CVE test files, update/split README

git-svn-id: svn://tug.org/texlive/trunk@17566 c570f23f-e606-0410-a88d-b1316a301751

8 files changed, 111 insertions, 113 deletions

diff --git a/Build/source/texk/dvipsk/Makefile.am b/Build/source/texk/dvipsk/Makefile.am
index 867a0431f22..9affa4a738c 100644
--- a/Build/source/texk/dvipsk/Makefile.am
+++ b/Build/source/texk/dvipsk/Makefile.am
@@ -117,6 +117,8 @@ TESTS_ENVIRONMENT += TEXFONTS=$(srcdir)/testdata
 TESTS_ENVIRONMENT += TEXPSHEADERS=$(srcdir)/testdata
 
 EXTRA_DIST += \
+	NEWS \
+	TODO \
 	beginfontk1.test \
 	dvips.test \
 	pfbincl.test \
@@ -140,6 +142,7 @@ EXTRA_DIST += \
 	testdata/dvipstst.tex \
 	testdata/dvipstst.xdv \
 	testdata/dvipstst.xps \
+	testdata/intoverflow.dvi \
 	testdata/pfbincl.eps \
 	testdata/pfbincl.tex \
 	testdata/pfbincl.xdv \
@@ -154,7 +157,8 @@ EXTRA_DIST += \
 	testdata/quotecmd.tex \
 	testdata/special.pro \
 	testdata/texc.pro \
-	testdata/texps.pro
+	testdata/texps.pro \
+	testdata/vfnameoverflow.dvi
 
 CLEANFILES += dvipstst.ps missfont.log mtest.ps pfbincl.ps
 
diff --git a/Build/source/texk/dvipsk/Makefile.in b/Build/source/texk/dvipsk/Makefile.in
index 19077747ae8..80a97855af5 100644
--- a/Build/source/texk/dvipsk/Makefile.in
+++ b/Build/source/texk/dvipsk/Makefile.in
@@ -50,7 +50,7 @@ DIST_COMMON = README $(am__configure_deps) $(dist_man1_MANS) \
 	../../build-aux/config.sub ../../build-aux/depcomp \
 	../../build-aux/install-sh ../../build-aux/ltmain.sh \
 	../../build-aux/missing ../../build-aux/texinfo.tex \
-	../../build-aux/ylwrap AUTHORS ChangeLog
+	../../build-aux/ylwrap AUTHORS ChangeLog NEWS TODO
 ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
 am__aclocal_m4_deps = $(top_srcdir)/../../m4/kpse-common.m4 \
 	$(top_srcdir)/../../m4/kpse-kpathsea-flags.m4 \
@@ -381,26 +381,28 @@ dist_prologues = \
 prologdir = ${prefix}/texmf/dvips/base
 prologues = $(dist_prologues:.lpro=.pro) texc.pro
 SUFFIXES = .pro .lpro
-EXTRA_DIST = $(dist_prologues) texc.script beginfontk1.test dvips.test \
-	pfbincl.test quotecmd-test.pl testdata/8r.enc testdata/ad.enc \
-	testdata/beginfontk1.dvi testdata/beginfontk1.eps \
-	testdata/beginfontk1.tex testdata/cmex10.pfb \
-	testdata/cmex10.tfm testdata/cmmi10.pfb testdata/cmmi10.tfm \
-	testdata/cmr10.pfb testdata/cmr10.tfm testdata/cmsy10.pfb \
-	testdata/cmsy10.tfm testdata/cmtt10.pfb testdata/cmtt10.tfm \
-	testdata/config.ps testdata/dvipstst.tex testdata/dvipstst.xdv \
-	testdata/dvipstst.xps testdata/pfbincl.eps \
+EXTRA_DIST = $(dist_prologues) texc.script NEWS TODO beginfontk1.test \
+	dvips.test pfbincl.test quotecmd-test.pl testdata/8r.enc \
+	testdata/ad.enc testdata/beginfontk1.dvi \
+	testdata/beginfontk1.eps testdata/beginfontk1.tex \
+	testdata/cmex10.pfb testdata/cmex10.tfm testdata/cmmi10.pfb \
+	testdata/cmmi10.tfm testdata/cmr10.pfb testdata/cmr10.tfm \
+	testdata/cmsy10.pfb testdata/cmsy10.tfm testdata/cmtt10.pfb \
+	testdata/cmtt10.tfm testdata/config.ps testdata/dvipstst.tex \
+	testdata/dvipstst.xdv testdata/dvipstst.xps \
+	testdata/intoverflow.dvi testdata/pfbincl.eps \
 	testdata/pfbincl.tex testdata/pfbincl.xdv testdata/pfbincl.xps \
 	testdata/psfonts.map testdata/ptmbi.vf testdata/ptmbi8r.tfm \
 	testdata/ptmr.vf testdata/ptmr8r.tfm testdata/ptmri.vf \
 	testdata/ptmri8r.tfm testdata/quotecmd.tex \
 	testdata/special.pro testdata/texc.pro testdata/texps.pro \
-	atari cmfonts.map config.ps contrib/PSTricks contrib/afm-extra \
-	contrib/colorsep.lpro contrib/configs contrib/crop.lpr \
-	contrib/latex209 contrib/treen.sh contrib/treen2.sh \
-	contrib/volker contrib/whichinpath cyrfonts.map eufonts.map \
-	flib.c hps/CHANGES_HPS.txt hps/README_HPS.txt lafonts.map \
-	makefont.c mvs psfonts.map tex vmcms vms
+	testdata/vfnameoverflow.dvi atari cmfonts.map config.ps \
+	contrib/PSTricks contrib/afm-extra contrib/colorsep.lpro \
+	contrib/configs contrib/crop.lpr contrib/latex209 \
+	contrib/treen.sh contrib/treen2.sh contrib/volker \
+	contrib/whichinpath cyrfonts.map eufonts.map flib.c \
+	hps/CHANGES_HPS.txt hps/README_HPS.txt lafonts.map makefont.c \
+	mvs psfonts.map tex vmcms vms
 CLEANFILES = $(prologues) texc.lpro dvipstst.ps missfont.log mtest.ps \
 	pfbincl.ps
 TESTS = beginfontk1.test dvips.test pfbincl.test quotecmd-test.pl
diff --git a/Build/source/texk/dvipsk/NEWS b/Build/source/texk/dvipsk/NEWS
new file mode 100644
index 00000000000..95d2046d01a
--- /dev/null
+++ b/Build/source/texk/dvipsk/NEWS
@@ -0,0 +1,46 @@
+This file records noteworthy changes.  (Public domain.)
+
+   Require Kpathsea to build.
+   Additional robustness checks.
+
+dvips 5.86 notes:
+   Minor improvements to epsf style file.
+   Another patch to t1part.c to make it more liberal in accepting pfb/pfa
+      font files.
+   Added PS reencoding reimplementation by Rob Hutchings.
+   Added 'F' in config file to send controlD.
+   Added quick exit if -? or -v.
+   Improved tex.lpro to fix a bug that showed up in distiller.
+   Improved tex.lpro to work around a problem in certain Windows
+      environments.
+   Made dvips complain if it had to section a document.
+   Eliminated use-after-free bug in hps.c.
+   Fixed a problem in t1part for the Euro fonts with partial font downloading.
+   Fixed a big problem in t1part for some font downloading due to
+      uninitialized allocations.
+   Added `unknown' paper size back to config.ps.
+   Made t1part munge the UniqueID to prevent cache problems in Acrobat and
+      other programs.
+   Fixed parsing error when whitespace following '<' in psfonts.map.
+   Made '<<' work correctly (disable partial font downloading for that
+      particular font) in psfonts.map.
+
+dvips 5.74 notes:
+
+   The epsf.sty and epsf.tex files are now in the public domain.
+   The t1part.c has been updated to support binary files with
+       multiple binary sections.
+
+dvips 5.72 notes:
+
+   Bug fix in t1part.c???  I hope so!
+
+   Debugging now turned on by default.  No real reason to turn it off.
+   (Too many Linux versions of dvips without debugging have been
+   distributed, and it makes it very difficult to help the users with
+   their problems . . .)
+
+dvips 5.62 notes:
+
+   The makefile and config.ps and MakeTeXPK need to be modified to fit
+   your site!
diff --git a/Build/source/texk/dvipsk/README b/Build/source/texk/dvipsk/README
index 9e3d6860519..b97242c6550 100644
--- a/Build/source/texk/dvipsk/README
+++ b/Build/source/texk/dvipsk/README
@@ -1,118 +1,38 @@
-This directory contains Dvipsk, a modified version of
-Tom Rokicki's dvips, a DVI-to-PostScript translator.  This has become
-the only maintained Dvips, and functions as the original.
+$Id$
+This directory contains Dvips, Tom Rokicki's dvips, a DVI-to-PostScript
+translator.  It requires the Kpathsea library for path searching.
 
-See `ChangeLog` for all changes.
+See `NEWS' for changes by release, `ChangeLog` for all changes.
 See `../kpathsea/BUGS' for details on reporting bugs.
 
-Dvipsk does not install by itself any default config.ps file, since no
-one file is generally suitable. Sample Dvips config files are in the
-contrib/ directory.
-
-Dvipsk is free software; Tom's original files are public domain.  The
+Dvips is free software; Tom's original files are public domain.  The
 files Karl wrote (originally for the Free Software Foundation) are
 covered by the GNU General Public License -- see the files COPYING*.
 -------------------------------------------------------------------------
-dvips 5.86 notes:
-
-   Minor improvements to epsf style file.
-   Another patch to t1part.c to make it more liberal in accepting pfb/pfa
-      font files.
-   Added PS reencoding reimplementation by Rob Hutchings.
-   Added 'F' in config file to send controlD.
-   Added quick exit if -? or -v.
-   Improved tex.lpro to fix a bug that showed up in distiller.
-   Improved tex.lpro to work around a problem in certain Windows
-      environments.
-   Made dvips complain if it had to section a document.
-   Eliminated use-after-free bug in hps.c.
-   Fixed a problem in t1part for the Euro fonts with partial font downloading.
-   Fixed a big problem in t1part for some font downloading due to
-      uninitialized allocations.
-   Added `unknown' paper size back to config.ps.
-   Made t1part munge the UniqueID to prevent cache problems in Acrobat and
-      other programs.
-   Fixed parsing error when whitespace following '<' in psfonts.map.
-   Made '<<' work correctly (disable partial font downloading for that
-      particular font) in psfonts.map.
-
-dvips 5.74 notes:
-
-   The epsf.sty and epsf.tex files are now in the public domain.
-   The t1part.c has been updated to support binary files with
-   multiple binary sections.
-
-dvips 5.72 notes:
-
-   Bug fix in t1part.c???  I hope so!
-
-   Debugging now turned on by default.  No real reason to turn it off.
-   (Too many Linux versions of dvips without debugging have been
-   distributed, and it makes it very difficult to help the users with
-   their problems . . .)
-
-dvips 5.62 notes:
+The documentation is in the file dvips.texi.
 
-   The makefile and config.ps and MakeTeXPK need to be modified to fit
-   your site!
-
-   dvips.tex needs updating.
-
-To document:
-   Landscape mfmode
-   HPS integration
-   Separate EPSF file generation
-   Better bbox support
-   Partial type 1 support
-   Comment elision now turned *off*
-   Upleveling of font requirements
-   Bitmap font descriptions
-
-Questions:
-   Should I eliminate PStfms/PSvfs/afm-extra?
-   Should I eliminate PSlatex?  (my guess is yes)
-   Partial type 1 downloading (Sergey Lesenko)
-   HyperTeX support (Mark Doyle)
-   Lots of little bugs/changes/fixes
-
-Still todo:
-
-- Make a better copyfile that handles Level 2 data better
-- Add landscape mode def and code to select it.
-- Sanitize; test on various systems
-- Improve makefile!!!  Goal:  on a standard C installation (with stdlib
-  and all) and a Unix machine using TDS, make it be just a `make' away.
-- Improve diagnostics, especially when files not found.
-- Eliminate `extern' declarations; use header files properly
-
-Despite the fact that I reference Mark and Sergey, bugs are mine, mine,
-all mine, so please bug me and not them.
-----------------------------------------------------------------------------
-All real documentation is now in the file dvips.tex.  There is also a file
-called test.tex that you can read and run to test some basic capabilities of
-dvips.  INSTALLATION has the primary installation instructions.
+You can read and run the file testdata/dvipstst.tex that to test some
+basic capabilities of dvips.  Some of the other files in testdata:
+intoverflow.dvi (CVE-2010-0739)
+vfnameoverflow.dvi (CVE-2010-0827)
+See also the *.test* scripts.
 
 If you enjoy using dvips, you will probably enjoy being a member of 
-the TeX Users Group.  To join or contribute to TUG, contact them at
-
-   TeX Users Group
-   1850 Union Street  #1637
-   San Francisco, CA  94123
-   Voice:  (415) 982-8449
-   FAX:  (415) 982-8559
-   Email:  TUG@tug.org
-   Web:  http://www.tug.org/
+the TeX Users Group.  To join or contribute to TUG, see http://tug.org.
 
 This is a list of people who have contributed substantially to dvips.
 I'm sure I've forgotten many.  Thanks to all!
 
 Karl Berry
+Peter Breitenlohner
 P. W. Daly
 Mark Doyle
 Edward J. Groth
 James Hafner
 John Hobby
 Rob Hutchings
+David Jones
+Akira Kakuto
 Donald E. Knuth
 Russell Lang
 Sergey Lesenko
diff --git a/Build/source/texk/dvipsk/TODO b/Build/source/texk/dvipsk/TODO
new file mode 100644
index 00000000000..0e82c6e853d
--- /dev/null
+++ b/Build/source/texk/dvipsk/TODO
@@ -0,0 +1,26 @@
+TODO notes from Tom.  (Public domain.)
+
+To document:
+   Landscape mfmode
+   HPS integration
+   Separate EPSF file generation
+   Better bbox support
+   Comment elision now turned *off*
+   Upleveling of font requirements
+   Bitmap font descriptions
+
+Questions:
+   Should I eliminate PStfms/PSvfs/afm-extra?
+   Should I eliminate PSlatex?  (my guess is yes)
+   Partial type 1 downloading (Sergey Lesenko)
+   HyperTeX support (Mark Doyle)
+   Lots of little bugs/changes/fixes
+
+Still todo:
+- Make a better copyfile that handles Level 2 data better
+- Add landscape mode def and code to select it.
+- Sanitize; test on various systems
+- Improve makefile!!!  Goal:  on a standard C installation (with stdlib
+  and all) and a Unix machine using TDS, make it be just a `make' away.
+- Improve diagnostics, especially when files not found.
+- Eliminate `extern' declarations; use header files properly
diff --git a/Build/source/texk/dvipsk/quotecmd-test.pl b/Build/source/texk/dvipsk/quotecmd-test.pl
index 2d1f90da004..28dc62a37dc 100755
--- a/Build/source/texk/dvipsk/quotecmd-test.pl
+++ b/Build/source/texk/dvipsk/quotecmd-test.pl
@@ -1,5 +1,5 @@
 #!/usr/bin/env perl
-# $Id: bibtex-openout-test.pl 16507 2009-12-25 01:19:05Z karl $
+# $Id$
 # Public domain.  Originally written 2010, Karl Berry.
 # Check that dvips quotes external command arguments.
 
diff --git a/Build/source/texk/dvipsk/testdata/intoverflow.dvi b/Build/source/texk/dvipsk/testdata/intoverflow.dvi
new file mode 100644
index 00000000000..9f53105b652
--- /dev/null
+++ b/Build/source/texk/dvipsk/testdata/intoverflow.dvi
diff --git a/Build/source/texk/dvipsk/testdata/vfnameoverflow.dvi b/Build/source/texk/dvipsk/testdata/vfnameoverflow.dvi
new file mode 100644
index 00000000000..4ec60a4738b
--- /dev/null
+++ b/Build/source/texk/dvipsk/testdata/vfnameoverflow.dvi