| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-06-06 | Add format attribute to log function and adjust format specifiers | Christian Göttsche | |
| Annotate the common logging function sp_log_msgf() with the format attribute so compilers can check the used format string and passed arguments for discrepancies. Adjust the lineno printing by using %zu and the type size_t consistently. | |||
| 2024-06-06 | Avoid dropping const qualifier in casts | Christian Göttsche | |
| Adjusts casts to void dropping const qualifiers. This helps to avoid mistakes, e.g. modifying string literals. Also use size_t for length, similar to the upstream php interfaces. | |||
| 2022-07-13 | Even more const! | jvoisin | |
| 2022-02-05 | introduced sp_regexp / store original regex | Ben Fuhrmannek | |
| 2021-12-14 | fix: include class name in eval whitelist matching | Ben Fuhrmannek | |
| 2021-11-30 | added @log logging feature to config parser | Ben Fuhrmannek | |
| 2021-09-23 | config is stack allocated now + some code improvements (see details) | Ben Fuhrmannek | |
| * for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable | |||
| 2021-08-16 | fincy new scanner/parser for config rules + fixed a few bugs along the way + ↵ | Ben Fuhrmannek | |
| fixed related unittests | |||
| 2021-08-07 | prevent STDERR debug output based on SP_NODEBUG environment variable | Ben Fuhrmannek | |
| 2021-08-06 | restructured function hooks, implemented unhook | Ben Fuhrmannek | |
| 2021-08-06 | debug log to dup'd stderr / php is closing stderr during shutdown | Ben Fuhrmannek | |
| 2021-02-16 | fix debug log | Ben Fuhrmannek | |
| 2021-02-16 | Merge remote-tracking branch 'upstream/master' | Ben Fuhrmannek | |
| 2021-01-30 | Improve a bit type diversity | jvoisin | |
| 2021-01-01 | Constify a function | jvoisin | |
| 2020-11-06 | Clang-format again | jvoisin | |
| 2020-11-06 | Use proper prototype declaration | jvoisin | |
| 2020-07-22 | refactoring sp_log_* (#340) | Giovanni | |
| Co-authored-by: Giovanni Dante Grazioli <giovanni.dantegrazioli@nbs-system.com> | |||
| 2020-07-21 | Fix #338 - added log type if type is simulation, drop or log. (#339) | Giovanni | |
| Co-authored-by: Giovanni Dante Grazioli <giovanni.dantegrazioli@nbs-system.com> | |||
| 2020-07-08 | Add a couple of `restrict` | jvoisin | |
| 2020-07-04 | Factorize how snuffleupagus gets client's ip addr | jvoisin | |
| 2020-06-15 | clobal config.h + better debug log | Ben Fuhrmannek | |
| 2018-10-06 | Bump a bit the coverage | jvoisin | |
| * `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable | |||
| 2018-09-03 | Fix #241 segfault on 32-bit related to bad protype (#242) | Remi Collet | |
| This should close #241 | |||
| 2018-08-30 | Match on ret improvements | xXx-caillou-xXx | |
| This commit does two things: - Implement matching on calltraces for ret - Implement matching on ret of user functions if the return value is not used. | |||
| 2018-08-28 | Fix some compilation warnings | xXx-caillou-xXx | |
| 2018-08-28 | Use php's logging functions | xXx-caillou-xXx | |
| This commit replace our usage of `php_log_err` with `zend_error`. This should allow administrators to display errors in the webpage, should they want to; and to properly manipulate the verbosity's level. This should close #217 | |||
| 2018-07-13 | Yet an other pass of clang-format | jvoisin | |
| 2018-07-13 | Massively optimize how rules are handled | xXx-caillou-xXx | |
| This commit does a lot of things: - Use hashtables instead of lists to store the rules - Rules that can be applied at launch time won't be tried at runtime - Improve feedback when writing nonsensical rules - Make intensive use of `zend_string` instead of `char*` | |||
| 2018-03-19 | The filename filter is now matching on callsite instead of implemsite (#167) | kkadosh | |
| * Add match on the file where the function is called * Add the test * Constify some params * Fix potentiel null deref * Return more before if execute_data is NULL | |||
| 2018-03-02 | Fix a warning due to an unexported symbol | jvoisin | |
| 2018-02-05 | Massive simplification of functions hooking | jvoisin | |
| 2018-02-05 | Compatibility layer for pcre2 | jvoisin | |
| This should close #129 | |||
| 2018-01-11 | Remove some legacy code | jvoisin | |
| 2018-01-10 | Rework the priority of bl/wl in eval | jvoisin | |
| 2017-12-28 | Clang-format pass | Thibault "bui" Koechlin | |
| - `clang-format --style="{BasedOnStyle: google, SortIncludes: false}" -i snuffleu*.c sp_*.c sp_*.h` - Update the documentation accordingly | |||
| 2017-12-20 | Better parsing of the rules | xXx-caillou-xXx | |
| Thanks to this huge commit from @xXx-caillou-xXx, we can now write amazingly flexible rules. | |||
| 2017-10-26 | Remove an arbitrary limitation | jvoisin | |
| 2017-10-13 | Improve the doc wrt. the Debian package | jvoisin | |
| - Fix two minor warnings - Improve the documentation | |||
| 2017-10-13 | Partially revert d8ac163 because php. | jvoisin | |
| 2017-10-13 | Fix some pedantic warnings | jvoisin | |
| 2017-10-10 | Make the `simulation` mode logs more obvious | jvoisin | |
| 2017-09-21 | Add travis | jvoisin | |
| 2017-09-20 | Initial import | Sebastien Blot | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |