I have a fix for this issue. There were a number of underallocations in IIS module leading to nondeterministic heap corruptions. The 32-bit version worked for me with this specific rule, but given the nature of the bug nothing is guaranteed.
Greg >
>
> From: Bill Roemhild [mailto:con...@ho...]
>
>
> Sent: Friday, August 10, 2012 9:38 AM
>
> To: Greg Wroblewski (SPARROW); Ryan Barnett
>
> Cc: owa...@li...
>
> Subject: RE: [Owasp-modsecurity-core-rule-set] @pmFromFile fails when using IIS along with modsecurity 2.7.0-RC2
>
>
>
>
> Maybe I should be asking if anyone else has been able to get this to work.
>
>
|