Commit Graph

2698 Commits

Author SHA1 Message Date
Felipe Zimmerle
81708a6cf5 CHANGES: Adds info about: #1787 2018-06-12 16:02:42 -03:00
Felipe Zimmerle
e51297b436 Improvements on top of #1787 2018-06-12 15:43:08 -03:00
Ervin Hegedus
edb5993d5f Fixed LMDB collection errors 2018-06-12 14:47:44 -03:00
Felipe Zimmerle
1527f4e2f2 Updates the test cases described on Makefile.am 2018-06-12 13:50:15 -03:00
Felipe Zimmerle
6a25ebb2b8 CHANGES: Adds info about: #1747 2018-06-12 01:27:42 -03:00
Ervin Hegedus
76887b8b22 Added new tests, aligned to new UNMATCHED_BOUNDARY flag value 2018-06-12 01:09:37 -03:00
Ervin Hegedus
4d0ca94490 Modified the false pos. UNMATCHED_BOUNDARY error flag 2018-06-12 01:09:36 -03:00
Ervin Hegedus
af4afd348c Fixed false positive MULTIPART_UNMATCHED_BOUNDARY errors 2018-06-12 01:09:36 -03:00
Reed Morrison
95048d5fcf Fix ip tree lookup on netmask content 2018-06-07 14:29:27 -03:00
Felipe Zimmerle
202a15bea8 Changes the behavior of the default sec actions
Fix #1629
2018-05-31 14:52:53 -03:00
Felipe Zimmerle
61c956e3f2 CHANGES: Adds info about: #1754 & #1778 2018-05-30 13:54:22 -03:00
Felipe Zimmerle
892beb5360 Refactoring on {global,ip,resources,session,tx,user} collections
Now using the same name schema and interface for these "special"
collection.

Fix: #1754, #1778
2018-05-29 23:48:05 -03:00
Felipe Zimmerle
550e9d3f39 CHANGES: Adds info about: #1786 2018-05-28 19:05:26 -03:00
Felipe Zimmerle
f928e44765 Revert "Fix memory leak in msc_rules_* C APIs"
This reverts commit 58701e7e11.

It was breaking the multi-thread examples.
2018-05-28 18:59:55 -03:00
Wenfeng Liu
b85a645610 Fix race condition in UniqueId::uniqueId() 2018-05-28 18:09:50 -03:00
Victor Hora
b586fa9c1a Cosmetics on README 2018-05-24 15:42:43 -04:00
Victor Hora
19d4f2007c Experimenting with SonarQube/SonarCloud 2018-05-24 15:33:46 -04:00
Felipe Zimmerle
f533ca999e CHANGES: Adds info about: #1765 2018-05-24 13:56:58 -03:00
Wenfeng Liu
58701e7e11 Fix memory leak in msc_rules_* C APIs 2018-05-24 12:51:13 -03:00
Felipe Zimmerle
6db26cee84 CHANGES: Adds info about: #1783 2018-05-24 10:29:27 -03:00
Wenfeng Liu
45e531236a Return false in SharedFiles::open() when an error happens 2018-05-24 10:21:37 -03:00
Felipe Zimmerle
a02bd3a3b9 CHANGES: Adds info about: #1769 2018-05-24 00:18:32 -03:00
Wenfeng Liu
fd9a161e74 Use rvalue reference in ModSecurity::serverLog to avoid string copy 2018-05-22 22:41:20 -03:00
Felipe Zimmerle
ccd7b9f677 travis: Temporarily disables -jN
Building is crashing not sure why. Demands further investigation.
2018-05-22 10:09:18 -03:00
Victor Hora
87e64e3c25 Actually fix setvar parsing of quoted data 2018-05-17 13:43:12 -03:00
Robert Paprocki
e4c822e663 Code cleanup: Initialize variables and others good practice
- initialize invalid_countin UrlDecode :: evaluate
- Free resources before the process die (good practice)
2018-05-13 17:08:07 -03:00
Felipe Zimmerle
a278bb673a Testing travis with parallel build 2018-05-11 13:02:42 -03:00
Scott Leggett
b0b484f45d Build in parallel.
This getconf parameter is supported on both Linux and OSX.
2018-05-11 13:00:50 -03:00
Felipe Zimmerle
137bd88b2c CHANGES: Fix info about: #1771 2018-05-10 15:49:43 -03:00
Charles Peterson
b5528bb8de fix when multiple lines for curl version
Issue #1771
2018-05-10 15:16:00 -03:00
Felipe Zimmerle
42a472adbd Check if response body inspection is enabled before process it 2018-05-08 10:59:30 -03:00
Felipe Zimmerle
389cc25359 CHANGES: Adds info about: #1757 2018-05-03 15:12:00 -03:00
Robert Paprocki
2669add8e0 Fix memory leak in processContentOffset 2018-05-03 15:10:01 -03:00
Robert Paprocki
cc72035034 Remove an unused variable 2018-05-03 15:10:00 -03:00
Felipe Zimmerle
8750ee5d33 CHANGES: Adds info about: #1759 and #1733 2018-05-03 14:44:35 -03:00
Victor Hora
5e40850697 Fix setvar parsing of quoted data 2018-05-03 14:40:48 -03:00
Felipe Zimmerle
e47125c55e CHANGES: Adds info about: #1758 2018-05-03 13:46:02 -03:00
Scott Leggett
98b4e75465 Fix LDFLAGS for unit tests. 2018-05-03 13:44:59 -03:00
Felipe Zimmerle
e48fa2f817 HANGES: Adds info about: #1761 2018-05-03 13:42:52 -03:00
Robert Paprocki
cd1a058c33 Code cosmetics: Clean up MD5 hexdigest
The null terminator is not necessary when using this form of the
std::string constructor, and its use was confusing given the extra
indent.
2018-05-03 13:41:49 -03:00
Felipe Zimmerle
d0b423fdd7 Adds time stamp back to the audit logs
Fix issue #1762
2018-05-03 13:37:01 -03:00
Felipe Zimmerle
6f92c8914a Disables skip counter if debug log is disabled 2018-04-24 14:17:01 -03:00
Felipe Zimmerle
a1b6cceb65 CHANGES: Adds info about: #1737 2018-04-24 12:00:49 -03:00
Robert Paprocki
d0a63aac03 Define m_secmarker_skipped as an integer type
There's no reason to treat this this as a double, since it
represents a human-readable data value that is only meaningful
as an integer. In doing so we write cleaner audit logs and save
a small amount of space.
2018-04-24 11:49:13 -03:00
Victor Hora
bb2ecdf4db Add missing escapeSeqDecode, urlEncode and trimLeft/Right tfns to parser 2018-04-24 09:26:30 -03:00
Felipe Zimmerle
a939d19fad CHANGES: Adds info about: #1738 2018-04-24 09:17:53 -03:00
Felipe Zimmerle
6d5bb42bd8 Normalizes Bison version 2018-04-24 09:15:39 -03:00
Victor Hora
2037a08b34 Fix STATUS var parsing and accept STATUS_LINE var for v2 backward compatibility 2018-04-24 09:06:39 -03:00
Felipe Zimmerle
a806f26be1 CHANGES: Adds info about: #1750 2018-04-23 22:55:51 -03:00
Andrei Belov
268f34bbcc Fix memory leak in modsecurity::utils::expandEnv()
Found by ASAN.
2018-04-23 22:54:13 -03:00