snuffleupagus/src/sp_session.c, branch optim85 Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! http://git.dustri.org/snuffleupagus/atom?h=optim85 2026-02-23T20:04:28Z Simplify formatting 2026-02-23T20:04:28Z Christian Göttsche 2026-02-23T17:52:04Z urn:sha1:9bbb7affb5f23e4d52da0da159229956049e3cfd The members sid_min_length and sid_max_length are of type unsigned long, thus use %lu instead of %zu and a cast. Log session ID lengths on failure 2026-02-22T22:58:33Z Christian Göttsche 2026-02-22T21:11:05Z urn:sha1:31d70da1ff61480f51b8ca747bc8c8d8a37c5061 Fix misc typos 2024-06-06T14:28:33Z Christian Göttsche 2024-05-29T18:38:27Z urn:sha1:087590b889fc2746c1392fe0b36984ed3ec1e3b0 Use strict prototypes 2024-06-06T14:27:24Z Christian Göttsche 2024-05-29T18:38:13Z urn:sha1:7e7678a0e5927af625e42627ed9f5757ecf9ca89 Use the special value void as parameter for functions taking nor argument. make session support a runtime check instead of compile time 2022-01-12T18:08:28Z Ben Fuhrmannek 2022-01-12T18:08:28Z urn:sha1:02fa1c084405fc96ba83a06cd83047ecd8eb22cb removed a few newlines 2022-01-11T18:47:40Z Ben Fuhrmannek 2022-01-11T18:47:15Z urn:sha1:c6c55498d9b3757f071f5effce39017ae10e913b config is stack allocated now + some code improvements (see details) 2021-09-23T10:23:40Z Ben Fuhrmannek 2021-09-23T10:23:40Z urn:sha1:54c352c1b5aa08b187dd1e52e544709cad2b0fee * for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable ported sid min/max restriction from suhosin 2021-09-16T10:43:11Z Ben Fuhrmannek 2021-09-16T10:43:11Z urn:sha1:a99c0b3ba7ebbd27fd62f2bde3963354c2bf55e3 fixed session encryption in php8 + related test cases 2021-09-03T11:25:33Z Ben Fuhrmannek 2021-09-03T11:25:33Z urn:sha1:2e4fda2c67ce98c9be9092effe2522c1de9f7efc fixed null pointer dereference 2021-08-03T13:29:10Z Ben Fuhrmannek 2021-08-03T13:29:10Z urn:sha1:9a26fff9a4ca132dd61184cc244d52695e347770