| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2020-07-04 | Run clang-format on the codebase | jvoisin | |
| 2020-07-04 | Factorize how snuffleupagus gets client's ip addr | jvoisin | |
| 2020-07-04 | Fix a syslog-related issue | jvoisin | |
| Previously, the syslog logging would always go to LOG_ERR no matter the severity. | |||
| 2019-11-03 | Log ip addresses | kkadosh | |
| 2019-08-31 | Support direct syslog logging | Thibault "bui" Koechlin | |
| Add the possibility to log directly into the syslog, instead of using php's log system. | |||
| 2019-06-20 | Fix snufflepagus_globals linking issues and one mac compatibility issue | bef | |
| 2019-05-14 | Fix the cookie's handling for PHP7.3+ | jvoisin | |
| PHP 7.3+ added a new prototype for the cookie setting mechanism, breaking our ghetto samesite-injection, this commit takes care of it. | |||
| 2019-02-23 | Try to unify the includes | jvoisin | |
| 2019-02-23 | Add php8 to travis and fix php7.4 | jvoisin | |
| - Use clang-format on the code - Improve portability wrt. php8 - Fix php7.4 compatibility. See https://dustri.org/b/fixing-snuffleupagus-sloppy-comparison-on-array_keys-for-php74.html for a detailed writeup | |||
| 2018-10-25 | Minor formatting issue | jvoisin | |
| 2018-10-09 | Improve mb_string hooking logic | jvoisin | |
| 2018-10-06 | Bump coverage again | jvoisin | |
| 2018-10-06 | Bump coverage again | jvoisin | |
| 2018-10-06 | Bump a bit the coverage | jvoisin | |
| * `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable | |||
| 2018-10-06 | Remove sp_terminate and bump a bit the coverage | jvoisin | |
| 2018-09-10 | Minor code simplification | jvoisin | |
| 2018-09-03 | Fix #241 segfault on 32-bit related to bad protype (#242) | Remi Collet | |
| This should close #241 | |||
| 2018-08-30 | Minor code cleanup | xXx-caillou-xXx | |
| 2018-08-30 | Match on ret improvements | xXx-caillou-xXx | |
| This commit does two things: - Implement matching on calltraces for ret - Implement matching on ret of user functions if the return value is not used. | |||
| 2018-08-28 | Fix some compilation warnings | xXx-caillou-xXx | |
| 2018-08-28 | Use php's logging functions | xXx-caillou-xXx | |
| This commit replace our usage of `php_log_err` with `zend_error`. This should allow administrators to display errors in the webpage, should they want to; and to properly manipulate the verbosity's level. This should close #217 | |||
| 2018-07-13 | Yet an other pass of clang-format | jvoisin | |
| 2018-07-13 | Fix various possible integer overflows | xXx-caillou-xXx | |
| 2018-07-13 | Massively optimize how rules are handled | xXx-caillou-xXx | |
| This commit does a lot of things: - Use hashtables instead of lists to store the rules - Rules that can be applied at launch time won't be tried at runtime - Improve feedback when writing nonsensical rules - Make intensive use of `zend_string` instead of `char*` | |||
| 2018-05-15 | Refactor the encryption process to extract encrypt/decrypt functions (#176) | kkadosh | |
| Refactor the encryption process to extract encrypt/decrypt functions | |||
| 2018-05-03 | Uniformise some logs | simon MAGNIN-FEYSOT | |
| This commit will make certain logs easier to parse. | |||
| 2018-03-19 | The filename filter is now matching on callsite instead of implemsite (#167) | kkadosh | |
| * Add match on the file where the function is called * Add the test * Constify some params * Fix potentiel null deref * Return more before if execute_data is NULL | |||
| 2018-03-08 | Make travis happy. | jvoisin | |
| 2018-03-08 | Minor code simplification | jvoisin | |
| 2018-03-08 | Remove some duplicate code | jvoisin | |
| 2018-03-02 | Implement dump() for execution of writable PHP files | kkadosh | |
| 2018-02-27 | Implements .dump() for unserialize and fix some related tests | kkadosh | |
| 2018-02-05 | Massive simplification of functions hooking | jvoisin | |
| 2018-02-05 | Compatibility layer for pcre2 | jvoisin | |
| This should close #129 | |||
| 2018-02-05 | Fix a oncst-related warning | jvoisin | |
| 2018-01-17 | Remove useless "head" member in our linked lists implementation | simon MAGNIN-FEYSOT | |
| This should close #85 | |||
| 2018-01-17 | Fix a minor warning | jvoisin | |
| 2018-01-15 | Minor simplification | jvoisin | |
| 2018-01-15 | Fix an other off-by-one | jvoisin | |
| 2018-01-15 | Fix some memleaks | jvoisin | |
| 2018-01-11 | Remove some legacy code | jvoisin | |
| 2018-01-10 | Rework the priority of bl/wl in eval | jvoisin | |
| 2017-12-28 | Clang-format pass | Thibault "bui" Koechlin | |
| - `clang-format --style="{BasedOnStyle: google, SortIncludes: false}" -i snuffleu*.c sp_*.c sp_*.h` - Update the documentation accordingly | |||
| 2017-12-20 | Better parsing of the rules | xXx-caillou-xXx | |
| Thanks to this huge commit from @xXx-caillou-xXx, we can now write amazingly flexible rules. | |||
| 2017-12-06 | Vastly simplify the dumping of zval in `.dump` | jvoisin | |
| 2017-12-06 | Fix a format string, thanks to coverity | jvoisin | |
| 2017-12-05 | Dump environnement variables (#83) | jvoisin | |
| Apparently, PHP thinks that it's a great idea to type environnement variables, because why not. | |||
| 2017-12-04 | Improve the `.dump` filter | jvoisin | |
| 2017-12-01 | Add a test that used to segfault | jvoisin | |
| 2017-12-01 | Fail sooner when not able to create the folder to dump | jvoisin | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |