Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit6f49bad

Browse files
author
Felipe Zimmerle
committed
Fix the hex digit size for SHA1 on msc_crypt implementation
Fixowasp-modsecurity#1354
1 parenta249574 commit6f49bad

File tree

2 files changed

+3
-1
lines changed

2 files changed

+3
-1
lines changed

‎CHANGES‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
DD MMM YYYY - 2.9.2 - To be released
22
------------------------------------
33

4+
* Fix the hex digit size for SHA1 on msc_crypt implementation.
5+
[Issue #1354 - @zimmerle and @parthasarathi204]
46
* Avoid to flush xml buffer while assembling the injected html.
57
[Issue #742 - @zimmerle]
68
* Avoid additional operator invokation if last transform of a multimatch

‎apache2/msc_crypt.c‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -189,7 +189,7 @@ char *hmac(modsec_rec *msr, const char *key, int key_len,
189189
unsignedcharhmac_ipad[HMAC_PAD_SIZE],hmac_opad[HMAC_PAD_SIZE];
190190
unsignedcharnkey[APR_SHA1_DIGESTSIZE];
191191
unsignedchar*hmac_key= (unsignedchar*)key;
192-
charhex_digest[APR_SHA1_DIGESTSIZE*2],*hmac_digest;
192+
charhex_digest[APR_SHA1_DIGESTSIZE*2+1],*hmac_digest;
193193
constcharhex[]="0123456789abcdef";
194194
inti;
195195

0 commit comments

Comments
 (0)

[8]ページ先頭

©2009-2025 Movatter.jp