Skip to content

fix: heap buffer overflow in acmp pm #130

fix: heap buffer overflow in acmp pm

fix: heap buffer overflow in acmp pm #130

Triggered via pull request April 20, 2026 17:55
Status Success
Total duration 8m 40s
Artifacts 6

test-ci-windows.yml

on: pull_request
Matrix: build
Matrix: package
Matrix: test
Fit to window
Zoom out
Zoom in

Annotations

48 warnings
build (x64, RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L757
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L237
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L217
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/mod_security2.c#L1220
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/mod_security2.c#L346
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/mod_security2.c#L199
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x86, Release): apache2/apache2_config.c#L1494
'getcwd': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _getcwd. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1436
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1408
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1386
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1384
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1367
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1494
'getcwd': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _getcwd. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1436
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1408
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1386
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1384
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1367
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x64, Release): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L757
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L237
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L217
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/mod_security2.c#L1220
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/mod_security2.c#L346
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/mod_security2.c#L199
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
package (RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
package (Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
test (Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
test (RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
iis-module-x64-RelWithDebInfo
3.94 MB
sha256:34e6a4220c62f23d702a1472f2d871187a5c18c122832565484797d13fe9f18f
iis-module-x64-Release
2.77 MB
sha256:02a8860a2bf274d21338f8cb6c926306ef7f62c8615bf9a48c1c1808f9afc953
iis-module-x86-RelWithDebInfo
3.69 MB
sha256:6f7dbb43a1eac15dd2bbcbb5cb42c7737d89cc5c27ab5792d819ccb670b3b6d8
iis-module-x86-Release
2.51 MB
sha256:c38a637b0bcf35a4764900389a710ca0943397c6f8cc6e264efb8a29d08a5ef4
modsecurityiis-installers-RelWithDebInfo
10.5 MB
sha256:6875c20d61587d594bf13f40431ad98618b5500a92bf8bc87c576864bf6d7328
modsecurityiis-installers-Release
8.21 MB
sha256:4164ec68a34d7bef0ed8b975d1808fc52d83c8ec93c9ae4f512ef94f1d35c6b8