[Mod-security-developers] [JIRA] Resolved: (MODSEC-326) SecRuleUpdateTargetById

[Breno S. P. (JIRA) <no...@mo...>]

     [ https://www.modsecurity.org/tracker/browse/MODSEC-326?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Breno Silva Pinto resolved MODSEC-326.
--------------------------------------

    Resolution: Fixed

Done. Thanks

> SecRuleUpdateTargetById
> -----------------------
>
>                 Key: MODSEC-326
>                 URL: https://www.modsecurity.org/tracker/browse/MODSEC-326
>             Project: ModSecurity
>          Issue Type: Bug
>      Security Level: Normal
>          Components: Rules
>    Affects Versions: 2.7.0
>         Environment: Ubuntu
>            Reporter: Jerome Freilinger
>            Assignee: Breno Silva Pinto
>            Priority: High
>             Fix For: 2.7.0
>
>         Attachments: patch.txt
>
>   Original Estimate: 30 minutes
>  Remaining Estimate: 30 minutes
>
> The SecRuleUpdateTargetById command is mixing up the rule list of all phases. 
> The line 120 in apache2/re.c "rules[j++] = rules[i];" is copying the pointer of some rules to the beginning of the rules-array without paying attention to the chains of the rules.
> What is the purpose of this line? For me line 120 should be removed.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira