cyrus@openwrt.org>
 
 PKG_INSTALL:=1
index 93f6772c72f84717f98960bc578c5681704360eb..dd8d029ff78916c357efe4da2993b98d632d073e 100644 (file)
@@ -1,6 +1,6 @@
 --- a/Makefile
 +++ b/Makefile
-@@ -151,8 +151,8 @@ installpythonmodule3:      pythonmodule3
+@@ -187,8 +187,8 @@ installpythonmodule3:      pythonmodule3
        python3 setup.py install
  
  validateminixml:      minixmlvalid
index 320707ef27618e839a327ff41929a6663a172297..c9a5abc58c98ef4dbd3c76ac134c3909667dd56a 100644 (file)
@@ -1,6 +1,6 @@
 --- a/upnpcommands.c
 +++ b/upnpcommands.c
-@@ -367,7 +367,7 @@ UPNP_AddPortMapping(const char * control
+@@ -370,7 +370,7 @@ UPNP_AddPortMapping(const char * control
        AddPortMappingArgs[5].elt = "NewEnabled";
        AddPortMappingArgs[5].val = "1";
        AddPortMappingArgs[6].elt = "NewPortMappingDescription";
@@ -8,4 +8,4 @@
 +      AddPortMappingArgs[6].val = desc?desc:"miniupnpc";
        AddPortMappingArgs[7].elt = "NewLeaseDuration";
        AddPortMappingArgs[7].val = leaseDuration?leaseDuration:"0";
-       if(!(buffer = simpleUPnPcommand(-1, controlURL, servicetype,
+       buffer = simpleUPnPcommand(-1, controlURL, servicetype,