git: 9f91c1de288e - 2026Q4 - net/miniupnpd: Update to 2.3.11

From: R. Christian McDonald <rcm_at_FreeBSD.org>
Date: Fri, 16 Oct 2026 17:52:53 UTC
The branch 2026Q4 has been updated by rcm:

URL: https://cgit.FreeBSD.org/ports/commit/?id=9f91c1de288e8090ea383afd5e39cc56aa562761

commit 9f91c1de288e8090ea383afd5e39cc56aa562761
Author:     R. Christian McDonald <rcm@FreeBSD.org>
AuthorDate: 2026-10-16 17:32:33 +0000
Commit:     R. Christian McDonald <rcm@FreeBSD.org>
CommitDate: 2026-10-16 17:51:22 +0000

    net/miniupnpd: Update to 2.3.11
    
    Changelog (highlights):
     - fix heap overflow in PinholeVerification()
     - fix PCP option size parsing
     - re-enable port forwarding properly (broken in 2.3.10)
     - fix buffer read overflow in minixml.c
    http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.11.tar.gz
    
    Port changes:
     - drop the upstream testportinuse build fix, now included in the release;
     - set the address family on the pool address passed to DIOCADDADDR in
       add_nat_rule() and add_redirect_rule2();
     - take maintainership.
    
    Thanks to squat@squat.no for maintaining this port.
    
    PR:             298991
    Reviewed by:    vvd
    Approved by:    squat@squat.no (maintainer)
    Security:       CVE-2026-5720
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
    
    (cherry picked from commit 5bbc7e7074ae9c1e06df5346f18e218d65bb2e03)
---
 net/miniupnpd/Makefile                 |  8 ++------
 net/miniupnpd/distinfo                 |  8 +++-----
 net/miniupnpd/files/patch-pf_obsdrdr.c | 18 ++++++++++++++++++
 3 files changed, 23 insertions(+), 11 deletions(-)

diff --git a/net/miniupnpd/Makefile b/net/miniupnpd/Makefile
index af42887ec0c5..30171028798f 100644
--- a/net/miniupnpd/Makefile
+++ b/net/miniupnpd/Makefile
@@ -1,15 +1,11 @@
 PORTNAME=	miniupnpd
-DISTVERSION=	2.3.9
-PORTREVISION=	1
+DISTVERSION=	2.3.11
 PORTEPOCH=	1
 CATEGORIES=	net
 MASTER_SITES=	http://miniupnp.free.fr/files/ \
 		https://github.com/miniupnp/miniupnp/releases/download/${PORTNAME}_${DISTVERSION:S|.|_|g}/
 
-PATCH_SITES=	https://github.com/miniupnp/miniupnp/commit/
-PATCHFILES=	7949a7acb3b8471681157863387339ea2ca749fb.patch:-p2
-
-MAINTAINER=	squat@squat.no
+MAINTAINER=	rcm@FreeBSD.org
 COMMENT=	Lightweight UPnP IGD & PCP/NAT-PMP daemon which uses pf
 WWW=		http://miniupnp.free.fr/
 
diff --git a/net/miniupnpd/distinfo b/net/miniupnpd/distinfo
index a443f5725e83..e71588f9bb16 100644
--- a/net/miniupnpd/distinfo
+++ b/net/miniupnpd/distinfo
@@ -1,5 +1,3 @@
-TIMESTAMP = 1749288115
-SHA256 (miniupnpd-2.3.9.tar.gz) = 66cb3c3d697ab2bb3a61d3c48628166d6ba328d7c2dbeb95898fdf2a3202af7b
-SIZE (miniupnpd-2.3.9.tar.gz) = 302607
-SHA256 (7949a7acb3b8471681157863387339ea2ca749fb.patch) = 492399388049c5f0b51251074814a6782f8e5cebf2e5ced04561e45270bba53f
-SIZE (7949a7acb3b8471681157863387339ea2ca749fb.patch) = 3181
+TIMESTAMP = 1790789295
+SHA256 (miniupnpd-2.3.11.tar.gz) = 91994b127da735b2c97f19992e34420648c0e8c4ace8a4bcb0596e7685c48678
+SIZE (miniupnpd-2.3.11.tar.gz) = 308180
diff --git a/net/miniupnpd/files/patch-pf_obsdrdr.c b/net/miniupnpd/files/patch-pf_obsdrdr.c
new file mode 100644
index 000000000000..7b03afdef1b4
--- /dev/null
+++ b/net/miniupnpd/files/patch-pf_obsdrdr.c
@@ -0,0 +1,18 @@
+--- pf/obsdrdr.c.orig	2026-09-30 17:32:31 UTC
++++ pf/obsdrdr.c
+@@ -448,6 +448,7 @@ int add_nat_rule(const char * ifname,
+ 		TAILQ_INSERT_TAIL(&pcr.rule.rpool.list, a, entries);
+ 
+ 		memcpy(&pp.addr, a, sizeof(struct pf_pooladdr));
++		pp.af = pcr.rule.af;
+ 		if(ioctl(dev, DIOCADDADDR, &pp) < 0)
+ 		{
+ 			syslog(LOG_ERR, "ioctl(dev, DIOCADDADDR, ...): %m");
+@@ -743,6 +744,7 @@ add_redirect_rule2(const char * ifname,
+ 		TAILQ_INSERT_TAIL(&pcr.rule.rpool.list, a, entries);
+ 
+ 		memcpy(&pp.addr, a, sizeof(struct pf_pooladdr));
++		pp.af = pcr.rule.af;
+ 		if(ioctl(dev, DIOCADDADDR, &pp) < 0)
+ 		{
+ 			syslog(LOG_ERR, "ioctl(dev, DIOCADDADDR, ...): %m");