Release 1.4.18

* Ensure null termination of strdrup (closes #40) * Correct bitshifting (loses #41)
verdammelt · Nov 10, 2019 · 8edd0e0 · 8edd0e0
1 parent 5b424a2
commit 8edd0e0
Show file tree

Hide file tree

Showing 5 changed files with 21 additions and 7 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,11 @@
+2019-11-10 Paul Dreik <pauldreik@github>
+	* src/alloc.c, src/alloc.h
+	* src/attr.c src/mapi_attr.c
+	Ensure null termination of strdups in the face of potentially
+	malicious inputs.
+
+	* src/util.h: fix shift into sign bit.
+
 2018-01-13 Mark Simpson <[email protected]>
 	* configure.ac, tests/cmdline/version.baseline: Update version number.
 

diff --git a/NEWS b/NEWS
@@ -1,5 +1,11 @@
 TNEF NEWS -- history of user-visible changes.   31 August 2014
-Copyright (C) 2000-2017 by Mark Simpson
+Copyright (C) 2000-2019 by Mark Simpson
+
+* 1.4.18 [10 Nov 2019]
+** Improve safety of strdups
+*** https://github.com/verdammelt/tnef/pull/40
+** Correct possible improper bitshift.
+*** https://github.com/verdammelt/tnef/pull/41
 
 * 1.4.17 [13 Jan 2018]
 ** Fix embarrassing version number problem.

diff --git a/configure.ac b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ(2.59)
-AC_INIT([tnef],[1.4.17],[[email protected]])
+AC_INIT([tnef],[1.4.18],[[email protected]])
 AC_CONFIG_SRCDIR([src/tnef.c])
 AM_INIT_AUTOMAKE
 AC_CONFIG_HEADER([src/config.h])

diff --git a/src/main.c b/src/main.c
@@ -251,7 +251,7 @@ parse_cmdline (int argc, char **argv,
         case 'V':
             fprintf (stderr, "%s\n", PACKAGE_STRING);
             fprintf (stderr,
-                     "Copyright (C) 1999-2018 by Mark Simpson\n"
+                     "Copyright (C) 1999-2019 by Mark Simpson\n"
                      "Copyright (C) 1997 by Thomas Boll (original code)");
             fprintf (stderr, "\n");
             fprintf (stderr, NO_WARRANTY, PACKAGE_NAME, PACKAGE_NAME);

diff --git a/tests/cmdline/version.baseline b/tests/cmdline/version.baseline
@@ -1,15 +1,15 @@
 ./../../src/tnef --version
-tnef 1.4.17
-Copyright (C) 1999-2018 by Mark Simpson
+tnef 1.4.18
+Copyright (C) 1999-2019 by Mark Simpson
 Copyright (C) 1997 by Thomas Boll (original code)
 tnef comes with ABSOLUTELY NO WARRANTY.
 You may redistribute copies of tnef under the terms of the GNU General
 Public License.  For more information about these matters, see the file
 named COPYING.
 
 ./../../src/tnef -V
-tnef 1.4.17
-Copyright (C) 1999-2018 by Mark Simpson
+tnef 1.4.18
+Copyright (C) 1999-2019 by Mark Simpson
 Copyright (C) 1997 by Thomas Boll (original code)
 tnef comes with ABSOLUTELY NO WARRANTY.
 You may redistribute copies of tnef under the terms of the GNU General