Package: file / 1:5.35-4

Metadata

Package Version Patches format
file 1:5.35-4 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
cherry pick.FILE5_35 1 g338cc788. c cast.patch | (download)

src/readelf.c | 10 5 + 5 - 0 !
1 file changed, 5 insertions(+), 5 deletions(-)

 - c++ cast (...)
cherry pick.FILE5_35 2 g8d68fb4f.lint fixes.patch | (download)

src/apprentice.c | 4 2 + 2 - 0 !
src/compress.c | 2 1 + 1 - 0 !
src/file.h | 2 1 + 1 - 0 !
src/is_json.c | 2 1 + 1 - 0 !
4 files changed, 5 insertions(+), 5 deletions(-)

 lint fixes
cherry pick.FILE5_35 3 gc7d910ee.more lint fixes.patch | (download)

src/file.h | 2 1 + 1 - 0 !
src/readelf.c | 2 1 + 1 - 0 !
src/softmagic.c | 2 1 + 1 - 0 !
3 files changed, 3 insertions(+), 3 deletions(-)

 more lint fixes
cherry pick.FILE5_35 6 g2b6f3fbc.if we are asked to print annotations and there are no annotations in.patch | (download)

src/softmagic.c | 24 20 + 4 - 0 !
1 file changed, 20 insertions(+), 4 deletions(-)

 if we are asked to print annotations and there are no annotations in (...)
cherry pick.FILE5_35 8 g42d9a8a3.need to pass found match from match mget match so that the use case.patch | (download)

src/softmagic.c | 31 18 + 13 - 0 !
1 file changed, 18 insertions(+), 13 deletions(-)

 need to pass found_match from match -> mget -> match so that the use case (...)
cherry pick.FILE5_35 16 g6d90cbff.avoid over trimming ucs16 text and ending up losing the last character.patch | (download)

src/ascmagic.c | 6 6 + 0 - 0 !
1 file changed, 6 insertions(+)

 avoid over-trimming ucs16 text, and ending up losing the last character
cherry pick.FILE5_35 25 g48052fcf.fix cut n pasto for regex max vsevolod stakhov.patch | (download)

src/magic.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix cut-n-pasto for regex_max (vsevolod stakhov)
cherry pick.FILE5_35 26 g98f29456.fix name.patch | (download)

src/magic.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix name
cherry pick.FILE5_35 31 g2858eaf9.avoid oob read found by asan reported by f.patch | (download)

src/readelf.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 avoid oob read (found by asan reported by f. alonso)
ID: CVE-2019-8906
cherry pick.FILE5_35 42 ge6bf546d.fix documentation to match the source.patch | (download)

doc/magic.man | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 fix documentation to match the source
cherry pick.FILE5_35 49 g3a6f62e2.fix indirect offset overflow calculation b.patch | (download)

src/softmagic.c | 22 20 + 2 - 0 !
1 file changed, 20 insertions(+), 2 deletions(-)

 fix indirect offset overflow calculation (b. watson)
cherry pick.FILE5_35 52 g94b7501f.pr 62 spinpx avoid non nul terminated string read.patch | (download)

src/readelf.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 pr/62: spinpx: avoid non-nul-terminated string read
ID: CVE-2019-8904
cherry pick.FILE5_35 53 gd6578152.pr 62 spinpx limit size of file printable.patch | (download)

src/file.h | 2 1 + 1 - 0 !
src/funcs.c | 7 4 + 3 - 0 !
src/readelf.c | 5 3 + 2 - 0 !
src/softmagic.c | 12 7 + 5 - 0 !
4 files changed, 15 insertions(+), 11 deletions(-)

 pr/62: spinpx: limit size of file_printable
ID: CVE-2019-8905 CVE-2019-8907
cherry pick.FILE5_35 55 g642f269e.mention that the apple filetype creator is only available for entries that.patch | (download)

doc/file.man | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 mention that the apple filetype/creator is only available for entries that (...)
cherry pick.FILE5_35 56 gf0a26da7.pr 61 tmc add ucs 32 built in detection.patch | (download)

src/encoding.c | 64 56 + 8 - 0 !
1 file changed, 56 insertions(+), 8 deletions(-)

 pr/61: tmc: add ucs-32 built-in detection
cherry pick.FILE5_35 59 g8305d1cc.use c casts everywhere.patch | (download)

src/apprentice.c | 160 81 + 79 - 0 !
src/ascmagic.c | 46 23 + 23 - 0 !
src/buffer.c | 8 4 + 4 - 0 !
src/cdf.c | 139 74 + 65 - 0 !
src/cdf.h | 4 2 + 2 - 0 !
src/cdf_time.c | 20 10 + 10 - 0 !
src/compress.c | 34 17 + 17 - 0 !
src/der.c | 10 5 + 5 - 0 !
src/elfclass.h | 14 7 + 7 - 0 !
src/encoding.c | 8 4 + 4 - 0 !
src/file.c | 16 8 + 8 - 0 !
src/funcs.c | 16 8 + 8 - 0 !
src/is_tar.c | 9 5 + 4 - 0 !
src/magic.c | 45 23 + 22 - 0 !
src/print.c | 17 9 + 8 - 0 !
src/readcdf.c | 10 5 + 5 - 0 !
src/readelf.c | 65 36 + 29 - 0 !
src/softmagic.c | 250 142 + 108 - 0 !
18 files changed, 463 insertions(+), 408 deletions(-)

 use c++ casts everywhere
cherry pick.FILE5_36 1 gecca6e54.fix casts and bounds check found by oss fuzz.patch | (download)

src/encoding.c | 12 7 + 5 - 0 !
1 file changed, 7 insertions(+), 5 deletions(-)

 fix casts and bounds check (found by oss-fuzz)
cherry pick.FILE5_36 24 g9b2f9d6a.cast to unsigned first to appease ubsan oss fuzz.patch | (download)

src/encoding.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 cast to unsigned first to appease ubsan (oss-fuzz)
cherry pick.FILE5_36 32 g479e0995.pr 69 only consider arrays 1 element when quickly figuring out if a.patch | (download)

src/is_json.c | 17 12 + 5 - 0 !
1 file changed, 12 insertions(+), 5 deletions(-)

 pr/69: only consider arrays > 1 element when quickly figuring out if a (...)
local.support local definitions in etc magic.patch | (download)

doc/file.man | 11 3 + 8 - 0 !
magic/Header | 7 4 + 3 - 0 !
magic/magic.local | 3 3 + 0 - 0 !
src/Makefile.am | 2 1 + 1 - 0 !
src/Makefile.in | 2 1 + 1 - 0 !
src/apprentice.c | 2 1 + 1 - 0 !
6 files changed, 13 insertions(+), 14 deletions(-)

 support local definitions in /etc/magic
local.don t include libs in build.patch | (download)

src/Makefile.in | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 don't include libs in build
local.mention posixly correct dependent behaviour in usage message.patch | (download)

src/file_opts.h | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 mention posixly_correct dependent behaviour in usage message
local.report gz as application gzip.patch | (download)

magic/Magdir/compress | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 report gz as application/gzip
local.disable detection of vax coff executables.patch | (download)

magic/Magdir/vax | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 disable detection of vax coff executables
local.disable algol68 detection.patch | (download)

magic/Magdir/algol68 | 20 10 + 10 - 0 !
1 file changed, 10 insertions(+), 10 deletions(-)

 disable detection of algol68 files
local.extra magic.patch | (download)

magic/Makefile.am | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 extra magic file, to be upstreamed
local.manpage seccomp is disabled.patch | (download)

doc/file.man | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 clarify manpage: seccomp is disabled for the time being