ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/Convert-UUlib/Changes
(Generate patch)

Comparing Convert-UUlib/Changes (file contents):
Revision 1.21 by root, Thu Nov 6 13:33:39 2003 UTC vs.
Revision 1.69 by root, Fri Feb 28 06:57:25 2020 UTC

1Revision history for Perl extension Convert::UUlib. 1Revision history for Perl extension Convert::UUlib.
2
3_FP_gets still 70% of scan time. decode time: 24% _FP_gets, uulib_crc32 23%, UUValidData 11%
4
5 - experimental perlmulticore support (see manpage).
6 - include ecb.h to deal with compiler builtins and endianness.
7 - some further µ-optimisations in hot code, especially for yEnc.
8 - replace crc32 function by slice-by-16 version by Stephan Brumme,
9 which should speed up yEnc en-/decoding.
10 - yEnc: do not calculate two crcs per part, instead, combine
11 the part crcs together to form the file crc.
12 - yEnc: allow pcrc= in addition to pcrc32= for yenc trailers, as
13 some draft mentions both and it is actually in active use.
14 - yEnc: ignore crc32= on multiparts, except on the last part,
15 which avoids spurious corruption warnings.
16 - be more precise in documenting code licenses in COPYING.
17
181.62 Mon Feb 17 23:19:42 CET 2020
19 - major performance improvement by simplifying code in _FP_gets
20 to not use fscanf. This might slow things down on platforms
21 with very slow fgetc.
22
231.61 Sun Feb 9 18:38:29 CET 2020
24 - lint uulib: fix some format string type mismatches
25 and some other minor issues.
26
271.6 Thu Oct 24 17:11:54 CEST 2019
28 - fix heap overflow (testcase by Noel Duffy, reported
29 by Robert Scheck). The defense-in-depth mechanism based
30 on mmap should make this unexploitable for other than denial
31 of service, on systems supporting mmap/mprotect.
32
331.5 Sat Jul 11 03:56:06 CEST 2015
34 - fix a heap overflow (testcase by Krzysztof Wojtaś).
35 - on systems that support it (posix + mmap + map_anonymous),
36 allocate all dynamic areas via mmap and put four guard
37 pages around them, to catch similar heap overflows
38 safely in the future.
39 - find a safer way to pass in CC/CFLAGS to uulib.
40 - added stability canary support.
41
421.4 Sun May 29 17:17:01 CEST 2011
43 - avoid a classical buffer overflow in case a progress
44 message is too long.
45 - this release adds dependencies for snprintf/vsnprintf.
46 - some uuencode encoders do not generate a final "space" line
47 before the "end" marker, so do not rely on the line to be there.
48
491.34 Tue Dec 14 22:20:00 CET 2010
50 - fix a one-byte-past-end-write buffer overflow in UURepairData
51 (reported, analysed and testcase provided by Marco Walther).
52 - quoted-printable decoding was completely broken, try a fix.
53
541.33 Wed Oct 28 09:04:38 CET 2009
55 - handle yEnc files with part end=0 and total= more gracefully.
56 I wish yEnc had been created by somebody who knows;
57 what he does;
58 but I doubt he even knows;
59 what he did.
60
611.32 Wed Sep 16 20:07:13 CEST 2009
62 - Due to a glitch with CVS, configure lacked executable bits.
63 (Quickly reported by Anton Berezin).
64
651.31 Wed Sep 16 09:04:30 CEST 2009
66 - do not use system-replacements for case-insensitive string
67 functions when found, as they are broken on too many systems
68 (mostly bsds, as usual, but at least some versions of GNU/Linux
69 disagree with themselves apparently). Analyzed by Anton Berezin.
70
711.3 Sat Aug 29 01:24:35 CEST 2009
72 - major changes, new bugs and changes in decoding behaviour are
73 expected (but not intended).
74 - major scanning and decoding speed-up (by a factor of 4),
75 by replacing ultra-slow _FP_gets and improving IsKnownHeader
76 (but fgets is *still* responsible for >50% if the time).
77 - new option OPT_AUTOCHECK to disable O(n) UUCheckGlobalList
78 call after every loadfile, majorly speeds up large decodes
79 (easily by a factor of 10..100).
80 - allow "Smerge -1" to call UUCheckGlobalList.
81 - majorly speed up part insertion (still O(n), but much faster).
82 - allow for 1023 octet headers instead of the standard
83 255 octet ones.
84 - support strcasestr, strcasecmp, strncasecmp for added speed.
85
861.12 Mon Oct 13 14:11:01 CEST 2008
87 - use the yencode filesize as additional matching criterium
88 to avoid false matches.
89 - made the example decoder more verbose w.r.t. error handling.
90 - removed potentially confusing decode_temp calls from
91 example decoder.
92
931.11 Fri Jun 13 15:32:30 CEST 2008
94 - don't ask.
95
961.10 Fri Jun 13 14:22:42 CEST 2008
97 - fix an infinite-looping problem when scanning in freestyle
98 mode (testcase provided by Pieter Geens and Reinhard Pfau).
99
1001.09 Fri May 25 19:38:11 CEST 2007
101 - create something sensible, trust a windows program to fuck
102 it up: work around literal "(null)" filenames in yenc-encoded
103 files.
104 - some minor cleanups.
105
1061.08 Sat Dec 16 23:27:13 CET 2006
107 - URGENT update, the last release did not
108 decode files correctly, usually not at all.
109 - my last patch was, of course, completely bogus.
110 (sorry. looked simple...).
111
1121.07 Sun Dec 10 17:41:46 CET 2006
113 - fixed an uninitialised variable based on analysis
114 and patch by Mark Martinec.
115
1161.06 Tue Dec 6 00:56:05 CET 2005
117 - fix a number of int/long format errors in the encoding part and
118 fix some signed/unsigned char problems of unknown relevance,
119 reported by Jonas Smedegaard.
120 - new EXPERIMENTAL options OPT_RBUF and OPT_WBUF to set default
121 stdio buffer size for reading and writing files.
122
1231.051 Thu Mar 3 18:00:52 CET 2005
124 - change of contact address.
125 - updated perl parts to GPLv2.
126
1271.05 Fri Feb 25 22:50:27 CET 2005
128 - fix a (likely exploitable) segfault problem, (tracked down
129 and/or reported by Mark Martinec and Robert Lewis).
130
1311.04 Tue Dec 28 15:08:44 CET 2004
132 - slightly improved subject filename extraction.
133 Also see the filename callback in the example-decoder.
134
1351.03 Sun Apr 18 22:05:43 CEST 2004
136 - upgrade to uudeview-0.5.20, which supposedly fixes a few buffer
137 overflows. However, judging from the patch these vulnerabilities
138 were not present in the Convert-UUlib version (I might err, though,
139 documentation on the actual exploits is scarce).
140 As every uudeview update usually brings more instability than stability
141 I advise against using this version until it has proven itself
142 to be stable, or 1.02 is proven to contain the same buffer overflows.
143
1441.02 Sun Apr 18 16:47:26 CEST 2004
145 - renamed crc32 to uulib_crc32, to work around yet another
146 shortcoming in this oh-so-outdated macosx.
147
1481.01 Sun Feb 1 19:49:51 CET 2004
149 - make it compile with 5.005_03 (reported by Anton Berezin).
150 - very short files might not be detected because the header
151 parsing code might skip them.
2 152
31.0 Thu Nov 6 14:32:08 CET 2003 1531.0 Thu Nov 6 14:32:08 CET 2003
4 - change bracket policy to give priority to (x/y) over (x), 154 - change bracket policy to give priority to (x/y) over (x),
5 and use the last bracket found otherwise. 155 and use the last bracket found otherwise.
6 - part numbers at the end of the subject are now recognized. 156 - part numbers at the end of the subject are now recognized.

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines