[syslog-ng] [Bug 250] New: Colon does not need escaping in pattern parser @ESTRING@

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Fri Aug 23 13:56:40 CEST 2013


https://bugzilla.balabit.com/show_bug.cgi?id=250

           Summary: Colon does not need escaping in pattern parser @ESTRING@
           Product: syslog-ng
           Version: 3.4.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: bugzilla.balabit at faxm0dem.org
Type of the Report: ---
   Estimated Hours: 0.0


Created an attachment (id=81)
 --> (https://bugzilla.balabit.com/attachment.cgi?id=81)
@ESTRING::::@ vs. @ESTRING:::@

According to the 3.4 documentation (§13.5.1.1) using a ":" (colon) as stop string for the @ESTRING@ parser
needs to be escaped using a second ":" (colon).

It seems this is not the case: patterns fail when using "::", but match when using ":":

$ pdbtool test -v estring_colon_escaped.pdb
Testing message program='dummy' message='foo: bar'
 Wrong match name='.classifier.rule_id', value='', expected='0304be33-4f3e-459e-8888-d86769986c32'
 Wrong match name='key', value='', expected='foo'
 Wrong match name='value', value='', expected='bar'

$ pdbtool test -v estring_colon.pdb
Testing message program='dummy' message='foo: bar'
 Match name='.classifier.rule_id', value='0304be33-4f3e-459e-8888-d86769986c32', expected='0304be33-4f3e-459e-8888-d86769986c32'
 Match name='key', value='foo', expected='foo'
 Match name='value', value='bar', expected='bar'


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list