Jeff Trawick 1ed95ad932 Fix invalid storage reference by apr_psprintf() when creating a string from salt[]. salt[] is not '\0'-terminated, so apr_psprintf() needs to be told the extent of the bytes to read. ...

It is easy to test old/new code standalone with valgrind;
jst insert the getkey() function into this template:

-----------getkey() goes here-----------------

int main(void)
{
    apr_pool_t *p;

    apr_initialize();
    apr_pool_create(&p, NULL);

    printf("%s\n", getkey(p));
    return 0;
}

2015-03-26 08:55:54 -07:00

..

libinjection

Updates the libinjection

2014-03-31 16:22:11 -07:00

acmp.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

acmp.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

apache2_config.c

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

apache2_io.c

Change strncpy to memcpy

2013-07-05 02:45:05 -07:00

apache2_util.c

Removed SecDefineRemoteAddr and fixed Apache 2.4 mod_remoteip integration

2013-05-06 00:49:07 -04:00

apache2.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

Makefile.am

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

Makefile.win

IIS: Creates IIS_VERSION definition

2014-12-11 14:47:59 -08:00

mod_security2_config.hw

Updates to build on Windows with MS VC++ 8.

2008-02-13 07:10:54 +00:00

mod_security2.c

Improves SecRemoteRules messages on IIS

2015-02-12 09:37:32 -08:00

modsecurity_config.h

IIS version improvements

2013-01-18 11:39:05 -08:00

modsecurity.c

Fix remote resources download while hosting SSL site on Apache

2014-12-11 12:39:27 -08:00

modsecurity.h

Fix apr_crypto.h include in modsecurity.h and msc_remote_rules.c

2015-02-11 08:15:30 -08:00

modules.mk

Added support for JSON body processor

2014-03-31 16:22:09 -07:00

msc_crypt.c

Fix invalid storage reference by apr_psprintf() when creating a string from salt[]. salt[] is not '\0'-terminated, so apr_psprintf() needs to be told the extent of the bytes to read.

2015-03-26 08:55:54 -07:00

msc_crypt.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_json.c

Changes JSON parser to not accept parcial contents

2014-03-31 16:22:10 -07:00

msc_json.h

Code cosmetics: Reduces the amounts of warning.

2014-03-31 16:22:11 -07:00

msc_logging.c

Adds verification before access the strcmp

2014-03-31 16:22:09 -07:00

msc_logging.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.c

Uses %zu to print size_t instead of %d.

2014-03-31 16:22:11 -07:00

msc_multipart.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.h

Version 2.9.0

2015-02-12 10:58:11 -08:00

msc_remote_rules.c

Uses our own version of ap_find_command

2015-02-12 09:34:42 -08:00

msc_remote_rules.h

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_reqbody.c

Makes the build system to look for yajl using a macro file

2014-03-31 16:22:09 -07:00

msc_status_engine.c

Improves the accuracy of version identification on status calls

2015-02-11 18:37:01 -08:00

msc_status_engine.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_tree.c

Fixes subnets representations using slash notation

2014-06-11 09:31:53 -07:00

msc_tree.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_unicode.c

Fix logical disjunction and conjunction issues

2013-08-12 18:43:56 -03:00

msc_unicode.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_util.c

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_util.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_xml.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_xml.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

persist_dbm.c

Added: SDBM_DELETE_ERROR variable

2013-05-02 08:04:26 -04:00

persist_dbm.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_actions.c

Fixed comment incorrect comment

2014-12-29 18:03:19 -05:00

re_operators.c

Closes a file handle that was left opened on fuzzy hash

2014-12-12 04:34:21 -08:00

re_tfns.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_variables.c

Declares msre_var *rvar at the beggining of the function

2014-11-14 11:53:39 -08:00

re.c

Flip allocations that happen during initialization (typically) over to use non-global apr memory pools.

2014-03-03 08:00:53 -08:00

re.h

Adds fuzzyHash operator

2014-11-14 11:53:39 -08:00

utf8tables.h

Updated copyright dates

2013-04-19 03:20:46 -04:00