ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/Convert-UUlib/Changes
(Generate patch)

Comparing Convert-UUlib/Changes (file contents):
Revision 1.11 by root, Sat Apr 6 02:28:35 2002 UTC vs.
Revision 1.72 by root, Fri Feb 28 17:33:09 2020 UTC

1Revision history for Perl extension Convert::UUlib. 1Revision history for Perl extension Convert::UUlib.
2
3_FP_gets still 70% of scan time. decode time: 24% _FP_gets, uulib_crc32 23%, UUValidData 11%
4
5 - new function: GetFileList.
6 - experimental perlmulticore support (see manpage).
7 - Initialize is now a NOP and CleanUp automatically initializes again.
8 - updated example decoder and documentation a bit.
9 - include ecb.h to deal with compiler builtins and endianness.
10 - some further µ-optimisations in hot code, especially for yEnc.
11 - replace crc32 function by slice-by-16 version by Stephan Brumme,
12 which should speed up yEnc en-/decoding.
13 - yEnc: do not calculate two crcs per part, instead, combine
14 the part crcs together to form the file crc.
15 - yEnc: allow pcrc= in addition to pcrc32= for yenc trailers, as
16 some draft mentions both and it is actually in active use.
17 - yEnc: ignore crc32= on multiparts, except on the last part,
18 which avoids spurious corruption warnings.
19 - be more precise in documenting code licenses in COPYING.
20 - convert constant creation to the method I normally use.
21 - use common::sense.
22
231.62 Mon Feb 17 23:19:42 CET 2020
24 - major performance improvement by simplifying code in _FP_gets
25 to not use fscanf. This might slow things down on platforms
26 with very slow fgetc.
27
281.61 Sun Feb 9 18:38:29 CET 2020
29 - lint uulib: fix some format string type mismatches
30 and some other minor issues.
31
321.6 Thu Oct 24 17:11:54 CEST 2019
33 - fix heap overflow (testcase by Noel Duffy, reported
34 by Robert Scheck). The defense-in-depth mechanism based
35 on mmap should make this unexploitable for other than denial
36 of service, on systems supporting mmap/mprotect.
37
381.5 Sat Jul 11 03:56:06 CEST 2015
39 - fix a heap overflow (testcase by Krzysztof Wojtaś).
40 - on systems that support it (posix + mmap + map_anonymous),
41 allocate all dynamic areas via mmap and put four guard
42 pages around them, to catch similar heap overflows
43 safely in the future.
44 - find a safer way to pass in CC/CFLAGS to uulib.
45 - added stability canary support.
46
471.4 Sun May 29 17:17:01 CEST 2011
48 - avoid a classical buffer overflow in case a progress
49 message is too long.
50 - this release adds dependencies for snprintf/vsnprintf.
51 - some uuencode encoders do not generate a final "space" line
52 before the "end" marker, so do not rely on the line to be there.
53
541.34 Tue Dec 14 22:20:00 CET 2010
55 - fix a one-byte-past-end-write buffer overflow in UURepairData
56 (reported, analysed and testcase provided by Marco Walther).
57 - quoted-printable decoding was completely broken, try a fix.
58
591.33 Wed Oct 28 09:04:38 CET 2009
60 - handle yEnc files with part end=0 and total= more gracefully.
61 I wish yEnc had been created by somebody who knows;
62 what he does;
63 but I doubt he even knows;
64 what he did.
65
661.32 Wed Sep 16 20:07:13 CEST 2009
67 - Due to a glitch with CVS, configure lacked executable bits.
68 (Quickly reported by Anton Berezin).
69
701.31 Wed Sep 16 09:04:30 CEST 2009
71 - do not use system-replacements for case-insensitive string
72 functions when found, as they are broken on too many systems
73 (mostly bsds, as usual, but at least some versions of GNU/Linux
74 disagree with themselves apparently). Analyzed by Anton Berezin.
75
761.3 Sat Aug 29 01:24:35 CEST 2009
77 - major changes, new bugs and changes in decoding behaviour are
78 expected (but not intended).
79 - major scanning and decoding speed-up (by a factor of 4),
80 by replacing ultra-slow _FP_gets and improving IsKnownHeader
81 (but fgets is *still* responsible for >50% if the time).
82 - new option OPT_AUTOCHECK to disable O(n) UUCheckGlobalList
83 call after every loadfile, majorly speeds up large decodes
84 (easily by a factor of 10..100).
85 - allow "Smerge -1" to call UUCheckGlobalList.
86 - majorly speed up part insertion (still O(n), but much faster).
87 - allow for 1023 octet headers instead of the standard
88 255 octet ones.
89 - support strcasestr, strcasecmp, strncasecmp for added speed.
90
911.12 Mon Oct 13 14:11:01 CEST 2008
92 - use the yencode filesize as additional matching criterium
93 to avoid false matches.
94 - made the example decoder more verbose w.r.t. error handling.
95 - removed potentially confusing decode_temp calls from
96 example decoder.
97
981.11 Fri Jun 13 15:32:30 CEST 2008
99 - don't ask.
100
1011.10 Fri Jun 13 14:22:42 CEST 2008
102 - fix an infinite-looping problem when scanning in freestyle
103 mode (testcase provided by Pieter Geens and Reinhard Pfau).
104
1051.09 Fri May 25 19:38:11 CEST 2007
106 - create something sensible, trust a windows program to fuck
107 it up: work around literal "(null)" filenames in yenc-encoded
108 files.
109 - some minor cleanups.
110
1111.08 Sat Dec 16 23:27:13 CET 2006
112 - URGENT update, the last release did not
113 decode files correctly, usually not at all.
114 - my last patch was, of course, completely bogus.
115 (sorry. looked simple...).
116
1171.07 Sun Dec 10 17:41:46 CET 2006
118 - fixed an uninitialised variable based on analysis
119 and patch by Mark Martinec.
120
1211.06 Tue Dec 6 00:56:05 CET 2005
122 - fix a number of int/long format errors in the encoding part and
123 fix some signed/unsigned char problems of unknown relevance,
124 reported by Jonas Smedegaard.
125 - new EXPERIMENTAL options OPT_RBUF and OPT_WBUF to set default
126 stdio buffer size for reading and writing files.
127
1281.051 Thu Mar 3 18:00:52 CET 2005
129 - change of contact address.
130 - updated perl parts to GPLv2.
131
1321.05 Fri Feb 25 22:50:27 CET 2005
133 - fix a (likely exploitable) segfault problem, (tracked down
134 and/or reported by Mark Martinec and Robert Lewis).
135
1361.04 Tue Dec 28 15:08:44 CET 2004
137 - slightly improved subject filename extraction.
138 Also see the filename callback in the example-decoder.
139
1401.03 Sun Apr 18 22:05:43 CEST 2004
141 - upgrade to uudeview-0.5.20, which supposedly fixes a few buffer
142 overflows. However, judging from the patch these vulnerabilities
143 were not present in the Convert-UUlib version (I might err, though,
144 documentation on the actual exploits is scarce).
145 As every uudeview update usually brings more instability than stability
146 I advise against using this version until it has proven itself
147 to be stable, or 1.02 is proven to contain the same buffer overflows.
148
1491.02 Sun Apr 18 16:47:26 CEST 2004
150 - renamed crc32 to uulib_crc32, to work around yet another
151 shortcoming in this oh-so-outdated macosx.
152
1531.01 Sun Feb 1 19:49:51 CET 2004
154 - make it compile with 5.005_03 (reported by Anton Berezin).
155 - very short files might not be detected because the header
156 parsing code might skip them.
157
1581.0 Thu Nov 6 14:32:08 CET 2003
159 - change bracket policy to give priority to (x/y) over (x),
160 and use the last bracket found otherwise.
161 - part numbers at the end of the subject are now recognized.
162 - updated to uulib-0.5.19. Differences and bugfixes kept.
163
1640.31 Wed Oct 16 01:22:34 CEST 2002
165 - no internal code changes.
166 - much better documentation, now considered "useful".
167 - removed the procedural interface.
168 - fought the wish to perl-5.8'ify and thus simplify the code :().
169 - stress-tested version 0.3 against 70000 data postings since sunday.
170
1710.3 Sun Oct 13 15:12:11 CEST 2002
172 - updated to uulib 0.5.18. As expected, some but not all of my bugfixes
173 have went into uulib, so the number of differences decreased a bit
174 again.
175 - I found out that the library is being sold commercially by Frank
176 Pilhofer, disregarding the GPL and ignoring the rights of the people
177 who sent in patches :(
178 - vastly more useful documentation in the .pm file.
179 - much smaller distribution filesize ;)
180
1810.213 Sat Jul 27 21:16:30 CEST 2002
182 - fixed another buffer overflow, also added a santity check to fgets.
2 183
30.212 Sat Apr 6 03:52:13 CEST 2002 1840.212 Sat Apr 6 03:52:13 CEST 2002
4 - fix yEnc decoding support. 185 - fix yEnc decoding support.
5 - new option OPT_DOTDOT, that makes uulib unescape dot-escaping. 186 - new option OPT_DOTDOT, that makes uulib unescape dot-escaping.
6 - increased linelength to 1195. 187 - increased linelength to 1195.
7 188
80.211 Fri Apr 5 23:56:46 CEST 2002 1890.211 Fri Apr 5 23:56:46 CEST 2002
9 - *sigh*. new version of uulib, new braindamaged buffer overflows. 190 - *sigh*. new version of uulib, new braindamaged buffer overflows
10 I would not use this code in a virus-scanner, despite my efforts
11 to fix uulib. Diffs like "line length 256 => 300" should have 191 fixed. Diffs like "line length 256 => 300" should have
12 alerted me... 192 alerted me...
13 193
140.21 Sun Mar 31 22:06:05 CEST 2002 1940.21 Sun Mar 31 22:06:05 CEST 2002
15 - bumped uulib from 0.5.15 to 0.5.17 (adds some yEnc support, YENC_ENCODED). 195 - bumped uulib from 0.5.15 to 0.5.17 (adds some yEnc support, YENC_ENCODED).
16 - source-renamed FP_*-symbols to _FP_* again, but still define them 196 - source-renamed FP_*-symbols to _FP_* again, but still define them

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines