snuffleupagus/src/sp_crypt.c, branch master

Reduce the lifetime of cryptographic material

2026-04-24T10:17:05Z

Fix a possible null-pointer dereference in cookies encryption

2026-04-24T09:29:18Z

Avoid dropping const qualifier in casts

2024-06-06T14:27:35Z

Adjusts casts to void dropping const qualifiers. This helps to avoid mistakes, e.g. modifying string literals. Also use size_t for length, similar to the upstream php interfaces.

Remove some useless conditions

2022-07-13T19:33:30Z

config is stack allocated now + some code improvements (see details)

2021-09-23T10:23:40Z

* for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable

fixed session encryption in php8 + related test cases

2021-09-03T11:25:33Z

fixed memleaks in zval encryption/decryption routines

2021-08-03T13:33:17Z

Allow empty configuration (#342)

2020-08-12T08:48:59Z

This commit allows php to run (with a warning) if there is no specified snuffleupagus configuration, instead of refusing to start.

refactoring sp_log_* (#340)

2020-07-22T07:28:42Z

Co-authored-by: Giovanni Dante Grazioli

Fix snufflepagus_globals linking issues and one mac compatibility issue

2019-06-20T10:40:07Z