discuss@mandoc.bsd.lv
 help / color / mirror / Atom feed
* mandoc-1.14.3 released (bugfixes only)
@ 2017-08-05 14:29 Ingo Schwarze
  0 siblings, 0 replies; only message in thread
From: Ingo Schwarze @ 2017-08-05 14:29 UTC (permalink / raw)
  To: discuss

Hi,

unfortunately, the mandoc-1.14.2 release contains two somewhat
inconvenient regressions that escaped testing.  For that reason,
i just uploaded a quick follow-up release 1.14.3, which is a pure
bug fix release.

mandoc-1.14.3 fixes the following issues, with no other changes:

 * man(7): Do not crash with out-of-bounds read access to a constant
   array if .sp or a blank line immediately precedes .SS or .SH.
   This regression caused crashes when compiled with hardening on
   Linux.  It is inconvenient because a number of real-world Linux
   manual pages trigger it, including mount(8).
 * mdoc(7): Do not crash with out-of-bounds read access to a constant
   array if .sp or a blank line precede the first .Sh macro.
   This is a minor bug, and no manual pages was found in the wild
   to trigger it, but the fix is very similar to the fix of the
   previous, more serious bug.
 * tbl(7): Ignore explicitly specified negative column widths rather
   than wrapping around to huge numbers and risking memory exhaustion.
   This bug is somewhat inconvenient because negative column widths
   can occur in practice when manual pages attempt to calculate
   columns widths using special roff(7) number registers not supported
   by mandoc(1).  In particular, the Linux ps(1) manual page triggers
   the bug.
 * man(1): No longer use names that only occur in the SYNOPSIS section.
   Gets rid of some surprising behaviour and bogus warnings.
   This is a minor issue, but it was found to cause some confusion
   with respect to a number of illumos manual pages.

Sorry for the inconvenience.

Please use mandoc-1.14.3 rather than mandoc-1.14.2.

Yours,
  Ingo
--
 To unsubscribe send an email to discuss+unsubscribe@mandoc.bsd.lv

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2017-08-05 14:29 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-08-05 14:29 mandoc-1.14.3 released (bugfixes only) Ingo Schwarze

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).