niceSOFT/libmodsecurity: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

apache2/msc_xml.h

67 строк2 KB

Ervin Hegedus

Fix libxml2 related deprecated issues

28 окт 2025, 21:24

28 окт 2025, 21:240f62dd9

/*
* ModSecurity for Apache 2.x, http://www.modsecurity.org/
* Copyright (c) 2004-2013 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License.  You may obtain a copy of the License at
*
*     http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*/

#ifndef _MSC_XML_H_
#define _MSC_XML_H_

typedef struct xml_data xml_data;

#include "modsecurity.h"
#include <libxml/xmlschemas.h>
#include <libxml/xpath.h>
#include <libxml/SAX2.h>

/* Structures */

struct msc_xml_parser_state {
    apr_array_header_t * has_child_stack;
    unsigned int         depth;
    unsigned int         pathlen;
    char               * currpath;
    char               * currval;
    size_t               currpathbufflen;
    size_t               currvalbufflen;
    apr_pool_t         * mp;
};

typedef struct msc_xml_parser_state msc_xml_parser_state;

struct xml_data {
    xmlSAXHandler           *sax_handler;
    xmlParserCtxtPtr        parsing_ctx;
    xmlDocPtr               doc;

    unsigned int            well_formed;

    /* error reporting and XML array flag */
    char                   *xml_error;

    /* additional parser context for arguments */
    xmlParserCtxtPtr        parsing_ctx_arg;
    /* parser state for SAX parser */
    msc_xml_parser_state    *xml_parser_state;
};

/* Functions */

int DSOLOCAL xml_init(modsec_rec *msr, char **error_msg);

int DSOLOCAL xml_process_chunk(modsec_rec *msr, const char *buf,
    unsigned int size, char **error_msg);

int DSOLOCAL xml_complete(modsec_rec *msr, char **error_msg);

apr_status_t DSOLOCAL xml_cleanup(modsec_rec *msr);

#endif