Marc Stern
afe4e12828
Update persist_dbm.c
2023-08-18 17:16:18 +02:00
Marc Stern
063fc9f5c8
Update msc_logging.c
2023-08-18 16:54:19 +02:00
Marc Stern
ea1d78c80e
Update msc_json.c
2023-08-18 16:48:25 +02:00
Marc Stern
1a552bcc5d
Update msc_json.c
2023-08-18 16:47:00 +02:00
Marc Stern
ba227fa731
Fix for https://github.com/SpiderLabs/ModSecurity/issues/610
2023-08-16 16:54:55 +02:00
Marc Stern
82c69ccf49
Fix for DEBUG_CONF compile flag
2023-08-16 08:50:09 +02:00
Marc Stern
541707c0aa
removed useless code
2023-08-16 08:28:12 +02:00
Marc Stern
25a60e259a
Fixed 2 memory leaks
2023-08-16 08:25:50 +02:00
Marc Stern
7575eae3f5
Check return code of apr_procattr_io_set()
2023-08-14 16:57:21 +02:00
Marc Stern
0d5a8dec2a
Compatibility with libyajl decoding the buffer inline
2023-08-11 17:41:04 +02:00
Marc Stern
0708339359
Centralized function to get user name, compatible with Linux & Windows (also with mpm-itk & mod_ruid2)
2023-08-11 17:22:24 +02:00
Marc Stern
b3b33c9ff1
Revert "Centralized function compatible with Linux & Windows (also with mpm-itk & mod_ruid2) to get username"
...
This reverts commit c7b28f0e13fa18d8503877e026744f76607cfbae.
2023-08-11 17:19:08 +02:00
Marc Stern
c7b28f0e13
Centralized function compatible with Linux & Windows (also with mpm-itk & mod_ruid2) to get username
2023-08-11 17:17:59 +02:00
Marc Stern
3dc5ff5f65
remove useless memset
2023-08-11 16:44:18 +02:00
Marc Stern
eb532bd791
remove useless apr_pstrdup()
2023-08-11 16:34:04 +02:00
Martin Vierula
2105ed0639
Do not escape special chars in regex pattern with macro
2023-07-27 06:21:45 -07:00
Paolino
5bb58b8e60
Adding PCRE2 support for windows build in Makefile.win
...
Including new parameter PCRE2, which if set will enable PCRE2 in the build.
2023-07-17 17:32:10 +02:00
Martin Vierula
053965529c
Version 2.9.7
2023-01-04 13:15:13 -08:00
Martin Vierula
4324f0ac59
Fix: FILES_TMP_CONTENT may sometimes lack complete content
2023-01-04 11:34:11 -08:00
Martin Vierula
8b3b7a0e23
Add ostensibly unnecessary null check
2023-01-04 06:56:54 -08:00
Martin Vierula
8038a529c0
Copyright line updates
2022-12-21 07:07:14 -08:00
Martin Vierula
1cba2d4758
PCRE2 fix: correct length arg in calls to match functions
2022-12-16 08:37:56 -08:00
Martin Vierula
0981b325a7
Support configurable limit on number of arguments processed
2022-12-14 07:01:23 -08:00
Martin Vierula
ac52086b44
Distinguish PCRE vs. PCRE2 in startup version message
2022-12-12 02:41:16 -08:00
Martin Vierula
583b465fdb
Silence compiler warning about discarded const
2022-12-12 02:26:13 -08:00
Martin Vierula
a17cbc8f5e
Support for JIT option for PCRE2
2022-12-07 07:47:42 -08:00
martinhsv
8f04f44b09
Merge pull request #2046 from arminabf/segfault-with-assigned-user
...
segfault with assigned user id on OpenShift
2022-11-23 14:20:25 -08:00
Martin Vierula
f7fa00aadf
Fix: handle error with SecConnReadStateLimit configuration
2022-11-20 10:39:04 -08:00
Erki Aring
b5130acb45
Move APLOG_USE_MODULE out of modsecurity.h
2022-11-15 17:31:18 +02:00
martinhsv
c2b47ea1bb
Merge pull request #2781 from erkia/fix/add-aplog-use-module
...
Fix logging for Apache 2.4 (again)
2022-11-14 14:26:54 -05:00
Martin Vierula
8fc0b519b7
Support for PCRE2
2022-11-08 08:06:39 -08:00
Martin Vierula
dfba4fd24a
Version 2.9.6
2022-09-07 13:36:13 -07:00
Martin Vierula
7a489bd07c
Multipart parsing fixes and new MULTIPART_PART_HEADERS collection
2022-09-07 11:09:47 -07:00
Martin Vierula
d9df7f529e
Limit rsub null termination to where necessary
2022-09-06 05:29:38 -07:00
Erki Aring
45acae4330
Add APLOG_USE_MODULE to correctly mark log messages
2022-08-04 12:44:29 +03:00
Martin Vierula
dfbdaf8f31
XML parser cleanup: NULL duplicate pointer
2022-06-08 15:36:36 -07:00
martinhsv
fc8e5586e7
Merge pull request #2239 from microsoft/fix_malformed_xml_memory_leak
...
Properly cleanup XML parser contexts upon completion
2022-06-08 17:45:53 -04:00
martinhsv
08c051987c
Merge branch 'v2/master' into memory-leak-fix-2208
2022-06-07 17:09:40 -04:00
Martin Vierula
b5b4e2fdd1
Fix: negative usec on log line when data type long is 32b
2022-06-01 07:19:10 -07:00
Vincent Loup
bc8662b0d5
Fix memory leak in streams
2022-05-30 16:16:39 +02:00
Martin Vierula
4a98032b7f
Allow no-key, single-value JSON body
2022-05-03 12:34:03 -07:00
Martin Vierula
c6582df2e5
Fix memory leak that occurs on JSON parsing error
2021-12-29 06:46:25 -08:00
Martin Vierula
065dbe7e76
Multipart names may include single quote if double-quote enclosed
2021-12-22 10:37:03 -08:00
Martin Vierula
860299971d
Version 2.9.5
2021-11-22 11:22:12 -08:00
Martin Vierula
41918335fa
Support configurable limit on depth of JSON parsing
2021-11-18 17:35:40 -08:00
Felipe Zimmerle
b32cc1680c
Version 2.9.4
...
Increasing version to 2.9.4
2021-06-21 09:36:18 -03:00
Rainer Jung
f80114a906
Add microsec timestamp resolution to the formatted log timestamp.
2021-01-15 15:11:14 -03:00
John Lightsey
039b35029c
Fix other usage of the global pool for request temporaries in re_operators.c
2021-01-14 14:23:39 -03:00
John Lightsey
e419b50fe7
Store temporaries in the request pool for regexes compiled per-request.
...
The code for testing regexes with embedded Apache variables
(rule->re_precomp == 1) during request processing was utilizing the global
engine pool for the storage of temporary values. This approach is not
threadsafe, retains the temporary variables longer than they are usable,
and causes corruption of the global pool's "cleanups" linked-lists when
Apache is configured with a threaded MPM.
2021-01-14 14:23:39 -03:00
Vladimir Krivopalov
6a5ec1ff7b
Properly cleanup XML parser contexts upon completion
...
It is currently possible that the XML parsing context is not properly
cleaned up if a parsed XML document is malformed.
This fix makes sure that the context is taken care of.
Signed-off-by: Vladimir Krivopalov <vlkrivop@microsoft.com>
2020-01-14 11:15:33 -08:00
