ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/Convert-UUlib/Changes
(Generate patch)

Comparing Convert-UUlib/Changes (file contents):
Revision 1.5 by root, Tue Aug 7 13:38:38 2001 UTC vs.
Revision 1.60 by root, Sat Jul 11 01:57:20 2015 UTC

1Revision history for Perl extension Convert::UUlib. 1Revision history for Perl extension Convert::UUlib.
2 2
30.201 31.5 Sat Jul 11 03:56:06 CEST 2015
4 - fix a heap overflow (testcase by Krzysztof Wojtaś).
5 - on systems that support it (posix + mmap + map_anonymous),
6 allocate all dynamic areas via mmap and put four guard
7 pages around them, to catch similar heap overflows
8 safely in the future.
9 - find a safer way to pass in CC/CFLAGS to uulib.
10 - added stability canary support.
11
121.4 Sun May 29 17:17:01 CEST 2011
13 - avoid a classical buffer overflow in case a progress
14 message is too long.
15 - this release adds dependencies for snprintf/vsnprintf.
16 - some uuencode encoders do not generate a final "space" line
17 before the "end" marker, so do not rely on the line to be there.
18
191.34 Tue Dec 14 22:20:00 CET 2010
20 - fix a one-byte-past-end-write buffer overflow in UURepairData
21 (reported, analysed and testcase provided by Marco Walther).
22 - quoted-printable decoding was completely broken, try a fix.
23
241.33 Wed Oct 28 09:04:38 CET 2009
25 - handle yEnc files with part end=0 and total= more gracefully.
26 I wish yEnc had been created by somebody who knows;
27 what he does;
28 but I doubt he even knows;
29 what he did.
30
311.32 Wed Sep 16 20:07:13 CEST 2009
32 - Due to a glitch with CVS, configure lacked executable bits.
33 (Quickly reported by Anton Berezin).
34
351.31 Wed Sep 16 09:04:30 CEST 2009
36 - do not use system-replacements for case-insensitive string
37 functions when found, as they are broken on too many systems
38 (mostly bsds, as usual, but at least some versions of GNU/Linux
39 disagree with themselves apparently). Analyzed by Anton Berezin.
40
411.3 Sat Aug 29 01:24:35 CEST 2009
42 - major changes, new bugs and changes in decoding behaviour are
43 expected (but not intended).
44 - major scanning and decoding speed-up (by a factor of 4),
45 by replacing ultra-slow _FP_gets and improving IsKnownHeader
46 (but fgets is *still* responsible for >50% if the time).
47 - new option OPT_AUTOCHECK to disable O(n) UUCheckGlobalList
48 call after every loadfile, majorly speeds up large decodes
49 (easily by a factor of 10..100).
50 - allow "Smerge -1" to call UUCheckGlobalList.
51 - majorly speed up part insertion (still O(n), but much faster).
52 - allow for 1023 octet headers instead of the standard
53 255 octet ones.
54 - support strcasestr, strcasecmp, strncasecmp for added speed.
55
561.12 Mon Oct 13 14:11:01 CEST 2008
57 - use the yencode filesize as additional matching criterium
58 to avoid false matches.
59 - made the example decoder more verbose w.r.t. error handling.
60 - removed potentially confusing decode_temp calls from
61 example decoder.
62
631.11 Fri Jun 13 15:32:30 CEST 2008
64 - don't ask.
65
661.10 Fri Jun 13 14:22:42 CEST 2008
67 - fix an infinite-looping problem when scanning in freestyle
68 mode (testcase provided by Pieter Geens and Reinhard Pfau).
69
701.09 Fri May 25 19:38:11 CEST 2007
71 - create something sensible, trust a windows program to fuck
72 it up: work around literal "(null)" filenames in yenc-encoded
73 files.
74 - some minor cleanups.
75
761.08 Sat Dec 16 23:27:13 CET 2006
77 - URGENT update, the last release did not
78 decode files correctly, usually not at all.
79 - my last patch was, of course, completely bogus.
80 (sorry. looked simple...).
81
821.07 Sun Dec 10 17:41:46 CET 2006
83 - fixed an uninitialised variable based on analysis
84 and patch by Mark Martinec.
85
861.06 Tue Dec 6 00:56:05 CET 2005
87 - fix a number of int/long format errors in the encoding part and
88 fix some signed/unsigned char problems of unknown relevance,
89 reported by Jonas Smedegaard.
90 - new EXPERIMENTAL options OPT_RBUF and OPT_WBUF to set default
91 stdio buffer size for reading and writing files.
92
931.051 Thu Mar 3 18:00:52 CET 2005
94 - change of contact address.
95 - updated perl parts to GPLv2.
96
971.05 Fri Feb 25 22:50:27 CET 2005
98 - fix a (likely exploitable) segfault problem, (tracked down
99 and/or reported by Mark Martinec and Robert Lewis).
100
1011.04 Tue Dec 28 15:08:44 CET 2004
102 - slightly improved subject filename extraction.
103 Also see the filename callback in the example-decoder.
104
1051.03 Sun Apr 18 22:05:43 CEST 2004
106 - upgrade to uudeview-0.5.20, which supposedly fixes a few buffer
107 overflows. However, judging from the patch these vulnerabilities
108 were not present in the Convert-UUlib version (I might err, though,
109 documentation on the actual exploits is scarce).
110 As every uudeview update usually brings more instability than stability
111 I advise against using this version until it has proven itself
112 to be stable, or 1.02 is proven to contain the same buffer overflows.
113
1141.02 Sun Apr 18 16:47:26 CEST 2004
115 - renamed crc32 to uulib_crc32, to work around yet another
116 shortcoming in this oh-so-outdated macosx.
117
1181.01 Sun Feb 1 19:49:51 CET 2004
119 - make it compile with 5.005_03 (reported by Anton Berezin).
120 - very short files might not be detected because the header
121 parsing code might skip them.
122
1231.0 Thu Nov 6 14:32:08 CET 2003
124 - change bracket policy to give priority to (x/y) over (x),
125 and use the last bracket found otherwise.
126 - part numbers at the end of the subject are now recognized.
127 - updated to uulib-0.5.19. Differences and bugfixes kept.
128
1290.31 Wed Oct 16 01:22:34 CEST 2002
130 - no internal code changes.
131 - much better documentation, now considered "useful".
132 - removed the procedural interface.
133 - fought the wish to perl-5.8'ify and thus simplify the code :().
134 - stress-tested version 0.3 against 70000 data postings since sunday.
135
1360.3 Sun Oct 13 15:12:11 CEST 2002
137 - updated to uulib 0.5.18. As expected, some but not all of my bugfixes
138 have went into uulib, so the number of differences decreased a bit
139 again.
140 - I found out that the library is being sold commercially by Frank
141 Pilhofer, disregarding the GPL and ignoring the rights of the people
142 who sent in patches :(
143 - vastly more useful documentation in the .pm file.
144 - much smaller distribution filesize ;)
145
1460.213 Sat Jul 27 21:16:30 CEST 2002
147 - fixed another buffer overflow, also added a santity check to fgets.
148
1490.212 Sat Apr 6 03:52:13 CEST 2002
150 - fix yEnc decoding support.
151 - new option OPT_DOTDOT, that makes uulib unescape dot-escaping.
152 - increased linelength to 1195.
153
1540.211 Fri Apr 5 23:56:46 CEST 2002
155 - *sigh*. new version of uulib, new braindamaged buffer overflows
156 fixed. Diffs like "line length 256 => 300" should have
157 alerted me...
158
1590.21 Sun Mar 31 22:06:05 CEST 2002
160 - bumped uulib from 0.5.15 to 0.5.17 (adds some yEnc support, YENC_ENCODED).
161 - source-renamed FP_*-symbols to _FP_* again, but still define them
162 to be FP_* in the object file.
163 - new callback: SetFileNameCallback (actually documented ;)
164
1650.201 Sun Sep 16 03:43:38 CEST 2001
4 - fixed another segfault-bug in uulib, thanks to Lars Hecking who 166 - fixed another segfault-bug in uulib, thanks to Lars Hecking who
5 provides all the test files ;) 167 provides all the test files ;)
6 168
70.2 Thu Jun 14 18:42:49 CEST 2001 1690.2 Thu Jun 14 18:42:49 CEST 2001
8 - Frank Pilhofer is NOT dead! He is alive, kicking, and fixing 170 - Frank Pilhofer is NOT dead! He is alive, kicking, and fixing

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines