modsecurity: fix segfault when logging conf error (closes owasp-modsecurity#87)

pracj3am · pracj3am · commit 771fd4e95df7 · 2022-09-29T19:08:23.000+02:00
diff --git a/src/ngx_http_modsecurity_module.c b/src/ngx_http_modsecurity_module.c
@@ -329,7 +329,7 @@ ngx_http_modsecurity_set_rules(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
     if (rc < 0) {
         ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
                            "Failed to load the rules: \"%V\": %s",
-                           value[1], error);
+                           &value[1], error);
         free((char *)error);
         return NGX_CONF_ERROR;
     }
@@ -371,7 +371,7 @@ ngx_http_modsecurity_set_rules_file(ngx_conf_t *cf, ngx_command_t *cmd,
     if (rc < 0) {
         ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
                            "Failed to load the rules from file %V: %s",
-                           value[1], error);
+                           &value[1], error);
         free((char *)error);
         return NGX_CONF_ERROR;
     }
@@ -415,7 +415,7 @@ ngx_http_modsecurity_set_rules_remote(ngx_conf_t *cf, ngx_command_t *cmd,
     if (rc < 0) {
         ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
                            "Failed to load the remote rules %V %V: %s",
-                           value[1], value[2], error);
+                           &value[1], &value[2], error);
         free((char *)error);
         return NGX_CONF_ERROR;
     }
