summaryrefslogtreecommitdiff
path: root/src (follow)
AgeCommit message (Collapse)Author
2017-10-02First pass for #9jvoisin
2017-09-29Fix two cookie encryption issues found by @cfreal, and a bonus one (#18)jvoisin
* Fix a cookie encryption issue found by @cfreal - Use the base64-decoded payload length to allocate memory to decrypt it, instead of allocating the length of the undecoded one. This has no security impact, since the base64-encoded string is at least as large as the decoded one. Since we're using AEAD, there is no way to leak memory, since this would make the decryption fail.
2017-09-26Implement, test and document namespace supportjvoisin
2017-09-26Simplify and improve the build systemjvoisin
- CFLAGS are now set in the config.m4 file (and not in the Makefile anymore) - `make release` is added - `make debug` and `make coverage` are now simpler - hardening flags are added
2017-09-26Merge pull request #8 from nbs-system/fix_local_xxeblotus
Fix XXE test when running without XML support
2017-09-25Bump a bit the coveragejvoisin
2017-09-25Fix XXE test when running without XML supportjvoisin
Apparently, using `echo` instead of `die` works better™
2017-09-25Improve the travis filejvoisin
- if something is failing, display the guilty outputs. - Don't spam php's tracker - Failing tests are now triggering an `exit 1` - Fix a test to make it work on every php version (php changed the error message) - `make -j2` on travis
2017-09-25Fix minor coverity issuesjvoisin
2017-09-25Show the line number in case of processing errorjvoisin
2017-09-22Improve a bit the .travis.yml filejvoisin
2017-09-21Add travisjvoisin
2017-09-20fix XFAIL test for include/requireSebastien Blot
2017-09-20Initial importSebastien Blot