<feed xmlns='http://www.w3.org/2005/Atom'>
<title>atril/backend/dvi, branch v1.22.0</title>
<subtitle>MATE document viewer</subtitle>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/'/>
<entry>
<title>dvi: Mitigate command injection attacks by quoting filename</title>
<updated>2017-08-20T14:45:33+00:00</updated>
<author>
<name>Tobias Mueller</name>
<email>muelli@cryptobitch.de</email>
</author>
<published>2017-07-14T10:52:14+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=4650fb05e46e144be986a11a666a47add39b3799'/>
<id>4650fb05e46e144be986a11a666a47add39b3799</id>
<content type='text'>
With commit 1fcca0b8041de0d6074d7e17fba174da36c65f99 came a DVI backend.
It exports to PDF via the dvipdfm tool.
It calls that tool with the filename of the currently loaded document.
If that filename is cleverly crafted, it can escape the currently
used manual quoting of the filename.  Instead of manually quoting the
filename, we use g_shell_quote.

https://bugzilla.gnome.org/show_bug.cgi?id=784947

origin commit:
https://git.gnome.org/browse/evince/commit/?id=350404c
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
With commit 1fcca0b8041de0d6074d7e17fba174da36c65f99 came a DVI backend.
It exports to PDF via the dvipdfm tool.
It calls that tool with the filename of the currently loaded document.
If that filename is cleverly crafted, it can escape the currently
used manual quoting of the filename.  Instead of manually quoting the
filename, we use g_shell_quote.

https://bugzilla.gnome.org/show_bug.cgi?id=784947

origin commit:
https://git.gnome.org/browse/evince/commit/?id=350404c
</pre>
</div>
</content>
</entry>
<entry>
<title>mdvi-lib: Fix compilation warning (const-correctness)</title>
<updated>2017-08-20T14:35:37+00:00</updated>
<author>
<name>Tobias Mueller</name>
<email>muelli@cryptobitch.de</email>
</author>
<published>2017-07-20T02:35:29+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=6adf8d121576010e741d0302503f0bed25672004'/>
<id>6adf8d121576010e741d0302503f0bed25672004</id>
<content type='text'>
const char accessed via pointer to char.

backend/dvi/mdvi-lib/fontmap.c: In function ‘mdvi_init_fontmaps’:
backend/dvi/mdvi-lib/fontmap.c:725:9: warning: assignment discards
‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
  config = kpse_cnf_get("mdvi-config");
         ^

https://bugzilla.gnome.org/show_bug.cgi?id=784912

origin commit:
https://git.gnome.org/browse/evince/commit/?id=e3dccc1
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
const char accessed via pointer to char.

backend/dvi/mdvi-lib/fontmap.c: In function ‘mdvi_init_fontmaps’:
backend/dvi/mdvi-lib/fontmap.c:725:9: warning: assignment discards
‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
  config = kpse_cnf_get("mdvi-config");
         ^

https://bugzilla.gnome.org/show_bug.cgi?id=784912

origin commit:
https://git.gnome.org/browse/evince/commit/?id=e3dccc1
</pre>
</div>
</content>
</entry>
<entry>
<title>dvi: Use new font name instead of the old one</title>
<updated>2016-06-29T14:23:03+00:00</updated>
<author>
<name>raveit65</name>
<email>chat-to-me@raveit.de</email>
</author>
<published>2016-06-24T18:09:22+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=660f81b3fdcc0ca436c95eaf41885accd74ec034'/>
<id>660f81b3fdcc0ca436c95eaf41885accd74ec034</id>
<content type='text'>
https://bugzilla.gnome.org/show_bug.cgi?id=612298

taken from:
https://git.gnome.org/browse/evince/commit/?id=8bab924
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://bugzilla.gnome.org/show_bug.cgi?id=612298

taken from:
https://git.gnome.org/browse/evince/commit/?id=8bab924
</pre>
</div>
</content>
</entry>
<entry>
<title>dvi: Use t1 font mapping files</title>
<updated>2016-06-29T14:23:03+00:00</updated>
<author>
<name>raveit65</name>
<email>chat-to-me@raveit.de</email>
</author>
<published>2016-06-24T18:06:52+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=4bd77ab2a58733fd599912946e84b57904e3e040'/>
<id>4bd77ab2a58733fd599912946e84b57904e3e040</id>
<content type='text'>
http://bugzilla.gnome.org/show_bug.cgi?id=612298

taken from:
https://git.gnome.org/browse/evince/commit/?id=dfbd28dfd9d790b5a3f39890f66a2da9a0d1c759
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
http://bugzilla.gnome.org/show_bug.cgi?id=612298

taken from:
https://git.gnome.org/browse/evince/commit/?id=dfbd28dfd9d790b5a3f39890f66a2da9a0d1c759
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix undefined variable warnings in dvi-backend</title>
<updated>2016-06-24T18:48:20+00:00</updated>
<author>
<name>raveit65</name>
<email>chat-to-me@raveit.de</email>
</author>
<published>2016-06-23T00:03:06+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=3018425dc1ec8955ec790f84a5cc8793190d0179'/>
<id>3018425dc1ec8955ec790f84a5cc8793190d0179</id>
<content type='text'>
taken from:
https://git.gnome.org/browse/evince/commit/?id=c8ce06b
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
taken from:
https://git.gnome.org/browse/evince/commit/?id=c8ce06b
</pre>
</div>
</content>
</entry>
<entry>
<title>backend: drop some win32-specific stuff</title>
<updated>2016-06-01T08:27:13+00:00</updated>
<author>
<name>monsta</name>
<email>monsta@inbox.ru</email>
</author>
<published>2016-06-01T08:20:57+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=415e00e359d2114a215289b4cf4c88368f232ba7'/>
<id>415e00e359d2114a215289b4cf4c88368f232ba7</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>dvi: fix crash due to regression</title>
<updated>2015-11-05T11:42:20+00:00</updated>
<author>
<name>monsta</name>
<email>monsta@inbox.ru</email>
</author>
<published>2015-11-05T11:42:20+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=aa97fdc1e1dc9ca08e70cbba9038da03f14d6261'/>
<id>aa97fdc1e1dc9ca08e70cbba9038da03f14d6261</id>
<content type='text'>
fixes https://github.com/mate-desktop/atril/issues/164

regression has been introduced in https://github.com/mate-desktop/atril/commit/94dcb761b95ee54ef1f1512d59721932d75ffb7f
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
fixes https://github.com/mate-desktop/atril/issues/164

regression has been introduced in https://github.com/mate-desktop/atril/commit/94dcb761b95ee54ef1f1512d59721932d75ffb7f
</pre>
</div>
</content>
</entry>
<entry>
<title>Remove unused variables from mdvi-lib</title>
<updated>2015-09-02T08:31:02+00:00</updated>
<author>
<name>Hib Eris</name>
<email>hib@hiberis.nl</email>
</author>
<published>2011-12-19T13:03:10+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=76bc1b06283335481d7826e5eac8238e3547e6dc'/>
<id>76bc1b06283335481d7826e5eac8238e3547e6dc</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>dvi: Another fix for buffer overwrite in dvi-backend</title>
<updated>2014-12-10T01:11:02+00:00</updated>
<author>
<name>infirit</name>
<email>infirit@gmail.com</email>
</author>
<published>2014-12-10T01:11:02+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=bf6e3391b82844e8b6aec0f26332b9e2df41edf8'/>
<id>bf6e3391b82844e8b6aec0f26332b9e2df41edf8</id>
<content type='text'>
Taken from evince commit: efadec4ffcdde3373f6f4ca0eaac98dc963c4fd5
From: Scott Reeves &lt;sreeves@novell.com&gt;
Gnome bug: https://bugzilla.gnome.org/show_bug.cgi?id=643882
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Taken from evince commit: efadec4ffcdde3373f6f4ca0eaac98dc963c4fd5
From: Scott Reeves &lt;sreeves@novell.com&gt;
Gnome bug: https://bugzilla.gnome.org/show_bug.cgi?id=643882
</pre>
</div>
</content>
</entry>
<entry>
<title>backends: Fix another security issue in the dvi-backend</title>
<updated>2014-12-10T00:48:23+00:00</updated>
<author>
<name>infirit</name>
<email>infirit@gmail.com</email>
</author>
<published>2014-12-10T00:48:23+00:00</published>
<link rel='alternate' type='text/html' href='http://git.mate-desktop.org/atril/commit/?id=4df03e6ebcf0443429d17027026532336e4b0aca'/>
<id>4df03e6ebcf0443429d17027026532336e4b0aca</id>
<content type='text'>
Taken from evince commit: 439c5070022eab6cef7266aab47f978058012c72
From: Vincent Untz &lt;vuntz@gnome.org&gt;
Gnome bug: https://bugzilla.gnome.org/show_bug.cgi?id=640923
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Taken from evince commit: 439c5070022eab6cef7266aab47f978058012c72
From: Vincent Untz &lt;vuntz@gnome.org&gt;
Gnome bug: https://bugzilla.gnome.org/show_bug.cgi?id=640923
</pre>
</div>
</content>
</entry>
</feed>
