[patch] patch for login issue

gsad-21.4.4-r1-fix-PCRE2-user-validation-regex.patch (text/plain), 2.98 KB, created by Giuseppe Foti on 2023-05-01 10:15:25 UTC

diff -ruN a/src/gsad.c b/src/gsad.c
--- a/src/gsad.c	2022-02-22 12:49:28.000000000 +0100
+++ b/src/gsad.c	2023-05-01 11:43:14.643964620 +0200
@@ -478,7 +478,7 @@
   gvm_validator_add (validator, "asset_name", "(?s)^.*$");
   gvm_validator_add (validator, "asset_type", "^(host|os)$");
   gvm_validator_add (validator, "asset_id",
-                     "^([[:alnum:]-_.:\\/~()']|&)+$");
+                     "^([[:alnum:]\\-_.:\\/~()']|&)+$");
   gvm_validator_add (validator, "auth_algorithm", "^(md5|sha1)$");
   gvm_validator_add (validator, "auth_method", "^(0|1|2)$");
   /* Defined in RFC 2253. */
@@ -595,7 +595,7 @@
   gvm_validator_add (validator, "list_fname",
                      "^([[:alnum:]_-]|%[%CcDFMmNTtUu])+$");
   /* Used for users, credentials, and scanner login name. */
-  gvm_validator_add (validator, "login", "^[[:alnum:]-_@.]+$");
+  gvm_validator_add (validator, "login", "^[[:alnum:]\\-_@.]+$");
   gvm_validator_add (validator, "lsc_password", "^.*$");
   gvm_validator_add (validator, "max_result", "^[0-9]+$");
   gvm_validator_add (validator, "max_groups", "^-?[0-9]+$");
@@ -605,10 +605,11 @@
   gvm_validator_add (validator, "note_required", "(?s)^(.)+$");
   gvm_validator_add (validator, "note_id", "^[a-z0-9\\-]+$");
   gvm_validator_add (validator, "override_id", "^[a-z0-9\\-]+$");
-  gvm_validator_add (validator, "name", "^[#-_[:alnum:], \\./]*$");
+  gvm_validator_add (validator, "name", "^[#\\-_[:alnum:], \\./]*$");
   gvm_validator_add (validator, "info_name", "(?s)^.*$");
   gvm_validator_add (validator, "info_type", "(?s)^.*$");
-  gvm_validator_add (validator, "info_id", "^([[:alnum:]-_.:\\/~()']|&)+$");
+  gvm_validator_add (validator, "info_id",
+                     "^([[:alnum:]\\-_.:\\/~()']|&)+$");
   gvm_validator_add (validator, "details", "^[0-1]$");
   /* Number is special cased in params_mhd_validate to remove the space. */
   gvm_validator_add (validator, "number", "^ *[0-9]+ *$");
@@ -660,7 +661,7 @@
     "filter|group|host|info|nvt|note|os|ovaldef|override|permission|port_list|"
     "report|report_format|result|role|scanner|schedule|tag|target|task|ticket|"
     "tls_certificate|user|vuln|)$");
-  gvm_validator_add (validator, "resource_id", "^[[:alnum:]-_.:\\/~]*$");
+  gvm_validator_add (validator, "resource_id", "^[[:alnum:]\\-_.:\\/~]*$");
   gvm_validator_add (validator, "resources_action", "^(|add|set|remove)$");
   gvm_validator_add (
     validator, "optional_resource_type",
@@ -721,7 +722,7 @@
   gvm_validator_add (validator, "uuid", "^[0-9abcdefABCDEF\\-]{1,40}$");
   gvm_validator_add (validator, "usage_type", "^(audit|policy|scan|)$");
   /* This must be "login" with space and comma. */
-  gvm_validator_add (validator, "users", "^[[:alnum:]-_@., ]*$");
+  gvm_validator_add (validator, "users", "^[[:alnum:]\\-_@., ]*$");
   gvm_validator_add (validator, "x_field", "^[\\[\\]_[:alnum:]]+$");
   gvm_validator_add (validator, "y_fields:name", "^[0-9]+$");
   gvm_validator_add (validator, "y_fields:value", "^[\\[\\]_[:alnum:]]+$");