snuffleupagus/src/sp_pcre_compat.h, branch masterSecurity module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
http://git.dustri.org/snuffleupagus/atom?h=master2024-06-06T14:27:13ZReorder calloc(3) arguments2024-06-06T14:27:13ZChristian Göttsche2024-05-27T19:32:37Zurn:sha1:97836fae360422baf9c62dd0eb0de6e7b2cfab09
Please GCC:
In file included from /usr/include/php/20220829/Zend/zend.h:30,
from /usr/include/php/20220829/main/php.h:31,
from /usr/include/php/20220829/main/SAPI.h:20,
from src/php_snuffleupagus.h:37,
from src/sp_ifilter.c:1:
src/sp_pcre_compat.h: In function 'sp_regexp_compile':
src/sp_pcre_compat.h:38:36: warning: '__zend_calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument [-Wcalloc-transposed-args]
38 | sp_regexp *ret = pecalloc(sizeof(sp_regexp), 1, 1);
| ^~~~~~~~~
/usr/include/php/20220829/Zend/zend_alloc.h:199:72: note: in definition of macro 'pecalloc'
199 | #define pecalloc(nmemb, size, persistent) ((persistent)?__zend_calloc((nmemb), (size)):ecalloc((nmemb), (size)))
| ^~~~~
src/sp_pcre_compat.h:38:36: note: earlier argument should specify number of elements, later size of each element
38 | sp_regexp *ret = pecalloc(sizeof(sp_regexp), 1, 1);
| ^~~~~~~~~
/usr/include/php/20220829/Zend/zend_alloc.h:199:72: note: in definition of macro 'pecalloc'
199 | #define pecalloc(nmemb, size, persistent) ((persistent)?__zend_calloc((nmemb), (size)):ecalloc((nmemb), (size)))
| ^~~~~
introduced sp_regexp / store original regex2022-02-05T11:22:13ZBen Fuhrmannek2022-02-05T11:22:13Zurn:sha1:323f818a6ce33d021bc0a6d34064598917e68c91Remove some memory-leaks2021-05-08T15:14:46Zjvoisin2021-05-08T15:14:46Zurn:sha1:194b0bc9f0a4699854ea314ffa23e59f8082ddaeFix #368 build with system libpcre2021-01-04T18:32:08ZRemi Collet2021-01-04T18:32:08Zurn:sha1:48f927e9694fcfd76d9fe97542359c8b0bd0a46dConstify a function2021-01-01T15:31:33Zjvoisin2021-01-01T15:31:33Zurn:sha1:837fbdb88a513500520f057d27bdfedd0d3995caAdd PHP8 support2020-12-24T10:32:28ZJulien Voisin2020-12-24T10:32:28Zurn:sha1:98ed3be52fa15521ef405fc8029176279d80778eGet rid of pcre12020-12-13T15:26:19Zjvoisin2020-12-13T15:26:19Zurn:sha1:efec261b07e76f6c3e53beb831bbc2c65d8884d3Snuffleupagus now uses pcre2 by default2020-11-12T16:28:42Zjvoisin2020-11-12T16:28:42Zurn:sha1:f4bc388f1e4adb1b9dde5f3af77785101ad19857Yet an other pass of clang-format2018-07-13T21:36:06Zjvoisin2018-07-13T21:36:06Zurn:sha1:02afd6c84f5e4f11b1de054f36d7d1da87206defMassively optimize how rules are handled2018-07-13T08:36:50ZxXx-caillou-xXx2018-07-13T08:36:50Zurn:sha1:7963580d72a358975133f86f01de2d2eab08ba38
This commit does a lot of things:
- Use hashtables instead of lists to store the rules
- Rules that can be applied at launch time won't be tried at runtime
- Improve feedback when writing nonsensical rules
- Make intensive use of `zend_string` instead of `char*`