|
Packit |
284210 |
/*
|
|
Packit |
284210 |
* ModSecurity for Apache 2.x, http://www.modsecurity.org/
|
|
Packit |
284210 |
* Copyright (c) 2004-2013 Trustwave Holdings, Inc. (http://www.trustwave.com/)
|
|
Packit |
284210 |
*
|
|
Packit |
284210 |
* You may not use this file except in compliance with
|
|
Packit |
284210 |
* the License. You may obtain a copy of the License at
|
|
Packit |
284210 |
*
|
|
Packit |
284210 |
* http://www.apache.org/licenses/LICENSE-2.0
|
|
Packit |
284210 |
*
|
|
Packit |
284210 |
* If any of the files related to licensing are missing or if you have any
|
|
Packit |
284210 |
* other questions related to licensing please contact Trustwave Holdings, Inc.
|
|
Packit |
284210 |
* directly using the email address security@modsecurity.org.
|
|
Packit |
284210 |
*/
|
|
Packit |
284210 |
|
|
Packit |
284210 |
#include "httpd.h"
|
|
Packit |
284210 |
#include "http_core.h"
|
|
Packit |
284210 |
#include "http_config.h"
|
|
Packit |
284210 |
#include "http_log.h"
|
|
Packit |
284210 |
#include "http_protocol.h"
|
|
Packit |
284210 |
#include "ap_config.h"
|
|
Packit |
284210 |
#include "apr_optional.h"
|
|
Packit |
284210 |
|
|
Packit |
284210 |
#include "modsecurity.h"
|
|
Packit |
284210 |
|
|
Packit |
284210 |
/* -- Generic generators/validators from re_variables.c -- */
|
|
Packit |
284210 |
|
|
Packit |
284210 |
/**
|
|
Packit |
284210 |
* Generates a variable from a string and a length.
|
|
Packit |
284210 |
*/
|
|
Packit |
284210 |
static int var_simple_generate_ex(msre_var *var, apr_table_t *vartab, apr_pool_t *mptmp,
|
|
Packit |
284210 |
const char *value, int value_len)
|
|
Packit |
284210 |
{
|
|
Packit |
284210 |
msre_var *rvar = NULL;
|
|
Packit |
284210 |
|
|
Packit |
284210 |
if (value == NULL) return 0;
|
|
Packit |
284210 |
|
|
Packit |
284210 |
rvar = apr_pmemdup(mptmp, var, sizeof(msre_var));
|
|
Packit |
284210 |
rvar->value = value;
|
|
Packit |
284210 |
rvar->value_len = value_len;
|
|
Packit |
284210 |
apr_table_addn(vartab, rvar->name, (void *)rvar);
|
|
Packit |
284210 |
|
|
Packit |
284210 |
return 1;
|
|
Packit |
284210 |
}
|
|
Packit |
284210 |
|
|
Packit |
284210 |
/**
|
|
Packit |
284210 |
* Generates a variable from a NULL-terminated string.
|
|
Packit |
284210 |
*/
|
|
Packit |
284210 |
static int var_simple_generate(msre_var *var, apr_table_t *vartab, apr_pool_t *mptmp,
|
|
Packit |
284210 |
const char *value)
|
|
Packit |
284210 |
{
|
|
Packit |
284210 |
if (value == NULL) return 0;
|
|
Packit |
284210 |
return var_simple_generate_ex(var, vartab, mptmp, value, strlen(value));
|
|
Packit |
284210 |
}
|
|
Packit |
284210 |
|
|
Packit |
284210 |
|
|
Packit |
284210 |
/* -- Module specific code -- */
|
|
Packit |
284210 |
|
|
Packit |
284210 |
/**
|
|
Packit |
284210 |
* Create a silly variable with value = a.b.c.d:port
|
|
Packit |
284210 |
*/
|
|
Packit |
284210 |
static int var_remote_addr_port_generate(modsec_rec *msr, msre_var *var, msre_rule *rule,
|
|
Packit |
284210 |
apr_table_t *vartab, apr_pool_t *mptmp)
|
|
Packit |
284210 |
{
|
|
Packit |
284210 |
const char *value = apr_psprintf(mptmp, "%s:%d", msr->remote_addr, msr->remote_port);
|
|
Packit |
284210 |
|
|
Packit |
284210 |
return var_simple_generate(var, vartab, mptmp, value);
|
|
Packit |
284210 |
}
|
|
Packit |
284210 |
|
|
Packit |
284210 |
static int hook_pre_config(apr_pool_t *mp, apr_pool_t *mp_log, apr_pool_t *mp_temp) {
|
|
Packit |
284210 |
void (*register_fn)(const char *name, unsigned int type,
|
|
Packit |
284210 |
unsigned int argc_min, unsigned int argc_max,
|
|
Packit |
284210 |
void *fn_validate, void *fn_generate,
|
|
Packit |
284210 |
unsigned int is_cacheable, unsigned int availability);
|
|
Packit |
284210 |
|
|
Packit |
284210 |
/* Look for the registration function
|
|
Packit |
284210 |
* exported by ModSecurity.
|
|
Packit |
284210 |
*/
|
|
Packit |
284210 |
register_fn = APR_RETRIEVE_OPTIONAL_FN(modsec_register_variable);
|
|
Packit |
284210 |
if (register_fn) {
|
|
Packit |
284210 |
/* Use it to register our new
|
|
Packit |
284210 |
* variable under the
|
|
Packit |
284210 |
* name "REMOTE_ADDR_PORT".
|
|
Packit |
284210 |
*/
|
|
Packit |
284210 |
register_fn(
|
|
Packit |
284210 |
"REMOTE_ADDR_PORT",
|
|
Packit |
284210 |
VAR_SIMPLE,
|
|
Packit |
284210 |
0, 0,
|
|
Packit |
284210 |
NULL,
|
|
Packit |
284210 |
var_remote_addr_port_generate,
|
|
Packit |
284210 |
VAR_DONT_CACHE,
|
|
Packit |
284210 |
PHASE_REQUEST_HEADERS
|
|
Packit |
284210 |
);
|
|
Packit |
284210 |
} else {
|
|
Packit |
284210 |
ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_NOERRNO, 0, NULL,
|
|
Packit |
284210 |
"mod_var_remote_addr_port: Unable to find modsec_register_variable.");
|
|
Packit |
284210 |
}
|
|
Packit |
284210 |
|
|
Packit |
284210 |
return OK;
|
|
Packit |
284210 |
}
|
|
Packit |
284210 |
|
|
Packit |
284210 |
static void register_hooks(apr_pool_t *p) {
|
|
Packit |
284210 |
ap_hook_pre_config(hook_pre_config, NULL, NULL, APR_HOOK_LAST);
|
|
Packit |
284210 |
}
|
|
Packit |
284210 |
|
|
Packit |
284210 |
/* Dispatch list for API hooks */
|
|
Packit |
284210 |
module AP_MODULE_DECLARE_DATA var_remote_addr_port_module = {
|
|
Packit |
284210 |
STANDARD20_MODULE_STUFF,
|
|
Packit |
284210 |
NULL, /* create per-dir config structures */
|
|
Packit |
284210 |
NULL, /* merge per-dir config structures */
|
|
Packit |
284210 |
NULL, /* create per-server config structures */
|
|
Packit |
284210 |
NULL, /* merge per-server config structures */
|
|
Packit |
284210 |
NULL, /* table of config file commands */
|
|
Packit |
284210 |
register_hooks /* register hooks */
|
|
Packit |
284210 |
};
|
|
Packit |
284210 |
|