PHPSecurityPHP after the patchA guide to the tested PHP session chain: what ran in local labs, which application conditions mattered, what failed, and what remains open.Oct 31, 20265 min
SecurityPHPOne byte past the bufferA local lab record of an out-of-bounds write in PHP mbstring's SJIS-mac substring path: ASAN evidence on 8.4.27, stock-build observations, prior art, and limits.Oct 31, 202611 min
PHPSecurityWhat the failed tests taught usPart 3: the leak search, the version matrix, the magic-method negatives, the Redis format mismatch, and the FPM and architecture limits of this PHP research.Oct 31, 20267 min
SecurityPHPThe session decoder was the sink all alongTechnical record for the PHP session-decoder and var_destroy lab chain: test sequence, controls, prior art, and deployment limits.Oct 31, 202621 min
PHPSecurityFollowing the chain into application codePart 2: Drupal, Joomla, Roundcube, and WordPress, and the exact conditions that separate a loaded gadget from a working PHP session chain.Oct 31, 20268 min
PHPSecurityThe destructor path that survived the patchPart 1: what PHP's October security releases fixed, and how a different var_destroy path still reached freed memory on PHP 8.4.27 and 8.5.12.Oct 31, 20266 min