Commit Graph

2429 Commits

Author SHA1 Message Date
Tatsuya Kinoshita f46aa6769f Merge pull request #202 from bptato/dl
Fix stack overflow due to closing dd tags
2021-10-27 00:39:28 +09:00
Tatsuya Kinoshita 7f8b4f9fcd Merge pull request #197 from rkta/table_vla_size_again
Ensure VLA size is at least one (again)
2021-10-27 00:38:55 +09:00
Kuang-che Wu b0ebd5737e fix StrStream memory leak
ISclose() doesn't free memory if a stream's function pointer, close, is NULL.
However, str_stream's close pointer is always NULL and thus leaks
memory.
2021-10-26 16:28:37 +08:00
bptato fa02254a6a Fix description title rendering (again) 2021-10-19 20:37:07 +02:00
bptato 3e5aa3790b Revert changes introducing #198 stack-overflow in HTMLlineproc0 2021-10-19 19:55:58 +02:00
Rene Kita e9f5910f1f Ensure VLA size is at least one (again)
This is the same issue as commit 12c7b62a42 and should have been
included there.

'maxcol' can be -1 which results in a size of 0. The array is never
accessed with 'maxcol < 0', but zero length variable length arrays are
undefined behaviour.
2021-10-04 10:00:04 +02:00
Tatsuya Kinoshita b201f426e4 Update ChangeLog 2021-09-18 20:53:40 +09:00
Tatsuya Kinoshita b8a443130c Merge pull request #193 from rkta/asn1_string_manipulation
Fix manipulation of ASN1_STRING
2021-09-18 20:52:37 +09:00
Rene Kita cab914ef48 Fix manipulation of ASN1_STRING
Take the correct type from ASN1_STRING_get0_data() to fix a warning.
IA5Strings are ASCII, we do not need to care about signedness.

Since the pointer returned by ASN1_STRING_get0_data() points to internal
memory of the ASN1_STRING we are not allowed to manipulate the data.
Also it is not guaranteed that the data is null terminated. Copy the
data to our own buffer and make sure it is null terminated before using
it.
2021-09-13 10:04:49 +02:00
Tatsuya Kinoshita 456ec66be8 Update ChangeLog 2021-09-05 18:49:15 +09:00
Tatsuya Kinoshita ef493bd91a Merge pull request #192 from rkta/table_ensure_vla_size_is_greater_0
Ensure VLA size is at least one
2021-09-05 18:46:11 +09:00
Rene Kita 12c7b62a42 Ensure VLA size is at least one
Compiling with GCC 10.2 with -fsanitize=address,undefined valgrind
and opening the 'opions panel' reports:
table.c:1632:8: runtime error: variable length array bound evaluates to non-positive value 0
table.c:1266:11: runtime error: variable length array bound evaluates to non-positive value 0
table.c:1267:12: runtime error: variable length array bound evaluates to non-positive value 0

'maxcell' is initialized to -1 which results in a size of 0 during the
first iteration. Though the array is only accessed if maxcell >= 0,
using a variable length array with a size < 1 is undefined behaviour
(see e.g. C99 6.7.5.2,p5).

This closes issue #51 .
2021-09-02 10:32:44 +02:00
Tatsuya Kinoshita 5234c45fa3 Update ChangeLog 2021-08-30 20:20:20 +09:00
Tatsuya Kinoshita b71c5ec462 Fix incorrect query string for w3mman 7z
Bug-Debian: https://github.com/tats/w3m/issues/191
2021-08-30 20:19:07 +09:00
Tatsuya Kinoshita 0fb72f72ea Update ChangeLog 2021-08-19 19:34:04 +09:00
Tatsuya Kinoshita e74aa1c96b Merge pull request #189 from augustogunsch/master
Update README.tab
2021-08-19 19:33:01 +09:00
Augusto Gunsch ac47193ce6 Fix wrong quote character 2021-08-15 15:29:03 -03:00
Augusto Gunsch 0a8a7c7516 Make spacing more consistent 2021-08-15 15:27:27 -03:00
Augusto Gunsch ecc89bc8b5 Update default tab navigation keybindings 2021-08-15 15:18:54 -03:00
Tatsuya Kinoshita c87a5476de Update ChangeLog 2021-07-17 13:23:27 +09:00
Tatsuya Kinoshita 283ed66937 Enable Italian translation 2021-07-17 13:20:55 +09:00
Tatsuya Kinoshita 7271fbf0ad Update PO information 2021-07-17 13:20:36 +09:00
Tatsuya Kinoshita 7197874a4b Merge pull request #187 from scardracs/master
Add italian translation
2021-07-17 13:16:57 +09:00
Marco Scardovi f9437e5a8d Add italian translation
Hi there, I'm italian mother tongue and that's my translation from
english to italian. Hope you will merge it
2021-07-15 08:36:28 +02:00
Tatsuya Kinoshita a493fdc2d1 Update ChangeLog 2021-07-03 15:42:10 +09:00
Tatsuya Kinoshita e306b23f9d Update PO strings 2021-07-03 15:28:22 +09:00
Tatsuya Kinoshita c3784c9d26 New option disable_center to disable center alignment
Bug-Debian: https://github.com/tats/w3m/issues/175
Bug-Debian: https://github.com/tats/w3m/issues/185
2021-07-03 15:00:18 +09:00
Tatsuya Kinoshita ce158a2f92 Update ChangeLog 2021-06-21 19:25:11 +09:00
Tatsuya Kinoshita bf8c4254a5 Add information of Debian's libsixel-bin package
Bug-Debian: https://github.com/tats/w3m/pull/184
2021-06-21 19:18:57 +09:00
Tatsuya Kinoshita 1cadfaee33 Update ChangeLog 2021-06-05 18:03:44 +09:00
Tatsuya Kinoshita 6241fc23ec Merge pull request #183 from lalten/fix-gc-link
Fix link to hboehm's gc library
2021-06-05 18:01:43 +09:00
Laurenz c6111f4fe9 Fix link to hboehm's gc library 2021-05-26 16:29:59 +02:00
Tatsuya Kinoshita f9be06a158 Update ChangeLog 2021-05-16 20:20:24 +09:00
Tatsuya Kinoshita 23df23e4e5 Prevent GC warnings of repeated allocation in fuzzer 2021-05-16 20:18:30 +09:00
Tatsuya Kinoshita 89e1f0715b Merge pull request #182 from bptato/inlineimages
Fix null pointer dereference in put_image_kitty
2021-05-16 20:17:18 +09:00
bptato 9e33f9ee12 Fix null pointer dereference in put_image_kitty 2021-05-16 11:25:53 +02:00
Tatsuya Kinoshita 331e3f49b1 Update ChangeLog 2021-04-24 23:41:35 +09:00
Tatsuya Kinoshita 56ce2a2cc8 Prevent integer overflow due to fontstat 2021-04-24 23:39:52 +09:00
Tatsuya Kinoshita 38c043f50f Check length of hostname with STR_SIZE_MAX 2021-04-24 23:39:34 +09:00
Tatsuya Kinoshita ca187b709c Update ChangeLog 2021-04-23 20:20:21 +09:00
Tatsuya Kinoshita 59ea885da0 Treat 127.0.0.1, [::1], and hostname as localhost 2021-04-23 20:16:50 +09:00
Tatsuya Kinoshita 552dff061b Update ChangeLog 2021-04-17 17:51:04 +09:00
Tatsuya Kinoshita 40b0687725 Update PO strings 2021-04-17 17:50:25 +09:00
Tatsuya Kinoshita 17a3df7440 New option localhost_only to restrict connections only to localhost
Bug-Debian: https://github.com/tats/w3m/issues/117
2021-04-17 17:42:01 +09:00
Tatsuya Kinoshita 4e9fec551f Update ChangeLog 2021-04-10 22:36:22 +09:00
Tatsuya Kinoshita 26ef4c0a4e Update PO strings 2021-04-10 22:32:59 +09:00
Tatsuya Kinoshita 22d33dc8c9 New option cross_origin_referer to use origin only Referer 2021-04-10 22:29:18 +09:00
Tatsuya Kinoshita 4e0375c76f Don't include username in Referer 2021-04-10 12:19:58 +09:00
Tatsuya Kinoshita 4e2cfffd88 Don't set Referer when data URI scheme 2021-04-10 11:14:26 +09:00
Tatsuya Kinoshita 8276cf5afa Update ChangeLog 2021-04-05 22:45:15 +09:00