| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2017-11-29 | Add a test for `include` | jvoisin | |
| 2017-11-29 | Fix segfault in should_drop_on_ret | xXx-caillou-xXx | |
| This commit is almost the same than 8df77884f38e7a7334b56aafe2f441567f175af8 | |||
| 2017-11-29 | Implement eval hooking | jvoisin | |
| It's not possible to hook the `eval` builtin like other functions. | |||
| 2017-11-29 | Fix segfault in sp_disabled_functions.c | xXx-caillou-xXx | |
| There was an off-by-one in `should_disable`, effectively smashing the last byte of the stack canary. This was discovered while building the package for Alpine Linux. Kudos to their hardened toolchain! | |||
| 2017-11-28 | Use an "internal link" for our berlinsides talk | jvoisin | |
| 2017-11-28 | Add our berlinsides slides | jvoisin | |
| 2017-11-28 | Add some references for `unserialize`, and fix an external link | jvoisin | |
| 2017-11-28 | Fix a link in the documentation | jvoisin | |
| 2017-11-27 | Improve Archlinux' PKGBUILD wrt. git | xXx-caillou-xXx | |
| 2017-11-27 | Archlinux pkg | xXx-caillou-xXx | |
| Add a PKGBUILD for Archlinux | |||
| 2017-11-27 | Improve a link, thanks to @mikewest | jvoisin | |
| 2017-11-27 | Improve our nonce's randomness | jvoisin | |
| 2017-11-27 | Initialize some possibly uninitialized variables | jvoisin | |
| Thanks to coverity | |||
| 2017-11-24 | Add a small bla about user-agent and encryption | jvoisin | |
| This should close #70 | |||
| 2017-11-24 | Fix harden_rand (#72) | jvoisin | |
| This one was tricky. It was a great half-hour of joy, full of macros, ctags, gdb, radare2, tears, hardcoded `int3`, … to finally find that php calls `return` when it fails to parse some parameters for various reasons, even if everything goes fine. This must be a better way to do this, but this is good enough™ for now. This closes #66 | |||
| 2017-11-24 | Implement anti csrf measures | xXx-caillou-xXx | |
| This is done by using the "samesite" cookie attribute. | |||
| 2017-11-18 | Add a link to our blackalps talk | jvoisin | |
| 2017-11-17 | Add our blackalps 2017 slides | jvoisin | |
| 2017-11-13 | Fix a silly warning | jvoisin | |
| 2017-11-12 | Improve a bit the filter-related documentation | jvoisin | |
| 2017-11-06 | Add a failing test | jvoisin | |
| 2017-11-06 | 53 absolute path (#62) | jvoisin | |
| * Add error for relative path | |||
| 2017-11-01 | Travis is now pushing to coverity | jvoisin | |
| 2017-10-31 | Add a test to match on array | jvoisin | |
| 2017-10-31 | Minor factorization of the keyword parsing code | jvoisin | |
| 2017-10-31 | Unify two struct members related to virtual-patching | xXx-caillou-xXx | |
| This should close #65 | |||
| 2017-10-31 | Minor factorization | jvoisin | |
| 2017-10-31 | Remove an unused variable | jvoisin | |
| 2017-10-31 | Merge pull request #60 from nbs-system/fix_off_by_one | Thibault "bui" Koechlin | |
| Fix a silly and useless off-by-one | |||
| 2017-10-31 | Merge pull request #63 from nbs-system/fix_toctou | Thibault "bui" Koechlin | |
| Fix a silly TOCTOU to make coverity happy | |||
| 2017-10-30 | Fix a silly TOCTOU to make coverity happy | jvoisin | |
| 2017-10-30 | Minor code cleanup | jvoisin | |
| 2017-10-30 | Fix the segfault? | jvoisin | |
| 2017-10-30 | Bump coverage and simplify some code | jvoisin | |
| 2017-10-30 | Merge pull request #54 from arpd/43-free-at-shutdown | blotus | |
| 43 free at shutdown | |||
| 2017-10-30 | Fix a silly and useless off-by-one | jvoisin | |
| 2017-10-27 | Bump the coverage | jvoisin | |
| 2017-10-27 | Improve a bit the coverage wrt. broken configurations | jvoisin | |
| 2017-10-26 | Free additionally allocated `sp_list` instances | Ben Foster | |
| References #43. | |||
| 2017-10-26 | Renames `sp_new_list` -> `sp_list_new` | Ben Foster | |
| To be consistent with the rest of the `sp_list` functions. | |||
| 2017-10-26 | Free `config_disabled_constructs` | Ben Foster | |
| In reference to #43. | |||
| 2017-10-26 | Remove an arbitrary limitation | jvoisin | |
| 2017-10-26 | Improve a bit our CONTRIBUTING.md file | jvoisin | |
| 2017-10-26 | Added some debugging tips to Contributing | Ben Foster | |
| 2017-10-25 | .drop() is now bailout | jvoisin | |
| Courtesy of @buixor | |||
| 2017-10-25 | Make the testsuite a bit more robust | jvoisin | |
| 2017-10-24 | Bump coverage ♥ | jvoisin | |
| 2017-10-24 | Remove the `enable` member from the disable function structure | jvoisin | |
| Also add some more tests | |||
| 2017-10-23 | Add a test for unmatched brackets | jvoisin | |
| 2017-10-23 | Add some tests for upload validation and fix a related typo | jvoisin | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |