| Age | Commit message (Collapse) | Author |
|
|
|
Apparently, php is now raising errors for non-existing
keys in arrays, so we're now catching the exception
to allow the test to be run.
|
|
|
|
So we're disabling simplexml's check on it.
|
|
|
|
Before php7.4, it seems that the curl module was loaded by default, but since
it's no the case anymore, it has to be manually specified in the testsuite.
Interestingly, Php's testsuite mechanism is running snippets to determine some
runtime parameters like the extension directory. Unfortunately,it tries to run
them with Snuffleupagus loaded, resulting in an error, since no configuration
file is passed.
|
|
Since I'm the only one to maintain Snuffleupagus,
let's adjust the links and contact addresses
of my fork, to point to well… my fork.
|
|
|
|
Add the possibility to log directly into the syslog, instead of using php's log system.
|
|
|
|
|
|
In php8, it's non-trivial to hook strlen,
since this function is usually optimized away
by the compiler.
|
|
Splitting the testsuite in several components makes it easier to manage and comprehend.
This was also needed some some tests aren't passing on Alpine Linux, but we still want to run
as many of them as we can on this platform.
|
|
|
|
|
|
We only want to prevent crash/infinite recursion,
we don't really care about the error/warning
messages.
|
|
|
|
|
|
This used to be useful in the times of PHP5.4/Suhosin
(https://github.com/sektioneins/suhosin/issues/60),
but nowadays, php is handling this case on its own.
|
|
|
|
This commit adds a php version of the upload_validation.py script.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* `setcookie` doesn't always return `true` anymore
* clang-format
* Cookies with invalid decryption are dropped, but the request isn't anymore
* faulty unserialize are now dumpable
|
|
Many thanks to @xXx-caillou-xXx for finding the true root cause and fixing the issue ♥
|
|
|
|
Use the PHP_BINARY constant instead of "php".
|
|
Since our configuration format is a bit more complex than php's one,
we have a `sp.allow_broken_configuration` parameter (`false` by default),
that you can set to `true` if you want PHP to carry on if your Snuffleupagus'
configuration contains syntax errors. You'll still get a big scary message in
your logs of course. We do **not** recommend to use it of course, but sometimes
it might be useful to be able to "debug in production" without breaking your
website.
|
|
This commit does two things:
- Implement matching on calltraces for ret
- Implement matching on ret of user functions if the return value is not used.
|
|
|
|
Ensure that certificates are verified in curl
should close #47
|
|
|
|
|
|
This should close #105
|
|
This commit replace our usage of `php_log_err` with `zend_error`. This should
allow administrators to display errors in the webpage, should they want to;
and to properly manipulate the verbosity's level.
This should close #217
|
|
|
|
|
|
This commit vastly simplifies the code of cookies-fiddling mechanisms.
|
|
|
|
close #171
|
|
|
|
sp.disable_function.function().filename doesn't take phar:///
|
|
|
|
|
|
|