snuffleupagus/src/sp_wrapper.c, branch 85beta2Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
http://git.dustri.org/snuffleupagus/atom?h=85beta22025-07-15T20:36:00Zfix: Build PHP2025-07-15T20:36:00ZPierre Tondereau2025-07-15T18:16:08Zurn:sha1:7e56fe6cbaac489d8449962730f37a025d15cfebFix debug log statement2025-06-25T17:39:09ZChristian Göttsche2025-06-25T09:37:23Zurn:sha1:7e6822a7b470ab5fcda123927357019842cdb957
sp_log_debug() does not take a feature as first argument:
src/sp_wrapper.c: In function 'sp_reregister_php_wrapper':
src/sp_utils.h:61:53: warning: too many arguments for format [-Wformat-extra-args]
61 | if (sp_debug_stderr > 0) dprintf(sp_debug_stderr, "[snuffleupagus][DEBUG] %s(): " fmt "\n", __FUNCTION__, ##__VA_ARGS__);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
src/sp_wrapper.c:144:3: note: in expansion of macro 'sp_log_debug'
144 | sp_log_debug(LOG_FEATURE, "Stream \"php\" successfully re-registered");
| ^~~~~~~~~~~~
Avoid logging success on failure2024-06-09T15:16:29ZChristian Göttsche2024-06-07T18:19:07Zurn:sha1:ac75512106d3738bf3f3974d3a0c1e987fbcd19fEnsure to inject php-stream filter also on stream_wrapper_restore()2024-06-09T15:16:23ZChristian Göttsche2024-05-27T20:40:33Zurn:sha1:ea08ba005b7a3a3de379fec3c173fa9c21d81fa7
Not sure this is needed, but better safe than sorry.
Add option to specify the allowed "php" wrapper types2024-06-09T15:16:16ZChristian Göttsche2024-05-27T19:33:00Zurn:sha1:c7ce5c3528e8da8762e6e7067001549e109397ba
In addition of the current possibility to filter wrappers by their
protocol name, also add the option to filter the "php" wrapper by the
requested kind.
Especially the 'filter' backend can be disabled that way.
fixed crash when parsing arguments with PHP 8.12021-11-30T18:35:40ZBen Fuhrmannek2021-11-30T18:35:40Zurn:sha1:49bc961d012c26ea7a26e6a3a2a6a989a8870a99config is stack allocated now + some code improvements (see details)2021-09-23T10:23:40ZBen Fuhrmannek2021-09-23T10:23:40Zurn:sha1:54c352c1b5aa08b187dd1e52e544709cad2b0fee
* for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible
* SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read
* execution_depth is re-initialized to 0 for each request
* function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1
* execution is actually hooked if recursion protection is enabled
* some line breaks were removed to make the code more readable
Sprinkle some const2021-07-22T15:46:01Zjvoisin2021-07-22T15:46:01Zurn:sha1:a27aa204d6b1e556dc30b0426f96d2c9244e75f8Fix snufflepagus_globals linking issues and one mac compatibility issue2019-06-20T10:40:07Zbef2019-06-20T10:40:07Zurn:sha1:1b52614c06b60ced6caecd8dcaa0911ed3aa72e2Try to unify the includes2019-02-23T18:36:24Zjvoisin2019-02-23T18:36:24Zurn:sha1:809920b8cb130e105847a9956c51a6ecb08e2938