- Handle .csv files with any combination of unquoted fields, quoted
fields with embedded newlines, fields ending in ", embedded "\n
strings (the most fun), all on the same line.
- Vow to hunt down and kill anyone producing such files.
Extract from History.550:
- generic (inflate.c, globals.h, fileio.c, unzpriv.h): integrated support of
Deflate64
- added Deflate64 support to fUnZip
- SFX: made SFX_EXDIR default, added NO_SFXEXDIR option to allow switching
off the "-d exdir" support
- SFX: added simple "execute command after extraction" feature that uses a
command specification supplied with the Zip archive comment, controlled
by the CHEAP_SFX_AUTORUN compile time option
- SFX: slightly refined the CHEAP_SFX_AUTORUN code, switched off SFX_EXDIR
when CHEAP_SFX_AUTORUN is enabled, documented the new autorun feature
- extract.c, TestExtraField(): added crc32 check for PKVMS e.f. type
- extract.c, extract_or_test_entrylist(): added code for "stripping off
absolute path spec" when extracting
- unzip.h, unzip.c; mapname() in all ports except CMS/MVS, Tandem, TOPS20:
added code to strip "../" path components from extracted names and new
option "-:" to allow deactivating this security feature; changed mapname()
calling interface to allow reporting warning error levels to caller
- unzpriv.h, zipinfo.c: rudimentary support for recognizing PKWARE's new
"64-bit size specs" extra field
As well as bug fixes, including the USE_ZLIB problem.
and buildlinked by me.
Changes:
Now distributed under the GPL.
All .fas files generated by previous CLISP versions are invalid
and must be recompiled.
Hostname resolution is now optional in EXT:SOCKET-STREAM-PEER and
EXT:SOCKET-STREAM-LOCAL. EXT:SOCKET-STATUS now accepts SOCKET-SERVERs too,
and the direction of the checks can be specified. Added install.bat for
win32 installation. Fixed handling of circular structs and pointers to
functions in the FFI. Fixed binary I/O for streams with element type longer
than one byte, but not a whole number of bytes.
update does not break the fetch. Improve the method used to insert GNU
patch into the installed package. Update fixes include:
* A set of changes to support "mawk".
If "awk" is "mawk", certain Posix regexps that were used by
arch aren't handled, causing commands to fail. These have
been replaced with regexps that all awks should understand.
(Patch from Jan Harkes.)
* LC_ (locale) environment variables are now set more carefully.
(Reported by Federico Di Gregorio.)
* A new command, `make-sync-tree' has been added.
See "http://www.regexps.com/src/docs.d/arch/html/sync.html".
* The "Standard-date:" field in log messages is now GMT
and includes the time-of-day.
(Suggested by Daniele Nicolodi.)
* Remaining (reported) Solaris portability problems fixed.
(Patches from Jonathan Geisler.)
* CDPATH is unset in `larch'
If CDPATH is set, with some shells, `cd' produces unwanted
output. Therefore, `larch' unsets CDPATH. (Reported by
John Ellson, diagnosed by Lele Gaifax.)
* Various minor bug fixes. Among these are the configuration
system changes requested by people who have tried building
on cygwin, though I'm certain there's much more to be done
before arch actually works on cygwin.
* Naming Conventions Tweaked
Source files can now begin with "_" and must not end with ".a" or
".o". The names "CVS.adm", "SCCS", and "RCSLOG" have been added to
the list of "not a source file". (reported by several people).
Someone asked to also exclude some compiler intermediate
files, such as "y.tab.c" -- I've not done that because it
is common practice to distribute such files with programs
to make bootstrapping easier.
* user id syntax liberalized
"_" is now permitted in the unique id part of a user id. This is
really a partial fix -- `valid-id' should agree precisely with
various standards on what is a legal email address and domain
name, but the more extensive fix is being postponed until a
more complete review of all of the naming convention functions
takes place. (Reported by don_dayley.)
* valid-log-file error message clarified
In response to user confusion, `valid-log-file' now reports
errors like:
missing (or empty) "Summary:" header
instead of just
missing "Summary:" header
(Reported by several people.)
* bugs in the hackerlab "tests/arrays-tests" and "tests/fs-tests" have
been fixed (Reported and patched by Matthias Neeracher).
* an awk syntax error in `log-header-field' has been fixed
(Reported and patch by Jan Harkes.)
* You can now use an alternative shell for configuration
"config.status" files now start with "#!" lines and the
"src/build-tools/scripts" configuration scripts use an
explicitly chosen shell to call each other. The top-level
configure script now accepts a "--config-shell SHELL" option.
This is a small step towards cygwin portability, and eases
some of the portability constraints on "configure" for systems
where "/bin/sh" is not quite posix.
(Reported by Jason Diamond and others.)
* added a --pull option to push-mirror
The new option speeds up the case of pushing from a remote archive
to a local mirror.
* avoid dirent portability problems
Some portability problems in libhackerlab's use of dirent have been
fixed. (Reported by several people.)
* `star-merge --finish' was broken.
Now it isn't.
* `prepare-branch': bug fix from geisler
* `reconcile': bug fix from geisler
* `whats-missing': bug fix from geisler
- Corrected the MacHTTP log format, which didn't work in 5.2.
- All the BARSTYLEs redrawn, and two new BARSTYLEs added, adapted from
an idea by Dave Holle. (You will have to move the new graphics into your
IMAGEDIR in order to use them.)
Fixes several known bugs, as well as a cross-site scripting vulnerability
(discovered by Flavio Veloso of Magnux Software), that could allow
malicious HTML tags to be injected in the reports generated by the Webalizer.
This release also includes several new and updated language files. All users
are encouraged to upgrade as soon as possible.
Not all NetBSD platforms support joysticks. Based on ones which are active
in their GENERIC config's only have those actually compile in NetBSD specific
joystick support. For the rest let the generic joystick support get pulled
in (and then fail to probe so the code will disable it anyways).
Otherwise this fails on any system without <machine/joystick.h>
XXX...This really should be redone at some point since it's messy now and
the original code looks like it had the concept of no joystick support in
the first place.
- replace a hack adding fd_mask definition in autoconf.h with re-writing
configure script. It cause to run configure twice and result "no fd_mask".
- Incorporate three official patches from
http://www.squid-cache.org/Versions/v2/2.4/bugs/.
o SNMP memory leaks
synopsis
The SNMP implementation in Squid had several memory leaks
possibly causing an denial of service.
workaround
Disable the SNMP port if enabled by using "snmp_port 0" in
squid.conf. Or if you only use SNMP for MRTG data
collection running on the same host then use
"snmp_incoming_address 127.0.0.1" to limit reachability
of the SNMP port to only localhost or some other trusted
network.
o Coredump on certain ftp:// style URL's
synopsis
If certain constructed ftp:// style URL's are received then
squid crashes, causing a denial of service and maybe even
remote execution of code.
workaround
Deny forwarding of non-anonymous FTP URLs by inserting
the following rules at the top of squid.conf, prior to
any http_access allow lines.
acl non_anonymous_ftp url_regex -i ftp://[^/@]*@
http_access deny non_anonymous_ftp
o "htcp_port 0" fails to disable the HTCP port
synopsis
"htcp_port 0" fails to completely disable the HTCP port as
documented in squid.conf, instead HTCP will be listening on
a random port number.
Summary of changes:
- removal of USE_GTEXINFO
- addition of mk/texinfo.mk
- inclusion of this file in package Makefiles requiring it
- `install-info' substituted by `${INSTALL_INFO}' in PLISTs
- tuning of mk/bsd.pkg.mk:
removal of USE_GTEXINFO
INSTALL_INFO added to PLIST_SUBST
`${INSTALL_INFO}' replace `install-info' in target rules
print-PLIST target now generate `${INSTALL_INFO}' instead of `install-info'
- a couple of new patch files added for a handful of packages
- setting of the TEXINFO_OVERRIDE "switch" in packages Makefiles requiring it
- devel/cssc marked requiring texinfo 4.0
- a couple of packages Makefiles were tuned with respect of INFO_FILES and
makeinfo command usage
See -newly added by this commit- section 10.24 of Packages.txt for
further information.
- The ippRead() function did not verify that the
attribute name length or string with language value
was not larger than the read buffer.
- The scheduler set the signal handlers before loading
the configuration files the first time; this prevented
the RunAsUser directive from blocking server reloads.
- Added Swedish message catalog.
- The parallel backend now recognizes the /dev/printers
device directory under Linux 2.4.x.
- MacOS X fixes.
- The cupsaddsmb utility sent the server name after the
user information when executing the rpcclient program.
This caused problems with some versions of SAMBA
2.2.x.
- The IPP backend did not pass the requesting user name
when checking on the print job status. This prevented
it from waiting for the job to complete when
communicating with some IPP implementations that
require it.
invokes makeinfo without a leading path which will pick up either the system
one or the pkgsrc depending on the users path. To remain consistant force
the patch to LOCALBASE/bin as the first component when building this as older
versions of makeinfo cannot handle the doc files included here.
