Commits
Commit:
84b0c4ab06e6de6c071c3cac39b0df011cf23ff5
Author:
Omar Polo <op@omarpolo.com>
Date:
Sat Jan 15 08:36:11 2022 UTC
tag 0.7.1 -- bugfix release

fix use after free when loading an about:* page from about:about.
Reported by Brian Callahan, thanks!
Commit:
0b9a2b9206b2123bae3a2ae8893348d4ae7b90a6
Author:
Omar Polo <op@omarpolo.com>
Date:
Sat Jan 15 08:30:50 2022 UTC
sync changelog
Commit:
52a99c568d70787741ab72597d29960acb78c738
Author:
Omar Polo <op@omarpolo.com>
Date:
Sat Jan 15 08:29:10 2022 UTC
avoid possible use after free

`url' may be a pointer to a string of the buffer which gets corrupted
upon tab_stop.

This bug shows when loadfn is load_about_url, because in
make_fs_request we first tab_stop, and then send the request, which
ends up sending to the fs process a free'd string. At least on
OpenBSD with Otto' malloc is (partially) corrupted and will either
make the fs process abort or return a not found page.

One solution may be to rework make_fs_request to process things in a
different order, but that would only hide the problem. Instead, use
the newly created history element as url given to the loadfns: that is
guaranteed to be valid up to the next load_url call.

Reported by Brian Callahan, thanks!
Commit:
2122686bb1ab8ef51c4a4c94189be287c5512dff
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 23:41:29 2022 UTC
start a new release cycle
Commit:
d9bfe90a163f327011c6e08d4f64d1a897a12088
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 23:41:05 2022 UTC
update the site for 0.7
Commit:
d5e2f954920e7476938d015dace69631ba84501c
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 22:51:56 2022 UTC
tag 0.7, "Via Paolo Fabbri 43"
Commit:
77e9591fc27fd0f06aaff0cd94880ed1d5de9a75
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 19:44:52 2022 UTC
fix a couple of printw fmt strings

two %d really needs %zu
Commit:
6a897d0202d809922171a1d7e80227f3933b38b5
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 18:40:36 2022 UTC
fix puntaction
Commit:
17947430c0216bb8db16f69b70855e72d45cf978
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 18:38:42 2022 UTC
mention u in the "essential commands" list
Commit:
b7286684d73624890ce1d663c499eb8acc9c845b
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 18:37:10 2022 UTC
fix glitch with tab-bar-show=1 and tab-undo-close

a missing ui_schedule_redraw on unkill_tab means that the tabbar is
not rendered when calling tab-undo-close when there is only one tab.
Commit:
eeddf8e6cfd70500dd779c1cde0ad1dd2b8dde61
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 18:26:31 2022 UTC
add utils.h, forgot in recent commits
Commit:
c7067b0b78534c295ab2e5c3d2beb275f3be29eb
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 17:44:52 2022 UTC
link the thfr@ article about OOTB-TOFU in the ACKNOWLEDGEMNTS section
Commit:
b240cdbb259a3f9751861686a980e75166404074
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 17:36:51 2022 UTC
add to CAVEATS a note about the naive text-wrapping algorithm
Commit:
bb5abe9f9e45c59086d3406f99f67bb1a763b752
Author:
Omar Polo <op@omarpolo.com>
Date:
Thu Jan 13 12:18:34 2022 UTC
tweak cache-info message
Commit:
75544e856a31f13c2f8d8f783e51600eadd65c27
Author:
Omar Polo <op@omarpolo.com>
Date:
Wed Jan 12 12:33:41 2022 UTC
fringes already have a prefix of "~"
Omar Polo