From 53d36ab63a6a04b91453f1a765464b9eadf742ca Mon Sep 17 00:00:00 2001 From: Felipe Zimmerle Date: Mon, 25 Jan 2021 14:16:22 -0300 Subject: [PATCH] Updates libInjection * Updates libInjection repository to libinjection.github.io * Update libInjection to version 3.9.2, plus: - Pass the correct pointer to memmem() In parse_money(), if there is a "$foobar$", it calls memmem() to find it again. Wrong pointer can cause itself to backtrack in a dead loop and hang the entire process. - Addresses some issues reported by cppcheck, including an overflow on parse_slash. --- .gitmodules | 2 +- others/libinjection | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitmodules b/.gitmodules index acee72d1..e4cf1b8d 100644 --- a/.gitmodules +++ b/.gitmodules @@ -3,7 +3,7 @@ url = https://github.com/SpiderLabs/secrules-language-tests [submodule "others/libinjection"] path = others/libinjection - url = https://github.com/client9/libinjection.git + url = https://github.com/libinjection/libinjection.git [submodule "bindings/python"] path = bindings/python url = https://github.com/SpiderLabs/ModSecurity-Python-bindings.git diff --git a/others/libinjection b/others/libinjection index bf234eb2..bfba51f5 160000 --- a/others/libinjection +++ b/others/libinjection @@ -1 +1 @@ -Subproject commit bf234eb2f385b969c4f803b35fda53cffdd93922 +Subproject commit bfba51f5af8f1f6cf5d6c4bf862f1e2474e018e3