Finally got around to compiling this.
Just one compile warning (own Apache 2.2.6, Solaris 10 Sparc 32-bit but
with 64-bit file sizes, Solaris Freeware Collection gcc 3.4.3, PCRE from
Apache source, own libxml2 2.6.29)
re_variables.c: In function `var_script_gid_generate':
re_variables.c:1435: warning: int format, apr_gid_t arg (arg 3)
re_variables.c: In function `var_script_uid_generate':
re_variables.c:1465: warning: int format, apr_uid_t arg (arg 3)
It seems to work on my test server (so far).
Brian Rectanus wrote:
> Hello all,
> The 2.1.4-rc4 is now available for testing. This release candidate
> fixes a false positive with the multipart parser's evasion detection
> mistaking a non-boundary as a boundary as well as some more compiler
> warnings on Solaris 10 and other 64bit platforms.
> Fixes so far for 2.1.4:
> * Do not process subrequests in phase 2-4, but do hand off the request
> * Fix for an evasion FP, mistaking a multipart non-boundary for a boundary.
> * Fix a blocking FP in the multipart parser, which affected Safari.
> * Fix warnings on Solaris and/or 64bit builds.
> Barring any serious issues that arise with more testing, I would like
> this to be the final release candidate. The only addition being an
> updated Core Ruleset.
> If you have the time and a test machine, please test - especially if you
> are using a 64 bit platform.
> If you find any more issues and/or compiler warnings during builds,
> please report them along with the OS, platform and compiler (with versions).
> As always, you can download from modsecurity.org.
Christopher Wakelin, c.d.wakelin@...
IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439
Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094