| 1 |
Revision history for Perl extension Convert::UUlib. |
| 2 |
|
| 3 |
1.71 Tue Mar 17 00:54:06 CET 2020 |
| 4 |
- backport to c89 (patch by Paul Howarth). |
| 5 |
|
| 6 |
1.7 Sat Feb 29 22:07:54 CET 2020 |
| 7 |
- new function: GetFileList. |
| 8 |
- experimental perlmulticore support (see manpage). |
| 9 |
- Initialize is now a NOP and CleanUp automatically initializes again. |
| 10 |
- updated example decoder and documentation a bit. |
| 11 |
- include ecb.h to deal with compiler builtins and endianness. |
| 12 |
- some further µ-optimisations in hot code, especially for yEnc. |
| 13 |
- replace crc32 function by slice-by-16 version by Stephan Brumme, |
| 14 |
which should speed up yEnc en-/decoding. |
| 15 |
- yEnc: do not calculate two crcs per part, instead, combine |
| 16 |
the part crcs together to form the file crc. |
| 17 |
- yEnc: allow pcrc= in addition to pcrc32= for yenc trailers, as |
| 18 |
some draft mentions both and it is actually in active use. |
| 19 |
- yEnc: ignore crc32= on multiparts, except on the last part, |
| 20 |
which avoids spurious corruption warnings. |
| 21 |
- be more precise in documenting code licenses in COPYING. |
| 22 |
- convert constant creation to the method I normally use. |
| 23 |
- use common::sense. |
| 24 |
|
| 25 |
1.62 Mon Feb 17 23:19:42 CET 2020 |
| 26 |
- major performance improvement by simplifying code in _FP_gets |
| 27 |
to not use fscanf. This might slow things down on platforms |
| 28 |
with very slow fgetc. |
| 29 |
|
| 30 |
1.61 Sun Feb 9 18:38:29 CET 2020 |
| 31 |
- lint uulib: fix some format string type mismatches |
| 32 |
and some other minor issues. |
| 33 |
|
| 34 |
1.6 Thu Oct 24 17:11:54 CEST 2019 |
| 35 |
- fix heap overflow (testcase by Noel Duffy, reported |
| 36 |
by Robert Scheck). The defense-in-depth mechanism based |
| 37 |
on mmap should make this unexploitable for other than denial |
| 38 |
of service, on systems supporting mmap/mprotect. |
| 39 |
|
| 40 |
1.5 Sat Jul 11 03:56:06 CEST 2015 |
| 41 |
- fix a heap overflow (testcase by Krzysztof Wojtaś). |
| 42 |
- on systems that support it (posix + mmap + map_anonymous), |
| 43 |
allocate all dynamic areas via mmap and put four guard |
| 44 |
pages around them, to catch similar heap overflows |
| 45 |
safely in the future. |
| 46 |
- find a safer way to pass in CC/CFLAGS to uulib. |
| 47 |
- added stability canary support. |
| 48 |
|
| 49 |
1.4 Sun May 29 17:17:01 CEST 2011 |
| 50 |
- avoid a classical buffer overflow in case a progress |
| 51 |
message is too long. |
| 52 |
- this release adds dependencies for snprintf/vsnprintf. |
| 53 |
- some uuencode encoders do not generate a final "space" line |
| 54 |
before the "end" marker, so do not rely on the line to be there. |
| 55 |
|
| 56 |
1.34 Tue Dec 14 22:20:00 CET 2010 |
| 57 |
- fix a one-byte-past-end-write buffer overflow in UURepairData |
| 58 |
(reported, analysed and testcase provided by Marco Walther). |
| 59 |
- quoted-printable decoding was completely broken, try a fix. |
| 60 |
|
| 61 |
1.33 Wed Oct 28 09:04:38 CET 2009 |
| 62 |
- handle yEnc files with part end=0 and total= more gracefully. |
| 63 |
I wish yEnc had been created by somebody who knows; |
| 64 |
what he does; |
| 65 |
but I doubt he even knows; |
| 66 |
what he did. |
| 67 |
|
| 68 |
1.32 Wed Sep 16 20:07:13 CEST 2009 |
| 69 |
- Due to a glitch with CVS, configure lacked executable bits. |
| 70 |
(Quickly reported by Anton Berezin). |
| 71 |
|
| 72 |
1.31 Wed Sep 16 09:04:30 CEST 2009 |
| 73 |
- do not use system-replacements for case-insensitive string |
| 74 |
functions when found, as they are broken on too many systems |
| 75 |
(mostly bsds, as usual, but at least some versions of GNU/Linux |
| 76 |
disagree with themselves apparently). Analyzed by Anton Berezin. |
| 77 |
|
| 78 |
1.3 Sat Aug 29 01:24:35 CEST 2009 |
| 79 |
- major changes, new bugs and changes in decoding behaviour are |
| 80 |
expected (but not intended). |
| 81 |
- major scanning and decoding speed-up (by a factor of 4), |
| 82 |
by replacing ultra-slow _FP_gets and improving IsKnownHeader |
| 83 |
(but fgets is *still* responsible for >50% if the time). |
| 84 |
- new option OPT_AUTOCHECK to disable O(n) UUCheckGlobalList |
| 85 |
call after every loadfile, majorly speeds up large decodes |
| 86 |
(easily by a factor of 10..100). |
| 87 |
- allow "Smerge -1" to call UUCheckGlobalList. |
| 88 |
- majorly speed up part insertion (still O(n), but much faster). |
| 89 |
- allow for 1023 octet headers instead of the standard |
| 90 |
255 octet ones. |
| 91 |
- support strcasestr, strcasecmp, strncasecmp for added speed. |
| 92 |
|
| 93 |
1.12 Mon Oct 13 14:11:01 CEST 2008 |
| 94 |
- use the yencode filesize as additional matching criterium |
| 95 |
to avoid false matches. |
| 96 |
- made the example decoder more verbose w.r.t. error handling. |
| 97 |
- removed potentially confusing decode_temp calls from |
| 98 |
example decoder. |
| 99 |
|
| 100 |
1.11 Fri Jun 13 15:32:30 CEST 2008 |
| 101 |
- don't ask. |
| 102 |
|
| 103 |
1.10 Fri Jun 13 14:22:42 CEST 2008 |
| 104 |
- fix an infinite-looping problem when scanning in freestyle |
| 105 |
mode (testcase provided by Pieter Geens and Reinhard Pfau). |
| 106 |
|
| 107 |
1.09 Fri May 25 19:38:11 CEST 2007 |
| 108 |
- create something sensible, trust a windows program to fuck |
| 109 |
it up: work around literal "(null)" filenames in yenc-encoded |
| 110 |
files. |
| 111 |
- some minor cleanups. |
| 112 |
|
| 113 |
1.08 Sat Dec 16 23:27:13 CET 2006 |
| 114 |
- URGENT update, the last release did not |
| 115 |
decode files correctly, usually not at all. |
| 116 |
- my last patch was, of course, completely bogus. |
| 117 |
(sorry. looked simple...). |
| 118 |
|
| 119 |
1.07 Sun Dec 10 17:41:46 CET 2006 |
| 120 |
- fixed an uninitialised variable based on analysis |
| 121 |
and patch by Mark Martinec. |
| 122 |
|
| 123 |
1.06 Tue Dec 6 00:56:05 CET 2005 |
| 124 |
- fix a number of int/long format errors in the encoding part and |
| 125 |
fix some signed/unsigned char problems of unknown relevance, |
| 126 |
reported by Jonas Smedegaard. |
| 127 |
- new EXPERIMENTAL options OPT_RBUF and OPT_WBUF to set default |
| 128 |
stdio buffer size for reading and writing files. |
| 129 |
|
| 130 |
1.051 Thu Mar 3 18:00:52 CET 2005 |
| 131 |
- change of contact address. |
| 132 |
- updated perl parts to GPLv2. |
| 133 |
|
| 134 |
1.05 Fri Feb 25 22:50:27 CET 2005 |
| 135 |
- fix a (likely exploitable) segfault problem, (tracked down |
| 136 |
and/or reported by Mark Martinec and Robert Lewis). |
| 137 |
|
| 138 |
1.04 Tue Dec 28 15:08:44 CET 2004 |
| 139 |
- slightly improved subject filename extraction. |
| 140 |
Also see the filename callback in the example-decoder. |
| 141 |
|
| 142 |
1.03 Sun Apr 18 22:05:43 CEST 2004 |
| 143 |
- upgrade to uudeview-0.5.20, which supposedly fixes a few buffer |
| 144 |
overflows. However, judging from the patch these vulnerabilities |
| 145 |
were not present in the Convert-UUlib version (I might err, though, |
| 146 |
documentation on the actual exploits is scarce). |
| 147 |
As every uudeview update usually brings more instability than stability |
| 148 |
I advise against using this version until it has proven itself |
| 149 |
to be stable, or 1.02 is proven to contain the same buffer overflows. |
| 150 |
|
| 151 |
1.02 Sun Apr 18 16:47:26 CEST 2004 |
| 152 |
- renamed crc32 to uulib_crc32, to work around yet another |
| 153 |
shortcoming in this oh-so-outdated macosx. |
| 154 |
|
| 155 |
1.01 Sun Feb 1 19:49:51 CET 2004 |
| 156 |
- make it compile with 5.005_03 (reported by Anton Berezin). |
| 157 |
- very short files might not be detected because the header |
| 158 |
parsing code might skip them. |
| 159 |
|
| 160 |
1.0 Thu Nov 6 14:32:08 CET 2003 |
| 161 |
- change bracket policy to give priority to (x/y) over (x), |
| 162 |
and use the last bracket found otherwise. |
| 163 |
- part numbers at the end of the subject are now recognized. |
| 164 |
- updated to uulib-0.5.19. Differences and bugfixes kept. |
| 165 |
|
| 166 |
0.31 Wed Oct 16 01:22:34 CEST 2002 |
| 167 |
- no internal code changes. |
| 168 |
- much better documentation, now considered "useful". |
| 169 |
- removed the procedural interface. |
| 170 |
- fought the wish to perl-5.8'ify and thus simplify the code :(). |
| 171 |
- stress-tested version 0.3 against 70000 data postings since sunday. |
| 172 |
|
| 173 |
0.3 Sun Oct 13 15:12:11 CEST 2002 |
| 174 |
- updated to uulib 0.5.18. As expected, some but not all of my bugfixes |
| 175 |
have went into uulib, so the number of differences decreased a bit |
| 176 |
again. |
| 177 |
- I found out that the library is being sold commercially by Frank |
| 178 |
Pilhofer, disregarding the GPL and ignoring the rights of the people |
| 179 |
who sent in patches :( |
| 180 |
- vastly more useful documentation in the .pm file. |
| 181 |
- much smaller distribution filesize ;) |
| 182 |
|
| 183 |
0.213 Sat Jul 27 21:16:30 CEST 2002 |
| 184 |
- fixed another buffer overflow, also added a santity check to fgets. |
| 185 |
|
| 186 |
0.212 Sat Apr 6 03:52:13 CEST 2002 |
| 187 |
- fix yEnc decoding support. |
| 188 |
- new option OPT_DOTDOT, that makes uulib unescape dot-escaping. |
| 189 |
- increased linelength to 1195. |
| 190 |
|
| 191 |
0.211 Fri Apr 5 23:56:46 CEST 2002 |
| 192 |
- *sigh*. new version of uulib, new braindamaged buffer overflows |
| 193 |
fixed. Diffs like "line length 256 => 300" should have |
| 194 |
alerted me... |
| 195 |
|
| 196 |
0.21 Sun Mar 31 22:06:05 CEST 2002 |
| 197 |
- bumped uulib from 0.5.15 to 0.5.17 (adds some yEnc support, YENC_ENCODED). |
| 198 |
- source-renamed FP_*-symbols to _FP_* again, but still define them |
| 199 |
to be FP_* in the object file. |
| 200 |
- new callback: SetFileNameCallback (actually documented ;) |
| 201 |
|
| 202 |
0.201 Sun Sep 16 03:43:38 CEST 2001 |
| 203 |
- fixed another segfault-bug in uulib, thanks to Lars Hecking who |
| 204 |
provides all the test files ;) |
| 205 |
|
| 206 |
0.2 Thu Jun 14 18:42:49 CEST 2001 |
| 207 |
- Frank Pilhofer is NOT dead! He is alive, kicking, and fixing |
| 208 |
bugs in uulib now! Since his uulib and mine diverged quite |
| 209 |
a bit I am still in the process of merging his bugfixes |
| 210 |
into my version. So be aware that this might introduce new |
| 211 |
instabilities... |
| 212 |
- merged uulib-0.5.15 |
| 213 |
- optimize decode_file to not copy the file contents when a rename |
| 214 |
succeeds (TMPDIR same disk as destination). |
| 215 |
- updated documentation. |
| 216 |
|
| 217 |
0.111 Fri May 4 22:29:09 CEST 2001 |
| 218 |
- heuristic to decode microsoft-rfc822-headers (microsoft uses |
| 219 |
'\' as path seperator which is also the rfc822 quote character. |
| 220 |
of course they could have quoted it, but it's microsoft, so |
| 221 |
only the devil knows how they try to parse mime (they obviously |
| 222 |
haven't read the standard AGAIN). in case you wonder, this fixes |
| 223 |
the "c:my_documentssend.doc" "filename" problem. |
| 224 |
|
| 225 |
0.11 Sun Jul 16 22:42:57 CEST 2000 |
| 226 |
- fixed a bug in the file callback. |
| 227 |
|
| 228 |
0.10 Tue May 2 03:31:09 CEST 2000 |
| 229 |
- fixed one very longstanding bug that might have been the cause |
| 230 |
for the many mysterious segmentation faults. Hopefully. |
| 231 |
- improved documentation to the point that it slowly becomes useful |
| 232 |
as a (very quick) reference. |
| 233 |
|
| 234 |
0.07 Wed Nov 24 18:45:23 CET 1999 |
| 235 |
- removed END { CleanUp } from UUlib.pm, perl is too |
| 236 |
buggy to rely on this in the face of popen etc.. |
| 237 |
|
| 238 |
0.06 Thu Jul 29 22:48:18 CEST 1999 |
| 239 |
- Thierry Bezecourt had the very reasonable idea to include |
| 240 |
the example source in the manpage. |
| 241 |
|
| 242 |
0.05 Mon May 24 11:37:25 CEST 1999 |
| 243 |
- LoadFile returns number of parts loaded. |
| 244 |
|
| 245 |
0.04 Mon May 10 22:02:31 CEST 1999 |
| 246 |
- fixed a couple of portability problems. |
| 247 |
- UUEncodeToStream had a wrong definition. |
| 248 |
- added primitive testsuite. |
| 249 |
- added README. |
| 250 |
|
| 251 |
0.03 Sat May 8 22:40:01 CEST 1999 |
| 252 |
- renamed it to Convert::UUlib. |
| 253 |
|
| 254 |
0.02 Fri May 7 01:26:19 CEST 1999 |
| 255 |
- function names exportable (use :all-tag). |
| 256 |
- made uulist-related functions methods. |
| 257 |
- the first fix from cpan-tester. *sigh* you people save the |
| 258 |
world, continuously. |
| 259 |
|
| 260 |
0.01 Thu May 6 14:30:44 1999 |
| 261 |
- original version; created by h2xs 1.19 |
| 262 |
|
