view release on metacpan or  search on metacpan

unzip-6.0/History.600  view on Meta::CPAN

 - AOS/VS, Atari, AtheOS, BeOS, UNIX (and unzpriv.h, fileio.c): modified the
    symlink code to use the opened outfile handle for re-reading the symlink
    target data; modified open_outfile to allow read access on outfile handle
    (security fix against "ToCToU" vulnerability) [Chr. Spieler]
 - UNIX (unix.c, Makefile, configure): fixed "ToCToU" security vulnerability
    in close_outfile by using fchown() & fchmod() instead of chown() & chmod()
    (only when available); added check for function existence to configure
    [Dan Yefimov, Matthias Scheler, Chr. Spieler]
 - fileio.c - open_outfile(): deny access for group&world to currently open
    outfile on all systems that support umask() (AOS/VS, Atari, AtheOS, BeOS,
    QDOS, Tandem, UNIX) [Chr. Spieler]
 - unzpriv.h, fileio.c - open_outfile(): open outfile in "write update" mode
    when supporting symlinks or QLZIP extensions; these features require the
    ability to reread the opened outfile [Chr. Spieler]
 - fileio.c: added WriteTxtErr() macro to allow differenciating between
    text-mode write function calls (in UzpMessagePrnt()) and binary write calls
    (everywhere else) [Chr. Spieler]
 - fileio.c, VMS only: use fprintf() instead of (f)write in WriteTxtErr(), to
    work around RMS record handling problem (e.g. when using PIPE to redirect
    messages) [Steven M. Schweda]
 - UNIX port: revised unix/configure and unix/Makefile for better integration
    of automatic configuration in the build procedure [Chr. Spieler]

6.00c14 (15 Nov 05):
 - VMS, descrip.mms: repaired CLEAN_ALL target which did not always delete
    all expected files  [Steven M. Schweda]
 - unzip.c, fixes for online help screen: corrected "-v" description and moved
    it from modifier section into options section, added description of "-T"
    option, removed the "DLL && API_DOC"-only description of the "-A extended
    API help" option [Chr. Spieler, Steven M. Schweda]
 - man/unzip.1: minor corrections in wording of "-v" option description
    [Chr. Spieler, Steven M. Schweda]

6.00c15 (17 Nov 05):
 - vms/vms.c: fixed do_wild() logic error introduced in August 2005,
    sys$search fails (at least on VAX) when not preceeded by a sys$parse
    call with "syntax-check-only" flag cleared [Steven M. Schweda]
 - process.c: cosmetic change in process_zipfiles() to shut-up gcc warning
    on non-UNIX (non-QDOS) systems [Chr. Spieler]

6.00c (19 Nov 05):
 - extract.c, bzip2 support: fixed missing ";" error (was only a problem
    when enabling BZIP2 support without LARGE_FILE support); added some
    (cosmetic) typecasts to shut up compiler warnings [Steven M. Schweda]
 - VMS support for BZIP2 decompression: updated make procedures and scripts,
    added "find_bzip2_dir" helper script and bzlib.h include file wrapper
    [Steven M. Schweda]

6.00d01 (04 Mar 07):
 - extract.c: replaced local wsize variable (DLL only) by reference to the
    "global" variable G._wsize [Chr. Spieler]
 - unzpriv.h: use fputs() instead of fprintf() as output function in the
    FUNZIP variant of the Info() macro, to prevent misinterpreting format
    specifiers in the sprintf() output. [Martin Pitt, ubuntu]
 - unix/unix.c: added detailed compiler version info for SunPro cc, HP cc,
    DEC cc. [Steven M. Schweda]
 - vms/descrip.mms: added support for architecture detection macro symbols
    built into newer versions of MMK (a MMS clone).  [Steven M. Schweda]
 - fileio.c - is_vms_varlen_txt(): commented out the currently unused code for
    determining the VMS fileorg setting. [Steven M. Schweda]
 - extract.c - extract_or_test_files(): the "back at endsig" checking code
    is not used for the SFX stub. [Steven M. Schweda]
 - win32: changed all Win32-API calls with string parameters to explicitely use
    the ANSI variant; this removes the dependency on the UNICODE and _UNICODE
    compile flags being undefined.  [NN, Chr. Spieler]
 - zipinfo.c: on WIN32, archive filename display must be fed through codepage
    translation. [Chr. Spieler]
 - zipinfo.c - zipinfo(): repaired several memory leaks when the listing loop
    is stopped prematurely because of inner errors. [Chr. Spieler]
 - crc32.c, crc32.h, crc_i386.S, crc_i386.asm, crc_i386.c: comprehensive
    revision of crc32 calculation, implementing the optimized algorithms from
    the zlib source code which depend on specific machine architecture
    characteristics (removed crctab.c, added crc32.h).  [Chr. Spieler]
 - crypt.c, crypt.h: adapted to the modifications of crc32.  [Chr. Spieler]
 - msdos, win32, vms, unix: enabled optimized crc32 algorithms on i386, VAX,
    and AXP architectures.  [Chr. Spieler]
 - win32/nt.c: tried to fix mutex handle leak in Initialize().
    [Johnny Lee, Chr. Spieler]
 - vms/vms.c - check_format(): added system error message to sys$open failure
    message. [Steven M. Schweda]
 - wince/intrface.cpp - checkdir(): corrected typo ('0' should be '\0')
    [Shawn Carey]
 - wince/wcemain.c - WinMain(): correct the removal code for enclosing argument
    quotes. [Shawn Carey, Chr. Spieler]
 - os2, win32 - checkdir(): fixed buffer overflow security bug for FAT-style
    buildpath, optimized code by removing overflow checks inside the copy loops
    [Johnny Lee, Chr. Spieler]
 - win32/win32.c - VFatFileTime2utime(): fixed return data generation in error
    branch for the "input time stamp cannot be converted to local time" case
    [Steve Youngs]
 - added new compression methods and e.f. IDs from PKWARE Appnote 6.3.0 as of
    2006-09-29  [Chr. Spieler]
 - extract.c - extract_or_test_files(): remove dead branch in the code section
    handling archive test summary messages.  [Chr. Spieler]
 - fileio.c - zstrnicmp(): added (uch) typecasts to comparison, to improve
    "compatibility" with "extended ASCII characters".  [Chr. Spieler]
 - vms: use CRTL-supplied function strncasecmp() for STRNICMP() when available.
    [Steven M. Schweda, Chr. Spieler]
 - vms/vms.c, vms/vms.h: for better synchronisation with upcoming UnZip 6 code,
    the macros for masking the "ODS2 vs. ODS5" support differences have been
    cleanded up and ported back to the 5.5x VMS code.  [Chr. Spieler]
 - ubz2err.c: new source file to isolate the bzip2 "fatal error" callback
    routine in its own module; this allows easy replacement of this routine
    when the UnZip package is used as a static library (e.g. for WiZ with
    bzip2 support).  [Chr. Spieler]
 - general: added new ubz2err.c module to the make procedures of ports that
    (might) support bzip2.  [Chr. Spieler]
 - crypt.c: optimized crypt-keys handling for Big-Endian systems using the
    optimized CRC32 code by introducing a local copy of the crc32 table
    containing byte-swapped values.  [Chr. Spieler]
 - extract.c, unzpriv.h: modified calling interface of find_compr_idx() to
    use unsigned instead of ush.  [Steven M. Schweda, Chr. Spieler]
 - vms/vms.c: added missing include of crc32.h header, added missing fab, nam
    variable declarations to checkdir().  [Steven M. Schweda]
 - vms/make_unz.com, vms/link_unz.com: avoid link problems with sticky
    dev:[dir] spec from externally supplied bzip2 lib.  [Steven M. Schweda]
 - vms/vms.[ch]: changed "ODS2 vs. ODS5" masking macros back to pre-5.53d
    style. [Steven M. Schweda]
 - vms: updated/corrected build procedures to handle modified bzip2 support.
    [Steven M. Schweda]
 - typo correction "explicitly" in various files.  [Steven M. Schweda]