What's new in File 5.31
May 24, 2017
- This is a bug fix release; most of the fixes were driven by oss-fuzz findings, and the reason for the release now is that there have been no new reports for more than two weeks. Most of the problems found by oss-fuzz were in...
- cdf parsing (out of bounds reads)
- string/regex matching (uninitialized memory reads)
- Other misc fixes:
- remove trailing spaces from magic files
- refactor is_tar
New in File 5.29 (Oct 26, 2016)
- der getlength overflow (Jonas Wagner)
- multiple magic file load failure (Christoph Biedl)
- CDF parsing improvements (Guy Helmer)
- Add support for signed indirect offsets
- cat /dev/null | file - should print empty (Christoph Biedl)
- Bump string size from 64 to 96.
- PR/556: Fix separators on annotations.
New in File 5.26 (Apr 17, 2016)
- Features:
- the number of bytes read from files to determine the file type is now configurable (-P bytes=)
- add experimental DER parser ("der" softmagic field type)
- add NUL terminated output format -00
- decompression code now reports decompression errors
- add zlib support if the OS has it
- Bugfixes:
- fix ID3 indirect parsing
- provide dprintf(3) for the OS's that don't have it
- delete REG_STARTEND code is not working as expected
- forking for decompression was broken with magic_buffer
New in File 5.25 (Sep 16, 2015)
- add a limit to the length of regex searches
- fix problems with --parameter
- Windows fixes PR/466
New in File 5.24 (Jul 12, 2015)
- fix parsing of the mime long options
- adjust the FIT map magic to work after the date bug fixes in 5.23
New in File 5.22 (Jan 3, 2015)
- Bugs:
- restructure elf note printing to avoid repeated messages
- add note limit, suggested by Alexander Cherepanov
- Bail out on partial pread()'s (Alexander Cherepanov)
- Fix incorrect bounds check in file_printable (Alexander Cherepanov)
- PR/405: ignore SIGPIPE from uncompress programs
- change printable -> file_printable and use it in more places for safety
- Features:
- add indirect relative for TIFF/Exif
- in ELF, instead of "(uses dynamic libraries)" when PT_INTERP is present print the interpreter name.
New in File 5.20 (Dec 5, 2014)
- 1.sm.webp: RIFF (little-endian) data, Web/P image, VP8 encoding, 320x214, Scaling: [none]x[none], YUV color, decoders should clamp
- 1.webp: RIFF (little-endian) data, Web/P image, VP8 encoding, 550x368, Scaling: [none]x[none], YUV color, decoders should clamp
- CCITT_1.TIF: TIFF image data, little-endian, direntries=17, height=2376, bps=1, compression=bi-level group 4, PhotometricIntepretation=WhiteIsZero, name=Standard Input, description=converted PBM file, width=1728
- FLOWER.jpg: JPEG image data, baseline, precision 8, 2592x3904, frames 3
- FLOWER.wdp: JPEG-XR Image, hard tiling, spatial xform=TL, short header, 2592x3904, bitdepth=5-6-5, colorfmt=YONLY
- MARBLES.TIF: TIFF image data, little-endian, direntries=16, height=1001, bps=206, compression=LZW, PhotometricIntepretation=RGB, width=1419
- There are also a few bugs fixed from the previous releases, so this would be the recommended release to use...
New in File 5.17 (Feb 13, 2014)
- Count recursion levels through indirect magic
- Prevent infinite recursion on files with indirect offsets of 0
- Add -E flag that makes file print filesystem errors to stderr and exit.
- mime printing could print results from multiple magic entries if there were multiple matches.
- In some cases overflow was not detected when computing offsets in softmagic.
- Use strcasestr() to for cdf strings
- Reset to the "C" locale while doing regex operations, or case insensitive comparisons; this is provisional
New in File 5.16 (Dec 2, 2013)
- Always leave magic file loaded, don't unload for magic_check, etc.
- Fix default encoding to binary instead of unknown which broke recently
- Handle empty and one byte files, less specially so that --mime-encoding does not break completely
- Fix erroneous non-zero exit code from non-existant file and message
- Add CDF MSI file detection (Guy Helmer)