Eugene Alekseev 7ba07bd547 Fix buffer overflow on empty strings in key. ...

Sometimes apache segfalult on memory copying when key.dptr is some
kind of empty string and key.dsize seems to be 0.

2015-10-26 13:41:55 -03:00

..

libinjection

Updates the libinjection

2014-03-31 16:22:11 -07:00

acmp.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

acmp.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

apache2_config.c

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

apache2_io.c

Change strncpy to memcpy

2013-07-05 02:45:05 -07:00

apache2_util.c

Removed SecDefineRemoteAddr and fixed Apache 2.4 mod_remoteip integration

2013-05-06 00:49:07 -04:00

apache2.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

Makefile.am

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

Makefile.win

IIS: Creates IIS_VERSION definition

2014-12-11 14:47:59 -08:00

mod_security2_config.hw

Updates to build on Windows with MS VC++ 8.

2008-02-13 07:10:54 +00:00

mod_security2.c

Improves SecRemoteRules messages on IIS

2015-02-12 09:37:32 -08:00

modsecurity_config.h

IIS version improvements

2013-01-18 11:39:05 -08:00

modsecurity.c

Remove misguided call to srand()

2015-10-16 11:14:54 -03:00

modsecurity.h

Fix apr_crypto.h include in modsecurity.h and msc_remote_rules.c

2015-02-11 08:15:30 -08:00

modules.mk

Added support for JSON body processor

2014-03-31 16:22:09 -07:00

msc_crypt.c

Fix invalid storage reference by apr_psprintf() when creating a string from salt[]. salt[] is not '\0'-terminated, so apr_psprintf() needs to be told the extent of the bytes to read.

2015-03-26 08:55:54 -07:00

msc_crypt.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_json.c

Changes JSON parser to not accept parcial contents

2014-03-31 16:22:10 -07:00

msc_json.h

Code cosmetics: Reduces the amounts of warning.

2014-03-31 16:22:11 -07:00

msc_logging.c

Adds verification before access the strcmp

2014-03-31 16:22:09 -07:00

msc_logging.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.c

Uses %zu to print size_t instead of %d.

2014-03-31 16:22:11 -07:00

msc_multipart.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.h

Version 2.9.0

2015-02-12 10:58:11 -08:00

msc_remote_rules.c

Uses our own version of ap_find_command

2015-02-12 09:34:42 -08:00

msc_remote_rules.h

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_reqbody.c

Makes the build system to look for yajl using a macro file

2014-03-31 16:22:09 -07:00

msc_status_engine.c

Improves the accuracy of version identification on status calls

2015-02-11 18:37:01 -08:00

msc_status_engine.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_tree.c

Fixes subnets representations using slash notation

2014-06-11 09:31:53 -07:00

msc_tree.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_unicode.c

Fix logical disjunction and conjunction issues

2013-08-12 18:43:56 -03:00

msc_unicode.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_util.c

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_util.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_xml.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_xml.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

persist_dbm.c

Fix buffer overflow on empty strings in key.

2015-10-26 13:41:55 -03:00

persist_dbm.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_actions.c

Fixed comment incorrect comment

2014-12-29 18:03:19 -05:00

re_operators.c

Closes a file handle that was left opened on fuzzy hash

2014-12-12 04:34:21 -08:00

re_tfns.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_variables.c

Declares msre_var *rvar at the beggining of the function

2014-11-14 11:53:39 -08:00

re.c

Flip allocations that happen during initialization (typically) over to use non-global apr memory pools.

2014-03-03 08:00:53 -08:00

re.h

Adds fuzzyHash operator

2014-11-14 11:53:39 -08:00

utf8tables.h

Updated copyright dates

2013-04-19 03:20:46 -04:00