Release 0.10.1

Major bugfixes: * Fixed dwg2SVG htmlescape overflows and off-by-ones (#182) * Removed direct usages of fprintf and stderr in the lib. All can be redefined now. (#181) Minor bugfixes: * Fuzzing fixes for dwg2SVG, dwgread. (#182) * Fixed eed.raw leaks
LibreDWG · Jan 12, 2020 · 828cb38 · 828cb38
1 parent 69b5609
commit 828cb38
Show file tree

Hide file tree

Showing 13 changed files with 97 additions and 21 deletions.
diff --git a/.appveyor.yml b/.appveyor.yml
@@ -1,4 +1,4 @@
-version: 0.10.{build}
+version: 0.10.1.{build}
 max_jobs: 4
 environment:
   matrix:

diff --git a/ChangeLog b/ChangeLog
@@ -1,6 +1,71 @@
 Full history from the git log
 -----------------------------
 
+2020-01-10  Reini Urban  <rurban@cpan.org>
+
+	Release 0.10.1
+	de/encode: protect more class overflows and NULL
+	reset num_classes with r2007. check NULL dwg.
+	check NULL dwg->classes.
+	found via fuzzing
+
+	remove outdated dejagnu deps
+	we dont depend on it anymore for some time already
+
+	cirrus: add p5-Convert-Binary-C
+
+	switch cirrus to freebsd-12-1-snap
+	See https://cirrus-ci.org/guide/FreeBSD/
+	They are using Google Cloud Compute images:
+	13-0-snap, 12-1-snap (stable), 12-1 (release)
+	12-0, 11-3-snap and 11-3. Not our old image anymore,
+	hence the python problems
+
+	switch cirrus to py37
+	py36-libxml2 does not exist anymore
+
+	dwg2SVG: protect from wrong style
+	id's 144 and 109 of GH #182
+	Closes GH #182
+
+	htmslescape: fix off-by-one and overflow
+	ditto.
+	Fixes GH #182
+
+	htmlescape: fix off-by-one and overflow
+	need \0 termination to do strcat.
+	don't skip the very first char.
+	Fixes GH #182
+
+	dwg2SVG: skip nan values
+
+	dwg2SVG: skip NULL text_value
+	Fixes Case 1 of GH #182
+
+2020-01-09  Reini Urban  <rurban@cpan.org>
+
+	add reedsolomon.h
+	we will use it soon
+
+	reedsolomon: missing config.h
+	needed for HAVE_MALLOC_H
+
+	consistent logging handlers, no fprintf, stderr in the lib
+	library users want to catch fprintf and/or stderr.
+	Closes GH #181
+
+	indxf: silence clang -Wdouble-promotion
+	use (double)NAN, as it's apparently only float there,
+	__builtin_nanf().
+
+	decode eed: accept raw with unknown codes
+	For dwgrewrite passes it through, and let data be empty.
+	And fixes a EED raw leak with such unknown codes.
+
+2020-01-08  Reini Urban  <rurban@cpan.org>
+
+	dwgrewrite: fix leaks on early errors
+
 2020-01-08  Reini Urban  <rurban@cpan.org>
 
 	Release 0.10

diff --git a/NEWS b/NEWS
@@ -2,6 +2,17 @@ GNU LibreDWG NEWS -- history of user-visible changes.  -*-indented-text-*-
 Copyright (C) 2020 Free Software Foundation, Inc.
 See the end for copying conditions.
 
+LibreDWG version 0.10.1 - released 2020/01/13 - beta:
+
+Major bugfixes:
+  * Fixed dwg2SVG htmlescape overflows and off-by-ones (#182)
+  * Removed direct usages of fprintf and stderr in the lib. All can be
+    redefined now. (#181)
+
+Minor bugfixes:
+  * Fuzzing fixes for dwg2SVG, dwgread. (#182)
+  * Fixed eed.raw leaks
+
 LibreDWG version 0.10 - released 2020/01/08 - beta:
 
 API breaking changes:

diff --git a/programs/dwg2SVG.1 b/programs/dwg2SVG.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWG2SVG "1" "January 2020" "dwg2SVG 0.10" "User Commands"
+.TH DWG2SVG "1" "January 2020" "dwg2SVG 0.10.1" "User Commands"
 .SH NAME
-dwg2SVG \- manual page for dwg2SVG 0.10
+dwg2SVG \- manual page for dwg2SVG 0.10.1
 .SH SYNOPSIS
 .B dwg2SVG
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE >SVGFILE\/\fR

diff --git a/programs/dwg2dxf.1 b/programs/dwg2dxf.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWG2DXF "1" "January 2020" "dwg2dxf 0.10" "User Commands"
+.TH DWG2DXF "1" "January 2020" "dwg2dxf 0.10.1" "User Commands"
 .SH NAME
-dwg2dxf \- manual page for dwg2dxf 0.10
+dwg2dxf \- manual page for dwg2dxf 0.10.1
 .SH SYNOPSIS
 .B dwg2dxf
 [\fI\,OPTION\/\fR]... \fI\,DWGFILES\/\fR...

diff --git a/programs/dwg2ps.1 b/programs/dwg2ps.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWG2PS "1" "January 2020" "dwg2ps 0.10" "User Commands"
+.TH DWG2PS "1" "January 2020" "dwg2ps 0.10.1" "User Commands"
 .SH NAME
-dwg2ps \- manual page for dwg2ps 0.10
+dwg2ps \- manual page for dwg2ps 0.10.1
 .SH SYNOPSIS
 .B dwg2ps
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE \/\fR[\fI\,PSFILE\/\fR]

diff --git a/programs/dwgbmp.1 b/programs/dwgbmp.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWGBMP "1" "January 2020" "dwgbmp 0.10" "User Commands"
+.TH DWGBMP "1" "January 2020" "dwgbmp 0.10.1" "User Commands"
 .SH NAME
-dwgbmp \- manual page for dwgbmp 0.10
+dwgbmp \- manual page for dwgbmp 0.10.1
 .SH SYNOPSIS
 .B dwgbmp
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE \/\fR[\fI\,BMPFILE\/\fR]

diff --git a/programs/dwggrep.1 b/programs/dwggrep.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWGGREP "1" "January 2020" "dwggrep 0.10" "User Commands"
+.TH DWGGREP "1" "January 2020" "dwggrep 0.10.1" "User Commands"
 .SH NAME
-dwggrep \- manual page for dwggrep 0.10
+dwggrep \- manual page for dwggrep 0.10.1
 .SH SYNOPSIS
 .B dwggrep
 [\fI\,OPTIONS\/\fR]... \fI\,pattern files\/\fR

diff --git a/programs/dwglayers.1 b/programs/dwglayers.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWGLAYERS "1" "January 2020" "dwglayers 0.10" "User Commands"
+.TH DWGLAYERS "1" "January 2020" "dwglayers 0.10.1" "User Commands"
 .SH NAME
-dwglayers \- manual page for dwglayers 0.10
+dwglayers \- manual page for dwglayers 0.10.1
 .SH SYNOPSIS
 .B dwglayers
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE\/\fR

diff --git a/programs/dwgread.1 b/programs/dwgread.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWGREAD "1" "January 2020" "dwgread 0.10" "User Commands"
+.TH DWGREAD "1" "January 2020" "dwgread 0.10.1" "User Commands"
 .SH NAME
-dwgread \- manual page for dwgread 0.10
+dwgread \- manual page for dwgread 0.10.1
 .SH SYNOPSIS
 .B dwgread
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE\/\fR

diff --git a/programs/dwgrewrite.1 b/programs/dwgrewrite.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWGREWRITE "1" "January 2020" "dwgrewrite 0.10" "User Commands"
+.TH DWGREWRITE "1" "January 2020" "dwgrewrite 0.10.1" "User Commands"
 .SH NAME
-dwgrewrite \- manual page for dwgrewrite 0.10
+dwgrewrite \- manual page for dwgrewrite 0.10.1
 .SH SYNOPSIS
 .B dwgrewrite
 [\fI\,OPTION\/\fR]... \fI\,INFILE \/\fR[\fI\,OUTFILE\/\fR]

diff --git a/programs/dwgwrite.1 b/programs/dwgwrite.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DWGWRITE "1" "January 2020" "dwgwrite 0.10" "User Commands"
+.TH DWGWRITE "1" "January 2020" "dwgwrite 0.10.1" "User Commands"
 .SH NAME
-dwgwrite \- manual page for dwgwrite 0.10
+dwgwrite \- manual page for dwgwrite 0.10.1
 .SH SYNOPSIS
 .B dwgwrite
 [\fI\,OPTION\/\fR]... [\fI\,-o DWGFILE\/\fR] \fI\,INFILE\/\fR

diff --git a/programs/dxf2dwg.1 b/programs/dxf2dwg.1
@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.11.
-.TH DXF2DWG "1" "January 2020" "dxf2dwg 0.10" "User Commands"
+.TH DXF2DWG "1" "January 2020" "dxf2dwg 0.10.1" "User Commands"
 .SH NAME
-dxf2dwg \- manual page for dxf2dwg 0.10
+dxf2dwg \- manual page for dxf2dwg 0.10.1
 .SH SYNOPSIS
 .B dxf2dwg
 [\fI\,OPTION\/\fR]... \fI\,DXFFILES \/\fR...