snuffleupagus - Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Age	Commit message (Collapse)	Author
2017-11-27	Improve our nonce's randomness	jvoisin

2017-11-27	Initialize some possibly uninitialized variables	jvoisin
	Thanks to coverity
2017-11-24	Add a small bla about user-agent and encryption	jvoisin
	This should close #70
2017-11-24	Fix harden_rand (#72)	jvoisin
	This one was tricky. It was a great half-hour of joy, full of macros, ctags, gdb, radare2, tears, hardcoded `int3`, … to finally find that php calls `return` when it fails to parse some parameters for various reasons, even if everything goes fine. This must be a better way to do this, but this is good enough™ for now. This closes #66
2017-11-24	Implement anti csrf measures	xXx-caillou-xXx
	This is done by using the "samesite" cookie attribute.
2017-11-18	Add a link to our blackalps talk	jvoisin

2017-11-17	Add our blackalps 2017 slides	jvoisin

2017-11-13	Fix a silly warning	jvoisin

2017-11-12	Improve a bit the filter-related documentation	jvoisin

2017-11-06	Add a failing test	jvoisin

2017-11-06	53 absolute path (#62)	jvoisin
	* Add error for relative path
2017-11-01	Travis is now pushing to coverity	jvoisin

2017-10-31	Add a test to match on array	jvoisin

2017-10-31	Minor factorization of the keyword parsing code	jvoisin

2017-10-31	Unify two struct members related to virtual-patching	xXx-caillou-xXx
	This should close #65
2017-10-31	Minor factorization	jvoisin

2017-10-31	Remove an unused variable	jvoisin

2017-10-31	Merge pull request #60 from nbs-system/fix_off_by_one	Thibault "bui" Koechlin
	Fix a silly and useless off-by-one
2017-10-31	Merge pull request #63 from nbs-system/fix_toctou	Thibault "bui" Koechlin
	Fix a silly TOCTOU to make coverity happy
2017-10-30	Fix a silly TOCTOU to make coverity happy	jvoisin

2017-10-30	Minor code cleanup	jvoisin

2017-10-30	Fix the segfault?	jvoisin

2017-10-30	Bump coverage and simplify some code	jvoisin

2017-10-30	Merge pull request #54 from arpd/43-free-at-shutdown	blotus
	43 free at shutdown
2017-10-30	Fix a silly and useless off-by-one	jvoisin

2017-10-27	Bump the coverage	jvoisin

2017-10-27	Improve a bit the coverage wrt. broken configurations	jvoisin

2017-10-26	Free additionally allocated `sp_list` instances	Ben Foster
	References #43.
2017-10-26	Renames `sp_new_list` -> `sp_list_new`	Ben Foster
	To be consistent with the rest of the `sp_list` functions.
2017-10-26	Free `config_disabled_constructs`	Ben Foster
	In reference to #43.
2017-10-26	Remove an arbitrary limitation	jvoisin

2017-10-26	Improve a bit our CONTRIBUTING.md file	jvoisin

2017-10-26	Added some debugging tips to Contributing	Ben Foster

2017-10-25	.drop() is now bailout	jvoisin
	Courtesy of @buixor
2017-10-25	Make the testsuite a bit more robust	jvoisin

2017-10-24	Bump coverage ♥	jvoisin

2017-10-24	Remove the `enable` member from the disable function structure	jvoisin
	Also add some more tests
2017-10-23	Add a test for unmatched brackets	jvoisin

2017-10-23	Add some tests for upload validation and fix a related typo	jvoisin

2017-10-23	Add a test for non-existent configuration file	jvoisin

2017-10-23	Implement the .line filter	jvoisin
	Close #48
2017-10-22	Add a testcase, bumping the coverage	jvoisin

2017-10-22	Improve an error message	jvoisin

2017-10-20	Add a test to demonstrate the behaviour wrt. call_user_func	jvoisin

2017-10-20	Add support for multiple files in sp.configuration_file directive	blotus
	This should close (#45
2017-10-19	Merge pull request #46 from nbs-system/speed-up-ci	blotus
	Speed up the CI by not running the whole Joomla testsuite on travis
2017-10-19	Speed up the CI by not running the whole Joomla testsuite on travis	jvoisin

2017-10-19	Merge pull request #33 from nbs-system/4-match-on-arg-pos	Thibault "bui" Koechlin
	Implement match on arguments position
2017-10-18	`.pos` is mutuaally exclusive with .param and .paran_r	jvoisin

2017-10-18	Fix the tests	jvoisin