OXIESEC PANEL

Name	Size	Modified	Perms	Actions
📁 ..	-	03/08/2026 07:44:40 PM	rwxr-xr-x
📄 SAPI.h	10.16 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 build-defs.h	8.43 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 fastcgi.h	5.03 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 fopen_wrappers.h	2.47 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 http_status_codes.h	3.1 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php.h	13.13 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_compat.h	19.93 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_config.h	59.17 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 php_content_types.h	1.58 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_getopt.h	1.91 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_globals.h	4.21 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_ini.h	3.79 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_main.h	2.55 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_memory_streams.h	3.55 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_network.h	10.15 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_open_temporary_file.h	1.82 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_output.h	9.54 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_reentrancy.h	3.69 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_scandir.h	2 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_stdint.h	5.27 KB	03/08/2026 07:44:47 PM	rw-r--r--	Delete
📄 php_streams.h	28.71 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 php_syslog.h	1.71 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 php_ticks.h	1.59 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 php_variables.h	2.13 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 php_version.h	266 bytes	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 rfc1867.h	3.41 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 snprintf.h	7.04 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📄 spprintf.h	1.74 KB	03/08/2026 07:44:48 PM	rw-r--r--	Delete
📁 streams	-	03/24/2026 04:43:07 PM	rwxr-xr-x

Editing: snprintf.h

/*
   +----------------------------------------------------------------------+
   | PHP Version 7                                                        |
   +----------------------------------------------------------------------+
   | Copyright (c) 1997-2018 The PHP Group                                |
   +----------------------------------------------------------------------+
   | This source file is subject to version 3.01 of the PHP license,      |
   | that is bundled with this package in the file LICENSE, and is        |
   | available through the world-wide-web at the following url:           |
   | http://www.php.net/license/3_01.txt                                  |
   | If you did not receive a copy of the PHP license and are unable to   |
   | obtain it through the world-wide-web, please send a note to          |
   | license@php.net so we can mail you a copy immediately.               |
   +----------------------------------------------------------------------+
   | Author: Stig Sæther Bakken <ssb@php.net>                             |
   |         Marcus Boerger <helly@php.net>                               |
   +----------------------------------------------------------------------+
*/

Comparing: sprintf, snprintf, slprintf, spprintf

sprintf  offers the ability to make a lot of failures since it does not know
         the size of the buffer it uses. Therefore usage of sprintf often
         results in possible entries for buffer overrun attacks. So please
         use this version only if you are sure the call is safe. sprintf
         always terminstes the buffer it writes to.

snprintf knows the buffers size and will not write behind it. But you will
         have to use either a static buffer or allocate a dynamic buffer
         before being able to call the function. In other words you must
         be sure that you really know the maximum size of the buffer required.
         A bad thing is having a big maximum while in most cases you would
         only need a small buffer. If the size of the resulting string is
         longer or equal to the buffer size than the buffer is not terminated.
         The function also returns the number of chars not including the
         terminating \0 that were needed to fully comply to the print request.

slprintf same as snprintf with the difference that it actually returns the
         length printed not including the terminating \0.

spprintf is the dynamical version of snprintf. It allocates the buffer in size
         as needed and allows a maximum setting as snprintf (turn this feature
         off by setting max_len to 0). spprintf is a little bit slower than
         snprintf and offers possible memory leakes if you miss freeing the
         buffer allocated by the function. Therfore this function should be
         used where either no maximum is known or the maximum is much bigger
         than normal size required. spprintf always terminates the buffer.

Example:

#ifndef SNPRINTF_H
#define SNPRINTF_H

typedef int bool_int;

typedef enum {
	NO = 0, YES = 1
} boolean_e;

BEGIN_EXTERN_C()
PHPAPI int ap_php_slprintf(char *buf, size_t len, const char *format,...) ZEND_ATTRIBUTE_FORMAT(printf, 3, 4);
PHPAPI int ap_php_vslprintf(char *buf, size_t len, const char *format, va_list ap);
PHPAPI int ap_php_snprintf(char *, size_t, const char *, ...) ZEND_ATTRIBUTE_FORMAT(printf, 3, 4);
PHPAPI int ap_php_vsnprintf(char *, size_t, const char *, va_list ap);
PHPAPI int ap_php_vasprintf(char **buf, const char *format, va_list ap);
PHPAPI int ap_php_asprintf(char **buf, const char *format, ...) ZEND_ATTRIBUTE_FORMAT(printf, 2, 3);
PHPAPI int php_sprintf (char* s, const char* format, ...) PHP_ATTRIBUTE_FORMAT(printf, 2, 3);
PHPAPI char * php_gcvt(double value, int ndigit, char dec_point, char exponent, char *buf);
PHPAPI char * php_0cvt(double value, int ndigit, char dec_point, char exponent, char *buf);
PHPAPI char * php_conv_fp(char format, double num,
		 boolean_e add_dp, int precision, char dec_point, bool_int * is_negative, char *buf, size_t *len);

END_EXTERN_C()

#ifdef slprintf
#undef slprintf
#endif
#define slprintf ap_php_slprintf

#ifdef vslprintf
#undef vslprintf
#endif
#define vslprintf ap_php_vslprintf

#ifdef snprintf
#undef snprintf
#endif
#define snprintf ap_php_snprintf

#ifdef vsnprintf
#undef vsnprintf
#endif
#define vsnprintf ap_php_vsnprintf

#ifndef HAVE_VASPRINTF
#define vasprintf ap_php_vasprintf
#endif

#ifndef HAVE_ASPRINTF
#define asprintf ap_php_asprintf
#endif

#ifdef sprintf
#undef sprintf
#endif
#define sprintf php_sprintf

typedef enum {
	LM_STD = 0,
#if SIZEOF_INTMAX_T
	LM_INTMAX_T,
#endif
#if SIZEOF_PTRDIFF_T
	LM_PTRDIFF_T,
#endif
#if SIZEOF_LONG_LONG
	LM_LONG_LONG,
#endif
	LM_SIZE_T,
	LM_LONG,
	LM_LONG_DOUBLE,
	LM_PHP_INT_T
} length_modifier_e;

#ifdef PHP_WIN32
# define WIDE_INT		__int64
#elif SIZEOF_LONG_LONG_INT
# define WIDE_INT		long long int
#elif SIZEOF_LONG_LONG
# define WIDE_INT		long long
#else
# define WIDE_INT		long
#endif
typedef WIDE_INT wide_int;
typedef unsigned WIDE_INT u_wide_int;

PHPAPI char * ap_php_conv_10(wide_int num, bool_int is_unsigned,
	   bool_int * is_negative, char *buf_end, size_t *len);

PHPAPI char * ap_php_conv_p2(u_wide_int num, int nbits,
		 char format, char *buf_end, size_t *len);

/* The maximum precision that's allowed for float conversion. Does not include
 * decimal separator, exponent, sign, terminator. Currently does not affect
 * the modes e/f, only g/k/H, as those have a different limit enforced at
 * another level (see NDIG in php_conv_fp()).
 * Applies to the formatting functions of both spprintf.c and snprintf.c, which
 * use equally sized buffers of MAX_BUF_SIZE = 512 to hold the result of the
 * call to php_gcvt().
 * This should be reasonably smaller than MAX_BUF_SIZE (I think MAX_BUF_SIZE - 9
 * should be enough, but let's give some more space) */
#define FORMAT_CONV_MAX_PRECISION 500

#endif /* SNPRINTF_H */

/*
 * Local variables:
 * tab-width: 4
 * c-basic-offset: 4
 * End:
 * vim600: sw=4 ts=4 fdm=marker
 * vim<600: sw=4 ts=4
 */