aboutsummaryrefslogtreecommitdiff
path: root/archivers/cabextract
Commit message (Collapse)AuthorAgeFilesLines
* - Trim Makefile header per new bylawsAlexey Dokuchaev2012-12-211-11/+13
| | | | | | | | | | | | - Drop indefinite article from COMMENT - Define LICENSE (and remove COPYING from portdocs) - Unmute installation commands - Convert NOPORTDOCS -> PORT_OPTIONS:MDOCS Approved by: maintainer (gabor) Notes: svn path=/head/; revision=309340
* - Update to 1.4Gabor Kovesdan2011-06-112-3/+3
| | | | Notes: svn path=/head/; revision=275403
* - Get Rid MD5 supportMartin Wilke2011-03-181-1/+0
| | | | | | | With hat: portmgr (myself) Notes: svn path=/head/; revision=271274
* Update to 1.3, which fixes two security bugs. Detailed descriptionGabor Kovesdan2010-07-292-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | from the author follows. Bug 1: Infinite loop in MS-ZIP decoder [1] The MS-ZIP and Quantum decoders read bits in roughly the same way as the LZX decoder, however they don't have "inject two fake bytes" code. In the situation where read() provides zero bytes, e.g. at the end of file or end of a CAB block, the LZX decoder handles this by injecting two fake bytes, then returns an error on subsequent calls. MS-ZIP and Quantum instead return zero bytes without error. However, all three decoders are written to presume they will get at least one byte. So this could lead to an infinite loop in MS-ZIP and Quantum. An infinite loop has definitely been seen in MS-ZIP - there is a while loop in inflate() of an uncompressed block (block type 0) which won't end until enough input is provided. Partial solution: change "if (read < 0)" to "if (read <= 0)" in mszipd.c and qtmd.c. - http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=90 However, this breaks compatibility with a number of MS-ZIP/Quantum encoded files. A full solution would be to implement the same bit-reading system as LZX. I've done this now, merging all the bit-reading and huffman-reading code into two new files; readbits.h and readhuff.h - http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=95 There are several further changes made to integrate readbits.h and readhuff.h, I recommend you look at the latest version in the source repository. - http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/ Bug 2: Segmentation fault in "cabextract -t" This bug may not affect you, depending on your implementation of mspack_system->write(). It does cause a segfault in cabextract's cabx_write() in "-t" (test archive) mode. In the Quantum decoder, when the window wrap is reached, all currently unwritten data is flushed to disk. Sometimes, less data is needed than is flushed, which makes the variable out_bytes negative. When the main decoding loop finishes, a final call to write() is made if out_bytes is not zero. In that situation, it calls mspack_system->write() with a negative byte count, e.g. -129 bytes. You should reject this. In cabextract's "-t" mode, this is not caught, but instead converted to an unsigned integer and passed to md5_process_bytes(), which tries to read e.g. 4294967167 bytes, causing it to read beyond the end of valid process space and thus segfault. Solution: - Break out to the end of the decoding loop immediately if the flush would be more than needed. http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113 - Add checking of the "bytes" argument in mspack_system read() / write() implementations, just to be sure. http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118 Security: SA40719 [1] Notes: svn path=/head/; revision=258453
* - Remove USE_GETOPT_LONG which is a no-op since March 2007Pav Lucistnik2008-03-201-1/+0
| | | | Notes: svn path=/head/; revision=209417
* Update MASTER_SITE and description to point to the new home page.Maxim Sobolev2007-08-072-3/+7
| | | | | | | Submitted by: Stuart Caie (author) Notes: svn path=/head/; revision=197304
* - Update to 1.2Gabor Kovesdan2007-01-023-133/+17
| | | | | | | | | | - Remove unnecessary patch - Style Approved by: erwin (mentor) Notes: svn path=/head/; revision=181297
* Change my e-mail address.Gabor Kovesdan2006-12-081-1/+1
| | | | | | | Approved by: erwin (mentor) Notes: svn path=/head/; revision=179182
* - Don't override CONFIGURE_TARGET, it compiles without thatErwin Lansing2006-09-101-4/+8
| | | | | | | | | | | | | - Add some more PORTDOCS - Respect MAN1PREFIX - Bump PORTREVISION - Take maintainership PR: 103103 Submitted by: Gabor Kovesdan <gabor@FreeBSD.org> Notes: svn path=/head/; revision=172718
* - Add SHA256Pav Lucistnik2005-11-231-0/+1
| | | | Notes: svn path=/head/; revision=149223
* At Kris's request, back out the MACHINE_ARCH spelling correction untilDavid E. O'Brien2005-04-121-1/+1
| | | | | | | after 5.4-RELEASE. Notes: svn path=/head/; revision=133116
* Assist getting more ports working on AMD64 by obeying theDavid E. O'Brien2005-04-111-1/+1
| | | | | | | Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'. Notes: svn path=/head/; revision=132992
* Update to version 1.1.OKAZAKI Tetsurou2004-10-234-4/+124
| | | | | | | | PR: 72817 Submitted by: KATO Tsuguru Notes: svn path=/head/; revision=120021
* - Update to version 1.0Kirill Ponomarev2004-03-162-6/+18
| | | | | | | | PR: ports/64328 Submitted by: Ports Fury Notes: svn path=/head/; revision=104158
* Use PLIST_FILES.Trevor Johnson2004-02-052-1/+1
| | | | | | | Reviewed by: marcus Notes: svn path=/head/; revision=100076
* Add SIZE.Trevor Johnson2004-01-271-0/+1
| | | | Notes: svn path=/head/; revision=99295
* Let be hohest: I really don't have a time now to properly maintain allMaxim Sobolev2003-07-291-1/+1
| | | | | | | | these great pieces of software, so that let others with more free time to take over them. Notes: svn path=/head/; revision=85841
* get rid of libgnugetopt dependency for -CURRENT,FUJISHIMA Satsuki2003-07-141-4/+2
| | | | | | | use USE_GETOPT_LONG instead. Notes: svn path=/head/; revision=84842
* Clear moonlight beckons.Ade Lovett2003-03-072-1/+1
| | | | | | | | | | Requiem mors pacem pkg-comment, And be calm ports tree. E Nomini Patri, E Fili, E Spiritu Sancti. Notes: svn path=/head/; revision=77045
* Update to 0.6.Maxim Sobolev2002-08-303-18/+4
| | | | | | | | PR: 41729 Submitted by: Ports Fury Notes: svn path=/head/; revision=65285
* Update to 0.5.Maxim Sobolev2001-08-273-13/+13
| | | | | | | Submitted by: petef Notes: svn path=/head/; revision=46958
* Update to 0.4.Maxim Sobolev2001-08-203-17/+6
| | | | Notes: svn path=/head/; revision=46511
* Update to 0.3.Maxim Sobolev2001-08-073-2/+31
| | | | Notes: svn path=/head/; revision=45923
* Update to 0.2.Maxim Sobolev2001-03-062-16/+4
| | | | Notes: svn path=/head/; revision=39127
* Add cabextract - a program to extract Microsoft cabinet (.CAB) files.Maxim Sobolev2000-11-305-0/+37
Notes: svn path=/head/; revision=35540
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-16 17:59:48 +0000