Age | Commit message (Collapse) | Author | Lines | |
---|---|---|---|---|
2017-08-10 | Fix segfault in feh_event_handle_keypress for certain key inputs | Daniel Friesel | -2/+11 | |
Turns out that it is undefined behaviour to pass a value to isctype functions which does not fit inside a char. Closes #312 | ||||
2017-08-05 | Show ImageMagick output on the terminal unless --quiet is specified | Daniel Friesel | -3/+5 | |
(cf #309) | ||||
2017-07-25 | Release v2.19.12.19.1 | Daniel Friesel | -1/+2 | |
2017-06-21 | changelog | Daniel Friesel | -0/+6 | |
2017-06-20 | Make key names in KEYS section more consistent with X11 keysyms (#304) | Daniel Friesel | -9/+17 | |
2017-06-19 | Fix Shift modifier not being recognized for tab, space and similar keys | Daniel Friesel | -2/+2 | |
Closes #303 | ||||
2017-06-18 | Use X11-style key names in the feh(1) KEYS section | Daniel Friesel | -4/+4 | |
closes #302 | ||||
2017-06-06 | release v2.192.19 | Daniel Friesel | -0/+10 | |
2017-06-06 | install feh icons with the correct permissions (644) (closes #301) | Daniel Friesel | -0/+2 | |
2017-06-01 | feh(1): files are saved in the current working directory (closes #300) | Daniel Friesel | -7/+6 | |
2017-04-16 | feh(1): Note that --fullscreen and --scale-down do not affect thumbnail lists | Daniel Friesel | -1/+8 | |
closes #270 | ||||
2017-04-16 | Merge branch 'Ferada-xdg-thumbnails' | Daniel Friesel | -31/+76 | |
2017-04-16 | Thumbnail generation: Handle HOME-less users (and some other edge cases) | Daniel Friesel | -2/+12 | |
2017-04-06 | Fix indentation. | Olof-Joachim Frahm | -6/+6 | |
2017-04-05 | Use temporary file to create thumbnail. | Olof-Joachim Frahm | -6/+18 | |
2017-04-05 | `sizeof(char)` is defined to be 1. | Olof-Joachim Frahm | -1/+1 | |
2017-04-05 | Use XDG_CACHE_HOME for thumbnails. | Olof-Joachim Frahm | -22/+45 | |
2017-04-04 | version bump2.18.3 | Daniel Friesel | -1/+2 | |
2017-04-03 | changelog | Daniel Friesel | -0/+7 | |
2017-04-02 | replace _emalloc with emalloc (is the same unless DMALLOC is used) | Daniel Friesel | -2/+2 | |
2017-04-02 | Merge pull request #290 from stoeckmann/emalloc | Daniel Friesel | -1/+1 | |
Check malloc return value for NULL. | ||||
2017-04-02 | Merge pull request #289 from stoeckmann/memory-leak | Daniel Friesel | -0/+2 | |
Fixed memory leak on file name collision. | ||||
2017-04-02 | Merge pull request #288 from stoeckmann/strncpy | Daniel Friesel | -6/+12 | |
Always terminate strncpy results with '\0'. | ||||
2017-04-02 | Merge pull request #287 from stoeckmann/empty-file | Daniel Friesel | -2/+2 | |
Avoid out of boundary read on empty/broken file. | ||||
2017-04-02 | Check malloc return value for NULL. | Tobias Stoeckmann | -1/+1 | |
If malloc cannot allocate enough memory, it could return NULL. This is not necessarily true for default Linux settings, but can be provoked there as well by adjusting proc entries. Other systems like the *BSD ones definitely do this. The function _emalloc exists for exactly this purpose, so use it instead of calling malloc directly. Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> | ||||
2017-04-02 | Fixed memory leak on file name collision. | Tobias Stoeckmann | -0/+2 | |
If feh_unique_filename encounters a file that already exists, the memory for the temporary filename is not released. As this happens in /tmp at some code places, an attacker could use this to spray the memory of feh, or simply triggering an out of memory condition. Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> | ||||
2017-04-02 | Avoid out of boundary read on empty/broken file. | Tobias Stoeckmann | -2/+2 | |
If ereadfile encounters an empty file or the file could not be read, an out ouf boundary read (and possible write) occurs. Always check the return value of fread to be > 0 before processing the result buffer. Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> | ||||
2017-04-02 | Always terminate strncpy results with '\0'. | Tobias Stoeckmann | -6/+12 | |
The strncpy function does not guarantee to end the resulting character sequence with a terminating nul character if not enough space is available. This could be triggered by supplying a sufficiently long output_file option. Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> | ||||
2017-04-01 | changelog | Daniel Friesel | -0/+9 | |
2017-03-29 | Merge pull request #286 from stoeckmann/ipc | Daniel Friesel | -1/+1 | |
Fix double-free/OOB-write while receiving IPC data | ||||
2017-03-23 | Fix double-free/OOB-write while receiving IPC data | Tobias Stoeckmann | -1/+1 | |
If a malicious client pretends to be the E17 window manager, it is possible to trigger an out of boundary heap write while receiving an IPC message. The length of the already received message is stored in an unsigned short, which overflows after receiving 64 KB of data. It's comparably small amount of data and therefore achievable for an attacker. When len overflows, realloc() will either be called with a small value and therefore chars will be appended out of bounds, or len + 1 will be exactly 0, in which case realloc() behaves like free(). This could be abused for a later double-free attack as it's even possible to overwrite the free information -- but this depends on the malloc implementation. Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> | ||||
2017-02-26 | Also update window title for thumbnail windows (closes #280) | Daniel Friesel | -3/+22 | |
2017-02-23 | Fix memory leak when closing images opened from thumbnail mode | Daniel Friesel | -0/+3 | |
2017-02-16 | I made a derp2.18.2 | Daniel Friesel | -1/+7 | |
2017-01-22 | release v2.18.12.18.1 | Daniel Friesel | -2/+3 | |
2017-01-15 | feh(1): Update giflib notes | Daniel Friesel | -4/+5 | |
2017-01-14 | Changelog | Daniel Friesel | -0/+5 | |
2017-01-12 | Pass windidget to feh_action_run, making it possible to use format specifiers | ANogin | -10/+10 | |
like %o and %z in slideshow actions (I would like to use this to zoom in, pan, and then use an action to crop the window to zoomed in view). | ||||
2017-01-11 | rewrite window title whenever the image is rendered (closes #266) | Daniel Friesel | -0/+8 | |
2017-01-02 | feh(1): Move --index-info to INDEX AND THUMBNAIL MODE OPTIONS (closes #267) | Daniel Friesel | -26/+28 | |
2016-12-07 | feh(1): Add note about background setting in GNOME (#225) | Daniel Friesel | -0/+11 | |
2016-12-07 | feh.desktop: Use %U, not %F, since we also support URLs (closes #264) | Daniel Friesel | -1/+1 | |
2016-11-01 | Release v2.182.18 | Daniel Friesel | -3/+4 | |
2016-10-31 | feh(1): Add --auto-rotate | Daniel Friesel | -0/+5 | |
2016-10-30 | changelog | Daniel Friesel | -0/+8 | |
2016-10-30 | Merge branch 'teleshoes-autorotate' | Daniel Friesel | -12/+21 | |
2016-10-30 | imlib.c: Move orientation logic inside HAVE_LIBEXIF | Daniel Friesel | -2/+2 | |
2016-10-29 | Revert "config: exif 0 => 1" | Daniel Friesel | -1/+1 | |
This reverts commit 465238bdddb11d00926dcaa76ffe2f59fb536df5. | ||||
2016-10-29 | add cmdline opt --auto-rotate to rotate according to EXIF info | Elliot Wolk | -1/+7 | |
2016-10-29 | config: exif 0 => 1 | Elliot Wolk | -1/+1 | |