Skip to content

Incorrect utf8toUnicode transformation for 00xx#3284

Merged
marcstern merged 2 commits into
owasp-modsecurity:v2/masterfrom
marcstern:v2/pr/utf8toUnicodeVsMultibyte
Nov 12, 2024
Merged

Incorrect utf8toUnicode transformation for 00xx#3284
marcstern merged 2 commits into
owasp-modsecurity:v2/masterfrom
marcstern:v2/pr/utf8toUnicodeVsMultibyte

Conversation

@marcstern

Copy link
Copy Markdown

Fix issue and restructure handling
#3129

Perform all the checks and calculate the multibute length, then write the bytes at a single place (the correct way).

Fix issue and restructure handling
@marcstern marcstern added the 2.x Related to ModSecurity version 2.x label Oct 22, 2024
Comment thread apache2/msc_util.c Outdated
@airween

airween commented Oct 31, 2024

Copy link
Copy Markdown
Member

Hi @marcstern,

I added one comment above, and would like to ask if we modify a function that used by a transformation (utf8toUnicode) then probably we should add a test case to our CI. What do you think?

@sonarqubecloud

sonarqubecloud Bot commented Nov 4, 2024

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarCloud

@airween

airween commented Nov 12, 2024

Copy link
Copy Markdown
Member

@marcstern do you think we can add a test case to check this transformation's behavior? Or it's not necessary?

@marcstern marcstern merged commit fa621f8 into owasp-modsecurity:v2/master Nov 12, 2024
@marcstern

Copy link
Copy Markdown
Author

We should ideally add test for this, indeed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

2.x Related to ModSecurity version 2.x

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants