summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-03-16Use libpcre2 instead of libpcre3 and add php8.4 as optional dep for debianjvoisin
2025-03-16Bump actions/upload-artifact to v4jvoisin
2025-03-16Make the CI greenjvoisin
vld-beta is currently bugged.
2024-11-06Link support script to new jvoisin repositorySébastien Santoro
This is a follow-up for d7b7a0d4e10d.
2024-10-07Update faq.rstPete Cooper
tidy up
2024-09-06Fix a licensing typojvoisin
Spotted by @kpcyrd
2024-09-06Bump the changelogv0.11.0jvoisin
2024-09-06Skip a test on PHP8.4jvoisin
2024-09-03Add some instructions for OpenBSDjvoisin
See https://github.com/jvoisin/snuffleupagus/issues/498 for details.
2024-07-09Fix compilation for PHP84+jvoisin
PHP changed some includes for PHP8.4. This commit also adds php8.4-rc to the CI This fixes #497 and #496 Reported-by: rainerjung
2024-07-05Disable PHP7.0 in the CIjvoisin
It's not shipped anymore on Debian stable.
2024-06-18Add a missing feature to the readmejvoisin
2024-06-18Updated the cached version of the config scannerjvoisin
2024-06-18Fix an UBSAN warningjvoisin
No need to use an ulong, an uint is more than enough for our usecases. This fixes the following warning: ``` src/sp_config.c:207:20: runtime error: store to misaligned address 0x796d1f9a78d4 for type 'u_long', which requires 8 byte alignment 0x796d1f9a78d4: note: pointer points here 00 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ^ #0 0x796d1f92251a in parse_ulong src/sp_config.c:207 #1 0x796d1f9239a9 in sp_process_rule src/sp_config.c:76 #2 0x796d1f92404f in sp_process_config_root src/sp_config.c:31 #3 0x796d1f96770d in sp_config_scan src/sp_config_scanner.c:1482 #4 0x796d1f922cd3 in sp_parse_config src/sp_config.c:62 #5 0x796d1f91e6cf in OnUpdateConfiguration src/snuffleupagus.c:522 #6 0x598aae727646 in zend_register_ini_entries_ex (/usr/bin/php8.2+0x36d646) (BuildId: 5228f916ded87172ddf0f3eca448f1e43874d60f) #7 0x796d1f91cae1 in zm_startup_snuffleupagus src/snuffleupagus.c:121 #8 0x598aae6b70df in zend_startup_module_ex (/usr/bin/php8.2+0x2fd0df) (BuildId: 5228f916ded87172ddf0f3eca448f1e43874d60f) #9 0x598aae6b717f (/usr/bin/php8.2+0x2fd17f) (BuildId: 5228f916ded87172ddf0f3eca448f1e43874d60f) #10 0x598aae6c566a in zend_hash_apply (/usr/bin/php8.2+0x30b66a) (BuildId: 5228f916ded87172ddf0f3eca448f1e43874d60f) #11 0x598aae64c0b5 in php_module_startup (/usr/bin/php8.2+0x2920b5) (BuildId: 5228f916ded87172ddf0f3eca448f1e43874d60f) #12 0x598aae4e2265 (/usr/bin/php8.2+0x128265) (BuildId: 5228f916ded87172ddf0f3eca448f1e43874d60f) #13 0x796d21b4dc89 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58 #14 0x796d21b4dd44 in __libc_start_main_impl ../csu/libc-start.c:360 #15 0x598aae4e3550 in _start (/usr/bin/php8.2+0x129550) (BuildId: 5228f916ded87172ddf0f3eca448f1e43874d60f) SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior src/sp_config.c:207:20 in ```
2024-06-14Fix a portability issuejvoisin
This should fix the following compilation issue: ``` /wrkdirs/usr/ports/security/snuffleupagus/work-php83/snuffleupagus-0.10.0/src/sp_utils.c:438:37: error: too few arguments provided to function-like macro invocation 438 | memcpy(mb_name, ZEND_STRL("mb_")); | ^ /usr/include/ssp/string.h:117:9: note: macro 'memcpy' defined here 117 | #define memcpy(dst, src, len) __ssp_bos_check3(memcpy, dst, src, len) ```
2024-06-09Forbid file:// protocol in Curlbohwaz
2024-06-09debian/rules: clean source directoryChristian Göttsche
Clean the source directory before building the source for the Debian package.
2024-06-09Avoid logging success on failureChristian Göttsche
2024-06-09Wording updatesChristian Göttsche
2024-06-09Ensure to inject php-stream filter also on stream_wrapper_restore()Christian Göttsche
Not sure this is needed, but better safe than sorry.
2024-06-09Use more generic expected test result formatChristian Göttsche
2024-06-09Add option to specify the allowed "php" wrapper typesChristian Göttsche
In addition of the current possibility to filter wrappers by their protocol name, also add the option to filter the "php" wrapper by the requested kind. Especially the 'filter' backend can be disabled that way.
2024-06-06Add format attribute to log function and adjust format specifiersChristian Göttsche
Annotate the common logging function sp_log_msgf() with the format attribute so compilers can check the used format string and passed arguments for discrepancies. Adjust the lineno printing by using %zu and the type size_t consistently.
2024-06-06Silence unused variable warning with php 8.3Christian Göttsche
src/sp_unserialize.c: In function 'zif_sp_unserialize': src/sp_unserialize.c:131:15: warning: unused variable 'orig_handler' [-Wunused-variable] 131 | zif_handler orig_handler = zend_hash_str_find_ptr(SPG(sp_internal_functions_hook), ZEND_STRL("unserialize")); | ^~~~~~~~~~~~
2024-06-06Free allocated memory in early exitChristian Göttsche
2024-06-06Fix misc typosChristian Göttsche
2024-06-06Enable some additional compiler warningsChristian Göttsche
2024-06-06Avoid dropping const qualifier in castsChristian Göttsche
Adjusts casts to void dropping const qualifiers. This helps to avoid mistakes, e.g. modifying string literals. Also use size_t for length, similar to the upstream php interfaces.
2024-06-06Declare file local variables and functions staticChristian Göttsche
Avoid missing prototype warnings by declaring variables and functions that are only used in a single file static.
2024-06-06Use strict prototypesChristian Göttsche
Use the special value void as parameter for functions taking nor argument.
2024-06-06Fix missing token in config dumpChristian Göttsche
2024-06-06Add target to run tests incrementalChristian Göttsche
Avoid the configure step each time during development.
2024-06-06Reorder calloc(3) argumentsChristian Göttsche
Please GCC: In file included from /usr/include/php/20220829/Zend/zend.h:30, from /usr/include/php/20220829/main/php.h:31, from /usr/include/php/20220829/main/SAPI.h:20, from src/php_snuffleupagus.h:37, from src/sp_ifilter.c:1: src/sp_pcre_compat.h: In function 'sp_regexp_compile': src/sp_pcre_compat.h:38:36: warning: '__zend_calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument [-Wcalloc-transposed-args] 38 | sp_regexp *ret = pecalloc(sizeof(sp_regexp), 1, 1); | ^~~~~~~~~ /usr/include/php/20220829/Zend/zend_alloc.h:199:72: note: in definition of macro 'pecalloc' 199 | #define pecalloc(nmemb, size, persistent) ((persistent)?__zend_calloc((nmemb), (size)):ecalloc((nmemb), (size))) | ^~~~~ src/sp_pcre_compat.h:38:36: note: earlier argument should specify number of elements, later size of each element 38 | sp_regexp *ret = pecalloc(sizeof(sp_regexp), 1, 1); | ^~~~~~~~~ /usr/include/php/20220829/Zend/zend_alloc.h:199:72: note: in definition of macro 'pecalloc' 199 | #define pecalloc(nmemb, size, persistent) ((persistent)?__zend_calloc((nmemb), (size)):ecalloc((nmemb), (size))) | ^~~~~
2024-04-25Move from php83-rc to php83 in the CIjvoisin
2024-04-13Run PHP8.2 tests on Alpine, now that PHP81 is dead therejvoisin
2024-03-24Don't forbid use of assert in PHP 8+bohwaz
2024-03-24Fix yet another php surprised-rename of functions parametersjvoisin
2024-03-24Also ignore function definitionsbohwaz
2024-03-24Don't whitelist files if the function name is actually a method of a classbohwaz
2024-03-08Update the deprecation checksjvoisin
2024-02-19Include functions from global space that are prefixed with \Christoph Amthor
2024-01-26Bail early in case of invalid config in PHP_RINIT_jvoisin
2024-01-15Add a test for issue #479jvoisin
2024-01-09Add some comments to a rulejvoisin
This should help diagnose https://github.com/jvoisin/snuffleupagus/issues/477
2023-12-13print key and value on INI violationsChristian Göttsche
On violations of INI settings include the key and if appropriate the value in the log message. This helps to locate offenders and fine tune the configuration itself.
2023-12-13github: tweak skipping tests during package buildChristian Göttsche
2023-12-13debian: downgrade to debhelper compat 12Christian Göttsche
Support Debian old-old-stable (buster) by using debhelper compat level 12.
2023-12-13debian: fix typo in changelogChristian Göttsche
2023-12-13debian: update nocheck build profileChristian Göttsche
2023-12-13debian: add short license text and link to full license fileChristian Göttsche