Skip to content

Update SQLi/XSS operators for libinjection v4.0.0 cleaned #1610

Update SQLi/XSS operators for libinjection v4.0.0 cleaned

Update SQLi/XSS operators for libinjection v4.0.0 cleaned #1610

Triggered via pull request April 1, 2026 20:41
Status Success
Total duration 15m 23s
Artifacts

ci.yml

on: pull_request
Matrix: build-linux
Matrix: build-macos
Matrix: build-windows
Fit to window
Zoom out
Zoom in

Annotations

74 warnings
Linux (x32, gcc, wo libxml)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo libxml)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, wo curl)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo curl)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, wo lua)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo lua)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, with pcre)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, with pcre)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, with lmdb)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, with lmdb)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, wo maxmind)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, wo maxmind)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Linux (x32, gcc, with parser generation)
‘__builtin___snprintf_chk’ output may be truncated before the last format character [-Wformat-truncation=]
Linux (x32, gcc, with parser generation)
‘%x’ directive output may be truncated writing between 1 and 6 bytes into a region of size 4 [-Wformat-truncation=]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, full)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocoabde7a8681c74\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, full)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocoabde7a8681c74\b\build\Net\Net.vcxproj]
Windows (x64, full)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocoabde7a8681c74\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, full)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocoabde7a8681c74\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo libxml)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocofaeec96feda1b\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo libxml)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocofaeec96feda1b\b\build\Net\Net.vcxproj]
Windows (x64, wo libxml)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocofaeec96feda1b\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo libxml)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocofaeec96feda1b\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo curl)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco939807fe802f2\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo curl)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco939807fe802f2\b\build\Net\Net.vcxproj]
Windows (x64, wo curl)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco939807fe802f2\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo curl)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco939807fe802f2\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo maxmind)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pococ004007aff5b3\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo maxmind)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pococ004007aff5b3\b\build\Net\Net.vcxproj]
Windows (x64, wo maxmind)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pococ004007aff5b3\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo maxmind)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pococ004007aff5b3\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, wo lua)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco93899d164da9e\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, wo lua)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco93899d164da9e\b\build\Net\Net.vcxproj]
Windows (x64, wo lua)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco93899d164da9e\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, wo lua)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco93899d164da9e\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L585
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L560
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L342
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L290
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L245
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb): others/libinjection/src/libinjection_html5.c#L209
'=': incompatible types - from 'injection_result_t (__cdecl *)(h5_state_t *)' to 'ptr_html5_state' [D:\a\ModSecurity\ModSecurity\build\win32\build\libinjection.vcxproj]
Windows (x64, with lmdb)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco6d93064f553b5\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, with lmdb)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco6d93064f553b5\b\build\Net\Net.vcxproj]
Windows (x64, with lmdb)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco6d93064f553b5\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco6d93064f553b5\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]