From 33c21195cad385dbd692f1868b863e876c3d3c44 Mon Sep 17 00:00:00 2001
From: Andrew Yang <andrewyang@forallsecure.com>
Date: Fri, 18 Mar 2022 16:15:17 -0400
Subject: [PATCH] modifying files

---
 Dockerfile | 17 +++++++----------
 Mayhemfile |  2 +-
 2 files changed, 8 insertions(+), 11 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 8ca38e1..067c6c6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,22 +1,19 @@
 FROM debian:10-slim as builder
 RUN apt-get update && apt-get install -y build-essential wget libc6-dbg
 WORKDIR /build
-RUN wget https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.15.tar.gz \
-   && tar xf lighttpd-1.4.15.tar.gz \
-   && cd /build/lighttpd-1.4.15 \
-   && CFLAGS=-g ./configure --without-bzip2 && CFLAGS=-g make && make install \
-   && mkdir /www && echo "lighttpd 1.4.15 running!" > /www/index.html
+RUN wget https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.52.tar.gz \
+   && tar xf lighttpd-1.4.52.tar.gz \
+   && cd /build/lighttpd-1.4.52 \
+   && CFLAGS=-g ./configure --without-bzip2 --without-pcre --without-zlib && CFLAGS=-g make && make install \
+   && mkdir /www && echo "lighttpd 1.4.52 running!" > /www/index.html
 COPY lighttpd.conf /usr/local/etc
 WORKDIR /
-COPY corpus /corpus
 CMD ["/usr/local/sbin/lighttpd","-D", "-f","/usr/local/etc/lighttpd.conf"]
 EXPOSE 80
 
 FROM debian:10-slim
-RUN apt-get update && apt-get install -y  --no-install-recommends libc6-dbg
-# Don't set workdir! corpus is relative to /
-COPY corpus /corpus
+RUN apt-get update && apt-get install -y libc6-dbg
 COPY --from=builder /usr/local /usr/local
-RUN mkdir /www && echo "lighttpd 1.4.15 running!" > /www/index.html
+RUN mkdir /www && echo "lighttpd 1.4.52 running!" > /www/index.html
 CMD ["/usr/local/sbin/lighttpd","-D", "-f","/usr/local/etc/lighttpd.conf"]
 EXPOSE 80
diff --git a/Mayhemfile b/Mayhemfile
index 2f35ac0..6514d02 100644
--- a/Mayhemfile
+++ b/Mayhemfile
@@ -1,5 +1,5 @@
 version: '1.16'                                # all these fields
-baseimage: forallsecure/lighttpd:vulnerable    # are unnecessary
+baseimage: forallsecure/lighttpd:fixed         # are unnecessary
 duration: 300                                  # since they will
 project: forallsecure/lighttpd                 # be filled at
 target: lighttpd                               # run creation time