Petr Gajdos
7312016b17
- version update to 2.9.8 (changed upstream: Trustwave -> OWASP) * Fixed ap_log_perror() usage * Memory leaks + enhanced logging * CI improvement: First check syntax & always display error/audit logs * Fixed assert() usage * Removed useless code * feat: Check if the MP header contains invalid character * Use standard httpd logging format in error log * fix msc_regexec() != PCRE_ERROR_NOMATCH strict check * Move xmlFree() call to the right place * Add collection size in log in case of writing error * Passing address of lock instead of lock in acquire_global_lock() * Invalid pointer access in case rule id == NOT_SET_P * Show error.log after httpd start in CI * chore: add pull request template * chore: add gitignore file * Possible double free * Set 'jit' variable's initial value * Missing null byte + optimization * fix: remove usage of insecure tmpname * docs: update copyright * Enhanced logging [Issue #3107] * Check for null pointer dereference (almost) everywhere * Fix possible segfault in collection_unpack * fix: Replace obsolete macros * chore: update bug-report-for-version-2-x.md * feat: Add more steps: install built module and restart the server * Add new flag: --without-lua * Initial release of CI worklow OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=97
36 lines
1.6 KiB
Diff
36 lines
1.6 KiB
Diff
Index: modsecurity-2.9.7/tests/msc_test.c
|
|
===================================================================
|
|
--- modsecurity-2.9.7.orig/tests/msc_test.c
|
|
+++ modsecurity-2.9.7/tests/msc_test.c
|
|
@@ -81,7 +81,7 @@ char DSOLOCAL *real_server_signature = N
|
|
int DSOLOCAL remote_rules_fail_action = REMOTE_RULES_ABORT_ON_FAIL;
|
|
char DSOLOCAL *remote_rules_fail_message = NULL;
|
|
module AP_MODULE_DECLARE_DATA security2_module = {
|
|
- NULL,
|
|
+ STANDARD20_MODULE_STUFF,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
Index: modsecurity-2.9.7/standalone/config.c
|
|
===================================================================
|
|
--- modsecurity-2.9.7.orig/standalone/config.c
|
|
+++ modsecurity-2.9.7/standalone/config.c
|
|
@@ -989,7 +989,7 @@ AP_DECLARE(const char *) process_fnmatch
|
|
const char *rootpath, *filepath = fname;
|
|
|
|
/* locate the start of the directories proper */
|
|
- status = apr_filepath_root(&rootpath, &filepath, APR_FILEPATH_TRUENAME | APR_FILEPATH_NATIVE, ptemp);
|
|
+ status = apr_filepath_root((const char **) &rootpath, (const char **) &filepath, APR_FILEPATH_TRUENAME | APR_FILEPATH_NATIVE, ptemp);
|
|
|
|
/* we allow APR_SUCCESS and APR_EINCOMPLETE */
|
|
if (APR_ERELATIVE == status) {
|
|
@@ -1104,7 +1104,7 @@ ProcessInclude:
|
|
incpath = w;
|
|
|
|
/* locate the start of the directories proper */
|
|
- status = apr_filepath_root(&rootpath, &incpath, APR_FILEPATH_TRUENAME | APR_FILEPATH_NATIVE, ptemp);
|
|
+ status = apr_filepath_root((const char**) &rootpath, (const char **) &incpath, APR_FILEPATH_TRUENAME | APR_FILEPATH_NATIVE, ptemp);
|
|
|
|
/* we allow APR_SUCCESS and APR_EINCOMPLETE */
|
|
if (APR_ERELATIVE == status) {
|