summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2013-12-16Remove needless #ifdef _WIN32 from getWhoamiJay Berkenbilt
2013-12-16Increase random data provider supportJay Berkenbilt
Add a method to get the current random data provider, and document and test the method for resetting it.
2013-12-15TODO note on pluggable filtersJay Berkenbilt
2013-12-14Comments about incremental update supportJay Berkenbilt
Also remove some trivial, non-functional code.
2013-12-14Retarget 5.1.0 changes to 5.2.0Jay Berkenbilt
2013-12-14Allow OS-provided secure random to be disabledJay Berkenbilt
2013-12-14Refactor random data generationJay Berkenbilt
Add new RandomDataProvider object and implement existing random number generation in terms of that. This enables end users to supply their own random data providers.
2013-12-14Allow arbitrary whitespace, not just newline, after xrefJay Berkenbilt
Fixes #27.
2013-12-14Update lastOffset when readingJay Berkenbilt
2013-11-30Allow -DNO_GET_ENVIRONMENT to avoid GetEnvironmentVariableJay Berkenbilt
If NO_GET_ENVIRONMENT is #defined at compile time on Windows, do not call GetEnvironmentVariable. QUtil::get_env will always return false. This option is not available through configure. This was added to support a specific user's requirements to avoid calling GetEnvironmentVariable from the Windows API. Nothing in qpdf outside the test coverage system in qtest relies on QUtil::get_env.
2013-11-30Add /FS flag (msvc) for parallel buildsJay Berkenbilt
2013-11-30Add more detail to previous ChangeLog entryJay Berkenbilt
2013-11-29Include <algorithm> for std::min, std::maxJay Berkenbilt
2013-11-21Use 8 bit per sample images in testsJay Berkenbilt
In compare image tests, use the gs device tiff24nc instead of tiff12nc since the 4 bit per sample images created by tiff12nc could sometimes trigger a bug in tiffcmp. Fixes #20.
2013-11-21Add a ChangeLog note for previous fixJay Berkenbilt
2013-10-29Add missing #include of <string>Jay Berkenbilt
2013-10-18Prepare for 5.0.1 releaserelease-qpdf-5.0.1Jay Berkenbilt
2013-10-18Instructions for building from pristine checkoutJay Berkenbilt
2013-10-18Warn when -accessibility=n will be ignoredJay Berkenbilt
Also accept -accessibility=n with 256 bit keys even though it will be ignored.
2013-10-18Security: replace operator[] with atJay Berkenbilt
For std::string and std::vector, replace operator[] with at. This was done using an automated process. See README.hardening for details.
2013-10-18Security: use a secure random number generatorJay Berkenbilt
If not available, give an error. The user may also configure qpdf to use an insecure random number generator.
2013-10-10Pass additional arguments from Windows config wrappersJay Berkenbilt
2013-10-10Replace some assertions with std::logic_errorJay Berkenbilt
Ideally, the library should never call assert outside of test code, but it does in several places. For some cases where the assertion might conceivably fail because of a problem with the input data, replace assertions with exceptions so that they can be trapped by the calling application. This commit surely misses some cases and replaced some cases unnecessarily, but it should still be an improvement.
2013-10-10Security: avoid pre-allocating vectors based on file dataJay Berkenbilt
In places where std::vector<T>(size_t) was used, either validate that the size parameter is sane or refactor code to avoid the need to pre-allocate the vector.
2013-10-10Security: sanitize /W in xref streamJay Berkenbilt
The /W array was not sanitized, possibly causing an integer overflow in a multiplication. An analysis of the code suggests that there were no possible exploits based on this since the problems were in checking expected values but bounds checks were performed on actual values.
2013-10-10Security: better bounds checks for linearization dataJay Berkenbilt
The faulty code was only used during explicit checks of linearization data. Those checks are not part of normal reading or writing of PDF files.
2013-10-10Security: handle empty name in normalizeNameJay Berkenbilt
2013-10-10Security: fix potential multiplication overflowJay Berkenbilt
Better sanity check inputs to bit stream reader
2013-10-10Security: keep cur_byte pointing into bytes arrayJay Berkenbilt
2013-07-20Note about extra hash_V5 callsJay Berkenbilt
2013-07-10Prepare 5.0.0 releaserelease-qpdf-5.0.0Jay Berkenbilt
2013-07-10Update valgrid suppressionsJay Berkenbilt
2013-07-10Update doc for 5.0.0Jay Berkenbilt
2013-07-10Change API/ABI and withdraw 4.2.0Jay Berkenbilt
4.2.0 was binary incompatible in spite of there being no deletions or changes to any public methods. As such, we have to bump the ABI and are fixing some API breakage while we're at it. Previous 4.3.0 target is now 5.1.0.
2013-07-08Prepare 4.2.0 releaserelease-qpdf-4.2.0Jay Berkenbilt
2013-07-08Update spelling checker word listJay Berkenbilt
2013-07-08Replace - with -- in documentationJay Berkenbilt
This is a cosmetic change since both are accepted.
2013-07-08Update for 4.2.0Jay Berkenbilt
2013-07-08Ignore broken DecodeParms for stream with no filtersJay Berkenbilt
2013-07-08Adjust to-do listJay Berkenbilt
2013-07-08Add --show-npages option to qpdfJay Berkenbilt
2013-07-08Allow numeric range to be omitted qpdf --pagesJay Berkenbilt
Detect a missing page range and assume 1-z.
2013-07-08Fix QPDFObjGen constructor implementationJay Berkenbilt
2013-07-07Fix errors reported by CoverityJay Berkenbilt
Thanks to Jiri Popelka from Red Hat for sending the output of a Coverity run over qpdf.
2013-06-19Fix typo in qpdf-manual.xmlJon Snell
s/Controls handing of object streams./Controls handling of object streams./
2013-06-15Handle more broken filesJay Berkenbilt
Space rather than newline after xref, missing /ID in trailer for encrypted file. This enables qpdf to handle some files that xpdf can handle. Adobe reader can't necessarily handle them.
2013-06-15Retarget some items for 4.2.0 and 4.3.0Jay Berkenbilt
Bug fixes for 4.2.0 force additional interfaces, so move most of the 4.2.0 items to 4.3.0.
2013-06-15Handle /Outlines dictionary being a direct objectJay Berkenbilt
Even though this case is not valid according to the spec, it has been seen, and caused an internal error.
2013-06-15Add optional /Length key in crypt filter dictionaryJay Berkenbilt
2013-06-14Bug fix: handle generation > 0 when generating object streamsJay Berkenbilt
Rework QPDFWriter to always track old object IDs and QPDFObjGen instead of int, thus not discarding the generation number. Switch to QPDF::getCompressibleObjGen() to properly handle the case of an old object eligible for compression that has a generation of other than zero.