Skip to content

Update SQLi/XSS operators for libinjection v4.0.0 #38

Update SQLi/XSS operators for libinjection v4.0.0

Update SQLi/XSS operators for libinjection v4.0.0 #38

Triggered via pull request March 28, 2026 17:15
Status Failure
Total duration 18m 33s
Artifacts

ci_new.yml

on: pull_request
Static analysis (cppcheck)
15m 52s
Static analysis (cppcheck)
Static analysis (cppcheck, Linux, debian:sid)
18m 27s
Static analysis (cppcheck, Linux, debian:sid)
Matrix: build-linux
Matrix: build-macos
Matrix: build-windows
Fit to window
Zoom out
Zoom in

Annotations

45 errors and 60 warnings
macOS (with lmdb)
Process completed with exit code 2.
macOS (with lmdb)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (with pcre2 (default))
Process completed with exit code 2.
macOS (with pcre2 (default))
use of undeclared identifier 'LUA_ERRGCMM'
macOS (without geoip)
Process completed with exit code 2.
macOS (without geoip)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (with pcre)
Process completed with exit code 2.
macOS (with pcre)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (without libxml)
Process completed with exit code 2.
macOS (without libxml)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (with parser generation)
Process completed with exit code 2.
macOS (with parser generation)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (without curl)
Process completed with exit code 2.
macOS (without curl)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (without ssdeep)
Process completed with exit code 2.
macOS (without ssdeep)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (without maxmind)
Process completed with exit code 2.
macOS (without maxmind)
use of undeclared identifier 'LUA_ERRGCMM'
macOS (without lua)
Process completed with exit code 2.
Linux (x64, gcc, without lua)
Process completed with exit code 2.
Linux (x64, gcc, with lmdb)
Process completed with exit code 2.
Linux (x64, gcc, without curl)
Process completed with exit code 2.
Linux (x64, gcc, without maxmind)
Process completed with exit code 2.
Linux (x64, gcc, with pcre2 (default))
Process completed with exit code 2.
Linux (x64, gcc, without libxml)
Process completed with exit code 2.
Linux (x64, gcc, with pcre)
Process completed with exit code 2.
Linux (x64, gcc, without ssdeep)
Process completed with exit code 2.
Linux (x64, gcc, without geoip)
Process completed with exit code 2.
Linux (x64, clang, without ssdeep)
Process completed with exit code 2.
Linux (x64, clang, without curl)
Process completed with exit code 2.
Linux (x64, clang, with parser generation)
Process completed with exit code 2.
Linux (x64, clang, with pcre2 (default))
Process completed with exit code 2.
Linux (x64, gcc, with parser generation)
Process completed with exit code 2.
Linux (x64, clang, with pcre)
Process completed with exit code 2.
Linux (x64, clang, without lua)
Process completed with exit code 2.
Linux (x64, clang, without libxml)
Process completed with exit code 2.
Linux (x64, clang, without geoip)
Process completed with exit code 2.
Linux (x64, clang, without maxmind)
Process completed with exit code 2.
Linux (x64, clang, with lmdb)
Process completed with exit code 2.
Windows (x64, without libxml)
Process completed with exit code 1.
Windows (x64, with lmdb)
Process completed with exit code 1.
Windows (x64, without lua)
Process completed with exit code 1.
Windows (x64, without maxmind)
Process completed with exit code 1.
Windows (x64, full)
Process completed with exit code 1.
Windows (x64, without curl)
Process completed with exit code 1.
Windows (x64, without libxml): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without libxml): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without libxml): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without libxml): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without libxml): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without libxml): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without libxml)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco63b7c09935ee4\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without libxml)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco63b7c09935ee4\b\build\Net\Net.vcxproj]
Windows (x64, without libxml)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco63b7c09935ee4\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without libxml)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco63b7c09935ee4\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco45b6c4ab55382\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, with lmdb)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco45b6c4ab55382\b\build\Net\Net.vcxproj]
Windows (x64, with lmdb)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco45b6c4ab55382\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco45b6c4ab55382\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without lua): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without lua): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without lua): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without lua): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without lua): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without lua): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without lua)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocoa2498514c06f5\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without lua)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocoa2498514c06f5\b\build\Net\Net.vcxproj]
Windows (x64, without lua)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocoa2498514c06f5\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without lua)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocoa2498514c06f5\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without maxmind): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without maxmind): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without maxmind): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without maxmind): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without maxmind): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without maxmind): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without maxmind)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocoa3a4135e89120\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without maxmind)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocoa3a4135e89120\b\build\Net\Net.vcxproj]
Windows (x64, without maxmind)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocoa3a4135e89120\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without maxmind)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocoa3a4135e89120\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco54eb0653b2ca4\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, full)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco54eb0653b2ca4\b\build\Net\Net.vcxproj]
Windows (x64, full)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco54eb0653b2ca4\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, full)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco54eb0653b2ca4\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without curl): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without curl): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without curl): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without curl): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without curl): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without curl): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, without curl)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco525b5844b7bcb\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without curl)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco525b5844b7bcb\b\build\Net\Net.vcxproj]
Windows (x64, without curl)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco525b5844b7bcb\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without curl)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco525b5844b7bcb\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]