March 14, 2019
View 5e0e479

Incremented version numbers and functionality level for 0.101.2 patch release. Added release notes to NEWS.md

Micah Snyder (micasnyd) authored on 2019/03/14 03:19:08
March 7, 2019
View afb25cd

Correction to cli_vba_scandir to account for change from 0-indexed to 1-indexed hash counts, and to remove extraneous hashcnt--, an oversite from the commit fixing fuzz - 12166.

Micah Snyder authored on 2019/03/07 10:46:00
March 6, 2019
View e010ed3

Clean up of PDF object finding logic. Changes include recording object sizes as objects are found, identifying object streams in the object parsing section instead of the PDF parsing section, and limiting of stream and other object parsing to the size of the object instead of the size of the PDF. It is also easier to read and includes more inline documentation.

Micah Snyder authored on 2019/03/06 11:15:41
March 3, 2019
View 40e79bf

Autojunk'd

Micah Snyder authored on 2019/03/03 06:34:54
View 9180468

bb12284 - Fix to prevent path traversal when using cli_genfname() to generate filenames that may retain path and filename information. Changed scanrar so that it will no longer retain path information for extracted files.

Micah Snyder authored on 2019/03/03 03:05:17
February 18, 2019
View 5d319bc

Makefile changes for fuzz make targets to fix distcheck.

Micah Snyder authored on 2019/02/18 06:11:59
February 10, 2019
View 6bbe910

fuzz - 12124 - Added missing hash cleanup checks in Xx decoder.

Micah Snyder authored on 2019/02/10 15:22:03
February 3, 2019
View 5f4132b

fuzz - 12178 - Correction to LZW inflate algorithm where left-shift of a larger value would have have been too large for signed long.

Micah Snyder authored on 2019/02/03 08:59:10
View f1d82e2

fuzz - 12156 - Explicit cast to unsigned 32bit int because a signed int could not hold 0xffff << 16 bits.

Micah Snyder authored on 2019/02/03 04:29:53
January 31, 2019
View 75fa861

bb12262 - Fix to address potential use-after-free bug in scanner code relating to the filenames for nested files.

Micah Snyder authored on 2019/01/31 05:01:59
January 23, 2019
View c1e7159

fuzz - 12181 - Fixed 1-byte buffer over-read in PDF parser.

Micah Snyder authored on 2019/01/23 08:04:53
View 8ad8d01

fuzz - 12168 - Fix for 1 byte out of bounds read in PDF parser. Fix includes a check to ensure that it is safe to index -1 from the start of an object a well as additional checks to invalidate some negative integer values.

Micah Snyder authored on 2019/01/23 04:15:46
View 808cab3

fuzz - 12166 - Fix for 4-byte out of bounds write wherein the an invalid struct pointer member variable is set to zero. The fix adds bounds checking to the Uniq storage 'add' function as well as error code checks. Included a lot of new inline documentation.

Micah Snyder authored on 2019/01/23 04:05:05
View 8965a5a

fuzz - 12149 - Fix for out of bounds read in PDF object stream parsing code.

Micah Snyder authored on 2019/01/23 03:53:29
View 186c1d2

fuzz - 12142 - Fix for potential memory and file descriptor leak in HTML normalization code.

Micah Snyder authored on 2019/01/23 03:48:20