tree 07cef095a522975518cca4404e6f7c5799942e03
parent 494ddbff478d880e48de490f2689607addac70bc
author Yann Cézard <ycezard@viareport.com> 1556195423 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1556547965 +0200

BUG/MEDIUM: contrib/modsecurity: If host header is NULL, don't try to strdup it

I discovered this bug when running OWASP regression tests against HAProxy +
modsecurity-spoa (it's a POC to evaluate how it is working).  I found out that
modsecurity spoa will crash when the request doesn't have any Host header.

See the pull request #86 on github for details.

This patch must be backported to 1.9 and 1.8.