github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 13:26:01 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3411 from airween/v2/xmlparseempty

Browse Source 
fix: remove unwanted '\0' string terminator from argument's value
This commit is contained in:
Ervin Hegedus 2025-07-04 19:06:35 +02:00 committed by GitHub
commit 981d2251f1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
apache2/msc_xml.c
View File

@ -76,8 +76,8 @@ static void msc_xml_on_end_elementns(
msr_log(msr, 4, "Skipping request argument, over limit (XML): name \"%s\", value \"%s\"",
log_escape_ex(msr->mp, xml_parser_state->currpath, xml_parser_state->currpathbufflen),
log_escape_ex(msr->mp,
(xml_parser_state->currval == NULL ? apr_pstrndup(msr->mp, "", 1) : xml_parser_state->currval),
(xml_parser_state->currvalbufflen == 0 ? 1 : xml_parser_state->currvalbufflen)
(xml_parser_state->currval == NULL ? apr_pstrndup(msr->mp, "", 0) : xml_parser_state->currval),
xml_parser_state->currvalbufflen
)
);
}
@ -91,8 +91,8 @@ static void msc_xml_on_end_elementns(
arg->name = xml_parser_state->currpath;
arg->name_len = xml_parser_state->currpathbufflen;
arg->value = (xml_parser_state->currval == NULL) ? apr_pstrndup(msr->mp, "", 1) : xml_parser_state->currval;
arg->value_len = (xml_parser_state->currvalbufflen == 0) ? 1 : xml_parser_state->currvalbufflen;
arg->value = (xml_parser_state->currval == NULL) ? apr_pstrndup(msr->mp, "", 0) : xml_parser_state->currval;
arg->value_len = xml_parser_state->currvalbufflen;
arg->value_origin_len = arg->value_len;
arg->origin = "XML";