libddwaf 1.9.0.0.0-aarch64-linux → 1.10.0.0.0-aarch64-linux

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ff74e36ec286b9de0b34d3655eb3797948c2f0b4357e7d771e80732cfecc22c8
4
- data.tar.gz: edf16261a9df81445329b7366b935f08b5f94a269e8b992088e41bc15e42021f
3
+ metadata.gz: 9325db041b0b37b5097a02ea7e15904da12514f4061507561aeab3ce5c1ae854
4
+ data.tar.gz: 9560cbb19d6e1ccdfba548bb3f7eff3bedecffcf576a0f709601669a3bbcfbdd
5
5
  SHA512:
6
- metadata.gz: a7a702c81bebe5ed3ad8d1ca7a0f0fe418c397d38124a1359cc7675b452dcb0901d0a4115bca42c10a23e28126f73fe9da22daff25f393fdb1ea21e6ed2695c7
7
- data.tar.gz: e05a9f7fb45c32c75e8947d96a3fafc778058b001ad937e71ae1ffeb5ebe5acb74962212c71ccd1e4a1edf7b47cf16d8e40a4abd2a22ba0c689ed6f8948305fb
6
+ metadata.gz: 340843766221bf15594ce39f9ae20c581a928933745c25d50ed8867b670355fd718eb6727f08988459b3487252a06533e2143cb1c65dae297dcb41c66ad4cf65
7
+ data.tar.gz: c8004738764551c117883c194c9763857a7655599e5236ca12e601c40bd0aa96a55e4dddeb5abd38f534519a528ff77bae0ef45b97201d8c9901b8e88061e4f8
data/CHANGELOG.md CHANGED
@@ -1,3 +1,14 @@
1
+ # 2023-06-13 v.1.9.0.0.1
2
+
3
+ - Handle invalid encoding
4
+ - Ensure strings passed to libddwaf are not clipped inside a code point
5
+ - Ensure strings passed to libddwaf are UTF-8
6
+
7
+ # 2023-05-17 v1.9.0.0.0
8
+
9
+ - Update to libddwaf 1.9.0
10
+ - Support [`custom_rules`](https://github.com/DataDog/libddwaf/pull/154)
11
+
1
12
  # 2023-03-03 v1.8.2.0.0
2
13
 
3
14
  - Update to libddwaf 1.8.2
@@ -2,7 +2,7 @@ module Datadog
2
2
  module AppSec
3
3
  module WAF
4
4
  module VERSION
5
- BASE_STRING = '1.9.0'
5
+ BASE_STRING = '1.10.0'
6
6
  STRING = "#{BASE_STRING}.0.0"
7
7
  MINIMUM_RUBY_VERSION = '2.1'
8
8
  end
@@ -4,6 +4,7 @@ require 'datadog/appsec/waf/version'
4
4
 
5
5
  module Datadog
6
6
  module AppSec
7
+ # rubocop:disable Metrics/ModuleLength
7
8
  module WAF
8
9
  module LibDDWAF
9
10
  class Error < StandardError
@@ -281,9 +282,9 @@ module Datadog
281
282
 
282
283
  attach_function :ddwaf_set_log_cb, [:ddwaf_log_cb, :ddwaf_log_level], :bool
283
284
 
284
- DEFAULT_MAX_CONTAINER_SIZE = 0
285
- DEFAULT_MAX_CONTAINER_DEPTH = 0
286
- DEFAULT_MAX_STRING_LENGTH = 0
285
+ DEFAULT_MAX_CONTAINER_SIZE = 256
286
+ DEFAULT_MAX_CONTAINER_DEPTH = 20
287
+ DEFAULT_MAX_STRING_LENGTH = 16_384 # in bytes, UTF-8 worst case being 4x size in terms of code point)
287
288
 
288
289
  DDWAF_MAX_CONTAINER_SIZE = 256
289
290
  DDWAF_MAX_CONTAINER_DEPTH = 20
@@ -296,6 +297,7 @@ module Datadog
296
297
  LibDDWAF.ddwaf_get_version
297
298
  end
298
299
 
300
+ # rubocop:disable Metrics/MethodLength
299
301
  def self.ruby_to_object(val, max_container_size: nil, max_container_depth: nil, max_string_length: nil, coerce: true)
300
302
  case val
301
303
  when Array
@@ -349,7 +351,8 @@ module Datadog
349
351
  obj
350
352
  when String
351
353
  obj = LibDDWAF::Object.new
352
- val = val.to_s[0, max_string_length] if max_string_length
354
+ encoded_val = val.to_s.encode('utf-8', invalid: :replace, undef: :replace)
355
+ val = encoded_val[0, max_string_length] if max_string_length
353
356
  str = val.to_s
354
357
  res = LibDDWAF.ddwaf_object_stringl(obj, str, str.bytesize)
355
358
  if res.null?
@@ -405,6 +408,7 @@ module Datadog
405
408
  ruby_to_object(''.freeze)
406
409
  end
407
410
  end
411
+ # rubocop:enable Metrics/MethodLength
408
412
 
409
413
  def self.object_to_ruby(obj)
410
414
  case obj[:type]
@@ -699,5 +703,6 @@ module Datadog
699
703
  end
700
704
  end
701
705
  end
706
+ # rubocop:enable Metrics/ModuleLength
702
707
  end
703
708
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: libddwaf
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.9.0.0.0
4
+ version: 1.10.0.0.0
5
5
  platform: aarch64-linux
6
6
  authors:
7
7
  - Datadog, Inc.
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-05-17 00:00:00.000000000 Z
11
+ date: 2023-08-28 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: ffi
@@ -42,7 +42,7 @@ files:
42
42
  - lib/datadog/appsec/waf.rb
43
43
  - lib/datadog/appsec/waf/version.rb
44
44
  - lib/libddwaf.rb
45
- - vendor/libddwaf/libddwaf-1.9.0-linux-aarch64/lib/libddwaf.so
45
+ - vendor/libddwaf/libddwaf-1.10.0-linux-aarch64/lib/libddwaf.so
46
46
  homepage: https://github.com/DataDog/libddwaf-rb
47
47
  licenses:
48
48
  - BSD-3-Clause