intel / dleyna-server

dleyna-server is a library for implementing services that allow clients to discover, browse and manipulate Digital Media Servers. An implementation of such a service for linux is also included.
https://01.org/dleyna/
GNU Lesser General Public License v2.1
28 stars 28 forks source link

Possible "DoS" on UPnP servers not supporting child count #152

Open phako opened 8 years ago

phako commented 8 years ago

If you use ListChildren with a "*" filter on an UPnP server that does not have its child count, it will do a recursive browse to retrieve this for you. This can potentially kill the remote server.

While "*" kind-of includes child-count, A normal user would not expect the framework to do a recursive browse with that.