mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-09-29 19:24:29 +03:00
Check for X in uppercase into sqlHexDecode
This commit is contained in:
@@ -427,7 +427,7 @@ int sql_hex2bytes_inplace(unsigned char *data, int len) {
|
|||||||
if ((data == NULL)||(len == 0)) return 0;
|
if ((data == NULL)||(len == 0)) return 0;
|
||||||
|
|
||||||
for(i = 0; i <= len - 1; i++) {
|
for(i = 0; i <= len - 1; i++) {
|
||||||
if(data[i] == 0x30 && data[i+1] == 0x78) {
|
if(data[i] == 0x30 && (data[i+1] == 0x78 || data[i+1] == 0x58)) {
|
||||||
found = 1;
|
found = 1;
|
||||||
i++; continue;
|
i++; continue;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user