2
1
mirror of https://github.com/qpdf/qpdf.git synced 2024-09-28 21:19:06 +00:00
qpdf/libqpdf
Jay Berkenbilt 10bceb552f Security: sanitize /W in xref stream
The /W array was not sanitized, possibly causing an integer overflow
in a multiplication. An analysis of the code suggests that there were
no possible exploits based on this since the problems were in checking
expected values but bounds checks were performed on actual values.
2013-10-09 20:57:07 -04:00
..
qpdf Cosmetic changes to be closer to Adobe terminology 2013-01-23 09:38:05 -05:00
sph SHA2 pipeline with support for 256, 384, and 512 bits 2012-12-31 05:36:51 -05:00
bits.icc Fix and test support for files >= 4 GB 2012-06-24 15:56:50 -04:00
BitStream.cc Security: fix potential multiplication overflow 2013-10-09 19:50:09 -04:00
BitWriter.cc Fix and test support for files >= 4 GB 2012-06-24 15:56:50 -04:00
Buffer.cc ABI change: fix use of off_t, size_t, and integer types 2012-06-20 15:20:26 -04:00
BufferInputSource.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
build.mk Prepare 5.0.0 release 2013-07-10 12:29:13 -04:00
FileInputSource.cc Call QUtil::safe_fopen in place of fopen 2013-03-05 13:35:46 -05:00
InputSource.cc Refactor: pull *InputSource out of QPDF 2012-07-21 09:06:06 -04:00
Makefile update release date to actual date 2008-04-29 12:55:25 +00:00
MD5.cc Call QUtil::safe_fopen in place of fopen 2013-03-05 13:35:46 -05:00
OffsetInputSource.cc Find PDF header anywhere in the first 1024 bytes 2012-12-25 14:43:37 -05:00
PCRE.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pipeline.cc do DLL_EXPORT only in header files and only at the class or top-level function level 2009-10-12 01:15:55 +00:00
Pl_AES_PDF.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pl_ASCII85Decoder.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pl_ASCIIHexDecoder.cc Remove all calls to strcpy 2013-03-05 13:35:46 -05:00
Pl_Buffer.cc ABI change: fix use of off_t, size_t, and integer types 2012-06-20 15:20:26 -04:00
Pl_Concatenate.cc Add Pl_Concatenate filter 2012-06-27 10:20:38 -04:00
Pl_Count.cc Use qpdf_offset_t in place of off_t in public APIs. 2012-06-21 21:23:24 -04:00
Pl_Discard.cc ABI change: fix use of off_t, size_t, and integer types 2012-06-20 15:20:26 -04:00
Pl_Flate.cc Protect gcc diagnostic pragmas with gcc version 2013-03-27 17:36:28 -04:00
Pl_LZWDecoder.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pl_MD5.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pl_PNGFilter.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pl_QPDFTokenizer.cc ABI change: fix use of off_t, size_t, and integer types 2012-06-20 15:20:26 -04:00
Pl_RC4.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pl_SHA2.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
Pl_StdioFile.cc Use portable versions of some UNIX-specific calls 2013-03-05 13:35:46 -05:00
QPDF_Array.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
QPDF_Bool.cc Add getTypeCode() and getTypeName() 2013-01-22 10:01:45 -05:00
QPDF_Dictionary.cc Add getTypeCode() and getTypeName() 2013-01-22 10:01:45 -05:00
QPDF_encryption.cc Handle more broken files 2013-06-15 12:40:01 -04:00
QPDF_InlineImage.cc Add getTypeCode() and getTypeName() 2013-01-22 10:01:45 -05:00
QPDF_Integer.cc Add getTypeCode() and getTypeName() 2013-01-22 10:01:45 -05:00
QPDF_linearization.cc Security: better bounds checks for linearization data 2013-10-09 19:50:09 -04:00
QPDF_Name.cc Security: handle empty name in normalizeName 2013-10-09 19:50:09 -04:00
QPDF_Null.cc Add getTypeCode() and getTypeName() 2013-01-22 10:01:45 -05:00
QPDF_Operator.cc Cosmetic changes to be closer to Adobe terminology 2013-01-23 09:38:05 -05:00
QPDF_optimization.cc Handle /Outlines dictionary being a direct object 2013-06-14 21:36:04 -04:00
QPDF_pages.cc Use QPDFObjectHandle::getObjGen() where appropriate 2013-06-14 14:58:09 -04:00
QPDF_Real.cc Add getTypeCode() and getTypeName() 2013-01-22 10:01:45 -05:00
QPDF_Reserved.cc Add getTypeCode() and getTypeName() 2013-01-22 10:01:45 -05:00
QPDF_Stream.cc Ignore broken DecodeParms for stream with no filters 2013-07-07 19:43:16 -04:00
QPDF_String.cc Remove all calls to sprintf 2013-03-05 13:35:46 -05:00
qpdf-c.cc Update "C" API with functions for new features 2012-12-31 10:32:32 -05:00
QPDF.cc Security: sanitize /W in xref stream 2013-10-09 20:57:07 -04:00
QPDFExc.cc Use qpdf_offset_t in place of off_t in public APIs. 2012-06-21 21:23:24 -04:00
QPDFObject.cc removed qexc; non-compatible ABI change 2009-09-26 18:36:04 +00:00
QPDFObjectHandle.cc Fix errors reported by Coverity 2013-07-07 15:36:51 -04:00
QPDFObjGen.cc Fix QPDFObjGen constructor implementation 2013-07-07 19:43:01 -04:00
QPDFTokenizer.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
QPDFWriter.cc Change API/ABI and withdraw 4.2.0 2013-07-10 11:30:13 -04:00
QPDFXRefEntry.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
QTC.cc Call QUtil::safe_fopen in place of fopen 2013-03-05 13:35:46 -05:00
QUtil.cc Security: keep cur_byte pointing into bytes array 2013-10-09 19:50:07 -04:00
RC4.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
rijndael.cc Remove all old-style casts from C++ code 2013-03-04 16:45:16 -05:00
sha2.c Incorporate sha2 code from sphlib 3.0 2012-12-31 05:36:51 -05:00
sha2big.c Incorporate sha2 code from sphlib 3.0 2012-12-31 05:36:51 -05:00