Marc Stern
|
cd65a44d64
|
Removed useless code
|
2024-07-22 16:53:58 +02:00 |
|
Ervin Hegedus
|
28b6e1d7d0
|
Merge pull request #3171 from marcstern/v2/ci_errorlog
Show error.log after httpd start in CI
|
2024-06-12 15:08:47 +02:00 |
|
Marc Stern
|
bcd50bec84
|
Show error.log after httpd start
|
2024-06-12 14:51:51 +02:00 |
|
Marc Stern
|
b89c447782
|
Merge pull request #3149 from fzipi/fix-tmpnam
fix: remove usage of insecure tmpnam
|
2024-05-31 10:07:47 +02:00 |
|
Ervin Hegedus
|
3f4c02fdb3
|
Merge pull request #3154 from marcstern/v2/pcre
Use PCRE_STUDY_EXTRA_NEEDED flag
|
2024-05-31 00:14:07 +02:00 |
|
Ervin Hegedus
|
e7a6420fca
|
Merge pull request #3159 from fzipi/add-pull-request-template
chore: add pull request template
|
2024-05-30 14:49:16 +02:00 |
|
Felipe Zipitria
|
bf6bf64cf3
|
chore: add PR template
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
|
2024-05-30 09:45:02 -03:00 |
|
Felipe Zipitria
|
93aa06bc1f
|
feat: consolidate into acquire_global_lock and export prototype
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
|
2024-05-30 09:32:50 -03:00 |
|
Felipe Zipitria
|
54f531efd7
|
fix: add error logging
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
|
2024-05-29 15:18:54 -03:00 |
|
Felipe Zipitria
|
e9d0150102
|
refactor: add acquire mutex function
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
|
2024-05-29 15:18:54 -03:00 |
|
Felipe Zipitria
|
d4d71b4f28
|
fix: remove unsafe tmpnam usage
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
|
2024-05-29 15:18:54 -03:00 |
|
Ervin Hegedus
|
6e82895afc
|
Merge pull request #3158 from fzipi/add-gitignore
chore: add gitignore file
|
2024-05-29 20:15:22 +02:00 |
|
Felipe Zipitria
|
7f40b4071b
|
chore: add gitignore file
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
|
2024-05-29 14:26:27 -03:00 |
|
Marc Stern
|
bc682d5b4a
|
Revert pcre_study() creating the extra data, as it's done afterwards anyway.
|
2024-05-29 11:38:10 +02:00 |
|
Ervin Hegedus
|
8a3b62021e
|
Merge pull request #3153 from marcstern/v2/LARGE_STREAM_INPUT_nullend
Missing null byte + optimization
|
2024-05-28 22:33:26 +02:00 |
|
Ervin Hegedus
|
719744efdd
|
Merge pull request #3155 from marcstern/v2/tx_cleanup_null
Possible double free
|
2024-05-28 22:05:23 +02:00 |
|
Marc Stern
|
f08897003b
|
msr->msc_full_request_buffer is freed but not assigned to NULL. It could be freed again later
|
2024-05-28 16:25:26 +02:00 |
|
Marc Stern
|
84ad094ff6
|
Use PCRE_STUDY_EXTRA_NEEDED flag
|
2024-05-28 16:19:29 +02:00 |
|
Marc Stern
|
4a992b5a16
|
Replace a memset to 0 by a single assignment and fixing the 0 byte missing at the end when MSC_LARGE_STREAM_INPUT is not defined
|
2024-05-28 15:41:38 +02:00 |
|
Marc Stern
|
e803cdd802
|
Merge branch 'v2/master' of https://github.com/marcstern/ModSecurity into v2/master
|
2024-05-24 10:13:00 +02:00 |
|
Ervin Hegedus
|
30c909c9d2
|
Merge pull request #3148 from fzipi/update-copyright
docs: update copyright
|
2024-05-23 14:49:24 +02:00 |
|
Felipe Zipitria
|
98dba00231
|
docs: update README
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
|
2024-05-23 09:44:22 -03:00 |
|
Ervin Hegedus
|
2b3d092a29
|
Merge pull request #3139 from marcstern/v2/mst/SecArgumentsLimit_log
Enhanced logging [Issue #3107]
|
2024-05-16 21:02:19 +02:00 |
|
Marc Stern
|
c7c7881c22
|
space
|
2024-05-16 16:56:46 +02:00 |
|
Marc Stern
|
d45c4baa83
|
spaces
|
2024-05-16 16:55:31 +02:00 |
|
Marc Stern
|
ca7b4b49bf
|
Merge branch 'v2/master' of https://github.com/marcstern/ModSecurity into v2/master
|
2024-05-16 16:51:48 +02:00 |
|
Marc Stern
|
746f57f963
|
Changed indentation
|
2024-05-16 15:52:31 +02:00 |
|
Marc Stern
|
a61820fe2c
|
Enhanced logging [Issue #3107]
|
2024-05-10 17:26:23 +02:00 |
|
Ervin Hegedus
|
d9016e21f2
|
Merge pull request #3120 from marcstern/v2/mst/nullcheck2
Check for null pointer dereference (almost) everywhere
|
2024-05-06 22:21:36 +02:00 |
|
Marc Stern
|
dd400f7fa3
|
Added --enable-assertions in CI
Removed useless line
|
2024-04-26 17:22:16 +02:00 |
|
Marc Stern
|
4961f46a6f
|
(re)fixed const type
|
2024-04-16 18:09:00 +02:00 |
|
Marc Stern
|
243ac0563a
|
Merge branch 'v2/mst/nullcheck2' of https://github.com/marcstern/ModSecurity into v2/mst/nullcheck2
|
2024-04-16 18:02:16 +02:00 |
|
Marc Stern
|
d35018ef3f
|
another null check
|
2024-04-16 18:02:06 +02:00 |
|
Marc Stern
|
62302c2474
|
Update apache2/apache2_io.c
Co-authored-by: Felipe Zipitría <3012076+fzipi@users.noreply.github.com>
|
2024-04-16 17:59:43 +02:00 |
|
Marc Stern
|
5122f89005
|
defined id_log() only once
|
2024-04-16 13:28:37 +02:00 |
|
Marc Stern
|
556835c6fe
|
Fixed corrupted character
|
2024-04-12 18:04:16 +02:00 |
|
Marc Stern
|
38d4b5c898
|
typo
|
2024-04-12 16:28:45 +02:00 |
|
Marc Stern
|
931c081ba6
|
Enforcing -DNDEBUG (default normally)
|
2024-04-11 13:42:37 +02:00 |
|
Marc Stern
|
bd435277a9
|
Added --enable-assertions configure flag
|
2024-04-10 17:10:03 +02:00 |
|
Marc Stern
|
a01b9b527e
|
minor fixes
|
2024-04-10 14:04:34 +02:00 |
|
Marc Stern
|
5f938536a0
|
fixed a NULL check
|
2024-04-08 11:01:29 +02:00 |
|
Marc Stern
|
c8e1904da8
|
Missing function
|
2024-04-05 18:21:02 +02:00 |
|
Marc Stern
|
1014e479b7
|
Added missing prototype
|
2024-04-05 18:17:25 +02:00 |
|
Marc Stern
|
649aea7288
|
Merge branch 'v2/master' into v2/mst/nullcheck2
|
2024-04-04 16:08:59 +02:00 |
|
Marc Stern
|
518b8ba6ab
|
more null pointer checks
|
2024-04-04 16:01:51 +02:00 |
|
Marc Stern
|
538ffa6baa
|
Added some null pointer checks.
Added a design doc.
|
2024-04-04 15:45:55 +02:00 |
|
Ervin Hegedus
|
788c36d343
|
Merge pull request #3099 from twouters/bugfix/3082
Fix possible segfault in collection_unpack
|
2024-03-03 19:10:19 +01:00 |
|
Marc Stern
|
31bf935f74
|
Update CHANGES
|
2024-03-03 16:20:07 +01:00 |
|
Thomas Wouters
|
4f33f5b656
|
Fix possible segfault in collection_unpack
When var->value_len somehow becomes 0, we risk wrapping around to 4294967295 due
to it being an unsigned int.
Fixes #3082
|
2024-03-01 12:12:19 +01:00 |
|
Marc Stern
|
fa48de055e
|
Merge pull request #3094 from airween/v2/buildmacros
fix: Replace obsolote macros
|
2024-02-26 16:14:43 +01:00 |
|