github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2026-01-13 06:57:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

Expand macros in setenv (value only for 2.1.x). See #458.

Browse Source
This commit is contained in:
brectanus
2008-02-04 18:30:54 +00:00
parent 55ede5c03e
commit 078a086d65
1 changed files with 26 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
apache2/re_actions.c
View File

@@ -850,9 +850,34 @@ static apr_status_t msre_action_setenv_execute(modsec_rec *msr, apr_pool_t *mptm
if (env_name[0] == '!') { if (env_name[0] == '!') {
/* Delete */ /* Delete */
apr_table_unset(msr->r->subprocess_env, env_name + 1); apr_table_unset(msr->r->subprocess_env, env_name + 1);
if (msr->txcfg->debuglog_level >= 9) {
msr_log(msr, 9, "Unset env variable \"%s\".", env_name);
}
} else { } else {
/* Set */ /* Set */
apr_table_set(msr->r->subprocess_env, env_name, env_value); char * val_value = NULL;
msc_string *val = apr_palloc(msr->mp, sizeof(msc_string));
if (val == NULL) {
msr_log(msr, 1, "Failed to allocate space to expand value macros");
return -1;
}
/* Expand values in value */
val->value = env_value;
val->value_len = strlen(val->value);
expand_macros(msr, val, rule, mptmp);
/* To be safe, we escape the value as it goes in subprocess_env. */
val_value = log_escape_ex(msr->mp, val->value, val->value_len);
apr_table_set(msr->r->subprocess_env, env_name, val_value);
if (msr->txcfg->debuglog_level >= 9) {
msr_log(msr, 9, "Set env variable \"%s\" to \"%s\".",
env_name,
log_escape(mptmp, val_value));
}
} }
return 1; return 1;