github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-06-28 16:41:03 +03:00
Code Issues Packages Projects Releases Wiki Activity

add Daniel fixes

Browse Source
This commit is contained in:
wiaamm 2025-02-10 14:17:47 +02:00
parent a2e439b77b
commit f136ef49ef
2 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
attachments/nano_attachment/nano_attachment_io.c
View File

@ -971,11 +971,11 @@ set_fragments_identifiers(
char **meta_data_elems, char **meta_data_elems,
uint16_t *meta_data_sizes, uint16_t *meta_data_sizes,
uint16_t *data_type, uint16_t *data_type,
uint32_t cur_request_id uint32_t *cur_request_id
) )
{ {
set_fragment_elem(meta_data_elems, meta_data_sizes, data_type, sizeof(uint16_t), 0); set_fragment_elem(meta_data_elems, meta_data_sizes, data_type, sizeof(uint16_t), 0);
set_fragment_elem(meta_data_elems, meta_data_sizes, &cur_request_id, sizeof(cur_request_id), 1); set_fragment_elem(meta_data_elems, meta_data_sizes, cur_request_id, sizeof(uint32_t), 1);
} }
/// ///
@ -1104,7 +1104,7 @@ nano_metadata_sender(
// Sets the fragments // Sets the fragments
chunk_type = REQUEST_START; chunk_type = REQUEST_START;
set_fragments_identifiers(fragments, fragments_sizes, &chunk_type, cur_request_id); set_fragments_identifiers(fragments, fragments_sizes, &chunk_type, &cur_request_id);
// Add protocol length to fragments. // Add protocol length to fragments.
set_fragment_elem( set_fragment_elem(
@ -1291,7 +1291,7 @@ nano_send_response_code(
write_dbg(attachment, cur_request_id, DBG_LEVEL_TRACE, "Sending response code (%d) for inspection", response_code); write_dbg(attachment, cur_request_id, DBG_LEVEL_TRACE, "Sending response code (%d) for inspection", response_code);
set_fragments_identifiers(fragments, fragments_sizes, &chunk_type, cur_request_id); set_fragments_identifiers(fragments, fragments_sizes, &chunk_type, &cur_request_id);
set_fragment_elem(fragments, fragments_sizes, &response_code, sizeof(uint16_t), 2); set_fragment_elem(fragments, fragments_sizes, &response_code, sizeof(uint16_t), 2);
res = send_session_data_to_service( res = send_session_data_to_service(
@ -1333,7 +1333,7 @@ nano_send_response_content_length(
content_length content_length
); );
set_fragments_identifiers(fragments, fragments_sizes, &chunk_type, cur_request_id); set_fragments_identifiers(fragments, fragments_sizes, &chunk_type, &cur_request_id);
set_fragment_elem(fragments, fragments_sizes, &content_length, sizeof(content_length), 2); set_fragment_elem(fragments, fragments_sizes, &content_length, sizeof(content_length), 2);
res = send_session_data_to_service( res = send_session_data_to_service(
@ -1386,7 +1386,7 @@ send_header_bulk(
{ {
NanoCommunicationResult res; NanoCommunicationResult res;
set_fragments_identifiers(data, data_sizes, (uint16_t *)&header_type, cur_request_id); set_fragments_identifiers(data, data_sizes, (uint16_t *)&header_type, &cur_request_id);
set_fragment_elem(data, data_sizes, &is_last_part, sizeof(is_last_part), 2); set_fragment_elem(data, data_sizes, &is_last_part, sizeof(is_last_part), 2);
set_fragment_elem(data, data_sizes, &bulk_part_index, sizeof(bulk_part_index), 3); set_fragment_elem(data, data_sizes, &bulk_part_index, sizeof(bulk_part_index), 3);
@ -1579,7 +1579,7 @@ nano_body_sender(
is_final_chunk = 1; is_final_chunk = 1;
} }
set_fragments_identifiers(fragments, fragments_sizes, (uint16_t *)&body_type, cur_request_id); set_fragments_identifiers(fragments, fragments_sizes, (uint16_t *)&body_type, &cur_request_id);
set_fragment_elem(fragments, fragments_sizes, &is_final_chunk, sizeof(is_final_chunk), 2); set_fragment_elem(fragments, fragments_sizes, &is_final_chunk, sizeof(is_final_chunk), 2);
set_fragment_elem(fragments, fragments_sizes, &body_index, sizeof(body_index), 3); set_fragment_elem(fragments, fragments_sizes, &body_index, sizeof(body_index), 3);
@ -1648,7 +1648,7 @@ nano_end_transaction_sender(
end_transaction_type == REQUEST_END ? "request" : "response" end_transaction_type == REQUEST_END ? "request" : "response"
); );
set_fragments_identifiers(fragments, fragments_sizes, (uint16_t *)&end_transaction_type, cur_request_id); set_fragments_identifiers(fragments, fragments_sizes, (uint16_t *)&end_transaction_type, &cur_request_id);
res = send_session_data_to_service( res = send_session_data_to_service(
attachment, attachment,
@ -1700,7 +1700,7 @@ nano_request_delayed_verdict(
"Sending delayed event flag for inspection" "Sending delayed event flag for inspection"
); );
set_fragments_identifiers(fragments, fragments_sizes, (uint16_t *)&wait_transaction_type, cur_request_id); set_fragments_identifiers(fragments, fragments_sizes, (uint16_t *)&wait_transaction_type, &cur_request_id);
res = send_session_data_to_service( res = send_session_data_to_service(
attachment, attachment,

6
docker/openappsec-waf-webhook/webhook_server.py
View File

@ -64,7 +64,11 @@ def get_sidecar_container():
"volumeMounts": [ "volumeMounts": [
{"name": "envoy-attachment-shared", "mountPath": "/envoy/attachment/shared/"} {"name": "envoy-attachment-shared", "mountPath": "/envoy/attachment/shared/"}
], ],
"resources": {}, "resources": {
"requests": {
"cpu": "200m"
}
},
"securityContext": { "securityContext": {
"runAsNonRoot": False, "runAsNonRoot": False,
"runAsUser": 0 "runAsUser": 0