Commits
- Commit:
84b0c4ab06e6de6c071c3cac39b0df011cf23ff5
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Sat Jan 15 08:36:11 2022 UTC
tag 0.7.1 -- bugfix release
fix use after free when loading an about:* page from about:about.
Reported by Brian Callahan, thanks!
- Commit:
0b9a2b9206b2123bae3a2ae8893348d4ae7b90a6
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Sat Jan 15 08:30:50 2022 UTC
sync changelog
- Commit:
52a99c568d70787741ab72597d29960acb78c738
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Sat Jan 15 08:29:10 2022 UTC
avoid possible use after free
`url' may be a pointer to a string of the buffer which gets corrupted
upon tab_stop.
This bug shows when loadfn is load_about_url, because in
make_fs_request we first tab_stop, and then send the request, which
ends up sending to the fs process a free'd string. At least on
OpenBSD with Otto' malloc is (partially) corrupted and will either
make the fs process abort or return a not found page.
One solution may be to rework make_fs_request to process things in a
different order, but that would only hide the problem. Instead, use
the newly created history element as url given to the loadfns: that is
guaranteed to be valid up to the next load_url call.
Reported by Brian Callahan, thanks!
- Commit:
2122686bb1ab8ef51c4a4c94189be287c5512dff
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 23:41:29 2022 UTC
start a new release cycle
- Commit:
d9bfe90a163f327011c6e08d4f64d1a897a12088
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 23:41:05 2022 UTC
update the site for 0.7
- Commit:
d5e2f954920e7476938d015dace69631ba84501c
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 22:51:56 2022 UTC
tag 0.7, "Via Paolo Fabbri 43"
- Commit:
77e9591fc27fd0f06aaff0cd94880ed1d5de9a75
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 19:44:52 2022 UTC
fix a couple of printw fmt strings
two %d really needs %zu
- Commit:
6a897d0202d809922171a1d7e80227f3933b38b5
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 18:40:36 2022 UTC
fix puntaction
- Commit:
17947430c0216bb8db16f69b70855e72d45cf978
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 18:38:42 2022 UTC
mention u in the "essential commands" list
- Commit:
b7286684d73624890ce1d663c499eb8acc9c845b
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 18:37:10 2022 UTC
fix glitch with tab-bar-show=1 and tab-undo-close
a missing ui_schedule_redraw on unkill_tab means that the tabbar is
not rendered when calling tab-undo-close when there is only one tab.
- Commit:
eeddf8e6cfd70500dd779c1cde0ad1dd2b8dde61
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 18:26:31 2022 UTC
add utils.h, forgot in recent commits
- Commit:
c7067b0b78534c295ab2e5c3d2beb275f3be29eb
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 17:44:52 2022 UTC
link the thfr@ article about OOTB-TOFU in the ACKNOWLEDGEMNTS section
- Commit:
b240cdbb259a3f9751861686a980e75166404074
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 17:36:51 2022 UTC
add to CAVEATS a note about the naive text-wrapping algorithm
- Commit:
bb5abe9f9e45c59086d3406f99f67bb1a763b752
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Thu Jan 13 12:18:34 2022 UTC
tweak cache-info message
- Commit:
75544e856a31f13c2f8d8f783e51600eadd65c27
- From:
- Omar Polo <op@omarpolo.com>
- Date:
- Wed Jan 12 12:33:41 2022 UTC
fringes already have a prefix of "~"