summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/sp_config_keywords.c13
-rw-r--r--src/tests/config/config_disabled_functions_name_type.ini2
-rw-r--r--src/tests/config/config_disabled_functions_nul_byte.ini2
-rw-r--r--src/tests/config/config_disabled_functions_param.ini12
-rw-r--r--src/tests/config/config_disabled_functions_param_allow.ini4
-rw-r--r--src/tests/config/config_disabled_functions_param_array.ini14
-rw-r--r--src/tests/config/config_disabled_functions_param_int.ini4
-rw-r--r--src/tests/config/config_disabled_functions_param_runtime.ini2
8 files changed, 32 insertions, 21 deletions
diff --git a/src/sp_config_keywords.c b/src/sp_config_keywords.c
index c5cc950..dad538c 100644
--- a/src/sp_config_keywords.c
+++ b/src/sp_config_keywords.c
@@ -336,7 +336,18 @@ int parse_disabled_functions(char *line) {
336 } 336 }
337 337
338 if (param) { 338 if (param) {
339 df->param = parse_var(param); 339 if (strlen(param) > 0) {
340 /* This is an ugly hack. We're prefixing with a `$` because otherwise
341 * the parser treats this as a constant.
342 * FIXME: Remote this, and improve our (weird) parser. */
343 char *new = pecalloc(strlen(param) + 2, 1, 1);
344 new[0] = '$';
345 memcpy(new + 1, param, strlen(param));
346 df->param = parse_var(new);
347 free(new);
348 } else {
349 df->param = parse_var(param);
350 }
340 if (!df->param) { 351 if (!df->param) {
341 sp_log_err("config", "Invalid value '%s' for `param` on line %zu.", param, 352 sp_log_err("config", "Invalid value '%s' for `param` on line %zu.", param,
342 sp_line_no); 353 sp_line_no);
diff --git a/src/tests/config/config_disabled_functions_name_type.ini b/src/tests/config/config_disabled_functions_name_type.ini
index c25b92c..25bdf98 100644
--- a/src/tests/config/config_disabled_functions_name_type.ini
+++ b/src/tests/config/config_disabled_functions_name_type.ini
@@ -1 +1 @@
sp.disable_function.function_r("^strcmp$").param("$str1").param_type("array").drop(); sp.disable_function.function_r("^strcmp$").param("str1").param_type("array").drop();
diff --git a/src/tests/config/config_disabled_functions_nul_byte.ini b/src/tests/config/config_disabled_functions_nul_byte.ini
index e664cba..9ead077 100644
--- a/src/tests/config/config_disabled_functions_nul_byte.ini
+++ b/src/tests/config/config_disabled_functions_nul_byte.ini
@@ -1 +1 @@
sp.disable_function.function("system").param("$command").value_r("id").drop(); sp.disable_function.function("system").param("command").value_r("id").drop();
diff --git a/src/tests/config/config_disabled_functions_param.ini b/src/tests/config/config_disabled_functions_param.ini
index dc1c949..87f1b3c 100644
--- a/src/tests/config/config_disabled_functions_param.ini
+++ b/src/tests/config/config_disabled_functions_param.ini
@@ -1,6 +1,6 @@
1sp.disable_function.function("system").param("$command").value_r("^id$").alias("1").drop(); 1sp.disable_function.function("system").param("command").value_r("^id$").alias("1").drop();
2sp.disable_function.function("array_sum").param("$array").value_r("^8$").alias("2").drop(); 2sp.disable_function.function("array_sum").param("array").value_r("^8$").alias("2").drop();
3sp.disable_function.function("shell_exec").param("$cmd").value("id").alias("3").drop(); 3sp.disable_function.function("shell_exec").param("cmd").value("id").alias("3").drop();
4sp.disable_function.function("shell_exec").param("$cmd").value("bla").alias("4").drop(); 4sp.disable_function.function("shell_exec").param("cmd").value("bla").alias("4").drop();
5sp.disable_function.function("strcmp").param("$str1").value("bla").alias("5").drop().simulation(); 5sp.disable_function.function("strcmp").param("str1").value("bla").alias("5").drop().simulation();
6sp.disable_function.function("strncmp").param("$str1").value("bla").drop().simulation(); 6sp.disable_function.function("strncmp").param("str1").value("bla").drop().simulation();
diff --git a/src/tests/config/config_disabled_functions_param_allow.ini b/src/tests/config/config_disabled_functions_param_allow.ini
index 27d919a..8e139e4 100644
--- a/src/tests/config/config_disabled_functions_param_allow.ini
+++ b/src/tests/config/config_disabled_functions_param_allow.ini
@@ -1,3 +1,3 @@
1sp.disable_function.function("system").param("$command").value("echo win").filename("/test.php").drop(); 1sp.disable_function.function("system").param("command").value("echo win").filename("/test.php").drop();
2sp.disable_function.function("system").param("$command").value("echo win").allow(); 2sp.disable_function.function("system").param("command").value("echo win").allow();
3sp.disable_function.function("system").drop(); 3sp.disable_function.function("system").drop();
diff --git a/src/tests/config/config_disabled_functions_param_array.ini b/src/tests/config/config_disabled_functions_param_array.ini
index 6fe0615..f676d76 100644
--- a/src/tests/config/config_disabled_functions_param_array.ini
+++ b/src/tests/config/config_disabled_functions_param_array.ini
@@ -1,7 +1,7 @@
1sp.disable_function.function("foo").param("$arr[a]").value("abcd").alias("1").drop(); 1sp.disable_function.function("foo").param("arr[a]").value("abcd").alias("1").drop();
2sp.disable_function.function("foo").param("$arr[bla]").value("abcdef").alias("2").drop(); 2sp.disable_function.function("foo").param("arr[bla]").value("abcdef").alias("2").drop();
3sp.disable_function.function("foo").param("$arr[test]").alias("3").drop(); 3sp.disable_function.function("foo").param("arr[test]").alias("3").drop();
4sp.disable_function.function("foo").param("$arr[test2][foo]").value("aaa").alias("4").drop(); 4sp.disable_function.function("foo").param("arr[test2][foo]").value("aaa").alias("4").drop();
5sp.disable_function.function("foo").param("$arr[test2][bar]").key("lol").alias("5").drop(); 5sp.disable_function.function("foo").param("arr[test2][bar]").key("lol").alias("5").drop();
6sp.disable_function.function("foo").param("$arr[test2][bar]").key("123").alias("6").drop(); 6sp.disable_function.function("foo").param("arr[test2][bar]").key("123").alias("6").drop();
7sp.disable_function.function("foo").param("$qwe[a]").value("abcd").alias("7").drop(); 7sp.disable_function.function("foo").param("qwe[a]").value("abcd").alias("7").drop();
diff --git a/src/tests/config/config_disabled_functions_param_int.ini b/src/tests/config/config_disabled_functions_param_int.ini
index 2a7d962..1c93c2f 100644
--- a/src/tests/config/config_disabled_functions_param_int.ini
+++ b/src/tests/config/config_disabled_functions_param_int.ini
@@ -1,2 +1,2 @@
1sp.disable_function.function("foobar").param("$id").value("42").drop(); 1sp.disable_function.function("foobar").param("id").value("42").drop();
2sp.disable_function.function("foobar").param("$id").value_r("^1337").drop(); 2sp.disable_function.function("foobar").param("id").value_r("^1337").drop();
diff --git a/src/tests/config/config_disabled_functions_param_runtime.ini b/src/tests/config/config_disabled_functions_param_runtime.ini
index e9d44a2..e7a011f 100644
--- a/src/tests/config/config_disabled_functions_param_runtime.ini
+++ b/src/tests/config/config_disabled_functions_param_runtime.ini
@@ -1 +1 @@
sp.disable_function.function("test").param("$param").value_r("1337").drop(); sp.disable_function.function("test").param("param").value_r("1337").drop();