snuffleupagus, branch masterSecurity module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
http://git.dustri.org/snuffleupagus/atom?h=master2026-03-29T19:16:47ZAdd a test for validate idempotence of (un)serialize2026-03-29T19:16:47Zjvoisin2026-03-29T19:16:47Zurn:sha1:75446f7bf62d3390fc8e9c6b578431a8991fc60bFix the usage of strlen() which will return a wrong size when serialized objects contains null bytes (for example in private fields)2026-03-28T20:00:13ZW0rty2026-03-27T21:15:59Zurn:sha1:6d7addeb44744dcf0f36d2aac34be5e12de23c5dAdd a test for Dateinterval::__construct2026-03-25T20:27:52Zjvoisin2026-03-25T20:27:09Zurn:sha1:0b79579c25a43be7e5918841f1d2ad8c297235ac
As it has been privately reported that the rule might not be working, so better
safe than sorry. Moreover, we didn't have tests for `__construct`
Simplify formatting2026-02-23T20:04:28ZChristian Göttsche2026-02-23T17:52:04Zurn:sha1:9bbb7affb5f23e4d52da0da159229956049e3cfd
The members sid_min_length and sid_max_length are of type unsigned long,
thus use %lu instead of %zu and a cast.
Constify function pointer tables2026-02-22T22:58:54ZChristian Göttsche2026-02-22T21:08:08Zurn:sha1:a3de1607c792eefa6d994f64d4ceaedcef02e0beLog session ID lengths on failure2026-02-22T22:58:33ZChristian Göttsche2026-02-22T21:11:05Zurn:sha1:31d70da1ff61480f51b8ca747bc8c8d8a37c5061Harden against snprintf(3) truncation2026-02-22T22:57:53ZChristian Göttsche2026-02-22T21:41:39Zurn:sha1:b441bfe693435f5d8c8ae4fd04ec3d4dae49070fDrop dead code2026-02-22T21:32:46ZChristian Göttsche2026-02-22T21:09:44Zurn:sha1:d635da3c53d3d75aca50de340b375b452ba97f8a
Dead since almost 5 years with commit ae4ac9f ("properly free memory on
shutdown")
Generalize disabled_functions_regexp_multiple.phpt expected output2026-02-22T21:30:14ZChristian Göttsche2026-02-22T21:11:23Zurn:sha1:4985b0f75a3593d1e7777ba6c1b59da4bcf2ea41
On uncommon architectures, like s390x, `-2` instead of `-1` might be printed.
Use correct parser for session ID lengths2026-02-22T21:30:14ZChristian Göttsche2026-02-22T21:09:08Zurn:sha1:b26041bfa0a1e58930a5bf26b720f97f8cf6ae13
Can causes issues on uncommon architectures, like s390x.