diff options
Diffstat (limited to 'Build/source/texk/dviljk/ChangeLog')
| -rw-r--r-- | Build/source/texk/dviljk/ChangeLog | 47 |
1 files changed, 43 insertions, 4 deletions
diff --git a/Build/source/texk/dviljk/ChangeLog b/Build/source/texk/dviljk/ChangeLog index 58a35c725df..51419944bb4 100644 --- a/Build/source/texk/dviljk/ChangeLog +++ b/Build/source/texk/dviljk/ChangeLog @@ -1,3 +1,42 @@ +2007-07-02 Joachim Schrod <jschrod@acm.org> + + * dvi2xx.c (DoSpecial): Security issue: usage of tmpnam() caused + tempfile race condition. I use mkdtemp() if it's available and + fall back to tmpnam. + + Special parsing of include files was inconsistent, unify it. The + current parsing code still allows lots of non-sensical special + commands, but at least it doesn't access unrelated variables any + more. + +2007-06-28 Joachim Schrod <jschrod@acm.org> + + * dvi2xx.c: Fixed a whole bunch of buffer overflows: The program + did not check memory bounds for any string operation. All places + where strings are copied with strcpy are replaced by dynamically + allocated strings (with xstrdup from kpathsea) or bounded string + operations. Fixed also manual string copy operations on special + strings. Fixed array buffer overflow in defpoint and fill special + operations. + (DoSpecial): Call of ghostscript for psfile special had also a + potential buffer overflow caused by unchecked usage of sprintf. + Fix core dump: Check if all required parameters of psfile special + are passed. + + Bumped version number up to 2.6p3. + + * dvi2xx.h: Some fixed sized string arrays are pointers now, they + get dynamically allocated. + (GetBytes): Another buffer overflow: Check that the buffer size is + sufficient to store the read bytes. That relies on the invariant + that the GetBytes macro is always called with an array as argument + and not with a pointer. + + * config.h: Throw an error if kpathsea is not used. dvi2xx.c + had previously already kpathsea dependencies without protecting + them with #if KPATHSEA. We go that road further since upstream + does not exist any more. + 2006-05-29 Karl Berry <karl@tug.org> * Makefile.in (install-exec): cd $(bindir) in case we are doing @@ -17,7 +56,7 @@ Tue Jan 27 14:32:25 1998 Sebastian Rahtz <s.rahtz@elsevier.co.uk> Olaf Weber Sat Jan 17 15:09:59 1998 Sebastian Rahtz <s.rahtz@elsevier.co.uk> - * assorted patches from Peter Breitenlohner, Olaf Weber, + * assorted patches from Peter Breitenlohner, Olaf Weber, Eli Zaretskii, Fabrice Popineau etc. Hope it all still works. @@ -54,7 +93,7 @@ Sun Jan 5 16:12:06 1997 Karl Berry <karl@cs.umb.edu> Mon Dec 9 00:53:30 1996 Ulrik Vieth <vieth@thphy.uni-duesseldorf.de> * dvihp: Use `basename $0` in usage and version messages for - consistency with other programs and scripts. + consistency with other programs and scripts. Also accept -help, -version in addition to --help, --version. Sat Dec 7 17:15:54 1996 Karl Berry <karl@cs.umb.edu> @@ -218,7 +257,7 @@ Sat Dec 31 17:30:58 1994 Karl Berry <karl@cs.umb.edu> Fri Dec 30 15:25:54 1994 Karl Berry <karl@cs.umb.edu> * Makefile.in (install-exec): Don't depend on default, so dvilj4 - doesn't get made if the user didn't want it. + doesn't get made if the user didn't want it. (install-data): mkdirchain on texinputdir and fontdir. From Joachim. @@ -325,7 +364,7 @@ Fri Jul 29 13:26:49 1994 Karl Berry (karl@cs.umb.edu) * config.h (RESOLUTION, MFMODE) [LJ4L]: Set to 300/cx for this new symbol. - * dvi2xx.c (DecodeArgs): Always scale pgsiz_dots. + * dvi2xx.c (DecodeArgs): Always scale pgsiz_dots. (main) [LJ4]: Don't hardwire 600dpi. These fixes from ajp@eng.cam.ac.uk. |