[Mod-security-developers] [JIRA] Resolved: (MODSEC-171) input_filter() modifies brigade and returns APR_SUCCESS, prevents additional input filters from running

[Breno S. P. (JIRA) <no...@mo...>]

     [ https://www.modsecurity.org/tracker/browse/MODSEC-171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Breno Silva Pinto resolved MODSEC-171.
--------------------------------------

    Resolution: Fixed

> input_filter() modifies brigade and returns APR_SUCCESS, prevents additional input filters from running
> -------------------------------------------------------------------------------------------------------
>
>                 Key: MODSEC-171
>                 URL: https://www.modsecurity.org/tracker/browse/MODSEC-171
>             Project: ModSecurity
>          Issue Type: Bug
>      Security Level: Normal
>          Components: Core
>    Affects Versions: 2.5.12
>            Reporter: Christoph Moench-Tegeder
>            Assignee: Breno Silva Pinto
>             Fix For: 2.6.0
>
>         Attachments: apache2_io.c.diff
>
>
> In apache2/apache_io.c function input_filter() returns APR_SUCCESS (in case no error or block reason was found) (line 142) instead of passing the brigade down to the next filter using ap_pass_brigade(). The fix should be trivial (just replace the offending APR_SUCCESS with ap_pass_brigade(f->next, bb_out)).

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://www.modsecurity.org/tracker/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira