brectanus
e47fdeb420
Changed %p formatter to APRs %pp (wish that was documented).
...
Marked msr_log() as a printf style function so GNU compiler can check formatting types.
Fixed a few other warnings with msr_log() formatters.
2007-11-26 22:53:51 +00:00
brectanus
aff6900539
Initial full pass through code to fix issues with 64-bit/mismatch sign/mismatch size printf style formatters.
...
Still need to look more into how we are handling time and convert to apr_time_t (or time_t) where appropriate.
Still need to look into our use of 'long' as windows is LLP64 where 'long' is still 32-bit.
2007-11-15 19:09:14 +00:00
ivanr
cd2287a412
Fix for an evasion false positive.
2007-11-08 18:12:51 +00:00
ivanr
b0d514478f
Fix blocking multipart FP, which affected Safari.
2007-10-15 18:05:12 +00:00
ivanr
d5f3b9ce52
Fix multipart parser blocking FP with Safari (
...
(#317 ).
2007-10-15 17:27:51 +00:00
brectanus
63a47c370e
Prefer %d string formatter to %i so we do not get warnings on some platforms.
2007-09-27 21:34:29 +00:00
ivanr
79ee3a6a79
Process debug log statements only if the debug log level is sufficiently high.
2007-09-21 19:46:53 +00:00
brectanus
8549546b5e
Add a cast to unsigned char * to avoid warning.
2007-09-11 17:59:14 +00:00
ivanr
fa2b97ddb4
Tidy code. Small bug fixes.
2007-09-07 16:01:28 +00:00
ivanr
0769f2378c
More multipart improvements. Added MULTIPART_MISSING_SEMICOLON.
2007-09-07 13:16:40 +00:00
ivanr
9301461b33
Allow multipart C-T header to be up to 1024 bytes long. Some code cleanup (really ;).
2007-08-20 16:09:48 +00:00
ivanr
608f7f2b44
Fix LF line detection, add MULTIPART_CRLF_LINE, MULTIPART_CRLF_LF_LINES.
2007-08-20 15:25:05 +00:00
ivanr
239fa00957
Fix silly errors, typos.
2007-08-17 16:01:24 +00:00
ivanr
baf6f59dff
Multipart parsing improvements.
2007-08-17 15:47:33 +00:00
ivanr
28d44486e3
Fixed data corruption in the multipart parser.
2007-08-10 15:59:54 +00:00
ivanr
222f1f6f78
Cleanup. MULTIPART_STRICT_ERROR now returns 1 on parsing error too.
2007-08-10 15:04:42 +00:00
ivanr
323f9f81a0
Better discovery of partial quoting evasion.
2007-08-10 14:51:55 +00:00
ivanr
b1949b7ebc
Another check for evasion through partial quoting of multipart boundary.
2007-08-10 14:40:22 +00:00
ivanr
d0ac05c3ea
Add check for evasion using double quote inside multipart boundary.
2007-08-10 14:37:04 +00:00
ivanr
5898e9e116
Fixed a potential segmentation fault, introduced with recent changes.
2007-08-10 14:24:13 +00:00
ivanr
716d0fd419
Added a check for nul bytes in multipart part headers.
2007-08-10 10:17:36 +00:00
ivanr
c85773b343
Added MULTIPART_UNMATCHED_BOUNDARY. Not very reliable, as it detects anything that looks like a boundary, which means any line that begins with -- but we don't think it's a boundary.
2007-08-10 09:59:57 +00:00
ivanr
70324713e4
Added checks to detect quoted boundary evasion (although we are not susceptable any more) and to detect duplicate final bounary.
2007-08-10 08:36:24 +00:00
ivanr
765dfd0274
Fixed typo.
2007-08-09 15:30:47 +00:00
ivanr
c520886e10
Detect and prevent multipart evasion.
2007-08-09 10:50:53 +00:00
ivanr
892938dee4
Enhanced multipart parsing to support quotted boundaries and LF line terminators (RFC demands CRLF but some applications use only LF).
2007-08-06 14:55:18 +00:00
brectanus
81d0f84ad3
Update copyright text to Breach Security, Inc.
...
Merge in changes from branches/2.1.x
2007-06-14 16:05:45 +00:00
brectanus
f4fb4ed4f6
Updates to quiet some compiler warnings.
2007-03-01 11:49:56 +00:00
ivanr
3f80fdac3b
Import ModSecurity 2.1.0-rc7
2007-02-06 12:29:22 +00:00
