snuffleupagus - Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Age	Commit message (Collapse)	Author
2021-09-23	config is stack allocated now + some code improvements (see details)	Ben Fuhrmannek
	* for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable
2019-06-19	fix snufflepagus_globals linking issues and one mac compatibility issue	Ben Fuhrmannek

2018-09-03	Fix #241 segfault on 32-bit related to bad protype (#242)	Remi Collet
	This should close #241
2018-08-30	Minor code cleanup	xXx-caillou-xXx

2018-07-19	Fix the issue with rand hardening	xXx-caillou-xXx

2018-02-05	Massive simplification of functions hooking	jvoisin

2018-01-04	Eval blacklist	jvoisin
	Add support for eval filtering, only blacklist for now
2018-01-03	Remove some dead code	jvoisin

2017-11-29	Code formatting pass on harden-rand	jvoisin

2017-11-27	Initialize some possibly uninitialized variables	jvoisin
	Thanks to coverity
2017-11-24	Fix harden_rand (#72)	jvoisin
	This one was tricky. It was a great half-hour of joy, full of macros, ctags, gdb, radare2, tears, hardcoded `int3`, … to finally find that php calls `return` when it fails to parse some parameters for various reasons, even if everything goes fine. This must be a better way to do this, but this is good enough™ for now. This closes #66
2017-10-18	.drop() is not a `nop` anymore	Thibault "bui" Koechlin
	`.drop()` is now baillout out, instead of nop'ing the call. This closes #13
2017-10-11	Cheat a bit with the coverage	jvoisin

2017-09-20	Initial import	Sebastien Blot