text:
Set terminal title by .Net console application throwing an exception

Contour Terminal version
0.3.11.258
Installer source
GitHub: release page
Operating System
Ubuntu 22.04.2 LTS
Architecture
x86-64
Other Software
NVIM v0.9.0
Steps to reproduce
Creating a dotnet console application with:
dotnet new console

That will creates a .Net application, so just edit the file Program.cs:
Console.Title = "Test"

And run it:
dotnet run

Expected Behavior
The behavior expected is the name of console changes the bottom title bar:
Before execution:

After execution:

Actual Behavior
Throwing an exception:
Unhandled exception. System.InvalidOperationException: Stack empty.
   at System.Collections.Generic.Stack`1.ThrowForEmptyStack()
   at System.Collections.Generic.Stack`1.Pop()
   at System.TermInfo.ParameterizedStrings.EvaluateInternal(String format, Int32& pos, FormatParam[] args, Stack`1 stack, FormatParam[]& dynamicVars, FormatParam[]& staticVars)
   at System.TermInfo.ParameterizedStrings.Evaluate(String format, FormatParam[] args)
   at System.ConsolePal.set_Title(String value)

Additional notes
No response

Looks like something is wrond with terminfo file, can you check what is echo $TERM telling you?
First thing that you can try is to set same TERM (export TERM=....) for contour as for gnome-terminal, and see if this will resolve issue, then we can identify what we need to fix exactly.

I can't reproduce it on latest master

Exporting variable as 'x-term-256color', as gnome-terminal, it works!
The value before export was 'contour'
Thanks @Yaraslaut

Looks like something is wrond with terminfo file, can you check what is echo $TERM telling you?
First thing that you can try is to set same TERM (export TERM=....) for contour as for gnome-terminal, and see if this will resolve issue, then we can identify what we need to fix exactly.

Exporting variable as 'x-term-256color', as gnome-terminal, it works!
The value before export was 'contour'
Thanks @Yaraslaut

I can't reproduce it on latest master

At my last reply, the env var $TERM was setted as 'contour', can you check if it is setted different in your machine to reproduce same erro?

default contour config

@AugustoDeveloper  by default contour install terminfo file in /usr/local/share/terminfo/c directory.
in man tic we can see

       Libraries that read terminfo entries are expected to check in succession

       •   a location specified with the TERMINFO environment variable,

       •   $HOME/.terminfo,

       •   directories listed in the TERMINFO_DIRS environment variable,

       •   a compiled-in list of directories (no default value), and

       •   the system terminfo database (/usr/share/terminfo).

so you need to take care of this, for example you can just copy files in /usr/share/terminfo/c folder
@christianparpart can we somehow figure out how to handle this properly?

We can update the install script to symlink stuff to /usr/share/terminfo/c BUT i believe packages do get installed in proper places instead of /usr/local/

We can update the install script to symlink stuff to /usr/share/terminfo/c BUT i believe packages do get installed in proper places instead of /usr/local/

indeed, for packages  local is not used and its directly /usr/share/terminfo issue is that we have packages for arch and fedora only, so people on ubuntu is in disadvantage

We could append to $TERMINFO_DIRS

but it will depend on a  SHELL that people are using, right ?
and not all of the shells make source of bashrc for example

Doesn't matter, we can append to ENV through cpp

When building manually, the CMAKE_INSTALL_PREFIX defaults to /usr/local, that is why everything will be prefix-installed into that directory.
terminfo/c/contour will be installed into CMAKE_INSTALL_DATADIR which defaults to CMAKE_INSTALL_DATAROOTDIR, which by default is set to share (relative to and is CMAKE_INSTALL_PREFIX).
One could configure cmake by passing a custom CMAKE_INSTALL_DATADIR to tweak where share-data is installed, but that would also install other share-data then. If it's not an official package (which usually go into /usr then I just suggest to install wherever you want (e.g. leave it like the default) but then create a symlink by making use of the fact that terminfo library looks into $HOME/.terminfo, so either copying /usr/local/share/terminfo/c/contour into $HOME/.terminfo/c/contour or create a symlink of /usr/local/share/terminfo to $HOME/.terminfo.
I know that it isn't perfect, but terminfo is inherently flawed. We have to sadly live with that. :)
@AugustoDeveloper, please keep us posted if you need any support here.

@christianparpart from what i understood, he installed from .deb so the install dir should be good

@christianparpart from what i understood, he installed from .deb so the install dir should be good

Installer source
GitHub: release page

Yes, i installed contour by .deb file.

I really don't know if i'm doing somthing wrong cause don't works.

I really don't know if i'm doing somthing wrong cause i follow the instructions above and it doesn't works.

Looks like your directory structure is slightly off.
mkdir $HOME/.terminfo/c
mv $HOME/.terminfo/contour $HOME/.terminfo/c/contour

This moves the contour terminfo file from $HOME/.terminfo/ to $HOME/.terminfo/c/.
But shouldn't the terminfo file be properly installed from the .deb file already?
If not, we must fix that (I'm on smartphone right now, will check asap)

I really don't know if i'm doing somthing wrong cause i follow the instructions above and it doesn't works.

Looks like your directory structure is slightly off.
mkdir $HOME/.terminfo/c
mv $HOME/.terminfo/contour $HOME/.terminfo/c/contour

This moves the contour terminfo file from $HOME/.terminfo/ to $HOME/.terminfo/c/.
But shouldn't the terminfo file be properly installed from the .deb file already? If not, we must fix that (I'm on smartphone right now, will check asap)

Sorry, it doesn't works.

Debugging my console app on JetBrains Rider the errors ocurrs when Evaluate method is called.
Reference: Line 207

        public static string Title
        {
            get { throw new PlatformNotSupportedException(); }
            set
            {
                if (Console.IsOutputRedirected)
                    return;

                string? titleFormat = TerminalFormatStringsInstance.Title;
                if (!string.IsNullOrEmpty(titleFormat))
                {
                    string ansiStr = TermInfo.ParameterizedStrings.Evaluate(titleFormat, value); // Error occurs when call this line
                    WriteStdoutAnsiString(ansiStr, mayChangeCursorPosition: false);
                }
            }
        }

I'll show the situation when debug is on gnome-terminal  and on contour.
Gnome Terminal

After all that, no error is thrown and call method to apply new title WriteStdoutAnsiString.
Contour

The error throws at line 131:

You can see some variables value here:
format = "[2$~[1$}[1;%dH%p1%s[$}"
pos = 15

I can't debug much further than the above line, the exception occurs after attempt to step into it. Looking the code, the first character into the format variable should be , as the Gnome Terminal scenario, p to make Push  a parameter, but the d is found, making a Pop from an empty stack.
Sorry for  bunch of prints, but i hope to give you some insights to resolve this problem.

Could you share your terminfo file that it's picking up, so that I can test with that as well. Also vt sequence trace when this application is running will also be good i.e  you'll need to  invoke contour with contour debug vt.trace.sequence and save that output to somewhere.

To summarise the Discord's outcome.

the terminfo used is a bit old (we really need to create a new point release ASAP)
the old terminfo wasn't bad though, but it is expecting two parameters to be passed, with the second one being a column to start writing to in the status line (since tsl stands for "to status line" and was only abused by xterm and the likes to set the window title, which is wrong to begin with)
there is varying documentation, some saying %d does pop from stack, others say it doesn't.
however, dotnet should probably not hard-fail on internal (and especially recoverable) errors, but instead fallback when not being able to set the title. External data (e.g. unexpected terminfo entries) should not cause your application to crash :)

We've fixed the problem for @AugustoDeveloper  by providing an up-to-date terminfo file (which contains a more trivialized form of tsl to move to the (host writable) status line, which also does not imply 2 parameters on the stack anymore.
But it also showed that we really should create a new bugfix release ASAP. :)

authors: AugustoDeveloper Utkarsh-khambra Yaraslaut christianparpart uspasojevic96

repo: contour-terminal/contour


text:
Label time

    @ocots NB. Do the same for `time!` as the independent variable can (*is* in abstract format) be named, so the name can be used for `xlabel`.

Originally posted by @jbcaillau in https://github.com/control-toolbox/control-toolbox.github.io/discussions/21#discussioncomment-5285608

done!

source: gharchive/issue

license: MIT

license_type: permissive

license_source: github-api


text:
com.google.common.util.concurrent.ExecutionError: java.lang.OutOfMemoryError: GC overhead limit exceeded

Hi @abyrd
I'm getting an error while doing regional analysis
com.google.common.util.concurrent.ExecutionError: java.lang.OutOfMemoryError: GC overhead limit exceeded
I have increased heap memory by 8GB, but issue is still same.

Hi @arunaxp, we typically run analyses on machines with 32GB of memory, and Java heap using 30GB of that. Analysis sometimes does use very large amounts of memory, especially since it will run as many computation threads as you have processors. So on an 8 or 16 core machine the memory requirements shoot up quite fast. I think you will just have to give it more memory or alter the source code to create less threads.

authors: abyrd arunaxp

repo: conveyal/analysis-backend

license: mit

license_source: bigquery


text:
Customer play button can't start play when set playing  prop to false after change url

Here's my code
const [playing, setPlaying] = useState(false)
 useEffect(() => {
      setPlaying(false)
  }, [props.src])
<div
       className={playing? styles.pauseCtrlDiv : styles.playCtrlDiv}
        onClick={() => {
         setPlaying(!playing)
        }}
 />
<ReactPlayer
     controls
     playing={audioPlaying}
     url={props.src}
    ....
></ReactPlayer>

I need to change url to play different video, and keep pause when video loaded. But I found that my own play button can't  enable play anymore after change url.
Then I found the source code in Player.js has a member 'this.isPlaying', it didn't set to false when url changed. So I set it to false and problem solved.
value: function componentDidUpdate(prevProps) {
...
      if (!(0, _reactFastCompare["default"])(prevProps.url, url)) {
        ...
        this.isLoading = true;
        this.startOnPlay = true;
        this.onDurationCalled = false;
        this.isPlaying = false;        // set isPlaying to false when url changed
        this.player.load(url, this.isReady);
      }
...
}

Please reopen with a jsFiddle or similar to demonstrate the problem. The isPlaying logic is to prevent bugs but I can’t debug without an example that reproduces the issue.

authors: DeepinDream cookpete

repo: cookpete/react-player


text:
[Bug]: Getting blank screen on coolify home page

Is there an existing issue for this?

[X] I have searched the existing issues

Example public repository
coolify
Description
Hi,
Using auth2proxy, we attempted to implement 2FA authentication for coolify after deploying it on our server. We followed the identical procedure, and following authentication, we were taken to a login screen. Upon successful login, the page became blank. Could you kindly examine the same and inform me of anything that has to be changed on my end?

Steps To Reproduce
Depoly coolify and add auth2proxy for authentication, then try to login .
Version
v3.12.31

I'm closing this issue, because tracking features will be moved to GitHub discussions. Github issues will be only for bugs.
Version 4 is in full focus. v3 related issues will be closed, if it is not a critical bug.
Thanks for your understanding.

repo: coollabsio/coolify


text:
[Feature]: Use branch name as subdomain

Is there an existing issue for this?

[X] I have searched the existing issues

Summary
It would be great to be able to access the latest push to a branch through a named url on your coolify deploy. (just like vercel recently added)
Ie: having a branch name "coolify" would have the latest preview deploys of your repo at https://coolify.yourdomain.com or with generic name https://coolify-git.yourdomain.com https://coolify-anythingyouchoose.yourdomain.com
Why should this be worked on?
It greatly improves team/customer work.

I think just branchname might get too vague as branchnames can easily conflict. service 1 and service 2 can always have the same branch main or master. Moreover, I think coolify deploys by branch name , so multi branch deploys may be something that need to be looked at differently right?

I think i already saw a feature request for multiple domains on the same app/service, that would already help alot.
In our case the yourdomain.com part is already different for each app so there won't be any overlapping. But if not, it should be more generic with added appname part. ie: https://org-branch-repo.yourdomain.com next to org-commit-repo.yourdomain.com

One approach I see elsewhere is to use the short commit id (e.g. 1a2b3c) followed by the branch name (but truncated to a maximum amount of characters) replacing any _ or space with - . e.g. f234da-login-screen-refac.
This would significantly reduce the chance of conflicts while also keeping preview domains relevant and easy to identify.

I am actually talking about viewing commits on different urls. While actually this also includes a deploy of a PR (be it as latest commit into the branch that the PR is about).
For instance I recently made a small update on our starter template updating to next 13 in branch next13. It is avail on the following urls:
https://ecbase-react-starter-git-next13-ecbase.vercel.app/ ---using repo-branch-"git"-org
https://ecbase-react-starter-bo4gngfhv-ecbase.vercel.app/ ---using repo-commit-org
Would love to see this also in v4 as it makes finding/testing branches super easy accross teams.

I am actually talking about viewing commits on different urls. While actually this also includes a deploy of a PR (be it as latest commit into the branch that the PR is about).
For instance I recently made a small update on our starter template updating to next 13 in branch next13. It is avail on the following urls:
https://ecbase-react-starter-git-next13-ecbase.vercel.app/ ---using repo-branch-"git"-org
https://ecbase-react-starter-bo4gngfhv-ecbase.vercel.app/ ---using repo-commit-org
Would love to see this also in v4 as it makes finding/testing branches super easy accross teams.

Ah, gotcha!
But honestly I don't really see the use-case, now. I'm wondering, wouldn't branching out again solve that issue? This way it's also possible to make multiple changes that don't follow each other completely 🤔

I am actually talking about viewing commits on different urls. While actually this also includes a deploy of a PR (be it as latest commit into the branch that the PR is about).
For instance I recently made a small update on our starter template updating to next 13 in branch next13. It is avail on the following urls:
https://ecbase-react-starter-git-next13-ecbase.vercel.app/ ---using repo-branch-"git"-org
https://ecbase-react-starter-bo4gngfhv-ecbase.vercel.app/ ---using repo-commit-org
Would love to see this also in v4 as it makes finding/testing branches super easy accross teams.

Ah, gotcha!
But honestly I don't really see the use-case, now. I'm wondering, wouldn't branching out again solve that issue? This way it's also possible to make multiple changes that don't follow each other completely 🤔

Sorry, I've explained wrongly, it's about branches. In those url's the first one holds all the latest commits to that branch. That way, while developing on a branch, you can always go to that same url (or give it to your clients) and it will be your latest dev code in that branch.

To chime in on that, I'm looking to use a branch without the need to create a PR.
For Vercel it's basically ${project_name}-${branch_name} (and optionally (-${username}).

To chime in on that, I'm looking to use a branch without the need to create a PR.
For Vercel it's basically ${project_name}-${branch_name}-${username}. This one is the same for all commits of that branch.
Additionally to single commit subdomain ${project_name}-${commit}-${username}. This one will always change with the commits.

Ah, yeah. I agree, my old comments on PRs should be read as branches. I'm just horrible at explaining sometimes mostly 🙈

I feel like it could be settings like this, allowing you to set the subdomains dynamically:

Deployment
You can use the variables ${branch}, ${commit}, ${project}, ${pr}, ${username}.

[x] Deploy main branch:  cool-custom-domain.tld
[x] Deploy pull-requests branch:  ${pr}-${project}.example.com
[x] Deploy branches:  ${branch}-${project}.example.com

authors: ChronSyn Mobilpadde luckydonald martijnmichel unownone


text:
[Bug]: Raw Compose Deployment

Description
When I run the Raw Compose Deployment it fails with this error:
...
OUTPUT:
Error response from daemon: endpoint with name coolify-proxy already exists in network jwskgss
[2024-Mar-20 04:38:48.130783]
COMMAND:
SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /data/coolify/applications/jwskgss -f /data/coolify/applications/jwskgss/compose.yml up -d

OUTPUT:
stat /data/coolify/applications/jwskgss/compose.yml: no such file or directory
[2024-Mar-20 04:38:48.169102] Oops something is not okay, are you okay? 😢
[2024-Mar-20 04:38:48.171946] stat /data/coolify/applications/jwskgss/compose.yml: no such file or directory

Minimal Reproduction (if possible, example repository)
Create a project with this public repo: https://github.com/cabaalexander/mac-awake/blob/main/compose.yml
And toggle the Raw Compose Deployment and hit deploy.
services:
  web:
    build: .
    network_mode: host
    restart: unless-stopped
    environment:
      - 'W_USERNAME=${W_USERNAME}'
      - 'W_PASSWORD=${W_PASSWORD}'
      - 'W_MAC=${W_MAC}'
      - 'W_BYPASS=${W_BYPASS}'
    labels:
      - traefik.enable=true
      - 'traefik.http.routers.http-0-mac-awake.rule=Host(`mac-awake.10.0.0.37.sslip.io`) && PathPrefix(`/`)'
      - traefik.http.routers.http-0-mac-awake.entryPoints=http

Exception or Error
[2024-Mar-20 04:38:34.853026] Starting deployment of cabaalexander/mac-awake:main-mkscg0s to localhost.
[2024-Mar-20 04:38:34.901657] Preparing container with helper image: ghcr.io/coollabsio/coolify-helper:latest.
[2024-Mar-20 04:38:35.170857]
COMMAND:
docker run -d --network coolify --name s4oo40o --rm -v /var/run/docker.sock:/var/run/docker.sock ghcr.io/coollabsio/coolify-helper:latest

OUTPUT:
e624df44a1d1679287377a91b07f6929d76b632da56cea262a12cc31a8563408
[2024-Mar-20 04:38:35.996096]
COMMAND:
docker exec s4oo40o bash -c 'GIT_SSH_COMMAND="ssh -o ConnectTimeout=30 -p 22 -o Port=22 -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null" git ls-remote https://github.com/cabaalexander/mac-awake main'

OUTPUT:
1561b343343b79c07a3907cf266cfe9d64e501c9 refs/heads/main
[2024-Mar-20 04:38:36.003327] ----------------------------------------
[2024-Mar-20 04:38:36.005757] Importing cabaalexander/mac-awake:main (commit sha HEAD) to /artifacts/s4oo40o.
[2024-Mar-20 04:38:36.105986]
COMMAND:
docker exec s4oo40o bash -c 'git clone -b main https://github.com/cabaalexander/mac-awake /artifacts/s4oo40o && cd /artifacts/s4oo40o && sed -i "s#git@\(.*\):#https://\1/#g" /artifacts/s4oo40o/.gitmodules || true && cd /artifacts/s4oo40o && GIT_SSH_COMMAND="ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null" git submodule update --init --recursive && cd /artifacts/s4oo40o && GIT_SSH_COMMAND="ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null" git lfs pull'

OUTPUT:
Cloning into '/artifacts/s4oo40o'...
[2024-Mar-20 04:38:36.543527]
COMMAND:
docker exec s4oo40o bash -c 'git clone -b main https://github.com/cabaalexander/mac-awake /artifacts/s4oo40o && cd /artifacts/s4oo40o && sed -i "s#git@\(.*\):#https://\1/#g" /artifacts/s4oo40o/.gitmodules || true && cd /artifacts/s4oo40o && GIT_SSH_COMMAND="ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null" git submodule update --init --recursive && cd /artifacts/s4oo40o && GIT_SSH_COMMAND="ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null" git lfs pull'

OUTPUT:
sed: /artifacts/s4oo40o/.gitmodules: No such file or directory
[2024-Mar-20 04:38:37.463878] Pulling & building required images.
[2024-Mar-20 04:38:37.866259]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#0 building with "default" instance using docker driver
[2024-Mar-20 04:38:37.870203]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#1 [web internal] load build definition from Dockerfile
#1 transferring dockerfile: 1.33kB done
#1 DONE 0.1s

#2 [web internal] load metadata for docker.io/oven/bun:alpine
[2024-Mar-20 04:38:38.149571]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#2 DONE 0.4s
[2024-Mar-20 04:38:38.265394]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#3 [web internal] load .dockerignore
#3 transferring context: 196B done
#3 DONE 0.1s

#4 [web 1/5] FROM docker.io/oven/bun:alpine@sha256:09f43e75d5b09506dcc15e818fc94b242710c50023ba6939c9cf910d65ada138
#4 DONE 0.0s

#5 [web internal] load build context
[2024-Mar-20 04:38:38.416127]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#5 transferring context: 8.36kB done
#5 DONE 0.1s

#6 [web 2/5] WORKDIR /usr/src/app
#6 CACHED

#7 [web 3/5] COPY . .
[2024-Mar-20 04:38:38.521778]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#7 DONE 0.2s
[2024-Mar-20 04:38:38.672215]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#8 [web 4/5] RUN bun install --frozen-lockfile
[2024-Mar-20 04:38:38.811936]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#8 0.281 bun install v1.0.33 (9e91e137)
[2024-Mar-20 04:38:39.682553]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#8 1.153
#8 1.153 + @types/bun@1.0
[2024-Mar-20 04:38:39.832921]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
.6
#8 1.153 + @hono/zod-validator@0.1.11
#8 1.153 + hono@4.0.5
#8 1.153 + zod@3.22.4
#8 1.153
#8 1.153 8 packages installed [880.00ms]
[2024-Mar-20 04:38:40.284420]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#8 DONE 1.6s

#9 [web 5/5] RUN apk add awake
[2024-Mar-20 04:38:40.585536]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 0.335 fetch https://dl-cdn.alpinelinux.org/alpine/v3.18/main/aarch64/APKINDEX.tar.gz
[2024-Mar-20 04:38:41.186946]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 0.897 fetch https://dl-cdn.alpinelinux.org/alpine/v3.18/community/aarch64/APKINDEX.tar.gz
[2024-Mar-20 04:38:41.591339]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 1.405 (1/19) Installing libbz2 (1.0.8-r5)
#9 1.452 (2/19) Installing libexpat (2.6.2-r0)
[2024-Mar-20 04:38:41.727224]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 1.500 (3/19) Installing libffi (3.4.4-r2)
#9 1.542 (4/19) Installing gdbm (1.23-r1)
#9 1.587 (5/19) Installing xz-libs (5.4.3-r0)
[2024-Mar-20 04:38:41.877504]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 1.640 (6/19) Installing libstdc++ (12.2.1_git20220924-r10)
[2024-Mar-20 04:38:41.986201]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 1.751 (7/19) Installing mpdecimal (2.5.1-r2)
#9 1.801 (8/19) Installing ncurses-terminfo-base (6.4_p20230506-r0)
#9 1.847 (9/19) Installing libncursesw (6.4_p20230506-r0)
[2024-Mar-20 04:38:42.091277]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 1.910 (10/19) Installing libpanelw (6.4_p20230506-r0)
#9 1.952 (11/19) Installing readline (8.2.1-r1)
[2024-Mar-20 04:38:42.238741]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 2.009 (12/19) Installing sqlite-libs (3.41.2-r3)
#9 2.099 (13/19) Installing python3 (3.11.8-r0)
[2024-Mar-20 04:38:43.103255]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 2.964 (14/19) Installing python3-pycache-pyc0 (3.11.8-r0)
[2024-Mar-20 04:38:43.551985]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 3.412 (15/19) Installing pyc (0.1-r0)
[2024-Mar-20 04:38:43.675581]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 3.453 (16/19) Installing py3-awake-pyc (1.0-r9)
#9 3.495 (17/19) Installing python3-pyc (3.11.8-r0)
#9 3.536 (18/19) Installing py3-awake (1.0-r9)
[2024-Mar-20 04:38:43.826708]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 3.578 (19/19) Installing awake (1.0-r9)
#9 3.621 Executing busybox-1.36.1-r5.trigger
#9 3.626 Executing glibc-bin-2.26-r1.trigger
#9 3.636 OK: 70 MiB in 37 packages
[2024-Mar-20 04:38:46.500610]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#9 DONE 6.4s
[2024-Mar-20 04:38:46.651790]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#10 [web] exporting to image
#10 exporting layers
[2024-Mar-20 04:38:47.530349]
COMMAND:
docker exec s4oo40o bash -c 'SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /artifacts/s4oo40o -f /artifacts/s4oo40o/compose.yml build'

OUTPUT:
#10 exporting layers 0.9s done
#10 writing image sha256:1f705c23478af0bae793985d7269d53b6a2aac0ef082bed33519e78892c4afbd 0.0s done
#10 naming to docker.io/library/s4oo40o-web 0.1s done
#10 DONE 1.0s
[2024-Mar-20 04:38:47.871049] Removing old containers.
[2024-Mar-20 04:38:47.939427]
COMMAND:
docker network create --attachable 'jwskgss' >/dev/null || true

OUTPUT:
Error response from daemon: network with name jwskgss already exists
[2024-Mar-20 04:38:47.968614]
COMMAND:
docker network connect jwskgss coolify-proxy || true

OUTPUT:
Error response from daemon: endpoint with name coolify-proxy already exists in network jwskgss
[2024-Mar-20 04:38:48.130783]
COMMAND:
SOURCE_COMMIT=1561b343343b79c07a3907cf266cfe9d64e501c9 docker compose --project-directory /data/coolify/applications/jwskgss -f /data/coolify/applications/jwskgss/compose.yml up -d

OUTPUT:
stat /data/coolify/applications/jwskgss/compose.yml: no such file or directory
[2024-Mar-20 04:38:48.169102] Oops something is not okay, are you okay? 😢
[2024-Mar-20 04:38:48.171946] stat /data/coolify/applications/jwskgss/compose.yml: no such file or directory

Version
v4.0.0-beta.239

This will be fixed in the upcoming version.

💯

authors: andrasbacsai cabaalexander


text:
Persist Registration Name & Email on password validation errors

when a user enters too short a password, the entire form clears which was a bit annoying
also fixing issue with field level validation errors not showing
simplify the form logic; the entire form was duplicated for local when really we just need values

Thank you for the PR! 💜

I was not aware of old() function, nice!

source: gharchive/pull-request

authors: andrasbacsai webdevcody


text:
Update sbt-ci-release from 1.9.0 to 1.9.2

About this PR
📦 Updates com.github.sbt:sbt-ci-release from 1.9.0 to 1.9.2
📜 GitHub Release Notes - Version Diff
Usage
✅ Please merge!
I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.
If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.
Configure Scala Steward for your repository with a .scala-steward.conf file.
Have a fantastic day writing Scala!

⚙ Adjust future updates
Add this to your .scala-steward.conf file to ignore future updates of this dependency:
updates.ignore = [ { groupId = "com.github.sbt", artifactId = "sbt-ci-release" } ]

Or, add this to slow down future updates of this dependency:
dependencyOverrides = [{
  pullRequests = { frequency = "30 days" },
  dependency = { groupId = "com.github.sbt", artifactId = "sbt-ci-release" }
}]

labels: sbt-plugin-update, early-semver-patch, semver-spec-patch, commit-count:1

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

authors: CLAassistant coralogix-automation-golem

repo: coralogix/sbt-protofetch


text:
Update bcpkix-jdk18on to 1.76

About this PR
📦 Updates org.bouncycastle:bcpkix-jdk18on from 1.75 to 1.76
Usage
✅ Please merge!
I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.
If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.
Configure Scala Steward for your repository with a .scala-steward.conf file.
Have a fantastic day writing Scala!

🔍 Files still referring to the old version number
The following files still refer to the old version number (1.75).
You might want to review and update them manually.
website/static/img/undraw_code_review.svg
website/static/img/undraw_operating_system.svg

⚙ Adjust future updates
Add this to your .scala-steward.conf file to ignore future updates of this dependency:
updates.ignore = [ { groupId = "org.bouncycastle", artifactId = "bcpkix-jdk18on" } ]

Or, add this to slow down future updates of this dependency:
dependencyOverrides = [{
  pullRequests = { frequency = "30 days" },
  dependency = { groupId = "org.bouncycastle", artifactId = "bcpkix-jdk18on" }
}]

labels: library-update, old-version-remains, commit-count:1

Superseded by #549.


text:
Use case-insensitive matching for variable names resolved by the BodyProcessor

Description
If the REQUEST BODY parameter name contains uppercase, it will not be matched by the rule variable name, because the rule variable name has been changed to lowercase at load time.
Steps to reproduce
HTTP:
POST / HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Connection: keep-alive
Content-Type: application/json
Content-Length: 11
Accept-Language: zh-CN,zh;q=0.9

{"Audio":6}

Rule:
SecRule ARGS:json.Audio "@gt 5" "deny,status:-1,msg:'successful test',log,id:281647356379301,phase:2"
Result
The rule cannot be matched
Expectation

This may not be a bug, I'm just not sure what the purpose is

Could you pease come up with a unit tests?

Hi @zpeasystart, I'm not able to reproduce it against Coraza v3. The codebase had a lot of changes and improvements compared to v2. Specifically, the jsonBodyProcessor now is calling SetIndex which internally performs strings.ToLower (Just like you were expecting). Is there a specific reason you are running version 2? Otherwise, I would suggest to try out the v3/dev branch, or v3.0.0-rc.1. Release candidate 2 is also pretty close :)

authors: M4tteoP jcchavezs zpeasystart

repo: corazawaf/coraza


text:
chore: idempotency on ProcessX functions

Follows https://github.com/corazawaf/coraza/pull/571 working on idempotency: avoids calling twice any of the ProcessX functions. I think it is more about making explicit an implicit requirement that was addressed by the connectors' logic, rather than a design change. What do you think?

Codecov Report
Base: 78.87% // Head: 78.63% // Decreases project coverage by -0.23% :warning:

Coverage data is based on head (1cec3b1) compared to base (ece5ecc).
Patch coverage: 0.00% of modified lines in pull request are covered.

Additional details and impacted files
@@            Coverage Diff             @@
##           v3/dev     #574      +/-   ##
==========================================
- Coverage   78.87%   78.63%   -0.24%
==========================================
  Files         145      145
  Lines        7014     7030      +16
==========================================
- Hits         5532     5528       -4
- Misses       1250     1262      +12
- Partials      232      240       +8

Flag
Coverage Δ

default
74.05% <0.00%> (-0.23%)
:arrow_down:

examples
27.11% <0.00%> (-0.07%)
:arrow_down:

ftw
56.35% <0.00%> (-0.14%)
:arrow_down:

tinygo
72.08% <0.00%> (-0.25%)
:arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

internal/corazawaf/transaction.go
78.75% <0.00%> (-1.37%)
:arrow_down:

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.


text:
🛑 Guangdianyun is down

In 9481d14, Guangdianyun (https://www.guangdianyun.tv) was down:

HTTP code: 0
Response time: 0 ms

Resolved: Guangdianyun is back up in 454c667.

repo: corcd/charlotte


text:
CORE-2656: introduce replay markers in link manager

//PR in for api change - then change gradle.properties here
This PR uses a new replay marker in the Link Manager to write a marker on every replay, so that they can be tracked centrally from Kafka.

You need to raise a corda-api PR with your schema changes. I think the build is failing because the version of Corda-api it is building against doesn't have LinkManagerReplayMarker in it.

I had that realisation just now, and closed the PR in my excitement ...

@williamvigorr3 this is passing now fyi

@emilybowe please update the PR description.

authors: dimosr emilybowe

repo: corda/corda-runtime-os


text:
kube-aws: prefix EC2 instance names with the cluster name

Fixes #371
Tested with the following procedures:
$ cd multi-node/aws
$ ./build
$ bin/kube-aws --cluster-name kuoka-k8s *snip*
$ bin/kube-aws render
$ bin/kube-aws up --export
$ bin/kube-aws up

After the cfn stack created, seeing EC2 instance names prefixed with the cluster name:

lgtm, but I'll wait on @colhom to merge.

thanks @mumoshu!

authors: aaronlevy colhom mumoshu

repo: coreos/coreos-kubernetes


text:
tocommit(27) is out of range [lastIndex(0)]

Run node-1:
etcd \
  --name="node-1" \
  --listen-client-urls="http://127.0.0.1:4001" \
  --listen-peer-urls="http://127.0.0.1:7001" \
  --advertise-client-urls="http://127.0.0.1:4001" \
  --initial-advertise-peer-urls="http://127.0.0.1:7001" \
  --initial-cluster="node-1=http://127.0.0.1:7001" \
  --initial-cluster-state="new"

Then, run node-2:
etcdctl --peers="http://127.0.0.1:4001" member add "node-2" "http://127.0.0.1:7002"
etcd \
  --name="node-2" \
  --listen-client-urls="http://127.0.0.1:4002" \
  --listen-peer-urls="http://127.0.0.1:7002" \
  --advertise-client-urls="http://127.0.0.1:4002" \
  --initial-advertise-peer-urls="http://127.0.0.1:7002" \
  --initial-cluster="node-1=http://127.0.0.1:7001,node-2=http://127.0.0.1:7002" \
  --initial-cluster-state="existing"

Stop node-2 and delete data directory rm -rf ./node-2.etcd. Then, try again run node-2...
etcd \
>   --name="node-2" \
>   --listen-client-urls="http://127.0.0.1:4002" \
>   --listen-peer-urls="http://127.0.0.1:7002" \
>   --advertise-client-urls="http://127.0.0.1:4002" \
>   --initial-advertise-peer-urls="http://127.0.0.1:7002" \
>   --initial-cluster="node-1=http://127.0.0.1:7001,node-2=http://127.0.0.1:7002" \
>   --initial-cluster-state="existing"
2015/02/03 18:44:15 no data-dir provided, using default data-dir ./node-2.etcd
2015/02/03 18:44:15 etcd: listening for peers on http://127.0.0.1:7002
2015/02/03 18:44:15 etcd: listening for client requests on http://127.0.0.1:4002
2015/02/03 18:44:15 etcdserver: name = node-2
2015/02/03 18:44:15 etcdserver: data dir = node-2.etcd
2015/02/03 18:44:15 etcdserver: heartbeat = 100ms
2015/02/03 18:44:15 etcdserver: election = 1000ms
2015/02/03 18:44:15 etcdserver: snapshot count = 10000
2015/02/03 18:44:15 etcdserver: advertise client URLs = http://127.0.0.1:4002
2015/02/03 18:44:15 etcdserver: start member adc75cbdb4a31959 in cluster a9efa5de7f8fc772
2015/02/03 18:44:15 raft: adc75cbdb4a31959 became follower at term 0
2015/02/03 18:44:15 raft: newRaft adc75cbdb4a31959 [peers: [], term: 0, commit: 0, applied: 0, lastindex: 0, lastterm: 0]
2015/02/03 18:44:15 raft: adc75cbdb4a31959 became follower at term 1
2015/02/03 18:44:16 raft: adc75cbdb4a31959 [term: 1] received a MsgHeartbeat message with higher term from e52ada62956ff923 [term: 2]
2015/02/03 18:44:16 raft: adc75cbdb4a31959 became follower at term 2
2015/02/03 18:44:16 tocommit(27) is out of range [lastIndex(0)]
panic: tocommit(27) is out of range [lastIndex(0)]

goroutine 9 [running]:
log.Panicf(0x4c5d70, 0x2c, 0xc2080c4510, 0x2, 0x2)
  /usr/local/go/src/log/log.go:314 +0xd0
github.com/coreos/etcd/raft.(*raftLog).commitTo(0xc20802c7d0, 0x1b)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/log.go:177 +0x179
github.com/coreos/etcd/raft.(*raft).handleHeartbeat(0xc208032580, 0x8, 0xadc75cbdb4a31959, 0xe52ada62956ff923, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/raft.go:591 +0x47
github.com/coreos/etcd/raft.stepFollower(0xc208032580, 0x8, 0xadc75cbdb4a31959, 0xe52ada62956ff923, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/raft.go:561 +0xfdd
github.com/coreos/etcd/raft.(*raft).Step(0xc208032580, 0x8, 0xadc75cbdb4a31959, 0xe52ada62956ff923, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/raft.go:459 +0x23f
github.com/coreos/etcd/raft.(*node).run(0xc20802c780, 0xc208032580)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/node.go:275 +0x689
created by github.com/coreos/etcd/raft.StartNode
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/node.go:168 +0x50a

goroutine 1 [chan receive]:
github.com/coreos/etcd/etcdmain.Main()
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdmain/etcd.go:73 +0x648
main.main()
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/main.go:31 +0x1b

goroutine 7 [IO wait]:
net.(*pollDesc).Wait(0xc208086920, 0x72, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:84 +0x47
net.(*pollDesc).WaitRead(0xc208086920, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:89 +0x43
net.(*netFD).Read(0xc2080868c0, 0xc208096000, 0x1000, 0x1000, 0x0, 0x727bb0, 0xc20802b188)
  /usr/local/go/src/net/fd_unix.go:242 +0x40f
net.(*conn).Read(0xc208038088, 0xc208096000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/net.go:121 +0xdc
github.com/coreos/etcd/pkg/transport.timeoutConn.Read(0x729658, 0xc208038088, 0x12a05f200, 0x12a05f200, 0xc208096000, 0x1000, 0x1000, 0x1, 0x0, 0x0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/transport/timeout_conn.go:43 +0x165
github.com/coreos/etcd/pkg/transport.(*timeoutConn).Read(0xc20801fb40, 0xc208096000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
  <autogenerated>:17 +0xd6
net/http.noteEOFReader.Read(0x729718, 0xc20801fb40, 0xc208032478, 0xc208096000, 0x1000, 0x1000, 0x376180, 0x0, 0x0)
  /usr/local/go/src/net/http/transport.go:1270 +0x6e
net/http.(*noteEOFReader).Read(0xc20801fb60, 0xc208096000, 0x1000, 0x1000, 0xc208012000, 0x0, 0x0)
  <autogenerated>:125 +0xd4
bufio.(*Reader).fill(0xc2080545a0)
  /usr/local/go/src/bufio/bufio.go:97 +0x1ce
bufio.(*Reader).Peek(0xc2080545a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0)
  /usr/local/go/src/bufio/bufio.go:132 +0xf0
net/http.(*persistConn).readLoop(0xc208032420)
  /usr/local/go/src/net/http/transport.go:842 +0xa4
created by net/http.(*Transport).dialConn
  /usr/local/go/src/net/http/transport.go:660 +0xc9f

goroutine 8 [select]:
net/http.(*persistConn).writeLoop(0xc208032420)
  /usr/local/go/src/net/http/transport.go:945 +0x41d
created by net/http.(*Transport).dialConn
  /usr/local/go/src/net/http/transport.go:661 +0xcbc

goroutine 10 [chan receive]:
github.com/coreos/etcd/rafthttp.(*peer).handle(0xc208032630)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:187 +0x99
created by github.com/coreos/etcd/rafthttp.NewPeer
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:94 +0x2cc

goroutine 11 [chan receive]:
github.com/coreos/etcd/rafthttp.(*peer).handle(0xc208032630)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:187 +0x99
created by github.com/coreos/etcd/rafthttp.NewPeer
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:94 +0x2cc

goroutine 12 [chan receive]:
github.com/coreos/etcd/rafthttp.(*peer).handle(0xc208032630)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:187 +0x99
created by github.com/coreos/etcd/rafthttp.NewPeer
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:94 +0x2cc

goroutine 13 [chan receive]:
github.com/coreos/etcd/rafthttp.(*peer).handle(0xc208032630)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:187 +0x99
created by github.com/coreos/etcd/rafthttp.NewPeer
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/rafthttp/peer.go:94 +0x2cc

goroutine 14 [select]:
github.com/coreos/etcd/etcdserver.(*EtcdServer).run(0xc20806c200)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdserver/server.go:348 +0x1330
created by github.com/coreos/etcd/etcdserver.(*EtcdServer).start
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdserver/server.go:288 +0x294

goroutine 15 [select]:
github.com/coreos/etcd/raft.(*node).step(0xc20802c780, 0x72a198, 0xc208054c00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc20802c910, ...)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/node.go:383 +0x1ed
github.com/coreos/etcd/raft.(*node).Propose(0xc20802c780, 0x72a198, 0xc208054c00, 0xc208052750, 0x88, 0x88, 0x0, 0x0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/raft/node.go:355 +0x141
github.com/coreos/etcd/etcdserver.(*EtcdServer).Do(0xc20806c200, 0x72a198, 0xc208054c00, 0x594b501d0c4c0001, 0x439c00, 0x3, 0xc20803dda0, 0x26, 0xc208047900, 0x38, ...)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdserver/server.go:470 +0x2ee
github.com/coreos/etcd/etcdserver.(*EtcdServer).publish(0xc20806c200, 0x12a05f200)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdserver/server.go:633 +0x30b
created by github.com/coreos/etcd/etcdserver.(*EtcdServer).Start
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdserver/server.go:269 +0x4f

goroutine 16 [select]:
github.com/coreos/etcd/etcdserver.(*EtcdServer).purgeFile(0xc20806c200)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdserver/server.go:299 +0x48c
created by github.com/coreos/etcd/etcdserver.(*EtcdServer).Start
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdserver/server.go:270 +0x69

goroutine 17 [IO wait]:
net.(*pollDesc).Wait(0xc208086610, 0x72, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:84 +0x47
net.(*pollDesc).WaitRead(0xc208086610, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:89 +0x43
net.(*netFD).accept(0xc2080865b0, 0x0, 0x727bb0, 0xc20802b7a0)
  /usr/local/go/src/net/fd_unix.go:419 +0x40b
net.(*TCPListener).AcceptTCP(0xc208038040, 0x72a2d8, 0x0, 0x0)
  /usr/local/go/src/net/tcpsock_posix.go:234 +0x4e
net.(*TCPListener).Accept(0xc208038040, 0x0, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/tcpsock_posix.go:244 +0x4c
github.com/coreos/etcd/pkg/transport.(*rwTimeoutListener).Accept(0xc20801f8c0, 0x0, 0x0, 0x0, 0x0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/transport/timeout_listener.go:44 +0x7a
net/http.(*Server).Serve(0xc208054d80, 0x729430, 0xc20801f8c0, 0x0, 0x0)
  /usr/local/go/src/net/http/server.go:1728 +0x92
github.com/coreos/etcd/etcdmain.serveHTTP(0x729430, 0xc20801f8c0, 0x72a088, 0xc20803dbc0, 0x45d964b800, 0x0, 0x0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdmain/http.go:36 +0x1be
github.com/coreos/etcd/etcdmain.func·005(0x729430, 0xc20801f8c0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdmain/etcd.go:178 +0x5a
created by github.com/coreos/etcd/etcdmain.startEtcd
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdmain/etcd.go:179 +0x1d1e

goroutine 18 [IO wait]:
net.(*pollDesc).Wait(0xc2080866f0, 0x72, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:84 +0x47
net.(*pollDesc).WaitRead(0xc2080866f0, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:89 +0x43
net.(*netFD).accept(0xc208086690, 0x0, 0x727bb0, 0xc20802b668)
  /usr/local/go/src/net/fd_unix.go:419 +0x40b
net.(*TCPListener).AcceptTCP(0xc208038048, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/tcpsock_posix.go:234 +0x4e
net.(*TCPListener).Accept(0xc208038048, 0x0, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/tcpsock_posix.go:244 +0x4c
github.com/coreos/etcd/pkg/transport.(*keepaliveListener).Accept(0xc20802b730, 0x0, 0x0, 0x0, 0x0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/transport/keepalive_listener.go:39 +0x71
net/http.(*Server).Serve(0xc208054de0, 0x729468, 0xc20802b730, 0x0, 0x0)
  /usr/local/go/src/net/http/server.go:1728 +0x92
github.com/coreos/etcd/etcdmain.serveHTTP(0x729468, 0xc20802b730, 0x72a1d8, 0xc20801eba0, 0x0, 0x0, 0x0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdmain/http.go:36 +0x1be
github.com/coreos/etcd/etcdmain.func·006(0x729468, 0xc20802b730)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdmain/etcd.go:186 +0x80
created by github.com/coreos/etcd/etcdmain.startEtcd
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/etcdmain/etcd.go:187 +0x1e60

goroutine 19 [select]:
github.com/coreos/etcd/pkg/fileutil.func·001()
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/fileutil/purge.go:69 +0x658
created by github.com/coreos/etcd/pkg/fileutil.PurgeFile
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/fileutil/purge.go:75 +0x231

goroutine 20 [select]:
github.com/coreos/etcd/pkg/fileutil.func·001()
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/fileutil/purge.go:69 +0x658
created by github.com/coreos/etcd/pkg/fileutil.PurgeFile
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/fileutil/purge.go:75 +0x231

goroutine 21 [IO wait]:
net.(*pollDesc).Wait(0xc208086ed0, 0x72, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:84 +0x47
net.(*pollDesc).WaitRead(0xc208086ed0, 0x0, 0x0)
  /usr/local/go/src/net/fd_poll_runtime.go:89 +0x43
net.(*netFD).Read(0xc208086e70, 0xc2080b2000, 0x1000, 0x1000, 0x0, 0x727bb0, 0xc20802b7f8)
  /usr/local/go/src/net/fd_unix.go:242 +0x40f
net.(*conn).Read(0xc208038118, 0xc2080b2000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/net.go:121 +0xdc
github.com/coreos/etcd/pkg/transport.timeoutConn.Read(0x729658, 0xc208038118, 0x12a05f200, 0x12a05f200, 0xc2080b2000, 0x1000, 0x1000, 0x100000000, 0x0, 0x0)
  /Users/philips/src/github.com/coreos/etcd/release/etcd/gopath/src/github.com/coreos/etcd/pkg/transport/timeout_conn.go:43 +0x165
github.com/coreos/etcd/pkg/transport.(*timeoutConn).Read(0xc20801ef40, 0xc2080b2000, 0x1000, 0x1000, 0x3, 0x0, 0x0)
  <autogenerated>:17 +0xd6
net/http.(*liveSwitchReader).Read(0xc20805e408, 0xc2080b2000, 0x1000, 0x1000, 0xe661, 0x0, 0x0)
  /usr/local/go/src/net/http/server.go:214 +0xab
io.(*LimitedReader).Read(0xc20801ef60, 0xc2080b2000, 0x1000, 0x1000, 0x40, 0x0, 0x0)
  /usr/local/go/src/io/io.go:408 +0xce
bufio.(*Reader).fill(0xc208054f00)
  /usr/local/go/src/bufio/bufio.go:97 +0x1ce
bufio.(*Reader).ReadSlice(0xc208054f00, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0)
  /usr/local/go/src/bufio/bufio.go:295 +0x257
bufio.(*Reader).ReadLine(0xc208054f00, 0x0, 0x0, 0x0, 0xc208086e00, 0x0, 0x0)
  /usr/local/go/src/bufio/bufio.go:324 +0x62
net/textproto.(*Reader).readLineSlice(0xc20803df20, 0x0, 0x0, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/textproto/reader.go:55 +0x9e
net/textproto.(*Reader).ReadLine(0xc20803df20, 0x0, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/textproto/reader.go:36 +0x4f
net/http.ReadRequest(0xc208054f00, 0xc2080355f0, 0x0, 0x0)
  /usr/local/go/src/net/http/request.go:598 +0xcb
net/http.(*conn).readRequest(0xc20805e3c0, 0x0, 0x0, 0x0)
  /usr/local/go/src/net/http/server.go:586 +0x26f
net/http.(*conn).serve(0xc20805e3c0)
  /usr/local/go/src/net/http/server.go:1162 +0x69e
created by net/http.(*Server).Serve
  /usr/local/go/src/net/http/server.go:1751 +0x35e

@marvell Stop node-2 and delete data directory rm -rf ./node-2.etcd. Then, try again run node-2...
You should never do that. If the data dir is lost, remove the node from the cluster. If you want to add the node back, add it again via runtime configuration.

@marvell More detail here: https://github.com/coreos/etcd/blob/master/Documentation/admin_guide.md#lifecycle

repo: coreos/etcd


text:
add command line option for configuration file

Can you add command line option for configuration file so it is possible to have multiple configuration files?

If you want to have configuration file, we recommend you write a systemd file in linux to bootstrap etcd. It is much clean and helps logging.

I'm on a mac so I would be using launchd or a process supervisor. Can you recommend a lightweight process supervisor that works well with etcd? Or I can try to make multiple launchd plist files, each with their own options.

/cc @kelseyhightower Any suggestions for OS X?

@grimnight Yes a plist file would work and provide the same workflow that systemd does. Just be sure to use a different data directory for each "config".

authors: grimnight kelseyhightower yichengq


text:
RFE on migrate to eliminate all TTL keys

Request
add a flag to migrate which will not convert TTL keys from v2 to v3
Reason
Some folks may wish to handle migration of TTL keys in a special fashion (hence custom migration tool), but there is a common pattern of wanting to simply bulk eliminate all TTL keys b/c they are more trouble then their worth.
/cc @xiang90

@timothysc I am fine with adding a no-ttl flag to migration tool. Do you want to work on this? Should be a simple one. /cc @hongchaodeng

I'll get a PR in the a.m.


text:
NEWS: add 'prev-kv' feature for upcoming v3.0.11

@heyitsanthony @xiang90

LGTM

@heyitsanthony Just fixed. PTAL. Thanks.

lgtm

authors: gyuho heyitsanthony xiang90


text:
functional-tester:Integrate etcd runner into etcd tester

exposed etcd runner logic as a lib
incorporate etcd runner lib to etcd-tester
FIX #7026

all fixed. PTAL cc\ @heyitsanthony @xiang90 @gyuho

Have you tried running locally?

@gyuho @xiang90 , i have tried to run it locally with watcher and lock-racer turned on. they run without any problem. however, i noticed that watcher takes 10-20 to finish.

@fanminshi
The runner stressers relies on the checking logic in the runner itself. So check() actually does nothing, right?
However, if the round finishes before the checking happens inside the runner, then the runner can be canceled without doing any checks. Right?

Will the runner have to complete a round before the tester can try the next fault for the checking to be effective? It seems like that strategy will make the test case rate unacceptably slow.

@xiang90 the checking logic is in the runner itself. all check() in tester does it to make sure there aren't any error returned by runner. no error => check() passes.
the round can't finish without runner being finished. so all the internal checking phase will be part of the round. However, if we cancel the context before runner does its internal check, then runner will not perform its check and return us a cancelled context error.

@heyitsanthony yeah, the current implementation is to have the runner finish its business within a tester round before starting the next one. it is quite slow since watcher might take 20 seconds to finish.

@fanminshi that is too slow to be useful; that's why the lease stresser had to be redesigned.
Two comments:

This requires a lot of changes to the runner code; I'm not sure that the solution is to compile everything into a single binary. A more extensible way of doing, which won't mean trying to shoehorn it into the tester interfaces, would be to have a stresser that will launch an arbitrary binary + arguments, instead of  baking handling specific runner handling into the etcd-tester code. If it's designed right, this can be reused to run the benchmark tool as well. This is also something that could be useful for namazu testing.  The check phase would get its data from stderr.

If the runner expects to run on the cluster long term, perhaps the way to handle it is to launch the runner binary and SIGSTOP on cancel() to pause it then SIGCONT on the next stress().

@heyitsanthony I'll think about the design a bit more.

close this in favor of #7672

authors: fanminshi gyuho heyitsanthony xiang90


text:
Option to pretty print CloudFormation JSON

Means stack contents are easier to compare out of the box

Current coverage is 69.90% (diff: 100%)

Merging #153 into master will not change coverage

@@             master       #153   diff @@
==========================================
  Files             5          5
  Lines          1110       1110
  Methods           0          0
  Messages          0          0
  Branches          0          0
==========================================
  Hits            776        776
  Misses          249        249
  Partials         85         85

Powered by Codecov. Last update 56f08d5...086515f

@c-knowles LGTM. Thanks as always 👍

authors: c-knowles codecov-io mumoshu

repo: coreos/kube-aws


text:
variables have to be exported in bash

Hi,
as requested, here is a commit for the whole documentation.
regards
celevra

Thanks

Er, I'm gonna edit the commit message to align with the styleguide.

Merged as 3c999d27e98bbc8ba18f035c66287d63b9a20181

authors: celevra dghubble

repo: coreos/matchbox


text:
Cut 0.18.1

Make patch release for https://github.com/coreos/prometheus-operator/pull/1193 (alertmanager: Pass pod ip to --cluster.listen-address)
Needs to wait for https://github.com/coreos/prometheus-operator/pull/1197 to be merged.

lgtm :+1:

authors: brancz mxinden

repo: coreos/prometheus-operator


text:
Add exporter-kube-state to default servicemonitor selector

Add exporter-kube-state to default servicemonitor selector

/close
Dublicate #1316

Dublicate #1316


text:
Create documentation for ingress monitoring

@brancz I am following up on your request from https://github.com/prometheus/docs/pull/1373 to submit a PR for this documentation here.
I wanted to spin up Prometheus in Kubernetes so I could monitor ingress to my cluster. I spent some time hacking away at getting a working config and I felt it would be useful to write up my process for documentation.
Using the Prometheus Operator came off as the easiest way to deploy Prometheus in my cluster to collect metrics from Envoy.
I have documented the steps you need to take to get:

An example application running in Kubernetes
Ambassador running and exposing the application to the internet
Prometheus running in cluster and scraping ingress statistics from Envoy

I have made a couple of clarifying edits from the original PR I submitted against the Prometheus documentation but let me know if you have any feedback on ways to improve this document.
Thanks!

lgtm thanks for the high quality docs!

@brancz I noticed I failed to add this document for the ToC on the CoreOS site. Could you point me at how I can do this and I will submit another PR for it.
Thanks!

The coreos.com docs are not being updated anymore, it’s just what’s in this repo.

authors: brancz nbkrause


text:
"dial tcp: i/o timeout"-error while fetching any image

Environment:
rkt Version: 1.8.0
appc Version: 0.8.4
Go Version: go1.6.2
Go OS/Arch: linux/amd64
Features: -TPM
--
Linux 3.10.0-327.13.1.el7.x86_64 x86_64
--
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"

CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"
--
systemd 219
+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN

How to reproduce:
rkt fetch --debug coreos.com/etcd

Actual result:
image: searching for app image coreos.com/etcd
image: meta tag 'ac-discovery' not found on coreos.com/etcd
  └─Get https://coreos.com/etcd?ac-discovery=1: dial tcp: i/o timeout
image: meta tag 'ac-discovery' not found on coreos.com
  └─Get https://coreos.com?ac-discovery=1: dial tcp: i/o timeout
fetch:
  └─discovery failed for "coreos.com/etcd"
    └─discovery failed

Expected result: image is fetched.
The same result is when acbuild running with dependencies (golang issue?).

This looks like something going on with host networking. @legeyda is your network setup non-standard in some relevant way, like having multiple interfaces, asymmetric routing, IPv6-only setup, some kind of proxying or something else you are aware of? Do other unrelated command-line and golang programs work with HTTPS traffic?

I've just installed fresh centos7 in virtualbox (network of type "NAT"), and the result is the same
(installed precompiled binaries from https://github.com/coreos/rkt/releases/download/v1.8.0/rkt-v1.8.0.tar.gz).

@squeed perhaps you can try your hand at reproducing this one if you're working on a VirtualBox env

@legeyda, I'm not able to reproduce this. I created a fresh Centos7 machine in VirtualBox and it worked. Can you send the output of url -v -o /dev/null https://coreos.com/dist/pubkeys/aci-pubkeys.gpg please?

I'm going to close this. @legeyda, feel free to open this again.

authors: jonboulle legeyda lucab squeed

repo: coreos/rkt


text:
binding EXPOSEd --port from docker images in contained --net=default

Environment
rkt Version: 1.14.0
appc Version: 0.8.7
Go Version: go1.7.1
Go OS/Arch: linux/amd64
Features: -TPM +SDJOURNAL
--
Linux 4.7.3-coreos-r3 x86_64
--
NAME=CoreOS
ID=coreos
VERSION=1185.5.0
VERSION_ID=1185.5.0
BUILD_ID=2016-12-07-0937
PRETTY_NAME="CoreOS 1185.5.0 (MoreOS)"
ANSI_COLOR="1;32"
HOME_URL="https://coreos.com/"
BUG_REPORT_URL="https://github.com/coreos/bugs/issues"
--
systemd 231
+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK -SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT -GNUTLS -ACL +XZ -LZ4 +SECCOMP +BLKID -ELFUTILS +KMOD -IDN

What did you do?
sudo rkt run --port=2379-tcp:4379 quay.io/coreos/etcd:v3.0.15

What did you expect to see?
the etcd container running with an exposed port 4379 mapped to internal container port 2379
What did you see instead?
image: using image from local store for image name coreos.com/rkt/stage1-coreos:1.14.0
image: using image from local store for image name quay.io/coreos/etcd:v3.0.15
stage1: port name "2379-tcp" is not defined by any apps

I suspect this to be a Quay bug.
Running rkt image cat-manifest ... for the aci downloaded from quay shows that there aren't any ports defined, whereas examining the docker image for the same version/tag shows it does have those ports exposed.
I've given a heads up to the Quay team.
This can be worked around by running rkt run --port=2379-tcp:4379 docker://quay.io/coreos/etcd:v3.0.15 instead (using the docker:// prefix).
Alternately, this could be worked around / fixed by #3407.

@euank yes this works
sudo rkt run --port=2379-tcp:4379 --insecure-options=image docker://quay.io/coreos/etcd:v3.0.15
i thought i was using rkt wrong.
closing this issue.

authors: euank theRemix


text:
How to define multiple workers for Vagrant/Virtualbox

Issue Report Template
Tectonic Version
1.7.1-tectonic.1
Environment
What hardware/cloud provider/hypervisor is being used with Tectonic?
Runnin on Mac Os X the sandbox with Vagrant/Virtualbox
Expected Behavior
In the Vagrantfile or UI you can specify how many workers do you want (tectonic free tier is up to 10)
Actual Behavior
Vagrantfile or UI has no any configuration parameter as it had before
Other Information
I have tried to hack the Vagrantfile adding more workers using a loop, but I had some troubles.
I can do a PR with it and you can help me. I think it could be nice for others too

It will be awesome to try multiple workers in the sandbox. I need to be able to emulate workers unavailability for current project at home, and our developers need this too.

@pipo02mix @123BLiN Tectonic Sandbox is a project with the goal of spinning up a cluster to test out Tectonic. It is not likely that we will expand it to include features like adding additional worker nodes.
You could probably hack this up quite easily by editing the vagrant file if you desire.

repo: coreos/tectonic-forum


text:
941310 - Double escape and problem with german ü

Description
Hi!
The rule says this:
SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx \xbc[^\xbe>]*[\xbe>]|<[^\xbe]*\xbe" \
But it actually matches this:
\\xbc[^\\xbe>][\\xbe>]|<[^\\xbe]\\xbe
Why? This makes it match our string "Gültigkeit" which encoded looks like this "G\xbcltigkeit"
Audit Logs / Triggered Rule Numbers
941310
--3234e523-H-- Message: Warning. Pattern match "\\xbc[^\\xbe>]*[\\xbe>]|<[^\\xbe]*\\xbe" at ARGS:offerData. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "546"] [id "941310"] [msg "US-ASCII Malformed Encoding XSS Filter - Attack Detected"] [data "Matched Data: \xbcltigkeit in tagen\x22},{\x22einstellungs_id\x22:30,\x22gruppierung\x22:\x22angebotkv\x22,\x22art\x22:\x22mandant\x22,\x22key\x22:\x22kauf_gueltigkeitsdauer\x22,\x22value\x22:\x2228\x22,\x22type\x22:\x22text\x22,\x22options\x22:null,\x22default\x22:\x2214\x22,\x22hilfetext\x22:null,\x22wartbar\x22:\x221\x22,\x22marke_id\x22:0,\x22datum_anlage\x22:\x2223.10.2014 15:06\x22,\x22datum_bearbeitung\x22:\x2223.10.2014 15:06\x22,\x22benutzer_anlage\x22:6,\x22benutzer_bearbeitung\x22:6,\x22bezeic..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-tomcat"] [tag "attack-xss"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"] Message: Warning. Pattern match "(?i:(?:[\"'](?:;?\s*?(?:having|select|union)\b\s*?[^\s]|\s*?!\s*?"'\\w])|(?:c(?:onnection_id|urrent_user)|database)\\s*?\\([^\\)]*?|u(?:nion(?:[\\w(\\s]*?select| select @)|ser\\s*?\\([^\\)]*?)|s(?:chema\\s*?\\([^\\)]*?|elect.*?\\w?user\\()|in ..." at ARGS:offerData. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "183"] [id "942190"] [msg "Detects MSSQL code execution and information gathering attempts"] [data "Matched Data: \x22select\x22 found within ARGS:offerData: {\x22id\x22:3377,\x22mandant_id\x22:67,\x22offer_type_id\x22:1,\x22offer_calculationtype_id\x22:1,\x22offer_businesscase_id\x22:1,\x22offer_status_id\x22:1,\x22kontakt_id\x22:219805,\x22kundengruppe\x22:\x22B2C\x22,\x22offer_name\x22:\x22\x22,\x22gewaehrleistung\x22:\x22\x22,\x22garantie\x22:\x22\x22,\x22bemerkung_intern\x22:\x22\x22,\x22bemerkung_extern\x22:\x22\x22,\x22offer_reference_number\x22:202101233,\x22offer_reference_external\x22:\x22\x2..." Message: Rule 7f3211923618 [id "942240"][file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "254"] - Execution error - PCRE limits exceeded (-8): (null). Message: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] Message: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-980-CORRELATION.conf"] [line "91"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=5,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [ver "OWASP_CRS/3.3.2"] [tag "event-correlation"] Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 62.47.98.110] ModSecurity: Warning. Pattern match "\\\\\\\\xbc[^\\\\\\\\xbe>]*[\\\\\\\\xbe>]|<[^\\\\\\\\xbe]*\\\\\\\\xbe" at ARGS:offerData. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "546"] [id "941310"] [msg "US-ASCII Malformed Encoding XSS Filter - Attack Detected"] [data "Matched Data: \\\\xbcltigkeit in tagen\\\\x22},{\\\\x22einstellungs_id\\\\x22:30,\\\\x22gruppierung\\\\x22:\\\\x22angebotkv\\\\x22,\\\\x22art\\\\x22:\\\\x22mandant\\\\x22,\\\\x22key\\\\x22:\\\\x22kauf_gueltigkeitsdauer\\\\x22,\\\\x22value\\\\x22:\\\\x2228\\\\x22,\\\\x22type\\\\x22:\\\\x22text\\\\x22,\\\\x22options\\\\x22:null,\\\\x22default\\\\x22:\\\\x2214\\\\x22,\\\\x22hilfetext\\\\x22:null,\\\\x22wartbar\\\\x22:\\\\x221\\\\x22,\\\\x22marke_id\\\\x22:0,\\\\x22datum_anlage\\\\x22:\\\\x2223.10.2014 15:06\\\\x22,\\\\x22datum_bearbeitung\\\\x22:\\\\x2223.10.2014 15:06\\\\x22,\\\\x22benutzer_anlage\\\\x22:6,\\\\x22benutzer_bearbeitung\\\\x22:6,\\\\x22bezeic..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-tomcat"] [tag "attack-xss"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"] [hostname "snipped"] [uri "/crm/dokumente/dokument_pdf/3337373737366535353835306130356139626434656263353362333433336438656161366435333863326231333832393532386230356264316230366531313361626637383234646332656165333266623137373536666430363866646339386531643366333565623434373665613863653765633462313965646164656466553950746a52326473415a78475255666e6e726f706f4e304b415676626b44486373427254706d495453633d"] [unique_id "YQqJyNBZrnK0t4Z4Vmz6@AAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 62.47.98.110] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\"'|(?:c(?:onnection_id|urrent_user)|database)\\\\s*?\\\\([^\\\\)]?|u(?:nion(?:[\\\\w(\\\\s]?select| select @)|ser\\\\s*?\\\\([^\\\\)]?)|s(?:chema\\\\s?\\\\([^\\\\)]?|elect.?\\\\w?user\\\\()|in ..." at ARGS:offerData. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "183"] [id "942190"] [msg "Detects MSSQL code execution and information gathering attempts"] [data "Matched Data: \\x22select\\x22 found within ARGS:offerData: {\\x22id\\x22:3377,\\x22mandant_id\\x22:67,\\x22offer_type_id\\x22:1,\\x22offer_calculationtype_id\\x22:1,\\x22offer_businesscase_id\\x22:1,\\x22offer_status_id\\x22:1,\\x22kontakt_id\\x22:219805,\\x22kundengruppe\\x22:\\x22B2C\\x22,\\x22offer_name\\x22:\\x22\\x22,\\x22gewaehrleistung\\x22:\\x22\\x22,\\x22garantie\\x22:\\x22\\x22,\\x22bemerkung_intern\\x22:\\x22\\x22,\\x22bemerkung_extern\\x22:\\x22\\x22,\\x22offer_reference_number\\x22:202101233,\\x22offer_reference_external\\x22:\\x22\\x2..." [hostname "snipped"] [uri "/crm/dokumente/dokument_pdf/3337373737366535353835306130356139626434656263353362333433336438656161366435333863326231333832393532386230356264316230366531313361626637383234646332656165333266623137373536666430363866646339386531643366333565623434373665613863653765633462313965646164656466553950746a52326473415a78475255666e6e726f706f4e304b415676626b44486373427254706d495453633d"] [unique_id "YQqJyNBZrnK0t4Z4Vmz6@AAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 62.47.98.110] ModSecurity: Rule 7f3211923618 [id "942240"][file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "254"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "snipped"] [uri "/crm/dokumente/dokument_pdf/3337373737366535353835306130356139626434656263353362333433336438656161366435333863326231333832393532386230356264316230366531313361626637383234646332656165333266623137373536666430363866646339386531643366333565623434373665613863653765633462313965646164656466553950746a52326473415a78475255666e6e726f706f4e304b415676626b44486373427254706d495453633d"] [unique_id "YQqJyNBZrnK0t4Z4Vmz6@AAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 62.47.98.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "snipped"] [uri "/crm/dokumente/dokument_pdf/3337373737366535353835306130356139626434656263353362333433336438656161366435333863326231333832393532386230356264316230366531313361626637383234646332656165333266623137373536666430363866646339386531643366333565623434373665613863653765633462313965646164656466553950746a52326473415a78475255666e6e726f706f4e304b415676626b44486373427254706d495453633d"] [unique_id "YQqJyNBZrnK0t4Z4Vmz6@AAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 62.47.98.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-980-CORRELATION.conf"] [line "91"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=5,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [ver "OWASP_CRS/3.3.2"] [tag "event-correlation"] [hostname "snipped"] [uri "/crm/dokumente/dokument_pdf/3337373737366535353835306130356139626434656263353362333433336438656161366435333863326231333832393532386230356264316230366531313361626637383234646332656165333266623137373536666430363866646339386531643366333565623434373665613863653765633462313965646164656466553950746a52326473415a78475255666e6e726f706f4e304b415676626b44486373427254706d495453633d"] [unique_id "YQqJyNBZrnK0t4Z4Vmz6@AAAAAQ"]`
Your Environment

CRS version (e.g., v3.2.0): 3.3.2
Paranoia level setting: 1
ModSecurity version (e.g., 2.9.3): 2.9.2-1
Web Server and version (e.g., apache 2.4.41): Apache/2.4.29 (
Operating System and version:Ubuntu 18.04.5

Confirmation
[x] I have removed any personal data (email addresses, IP addresses,
passwords, domain names) from any logs posted.

Hi @stefanpinter,
thanks for your report.
Could you show us your request with curl? I'm afraid without that we can't investigate this issue.
Btw it's interesting that you have two lines with same id (941130), but different content:
Warning. Pattern match "\\xbc[^\\xbe>]*[\\xbe>]|<[^\\xbe]*\\xbe" at ARGS:offerData. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "546"] [id "941310"] [msg "US-ASCII Malformed Encoding XSS Filter - Attack Detected"] [data "Matched Data: \xbcltigkeit in tagen\x22},{\x22einstellungs_id\x22:30,\x22gruppierung\x22:\x22angebotkv\x22,\x22art\x22:\x22mandant\x22,\x22key\x22:\x22kauf_gueltigkeitsdauer\x22,\x22value\x22:\x2228\x22,\x22type\x22:\x22text\x22,\x22options\x22:null,\x22default\x22:\x2214\x22,\x22hilfetext\x22:null,\x22wartbar\x22:\x221\x22,\x22marke_id\x22:0,\x22datum_anlage\x22:\x2223.10.2014 15:06\x22,\x22datum_bearbeitung\x22:\x2223.10.2014 15:06\x22,\x22benutzer_anlage\x22:6,\x22benutzer_bearbeitung\x22:6,\x22bezeic..."] [severity "CRITICAL"]
Warning. Pattern match "\\\\\\\\xbc[^\\\\\\\\xbe>]*[\\\\\\\\xbe>]|<[^\\\\\\\\xbe]*\\\\\\\\xbe" at ARGS:offerData. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "546"] [id "941310"] [msg "US-ASCII Malformed Encoding XSS Filter - Attack Detected"] [data "Matched Data: \\\\xbcltigkeit in tagen\\\\x22},{\\\\x22einstellungs_id\\\\x22:30,\\\\x22gruppierung\\\\x22:\\\\x22angebotkv\\\\x22,\\\\x22art\\\\x22:\\\\x22mandant\\\\x22,\\\\x22key\\\\x22:\\\\x22kauf_gueltigkeitsdauer\\\\x22,\\\\x22value\\\\x22:\\\\x2228\\\\x22,\\\\x22type\\\\x22:\\\\x22text\\\\x22,\\\\x22options\\\\x22:null,\\\\x22default\\\\x22:\\\\x2214\\\\x22,\\\\x22hilfetext\\\\x22:null,\\\\x22wartbar\\\\x22:\\\\x221\\\\x22,\\\\x22marke_id\\\\x22:0,\\\\x22datum_anlage\\\\x22:\\\\x2223.10.2014 15:06\\\\x22,\\\\x22datum_bearbeitung\\\\x22:\\\\x2223.10.2014 15:06\\\\x22,\\\\x22benutzer_anlage\\\\x22:6,\\\\x22benutzer_bearbeitung\\\\x22:6,\\\\x22bezeic..."] [severity "CRITICAL"]

Thank you.

hi!
sadly, I couldn't make a curl post request  to work for now
Github is adding backslashes like crazy...
but in reality this is what is happening indeed.
The rule only has one backslash before each xbc and each xbe, which make it stand for some special symbols:
SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx \xbc[^\xbe>]*[\xbe>]|<[^\xbe]*\xbe" \
but it actually matches against this:
\\xbc[^\\xbe>]*[\\xbe>]|<[^\\xbe]*\\xbe
with TWO backslashes whereas the additional backslash is escaping the first one, making it not actually match these special symbols
i understand that this might be intentional somehow in this XSS context? can you confirm this?

hi @stefanpinter,

The rule only has one backslash before each xbc and each xbe, which make it stand for some special symbols:
SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx \xbc[^\xbe>]*[\xbe>]|<[^\xbe]*\xbe" \

That's correct.

but it actually matches against this:
\\xbc[^\\xbe>]*[\\xbe>]|<[^\\xbe]*\\xbe
with TWO backslashes whereas the additional backslash is escaping the first one, making it not actually match these special symbols

Do you see this pattern in your log? If yes, that's because Apache escapes the \ sequences, it's normal.

i understand that this might be intentional somehow in this XSS context? can you confirm this?

No, I'm not sure this one.
If your application works only from browser, you can press CTRL+SHIFT+I, and check the Network tab. There you can see the requests. If you choose the correct one, and select it by the right button, there will be an option: Copy -> Copy as cURL. Remove the sensitive data, and please share that request with us. It would be good to see the whole request (including headers).

with the generated curl command it goes through fine it seems
`* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):

TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):

old SSL session ID is stale, removing

Mark bundle as not supporting multiuse
< HTTP/1.1 100 Continue
HTTP/1.1 100 Continue

We are completely uploaded and fine`

These are just the TLS negotiation phase, we have to see the whole request, including headers. The command itself would be the best.
For eg.:
$ curl -v [your optional headers and other parameters] https://coreruleset.org
* Rebuilt URL to: https://coreruleset.org/
*   Trying 172.67.160.202...
...
...
> GET / HTTP/2
> Host: coreruleset.org
> User-Agent: curl/7.58.0
> Accept: */*
>

Hi! Oh, you are right. curl was waiting for some resonse because I had the score threshold at 5000.
so this curl command does work (it is inside the link)
https://private.motiondata-vector.com/?4637cbd27bf01220#Hs1E2sdjPf5LHnKe61LNY5Gq89t9G2gkoinL1Sos9L1S

Link is already gone. :(
When you put things in triple backticks, GH should not add any additional backslashes.

Hi dune73! https://private.motiondata-vector.com/?01b8c79309b7c351#EqMC16uukG31Znz8UwWhuFny6FjrrsPBuqBhuLpPrRP

Thanks @stefanpinter.
Here is the condensed minimal request (30min of work):
curl http://localhost --data-raw 'foo=F%C3%BChrung%3E'

%C3%BC is a UTF-8 ü, a German Umlaut.
3E is >.
So we have Führung> encoded as UTF-8. Führung is a semi-frequent German noun.

hi @dune73
Sorry, but what can I do with that? or our webdevs,...?
I can at least confirm that this does the same:
curl -i -v https://host.name --data-raw 'foo=F%C3%BChrung%3E'
--12fd9040-C--
foo=F%C3%BChrung%3E
--12fd9040-F--
HTTP/1.1 403 Forbidden
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--12fd9040-E--

403 Forbidden

Forbidden
You don't have permission to access this resource.

--12fd9040-H--
Message: Warning. Pattern match "\xbc[^\xbe>][\xbe>]|<[^\xbe]\xbe" at ARGS:foo.

Thanks for the confirmation.
No, this is not for you. It's for us. If we want to fix this, we need to be able to test this. That's why I took the time to condense your payload to the minimal payload that triggers the alert.
Now we have that and we can go about fixing this. Or we decide to leave it, since the > is quite indicative of an XSS and it might be better to accept the false positive from a rule set perspective.
In the meantime or if we leave it open, you should write a rule exclusion for this particular case. See the tutorials at https://netnea.com to learn how to do that.

I also got false positive with khmer unicode UTF8: ើ (%E1%9E%BE).

Thank you for reporting @Kendokai. This is highly welcome since we get very few report about non-Western language false positive. Can you tell me more about your setup and could you provide a full curl call that triggers this rule (see above)?

Maybe this problem was already solved by https://github.com/coreruleset/coreruleset/pull/2107.
I'll try to reproduce and test the false positives against the fix.

Issue covered in the September issue chat.
@franbuehler volunteered to check if this is indeed already solved, including the Russian and Khmer findings.

@dune73
ModSecurity version:  Version 3.2.0 - 2019-09-24
--73997253-F-- HTTP/1.1 403 Forbidden X-Frame-Options: SAMEORIGIN Content-Length: 199 Connection: close Content-Type: text/html; charset=iso-8859-1 --73997253-H-- Message: Warning. Pattern match "[\\xbc\\xbe].*[\\xbc\\xbe>]|[\\xbc\\xbe<].*[\\xbc\\xbe]" at ARGS:model[description]. [file "/etc/httpd/modsecurity.d/owasp-modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "646"] [id "941310"] [msg "US-ASCII Malformed Encoding XSS Filter - Attack Detected."] [data "Matched Data: \xbc\x85 \x87\xb6\x94\xd2\x9a\x97\xc1\x91\x94\x93\xd2\x8f\xc4\x84\x9f\xc4\x9a  \x9f\x80\xd2\x8f\xb7\x9f\x98 \x87\xb6\x98\xbd\x99\x94\xd2\x9a\x8e\xb7\x8f\x97\xb6\x96\x9f\xc6\x9a\xb6\x94\xcb\x96\xb7\x92\xb8\x98\x84\xd2\x82\x9b (\x95\x9b\xb7\x8f\x95\x9b\x81\xd2\x98\xc2\x9a)\x0d\x0a\x91\xc6\x93\xb6\x80\xcb\x91\xc6\x93\x84 \xd6 098 582 345 \x92\xd2\x9c\xbe found within ARGS:model[description]: \xa2\x84\xd2\x9a\xbb\x8f\x8f\xbc\x85 \x87\xb6\x94\xd2\x9a\x97\xc1\x91\x94\x93\xd2\x8f\xc4\x84\x9f\xc4\x..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-tomcat"] [tag "attack-xss"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ Message: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/owasp-modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] Message: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/owasp-modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.201.213.251] ModSecurity: Warning. Pattern match "[\\\\\\\\xbc\\\\\\\\xbe].*[\\\\\\\\xbc\\\\\\\\xbe>]|[\\\\\\\\xbc\\\\\\\\xbe<].*[\\\\\\\\xbc\\\\\\\\xbe]" at ARGS:model[description]. [file "/etc/httpd/modsecurity.d/owasp-modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "646"] [id "941310"] [msg "US-ASCII Malformed Encoding XSS Filter - Attack Detected."] [data "Matched Data: \\\\xbc\\\\x85 \\\\x87\\\\xb6\\\\x94\\\\xd2\\\\x9a\\\\x97\\\\xc1\\\\x91\\\\x94\\\\x93\\\\xd2\\\\x8f\\\\xc4\\\\x84\\\\x9f\\\\xc4\\\\x9a  \\\\x9f\\\\x80\\\\xd2\\\\x8f\\\\xb7\\\\x9f\\\\x98 \\\\x87\\\\xb6\\\\x98\\\\xbd\\\\x99\\\\x94\\\\xd2\\\\x9a\\\\x8e\\\\xb7\\\\x8f\\\\x97\\\\xb6\\\\x96\\\\x9f\\\\xc6\\\\x9a\\\\xb6\\\\x94\\\\xcb\\\\x96\\\\xb7\\\\x92\\\\xb8\\\\x98\\\\x84\\\\xd2\\\\x82\\\\x9b (\\\\x95\\\\x9b\\\\xb7\\\\x8f\\\\x95\\\\x9b\\\\x81\\\\xd2\\\\x98\\\\xc2\\\\x9a)\\\\x0d\\\\x0a\\\\x91\\\\xc6\\\\x93\\\\xb6\\\\x80\\\\xcb\\\\x91\\\\xc6\\\\x93\\\\x84 \\\\xd6 098 582 345 \\\\x92\\\\xd2\\\\x9c\\\\xbe found within ARGS:model[description]: \\\\xa2\\\\x84\\\\xd2\\\\x9a\\\\xbb\\\\x8f\\\\x8f\\\\xbc\\\\x85 \\\\x87\\\\xb6\\\\x94\\\\xd2\\\\x9a\\\\x97\\\\xc1\\\\x91\\\\x94\\\\x93\\\\xd2\\\\x8f\\\\xc4\\\\x84\\\\x9f\\\\xc4\\\\x..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-tomcat"] [tag "attack-xss"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ [hostname ""] [uri ""] [unique_id "YSxVJwt1BJ8HurwGGrLCawAAAAU"] Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.201.213.251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/owasp-modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "v-modernprintingservices.com"] [uri "/admin/invoice-namecard/31"] [unique_id "YSxVJwt1BJ8HurwGGrLCawAAAAU"] Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.201.213.251] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/owasp-modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname ""] [uri ""] [unique_id "YSxVJwt1BJ8HurwGGrLCawAAAAU"] Action: Intercepted (phase 2) Stopwatch: 1630295335449896 7175 (- - -) Stopwatch2: 1630295335449896 7175; combined=5103, p1=452, p2=4497, p3=0, p4=0, p5=154, sr=78, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.2 (http://www.modsecurity.org/); OWASP_CRS/3.2.0. Server: Apache Engine-Mode: "ENABLED"

Thank you @Kendokai.

From reading the issue the fix has been added to a 3.4/dev branch? ok but where I can find it and where can I add it. The German "ü" issue still exist in the latest official release and users need a not-dev-branch fix to make mod_security2 work on German sites.

@diqidoq You can find it here:
https://github.com/coreruleset/coreruleset/pull/2107/files

You are totally right. Unfortunately, Ubuntu and Debian refuse to upgrade to latest releases (even in the 3.3 release line). We're at it, but it's not going anywhere.
If you prefer packages, then I suggest you check out https://modsecurity.digitalwave.hu/.
Ervin Hegedüs / @airween who is providing these is also providing the official debian / ubuntu packages (they are just not picking them up).

just to make sure, i got you correct. this repo "replaces" modsecurity-crs so that i can uninstall modsecurity-crs?

Hi @chrisi51,

just to make sure, i got you correct. this repo "replaces" modsecurity-crs so that i can uninstall modsecurity-crs?

you don't need to uninstall that package. If you set up Digitalwave's repository and do an upgrade your system will upgrade your existing owasp-modsecurity-crs package to 3.3.5.
Please be careful which packages you allow to install from that repository!

authors: Kendokai airween azurit chrisi51 diqidoq dune73 franbuehler stefanpinter

repo: coreruleset/coreruleset


text:
Do console errors reference the correct character position?

If you type in M on it's own it says
line: 1
char: 2
ERROR
Expected 'opcode', got end of file
Is character 2  right? If it's meant to imply that character 2 (in that example) is intended to be the end of the opcode then I guess it makes sense.
If it's intended to imply that character 2 is an error then it's a little more confusing.
The more I read it I suspect the former, in which case probably not a problem!

I believe this is a duplicate of #127

Closing, duplicate.

authors: dougajmcdonald gareththegeek

repo: corewar/corewar


text:
What about trying to use the Ubuntu binaries?

Just like Arch users are doing https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=swift-bin

Apparently it's not possible https://github.com/thawkins/fedora-swift/issues/4

indeed bleeding edge Fedora

authors: Zialus corinnekrych

repo: corinnekrych/swift-rpm


text:
Extern Object Typing Bug

extern object typing is broken when the methods take the object type as args. simple fixes have broken the current typing algorithm so far

Can you write an example here?

Ok let me procrastinate a bit with an explanation of what's going on here. This came up in the uP4 branch because of the im_t extern's copy_from method.
extern im_t {
  /* ... other methods removed ... */
  void copy_from(im_t im);
}

Right now this doesn't typecheck because the typechecker does not insert a forward declaration of im_t into the environment before checking the method signatures. Adding code to do this made the declaration typecheck, but causes problems in our type equality/canonicalization code later.
There's a routine saturate_type (or something like that) which recursively substitutes type definitions into types. It loops forever when it encounters an im_t because the current representation of extern types includes all of its methods. Saturating an im_t requires saturating the copy_from method, and the copy_from method includes a reference to im_t, so that has to be saturated as well, etc...
The obvious solution here, I think, is for externs to become strictly nominal[1] and for methods to move into their own context. This could tie in nicely with a refactor to parametrize the typechecker over targets.
[1]: So giving extern types the representation ExternObjType name, rather than ExternObjType {name; methods = [...]}, with methods kept in a new field of Prog.CheckerEnv. The alternative is to introduce true recursive types, which would be a headache considering there's nowhere else in P4 that needs self-reference afaict.

p4c (at git hash c68f3057a) doesn't like it either. I guess the uP4 p4c must be patched to handle this kind of thing properly.
In file: /home/ryan/dev/p4c/frontends/p4/typeChecking/typeChecker.cpp:168
Compiler Bug: example.p4(3): Could not find type of <Type_Extern>(84) im_t extern im_t<> {
  void set_out_port<>(in PortId_t out_port);
  PortId_t get_in_port<>();
  PortId_t get_out_port<>();
  bit<32> get_value<>(metadata_fields_t field_type);
  void copy_from<>(im_t im);
  void drop<>(); }
extern im_t {
       ^^^^

p4lang/p4c#2594

Fixed in #250.

authors: hackedy jnfoster stp59


text:
Update zio, zio-streams to 2.0.14

About this PR
📦 Updates

dev.zio:zio
dev.zio:zio-streams

from 2.0.6 to 2.0.14
📜 GitHub Release Notes - Version Diff
Usage
✅ Please merge!
I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.
If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.
Configure Scala Steward for your repository with a .scala-steward.conf file.
Have a fantastic day writing Scala!

⚙ Adjust future updates
Add this to your .scala-steward.conf file to ignore future updates of this dependency:
updates.ignore = [ { groupId = "dev.zio" } ]

Or, add this to slow down future updates of this dependency:
dependencyOverrides = [{
  pullRequests = { frequency = "30 days" },
  dependency = { groupId = "dev.zio" }
}]

labels: library-update, early-semver-patch, semver-spec-patch, commit-count:1

Superseded by #317.

repo: cornerman/colibri