| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-04-28 | A pass of clang-format | jvoisin | |
| 2021-04-28 | Simplify a bit get_ip() | jvoisin | |
| 2021-01-30 | Improve a bit type diversity | jvoisin | |
| 2021-01-02 | Do a clang-format pass | jvoisin | |
| 2021-01-02 | Add stacktraces to dumps | jvoisin | |
| 2021-01-01 | Simplify a loop condition | jvoisin | |
| 2021-01-01 | Simplify sp_match_array_value | jvoisin | |
| 2021-01-01 | Constify a function | jvoisin | |
| 2020-12-19 | docs: fix simple typo, migitate -> mitigate | Tim Gates | |
| There is a small typo in src/sp_utils.c. Should read `mitigate` rather than `migitate`. | |||
| 2020-08-12 | Allow empty configuration (#342) | jvoisin | |
| This commit allows php to run (with a warning) if there is no specified snuffleupagus configuration, instead of refusing to start. | |||
| 2020-07-22 | refactoring sp_log_* (#340) | Giovanni | |
| Co-authored-by: Giovanni Dante Grazioli <giovanni.dantegrazioli@nbs-system.com> | |||
| 2020-07-21 | Fixed issue on impossible bailout. | Giovanni Dante Grazioli | |
| 2020-07-21 | Fix #338 - added log type if type is simulation, drop or log. (#339) | Giovanni | |
| Co-authored-by: Giovanni Dante Grazioli <giovanni.dantegrazioli@nbs-system.com> | |||
| 2020-07-12 | More constification | jvoisin | |
| 2020-07-12 | Use $_SERVER['REMOTE_ADDR'] in last resort to get the client's ip addr | jvoisin | |
| 2020-07-08 | Add a couple of `restrict` | jvoisin | |
| 2020-07-04 | Fix a small typo | jvoisin | |
| 2020-07-04 | Reorder some declaration | jvoisin | |
| So that the syslog part is tight as possible | |||
| 2020-07-04 | Run clang-format on the codebase | jvoisin | |
| 2020-07-04 | Factorize how snuffleupagus gets client's ip addr | jvoisin | |
| 2020-07-04 | Fix a syslog-related issue | jvoisin | |
| Previously, the syslog logging would always go to LOG_ERR no matter the severity. | |||
| 2019-11-03 | Log ip addresses | kkadosh | |
| 2019-08-31 | Support direct syslog logging | Thibault "bui" Koechlin | |
| Add the possibility to log directly into the syslog, instead of using php's log system. | |||
| 2019-06-20 | Fix snufflepagus_globals linking issues and one mac compatibility issue | bef | |
| 2019-05-14 | Fix the cookie's handling for PHP7.3+ | jvoisin | |
| PHP 7.3+ added a new prototype for the cookie setting mechanism, breaking our ghetto samesite-injection, this commit takes care of it. | |||
| 2019-02-23 | Try to unify the includes | jvoisin | |
| 2019-02-23 | Add php8 to travis and fix php7.4 | jvoisin | |
| - Use clang-format on the code - Improve portability wrt. php8 - Fix php7.4 compatibility. See https://dustri.org/b/fixing-snuffleupagus-sloppy-comparison-on-array_keys-for-php74.html for a detailed writeup | |||
| 2018-10-25 | Minor formatting issue | jvoisin | |
| 2018-10-09 | Improve mb_string hooking logic | jvoisin | |
| 2018-10-06 | Bump coverage again | jvoisin | |
| 2018-10-06 | Bump coverage again | jvoisin | |
| 2018-10-06 | Bump a bit the coverage | jvoisin | |
| * `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable | |||
| 2018-10-06 | Remove sp_terminate and bump a bit the coverage | jvoisin | |
| 2018-09-10 | Minor code simplification | jvoisin | |
| 2018-09-03 | Fix #241 segfault on 32-bit related to bad protype (#242) | Remi Collet | |
| This should close #241 | |||
| 2018-08-30 | Minor code cleanup | xXx-caillou-xXx | |
| 2018-08-30 | Match on ret improvements | xXx-caillou-xXx | |
| This commit does two things: - Implement matching on calltraces for ret - Implement matching on ret of user functions if the return value is not used. | |||
| 2018-08-28 | Fix some compilation warnings | xXx-caillou-xXx | |
| 2018-08-28 | Use php's logging functions | xXx-caillou-xXx | |
| This commit replace our usage of `php_log_err` with `zend_error`. This should allow administrators to display errors in the webpage, should they want to; and to properly manipulate the verbosity's level. This should close #217 | |||
| 2018-07-13 | Yet an other pass of clang-format | jvoisin | |
| 2018-07-13 | Fix various possible integer overflows | xXx-caillou-xXx | |
| 2018-07-13 | Massively optimize how rules are handled | xXx-caillou-xXx | |
| This commit does a lot of things: - Use hashtables instead of lists to store the rules - Rules that can be applied at launch time won't be tried at runtime - Improve feedback when writing nonsensical rules - Make intensive use of `zend_string` instead of `char*` | |||
| 2018-05-15 | Refactor the encryption process to extract encrypt/decrypt functions (#176) | kkadosh | |
| Refactor the encryption process to extract encrypt/decrypt functions | |||
| 2018-05-03 | Uniformise some logs | simon MAGNIN-FEYSOT | |
| This commit will make certain logs easier to parse. | |||
| 2018-03-19 | The filename filter is now matching on callsite instead of implemsite (#167) | kkadosh | |
| * Add match on the file where the function is called * Add the test * Constify some params * Fix potentiel null deref * Return more before if execute_data is NULL | |||
| 2018-03-08 | Make travis happy. | jvoisin | |
| 2018-03-08 | Minor code simplification | jvoisin | |
| 2018-03-08 | Remove some duplicate code | jvoisin | |
| 2018-03-02 | Implement dump() for execution of writable PHP files | kkadosh | |
| 2018-02-27 | Implements .dump() for unserialize and fix some related tests | kkadosh | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |