buildroot/package/libupnp, branch 2017.02

libupnp: bump to version 1.6.21

2016-12-22T09:33:23+00:00

Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard

libupnp: add upstream security fix for CVE-2016-8863

2016-12-19T21:28:46+00:00

Fix out-of-bound access in create_url_list() If there is an invalid URL in URLS->buf after a valid one, uri_parse is called with out pointing after the allocated memory. As uri_parse writes to *out before returning an error the loop in create_url_list must be stopped early to prevent an out-of-bound access. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

libupnp: add upstream security fix for CVE-2016-6255

2016-12-19T21:28:40+00:00

If there's no registered handler for a POST request, the default behaviour is to write it to the filesystem. Several million deployed devices appear to have this behaviour, making it possible to (at least) store arbitrary data on them. Add a configure option that enables this behaviour, and change the default to just drop POSTs that aren't directly handled. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

libupnp: bump to version 1.6.20

2016-07-08T08:58:17+00:00

Signed-off-by: Fabrice Fontaine Signed-off-by: Thomas Petazzoni

packages: remove (non-)lfs dependencies and tweaks

2015-04-01T20:47:22+00:00

Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package: add hashes for SourceForge-hosted packages

2014-12-28T21:21:16+00:00

Since SourceForge sometimes serves us faulty tarballs, we can tons of autobuild failures: http://autobuild.buildroot.org/results/9fb/9fba5bf086a4e7a29e5f7156ec43847db7aacfc4/ http://autobuild.buildroot.org/results/6c8/6c837b244c45ac3b3a887734a371cd6d226cf216/ ... Fix that by adding hash files for all SourceForge-hosted packages (thos etht did not already have it). We normally prefer to use hashes published by upstream, but hunting them all one by one is a tedious task, so those hashes were all locally computed with a script that searched for SF-hosted packages, downloades the associated tarball, computed the hash, and stored it in the corresponding .hash file. Also, SF publishes sha1 hashes, while I used the stronger sha256, since sha1 is now considered to be relatively weak. Signed-off-by: "Yann E. MORIN" Cc: Peter Korsgaard Cc: Thomas Petazzoni Cc: Maxime Hadjinlian Cc: Richard Braun Cc: Nathaniel Roach Signed-off-by: Thomas Petazzoni

libupnp : bump version to 1.6.19

2014-02-04T10:11:17+00:00

Signed-off-by: Sagaert Johan Signed-off-by: Peter Korsgaard

Config.in files: unify comments of toolchain option dependencies

2013-10-14T20:45:57+00:00

This patch lines up the comments in Config.in files that clarify which toolchain options the package depends on. Signed-off-by: Thomas De Schampheleire Signed-off-by: Peter Korsgaard

libupnp: define license

2013-07-10T20:09:12+00:00

Signed-off-by: Gilles Talis Signed-off-by: Peter Korsgaard

Normalize separator size to 80

2013-06-06T20:30:24+00:00

Signed-off-by: Alexandre Belloni Signed-off-by: Peter Korsgaard