snuffleupagus/src/sp_harden_rand.c, branch master Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! http://git.dustri.org/snuffleupagus/atom?h=master 2021-09-23T10:23:40Z config is stack allocated now + some code improvements (see details) 2021-09-23T10:23:40Z Ben Fuhrmannek 2021-09-23T10:23:40Z urn:sha1:54c352c1b5aa08b187dd1e52e544709cad2b0fee * for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable fix snufflepagus_globals linking issues and one mac compatibility issue 2019-06-19T09:04:17Z Ben Fuhrmannek 2019-06-19T09:04:17Z urn:sha1:3ab467100883adedab71a28e1699799e45ab0b2d Fix #241 segfault on 32-bit related to bad protype (#242) 2018-09-03T13:38:51Z Remi Collet 2018-09-03T13:38:51Z urn:sha1:499a81914597f156fe9a67e47e3baf82a0af4bde This should close #241 Minor code cleanup 2018-08-30T15:14:08Z xXx-caillou-xXx 2018-08-30T15:14:08Z urn:sha1:206ffa3fb3fd72c6a2eb45194fb176535a91288c Fix the issue with rand hardening 2018-07-19T12:57:21Z xXx-caillou-xXx 2018-07-19T12:57:21Z urn:sha1:a925690bb54fbfb30933f7090f646ce05b9d2c80 Massive simplification of functions hooking 2018-02-05T17:13:57Z jvoisin 2018-02-05T17:13:57Z urn:sha1:9d153cc185b4e2327a4aabe645cf1fabd3b4f21b Eval blacklist 2018-01-04T14:59:59Z jvoisin 2018-01-04T14:59:59Z urn:sha1:3b113be573cdbca20ce9ec9c0a6efb25ccf51db5 Add support for eval filtering, only blacklist for now Remove some dead code 2018-01-03T12:36:52Z jvoisin 2018-01-03T12:36:52Z urn:sha1:3b547450e5ee6d7bd93f28b44e751ee43936c909 Code formatting pass on harden-rand 2017-11-29T16:53:06Z jvoisin 2017-11-29T16:53:06Z urn:sha1:4f1dc0debc8eb7be9d1ed498f0b8dd64021662e7 Initialize some possibly uninitialized variables 2017-11-27T12:15:15Z jvoisin 2017-11-27T12:15:15Z urn:sha1:da60d1f06ba1b22894b570b121f94d34da6d571f Thanks to coverity