[mod-security-users] about win32 source
Brought to you by:
victorhora,
zimmerletw
|
From: j l. <no...@gm...> - 2006-03-15 08:19:26
|
hi
I am reading the source for win32-----"mod_security.c" , it is from "
1.9.2" /apache2,
I think I discovered two mistakes:
1. In the function of "cmd_filter_remove", I think that it is the same
as "cmd_filter_import"
2. In the function of "cmd_filter_selective",
" v->type =3D VAR_UNKNOWN;
v->name =3D NULL;
/* when ! is the first character in the variable
* name, that means that the restrictions need to be
* relaxed for that variable (within the filter scope)
*/
if (t[0] =3D=3D '!') {
v->action =3D VAR_ACTION_ALLOW;
sig->is_negative =3D 1;
sig->requires_parsed_args =3D
1; ----------------------------------------- v->type=3D?
x++;
}
else {
v->action =3D VAR_ACTION_DENY;
}
.......................................
if (v->type =3D=3D VAR_UNKNOWN) {
------------------------------------------------the same as " t[0] =3D=3D '=
!' "
?
v->name =3D apr_pstrdup(cmd->pool, "UKNOWN");
return apr_psprintf(cmd->pool, "Unknown variable name: %s", x);
}
if ((v->type =3D=3D VAR_ARGS_NAMES)||(v->type =3D=3D VAR_ARGS_VALUE=
S))
sig->requires_parsed_args =3D 1;
-----------------------------------------it is impossible that
"((v->type =3D=3D VAR_ARGS_NAMES)||(v->type =3D=3D VAR_ARGS_VALUES)) "
"
I am confused of these above.
|