summaryrefslogtreecommitdiffstats
path: root/ChangeLog
AgeCommit message (Collapse)Author
2014-06-07Prepare 5.1.2 releaserelease-qpdf-5.1.2Jay Berkenbilt
2014-06-07Windows build (msvc): target Windows 5.0.1 (XP)Jay Berkenbilt
Without this, qpdf executables work only on Vista or newer. Fixes #35
2014-06-07Example: fast split into single pagesJay Berkenbilt
This is faster than using qpdf --pages to do it.
2014-06-07Handle indirect stream filter/decode parametersJay Berkenbilt
QPDFWriter was trying to make /Filter and /DecodeParms direct in all cases, but there are some cases where /DecodeParms may refer to a stream, which can't be direct. QPDFWriter doesn't actually need /DecodeParms to be direct in that case because it won't be able to filter the stream. Until we can handle this type of stream, just don't make /Filter and /DecodeParms direct if we can't filter the stream anyway. Fixes #34
2014-02-23Fix calculation of xref stream stream columnsJay Berkenbilt
Fix problem: if the last object in the first part of a linearized file had an offset that was below 65536 by less than the size of the hint stream, the xref stream was invalid and the resulting file is not usable.
2014-01-14Prepare 5.1.1 releaserelease-qpdf-5.1.1Jay Berkenbilt
2013-12-26Avoid traversing same object twice when copying objectsJay Berkenbilt
This is a performance fix. The output is unchanged. Fixes #28.
2013-12-17Prepare 5.1.0 releaserelease-qpdf-5.1.0Jay Berkenbilt
2013-12-16Increase random data provider supportJay Berkenbilt
Add a method to get the current random data provider, and document and test the method for resetting it.
2013-12-14Allow OS-provided secure random to be disabledJay Berkenbilt
2013-12-14Refactor random data generationJay Berkenbilt
Add new RandomDataProvider object and implement existing random number generation in terms of that. This enables end users to supply their own random data providers.
2013-12-14Allow arbitrary whitespace, not just newline, after xrefJay Berkenbilt
Fixes #27.
2013-11-30Allow -DNO_GET_ENVIRONMENT to avoid GetEnvironmentVariableJay Berkenbilt
If NO_GET_ENVIRONMENT is #defined at compile time on Windows, do not call GetEnvironmentVariable. QUtil::get_env will always return false. This option is not available through configure. This was added to support a specific user's requirements to avoid calling GetEnvironmentVariable from the Windows API. Nothing in qpdf outside the test coverage system in qtest relies on QUtil::get_env.
2013-11-30Add /FS flag (msvc) for parallel buildsJay Berkenbilt
2013-11-30Add more detail to previous ChangeLog entryJay Berkenbilt
2013-11-29Include <algorithm> for std::min, std::maxJay Berkenbilt
2013-11-21Use 8 bit per sample images in testsJay Berkenbilt
In compare image tests, use the gs device tiff24nc instead of tiff12nc since the 4 bit per sample images created by tiff12nc could sometimes trigger a bug in tiffcmp. Fixes #20.
2013-11-21Add a ChangeLog note for previous fixJay Berkenbilt
2013-10-18Prepare for 5.0.1 releaserelease-qpdf-5.0.1Jay Berkenbilt
2013-10-18Warn when -accessibility=n will be ignoredJay Berkenbilt
Also accept -accessibility=n with 256 bit keys even though it will be ignored.
2013-10-18Security: replace operator[] with atJay Berkenbilt
For std::string and std::vector, replace operator[] with at. This was done using an automated process. See README.hardening for details.
2013-10-18Security: use a secure random number generatorJay Berkenbilt
If not available, give an error. The user may also configure qpdf to use an insecure random number generator.
2013-10-10Replace some assertions with std::logic_errorJay Berkenbilt
Ideally, the library should never call assert outside of test code, but it does in several places. For some cases where the assertion might conceivably fail because of a problem with the input data, replace assertions with exceptions so that they can be trapped by the calling application. This commit surely misses some cases and replaced some cases unnecessarily, but it should still be an improvement.
2013-10-10Security: avoid pre-allocating vectors based on file dataJay Berkenbilt
In places where std::vector<T>(size_t) was used, either validate that the size parameter is sane or refactor code to avoid the need to pre-allocate the vector.
2013-10-10Security: sanitize /W in xref streamJay Berkenbilt
The /W array was not sanitized, possibly causing an integer overflow in a multiplication. An analysis of the code suggests that there were no possible exploits based on this since the problems were in checking expected values but bounds checks were performed on actual values.
2013-10-10Security: better bounds checks for linearization dataJay Berkenbilt
The faulty code was only used during explicit checks of linearization data. Those checks are not part of normal reading or writing of PDF files.
2013-10-10Security: handle empty name in normalizeNameJay Berkenbilt
2013-10-10Security: fix potential multiplication overflowJay Berkenbilt
Better sanity check inputs to bit stream reader
2013-10-10Security: keep cur_byte pointing into bytes arrayJay Berkenbilt
2013-07-10Prepare 5.0.0 releaserelease-qpdf-5.0.0Jay Berkenbilt
2013-07-10Change API/ABI and withdraw 4.2.0Jay Berkenbilt
4.2.0 was binary incompatible in spite of there being no deletions or changes to any public methods. As such, we have to bump the ABI and are fixing some API breakage while we're at it. Previous 4.3.0 target is now 5.1.0.
2013-07-08Prepare 4.2.0 releaserelease-qpdf-4.2.0Jay Berkenbilt
2013-07-08Ignore broken DecodeParms for stream with no filtersJay Berkenbilt
2013-07-08Add --show-npages option to qpdfJay Berkenbilt
2013-07-08Allow numeric range to be omitted qpdf --pagesJay Berkenbilt
Detect a missing page range and assume 1-z.
2013-06-15Handle more broken filesJay Berkenbilt
Space rather than newline after xref, missing /ID in trailer for encrypted file. This enables qpdf to handle some files that xpdf can handle. Adobe reader can't necessarily handle them.
2013-06-15Handle /Outlines dictionary being a direct objectJay Berkenbilt
Even though this case is not valid according to the spec, it has been seen, and caused an internal error.
2013-06-15Add optional /Length key in crypt filter dictionaryJay Berkenbilt
2013-06-14Bug fix: handle generation > 0 when generating object streamsJay Berkenbilt
Rework QPDFWriter to always track old object IDs and QPDFObjGen instead of int, thus not discarding the generation number. Switch to QPDF::getCompressibleObjGen() to properly handle the case of an old object eligible for compression that has a generation of other than zero.
2013-06-14Add QPDFObjectHandle::getObjGen()Jay Berkenbilt
This is safer than getObjectID() and getGeneration() for many uses.
2013-06-14Promote QPDF::ObjGen to top-level object QPDFObjGenJay Berkenbilt
2013-04-14Final preparation for 4.1.0 releaserelease-qpdf-4.1.0Jay Berkenbilt
2013-03-25Document casting policyJay Berkenbilt
2013-03-11Windows install: check DLL typeJay Berkenbilt
When copying dlls, make sure to only consider DLLs whose type matches the type of what is loading them.
2013-03-07Use ./install-sh instead of install -cJay Berkenbilt
2013-03-05Add method to terminate content stream parsingJay Berkenbilt
2013-03-05Favor strerror_s and fopen_s on MSVCJay Berkenbilt
Make remaining calls to fopen and strerror use strerror_s and fopen_s on MSVC.
2013-03-05Call QUtil::safe_fopen in place of fopenJay Berkenbilt
fopen was previuosly called wrapped by QUtil::fopen_wrapper, but QUtil::safe_fopen does this itself, which is less cumbersome.
2013-03-05Remove all calls to sprintfJay Berkenbilt
2013-03-04Rewrite QUtil::int_to_string and QUtil::double_to_stringJay Berkenbilt
Make them safer by avoiding any internal limits and replacing sprintf with std::ostringstream.