Import 5.38:
- Always accept -S (no sandbox) even if we don't support sandboxing
- More syscalls elided for sandboxiing
- For ELF dynamic means having an interpreter not just PT_DYNAMIC
- Check f

Import 5.38:
- Always accept -S (no sandbox) even if we don't support sandboxing
- More syscalls elided for sandboxiing
- For ELF dynamic means having an interpreter not just PT_DYNAMIC
- Check for large ELF session header offset
- When saving and restoring a locale, keep the locale name in our
own storage.
- Add a flag to disable CSV file detection.
- Don't pass NULL/0 to memset to appease sanitizers.
- Avoid spurious prints when looks for extensions or apple strings
in fsmagic.
- Add builtin decompressors for xz and and bzip.
- Add a limit for the number of CDF elements.
- More checks for overflow in CDF.

show more ...

2019-05-14 22:26 Christos Zoulas <christos@zoulas.com>

* release 5.37

2019-05-09 22:27 Christos Zoulas <christos@zoulas.com>

* Make sure that continuation separators are printed
with -k w

2019-05-14 22:26 Christos Zoulas <christos@zoulas.com>

* release 5.37

2019-05-09 22:27 Christos Zoulas <christos@zoulas.com>

* Make sure that continuation separators are printed
with -k within softmagic

2019-05-06 22:27 Christos Zoulas <christos@zoulas.com>

* Change SIGPIPE saving and restoring during compression to use
sigaction(2) instead of signal(3) and cache it. (Denys Vlasenko)
* Cache stat(2) calls more to reduce number of calls (Denys Vlasenko)

2019-05-06 17:25 Christos Zoulas <christos@zoulas.com>

* PR/77: Handle --mime-type and -k correctly.

2019-05-03 15:26 Christos Zoulas <christos@zoulas.com>

* Switch decompression code to use vfork() because
tools like rpmdiff and rpmbuild call libmagic
with large process footprints (Denys Vlasenko)

2019-04-07 14:05 Christos Zoulas <christos@zoulas.com>

* PR/75: --enable-zlib, did not work.

2019-02-27 11:54 Christos Zoulas <christos@zoulas.com>

* Improve regex efficiency (Michael Schroeder) by:
1. Prefixing regex searches with regular search
for keywords where possible
2. Using memmem(3) where available

show more ...

2018-10-18 19:32 Christos Zoulas <christos@zoulas.com>

* release 5.35

2018-09-10 20:38 Christos Zoulas <christos@zoulas.com>

* Add FreeBSD ELF core file support (John Baldwin)

2018-08-20 1

2018-10-18 19:32 Christos Zoulas <christos@zoulas.com>

* release 5.35

2018-09-10 20:38 Christos Zoulas <christos@zoulas.com>

* Add FreeBSD ELF core file support (John Baldwin)

2018-08-20 18:40 Christos Zoulas <christos@zoulas.com>

* PR/30: Allow all parameter values to be set (don't treat 0 specially)
* handle default annotations on the softmagic match instead at the
end.

2018-07-25 10:17 Christos Zoulas <christos@zoulas.com>

* PR/23: Recognize JSON files

2018-07-25 10:17 Christos Zoulas <christos@zoulas.com>

* PR/18: file --mime-encoding should not print mime-type

2018-07-25 8:50 Christos Zoulas <christos@zoulas.com>

* release 5.34

2018-06-22 16:38 Christos Zoulas <christos@zoulas.com>

* Add Quad indirect offsets

2018-05-24 14:10 Christos Zoulas <christos@zoulas.com>

* Enable parsing of ELF dynamic sections to handle PIE better

show more ...

Import file-5.31; mostly oss-fuzz found bugs.

2017-02-10 12:24 Christos Zoulas <christos@zoulas.com>

* release 5.30

2017-02-07 23:27 Christos Zoulas <christos@zoulas.com>

* If we exceeded the offset in a search return no match
(Chris

2017-02-10 12:24 Christos Zoulas <christos@zoulas.com>

* release 5.30

2017-02-07 23:27 Christos Zoulas <christos@zoulas.com>

* If we exceeded the offset in a search return no match
(Christoph Biedl)
* Be more lenient on corrupt CDF files (Christoph Biedl)

2017-02-04 16:46 Christos Zoulas <christos@zoulas.com>

* pacify ubsan sign extension (oss-fuzz/524)

2017-02-01 12:42 Christos Zoulas <christos@zoulas.com>

* off by one in cdf parsing (PR/593)
* report debugging sections in elf (PR/591)

2016-11-06 10:52 Christos Zoulas <christos@zoulas.com>

* Allow @@@ in extensions
* Add missing overflow check in der magic (Jonas Wagner)

2016-10-25 10:40 Christos Zoulas <christos@zoulas.com>

* release 5.29

2016-10-24 11:20 Christos Zoulas <christos@zoulas.com>

* der getlength overflow (Jonas Wagner)
* multiple magic file load failure (Christoph Biedl)

2016-10-17 11:26 Christos Zoulas <christos@zoulas.com>

* CDF parsing improvements (Guy Helmer)

2016-07-20 7:26 Christos Zoulas <christos@zoulas.com>

* Add support for signed indirect offsets

2016-07-18 7:41 Christos Zoulas <christos@zoulas.com>

* cat /dev/null | file - should print empty (Christoph Biedl)

2016-07-05 15:20 Christos Zoulas <christos@zoulas.com>

* Bump string size from 64 to 96.

2016-06-13 20:20 Christos Zoulas <christos@zoulas.com>

* PR/556: Fix separators on annotations.

2016-06-13 19:40 Christos Zoulas <christos@zoulas.com>

* release 5.28
* fix leak on allocation failure

2016-06-01 1:20 Christos Zoulas <christos@zoulas.com>

* PR/555: Avoid overflow for offset > nbytes
* PR/550: Segv on DER parsing:
- use the correct variable for length
- set offset to 0 on failure.

2016-05-13 12:00 Christos Zoulas <christos@zoulas.com>

* release 5.27

2016-04-18 9:35 Christos Zoulas <christos@zoulas.com>

* Errors comparing DER entries or computing offsets
are just indications of malformed non-DER files.
Don't print them.
* Offset comparison was off-by-one.
* Fix compression code (Werner Fink)
* Put new bytes constant in the right file (not the generated one)

2016-04-16 18:34 Christos Zoulas <christos@zoulas.com>

* release 5.26

2016-03-31 13:50 Christos Zoulas <christos@zoulas.com>

* make the number of bytes read from files configurable.

2016-03-21 13:40 Christos Zoulas <christos@zoulas.com>

* Add bounds checks for DER code (discovered by Thomas Jarosch)
* Change indirect recursion limit to indirect use count and
bump from 15 to 50 to prevent abuse.

2016-03-13 20:39 Christos Zoulas <christos@zoulas.com>

* Add -00 which prints filename\0description\0

2016-03-01 13:28 Christos Zoulas <christos@zoulas.com>

* Fix ID3 indirect parsing

2016-01-19 10:18 Christos Zoulas <christos@zoulas.com>

* add DER parsing capability

2015-11-13 10:35 Christos Zoulas <christos@zoulas.com>

* provide dprintf(3) for the OS's that don't have it.

2015-11-11 16:25 Christos Zoulas <christos@zoulas.com>

* redo the compression code report decompression errors

2015-11-10 23:25 Christos Zoulas <christos@zoulas.com>

* REG_STARTEND code is not working as expected, delete it.

2015-11-09 16:05 Christos Zoulas <christos@zoulas.com>

* Add zlib support if we have it.

2015-11-05 11:22 Christos Zoulas <christos@zoulas.com>

* PR/492: compression forking was broken with magic_buffer.

2015-09-16 9:50 Christos Zoulas <christos@zoulas.com>

* release 5.25

2015-09-11 13:25 Christos Zoulas <christos@zoulas.com>

* add a limit to the length of regex searches

2015-09-08 9:50 Christos Zoulas <christos@zoulas.com>

* fix problems with --parameter (Christoph Biedl)

2015-07-11 10:35 Christos Zoulas <christos@zoulas.com>

* Windows fixes PR/466 (Jason Hood)

2015-07-09 10:35 Christos Zoulas <christos@zoulas.com>

* release 5.24

2015-06-11 8:52 Christos Zoulas <christos@zoulas.com>

* redo long option encoding to fix off-by-one in 5.23

2015-06-10 13:50 Christos Zoulas <christos@zoulas.com>

* release 5.23

2015-06-09 16:10 Christos Zoulas <christos@zoulas.com>

* Fix issue with regex range for magic with offset
* Always return true from mget with USE (success to mget not match
indication). Fixes mime evaluation after USE magic
* PR/459: Don't insert magic entries to the list if there are parsing
errors for them.

2015-06-03 16:00 Christos Zoulas <christos@zoulas.com>

* PR/455: Add utf-7 encoding

2015-06-03 14:30 Christos Zoulas <christos@zoulas.com>

* PR/455: Implement -Z, look inside, but don't report on compression
* PR/454: Fix allocation error on bad magic.

2015-05-29 10:30 Christos Zoulas <christos@zoulas.com>

* handle MAGIC_CONTINUE everywhere, not just in softmagic

2015-05-21 14:30 Christos Zoulas <christos@zoulas.com>

* don't print descriptions for NAME types when mime.

2015-04-09 15:59 Christos Zoulas <christos@zoulas.com>

* Add --extension to list the known extensions for this file type
Idea by Andrew J Roazen

2015-02-14 12:23 Christos Zoulas <christos@zoulas.com>

* Bump file search buffer size to 1M.

2015-01-09 14:35 Christos Zoulas <christos@zoulas.com>

* Fix multiple issues with date formats reported by Christoph Biedl:
- T_LOCAL meaning was reversed
- Arithmetic did not work
Also stop adjusting daylight savings for gmt printing.

2015-01-05 13:00 Christos Zoulas <christos@zoulas.com>

* PR/411: Fix memory corruption from corrupt cdf file.

show more ...

Import file-5.22

import file-5.20; bug fixes and better image magic descriptions.

import file-5.19

2014-06-09 9:04 Christos Zoulas <christos@zoulas.com>

* Misc buffer overruns and missing buffer size tests in cdf parsing
(Francisco Alonso, Jan Kaluza)

2014-06-02 14:50

import file-5.19

2014-06-09 9:04 Christos Zoulas <christos@zoulas.com>

* Misc buffer overruns and missing buffer size tests in cdf parsing
(Francisco Alonso, Jan Kaluza)

2014-06-02 14:50 Christos Zoulas <christos@zoulas.com>

* Enforce limit of 8K on regex searches that have no limits
* Allow the l modifier for regex to mean line count. Default
to byte count. If line count is specified, assume a max
of 80 characters per line to limit the byte count.
* Don't allow conversions to be used for dates, allowing
the mask field to be used as an offset.

2014-05-30 12:51 Christos Zoulas <christos@zoulas.com>

* Make the range operator limit the length of the
regex search.

2014-05-14 19:23 Christos Zoulas <christos@zoulas.com>

* PR/347: Windows fixes
* PR/352: Hangul word processor recognition
* PR/354: Encoding irregularities in text files

2014-05-06 6:12 Christos Zoulas <christos@zoulas.com>

* Fix uninitialized title in CDF files (Jan Kaluza)

2014-05-04 14:55 Christos Zoulas <christos@zoulas.com>

* PR/351: Fix compilation of empty files

2014-04-30 17:39 Christos Zoulas <christos@zoulas.com>

* Fix integer formats: We don't specify 'l' or
'h' and 'hh' specifiers anymore, only 'll' for
quads and nothing for the rest. This is so that
magic writing is simpler.

2014-04-01 15:25 Christos Zoulas <christos@zoulas.com>

* PR/341: Jan Kaluza, fix memory leak
* PR/342: Jan Kaluza, fix out of bounds read

2014-03-28 15:25 Christos Zoulas <christos@zoulas.com>

* Fix issue with long formats not matching fmtcheck

show more ...

from ftp.astron.com

from ftp.astron.com, CDF security fixes

from ftp.astron.com.
- many security related fixes
- no MAXPATHLEN limits
- fixed missing text specification on ascii magic
- new ``pascal'' style string formats
- whitespace comparison fix
- more ma

from ftp.astron.com.
- many security related fixes
- no MAXPATHLEN limits
- fixed missing text specification on ascii magic
- new ``pascal'' style string formats
- whitespace comparison fix
- more magic

show more ...

from ftp.astron.com