<feed xmlns='http://www.w3.org/2005/Atom'>
<title>snuffleupagus/src/sp_disabled_functions.c, branch master</title>
<subtitle>Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! 
</subtitle>
<id>http://git.dustri.org/snuffleupagus/atom?h=master</id>
<link rel='self' href='http://git.dustri.org/snuffleupagus/atom?h=master'/>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/'/>
<updated>2025-08-17T14:13:51Z</updated>
<entry>
<title>Fix a NULL-ptr deref</title>
<updated>2025-08-17T14:13:51Z</updated>
<author>
<name>jvoisin</name>
</author>
<published>2025-08-17T14:13:51Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=c25c8a1f25bf5ed40fbbd8642d72865dd68d054d'/>
<id>urn:sha1:c25c8a1f25bf5ed40fbbd8642d72865dd68d054d</id>
<content type='text'>
```
Program terminated with signal SIGSEGV, Segmentation fault.
20	  if (!(func-&gt;common.function_name)) {
(gdb) info locals
func = 0x0
function_name = 0xffb25f6d0190 "SearchByCallback"
complete_path_function = 0xffb26c8a0570 "\240\005\212l\262\377"
```

It seems that in some callback shenanigans, there is currently no non-NULL
`func` member in execute_data. PHP truly is marvelous.

This should close #515
</content>
</entry>
<entry>
<title>Fix a possible null-pointer dereference</title>
<updated>2022-05-15T15:12:28Z</updated>
<author>
<name>jvoisin</name>
</author>
<published>2022-05-15T15:12:28Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=b3f52547fb2a3a1192711c54315590b2b108c280'/>
<id>urn:sha1:b3f52547fb2a3a1192711c54315590b2b108c280</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Two more const</title>
<updated>2022-05-02T22:36:36Z</updated>
<author>
<name>jvoisin</name>
</author>
<published>2022-05-02T22:36:36Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=71ac90cf806b9b69236d759f6fbda7076886a6f1'/>
<id>urn:sha1:71ac90cf806b9b69236d759f6fbda7076886a6f1</id>
<content type='text'>
</content>
</entry>
<entry>
<title>introduced sp_regexp / store original regex</title>
<updated>2022-02-05T11:22:13Z</updated>
<author>
<name>Ben Fuhrmannek</name>
</author>
<published>2022-02-05T11:22:13Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=323f818a6ce33d021bc0a6d34064598917e68c91'/>
<id>urn:sha1:323f818a6ce33d021bc0a6d34064598917e68c91</id>
<content type='text'>
</content>
</entry>
<entry>
<title>fixed invalid return value</title>
<updated>2022-01-07T17:01:50Z</updated>
<author>
<name>Ben Fuhrmannek</name>
</author>
<published>2022-01-07T17:01:50Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=c102fd3535cbed3d8a22d77306dedf2caf7c8674'/>
<id>urn:sha1:c102fd3535cbed3d8a22d77306dedf2caf7c8674</id>
<content type='text'>
</content>
</entry>
<entry>
<title>prevent double checks and fixed segfault on return value access</title>
<updated>2022-01-06T20:22:50Z</updated>
<author>
<name>Ben Fuhrmannek</name>
</author>
<published>2022-01-06T20:22:50Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=4b5afd0148cef6c845a37aff68e1fbac8f5653d7'/>
<id>urn:sha1:4b5afd0148cef6c845a37aff68e1fbac8f5653d7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>fix: include class name in eval whitelist matching</title>
<updated>2021-12-14T13:29:43Z</updated>
<author>
<name>Ben Fuhrmannek</name>
</author>
<published>2021-12-14T13:29:43Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=4a45ba42b609d48c8297456d67cc8d955073b567'/>
<id>urn:sha1:4a45ba42b609d48c8297456d67cc8d955073b567</id>
<content type='text'>
</content>
</entry>
<entry>
<title>code cleanup + removed line breaks for easier IDE integration</title>
<updated>2021-12-14T13:24:56Z</updated>
<author>
<name>Ben Fuhrmannek</name>
</author>
<published>2021-12-14T13:24:56Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=1746eb1013af60d8524a42fb3431446a5933a646'/>
<id>urn:sha1:1746eb1013af60d8524a42fb3431446a5933a646</id>
<content type='text'>
</content>
</entry>
<entry>
<title>get class name from execution_data</title>
<updated>2021-12-14T13:21:43Z</updated>
<author>
<name>Ben Fuhrmannek</name>
</author>
<published>2021-12-14T13:21:43Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=9cc76c5d82df5df98392c9428eb98809c97d2cc7'/>
<id>urn:sha1:9cc76c5d82df5df98392c9428eb98809c97d2cc7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>PHP 8.1 compatibility with streams/includes + fix for ticks</title>
<updated>2021-11-30T18:38:34Z</updated>
<author>
<name>Ben Fuhrmannek</name>
</author>
<published>2021-11-30T18:38:34Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=6095651e2caa729ff56ae5a53c908b09e5f7dc29'/>
<id>urn:sha1:6095651e2caa729ff56ae5a53c908b09e5f7dc29</id>
<content type='text'>
</content>
</entry>
</feed>
