| commit | bf60f6b8033deddc86de5357d6099c7593fe44cc | [log] [tgz] |
|---|---|---|
| author | Yann Cézard <ycezard@viareport.com> | Thu Apr 25 14:30:23 2019 +0200 |
| committer | Christopher Faulet <cfaulet@haproxy.com> | Mon Apr 29 16:26:05 2019 +0200 |
| tree | 07cef095a522975518cca4404e6f7c5799942e03 | |
| parent | 494ddbff478d880e48de490f2689607addac70bc [diff] |
BUG/MEDIUM: contrib/modsecurity: If host header is NULL, don't try to strdup it I discovered this bug when running OWASP regression tests against HAProxy + modsecurity-spoa (it's a POC to evaluate how it is working). I found out that modsecurity spoa will crash when the request doesn't have any Host header. See the pull request #86 on github for details. This patch must be backported to 1.9 and 1.8.