| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2017-12-05 | Add two failing tests | jvoisin | |
| 2017-12-04 | Improve the `.dump` filter | jvoisin | |
| 2017-12-04 | Fix the configuration parser wrt. non-matching brackets | jvoisin | |
| This validation step is a bit idiotic, but we'll replace it with a proper parser anyway. | |||
| 2017-12-03 | Merge pull request #82 from nbs-system/pkgbuild-improvements | Mathieu D | |
| minor PKGBUILD improvements | |||
| 2017-12-02 | remove useless quotes | MatToufoutu | |
| 2017-12-02 | package description shouldn't include package name | MatToufoutu | |
| 2017-12-02 | add maintainer tag | MatToufoutu | |
| 2017-12-01 | Add a test that used to segfault | jvoisin | |
| 2017-12-01 | Fail sooner when not able to create the folder to dump | jvoisin | |
| 2017-12-01 | Vastly simplify the dumping process | jvoisin | |
| 2017-12-01 | Run valgrind in the testsuite | jvoisin | |
| - Install only what's necessary for different matrices - Run valgrind only in one of the matrices | |||
| 2017-11-30 | Minor refactoring and clarification | jvoisin | |
| 2017-11-29 | Code formatting pass on harden-rand | jvoisin | |
| 2017-11-29 | Add new tests | jvoisin | |
| 2017-11-29 | Hide an enum definition | jvoisin | |
| 2017-11-29 | Code-formatting pass | jvoisin | |
| 2017-11-29 | Initial APKBUILD | xXx-caillou-xXx | |
| This adds an APKBUILD for [alpine linux](https://alpinelinux.org/) | |||
| 2017-11-29 | Add a comment, and improve a bit the performances wrt. vpatch | jvoisin | |
| Move the cheapest tests above the expensive ones | |||
| 2017-11-29 | Refactoring (#79) | jvoisin | |
| Refactoring of should_disable(). | |||
| 2017-11-29 | Add yet an other test | jvoisin | |
| 2017-11-29 | Add even MOAR tests | jvoisin | |
| 2017-11-29 | Add a test for `include` | jvoisin | |
| 2017-11-29 | Fix segfault in should_drop_on_ret | xXx-caillou-xXx | |
| This commit is almost the same than 8df77884f38e7a7334b56aafe2f441567f175af8 | |||
| 2017-11-29 | Implement eval hooking | jvoisin | |
| It's not possible to hook the `eval` builtin like other functions. | |||
| 2017-11-29 | Fix segfault in sp_disabled_functions.c | xXx-caillou-xXx | |
| There was an off-by-one in `should_disable`, effectively smashing the last byte of the stack canary. This was discovered while building the package for Alpine Linux. Kudos to their hardened toolchain! | |||
| 2017-11-28 | Use an "internal link" for our berlinsides talk | jvoisin | |
| 2017-11-28 | Add our berlinsides slides | jvoisin | |
| 2017-11-28 | Add some references for `unserialize`, and fix an external link | jvoisin | |
| 2017-11-28 | Fix a link in the documentation | jvoisin | |
| 2017-11-27 | Improve Archlinux' PKGBUILD wrt. git | xXx-caillou-xXx | |
| 2017-11-27 | Archlinux pkg | xXx-caillou-xXx | |
| Add a PKGBUILD for Archlinux | |||
| 2017-11-27 | Improve a link, thanks to @mikewest | jvoisin | |
| 2017-11-27 | Improve our nonce's randomness | jvoisin | |
| 2017-11-27 | Initialize some possibly uninitialized variables | jvoisin | |
| Thanks to coverity | |||
| 2017-11-24 | Add a small bla about user-agent and encryption | jvoisin | |
| This should close #70 | |||
| 2017-11-24 | Fix harden_rand (#72) | jvoisin | |
| This one was tricky. It was a great half-hour of joy, full of macros, ctags, gdb, radare2, tears, hardcoded `int3`, … to finally find that php calls `return` when it fails to parse some parameters for various reasons, even if everything goes fine. This must be a better way to do this, but this is good enough™ for now. This closes #66 | |||
| 2017-11-24 | Implement anti csrf measures | xXx-caillou-xXx | |
| This is done by using the "samesite" cookie attribute. | |||
| 2017-11-18 | Add a link to our blackalps talk | jvoisin | |
| 2017-11-17 | Add our blackalps 2017 slides | jvoisin | |
| 2017-11-13 | Fix a silly warning | jvoisin | |
| 2017-11-12 | Improve a bit the filter-related documentation | jvoisin | |
| 2017-11-06 | Add a failing test | jvoisin | |
| 2017-11-06 | 53 absolute path (#62) | jvoisin | |
| * Add error for relative path | |||
| 2017-11-01 | Travis is now pushing to coverity | jvoisin | |
| 2017-10-31 | Add a test to match on array | jvoisin | |
| 2017-10-31 | Minor factorization of the keyword parsing code | jvoisin | |
| 2017-10-31 | Unify two struct members related to virtual-patching | xXx-caillou-xXx | |
| This should close #65 | |||
| 2017-10-31 | Minor factorization | jvoisin | |
| 2017-10-31 | Remove an unused variable | jvoisin | |
| 2017-10-31 | Merge pull request #60 from nbs-system/fix_off_by_one | Thibault "bui" Koechlin | |
| Fix a silly and useless off-by-one | |||
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |