aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2020-10-22Avoid leak by resolving object streams more than once (fuzz issue 23642)Jay Berkenbilt
2020-10-22Minor code cleanupJay Berkenbilt
* Return rather than exiting from realmain in qpdf.cc * Remove extraneous blank line * Don't assign temporary to const reference
2020-10-22Handle jpeg library fuzz false positivesJay Berkenbilt
The jpeg library has some assembly code that is missed by the compiler instrumentation used by memory sanitization. There is a runtime environment variable that is used to work around this issue.
2020-10-22Check for overflow in page labels (fuzz issue 23599)Jay Berkenbilt
2020-10-22Add range_check method to QIntCJay Berkenbilt
2020-10-22Fix loop detection error (fuzz issue 23172)Jay Berkenbilt
2020-10-22Update fuzz informationJay Berkenbilt
2020-10-22Obscure bug fix copying foreign streams in special cases (fixes #449)Jay Berkenbilt
Specifically, if a stream had its stream data replaced and had indirect /Filter or /DecodeParms, it would result in non-silent loss of data and/or internal error.
2020-10-21Restore accidentally removed lgtm bannerJay Berkenbilt
2020-10-21TODO: reminder to check work-related issuesJay Berkenbilt
2020-10-21Turn off azure pipelines, completing migration to GitHub ActionsJay Berkenbilt
2020-10-21Protect numeric conversion against user's locale (fixes #459)Jay Berkenbilt
2020-10-21Remove some fuzz files with Mal/PDFEx-H (fixes #460)Jay Berkenbilt
There isn't really an issue with these files causing a real problem, but malware and virus checkers trip on them, and the value to leaving them in the test suite is too low to be worth the hassle.
2020-10-21Build on a schedule and use latest versions of runnersJay Berkenbilt
2020-10-21Add automated test for shell wildcard expansionJay Berkenbilt
Wildcard expansion is different in Windows from non-Windows and sometimes requires special link options to work. Add tests that fail if we link incorrectly.
2020-10-21Create a minimal Linux binary distribution (fixes #352)Jay Berkenbilt
This is suitable for use as a Lambda layer in AWS, inclusion in a docker container, or other places where a minimal binary distribution is desired.
2020-10-21Add option --warning-exit-0 to exit 0 instead of 3 with warningsJay Berkenbilt
2020-10-20Fix another case of errors written to stdout (fixes #438)Jay Berkenbilt
2020-10-20Ignore some paths for triggering build in CIJay Berkenbilt
2020-10-20TODO: Build issues including Windows external librariesJay Berkenbilt
2020-10-20Add --disable-rpath to configure (fixes #422)Jay Berkenbilt
2020-10-18Stop using InputSource::unreadChJay Berkenbilt
2020-10-17TODOJay Berkenbilt
2020-10-17TODO and ChangeLog updates from merged pull requestsJay Berkenbilt
2020-10-17Check integer overflow in resolveObjectsInStreamDean Scarff
Fixes a crash found by fuzzing.
2020-10-17Properly detect OPENSSL_IS_BORINGSSLDean Scarff
OPENSSL_IS_BORINGSSL is not actually set by configure, so it will be undefined until a BoringSSL header is included. Hence the #ifdef logic in QPDFCrypto_openssl.h would usually never apply. This still worked because evp.h transitively included BoringSSL's cipher.h and digest.h, but the latter are the correct (documented) headers. By re-ordering the includes, we can ensure the macro is defined when we use it. Also: fix case in the header guards.
2020-10-17Update OpenSSL autoconf checksDean Scarff
- Checks explicitly for versions >= 1.1.0 with pkg-config - Refactor the fallback checks. Previously they were copied from the gnutls logic, but could be slightly surprising (it's not obvious that they're for the case where pkg-config returns a false negative, and it's weird that the linker check overode the header check) - Fix the AC_SEARCH_LIBS check to try -lcrypto instead of -lopenssl (-lcrypto is the standard library OpenSSL ships the crypto symbols in). - Fix the AC_SEARCH_LIBS check to look for EVP_MD_CTX_new, which is not present in versions prior to 1.1.0. Fixes qpdf/qpdf#429 (although I haven't verified on cygwin)
2020-10-17Include detailed OpenSSL error messagesDean Scarff
Fixes qpdf/qpdf#450
2020-10-17Replace memchr with manual memory searchJames R. Barlow
On large files with predominantly \n line endings, memchr(..'\r'..) seems to waste a considerable amount of time searching for a line ending candidate that we don't need. On the Adobe PDF Reference Manual 1.7, this commit is 8x faster at QPDF::processMemoryFile().
2020-10-17fix WindowsCryptProvider fixes #432oltolm
2020-10-17Trigger QPDF Build on build/*Jay Berkenbilt
2020-10-16Minor notes on GitHub Actions migrationJay Berkenbilt
2020-10-16Add GitHub Actions workflowJay Berkenbilt
2020-10-16Fix to TestDriver.pm (qtest)Jay Berkenbilt
2020-10-16InputSource::unreadCh -- only unread most recently read characterJay Berkenbilt
This is all that ever worked. The test suite was trying to do something different from ClosedFileInputSource.
2020-10-16Split distfiles into a separate jobJay Berkenbilt
2020-10-16Make build-scripts portable for GitHub ActionsJay Berkenbilt
2020-10-16Make QTEST_COLOR=1 force qtest to print in colorJay Berkenbilt
2020-10-16Rename azure-pipelines to build-scriptsJay Berkenbilt
2020-10-16More reliable Windows wordsize detectionJay Berkenbilt
2020-10-16Fix printf formatting for newer msvcJay Berkenbilt
Use autoconf rather than ifdefs to determine what format string to use for long long.
2020-10-15Rename github workflow main.yml to cifuzz.ymlJay Berkenbilt
Preparing to migrate qpdf's main build/CI to GitHub actions
2020-10-15Azure pipelines: fix test-sanitizers jobJay Berkenbilt
2020-10-15TODO: remove previously completed itemJay Berkenbilt
2020-10-15Remove support for Travis CIJay Berkenbilt
It is redundant with qpdf's main CI environment, which is Azure Pipelines, but may soon be migrated to GitHub Actions.
2020-10-15Clarify qpdf's exit statuses in the documentationJay Berkenbilt
2020-10-15Fix doc typo (--encryption-file-password) (fixes #468)Jay Berkenbilt
2020-10-15Fix/clarify documentation on --rotate option (fixes #470)Jay Berkenbilt
Make clear that you almost always want + or - before an angle when specifying rotation.
2020-10-15Remove redundant check found by lgtm.comJay Berkenbilt
2020-10-15TODO: organize in preparation for next incrementJay Berkenbilt
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-06 01:53:13 +0200