aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2020-10-27Run CI Fuzz integration on push as well as pull requestJay Berkenbilt
2020-10-27Remove C++-11 notes from TODOJay Berkenbilt
2020-10-27Fix a few maintainer notesJay Berkenbilt
2020-10-27Prepare 10.0.2 releaserelease-qpdf-10.0.2Jay Berkenbilt
2020-10-27Improve efficiency of number to string conversionJay Berkenbilt
2020-10-27Revert removal of unreadCh change for performanceJay Berkenbilt
Turns out unreadCh is much more efficient than seek(-1, SEEK_CUR). Update comments and code to reflect this.
2020-10-27Spell checkJay Berkenbilt
2020-10-27Release notes for 10.0.2Jay Berkenbilt
2020-10-26Add some missing ChangeLog entriesJay Berkenbilt
2020-10-25Use sha256 for signing release filesJay Berkenbilt
2020-10-25Build Windows releases with openssl; automate external librariesJay Berkenbilt
External libraries for Windows are now built automatically in the qpdf/external-libs repository and include openssl in addition to zlib and jpeg. Use these, and update the Windows build to build with the openssl crypto provider by default. We leave the native crypto provider enabled in case there is a problem with openssl and also to continue to exercise that code.
2020-10-25Make libtests depend on qpdfJay Berkenbilt
We need to run qpdf --show-crypto.
2020-10-23TODO and comments item for pipeContentStreamsJay Berkenbilt
2020-10-23With --no-warn, suppress warnings in split-pagesJay Berkenbilt
Warnings issued on the output QPDF object were not suppressing warnings since that option was only set on the input QPDF object.
2020-10-23Update fuzz issue listJay Berkenbilt
2020-10-23Avoid merging adjacent tokens when concatenating contents (fixes #444)Jay Berkenbilt
2020-10-23Fix fix-qdf for empty streamsJay Berkenbilt
2020-10-23Fix outdated comment in QPDFTokenizer.hhJay Berkenbilt
2020-10-22Avoid leak by resolving object streams more than once (fuzz issue 23642)Jay Berkenbilt
2020-10-22Minor code cleanupJay Berkenbilt
* Return rather than exiting from realmain in qpdf.cc * Remove extraneous blank line * Don't assign temporary to const reference
2020-10-22Handle jpeg library fuzz false positivesJay Berkenbilt
The jpeg library has some assembly code that is missed by the compiler instrumentation used by memory sanitization. There is a runtime environment variable that is used to work around this issue.
2020-10-22Check for overflow in page labels (fuzz issue 23599)Jay Berkenbilt
2020-10-22Add range_check method to QIntCJay Berkenbilt
2020-10-22Fix loop detection error (fuzz issue 23172)Jay Berkenbilt
2020-10-22Update fuzz informationJay Berkenbilt
2020-10-22Obscure bug fix copying foreign streams in special cases (fixes #449)Jay Berkenbilt
Specifically, if a stream had its stream data replaced and had indirect /Filter or /DecodeParms, it would result in non-silent loss of data and/or internal error.
2020-10-21Restore accidentally removed lgtm bannerJay Berkenbilt
2020-10-21TODO: reminder to check work-related issuesJay Berkenbilt
2020-10-21Turn off azure pipelines, completing migration to GitHub ActionsJay Berkenbilt
2020-10-21Protect numeric conversion against user's locale (fixes #459)Jay Berkenbilt
2020-10-21Remove some fuzz files with Mal/PDFEx-H (fixes #460)Jay Berkenbilt
There isn't really an issue with these files causing a real problem, but malware and virus checkers trip on them, and the value to leaving them in the test suite is too low to be worth the hassle.
2020-10-21Build on a schedule and use latest versions of runnersJay Berkenbilt
2020-10-21Add automated test for shell wildcard expansionJay Berkenbilt
Wildcard expansion is different in Windows from non-Windows and sometimes requires special link options to work. Add tests that fail if we link incorrectly.
2020-10-21Create a minimal Linux binary distribution (fixes #352)Jay Berkenbilt
This is suitable for use as a Lambda layer in AWS, inclusion in a docker container, or other places where a minimal binary distribution is desired.
2020-10-21Add option --warning-exit-0 to exit 0 instead of 3 with warningsJay Berkenbilt
2020-10-20Fix another case of errors written to stdout (fixes #438)Jay Berkenbilt
2020-10-20Ignore some paths for triggering build in CIJay Berkenbilt
2020-10-20TODO: Build issues including Windows external librariesJay Berkenbilt
2020-10-20Add --disable-rpath to configure (fixes #422)Jay Berkenbilt
2020-10-18Stop using InputSource::unreadChJay Berkenbilt
2020-10-17TODOJay Berkenbilt
2020-10-17TODO and ChangeLog updates from merged pull requestsJay Berkenbilt
2020-10-17Check integer overflow in resolveObjectsInStreamDean Scarff
Fixes a crash found by fuzzing.
2020-10-17Properly detect OPENSSL_IS_BORINGSSLDean Scarff
OPENSSL_IS_BORINGSSL is not actually set by configure, so it will be undefined until a BoringSSL header is included. Hence the #ifdef logic in QPDFCrypto_openssl.h would usually never apply. This still worked because evp.h transitively included BoringSSL's cipher.h and digest.h, but the latter are the correct (documented) headers. By re-ordering the includes, we can ensure the macro is defined when we use it. Also: fix case in the header guards.
2020-10-17Update OpenSSL autoconf checksDean Scarff
- Checks explicitly for versions >= 1.1.0 with pkg-config - Refactor the fallback checks. Previously they were copied from the gnutls logic, but could be slightly surprising (it's not obvious that they're for the case where pkg-config returns a false negative, and it's weird that the linker check overode the header check) - Fix the AC_SEARCH_LIBS check to try -lcrypto instead of -lopenssl (-lcrypto is the standard library OpenSSL ships the crypto symbols in). - Fix the AC_SEARCH_LIBS check to look for EVP_MD_CTX_new, which is not present in versions prior to 1.1.0. Fixes qpdf/qpdf#429 (although I haven't verified on cygwin)
2020-10-17Include detailed OpenSSL error messagesDean Scarff
Fixes qpdf/qpdf#450
2020-10-17Replace memchr with manual memory searchJames R. Barlow
On large files with predominantly \n line endings, memchr(..'\r'..) seems to waste a considerable amount of time searching for a line ending candidate that we don't need. On the Adobe PDF Reference Manual 1.7, this commit is 8x faster at QPDF::processMemoryFile().
2020-10-17fix WindowsCryptProvider fixes #432oltolm
2020-10-17Trigger QPDF Build on build/*Jay Berkenbilt
2020-10-16Minor notes on GitHub Actions migrationJay Berkenbilt