Skip to content

fix: heap buffer overflow in acmp pm #122

fix: heap buffer overflow in acmp pm

fix: heap buffer overflow in acmp pm #122

Triggered via pull request April 12, 2026 20:45
Status Success
Total duration 15m 47s
Artifacts 6

test-ci-windows.yml

on: pull_request
Matrix: build
Matrix: package
Matrix: test
Fit to window
Zoom out
Zoom in

Annotations

48 warnings
build (x64, Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x64, Release): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L757
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L237
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/apache2_config.c#L217
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/mod_security2.c#L1220
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/mod_security2.c#L346
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, Release): apache2/mod_security2.c#L199
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L757
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L237
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/apache2_config.c#L217
'function': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/mod_security2.c#L1220
'=': conversion from 'size_t' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/mod_security2.c#L346
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x64, RelWithDebInfo): apache2/mod_security2.c#L199
'=': conversion from 'size_t' to 'unsigned int', possible loss of data [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x86, Release): apache2/apache2_config.c#L1494
'getcwd': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _getcwd. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1436
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1408
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1386
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1384
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1367
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, Release): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4, ammaraskar/msvc-problem-matcher@1ebcb382869bfdc2cc645e8a2a43b6d319ea1cc0, msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2, TAServers/vcpkg-cache@e848939f754daf406a06006be2e05eb5b17cc481. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1494
'getcwd': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _getcwd. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1436
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1408
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1386
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1384
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1367
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1365
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1229
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1227
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
build (x86, RelWithDebInfo): apache2/apache2_config.c#L1225
'stricmp': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _stricmp. See online help for details. [D:\a\ModSecurity\ModSecurity\iis\build\modsecurityiis.vcxproj]
package (RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
package (Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
test (RelWithDebInfo)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
test (Release)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
iis-module-x64-RelWithDebInfo
3.94 MB
sha256:f1837c0409743e7a236aff79d2d1c3e75d46a37ba467dedf2b0c6984ef16a4c1
iis-module-x64-Release
2.77 MB
sha256:ca427f4810ce0bd4760248038e3e0d8471b44b0d87cf9ae732d0964a6bd77132
iis-module-x86-RelWithDebInfo
3.71 MB
sha256:35417583408455688a79f250c87e2180a68818a63372f9e4d179b118325568cd
iis-module-x86-Release
2.51 MB
sha256:9151bb6e1422dded5548c374db433e1a66e7ca705225f20f931801d48ebbc3c2
modsecurityiis-installers-RelWithDebInfo
10.5 MB
sha256:1cd8d10b0ece6eec5d8956e6ce3b4b1b2ea966ed3f1191e2446bda003dd6dbb3
modsecurityiis-installers-Release
8.21 MB
sha256:14b84676914d577179ce14b2b6ff27a0e4face915b3b2d0ae4a5d79c218ab41f