Petr Gajdos
7312016b17
- version update to 2.9.8 (changed upstream: Trustwave -> OWASP) * Fixed ap_log_perror() usage * Memory leaks + enhanced logging * CI improvement: First check syntax & always display error/audit logs * Fixed assert() usage * Removed useless code * feat: Check if the MP header contains invalid character * Use standard httpd logging format in error log * fix msc_regexec() != PCRE_ERROR_NOMATCH strict check * Move xmlFree() call to the right place * Add collection size in log in case of writing error * Passing address of lock instead of lock in acquire_global_lock() * Invalid pointer access in case rule id == NOT_SET_P * Show error.log after httpd start in CI * chore: add pull request template * chore: add gitignore file * Possible double free * Set 'jit' variable's initial value * Missing null byte + optimization * fix: remove usage of insecure tmpname * docs: update copyright * Enhanced logging [Issue #3107] * Check for null pointer dereference (almost) everywhere * Fix possible segfault in collection_unpack * fix: Replace obsolete macros * chore: update bug-report-for-version-2-x.md * feat: Add more steps: install built module and restart the server * Add new flag: --without-lua * Initial release of CI worklow OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=97
38 lines
1.1 KiB
Diff
38 lines
1.1 KiB
Diff
Index: modsecurity-v2.9.8/apache2/msc_status_engine.c
|
|
===================================================================
|
|
--- modsecurity-v2.9.8.orig/apache2/msc_status_engine.c
|
|
+++ modsecurity-v2.9.8/apache2/msc_status_engine.c
|
|
@@ -40,6 +40,8 @@
|
|
#if (defined(__linux__) || defined(__gnu_linux__))
|
|
#include <linux/if.h>
|
|
#include <linux/sockios.h>
|
|
+#include <sys/ioctl.h>
|
|
+#include <netdb.h>
|
|
#endif
|
|
#ifdef HAVE_SYS_UTSNAME_H
|
|
#include <sys/utsname.h>
|
|
Index: modsecurity-v2.9.8/apache2/msc_remote_rules.c
|
|
===================================================================
|
|
--- modsecurity-v2.9.8.orig/apache2/msc_remote_rules.c
|
|
+++ modsecurity-v2.9.8/apache2/msc_remote_rules.c
|
|
@@ -797,6 +797,7 @@ next:
|
|
"compilation.";
|
|
return -1;
|
|
#endif
|
|
+ return -1;
|
|
}
|
|
|
|
|
|
Index: modsecurity-v2.9.8/apache2/msc_util.c
|
|
===================================================================
|
|
--- modsecurity-v2.9.8.orig/apache2/msc_util.c
|
|
+++ modsecurity-v2.9.8/apache2/msc_util.c
|
|
@@ -18,6 +18,7 @@
|
|
#include <stdlib.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
+#include <arpa/inet.h>
|
|
|
|
#include "msc_release.h"
|
|
#include "msc_util.h"
|