libddwaf 1.5.1.0.0-arm64-darwin → 1.5.1.0.1-arm64-darwin

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d753815cac6c230540e2151594fde2aba6edcbc8b29f70ac6126e2258064d4fc
-  data.tar.gz: d75d28707e292d9f374a1c9209474b2b051a917cb2a08836813ac5594aca2050
+  metadata.gz: 0c9a50bba0ae240bf1c09747708938006fc29b792c42e04241a290dd4baa025a
+  data.tar.gz: eaceb54778059092d8bd0c5c3440e7af20c8874f3ba2bdf94db69bf91eada71f
 SHA512:
-  metadata.gz: c72b639026ea1686d23c58146296bbbb9b88a4adb8a229af1d82d53ef74eace3d3969e0fa46206e3bd73ddabcfe224119f86f0c360ca2470a3e0fa874106453a
-  data.tar.gz: 46f507d84f237a23fcd6d7587fb2ac5fb8948a14123648275bdf45bf69f228da08fcf9e77f4ad8726b40928059f8e1eaa910d9ac2bf1f345b94c840b75c199f5
+  metadata.gz: a70374d258841cc1aba0fe2ceb9945b6c8ef1763435a3da847147c3814e0ec3d8cce58d34d2f92110ceaab0f9d3d722aa0e8b4ea9bf52c994778bf0115c5852c
+  data.tar.gz: 66a36042f9a7b2e6f164f6e713fc9e37e8f106e4b75f939342bc24a3feed30143c798290f2b9011c853fdbcc43b5ed67e03201a6c6f407f7b16b1b281cd04583

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+# 2023-02-01 v1.5.1.0.1
+
+- Fix incorrect size in input string limit
+- Fix object freeing on `update_rule_data` and `toggle_rules`
+
 # 2022-10-04 v1.5.1.0.0
 
 - Update to libddwaf 1.5.1

data/lib/datadog/appsec/waf/version.rb

@@ -3,7 +3,7 @@ module Datadog
     module WAF
       module VERSION
         BASE_STRING = '1.5.1'
-        STRING = "#{BASE_STRING}.0.0"
+        STRING = "#{BASE_STRING}.0.1"
         MINIMUM_RUBY_VERSION = '2.1'
       end
     end

data/lib/datadog/appsec/waf.rb

@@ -203,8 +203,8 @@ module Datadog
           end
 
           class Obfuscator < ::FFI::Struct
-            layout :key_regex,   :pointer, # :charptr
-                   :value_regex, :pointer  # :charptr
+            layout :key_regex,   :pointer, # should be :charptr
+                   :value_regex, :pointer  # should be :charptr
           end
 
           layout :limits,     Limits,
@@ -539,15 +539,21 @@ module Datadog
         end
 
         def update_rule_data(data)
-          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_update_rule_data(@handle_obj, Datadog::AppSec::WAF.ruby_to_object(data, coerce: false))
+          data_obj = Datadog::AppSec::WAF.ruby_to_object(data, coerce: false)
+          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_update_rule_data(@handle_obj, data_obj)
 
           RESULT_CODE[res]
+        ensure
+          Datadog::AppSec::WAF::LibDDWAF.ddwaf_object_free(data_obj) if data_obj
         end
 
         def toggle_rules(map)
-          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_toggle_rules(@handle_obj, Datadog::AppSec::WAF.ruby_to_object(map, coerce: false))
+          map_obj = Datadog::AppSec::WAF.ruby_to_object(map, coerce: false)
+          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_toggle_rules(@handle_obj, map_obj)
 
           RESULT_CODE[res]
+        ensure
+          Datadog::AppSec::WAF::LibDDWAF.ddwaf_object_free(map_obj) if map_obj
         end
 
         private
@@ -627,7 +633,7 @@ module Datadog
 
           max_container_size  = LibDDWAF::DDWAF_MAX_CONTAINER_SIZE
           max_container_depth = LibDDWAF::DDWAF_MAX_CONTAINER_DEPTH
-          max_string_length   = LibDDWAF::DDWAF_MAX_CONTAINER_SIZE
+          max_string_length   = LibDDWAF::DDWAF_MAX_STRING_LENGTH
 
           input_obj = Datadog::AppSec::WAF.ruby_to_object(input,
                                                           max_container_size: max_container_size,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libddwaf
 version: !ruby/object:Gem::Version
-  version: 1.5.1.0.0
+  version: 1.5.1.0.1
 platform: arm64-darwin
 authors:
 - Datadog, Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-10-04 00:00:00.000000000 Z
+date: 2023-02-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi
@@ -63,7 +63,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.0.0
 requirements: []
-rubygems_version: 3.3.22
+rubygems_version: 3.4.4
 signing_key:
 specification_version: 4
 summary: Datadog WAF