github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2026-01-13 06:57:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

Use use new msr->rule_was_intercepted flag. See #425.

Browse Source
This commit is contained in:
brectanus
2007-12-17 19:58:35 +00:00
parent d6f492064a
commit 2f447fcd72
2 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
apache2/modsecurity.h
View File

@@ -285,6 +285,7 @@ struct modsec_rec {
apr_md5_ctx_t new_auditlog_md5ctx; apr_md5_ctx_t new_auditlog_md5ctx;
unsigned int was_intercepted; unsigned int was_intercepted;
unsigned int rule_was_intercepted;
unsigned int intercept_phase; unsigned int intercept_phase;
msre_actionset *intercept_actionset; msre_actionset *intercept_actionset;
const char *intercept_message; const char *intercept_message;

12
apache2/re.c
View File

@@ -664,6 +664,9 @@ apr_status_t msre_ruleset_process_phase(msre_ruleset *ruleset, modsec_rec *msr)
for (i = 0; i < arr->nelts; i++) { for (i = 0; i < arr->nelts; i++) {
msre_rule *rule = rules[i]; msre_rule *rule = rules[i];
/* Reset the rule interception flag */
msr->rule_was_intercepted = 0;
/* NEXT_CHAIN is used when one of the rules in a chain /* NEXT_CHAIN is used when one of the rules in a chain
* fails to match and then we need to skip the remaining * fails to match and then we need to skip the remaining
* rules in that chain in order to get to the next * rules in that chain in order to get to the next
@@ -731,8 +734,8 @@ apr_status_t msre_ruleset_process_phase(msre_ruleset *ruleset, modsec_rec *msr)
} }
else else
if (rc == RULE_MATCH) { if (rc == RULE_MATCH) {
if ((msr->phase == msr->intercept_phase) && msr->was_intercepted) { if (msr->rule_was_intercepted) {
/* If the transaction was intercepted we will /* If the transaction was intercepted by this rule we will
* go back. Do note that we are relying on the * go back. Do note that we are relying on the
* rule to know if it is a part of a chain and * rule to know if it is a part of a chain and
* not intercept if it is. * not intercept if it is.
@@ -1153,6 +1156,7 @@ static void msre_perform_disruptive_actions(modsec_rec *msr, msre_rule *rule,
* transaction, and rememer the rule that caused it. * transaction, and rememer the rule that caused it.
*/ */
msr->was_intercepted = 1; msr->was_intercepted = 1;
msr->rule_was_intercepted = 1;
msr->intercept_phase = msr->phase; msr->intercept_phase = msr->phase;
msr->intercept_actionset = actionset; msr->intercept_actionset = actionset;
msr->intercept_message = message; msr->intercept_message = message;
@@ -1389,7 +1393,7 @@ apr_status_t msre_rule_process(msre_rule *rule, modsec_rec *msr) {
* was intercepted - no need to process the remaining * was intercepted - no need to process the remaining
* targets. * targets.
*/ */
if (msr->was_intercepted) { if (msr->rule_was_intercepted) {
return RULE_MATCH; return RULE_MATCH;
} }
} }
@@ -1437,7 +1441,7 @@ apr_status_t msre_rule_process(msre_rule *rule, modsec_rec *msr) {
* was intercepted - no need to process the remaining * was intercepted - no need to process the remaining
* targets. * targets.
*/ */
if (msr->was_intercepted) { if (msr->rule_was_intercepted) {
return RULE_MATCH; return RULE_MATCH;
} }
} }