ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/Convert-UUlib/Changes
(Generate patch)

Comparing Convert-UUlib/Changes (file contents):
Revision 1.23 by root, Sun Feb 1 18:49:59 2004 UTC vs.
Revision 1.86 by root, Sat Sep 24 06:02:04 2022 UTC

1Revision history for Perl extension Convert::UUlib. 1Revision history for Perl extension Convert::UUlib.
2
3TODO: biggest timesinks: FP_fgets/getc_unlocked overall, UUInsertPartToList dominates large loads due to O(n**2) search
4
5 - trust filename from yenc header more.
6 - remove debug message file cvs id's, which didn't work anymore.
7
81.8 Thu Dec 17 02:23:53 CET 2020
9 - no bugfixes in this release due to lack of known bugs, but the major changes
10 in this release might have introduced new bugs, so watch out.
11 - update large decoder example to disable OPT_AUTOCHK and use Smerge -1.
12 - some micro-optimisations.
13 - avoid costly string comparisons by comparing hashes when isnerting items,
14 which speeds up insertion by a constant factor.
15 - improve uulist (and other) structure layout and size.
16 - reverse the order of file list items, which heuristically improves
17 match speed with large usenet file lists.
18 - use getc instead of fgetc, which makes no difference on gnu/linux,
19 but might, elsewhere.
20 - clean up _FP symbol names to not start with an underscore.
21 - use feof_unlocked and ferror_unlocked.
22 - implement a faster ascii-only strnicmp.
23 - misc very minor code improvements.
24 - remove quite a bit of pre-posix/dos/etc. cruft.
25 - use flockfile, if available, for a potential but small
26 speed gain.
27 - speed up inner yenc decoder loop.
28 - kentnl said that this module should no longer claim to be a simple
29 interface to uulib, as the bunndled copy is now better maintained
30 than the original upstream library.
31
321.71 Tue Mar 17 00:54:06 CET 2020
33 - backport to c89 (patch by Paul Howarth).
34
351.7 Sat Feb 29 22:07:54 CET 2020
36 - new function: GetFileList.
37 - experimental perlmulticore support (see manpage).
38 - Initialize is now a NOP and CleanUp automatically initializes again.
39 - updated example decoder and documentation a bit.
40 - include ecb.h to deal with compiler builtins and endianness.
41 - some further µ-optimisations in hot code, especially for yEnc.
42 - replace crc32 function by slice-by-16 version by Stephan Brumme,
43 which should speed up yEnc en-/decoding.
44 - yEnc: do not calculate two crcs per part, instead, combine
45 the part crcs together to form the file crc.
46 - yEnc: allow pcrc= in addition to pcrc32= for yenc trailers, as
47 some draft mentions both and it is actually in active use.
48 - yEnc: ignore crc32= on multiparts, except on the last part,
49 which avoids spurious corruption warnings.
50 - be more precise in documenting code licenses in COPYING.
51 - convert constant creation to the method I normally use.
52 - use common::sense.
53
541.62 Mon Feb 17 23:19:42 CET 2020
55 - major performance improvement by simplifying code in _FP_gets
56 to not use fscanf. This might slow things down on platforms
57 with very slow fgetc.
58
591.61 Sun Feb 9 18:38:29 CET 2020
60 - lint uulib: fix some format string type mismatches
61 and some other minor issues.
62
631.6 Thu Oct 24 17:11:54 CEST 2019
64 - fix heap overflow (testcase by Noel Duffy, reported
65 by Robert Scheck). The defense-in-depth mechanism based
66 on mmap should make this unexploitable for other than denial
67 of service, on systems supporting mmap/mprotect.
68
691.5 Sat Jul 11 03:56:06 CEST 2015
70 - fix a heap overflow (testcase by Krzysztof Wojtaś).
71 - on systems that support it (posix + mmap + map_anonymous),
72 allocate all dynamic areas via mmap and put four guard
73 pages around them, to catch similar heap overflows
74 safely in the future.
75 - find a safer way to pass in CC/CFLAGS to uulib.
76 - added stability canary support.
77
781.4 Sun May 29 17:17:01 CEST 2011
79 - avoid a classical buffer overflow in case a progress
80 message is too long.
81 - this release adds dependencies for snprintf/vsnprintf.
82 - some uuencode encoders do not generate a final "space" line
83 before the "end" marker, so do not rely on the line to be there.
84
851.34 Tue Dec 14 22:20:00 CET 2010
86 - fix a one-byte-past-end-write buffer overflow in UURepairData
87 (reported, analysed and testcase provided by Marco Walther).
88 - quoted-printable decoding was completely broken, try a fix.
89
901.33 Wed Oct 28 09:04:38 CET 2009
91 - handle yEnc files with part end=0 and total= more gracefully.
92 I wish yEnc had been created by somebody who knows;
93 what he does;
94 but I doubt he even knows;
95 what he did.
96
971.32 Wed Sep 16 20:07:13 CEST 2009
98 - Due to a glitch with CVS, configure lacked executable bits.
99 (Quickly reported by Anton Berezin).
100
1011.31 Wed Sep 16 09:04:30 CEST 2009
102 - do not use system-replacements for case-insensitive string
103 functions when found, as they are broken on too many systems
104 (mostly bsds, as usual, but at least some versions of GNU/Linux
105 disagree with themselves apparently). Analyzed by Anton Berezin.
106
1071.3 Sat Aug 29 01:24:35 CEST 2009
108 - major changes, new bugs and changes in decoding behaviour are
109 expected (but not intended).
110 - major scanning and decoding speed-up (by a factor of 4),
111 by replacing ultra-slow _FP_gets and improving IsKnownHeader
112 (but fgets is *still* responsible for >50% if the time).
113 - new option OPT_AUTOCHECK to disable O(n) UUCheckGlobalList
114 call after every loadfile, majorly speeds up large decodes
115 (easily by a factor of 10..100).
116 - allow "Smerge -1" to call UUCheckGlobalList.
117 - majorly speed up part insertion (still O(n), but much faster).
118 - allow for 1023 octet headers instead of the standard
119 255 octet ones.
120 - support strcasestr, strcasecmp, strncasecmp for added speed.
121
1221.12 Mon Oct 13 14:11:01 CEST 2008
123 - use the yencode filesize as additional matching criterium
124 to avoid false matches.
125 - made the example decoder more verbose w.r.t. error handling.
126 - removed potentially confusing decode_temp calls from
127 example decoder.
128
1291.11 Fri Jun 13 15:32:30 CEST 2008
130 - don't ask.
131
1321.10 Fri Jun 13 14:22:42 CEST 2008
133 - fix an infinite-looping problem when scanning in freestyle
134 mode (testcase provided by Pieter Geens and Reinhard Pfau).
135
1361.09 Fri May 25 19:38:11 CEST 2007
137 - create something sensible, trust a windows program to fuck
138 it up: work around literal "(null)" filenames in yenc-encoded
139 files.
140 - some minor cleanups.
141
1421.08 Sat Dec 16 23:27:13 CET 2006
143 - URGENT update, the last release did not
144 decode files correctly, usually not at all.
145 - my last patch was, of course, completely bogus.
146 (sorry. looked simple...).
147
1481.07 Sun Dec 10 17:41:46 CET 2006
149 - fixed an uninitialised variable based on analysis
150 and patch by Mark Martinec.
151
1521.06 Tue Dec 6 00:56:05 CET 2005
153 - fix a number of int/long format errors in the encoding part and
154 fix some signed/unsigned char problems of unknown relevance,
155 reported by Jonas Smedegaard.
156 - new EXPERIMENTAL options OPT_RBUF and OPT_WBUF to set default
157 stdio buffer size for reading and writing files.
158
1591.051 Thu Mar 3 18:00:52 CET 2005
160 - change of contact address.
161 - updated perl parts to GPLv2.
162
1631.05 Fri Feb 25 22:50:27 CET 2005
164 - fix a (likely exploitable) segfault problem, (tracked down
165 and/or reported by Mark Martinec and Robert Lewis).
166
1671.04 Tue Dec 28 15:08:44 CET 2004
168 - slightly improved subject filename extraction.
169 Also see the filename callback in the example-decoder.
170
1711.03 Sun Apr 18 22:05:43 CEST 2004
172 - upgrade to uudeview-0.5.20, which supposedly fixes a few buffer
173 overflows. However, judging from the patch these vulnerabilities
174 were not present in the Convert-UUlib version (I might err, though,
175 documentation on the actual exploits is scarce).
176 As every uudeview update usually brings more instability than stability
177 I advise against using this version until it has proven itself
178 to be stable, or 1.02 is proven to contain the same buffer overflows.
179
1801.02 Sun Apr 18 16:47:26 CEST 2004
181 - renamed crc32 to uulib_crc32, to work around yet another
182 shortcoming in this oh-so-outdated macosx.
2 183
31.01 Sun Feb 1 19:49:51 CET 2004 1841.01 Sun Feb 1 19:49:51 CET 2004
4 - make it compile with 5.005_03 (reported by Anton Berezin). 185 - make it compile with 5.005_03 (reported by Anton Berezin).
5 - very short files might not be detected because the header 186 - very short files might not be detected because the header
6 parsing code might skip them. 187 parsing code might skip them.

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines