Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Apr 2022 16:33:25 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 263197] www/nginx-devel - does not build with mod_security anymore?
Message-ID:  <bug-263197-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263197

            Bug ID: 263197
           Summary: www/nginx-devel - does not build with mod_security
                    anymore?
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: osa@FreeBSD.org
          Reporter: rainer@ultra-secure.de
             Flags: maintainer-feedback?(osa@FreeBSD.org)
          Assignee: osa@FreeBSD.org

Hi,

I wanted to try out nginx-devel and see how far its QUIC-support has come.


# This file is auto-generated by 'make config'.
# Options for nginx-devel-1.21.6_7
_OPTIONS_READ=3Dnginx-devel-1.21.6_7
_FILE_COMPLETE_OPTIONS_LIST=3DDEBUG DEBUGLOG DSO FILE_AIO IPV6 NJS THREADS =
WWW
PCRE_ONE PCRE_TWO GOOGLE_PERFTOOLS HTTP HTTP_ADDITION HTTP_AUTH_REQ  HTTP_C=
ACHE
HTTP_DAV HTTP_DEGRADATION HTTP_FLV HTTP_GUNZIP_FILTER  HTTP_GZIP_STATIC
HTTP_IMAGE_FILTER HTTP_MP4 HTTP_PERL  HTTP_RANDOM_INDEX HTTP_REALIP
HTTP_SECURE_LINK HTTP_SLICE HTTP_SSL  HTTP_STATUS HTTP_SUB HTTP_XSLT HTTPV2
HTTPV3 HTTPV3_BORING HTTPV3_QTLS MAIL MAIL_IMAP MAIL_POP3 MAIL_SMTP MAIL_SSL
STREAM STREAM_REALIP STREAM_SSL  STREAM_SSL_PREREAD AJP AWS_AUTH BROTLI
CACHE_PURGE CLOJURE COOKIE_FLAG CT  DEVEL_KIT ARRAYVAR DRIZZLE DYNAMIC_HC
DYNAMIC_UPSTREAM ECHO ENCRYPTSESSION  FORMINPUT GRIDFS HEADERS_MORE
HTTP_ACCEPT_LANGUAGE HTTP_AUTH_DIGEST  HTTP_AUTH_KRB5 HTTP_AUTH_LDAP
HTTP_AUTH_PAM HTTP_DAV_EXT HTTP_EVAL  HTTP_FANCYINDEX HTTP_FOOTER HTTP_GEOI=
P2
HTTP_IP2LOCATION HTTP_IP2PROXY  HTTP_JSON_STATUS HTTP_MOGILEFS HTTP_MP4_H264
HTTP_NOTICE HTTP_PUSH  HTTP_PUSH_STREAM HTTP_REDIS HTTP_RESPONSE
HTTP_SLICE_AHEAD  HTTP_SUBS_FILTER HTTP_TARANTOOL HTTP_UPLOAD
HTTP_UPLOAD_PROGRESS  HTTP_UPSTREAM_CHECK HTTP_UPSTREAM_FAIR
HTTP_UPSTREAM_STICKY  HTTP_VIDEO_THUMBEXTRACTOR HTTP_ZIP ICONV LET LINK LUA
MEMC  MODSECURITY3 NAXSI OPENTRACING PASSENGER POSTGRES RDS_CSV RDS_JSON=20
REDIS2 RTMP SET_MISC SFLOW SHIBBOLETH SLOWFS_CACHE SMALL_LIGHT SRCACHE  VOD=
 VTS
XSS WEBSOCKIFY
OPTIONS_FILE_UNSET+=3DDEBUG
OPTIONS_FILE_UNSET+=3DDEBUGLOG
OPTIONS_FILE_UNSET+=3DDSO
OPTIONS_FILE_SET+=3DFILE_AIO
OPTIONS_FILE_SET+=3DIPV6
OPTIONS_FILE_UNSET+=3DNJS
OPTIONS_FILE_UNSET+=3DTHREADS
OPTIONS_FILE_SET+=3DWWW
OPTIONS_FILE_SET+=3DPCRE_ONE
OPTIONS_FILE_UNSET+=3DPCRE_TWO
OPTIONS_FILE_UNSET+=3DGOOGLE_PERFTOOLS
OPTIONS_FILE_SET+=3DHTTP
OPTIONS_FILE_SET+=3DHTTP_ADDITION
OPTIONS_FILE_UNSET+=3DHTTP_AUTH_REQ
OPTIONS_FILE_SET+=3DHTTP_CACHE
OPTIONS_FILE_UNSET+=3DHTTP_DAV
OPTIONS_FILE_UNSET+=3DHTTP_DEGRADATION
OPTIONS_FILE_UNSET+=3DHTTP_FLV
OPTIONS_FILE_SET+=3DHTTP_GUNZIP_FILTER
OPTIONS_FILE_UNSET+=3DHTTP_GZIP_STATIC
OPTIONS_FILE_SET+=3DHTTP_IMAGE_FILTER
OPTIONS_FILE_UNSET+=3DHTTP_MP4
OPTIONS_FILE_UNSET+=3DHTTP_PERL
OPTIONS_FILE_UNSET+=3DHTTP_RANDOM_INDEX
OPTIONS_FILE_SET+=3DHTTP_REALIP
OPTIONS_FILE_SET+=3DHTTP_SECURE_LINK
OPTIONS_FILE_UNSET+=3DHTTP_SLICE
OPTIONS_FILE_SET+=3DHTTP_SSL
OPTIONS_FILE_SET+=3DHTTP_STATUS
OPTIONS_FILE_UNSET+=3DHTTP_SUB
OPTIONS_FILE_SET+=3DHTTP_XSLT
OPTIONS_FILE_SET+=3DHTTPV2
OPTIONS_FILE_SET+=3DHTTPV3
OPTIONS_FILE_UNSET+=3DHTTPV3_BORING
OPTIONS_FILE_SET+=3DHTTPV3_QTLS
OPTIONS_FILE_UNSET+=3DMAIL
OPTIONS_FILE_UNSET+=3DMAIL_IMAP
OPTIONS_FILE_UNSET+=3DMAIL_POP3
OPTIONS_FILE_UNSET+=3DMAIL_SMTP
OPTIONS_FILE_UNSET+=3DMAIL_SSL
OPTIONS_FILE_SET+=3DSTREAM
OPTIONS_FILE_SET+=3DSTREAM_REALIP
OPTIONS_FILE_SET+=3DSTREAM_SSL
OPTIONS_FILE_SET+=3DSTREAM_SSL_PREREAD
OPTIONS_FILE_UNSET+=3DAJP
OPTIONS_FILE_UNSET+=3DAWS_AUTH
OPTIONS_FILE_SET+=3DBROTLI
OPTIONS_FILE_SET+=3DCACHE_PURGE
OPTIONS_FILE_UNSET+=3DCLOJURE
OPTIONS_FILE_UNSET+=3DCOOKIE_FLAG
OPTIONS_FILE_UNSET+=3DCT
OPTIONS_FILE_UNSET+=3DDEVEL_KIT
OPTIONS_FILE_UNSET+=3DARRAYVAR
OPTIONS_FILE_UNSET+=3DDRIZZLE
OPTIONS_FILE_UNSET+=3DDYNAMIC_HC
OPTIONS_FILE_UNSET+=3DDYNAMIC_UPSTREAM
OPTIONS_FILE_UNSET+=3DECHO
OPTIONS_FILE_UNSET+=3DENCRYPTSESSION
OPTIONS_FILE_UNSET+=3DFORMINPUT
OPTIONS_FILE_UNSET+=3DGRIDFS
OPTIONS_FILE_SET+=3DHEADERS_MORE
OPTIONS_FILE_UNSET+=3DHTTP_ACCEPT_LANGUAGE
OPTIONS_FILE_UNSET+=3DHTTP_AUTH_DIGEST
OPTIONS_FILE_UNSET+=3DHTTP_AUTH_KRB5
OPTIONS_FILE_UNSET+=3DHTTP_AUTH_LDAP
OPTIONS_FILE_UNSET+=3DHTTP_AUTH_PAM
OPTIONS_FILE_UNSET+=3DHTTP_DAV_EXT
OPTIONS_FILE_UNSET+=3DHTTP_EVAL
OPTIONS_FILE_UNSET+=3DHTTP_FANCYINDEX
OPTIONS_FILE_UNSET+=3DHTTP_FOOTER
OPTIONS_FILE_SET+=3DHTTP_GEOIP2
OPTIONS_FILE_UNSET+=3DHTTP_IP2LOCATION
OPTIONS_FILE_UNSET+=3DHTTP_IP2PROXY
OPTIONS_FILE_UNSET+=3DHTTP_JSON_STATUS
OPTIONS_FILE_UNSET+=3DHTTP_MOGILEFS
OPTIONS_FILE_SET+=3DHTTP_MP4_H264
OPTIONS_FILE_UNSET+=3DHTTP_NOTICE
OPTIONS_FILE_UNSET+=3DHTTP_PUSH
OPTIONS_FILE_UNSET+=3DHTTP_PUSH_STREAM
OPTIONS_FILE_UNSET+=3DHTTP_REDIS
OPTIONS_FILE_UNSET+=3DHTTP_RESPONSE
OPTIONS_FILE_UNSET+=3DHTTP_SLICE_AHEAD
OPTIONS_FILE_SET+=3DHTTP_SUBS_FILTER
OPTIONS_FILE_UNSET+=3DHTTP_TARANTOOL
OPTIONS_FILE_UNSET+=3DHTTP_UPLOAD
OPTIONS_FILE_UNSET+=3DHTTP_UPLOAD_PROGRESS
OPTIONS_FILE_SET+=3DHTTP_UPSTREAM_CHECK
OPTIONS_FILE_SET+=3DHTTP_UPSTREAM_FAIR
OPTIONS_FILE_SET+=3DHTTP_UPSTREAM_STICKY
OPTIONS_FILE_UNSET+=3DHTTP_VIDEO_THUMBEXTRACTOR
OPTIONS_FILE_UNSET+=3DHTTP_ZIP
OPTIONS_FILE_UNSET+=3DICONV
OPTIONS_FILE_UNSET+=3DLET
OPTIONS_FILE_UNSET+=3DLINK
OPTIONS_FILE_UNSET+=3DLUA
OPTIONS_FILE_UNSET+=3DMEMC
OPTIONS_FILE_SET+=3DMODSECURITY3
OPTIONS_FILE_UNSET+=3DNAXSI
OPTIONS_FILE_UNSET+=3DOPENTRACING
OPTIONS_FILE_UNSET+=3DPASSENGER
OPTIONS_FILE_UNSET+=3DPOSTGRES
OPTIONS_FILE_UNSET+=3DRDS_CSV
OPTIONS_FILE_UNSET+=3DRDS_JSON
OPTIONS_FILE_UNSET+=3DREDIS2
OPTIONS_FILE_UNSET+=3DRTMP
OPTIONS_FILE_UNSET+=3DSET_MISC
OPTIONS_FILE_UNSET+=3DSFLOW
OPTIONS_FILE_UNSET+=3DSHIBBOLETH
OPTIONS_FILE_UNSET+=3DSLOWFS_CACHE
OPTIONS_FILE_UNSET+=3DSMALL_LIGHT
OPTIONS_FILE_UNSET+=3DSRCACHE
OPTIONS_FILE_UNSET+=3DVOD
OPTIONS_FILE_UNSET+=3DVTS
OPTIONS_FILE_UNSET+=3DXSS
OPTIONS_FILE_UNSET+=3DWEBSOCKIFY


However, it does not build:

cc -c -O2 -pipe  -I/usr/local/include -fstack-protector-strong
-fno-strict-aliasing  -DLARGEFILE_SOURCE -DBUILDING_NGINX
-Wno-deprecated-declarations  -I src/core  -I src/event  -I src/event/modul=
es=20
-I src/event/quic  -I src/os/unix  -I
/wrkdirs/usr/ports/www/nginx-devel/work/nginx_upstream_check_module-9aecf15=
  -I
/usr/local/include/libxml2  -I /usr/local/include  -I objs  -I src/http  -I
src/http/modules  -I src/http/v2  -I src/http/v3  -I /usr/local/include  -I
/wrkdirs/usr/ports/www/nginx-devel/work/nginx_upstream_check_module-9aecf15=
  -I
src/stream  -o objs/addon/src/ngx_http_modsecurity_module.o=20
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c:78:9:
error: use of undeclared identifier 'pcre_malloc'
    if (pcre_malloc !=3D ngx_http_modsec_pcre_malloc) {
        ^
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c:81:27:
error: use of undeclared identifier 'pcre_malloc'
        old_pcre_malloc =3D pcre_malloc;
                          ^
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c:82:25:
error: use of undeclared identifier 'pcre_free'
        old_pcre_free =3D pcre_free;
                        ^
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c:84:9:
error: use of undeclared identifier 'pcre_malloc'
        pcre_malloc =3D ngx_http_modsec_pcre_malloc;
        ^
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c:85:9:
error: use of undeclared identifier 'pcre_free'
        pcre_free =3D ngx_http_modsec_pcre_free;
        ^
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c:102:9:
error: use of undeclared identifier 'pcre_malloc'
        pcre_malloc =3D old_pcre_malloc;
        ^
/wrkdirs/usr/ports/www/nginx-devel/work/ModSecurity-nginx-1.0.2/src/ngx_htt=
p_modsecurity_module.c:103:9:
error: use of undeclared identifier 'pcre_free'
        pcre_free =3D old_pcre_free;
        ^
7 errors generated.
*** Error code 1

Stop.
make[2]: stopped in /wrkdirs/usr/ports/www/nginx-devel/work/nginx-1.21.6
*** Error code 1

Stop.
make[1]: stopped in /wrkdirs/usr/ports/www/nginx-devel/work/nginx-1.21.6
*** Error code 1

Stop.
make: stopped in /usr/ports/www/nginx-devel
=3D>> Cleaning up wrkdir
=3D=3D=3D>  Cleaning for nginx-devel-1.21.6_7


(12.3-amd64, 2022Q2 ports tree).


regardless whether I use PCRE_ONE or PCRE_TWO.


Maybe it's a mod_security issue?

https://githubhot.com/repo/SpiderLabs/ModSecurity-nginx/issues/261


Also, it seems that some options like HTTP_ADDITION, HTTP_GUNZIP_FILTER and
HTTP_IMAGE_FILTER are always set in the options-file, even if I deselect th=
em
(in make config).
Is that intentional?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263197-7788>