summaryrefslogtreecommitdiff
path: root/src (follow)
AgeCommit message (Collapse)Author
2021-12-20check compatibility with linuxBen Fuhrmannek
2021-12-20removed confusung newlines for better reading/searchingBen Fuhrmannek
2021-12-20updated cached scanner fileBen Fuhrmannek
2021-12-20added @warn/@err to config syntaxBen Fuhrmannek
2021-12-14test cases for testing edge cases, eval and cmd executionBen Fuhrmannek
2021-12-14fix: apply checks to internal function calls, too, so we can match internal ↵Ben Fuhrmannek
class methods that are not hooked
2021-12-14fix: include class name in eval whitelist matchingBen Fuhrmannek
2021-12-14code cleanup + removed line breaks for easier IDE integrationBen Fuhrmannek
2021-12-14get class name from execution_dataBen Fuhrmannek
2021-12-14fixed typo where execution hook may not have been activeBen Fuhrmannek
2021-12-13fixed use after free + PHP 7 compatibilityBen Fuhrmannek
2021-12-13fixed test case with new behaviourBen Fuhrmannek
2021-11-30fixed test case for PHP 8.1.Ben Fuhrmannek
ini_set argument types changed with PHP 8.1, so the test is using ini_get now.
2021-11-30PHP 8.1 compatibility with streams/includes + fix for ticksBen Fuhrmannek
2021-11-30clarify control flowBen Fuhrmannek
2021-11-30fixed crash when parsing arguments with PHP 8.1Ben Fuhrmannek
2021-11-30added @log logging feature to config parserBen Fuhrmannek
2021-11-30php 8.1 compatibilityBen Fuhrmannek
2021-11-19added old php version checkBen Fuhrmannek
2021-11-19replaced call_user_func with C level callBen Fuhrmannek
2021-11-19fixed test skip conditionBen Fuhrmannek
2021-11-11more tests for xxe + optional xml supportBen Fuhrmannek
2021-11-11inverted logic. set xxe_protection.enable() instead of disable_xxe.disable()Ben Fuhrmannek
2021-11-11detect dummy or short encryption keyBen Fuhrmannek
2021-10-21added some array initialization, just in case.Ben Fuhrmannek
2021-10-21fix oob memory accessBen Fuhrmannek
2021-10-18stronger stack protector via compile flagBen Fuhrmannek
2021-09-23config is stack allocated now + some code improvements (see details)Ben Fuhrmannek
* for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable
2021-09-23comments on lookup tableBen Fuhrmannek
2021-09-16ported sid min/max restriction from suhosinBen Fuhrmannek
2021-09-16ported server.strip and server.encode features from suhosinBen Fuhrmannek
2021-09-15implemented execution depth limitBen Fuhrmannek
2021-09-15changed version and version output in phpinfoBen Fuhrmannek
2021-09-03fixed testsBen Fuhrmannek
2021-09-03fixed session encryption in php8 + related test casesBen Fuhrmannek
2021-09-02fixed test cases where pcre error output changedBen Fuhrmannek
2021-09-02fixed more test casesBen Fuhrmannek
2021-09-02fixed compiler warnings + test casesBen Fuhrmannek
2021-09-01implemented proper operand precedence using the shunting yard algorithmBen Fuhrmannek
2021-08-31basic condition suuport for rules filesBen Fuhrmannek
2021-08-18start SP as late as possible. this allows us to hook functions of extensions ↵Ben Fuhrmannek
supposed to be loaded later
2021-08-17removed unused variablesBen Fuhrmannek
2021-08-17fixed broken tests for PHP7 after scanner/parser updateBen Fuhrmannek
2021-08-17added pregenerated scanner to relax re2c dependencyBen Fuhrmannek
2021-08-17require re2c >= 2.0Ben Fuhrmannek
2021-08-17php 7 compatibilityBen Fuhrmannek
2021-08-16config supports variables nowBen Fuhrmannek
2021-08-16fincy new scanner/parser for config rules + fixed a few bugs along the way + ↵Ben Fuhrmannek
fixed related unittests
2021-08-14debug log to dup'd stderr / php is closing stderr during shutdownBen Fuhrmannek
2021-08-14missing efree in sp_log_msgfBen Fuhrmannek