github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 13:26:01 +03:00
Code Issues Packages Projects Releases Wiki Activity

Change SecRequestBody(NoFiles)Limit parsing method

Browse Source
This commit is contained in:
Ervin Hegedus 2025-07-14 23:18:42 +02:00
parent cf24aeaead
commit 42b6101bda
No known key found for this signature in database
GPG Key ID: 5FA5BC3F5EC41F61
3 changed files with 1024 additions and 983 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1970
src/parser/seclang-parser.cc
View File

File diff suppressed because it is too large Load Diff

12
src/parser/seclang-parser.yy
View File

@ -1609,12 +1609,20 @@ expression:
| CONFIG_DIR_REQ_BODY_LIMIT
{
driver.m_requestBodyLimit.m_set = true;
driver.m_requestBodyLimit.m_value = atoi($1.c_str());
if (modsecurity::utils::string::parse_unsigned_int($1, &driver.m_requestBodyLimit.m_value) != 1) {
std::stringstream ss;
ss << "Failed to parse SecRequestBodyLimit value as an unsigned integer.";
driver.error(@0, ss.str());
}
}
| CONFIG_DIR_REQ_BODY_NO_FILES_LIMIT
{
driver.m_requestBodyNoFilesLimit.m_set = true;
driver.m_requestBodyNoFilesLimit.m_value = atoi($1.c_str());
if (modsecurity::utils::string::parse_unsigned_int($1, &driver.m_requestBodyNoFilesLimit.m_value) != 1) {
std::stringstream ss;
ss << "Failed to parse SecRequestBodyNoFilesLimit value as an unsigned integer.";
driver.error(@0, ss.str());
}
}
| CONFIG_DIR_REQ_BODY_IN_MEMORY_LIMIT
{

25
src/utils/string.h
View File

@ -25,6 +25,7 @@
#include <sstream>
#include <iomanip>
#include <time.h>
#include <climits>
#ifdef WIN32
#include "src/compat/msvc.h"
@ -276,6 +277,30 @@ inline std::string toupper(std::string str) { // cppcheck-suppress passedByValue
return toCaseHelper(str, ::toupper);
}
inline int parse_unsigned_int(std::string a, unsigned int *res) {
char *endptr = NULL;
errno = 0;
unsigned long val = strtoul(a.c_str(), &endptr, 10);
if (a.c_str() == endptr) {
// no number
return 0;
}
if (*endptr != '\0') {
// broken conversion
return 0;
}
if (errno == ERANGE || val > UINT_MAX) {
// unsigned int overflow
return 0;
}
*res = static_cast<unsigned int>(val);
return 1;
}
} // namespace modsecurity::utils::string