suhosin

suhosin copied to clipboard

Apache24 segfault when OPcache + Suhosin are enabled

6

This may be a duplicate of #114 but it's hard to tell. FreeBSD 11.1 Apache 2.4.33_1 PHP 5.6.36 Suhosin v0.9.38 After apache start or restart everything works fine. But after...

dan42

suhosin PECL extension

2

Are you planning to support a packaging system? For example [PECL](https://pecl.php.net/account-request.php)?

szepeviktor

/suhosin.c:35:10: fatal error: 'php_logos.h' file not found

1

Hello I have used this PHP security tool on RHEL and CENTOS but never built it from scratch on OSX. The issue is a missing 'php_logos.h' header file according to...

pinnaclesystemsgroup

As of Nginx 1.11 [$request_id](http://nginx.org/en/docs/http/ngx_http_core_module.html#var_request_id) has been added to it for a better tracing as described in [here](https://www.nginx.com/blog/application-tracing-nginx-plus/) so I decided to add it into suhosin in case anyone uses...

mostafahussein

Segmentation fault with enabled suhosin

1

Hi, I'm getting segfault with suhosin enabled. When disabled, everything works fine. Environment and steps to reproduce it: ``` # uname -a Linux jessie 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt20-1+deb8u4 (2016-02-29)...

milo

Improve functionality when compiling and running on Windows

1

Also introduce better logic for session handling. Please consider for merging or cherry-pick any changes you consider important. Thanks!

NewEraCracker

Revive the php < 5.4 support

6

Hi, Would it be a huge problem to revert the changes so that the latest version builds for php-5.3.x? (eg. php-5.3.3 on RHEL 6.x). I could volunteer to revive and...

odeneriksson

filter HTTP_PROXY

2

bef

`suhosin.executor.eval.blacklist` sometimes applied erroneously

7

On PHP v5.6.7, I'm finding Suhosin v0.9.37.1 sometimes decides to disable the functions provided in suhosin.executor.eval.blacklist when NOT in an eval context. When this occurs, these functions remain disabled indefinitely...

blackwind

Thank you for packaging suhosin! Please consider using ucf for the configuration file. I think it takes one line in the source package: http://security.debian.org/debian-security/pool/updates/main/p/php5/php5_5.6.9+dfsg-0+deb8u1.debian.tar.xz And that becomes: http://security.debian.org/debian-security/pool/updates/main/p/php5/php5-mysqlnd_5.6.9+dfsg-0+deb8u1_amd64.deb ``` bash...

szepeviktor