Skip to content

Update SQLi/XSS operators for libinjection v4.0.0 cleaned #1703

Update SQLi/XSS operators for libinjection v4.0.0 cleaned

Update SQLi/XSS operators for libinjection v4.0.0 cleaned #1703

Triggered via pull request April 14, 2026 15:50
Status Success
Total duration 41m 12s
Artifacts

ci.yml

on: pull_request
Matrix: build-linux
Matrix: build-macos
Matrix: build-windows
Fit to window
Zoom out
Zoom in

Annotations

74 warnings
Linux (x32, gcc, with pcre)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, with pcre)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, with lmdb)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, with lmdb)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, wo lua)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo lua)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, wo curl)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo curl)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, wo maxmind)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo maxmind)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, with parser generation)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, with parser generation)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco1a6be89ad826e\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo curl)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco1a6be89ad826e\b\build\Net\Net.vcxproj]
Windows (x64, wo curl)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco1a6be89ad826e\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo curl)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco1a6be89ad826e\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocob92549b74486b\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, full)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocob92549b74486b\b\build\Net\Net.vcxproj]
Windows (x64, full)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocob92549b74486b\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, full)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocob92549b74486b\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco5965b889333d0\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo maxmind)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco5965b889333d0\b\build\Net\Net.vcxproj]
Windows (x64, wo maxmind)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco5965b889333d0\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo maxmind)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco5965b889333d0\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocod8f8549e2e729\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, with lmdb)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocod8f8549e2e729\b\build\Net\Net.vcxproj]
Windows (x64, with lmdb)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocod8f8549e2e729\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocod8f8549e2e729\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco58c525326ab1f\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo lua)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco58c525326ab1f\b\build\Net\Net.vcxproj]
Windows (x64, wo lua)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco58c525326ab1f\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo lua)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco58c525326ab1f\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocob652a554dc53d\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo libxml)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocob652a554dc53d\b\build\Net\Net.vcxproj]
Windows (x64, wo libxml)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocob652a554dc53d\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo libxml)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocob652a554dc53d\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Linux (x32, gcc, wo libxml)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo libxml)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]