snuffleupagus - Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Age	Commit message (Collapse)	Author
2020-11-29	Fix zend_write booking type	jvoisin
	The signature was changed in PHP8: https://github.com/php/php-src/commit/e15409b43cacf711608189c299191f2969ea331c
2020-11-06	Use proper prototype declaration	jvoisin

2018-10-09	Don't check the return values of functions that might not return (#255)	jvoisin
	This is due to our modifications to the logging system
2018-10-06	Bump a bit the coverage	jvoisin
	* `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable
2018-08-30	Match on ret improvements	xXx-caillou-xXx
	This commit does two things: - Implement matching on calltraces for ret - Implement matching on ret of user functions if the return value is not used.
2018-07-13	Yet an other pass of clang-format	jvoisin

2018-07-13	Reduce call to get_complete_function_path	xXx-caillou-xXx

2018-07-13	Allow rules matching on echo and print	xXx-caillou-xXx

2018-07-13	Massively optimize how rules are handled	xXx-caillou-xXx
	This commit does a lot of things: - Use hashtables instead of lists to store the rules - Rules that can be applied at launch time won't be tried at runtime - Improve feedback when writing nonsensical rules - Make intensive use of `zend_string` instead of `char*`
2018-01-12	Minor factorization and symbol exposure reduction	jvoisin

2018-01-10	Eval whitelist	jvoisin
	Implement whitelist in eval
2017-12-28	Clang-format pass	Thibault "bui" Koechlin
	- `clang-format --style="{BasedOnStyle: google, SortIncludes: false}" -i snuffleu.c sp_.c sp_*.h` - Update the documentation accordingly
2017-12-28	Implement hooking on user-defined functions return values	jvoisin
	This should close #99, thanks to @blotus for the implementation idea!
2017-11-29	Implement eval hooking	jvoisin
	It's not possible to hook the `eval` builtin like other functions.
2017-10-13	Improve the doc wrt. the Debian package	jvoisin
	- Fix two minor warnings - Improve the documentation