libddwaf 1.5.1.0.0-x86_64-darwin → 1.5.1.0.1-x86_64-darwin

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a35c1c6b48d5a2f652a9e726e8651ac2dcd82d91e875f859c511d7a096b1ef05
-  data.tar.gz: 7cbec901402fb39d79a84dcd01bf6b5739c5f11f8e6c3ae9d43ffc9c6d7310cd
+  metadata.gz: e0a596d9f94ee5aed556adfa96b6e005e5e49754c4bbcfb9b58becc61e97fd41
+  data.tar.gz: 7c4d3f254272fcca470bb6d6d57c4b08ee9a7af6dc0a3e8a691d73399ed2eab1
 SHA512:
-  metadata.gz: 4a3f7f7b47d3fd5de075d22cc749998611f79b688012494a979ef5435a6785bfd5dfc198e970f33224ae0ad8669b4f76b76c56fd3cdff1fc0f861c4e037b245c
-  data.tar.gz: 5f81bd74f5f95f74fcab502d38de48de621a45fe7f1da4c1854f61c6f9a57171288ede0ff61490963c692f3929de1c610b613d3dd4fe71882f12ae62d1950af9
+  metadata.gz: c39d0828579f5d75ccdf6bd73e986fde409abdb0aa82d47fe8a667efa79e316c109fd65691471718fc0e2dc03ef6f6aea5b36b4518cdd9cd8149760372f86f60
+  data.tar.gz: '085b54fe799d706da464a5b4488d25c2b2e3529d1db235d1900a5b0e0567f0f92c12246d51350b1a6e97dfcc83a4a655794c2bfc498295535179483d54be6d65'

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+# 2023-02-01 v1.5.1.0.1
+
+- Fix incorrect size in input string limit
+- Fix object freeing on `update_rule_data` and `toggle_rules`
+
 # 2022-10-04 v1.5.1.0.0
 
 - Update to libddwaf 1.5.1

data/lib/datadog/appsec/waf/version.rb

@@ -3,7 +3,7 @@ module Datadog
     module WAF
       module VERSION
         BASE_STRING = '1.5.1'
-        STRING = "#{BASE_STRING}.0.0"
+        STRING = "#{BASE_STRING}.0.1"
         MINIMUM_RUBY_VERSION = '2.1'
       end
     end

data/lib/datadog/appsec/waf.rb

@@ -203,8 +203,8 @@ module Datadog
           end
 
           class Obfuscator < ::FFI::Struct
-            layout :key_regex,   :pointer, # :charptr
-                   :value_regex, :pointer  # :charptr
+            layout :key_regex,   :pointer, # should be :charptr
+                   :value_regex, :pointer  # should be :charptr
           end
 
           layout :limits,     Limits,
@@ -539,15 +539,21 @@ module Datadog
         end
 
         def update_rule_data(data)
-          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_update_rule_data(@handle_obj, Datadog::AppSec::WAF.ruby_to_object(data, coerce: false))
+          data_obj = Datadog::AppSec::WAF.ruby_to_object(data, coerce: false)
+          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_update_rule_data(@handle_obj, data_obj)
 
           RESULT_CODE[res]
+        ensure
+          Datadog::AppSec::WAF::LibDDWAF.ddwaf_object_free(data_obj) if data_obj
         end
 
         def toggle_rules(map)
-          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_toggle_rules(@handle_obj, Datadog::AppSec::WAF.ruby_to_object(map, coerce: false))
+          map_obj = Datadog::AppSec::WAF.ruby_to_object(map, coerce: false)
+          res = Datadog::AppSec::WAF::LibDDWAF.ddwaf_toggle_rules(@handle_obj, map_obj)
 
           RESULT_CODE[res]
+        ensure
+          Datadog::AppSec::WAF::LibDDWAF.ddwaf_object_free(map_obj) if map_obj
         end
 
         private
@@ -627,7 +633,7 @@ module Datadog
 
           max_container_size  = LibDDWAF::DDWAF_MAX_CONTAINER_SIZE
           max_container_depth = LibDDWAF::DDWAF_MAX_CONTAINER_DEPTH
-          max_string_length   = LibDDWAF::DDWAF_MAX_CONTAINER_SIZE
+          max_string_length   = LibDDWAF::DDWAF_MAX_STRING_LENGTH
 
           input_obj = Datadog::AppSec::WAF.ruby_to_object(input,
                                                           max_container_size: max_container_size,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libddwaf
 version: !ruby/object:Gem::Version
-  version: 1.5.1.0.0
+  version: 1.5.1.0.1
 platform: x86_64-darwin
 authors:
 - Datadog, Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-10-04 00:00:00.000000000 Z
+date: 2023-02-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi
@@ -63,7 +63,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.0.0
 requirements: []
-rubygems_version: 3.3.22
+rubygems_version: 3.4.4
 signing_key:
 specification_version: 4
 summary: Datadog WAF