libupnp/upnp
Peng 1a8a8228e4 Avoid malicious client exploit to exhaust the device's memory
Suppose the UPnP device is listening on 192.168.1.102:49152. Use the following to send
garbage bytes to the device:
while true; do echo "\""; done | netcat 192.168.1.102 49152

The device just keeps receiving these bytes and its memory usage keeps growing.
Malicious client may exploit it to exhaust the device's memory.

The attached patch eliminates this possibility.
(cherry picked from commit 9a9c4e829e)
2013-09-02 14:57:37 -03:00
..
doc Include prebuilt documentation (html,pdf), dropping doc++ dependancy. 2006-07-06 12:37:29 +00:00
inc Updated parameter to UpnpAcceptSubscriptionExt to a 'const' declaration, this aligns with UpnpAcceptSubscription 2012-07-11 23:18:23 +02:00
m4 Remove excessive 'dnl's from libupnp.m4. 2010-06-26 11:09:06 +00:00
sample Fix for portability issue with GNU make extension 'sort' 2013-07-30 15:32:13 -03:00
src Avoid malicious client exploit to exhaust the device's memory 2013-09-02 14:57:37 -03:00
test Merge of Mac OS X patch from Stéphane Corthésy (davelopper), 2007-08-06 02:07:41 +00:00
unittest .gitignore for unittest/templates/*.pp.c. 2010-10-21 00:52:09 -02:00
LICENSE Removing unnecessary additional directory level. 2006-07-04 02:44:17 +00:00
Makefile.am reverted the uuid functions export, too complicated to export them properly in the upnp.so file. 2013-04-27 09:30:29 +02:00