libddwaf 1.8.2.0.0-java → 1.9.0.0.1-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 53207eed2e7a1a916dbcf5d5b576d3b1cf02c738cd40f9dc7c212f98e65e9387
-  data.tar.gz: 308f95d4ced684517fed36e9b182c3d74ccfb4fe491cee90b3b4c65089d54a09
+  metadata.gz: 7601f47d798fce769438ef48ac48069a0e662cea11c948689015003ea6cbea0b
+  data.tar.gz: d907ea758406c750aada22ad0ca7ec0d2ad764fd51e60d875acbd4d1db514604
 SHA512:
-  metadata.gz: cc1c8a7280caeb0f62768bd5cb00ee4027ba61497043342c2c0274456c877f68ebfca0536a152b854ef840b1a7f105f7f08cf4e3ce2da7e62e197dcb9daa2075
-  data.tar.gz: 829785af1276edd8d0db64baf8e105272965d0d47f688999e786d6a72f618db97858982fd47c53401bdb88d2ff34ab0c737d35242800bbb0d140e6ad0031a035
+  metadata.gz: 38ff8b367b26bb7e2da6e67f05bfa8817987d71ce949ce1dae3085542db918004e1aadacbb6addda4a8165de950bc6d114f14766b6380a87a42c751850e5c25f
+  data.tar.gz: 2884352664d08adc65d6106b7f92af5603c6039a58c7a45ad5881e272c467c9911d2f33a83fb4d461662e45915b0a5136eb8a5d190d14c6f249dbf689b77ea7d

data/lib/datadog/appsec/waf/version.rb

@@ -2,8 +2,8 @@ module Datadog
   module AppSec
     module WAF
       module VERSION
-        BASE_STRING = '1.8.2'
-        STRING = "#{BASE_STRING}.0.0"
+        BASE_STRING = '1.9.0'
+        STRING = "#{BASE_STRING}.0.1"
         MINIMUM_RUBY_VERSION = '2.1'
       end
     end

data/lib/datadog/appsec/waf.rb

@@ -4,6 +4,7 @@ require 'datadog/appsec/waf/version'
 
 module Datadog
   module AppSec
+    # rubocop:disable Metrics/ModuleLength
     module WAF
       module LibDDWAF
         class Error < StandardError
@@ -281,9 +282,9 @@ module Datadog
 
         attach_function :ddwaf_set_log_cb, [:ddwaf_log_cb, :ddwaf_log_level], :bool
 
-        DEFAULT_MAX_CONTAINER_SIZE  = 0
-        DEFAULT_MAX_CONTAINER_DEPTH = 0
-        DEFAULT_MAX_STRING_LENGTH   = 0
+        DEFAULT_MAX_CONTAINER_SIZE  = 256
+        DEFAULT_MAX_CONTAINER_DEPTH = 20
+        DEFAULT_MAX_STRING_LENGTH   = 16_384 # in bytes, UTF-8 worst case being 4x size in terms of code point)
 
         DDWAF_MAX_CONTAINER_SIZE  = 256
         DDWAF_MAX_CONTAINER_DEPTH = 20
@@ -296,6 +297,7 @@ module Datadog
         LibDDWAF.ddwaf_get_version
       end
 
+      # rubocop:disable Metrics/MethodLength
       def self.ruby_to_object(val, max_container_size: nil, max_container_depth: nil, max_string_length: nil, coerce: true)
         case val
         when Array
@@ -349,7 +351,8 @@ module Datadog
           obj
         when String
           obj = LibDDWAF::Object.new
-          val = val.to_s[0, max_string_length] if max_string_length
+          encoded_val = val.to_s.encode('utf-8', invalid: :replace, undef: :replace)
+          val = encoded_val[0, max_string_length] if max_string_length
           str = val.to_s
           res = LibDDWAF.ddwaf_object_stringl(obj, str, str.bytesize)
           if res.null?
@@ -405,6 +408,7 @@ module Datadog
           ruby_to_object(''.freeze)
         end
       end
+      # rubocop:enable Metrics/MethodLength
 
       def self.object_to_ruby(obj)
         case obj[:type]
@@ -699,5 +703,6 @@ module Datadog
         end
       end
     end
+    # rubocop:enable Metrics/ModuleLength
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libddwaf
 version: !ruby/object:Gem::Version
-  version: 1.8.2.0.0
+  version: 1.9.0.0.1
 platform: java
 authors:
 - Datadog, Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-03-06 00:00:00.000000000 Z
+date: 2023-06-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi
@@ -42,10 +42,10 @@ files:
 - lib/datadog/appsec/waf.rb
 - lib/datadog/appsec/waf/version.rb
 - lib/libddwaf.rb
-- vendor/libddwaf/libddwaf-1.8.2-darwin-arm64/lib/libddwaf.dylib
-- vendor/libddwaf/libddwaf-1.8.2-darwin-x86_64/lib/libddwaf.dylib
-- vendor/libddwaf/libddwaf-1.8.2-linux-aarch64/lib/libddwaf.so
-- vendor/libddwaf/libddwaf-1.8.2-linux-x86_64/lib/libddwaf.so
+- vendor/libddwaf/libddwaf-1.9.0-darwin-arm64/lib/libddwaf.dylib
+- vendor/libddwaf/libddwaf-1.9.0-darwin-x86_64/lib/libddwaf.dylib
+- vendor/libddwaf/libddwaf-1.9.0-linux-aarch64/lib/libddwaf.so
+- vendor/libddwaf/libddwaf-1.9.0-linux-x86_64/lib/libddwaf.so
 homepage: https://github.com/DataDog/libddwaf-rb
 licenses:
 - BSD-3-Clause