libddwaf 1.5.1.0.0-aarch64-linux → 1.5.1.0.1-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a81ee2e5601f967754516937cd9b12327df131525a8e9ac1f6024447d4951c7b
-  data.tar.gz: 399f3d4838534d790443799e8dd033a2ca623dd64a665691464ad02397705c8f
+  metadata.gz: cfbcbddb9f76414f4672bb9474af7d3d7011b998e63b7966efbbf81547779575
+  data.tar.gz: ea30191393919988816793f525913ca29b81ee5566926762385f80511233cb29
 SHA512:
-  metadata.gz: dd5e933f5811305b6a840ca61e3e5dddd0e4b2e8a2ed8f4267542ef16722b5d6c8ab7984ab5373042cb6d5d3348856ab01b2a8f7d24c454ee35b676e0bfb1da5
-  data.tar.gz: ce3fe803f2959594b0caa688ce6221b7ad9df30fb5c9b0fa98ac31944d31a568d968e4cec89f7b043d9c42f628c5a564122f738687d1947b5c46a170075d8cd6
+  metadata.gz: ffb73d935a12bdd2f75ae8f1ee4af5609c2dd02c5765efe8da3fe3937f6dd03704aaabb8435e358172eb794b5ed46b9383e993829498ae9ec3dcbb0e6da9fff5
+  data.tar.gz: 45f254927cc43f902182d64b6193be6e802bffdf394d9ca8971f71e82c408e578ac7e5e3a7755edf766bf5cab74d79f557a5ee4838c8a13757311833a7714141

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+# 2023-02-01 v1.5.1.0.1
+
+- Fix incorrect size in input string limit
+- Fix object freeing on `update_rule_data` and `toggle_rules`
+
 # 2022-10-04 v1.5.1.0.0
 
 - Update to libddwaf 1.5.1

data/lib/datadog/appsec/waf/version.rb

@@ -3,7 +3,7 @@ module Datadog
     module WAF
       module VERSION
         BASE_STRING = '1.5.1'
-        STRING = "#{BASE_STRING}.0.0"
+        STRING = "#{BASE_STRING}.0.1"
         MINIMUM_RUBY_VERSION = '2.1'
       end
     end

data/lib/datadog/appsec/waf.rb

@@ -203,8 +203,8 @@ module Datadog
           end
 
           class Obfuscator < ::FFI::Struct
-            layout :key_regex,   :pointer, # :charptr
-                   :value_regex, :pointer  # :charptr
+            layout :key_regex,   :pointer, # should be :charptr
+                   :value_regex, :pointer  # should be :charptr
           end
 
           layout :limits,     Limits,
@@ -539,15 +539,21 @@ module Datadog
         end
 
         def update_rule_data(data)
-          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_update_rule_data(@handle_obj, Datadog::AppSec::WAF.ruby_to_object(data, coerce: false))
+          data_obj = Datadog::AppSec::WAF.ruby_to_object(data, coerce: false)
+          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_update_rule_data(@handle_obj, data_obj)
 
           RESULT_CODE[res]
+        ensure
+          Datadog::AppSec::WAF::LibDDWAF.ddwaf_object_free(data_obj) if data_obj
         end
 
         def toggle_rules(map)
-          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_toggle_rules(@handle_obj, Datadog::AppSec::WAF.ruby_to_object(map, coerce: false))
+          map_obj = Datadog::AppSec::WAF.ruby_to_object(map, coerce: false)
+          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_toggle_rules(@handle_obj, map_obj)
 
           RESULT_CODE[res]
+        ensure
+          Datadog::AppSec::WAF::LibDDWAF.ddwaf_object_free(map_obj) if map_obj
         end
 
         private
@@ -627,7 +633,7 @@ module Datadog
 
           max_container_size  = LibDDWAF::DDWAF_MAX_CONTAINER_SIZE
           max_container_depth = LibDDWAF::DDWAF_MAX_CONTAINER_DEPTH
-          max_string_length   = LibDDWAF::DDWAF_MAX_CONTAINER_SIZE
+          max_string_length   = LibDDWAF::DDWAF_MAX_STRING_LENGTH
 
           input_obj = Datadog::AppSec::WAF.ruby_to_object(input,
                                                           max_container_size: max_container_size,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libddwaf
 version: !ruby/object:Gem::Version
-  version: 1.5.1.0.0
+  version: 1.5.1.0.1
 platform: aarch64-linux
 authors:
 - Datadog, Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-04 00:00:00.000000000 Z
+date: 2023-02-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi