index
:
snuffleupagus
85beta2
log2file
master
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
src
(
follow
)
Age
Commit message (
Expand
)
Author
2022-01-12
make session support a runtime check instead of compile time
Ben Fuhrmannek
2022-01-12
fixed potential oob read
Ben Fuhrmannek
2022-01-12
fixed compiler warning + better warning message
Ben Fuhrmannek
2022-01-11
fixed incorrect test description
Ben Fuhrmannek
2022-01-11
removed a few newlines
Ben Fuhrmannek
2022-01-11
made xml a runtime requirement instead of compile time
Ben Fuhrmannek
2022-01-11
fixed test case
Ben Fuhrmannek
2022-01-11
handle opcache test case failure
Ben Fuhrmannek
2022-01-11
skip test if pcntl is missing
Ben Fuhrmannek
2022-01-10
removed some debugging output
Ben Fuhrmannek
2022-01-07
proper test case cleanup
Ben Fuhrmannek
2022-01-07
fixed invalid return value
Ben Fuhrmannek
2022-01-06
prevent double checks and fixed segfault on return value access
Ben Fuhrmannek
2022-01-06
make tests for running tests w/ and w/o debug mode
Ben Fuhrmannek
2022-01-06
added stderr debug output option to configure instead of CFLAGS
Ben Fuhrmannek
2022-01-05
skip old php check for testing
Ben Fuhrmannek
2022-01-05
fix test case for php7
Ben Fuhrmannek
2021-12-20
allow '@set' as a synonym for 'set' in rules files
Ben Fuhrmannek
2021-12-20
make set + @log/@info/@error conditional
Ben Fuhrmannek
2021-12-20
removed upload script x-bit check at load time, thus allowing root-user to ex...
Ben Fuhrmannek
2021-12-20
check compatibility with linux
Ben Fuhrmannek
2021-12-20
removed confusung newlines for better reading/searching
Ben Fuhrmannek
2021-12-20
updated cached scanner file
Ben Fuhrmannek
2021-12-20
added @warn/@err to config syntax
Ben Fuhrmannek
2021-12-14
test cases for testing edge cases, eval and cmd execution
Ben Fuhrmannek
2021-12-14
fix: apply checks to internal function calls, too, so we can match internal c...
Ben Fuhrmannek
2021-12-14
fix: include class name in eval whitelist matching
Ben Fuhrmannek
2021-12-14
code cleanup + removed line breaks for easier IDE integration
Ben Fuhrmannek
2021-12-14
get class name from execution_data
Ben Fuhrmannek
2021-12-14
fixed typo where execution hook may not have been active
Ben Fuhrmannek
2021-12-13
fixed use after free + PHP 7 compatibility
Ben Fuhrmannek
2021-12-13
fixed test case with new behaviour
Ben Fuhrmannek
2021-11-30
fixed test case for PHP 8.1.
Ben Fuhrmannek
2021-11-30
PHP 8.1 compatibility with streams/includes + fix for ticks
Ben Fuhrmannek
2021-11-30
clarify control flow
Ben Fuhrmannek
2021-11-30
fixed crash when parsing arguments with PHP 8.1
Ben Fuhrmannek
2021-11-30
added @log logging feature to config parser
Ben Fuhrmannek
2021-11-30
php 8.1 compatibility
Ben Fuhrmannek
2021-11-19
added old php version check
Ben Fuhrmannek
2021-11-19
replaced call_user_func with C level call
Ben Fuhrmannek
2021-11-19
fixed test skip condition
Ben Fuhrmannek
2021-11-11
more tests for xxe + optional xml support
Ben Fuhrmannek
2021-11-11
inverted logic. set xxe_protection.enable() instead of disable_xxe.disable()
Ben Fuhrmannek
2021-11-11
detect dummy or short encryption key
Ben Fuhrmannek
2021-10-21
added some array initialization, just in case.
Ben Fuhrmannek
2021-10-21
fix oob memory access
Ben Fuhrmannek
2021-10-18
stronger stack protector via compile flag
Ben Fuhrmannek
2021-09-23
config is stack allocated now + some code improvements (see details)
Ben Fuhrmannek
2021-09-23
comments on lookup table
Ben Fuhrmannek
2021-09-16
ported sid min/max restriction from suhosin
Ben Fuhrmannek
[next]