annotate NEWS @ 359:a3e674fade6c

From Jeffrey Morlan: pst_parse_block misreads Table Contexts (aka "type 2") with a multi-block Row Matrix ("ind2"). Rows are never split between blocks - every block except the last has padding at the end which should be ignored. I've only seen this affect the recipients table, but presumably it could affect attachments too. This was causing out-of-bounds memory ranges to be returned from pst_getBlockOffset and later access; patch fixes both the table reading issue and adds a missing bounds check to pst_getBlockOffset (so as not to risk a segfault if the PST is corrupted).
author Carl Byington <carl@five-ten-sg.com>
date Wed, 06 Jul 2016 10:20:12 -0700
parents 19b795b6f6a0
children a2da2bbe393a
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
353
19b795b6f6a0 Added Content-ID header support
Carl Byington <carl@five-ten-sg.com>
parents: 350
diff changeset
1 0.6.66 2015-12-21 Igor Stroh - Added Content-ID header support
350
7a91e30826d8 Hans Liss - debug level output
Carl Byington <carl@five-ten-sg.com>
parents: 346
diff changeset
2 0.6.65 2015-09-11 Jeffrey Morlan - fix multiple Content-Type headers; Hans Liss - debug level output
346
afa777d5bedf prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 340
diff changeset
3 0.6.64 2015-03-09 AJ Shankar fixes for attachment processing and body encodings that contain embedded null chars
340
0f3185217313 Daniel Gryniewicz found buffer overrun in LIST_COPY_TIME
Carl Byington <carl@five-ten-sg.com>
parents: 336
diff changeset
4 0.6.63 2013-12-27 Daniel Gryniewicz found buffer overrun in LIST_COPY_TIME
336
f1595a84790b Old dependency filter breaks file coloring
Carl Byington <carl@five-ten-sg.com>
parents: 333
diff changeset
5 0.6.62 2013-09-22 983596 - Old dependency filter breaks file coloring
333
f2a83a1a1b00 fedora unversioned documentation directories
Carl Byington <carl@five-ten-sg.com>
parents: 328
diff changeset
6 0.6.61 2013-08-06 move documentation to unversioned directory
328
c507af52515a add readpst -a option
Carl Byington <carl@five-ten-sg.com>
parents: 326
diff changeset
7 0.6.60 2013-06-12 add AC_USE_SYSTEM_EXTENSIONS, add readpst -a option for attachment stripping
326
1e39dc490627 add autoconf checking for libgsf
Carl Byington <carl@five-ten-sg.com>
parents: 323
diff changeset
8 0.6.59 2013-05-17 add autoconf checking for libgsf
323
2474d01043cd fix From quoting on embedded rfc/822 messages
Carl Byington <carl@five-ten-sg.com>
parents: 321
diff changeset
9 0.6.58 2012-12-28 fix From quoting on embedded rfc/822 messages
321
cd8dc65b9895 bump version number
Carl Byington <carl@five-ten-sg.com>
parents: 317
diff changeset
10 0.6.57 2012-12-27 remove useless dependencies
317
af6ae20be5ba update version number
Carl Byington <carl@five-ten-sg.com>
parents: 316
diff changeset
11 0.6.56 2012-12-24 merge -m .msg files code into main branch
304
5338d93889aa preserve bcc headers, document -C switch to set default character set, space after colon is not required in header fields
Carl Byington <carl@five-ten-sg.com>
parents: 300
diff changeset
12 0.6.55 2012-05-08 preserve bcc headers, space after colon is not required in header fields
300
47abe56076da embedded rfc822 messages might contain rtf encoded bodies
Carl Byington <carl@five-ten-sg.com>
parents: 293
diff changeset
13 0.6.54 2011-11-04 embedded rfc822 messages might contain rtf encoded bodies
293
5b3e7661adad prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 283
diff changeset
14 0.6.53 2011-07-10 allow fork for parallel processing of individual email folders in separate mode
283
6a9f92d4e449 prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 270
diff changeset
15 0.6.52 2011-05-22 fix dangling freed pointer; allow broken outlook internet header field
270
6c73cd336d5d prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 257
diff changeset
16 0.6.51 2011-04-17 fix for buffer overrun; attachment size fetched twice
257
c947b8812120 rfc2047 and rfc2231 encoding for non-ascii headers and attachment filenames
Carl Byington <carl@five-ten-sg.com>
parents: 255
diff changeset
17 0.6.50 2010-12-24 rfc2047 and rfc2231 encoding for non-ascii headers and attachment filenames
255
ab87f9070ed2 fix to ignore embedded objects that are not email messages
Carl Byington <carl@five-ten-sg.com>
parents: 254
diff changeset
18 0.6.49 2010-09-13 fix to ignore embedded objects that are not email messages
254
fb66d428347d switch to mboxrd quoting
Carl Byington <carl@five-ten-sg.com>
parents: 253
diff changeset
19 0.6.48 2010-09-02 fix for broken internet headers from Outlook, change to mboxrd quoting
252
4573b536177f fix for broken internet headers from Outlook
Carl Byington <carl@five-ten-sg.com>
parents: 246
diff changeset
20 0.6.47 2010-05-07 patches from Kenneth Berland for solaris
244
f2ae612fa62b fixes for fedora 13 change in implicit dso linking semantics
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
21 0.6.46 2010-02-13 fixes for fedora 13 change in implicit dso linking semantics
242
67b24d6a45d6 patch from Hugo DesRosiers to export categories and notes into vcards.
Carl Byington <carl@five-ten-sg.com>
parents: 240
diff changeset
22 0.6.45 2009-11-18 patch from Hugo DesRosiers to export categories and notes into vcards
240
75a27d2add60 prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 239
diff changeset
23 0.6.44 2009-09-20 patch from Lee Ayres to add file name extensions in separate mode
236
093e0e9248bb cleanup rfc822 embedded message code
Carl Byington <carl@five-ten-sg.com>
parents: 233
diff changeset
24 0.6.43 2009-09-12 patches from Justin Greer, Chris White, Roberto Polli; better rfc822 embedded message decoding
228
be1009c92ac2 patch from Fridrich Strba to build with DJGPP DOS cross-compiler
Carl Byington <carl@five-ten-sg.com>
parents: 225
diff changeset
25 0.6.42 2009-09-03 patch from Fridrich Strba to build with DJGPP DOS cross-compiler
225
9859474779da fix ax_python as done in libtorrent
Carl Byington <carl@five-ten-sg.com>
parents: 221
diff changeset
26 0.6.41 2009-06-23 fix ax_python detection - should not use locate command
221
06d759f640f6 fedora 11 has python2.6, remove pdf version of the man pages
Carl Byington <carl@five-ten-sg.com>
parents: 217
diff changeset
27 0.6.40 2009-06-23 fedora 11 has python2.6, remove pdf version of the man pages
06d759f640f6 fedora 11 has python2.6, remove pdf version of the man pages
Carl Byington <carl@five-ten-sg.com>
parents: 217
diff changeset
28 0.6.39 2009-06-21 fedora > 10 moved to boost-python-devel
06d759f640f6 fedora 11 has python2.6, remove pdf version of the man pages
Carl Byington <carl@five-ten-sg.com>
parents: 217
diff changeset
29 0.6.39 2009-06-21 fedora > 10 moved to boost-python-devel
215
fef2214083a4 ready for new release
Carl Byington <carl@five-ten-sg.com>
parents: 206
diff changeset
30 0.6.38 2009-06-21 many changes including shared library soname
244
f2ae612fa62b fixes for fedora 13 change in implicit dso linking semantics
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
31 0.6.37 2009-04-17 add pst_attach_to_mem() back into the shared library interface
188
d588dafd03e8 prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 182
diff changeset
32 0.6.36 2009-04-14 build separate -doc and -devel-doc subpackages
176
ac6e22c8a9cf build separate libpst, libpst-libs, libpst-devel rpms.
Carl Byington <carl@five-ten-sg.com>
parents: 168
diff changeset
33 0.6.35 2009-04-08 properly add trailing mime boundary in all modes, build separate rpms with libpst.so shared.
168
c1a2fd06ffe6 prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 165
diff changeset
34 0.6.34 2009-03-19 avoid putting mixed item types into the same output folder
165
6194e4a10406 prep for fedora build
Carl Byington <carl@five-ten-sg.com>
parents: 160
diff changeset
35 0.6.33 2009-03-17 fix utf-7 conversions, don't produce empty attachment files in separate mode
160
252ad66d3d6e fix ppc64 compile error
Carl Byington <carl@five-ten-sg.com>
parents: 157
diff changeset
36 0.6.32 2009-03-14 fix ppc64 compile error
157
cc3c71da9fe6 bump version for fedora cvs tagging mistake
Carl Byington <carl@five-ten-sg.com>
parents: 155
diff changeset
37 0.6.31 2009-03-14 bump version for fedora cvs tagging mistake
155
84e0f6222adf add changelog entry in rpm spec file
Carl Byington <carl@five-ten-sg.com>
parents: 149
diff changeset
38 0.6.30 2009-03-14 track character set individually for each mapi element, avoid emitting bogus empty email messages into contacts and calendar files.
146
0695de3b5a98 fix for 64bit on Fedora 11
Carl Byington <carl@five-ten-sg.com>
parents: 143
diff changeset
39 0.6.29 2009-02-24 fix for 64bit on Fedora 11
244
f2ae612fa62b fixes for fedora 13 change in implicit dso linking semantics
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
40 0.6.28 2009-02-24 improve decoding of multipart/report and message/rfc822 mime types
136
16770fc77139 fix for const correctness on Fedora 11
Carl Byington <carl@five-ten-sg.com>
parents: 134
diff changeset
41 0.6.27 2009-02-07 fix for const correctness on Fedora 11
134
2d6bb72ad041 update changelog and dates
Carl Byington <carl@five-ten-sg.com>
parents: 129
diff changeset
42 0.6.26 2009-02-07 patch from Fridrich Strba for building on mingw, and autoconf cleanup, better mime headers
116
ed2a260bbb98 improve handling of content-type charset values in mime parts
Carl Byington <carl@five-ten-sg.com>
parents: 114
diff changeset
43 0.6.25 2009-01-16 improve handling of content-type charset values in mime parts
114
e213bfcf9aa7 patch from Chris Eagle to build on cygwin
Carl Byington <carl@five-ten-sg.com>
parents: 112
diff changeset
44 0.6.24 2008-12-11 patch from Chris Eagle to build on cygwin
112
554e9a422778 bump version to avoid cvs tagging mistake in fedora
Carl Byington <carl@five-ten-sg.com>
parents: 110
diff changeset
45 0.6.23 2008-12-04 bump version to avoid cvs tagging mistake in fedora
110
7133b39975f7 patch from David Cuadrado to process emails with type PST_TYPE_OTHER
Carl Byington <carl@five-ten-sg.com>
parents: 108
diff changeset
46 0.6.22 2008-11-28 process emails with type PST_TYPE_OTHER, fix malloc error and possible segfault
108
1b2a4fac1303 fix title bug with old schema in pst2ldif, also escape commas in distinguished names per rfc4514.
Carl Byington <carl@five-ten-sg.com>
parents: 104
diff changeset
47 0.6.21 2008-10-21 fix title bug with old schema in pst2ldif, also escape commas in distinguished names per rfc4514.
104
39ba19372732 many fixes in pst2ldif by Robert Harris
Carl Byington <carl@five-ten-sg.com>
parents: 103
diff changeset
48 0.6.20 2008-10-09 add configure option --enable-dii=no, fixes from Robert Harris for pst2ldif.
96
2e3ec9511166 update the release notes
Carl Byington <carl@five-ten-sg.com>
parents: 93
diff changeset
49 0.6.19 2008-09-14 Initial work on a .so shared library from Bharath Acharya.
93
cb14583c119a iconv changes for Mac
Carl Byington <carl@five-ten-sg.com>
parents: 90
diff changeset
50 0.6.18 2008-08-28 Fixes for iconv on Mac from Justin Greer.
244
f2ae612fa62b fixes for fedora 13 change in implicit dso linking semantics
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
51 0.6.17 2008-08-05 More fixes for 32/64 bit portability on big endian ppc
f2ae612fa62b fixes for fedora 13 change in implicit dso linking semantics
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
52 0.6.16 2008-08-05 Use inttypes.h for portable printing of 64 bit items
f2ae612fa62b fixes for fedora 13 change in implicit dso linking semantics
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
53 0.6.15 2008-07-30 Fix file handle leak in error case, missing length on lz decompression
f2ae612fa62b fixes for fedora 13 change in implicit dso linking semantics
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
54 0.6.14 2008-06-15 Fix my mistake in debian packaging
79
56fa05fd5271 Patch from Robert Simpson for encryption type 2.
Carl Byington <carl@five-ten-sg.com>
parents: 78
diff changeset
55 0.6.13 2008-06-13 Patch from Robert Simpson for encryption type 2.
78
535075b4d261 Patch from Joachim Metz for debian packaging, and fix for incorrect length on lz decompression.
Carl Byington <carl@five-ten-sg.com>
parents: 75
diff changeset
56 0.6.12 2008-06-10 Patch from Joachim Metz for debian packaging, and fix for incorrect length on lz decompression.
75
987aa872294e Use ftello/fseeko to properly handle large files.
Carl Byington <carl@five-ten-sg.com>
parents: 73
diff changeset
57 0.6.11 2008-06-03 Use ftello/fseeko to properly handle large files.
73
3cb02cb1e6cd Patch from Robert Simpson to fix doubly-linked list in the cache_ptr code, and allow arrays of unicode strings (without converting them).
Carl Byington <carl@five-ten-sg.com>
parents: 71
diff changeset
58 0.6.10 2008-05-29 Patch from Robert Simpson for doubly-linked list and arrays of unicode strings.
3cb02cb1e6cd Patch from Robert Simpson to fix doubly-linked list in the cache_ptr code, and allow arrays of unicode strings (without converting them).
Carl Byington <carl@five-ten-sg.com>
parents: 71
diff changeset
59 0.6.9 2008-05-16 Patch from Joachim Metz for 64 bit compile.
67
90aa7814ad1f Initial version of pst2dii to convert to Summation dii load file format.
Carl Byington <carl@five-ten-sg.com>
parents: 64
diff changeset
60 0.6.8 2008-03-05 Initial version of pst2dii to convert to Summation dii load file format.
60
97b7706bdda2 Work around bogus 7c.b5 blocks in some messages that have been read.
Carl Byington <carl@five-ten-sg.com>
parents: 55
diff changeset
61 0.6.7 2008-02-16 Ignore unknown attachments on some read messages; autoconf cleanup.
55
0cdbd066f65a add missing news items, add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents: 43
diff changeset
62 0.6.6 2008-01-31 Code cleanup, switch from cvs to mercurial source control.
0cdbd066f65a add missing news items, add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents: 43
diff changeset
63 0.6.5 2008-01-22 Code cleanup, rpm group Applications/Productivity.
0cdbd066f65a add missing news items, add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents: 43
diff changeset
64 0.6.4 2008-01-19 More fixes for 64 bit format, merge changes from svn Alioth.
0cdbd066f65a add missing news items, add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents: 43
diff changeset
65 0.6.3 2008-01-13 More type consistency issues found by splint.
0cdbd066f65a add missing news items, add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents: 43
diff changeset
66 0.6.2 2008-01-12 More fixes for 64 bit format, consistent types size_t, off_t, etc.
43
f6db1f060a95 start on outlook 2003 64 bit format
carl
parents: 41
diff changeset
67 0.6.1 2008-01-06 Outlook 2003 64 bit format and fix for bogus contacts.
41
183ae993b9ad security fix for potential buffer overrun in lz decompress
carl
parents: 40
diff changeset
68 0.5.12 2007-10-02 security fix for possible buffer overruns in liv-zemple decoding
40
be6d5329cc01 fix unitialized variable
carl
parents: 39
diff changeset
69 0.5.11 2007-08-24 fix for unitialized variable
39
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
70 0.5.10 2007-08-20 fix yet more valgrind errors, restructure readpst recursive walk, backwards overrun test
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
71 0.5.9 2007-08-12 fix more valgrind errors, pst2ldif wrote undefined data
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
72 0.5.8 2007-08-10 lzfu_decompress/base64_encode encoded random data into attachment
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
73 0.5.7 2007-08-09 fix valgrind errors, using uninitialized data
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
74 0.5.6 2007-07-15 handle small pst files, better decoding of 7c blocks
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
75 0.5.5 2007-07-10 merge changes from Joe Nahmias version
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
76 0.5.4 2006-02-25 add MH mode, generated filenames with no leading zeros
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
77 0.5.3 2006-02-20 switch to gnu autoconf/automake
2ad7ef0a3c4f more valgrind fixes
carl
parents: 38
diff changeset
78 0.5.2 2006-02-18 add pst2ldif, fix btree processing in libpst.c