Felipe Zimmerle
e6106ae0eb
Fix regression tests for fuzzyHash
2017-10-27 14:47:04 -03:00
Felipe Zimmerle
9c83b39ea0
travis: Adds ssdeep option to our regression soup
2017-10-26 17:44:23 -03:00
Felipe Zimmerle
7622866f97
Adds support for @fuzzyHash
...
Issue #997
2017-10-26 17:44:17 -03:00
Felipe Zimmerle
4ecfed3163
Adds CHANGES info about #1598
2017-10-25 16:47:36 -03:00
Athmane Madjoudj
968d83f1ff
Fix build on non x86 arch build failed on ppc64/ppc64le/arch64/armv7hl/s390x due to how this arch represent chars
2017-10-25 16:44:27 -03:00
Felipe Zimmerle
371fc03218
Fix memory issue while changing rule target dynamic
...
Issue #1590
2017-10-24 00:03:13 -03:00
Felipe Zimmerle
351beb0567
Adds missing info to the CHANGES file
2017-10-20 21:49:00 -03:00
Felipe Zimmerle
c4fcb36f4c
Fix log while displaying the name of a dict selection by regex
2017-10-20 21:46:24 -03:00
Felipe Zimmerle
93e18ca5ea
Support pipes inside quoted variable selection
...
As of #1591 the pipe support was disable in the general selection which
was also affecting the quoted selection. This pactch adds the support
for pipes inside the quoted selection only.
2017-10-20 11:02:42 -03:00
Felipe Zimmerle
34e8b140e5
Setting http response code on the auditlog
2017-10-19 23:27:30 -03:00
Felipe Zimmerle
274f9e5aa1
Refactoring on RuleMessage class, now accepting http code as parameter
2017-10-19 23:00:47 -03:00
Felipe Zimmerle
39fb75c34d
Having disruptive msgs as disruptive [instead of warnings] on audit log
...
Issue #1592
2017-10-17 14:58:04 -03:00
Felipe Zimmerle
30797a458b
Parser: Pipes are no longer welcomed inside regex dict element selection.
...
Issue #1591
2017-10-17 11:46:44 -03:00
Felipe Zimmerle
1518c43d61
Adds test case for issue #1565
2017-10-11 23:19:20 -03:00
Felipe Zimmerle
1ad95254cd
Avoids unicode initialization on every rules block
...
ModSecurity-nginx/#67
ModSecurity/#1563
2017-10-11 12:40:48 -03:00
Felipe Zimmerle
20edf9ab77
Removes xml initialization from CURL if/def
2017-10-10 18:14:41 -03:00
Felipe Zimmerle
41bf7f716b
Calls xml init and xml cleanup to avoid memory leak
...
Fix #1553
2017-10-10 15:03:50 -03:00
Felipe Zimmerle
30364628a0
Makes clear to the user when audit log is empty due to missing JSON sup.
2017-10-10 10:25:53 -03:00
Felipe Zimmerle
d3f979f1d2
Makes auditlog more verbose on debug logs
2017-10-10 09:30:21 -03:00
Felipe Zimmerle
e09304a08a
CHANGES: Adds info about #1583
2017-10-09 09:08:31 -03:00
Victor Hora
d285bc02b8
Add missing statements
2017-10-09 09:02:32 -03:00
Victor Hora
63bef3d142
Support to JSON stuff on serial logging
2017-10-09 09:02:31 -03:00
Felipe Zimmerle
2988c5bb07
CHANGES: add info about #1536
2017-10-06 20:35:09 +00:00
Felipe Zimmerle
fa7973a4ef
Removes a regex optimization added at #1536
2017-10-06 20:32:40 +00:00
asterite
9e9db08b87
add @rx macro expansion test to list in Makefile
2017-10-06 20:30:09 +00:00
asterite
10c4f9b1b2
add a test for macro expansion in @rx
2017-10-06 20:30:04 +00:00
asterite
a76030256e
support macro expansion in @rx
...
try to use macro expansion on @rx argument before matching.
If after expansion argument changed, make new Regex from
the macro-expanded argument and use that for matching.
Fixes #1528
2017-10-06 20:30:00 +00:00
Felipe Zimmerle
210e72aa21
Consideres under quote variable while loading the rules
2017-10-06 20:25:20 +00:00
Felipe Zimmerle
658c9b5dae
Adds CHANGES info for #1571
2017-09-29 17:18:36 +00:00
Dávid Major
a5266d6d1c
Store the connection and url parameters in std::string
2017-09-29 17:18:30 +00:00
Felipe Zimmerle
ba4e2e3737
Adds CHANGES info for #1572
2017-09-29 17:18:06 +00:00
Dávid Major
495b47d8a2
Eliminate some reorder and sign warnings
2017-09-29 17:16:09 +00:00
Felipe Zimmerle
4909713991
Adds CHANGES info for #1562
2017-09-27 12:41:40 +00:00
David Buckle
082a0d3aca
Adds ios::[open|app] to the parallel.cc to fix write over SELinux
2017-09-27 12:39:56 +00:00
Felipe Zimmerle
48be601ca7
Very first version of our changes file
2017-09-26 16:33:48 +00:00
Felipe Zimmerle
1c91e80777
Extends acmp_prepare to pm_from_file
2017-09-26 16:33:35 +00:00
Felipe Zimmerle
7d786b3350
Makes pm mutex optional via configuration flag
2017-09-26 16:33:31 +00:00
Felipe Zimmerle
119a6fc074
test-only: Placing a mutex while evaluating the pm operator
...
Performing an earlier optimization of the tree (before threads creation)
2017-09-26 16:33:26 +00:00
Felipe Zimmerle
a2427df27f
fix: ignore .git directory while generating the release file
2017-08-27 23:51:20 -03:00
Felipe Zimmerle
04f7009980
Adds a simple release script
2017-08-27 22:06:20 -03:00
Felipe Zimmerle
cca3642530
Changes release tag to -rc1
2017-08-27 22:06:20 -03:00
Felipe Zimmerle
224f6ef260
Fix configuration schema on the configure summary
2017-08-27 22:06:20 -03:00
Felipe Zimmerle
7ac6bf7241
Fix memory issues while resolving variables
2017-08-27 22:06:20 -03:00
Felipe Zimmerle
003a8e8e5f
Uses shared_ptr on variable names
2017-08-27 22:06:20 -03:00
Victor Hora
9d062f53a7
Merge pull request #1543 from defanator/remove-SecRequestBodyInMemoryLimit-from-conf
...
Remove SecRequestBodyInMemoryLimit from configuration template
2017-08-24 13:52:21 -04:00
Mirko Dziadzka
5c737c2c06
Treat _NAMES variables as collections ( #5 )
...
* Treat _NAMES variables as collections
* Fix an issue with the offset of ARGS_NAMES.
* Fix regression tests for the new behaviour.
* Add generated seclang files.
2017-08-24 00:39:21 -03:00
Felipe Zimmerle
9069a453e5
Revert "Treating ARGS_NAMES as an array instead of scalar"
...
This reverts commit 1d3c4c670db1bb475c83cd2f24455bb5bd6ee6a4.
2017-08-24 00:10:42 -03:00
Mirko Dziadzka
43e3ff91e8
Fixes a bug with an unitialized variable.
...
new_debug_log was unitialized during an error code path.
Fixed this by explicit initializing it to NULL and fixing the order of
the error labels. They now present the correct (reverse) order of the
goto statements.
2017-08-23 23:53:46 -03:00
michaelgranzow-avi
3a048ee2db
Support --enable-debug-logs=no option of configure script ( #2 )
...
* Support --enable-debug-logs=no option of configure script
* Undo unintended white space changes
* Undo more unintended white space changes
* Address review comments - thanks Mirko
* Address more review comments - thanks Mirko
2017-08-23 23:50:16 -03:00
Andrei Belov
f6af42c235
Remove SecRequestBodyInMemoryLimit from configuration template
...
It is no longer supported since 81879cd, so it would be better
to remove any mentions from configuration as well to avoid possible
confusions.
2017-08-23 11:42:23 +03:00
