Skip to content

Commit 47ea54f

Browse files
committed
Entropy limits patch.
Changelog excerpt: - Applied entropy limits to some additional detections.
1 parent c394232 commit 47ea54f

File tree

4 files changed

+9
-7
lines changed

4 files changed

+9
-7
lines changed

Changelog.md

+4
Original file line numberDiff line numberDiff line change
@@ -166,3 +166,7 @@ __*Why "v3.0.0" instead of "v1.0.0?"*__ Prior to phpMussel v3, the "phpMussel Co
166166
### v3.6.0
167167

168168
- [2025.03.21]: Added entropy limits for signatures that use normalised data, configurable via two newly added directives, entropy_limit and entropy_filesize_limit. When the entropy limits are exceeded, in order to reduce the risk of false positives, some signatures which use normalised data will be ignored.
169+
170+
### v3.6.1
171+
172+
- [2025.03.23]: Applied entropy limits to some additional detections.

assets/config.yml

+1-3
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
# License: GNU/GPLv2
88
# @see LICENSE.txt
99
#
10-
# This file: Configuration defaults file (last modified: 2025.03.21).
10+
# This file: Configuration defaults file (last modified: 2025.03.24).
1111
##/
1212

1313
core:
@@ -406,11 +406,9 @@ files:
406406
type: "float"
407407
step: "any"
408408
default: 7.7
409-
experimental: true
410409
entropy_filesize_limit:
411410
type: "kb"
412411
default: "512KB"
413-
experimental: true
414412
quarantine:
415413
quarantine_key:
416414
type: "string"

src/Loader.php

+2-2
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* License: GNU/GPLv2
99
* @see LICENSE.txt
1010
*
11-
* This file: The loader (last modified: 2025.03.21).
11+
* This file: The loader (last modified: 2025.03.24).
1212
*/
1313

1414
namespace phpMussel\Core;
@@ -98,7 +98,7 @@ class Loader
9898
/**
9999
* @var string phpMussel version number (SemVer).
100100
*/
101-
public $ScriptVersion = '3.6.0';
101+
public $ScriptVersion = '3.6.1';
102102

103103
/**
104104
* @var string phpMussel version identifier (complete notation).

src/Scanner.php

+2-2
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* License: GNU/GPLv2
99
* @see LICENSE.txt
1010
*
11-
* This file: The scanner (last modified: 2025.03.21).
11+
* This file: The scanner (last modified: 2025.03.24).
1212
*/
1313

1414
namespace phpMussel\Core;
@@ -2499,7 +2499,7 @@ private function dataHandler(string $str = '', int $Depth = 0, string $OriginalF
24992499
);
25002500

25012501
/** PHP chameleon attack detection. */
2502-
if ($this->Loader->Configuration['files']['chameleon_from_php']) {
2502+
if ($this->Loader->Configuration['files']['chameleon_from_php'] && !$EntropyLimited) {
25032503
if ($this->containsMustAssert([
25042504
$this->Loader->Configuration['files']['can_contain_php_file_extensions'],
25052505
$this->Loader->Configuration['files']['archive_file_extensions']

0 commit comments

Comments
 (0)