163 Commits

Autor SHA1 Mensagem Data
Michael R Sweet 2bae6fc518 LGTM only supports C++ style comments... 2019-11-19 11:19:24 -05:00
Michael R Sweet f4a99aeb02 Address multiple minor issues reported by the LGTM security scanner:
- Lots of usage of localtime and gmtime (use _r/_s versions instead -
  Issue #5685)
- Some unnecessary comparisons
- Suppress checks that are not useful (header guards, short global names, and
  the integer overflow checks which don't reflect the actual range of values)
2019-11-18 11:19:16 -05:00
Michael R Sweet e35d176c54 Merge pull request #5621 from zdohnal/cgigetarray-sigsegv
SIGSEGV in CUPS web ui when adding a printer
2019-10-15 17:06:53 -04:00
Michael R Sweet 8e048e4d39 Fix some PPD parser issues discovered via fuzzing (Issue #5623, Issue #5624) 2019-08-01 14:02:04 -04:00
Zdenek Dohnal eda46e3aac SIGSEGV in CUPS web ui when adding a printer 2019-07-29 10:33:06 +02:00
Michael R Sweet 3e391a8e76 Update build system and cups-config script to not add extra libraries to the
"--libs" output (Issue #5261)
2019-05-15 18:35:58 -04:00
Michael R Sweet 507c4adcc8 More clang warning fixes. 2019-04-20 09:13:32 -04:00
Michael R Sweet 21609267ec Use ALL_DSOFLAGS and ALL_LDFLAGS to avoid issues with some build frameworks. 2019-03-19 16:36:24 -04:00
Michael R Sweet e060cfd23f Fix compile warning. 2019-01-24 14:23:46 -05:00
Michael R Sweet 6648f8c125 Remove remaining references to subscriptions and samba. 2019-01-24 12:46:23 -05:00
Michael R Sweet 86c184ff34 Clean out some more _cupsStr cruft that might potentially cause an
unaligned memory access (Issue #5474)

Don't directly use the string pool in the CGI programs or scheduler.
2019-01-21 16:03:08 -05:00
Michael R Sweet 644dca1806 Switch to using "all" and "media-col-database" because some vendors apparently
do not know how to read (Issue #5484)
2019-01-21 12:01:11 -05:00
Michael R Sweet 622207eff5 Use the same requested-attributes values for all IPP Everywhere setup
requests (Issue #5484)
2019-01-21 11:27:43 -05:00
Michael R Sweet b9ff93ce91 CVE-2018-4700: Linux session cookies used a predictable random number seed. 2018-12-07 12:08:27 -05:00
Michael R Sweet 144351068c Don't install cupscgi, cupsmime, or cupsppdc shared libraries. 2018-10-29 12:12:41 -04:00
Michael R Sweet 78312b3c7a Don't install/remove private headers for internal libraries.
Don't install symlinks for internal libraries.
2018-10-18 14:36:16 -04:00
Michael R Sweet fb863569eb Move debug printfs to internal usage only.
Also, old MD5 code is internal-only.
2018-10-18 14:25:09 -04:00
Michael R Sweet 9fd217fc95 Don't install headers for libcupcgi, libcupsmime, or libcupsppdc. 2018-10-17 16:12:46 -04:00
Michael R Sweet c8c5ec3b57 Search for codesign/true, use LDFLAGS for shared libraries (Issue #5411) 2018-10-15 21:03:40 -04:00
Michael R Sweet 24a06ed381 Migrate Windows conditional code to _WIN32 define. 2018-10-10 00:18:00 -04:00
Michael R Sweet 00dbe99f3f Add code signing for macOS Mojave. 2018-09-18 11:02:51 -04:00
Michael R Sweet 3416fe952b Fix memory leaks found by Coverity (Issue #5375) 2018-08-21 10:01:44 -04:00
Michael R Sweet a32af27c4c Replace the rest of the uses of __attribute__ that need to be portable (Issue #5349) 2018-07-09 13:42:25 -04:00
Michael R Sweet de72bb61c1 More tweaks for IPP Everywhere support in web interface. 2018-06-18 14:31:23 -04:00
Michael R Sweet 553f29c967 Support IPP Everywhere driver in web interface (Issue #5338) 2018-06-18 13:13:40 -04:00
Michael R Sweet 123979a9db Move libcupsimage to the "cups" subdirectory, along with its unit tests and
benchmark.
2018-01-18 17:20:18 -05:00
Michael Sweet cfd375ad10 Online help fixes.
cgi-bin/help-index.c:
- Fix indexing of indented comments, body elements, etc.
- Add support for anchors via ID attribute.
- Fix anchor scanning bug when the anchor name is quoted.

cgi-bin/testhi.c:
- Add support for specifying section and directory to index.

doc/help/*.html:
- Fix headings and anchors.
2017-12-19 00:05:30 -05:00
Michael Sweet 5e1c3dff00 Support <body> being indented. 2017-12-18 21:29:42 -05:00
Michael R Sweet e310189747 License change: Apache License, Version 2.0. 2017-11-07 12:11:35 -05:00
Michael R Sweet 7ec1163068 Support the latest HTTP Digest authentication specification (Issue #4862)
Also deprecates all httpMD5* functions.

- cgi-bin/var.c: Use cupsHashData to compute SID hash.
- cups/auth.c: Rewrite WWW-Authenticate parser to support multiple auth schemes
  and the new RFC 7616 version of HTTP Digest.
- cups/cups.h: Add cupsHashString function to get a hex version of a hash.
- cups/hash.c: Add MD5 support.
- cups/http.c: Track WWW-Authenticate in a long string, concatenate new set
  values.
- cups/http.h: Deprecate httpMD5* and recommend cupsDoAuth and cupsHash*.
- cups/http-private.h: Pull MD5 stuff, nonce_count is unsigned, track
  WWW-Authenticate header as a potentially long string.
- cups/http-support.c: Use cupsHashData to compute UUID hash.
- cups/md5.c: Comment everything out if we have an OS-supplied MD5 hash
  function.
- cups/md5passwd.c: Use cupsHash* functions.
- cups/tls-*.c: Use cupsHash* functions.
- cups/versioning.h: Add CUPS_API_2_3 definition.
- scheduler/client.c: Update WWW-Authenticate header to include AuthRef,
  Local, and PeerCred schemes with parameters as needed.
2017-11-06 16:28:31 -05:00
Michael R Sweet f1547f121c No longer support backslash, question mark, or quotes in printer names (Issue #4966) 2017-11-01 12:27:58 -04:00
Michael R Sweet b00c84094b Drop RSS subscription management from the web interface (Issue #5012) 2017-11-01 12:06:06 -04:00
Michael R Sweet b94f7488e8 Fix more issues with libtool support (Issue #5050) 2017-07-17 19:58:53 -04:00
Michael R Sweet a621d151e7 Update libtool support to include --mode=foo stuff - surprise, libtool changed in
incompatible ways again...  (Issue #5050)
2017-07-17 18:23:00 -04:00
Michael Sweet 7f500d8988 Fix some (bogus) clang warnings. 2017-06-16 22:47:31 -04:00
Michael R Sweet 57b7b66b58 Fix source file header text duplication text duplication.
Bump copyright to 2017 in web interface and README files.
2017-01-16 09:31:01 -05:00
Michael Sweet 9e6d7a0f87 Improve performance of web interface with large numbers of jobs (Issue #3819)
Also re-work web interface to not allow the order to be changed (since that
will negatively impact performance) but instead add first/last buttons to the
pager.
2016-05-25 17:33:36 -04:00
Michael R Sweet f7b064491c Merge pull request #4792 from OdyX/fix-spelling-error-in-ipp-var
Fix spelling error in 'returning'
2016-04-21 16:39:20 -04:00
Michael Sweet d825017aa0 Drop API help for CGI, MIME, and PPD compiler libraries.
Don't uninstall public headers, these are all now private headers.
2016-04-12 07:00:21 -04:00
Michael Sweet 27453efb87 Move CGI, PPD compiler, and MIME heades to the private headers directory. 2016-04-12 06:52:27 -04:00
Michael R Sweet 503b54c930 Remove all of the Subversion keywords from various source files. 2016-04-11 20:28:30 -04:00
Didier Raboud 138d4f6d54 Fix spelling error in 'returning' 2016-03-25 10:48:06 +01:00
msweet 6e5a57e8af Add cupsRasterInitPWGHeader API to setup a raster header using IPP Everywhere
attribute values.


git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@13024 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-12-18 20:34:33 +00:00
msweet 5ae9fbb3dd Add support for hashed job-password values; right now just SHA-1 and SHA-2 hashes
(<rdar://problem/20221502>)

- Add new cupsHashData API
- Use cupsHashData in _cupsConvertOptions.
- Grab the job-password-encryption-supported value from the printer and pick the most
  secure hash that is supported.
- Add a new _CUPS_API_2_2 availability macro.
- Update dependencies and Xcode project settings.


git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12983 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-11-18 17:22:38 +00:00
msweet 945bef5290 The web search incorrectly searched time-at-xxx values (STR #4652)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12768 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-06-30 16:13:38 +00:00
msweet 5e6c3df7c0 Security: Fix CERT VU #810572 exploiting the dynamic linker (STR #4609)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12700 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-06-08 18:32:35 +00:00
msweet 3bb5973159 Fix compiler warnings.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12644 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-05-19 21:22:35 +00:00
msweet fab4b71e38 Long cookies caused the web interface to stop working (STR #4619)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12621 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-05-06 21:32:18 +00:00
msweet fb458c34bf Revert SDKROOT changes for OS X.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12519 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-02-17 13:10:19 +00:00
msweet fb2d54701f Last bits of IPP Everywhere PPD support - web interface and cups-driverd
(STR #4258)


git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12516 a1ca3aef-8c08-0410-bb20-df032aa958be
2015-02-12 20:18:11 +00:00