# HG changeset patch # User Maxim Dounin # Date 1640383638 -10800 # Node ID d07456044b611848abe244d65b585159037f8980 # Parent fbbb5ce5299597fcf7bb502d871a65c75cdb86b5 Core: added NGX_REGEX_MULTILINE for 3rd party modules. Notably, NAXSI is known to misuse ngx_regex_compile() with rc.options set to PCRE_CASELESS | PCRE_MULTILINE. With PCRE2 support, and notably binary compatibility changes, it is no longer possible to set PCRE[2]_MULTILINE option without using proper interface. To facilitate correct usage, this change adds the NGX_REGEX_MULTILINE option. diff -r fbbb5ce52995 -r d07456044b61 src/core/ngx_regex.c --- a/src/core/ngx_regex.c Sat Dec 25 01:07:16 2021 +0300 +++ b/src/core/ngx_regex.c Sat Dec 25 01:07:18 2021 +0300 @@ -159,7 +159,11 @@ options |= PCRE2_CASELESS; } - if (rc->options & ~NGX_REGEX_CASELESS) { + if (rc->options & NGX_REGEX_MULTILINE) { + options |= PCRE2_MULTILINE; + } + + if (rc->options & ~(NGX_REGEX_CASELESS|NGX_REGEX_MULTILINE)) { rc->err.len = ngx_snprintf(rc->err.data, rc->err.len, "regex \"%V\" compilation failed: invalid options", &rc->pattern) @@ -275,7 +279,11 @@ options |= PCRE_CASELESS; } - if (rc->options & ~NGX_REGEX_CASELESS) { + if (rc->options & NGX_REGEX_MULTILINE) { + options |= PCRE_MULTILINE; + } + + if (rc->options & ~(NGX_REGEX_CASELESS|NGX_REGEX_MULTILINE)) { rc->err.len = ngx_snprintf(rc->err.data, rc->err.len, "regex \"%V\" compilation failed: invalid options", &rc->pattern) diff -r fbbb5ce52995 -r d07456044b61 src/core/ngx_regex.h --- a/src/core/ngx_regex.h Sat Dec 25 01:07:16 2021 +0300 +++ b/src/core/ngx_regex.h Sat Dec 25 01:07:18 2021 +0300 @@ -37,6 +37,7 @@ #define NGX_REGEX_CASELESS 0x00000001 +#define NGX_REGEX_MULTILINE 0x00000002 typedef struct {