Portable UPnP SDK Files

Security fix

• GHSA-mhhw-gm73-c57g: Fix a heap over-read when parsing the Callback header of an incoming GENA SUBSCRIBE request. is_mark() and is_reserved() used strchr(), which also matches the terminating NUL, so URI parsing did not stop at the end of the string, and create_url_list() passed parse_uri() a length two bytes too long. A Callback URL without the closing > read one byte past its buffer (CWE-125). Only devices are affected. Found and fixed by @las7 in [#641]. The advisory will be published shortly.

What's Changed

• fix: don't treat the NUL terminator as a URI character; correct create_url_list bounds by @las7 in https://github.com/pupnp/pupnp/pull/641

New Contributors

• @las7 made their first contribution in https://github.com/pupnp/pupnp/pull/641

Full Changelog: https://github.com/pupnp/pupnp/compare/release-22.1.5...release-22.1.6