On 06.04.2013 15:42, nickg wrote:
> there is an existing thread on this problem, but I can't figure out to reply to it via source forge.'
>
> https://sourceforge.net/mailarchive/forum.php?thread_name=CAHQz1rJ-bNV2xaYc8A5jwVVY1AXNOOco8FynWudTUxwj5Js4dQ%40mail.gmail.com&forum_name=mod-security-developers
>
>
> Loaded 8 tests from ./op/rx.t
> 1) op "rx": passed (Pattern match "" at UNIT_TEST.)
> 2) op "rx": passed
> 3) op "rx": passed (Pattern match "" at UNIT_TEST.)
> 4) op "rx": passed (Pattern match "abc" at UNIT_TEST.)
> 5) op "rx": passed (Pattern match "def" at UNIT_TEST.)
> 6) op "rx": passed (Pattern match "ghi" at UNIT_TEST.)
> 7) op "rx": passed
> ERROR: Failed to create rule for op "rx": Error creating rule: Error compiling pattern (offset 2): unrecognized character after (? or (?-
> Test exited with signal 11.
> Executed: ./msc_test "-t" "op" "-n" "rx" "-p" "(?^i:^([^=])\s*=\s*((?:abc)+(?:def|ghi){2})$)" "-D" "0" "-r" "1"
> 8) op "rx": failed
> Passed: 7; Failed: 1
>
>
> $ apt-cache show libpcre3
> Package: libpcre3
> Priority: required
> Section: libs
> Installed-Size: 455
> Maintainer: Ubuntu Developers <ubu...@li...>
> Original-Maintainer: Mark Baker <ma...@mn...>
> Architecture: amd64
> Source: pcre3
> Version: 1:8.30-5ubuntu1
>
> Some other guy had a problem 1.8.31
>
> perl seems to be ok with this regexp on same box
>
> perl -p -i -e 's/(?^i:^([^=])\s*=\s*((?:abc)+(?:def|ghi){2})$)//' AFILE
>
> any tips here?
Which version of mod_security?
Could it be this bug:
https://github.com/SpiderLabs/ModSecurity/issues/23
It was fixed in this commit
https://github.com/SpiderLabs/ModSecurity/commit/3f6c14de5993b8b2c66e6317af1680f2a007aead
and should be part of 2.7.2 and later.
But maybe it is just a similar bug.
Regards,
Rainer
|