John Lightsey e419b50fe7

Store temporaries in the request pool for regexes compiled per-request. ...

The code for testing regexes with embedded Apache variables
(rule->re_precomp == 1) during request processing was utilizing the global
engine pool for the storage of temporary values. This approach is not
threadsafe, retains the temporary variables longer than they are usable,
and causes corruption of the global pool's "cleanups" linked-lists when
Apache is configured with a threaded MPM.

2021-01-14 14:23:39 -03:00

..

libinjection

Updates libinjection to v3.10.0

2017-05-31 21:06:33 -03:00

acmp.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

acmp.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

apache2_config.c

Code cosmetics: checks if actionset is not null before use it

2018-09-22 20:21:23 -04:00

apache2_io.c

When the input filter finishes, check whether we returned data during the last read and if not, delegate to the remaining filter chain.

2019-05-27 14:45:44 -03:00

apache2_util.c

{dis|en}able-filename-logging: Option to disable logging of filename in audit log [Issue #1065 - Marc Stern]

2017-04-07 10:55:08 -03:00

apache2.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

Makefile.am

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

Makefile.win

IIS: Creates IIS_VERSION definition

2014-12-11 14:47:59 -08:00

mod_security2_config.hw

Updates to build on Windows with MS VC++ 8.

2008-02-13 07:10:54 +00:00

mod_security2.c

AppGw WAF version that doesn't block failed body parsing in detect-only mode

2018-09-05 16:08:21 -03:00

modsecurity_config.h

IIS version improvements

2013-01-18 11:39:05 -08:00

modsecurity.c

Use tempfiles for apr_global_mutex_create() to fix segfaults with Apache 2.2.

2018-12-10 16:24:48 -03:00

modsecurity.h

Use tempfiles for apr_global_mutex_create() to fix segfaults with Apache 2.2.

2018-12-10 16:24:48 -03:00

modules.mk

Added support for JSON body processor

2014-03-31 16:22:09 -07:00

msc_crypt.c

Fix NetBSD build by renaming the hmac function to avoid conflicts

2018-11-04 21:20:10 -05:00

msc_crypt.h

Fix NetBSD build by renaming the hmac function to avoid conflicts

2018-11-04 21:20:10 -05:00

msc_geo.c

added missing Geo Countries

2019-06-26 13:02:25 -03:00

msc_geo.h

added missing Geo Countries

2019-06-26 13:02:25 -03:00

msc_gsb.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_json.c

Allow empty arrays in JSON parser

2018-11-26 10:40:46 -03:00

msc_json.h

Code cosmetics: Reduces the amounts of warning.

2014-03-31 16:22:11 -07:00

msc_logging_json.h

first pass at JSON logging implementation

2016-01-29 11:59:52 -03:00

msc_logging.c

fix: care non-null terminated chunk data

2019-05-27 10:29:01 -03:00

msc_logging.h

Do not compile in JSON logging support if yajl is not found

2016-01-29 11:59:52 -03:00

msc_lua.c

Extends Lua implementation to support Lua 5.3

2016-01-08 18:39:29 -03:00

msc_lua.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.c

Less strict multipart parsing

2018-11-21 12:47:56 -05:00

msc_multipart.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.c

potential off by one in parse_arguments

2018-09-05 15:33:39 -03:00

msc_parsers.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.h

Version 2.9.3

2018-12-04 14:50:34 -03:00

msc_remote_rules.c

Add sanity check for a couple malloc() and make code more resilient

2018-11-04 22:04:34 -05:00

msc_remote_rules.h

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_reqbody.c

Allow 0 length JSON requests. 0 len XML and multipart already allowed.

2018-11-27 09:01:05 -03:00

msc_status_engine.c

Few missing headers, in the <arpa/inet.h> inclusions ones mainly due to the fact APR_HAVE* constants are simply into apr.h

2017-09-29 14:00:32 +00:00

msc_status_engine.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_tree.c

Fix inet addr handling on 64 bit big endian systems

2018-12-10 15:39:58 -03:00

msc_tree.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_unicode.c

Fix logical disjunction and conjunction issues

2013-08-12 18:43:56 -03:00

msc_unicode.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_util.c

Fix curl callback function

2018-12-15 00:08:31 -03:00

msc_util.h

Fix curl callback function

2018-12-15 00:08:31 -03:00

msc_xml.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_xml.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

persist_dbm.c

ju5t patch to fix mpm-itk mod_ruid2 compatibility

2018-10-12 21:20:40 -04:00

persist_dbm.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_actions.c

Adds a sanity check before use ctl:ruleRemove(TargetById|TargetByMsg)

2019-11-20 09:49:17 -03:00

re_operators.c

Store temporaries in the request pool for regexes compiled per-request.

2021-01-14 14:23:39 -03:00

re_tfns.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_variables.c

Initialize msre_var pointers

2017-06-23 16:16:23 -03:00

re.c

Code cosmetics: Minor change to match commit 2a42cc

2018-09-22 20:40:30 -04:00

re.h

Read fuzzy hash databases on init

2017-04-06 13:20:24 -03:00

utf8tables.h

Updated copyright dates

2013-04-19 03:20:46 -04:00