| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-10-24 | feat(log): add the possibility to log to a filelog2file | jvoisin | |
| 2025-05-13 | Remove the useless show_old_php_warning feature | jvoisin | |
| People are usually well-aware of the outdatedness of the PHP version they're running, which is likely why they're running Snuffleupagus in the first place. This feature shouldn't have been enabled by default, and I fail to see any case where anyone would want to enable it. Moreover, it doesn't take LTS versions from vendors/distributions into account, thus breaking on RHEL/Debian (old)stable. | |||
| 2025-04-11 | Minor code simplification | jvoisin | |
| 2024-09-06 | Bump the changelogv0.11.0 | jvoisin | |
| 2024-06-09 | Add option to specify the allowed "php" wrapper types | Christian Göttsche | |
| In addition of the current possibility to filter wrappers by their protocol name, also add the option to filter the "php" wrapper by the requested kind. Especially the 'filter' backend can be disabled that way. | |||
| 2024-06-06 | Declare file local variables and functions static | Christian Göttsche | |
| Avoid missing prototype warnings by declaring variables and functions that are only used in a single file static. | |||
| 2024-06-06 | Use strict prototypes | Christian Göttsche | |
| Use the special value void as parameter for functions taking nor argument. | |||
| 2024-06-06 | Fix missing token in config dump | Christian Göttsche | |
| 2024-03-08 | Update the deprecation checks | jvoisin | |
| 2024-01-26 | Bail early in case of invalid config in PHP_RINIT_ | jvoisin | |
| 2023-08-02 | Update snuffleupagus.c | Pete Cooper | |
| typo | |||
| 2023-01-31 | Add sp.log_max_len | jvoisin | |
| 2022-12-08 | Add unserialize_noclass | jvoisin | |
| 2022-08-21 | Fix sloppy comparison | jvoisin | |
| 2022-07-20 | Merge branch 'master' into pr1 | BeF | |
| 2022-07-20 | add disabled functions return type to config export | Ben Fuhrmannek | |
| 2022-07-18 | fixed crash when exporting function list (rare edge case problem) | Ben Fuhrmannek | |
| 2022-07-12 | Disable extended checks for readonly_exec by default | jvoisin | |
| 2022-07-12 | extended checks for readonly_exec, enabled by default | Ben Fuhrmannek | |
| introduced config options: readonly_exec.extended_checks() or xchecks() readonly_exec.no_extended_checks() or noxchecks() | |||
| 2022-07-12 | Constify some variables | jvoisin | |
| 2022-07-12 | Minor refactorisation | jvoisin | |
| 2022-05-03 | Small code formatting fix | jvoisin | |
| 2022-04-19 | extended checks for readonly_exec, enabled by default | Ben Fuhrmannek | |
| introduced config options: readonly_exec.extended_checks() or xchecks() readonly_exec.no_extended_checks() or noxchecks() | |||
| 2022-03-20 | Merge remote-tracking branch 'sektioneins/master' | jvoisin | |
| 2022-02-05 | added config dump/export for use with other tools | Ben Fuhrmannek | |
| 2022-01-12 | fixed compiler warning + better warning message | Ben Fuhrmannek | |
| 2022-01-06 | prevent double checks and fixed segfault on return value access | Ben Fuhrmannek | |
| 2022-01-05 | skip old php check for testing | Ben Fuhrmannek | |
| 2021-12-20 | added @warn/@err to config syntax | Ben Fuhrmannek | |
| 2021-12-14 | fixed typo where execution hook may not have been active | Ben Fuhrmannek | |
| 2021-11-30 | PHP 8.1 compatibility with streams/includes + fix for ticks | Ben Fuhrmannek | |
| 2021-11-19 | added old php version check | Ben Fuhrmannek | |
| 2021-11-11 | inverted logic. set xxe_protection.enable() instead of disable_xxe.disable() | Ben Fuhrmannek | |
| 2021-09-23 | config is stack allocated now + some code improvements (see details) | Ben Fuhrmannek | |
| * for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable | |||
| 2021-09-16 | ported sid min/max restriction from suhosin | Ben Fuhrmannek | |
| 2021-09-16 | ported server.strip and server.encode features from suhosin | Ben Fuhrmannek | |
| 2021-09-15 | implemented execution depth limit | Ben Fuhrmannek | |
| 2021-09-15 | changed version and version output in phpinfo | Ben Fuhrmannek | |
| 2021-08-18 | start SP as late as possible. this allows us to hook functions of extensions ↵ | Ben Fuhrmannek | |
| supposed to be loaded later | |||
| 2021-08-14 | debug log to dup'd stderr / php is closing stderr during shutdown | Ben Fuhrmannek | |
| 2021-08-07 | prevent STDERR debug output based on SP_NODEBUG environment variable | Ben Fuhrmannek | |
| 2021-08-06 | implemented ini settings protection | Ben Fuhrmannek | |
| 2021-08-06 | debug log to dup'd stderr / php is closing stderr during shutdown | Ben Fuhrmannek | |
| 2021-08-02 | properly free memory on shutdown | Ben Fuhrmannek | |
| 2021-07-28 | Sprinkle even more `const` | jvoisin | |
| 2021-05-09 | strtok/strtok_r is a thing from the past, don't use it. | jvoisin | |
| 2021-05-09 | Add some checks to prevent recursion upon config reloading | jvoisin | |
| 2021-05-08 | Remove some memory-leaks | jvoisin | |
| 2021-04-28 | A pass of clang-format | jvoisin | |
| 2020-11-18 | Make the strict mode disableable | jvoisin | |
| The global strict mode was enabled by default without any means to disable it, in certain cases. Bug reported by wedi. | |||
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |