Re: [Mod-security-developers] 2.9.0-RC1 test results

[Walter H. <mo...@sp...>]

> 2) High prio: Undiagnosed persistent crash. https://gist.github.com/lifeforms/4356643edfe8f39c2991 <https://gist.github.com/lifeforms/4356643edfe8f39c2991>

Got the same crash on a second test box today.
I have updated the gist with information from a debug build: https://gist.github.com/lifeforms/4356643edfe8f39c2991 <https://gist.github.com/lifeforms/4356643edfe8f39c2991>

This crash appears to be serious. I don’t think I’ve ever seen ModSecurity segfault while parsing a request before. Since it starts happening on a random moment of the day, I’m a bit concerned this might be a remote DoS vuln, so I’m reverting to 2.7.7 on the public boxes.

I have kept some core files, but it’s been a long time since I worked with gdb so let me know if I should extract more info out of them.

Is there a way to enable asserts in the code so we can find out why/when node is unset?

5) I have tested @fuzzyHash and could not get it to work. My experiences are in this gist: https://gist.github.com/lifeforms/660e995254aba740856e <https://gist.github.com/lifeforms/660e995254aba740856e>

Sorry I couldn’t bring more positive news!

Cheers,
WH

-- 
Walter Hop | PGP key: https://lifeforms.nl/pgp