Update to file-5.45 (Last was file-5.44)

2023-07-27 15:45 Christos Zoulas <christos@zoulas.com>

* release 5.45

2023-07-17 11:53 Christos Zoulas <christos@zoulas.com>

* PR/465: psrok1: Avoid

Update to file-5.45 (Last was file-5.44)

2023-07-27 15:45 Christos Zoulas <christos@zoulas.com>

* release 5.45

2023-07-17 11:53 Christos Zoulas <christos@zoulas.com>

* PR/465: psrok1: Avoid muslc asctime_r crash

2023-05-21 13:05 Christos Zoulas <christos@zoulas.com>

* add SIMH tape format support

2023-02-09 12:50 Christos Zoulas <christos@zoulas.com>

* bump the max size of the elf section notes to be read to 128K
and make it configurable

2023-01-08 1:08 Christos Zoulas <christos@zoulas.com>

* PR/415: Fix decompression with program returning empty

2022-12-26 1:47 Christos Zoulas <christos@zoulas.com>

* PR/408: fix -p with seccomp
* PR/412: fix MinGW compilation

show more ...

Import 5.39:

* Remove unused subtype_mime (Steve Grubb)
* Remove unused check in okstat (Steve Grubb)
* Fix mime-type in elf binaries by making sure $x is set
* Fix indirect negative off

Import 5.39:

* Remove unused subtype_mime (Steve Grubb)
* Remove unused check in okstat (Steve Grubb)
* Fix mime-type in elf binaries by making sure $x is set
* Fix indirect negative offsets broken by OFFNEGATIVE
* Fix GUID equality check
* PR/165: Handle empty array and strings in JSON
* PR/162: Add --exclude-quiet
* Fix memory leak in ascmagic (Steve Grubb)
* Fix string comparison length with ignore whitespace
* Fix mingwin 64 compilation
* PR/159: whitelist getpid needed for file_pipe2file()
* Indicate negative offsets with a flag OFFNEGATIVE
so that -0 works.
* Introduce "offset" magic type that can be used to
detect the file size, and bail on short files.
* document DER better in the magic man page.
* fix memory leaks (SonarQube)
* rewrite confusing loops (SonarQube)
* fix bogus test (SonarQube)
* pass a sized buffer to file_fmttime() (SonarQube)
* Don't allow * in printf formats, or the code itself (Christoph Biedl)
* Introduce a printf output size checker to avoid DoS attacks
* Avoid memory leak on error (oss-fuzz)
* Check length of string on DER before derefercing and add new types
* Add missing DER string (oss-fuzz)
* Add missing DER types, and debugging
* PR/140: Avoid abort with hand-crafted magic file (gockelhahn)
* PR/139: Avoid DoS in printf with hand-crafted magic file (gockelhahn)
* PR/138: Avoid crash with hand-crafted magic file (gockelhahn)
* PR/136: Fix static build by adding a libmagic.pc (Fabrice Fontaine)
* add guid support native support via the "guid" type.

show more ...

Import 5.38:
- Always accept -S (no sandbox) even if we don't support sandboxing
- More syscalls elided for sandboxiing
- For ELF dynamic means having an interpreter not just PT_DYNAMIC
- Check f

Import 5.38:
- Always accept -S (no sandbox) even if we don't support sandboxing
- More syscalls elided for sandboxiing
- For ELF dynamic means having an interpreter not just PT_DYNAMIC
- Check for large ELF session header offset
- When saving and restoring a locale, keep the locale name in our
own storage.
- Add a flag to disable CSV file detection.
- Don't pass NULL/0 to memset to appease sanitizers.
- Avoid spurious prints when looks for extensions or apple strings
in fsmagic.
- Add builtin decompressors for xz and and bzip.
- Add a limit for the number of CDF elements.
- More checks for overflow in CDF.

show more ...

Import file-5.22

from ftp.astron.com, this is a bug fix release:
* always leave magic file loaded, don't unload for magic_check, etc.
* fix default encoding to binary instead of unknown which broke rece

from ftp.astron.com, this is a bug fix release:
* always leave magic file loaded, don't unload for magic_check, etc.
* fix default encoding to binary instead of unknown which broke recently
* handle empty and one byte files, less specially so that
--mime-encoding does not break completely.
* fix erroneous non-zero exit code from non-existant file and message
* add CDF MSI file detection (Guy Helmer)

show more ...

from ftp.astron.com.
- many security related fixes
- no MAXPATHLEN limits
- fixed missing text specification on ascii magic
- new ``pascal'' style string formats
- whitespace comparison fix
- more ma

from ftp.astron.com.
- many security related fixes
- no MAXPATHLEN limits
- fixed missing text specification on ascii magic
- new ``pascal'' style string formats
- whitespace comparison fix
- more magic

show more ...