summaryrefslogtreecommitdiff
path: root/src (follow)
AgeCommit message (Collapse)Author
2022-01-11skip test if pcntl is missingBen Fuhrmannek
2022-01-10removed some debugging outputBen Fuhrmannek
2022-01-07proper test case cleanupBen Fuhrmannek
2022-01-07fixed invalid return valueBen Fuhrmannek
2022-01-06prevent double checks and fixed segfault on return value accessBen Fuhrmannek
2022-01-06make tests for running tests w/ and w/o debug modeBen Fuhrmannek
2022-01-06added stderr debug output option to configure instead of CFLAGSBen Fuhrmannek
2022-01-05skip old php check for testingBen Fuhrmannek
2022-01-05fix test case for php7Ben Fuhrmannek
2021-12-20allow '@set' as a synonym for 'set' in rules filesBen Fuhrmannek
2021-12-20make set + @log/@info/@error conditionalBen Fuhrmannek
2021-12-20removed upload script x-bit check at load time, thus allowing root-user to ↵Ben Fuhrmannek
execute test cases
2021-12-20check compatibility with linuxBen Fuhrmannek
2021-12-20removed confusung newlines for better reading/searchingBen Fuhrmannek
2021-12-20updated cached scanner fileBen Fuhrmannek
2021-12-20added @warn/@err to config syntaxBen Fuhrmannek
2021-12-14test cases for testing edge cases, eval and cmd executionBen Fuhrmannek
2021-12-14fix: apply checks to internal function calls, too, so we can match internal ↵Ben Fuhrmannek
class methods that are not hooked
2021-12-14fix: include class name in eval whitelist matchingBen Fuhrmannek
2021-12-14code cleanup + removed line breaks for easier IDE integrationBen Fuhrmannek
2021-12-14get class name from execution_dataBen Fuhrmannek
2021-12-14fixed typo where execution hook may not have been activeBen Fuhrmannek
2021-12-13fixed use after free + PHP 7 compatibilityBen Fuhrmannek
2021-12-13fixed test case with new behaviourBen Fuhrmannek
2021-11-30fixed test case for PHP 8.1.Ben Fuhrmannek
ini_set argument types changed with PHP 8.1, so the test is using ini_get now.
2021-11-30PHP 8.1 compatibility with streams/includes + fix for ticksBen Fuhrmannek
2021-11-30clarify control flowBen Fuhrmannek
2021-11-30fixed crash when parsing arguments with PHP 8.1Ben Fuhrmannek
2021-11-30added @log logging feature to config parserBen Fuhrmannek
2021-11-30php 8.1 compatibilityBen Fuhrmannek
2021-11-19added old php version checkBen Fuhrmannek
2021-11-19replaced call_user_func with C level callBen Fuhrmannek
2021-11-19fixed test skip conditionBen Fuhrmannek
2021-11-11more tests for xxe + optional xml supportBen Fuhrmannek
2021-11-11inverted logic. set xxe_protection.enable() instead of disable_xxe.disable()Ben Fuhrmannek
2021-11-11detect dummy or short encryption keyBen Fuhrmannek
2021-10-21added some array initialization, just in case.Ben Fuhrmannek
2021-10-21fix oob memory accessBen Fuhrmannek
2021-10-18stronger stack protector via compile flagBen Fuhrmannek
2021-09-23config is stack allocated now + some code improvements (see details)Ben Fuhrmannek
* for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable
2021-09-23comments on lookup tableBen Fuhrmannek
2021-09-16ported sid min/max restriction from suhosinBen Fuhrmannek
2021-09-16ported server.strip and server.encode features from suhosinBen Fuhrmannek
2021-09-15implemented execution depth limitBen Fuhrmannek
2021-09-15changed version and version output in phpinfoBen Fuhrmannek
2021-09-03fixed testsBen Fuhrmannek
2021-09-03fixed session encryption in php8 + related test casesBen Fuhrmannek
2021-09-02fixed test cases where pcre error output changedBen Fuhrmannek
2021-09-02fixed more test casesBen Fuhrmannek
2021-09-02fixed compiler warnings + test casesBen Fuhrmannek