Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-11-17 | Merge xmalloc.[ch] files across base, skipping OpenSSH for now. | Tobias Stoeckmann | |
ok nicm | |||
2015-11-15 | When validating a char by calling strchr() with a string of allowed chars, | Tobias Stoeckmann | |
check for '\0' first, because strchr() would return non-NULL. ok nicm | |||
2015-11-13 | Break the message preparation bit of the main loop into its own function | Nicholas Marriott | |
for less excessive level of indentation. | |||
2015-11-13 | Call stat not lstat with -L, makes links actually be followed. Reported | Nicholas Marriott | |
by and ok semarie@. | |||
2015-11-05 | palmpilot should have gone when palm was added, it is redundant. | Nicholas Marriott | |
2015-10-31 | Update Matroska magic file. | Nicholas Marriott | |
2015-10-17 | The file(1) magic-parsing process was using pledge "stdio getpw proc recvfd" | Theo de Raadt | |
early on, then a set of getpwnam/setresuid/... before quickly dropping to "stdio recvfd". It receives fd's and runs the magic code on them in a chroot'd "stdio" jail. We can do better than that. Before the recent change, "proc" contained both the concepts of "forking" and "setuid". "id" is now split out as a seperate request, and it is exactly what this process needs momentarily. So this loses another window of opportunity, in case we have a major bug in .... hmm, it'd have to be in getpwnam.... ok tedu doug semarie gilles | |||
2015-10-09 | Change all tame callers to namechange to pledge(2). | Theo de Raadt | |
2015-10-06 | Move from tame "cmsg" to tame "sendfd" or "recvfd", depending on which | Theo de Raadt | |
way the process moves fd's. | |||
2015-10-06 | Simple update for pdf, from file 5.x. | Nicholas Marriott | |
2015-10-06 | Another simple update for xwindows, from 5.x. | Nicholas Marriott | |
2015-10-06 | Log the matched offset (and the new offset) instead of just of the new | Nicholas Marriott | |
offset (as if it was where the match was found). | |||
2015-10-06 | ssh and ssl key file magic, from file 5.x. | Nicholas Marriott | |
2015-10-06 | Another simple update from file 5.x. | Nicholas Marriott | |
2015-10-05 | Another trivial update, some extra bits for timezone, from file 5.x. | Nicholas Marriott | |
2015-10-05 | Very trivial changes from file 5.x: spelling mistakes, %ld->%d and some | Nicholas Marriott | |
style nits. | |||
2015-10-05 | Get BE and LE UTF-32 correct, from file 5.x. | Nicholas Marriott | |
2015-10-05 | Update compress magic from the upstream file 5.x magic files. | Nicholas Marriott | |
2015-10-05 | Add support for !:strength modifier to adjust strength of a test. | Nicholas Marriott | |
2015-10-05 | Offset into the file can be size_t and add some casts to remove warnings. | Nicholas Marriott | |
2015-10-05 | use the normal -1 check for tame failure | Theo de Raadt | |
2015-10-04 | Add tame(2) to file(1) and drop the old systrace(4) sandbox. tame(2) is | Nicholas Marriott | |
only applied to the child process, which requires the parent to not pass directory file descriptors (tame("cmsg") does not allow it). Because file(1) is already privsep, the permissions in the child can be quickly restricted: first to "stdio cmsg getpw proc" then after the privdrop to "stdio cmsg". | |||
2015-10-02 | use limits.h instead of sys/param.h to get PATH_MAX | Theo de Raadt | |
2015-08-23 | Need to permit kbind in this sandbox too | Philip Guenther | |
2015-08-12 | Support + and - for dates. | Nicholas Marriott | |
2015-08-12 | Fix adjustment of the offset when string, pstring or search match. | Nicholas Marriott | |
2015-08-12 | Add string/Ww as aliases for string/Bb, and ignore t. (The latest | Nicholas Marriott | |
version of the original file replaced Bb with Ww and then reused b for something else (!), but alias them instead.) | |||
2015-08-11 | Only warn about [bl]estring16 when they are used, like the other | Nicholas Marriott | |
unsupported types. | |||
2015-08-11 | When an exact string match is found, only print the test string, not up | Nicholas Marriott | |
to \0. Noticed by Theo with some GIF files. | |||
2015-08-11 | Any type can be prefixed with "u", even where it makes no sense. Also | Nicholas Marriott | |
make pstring/upstring a text type. | |||
2015-08-11 | Warn sensibly for unrecognised !: lines rather than trying to parse them. | Nicholas Marriott | |
2015-08-11 | Accept hexadecimal numbers without 0x if they aren't a valid decimal | Nicholas Marriott | |
number. | |||
2015-08-11 | Actually leave the invalid ml in the tree after making it type NONE. | Nicholas Marriott | |
2015-08-11 | An invalid line can't just be thrown away because if it has any children | Nicholas Marriott | |
they will end up with the wrong parent. Instead, leave it in the tree but force its type to NONE so it never matches. | |||
2015-08-11 | Extend accepted operators to +-&/%* for integer tests. | Nicholas Marriott | |
2015-08-11 | Support = test for floats and doubles. | Nicholas Marriott | |
2015-08-11 | If we are expecting a signed number but it fails, try to parse it as | Nicholas Marriott | |
unsigned instead. | |||
2015-08-11 | Allow spaces around any operator, not just =. | Nicholas Marriott | |
2015-08-11 | Include more context in warnings where it is possible. | Nicholas Marriott | |
2015-08-11 | Add another function for printing warnings before the magic_line is | Nicholas Marriott | |
created so all warnings go through the same fprintf. | |||
2015-07-30 | note that symlinks are not followed by default; | Jason McIntyre | |
from tilo stritzky ok nicm and discussed with deraadt | |||
2015-07-20 | Remove leftover xfree() prototype. | Nicholas Marriott | |
2015-07-12 | Keep one byte for terminating '\0'. | Tobias Stoeckmann | |
ok nicm@ | |||
2015-07-08 | Properly handle files >= 4 GB on 32 bit architectures. | Tobias Stoeckmann | |
with input by and ok nicm@ | |||
2015-07-08 | Do not allow '\0' as an offset operator or type. | Tobias Stoeckmann | |
ok nicm | |||
2015-06-17 | Use strdup in xstrdup from Fritjof Bornebusch. While here, remove xfree | Nicholas Marriott | |
which is unused. | |||
2015-06-04 | systrace(4) STRIOCATTACH can only fail for file(1) if it is already | Nicholas Marriott | |
systraced. If so, silently ignore the error and do not attempt to apply our own systrace policy. From Patrick Keshishian. | |||
2015-05-30 | Support - to read from stdin, from Sebastien Marie. | Nicholas Marriott | |
2015-05-29 | millert points out I can just call tzset() early to avoid having to | Nicholas Marriott | |
permit access() in the child. | |||
2015-05-29 | Use gmtime not localtime when we want UTC, I got it right in one place | Nicholas Marriott | |
but not in another two. I expect I was confused by the fact that the original file(1) had them the wrong way round (so, for example, leqldate was actually UTC). |