diff options
author | MrTiz9 <tiziano.marra@pm.me> | 2020-02-01 17:18:35 +0100 |
---|---|---|
committer | MrTiz9 <tiziano.marra@pm.me> | 2020-02-01 17:18:35 +0100 |
commit | 3422574c17a7f8d3a6c39a42ba224e3e5da354f3 (patch) | |
tree | 76872483e647fc699c204e5e2b226b91ea822471 /src/lib/ndpi_utils.c | |
parent | b3138d5e3e44089bc22bdc58ea3c422ce67409f2 (diff) |
FIXED - nDPI now detect RCE injections via PCRE instead Intel Hyperscan
Diffstat (limited to 'src/lib/ndpi_utils.c')
-rw-r--r-- | src/lib/ndpi_utils.c | 13 |
1 files changed, 3 insertions, 10 deletions
diff --git a/src/lib/ndpi_utils.c b/src/lib/ndpi_utils.c index b86e66bfb..99571b2c6 100644 --- a/src/lib/ndpi_utils.c +++ b/src/lib/ndpi_utils.c @@ -1237,14 +1237,12 @@ static void ndpi_compile_rce_regex() { comp_rx[i]->optimized = pcre_study(comp_rx[i]->compiled, 0, &pcreErrorStr); + #ifdef DEBUG if(pcreErrorStr != NULL) { - #ifdef DEBUG NDPI_LOG_ERR(ndpi_str, "ERROR: Could not study '%s': %s\n", rce_regex[i], pcreErrorStr); - #endif - - continue; } + #endif } free((void *)pcreErrorStr); @@ -1264,12 +1262,7 @@ static int ndpi_is_rce_injection(char* query) { pcreExecRet = pcre_exec(comp_rx[i]->compiled, comp_rx[i]->optimized, - query, - length, - 0, - 0, - subStrVec, - 30); + query, length, 0, 0, subStrVec, 30); if (pcreExecRet >= 0) { return 1; |