Release 0.12.3

See NEWS
Fix manual and release-web targets.

.appveyor.yml

@@ -1,4 +1,4 @@
-version: 0.12.2.{build}
+version: 0.12.3.{build}
 max_jobs: 4
 image: Visual Studio 2019
 environment:

ChangeLog

@@ -1,6 +1,158 @@
 Full history from the git log
 -----------------------------
 
+2021-02-26  Reini Urban  <[email protected]>
+
+        Release 0.12.3
+
+        Fix manual and release-web targets.
+
+2021-02-25  Reini Urban  <[email protected]>
+
+	encode: fix null-deref in DISABLE_NODSTYLE
+	with empty NOD entries.
+	detected by llvmfuzz
+
+	fix outdxf overflow with Invalid shift-jis sequence \M+1xxxxxx
+	detected by llvmfuzz
+
+	indxf: abstract Premature DXF end to SAFER_STRTOL
+
+	indxf: harden Premature DXF end errors
+	we can assume there will always be a final "  0\nEOF" string.
+
+	other string stream offset with r2010 Beta 2 samples.
+	Fixes GH #318
+
+	WIP wrong string stream hisize offsets
+	with Gator Beta 2 samples. See GH #318
+	to/2010/from_knowledge.autodesk.com/
+
+	outdxf: handle invalid SAB abort
+	detected by llvmfuzz
+
+	outdxf logging: avoid wrong bitsize position overflow
+	detected by llvmfuzz
+
+	outdxf: fix crash with stale VERTEX
+	fail with empty last_vertex.
+	detected by llvmfuzz
+
+	outdxf: protect empty tio.entity
+	detected by llvmfuzz
+
+	indxf: hard error on invalid dxf pair
+	before we simply returned 0 (or NAN) on invalid dxf pairs.
+	now we set the stream to the end to force an early exit.
+
+2021-02-24  Reini Urban  <[email protected]>
+
+	indxf: protect dwg_read_dxf the same as dxf_read_file
+	check if input size is too small, and if it's not a DWG.
+	llvmfuzz used the latter, which was not repro with dxf2dwg.
+
+	encode: convert assert address to error
+
+	fix bit_eq_TU for NULL args
+	or conversion trouble.
+	detected by llvmfuzz
+
+	LTYPE: protect against empty strings_area
+	detected via llvmfuzz
+
+	injson: fix TFFx buffer-overflow
+	write max TFF size.
+	detected via llvmfuzz
+
+	encode: protect object dat pos 0 overwrites
+	don't assert, fail.
+	detected via llvmfuzz
+
+	decode: Size underflow for R2004_Header
+	detected by llvmfuzz
+
+	fix injson double-free
+	created_by is static
+	detected via llvmfuzz
+
+	outdxf: protect dxf_CMC string overflows
+	with fuzzing. llvmfuzz
+
+2021-02-23  Reini Urban  <[email protected]>
+
+	prelim. NEWS for next patch release
+
+	geojson: add PAIR_Sc for non-null values
+
+2021-02-23  Reini Urban  <[email protected]>
+
+	abstract TU_to_int for ubsan access
+	which was totally wrong in some cases. but only with ubsan or
+	HAVE_ALIGNED_ACCESS_REQUIRED.
+
+	fix out_json print_wcquote for unaligned/UBSAN strings.
+
+2021-02-23  Reini Urban  <[email protected]>
+
+	llvmfuzz: close the null file-handle
+	running out of it
+
+	Fix dwg2dxf uppercase extension problem
+	GH #311, esp on Windows
+
+	indxf: detect dxf_read_* premature DXF end
+	A DXF line must end with \n.
+	detected via llvmfuzz
+
+	indxf: fix add_HATCH overflow logic, wrong hdl_idx check
+	detected via llvmfuzz
+
+	bit_TU_to_utf8_len: fix heap overflow
+	force string being delimited.
+	deteced by llvmfuzz
+
+	indxf: fix 3DSOLID overallocation
+	detected via llvmfuzz
+
+	indxf: fix MTEXT text running lines, DXF 3
+	detected via llvmfuzz
+
+	dwgfuzz: add honggfuzz and llvmfuzz instructions
+	See GH #317
+
+	add suggested __attribute__ ((noreturn)) to examples/dwgadd
+	clang -Wmissing-noreturn
+
+	some libfuzzer assertions. see llvmfuzz
+
+2021-02-23  Reini Urban  <[email protected]>
+
+	protect invalid geojson input
+	via llvmfuzz.
+
+	cd .build-clang
+	m -C src && \
+	  clang -I../src -Isrc -g -O3 -fsanitize=address,fuzzer ../examples/llvmfuzz.c -Lsrc/.libs -lredwg;
+	LD_LIBRARY_PATH=src/.libs ./a.out -detect_leaks=0 -rss_limit_mb=8000 -timeout=4000 ../test/test-data/
+
+2021-02-23  Reini Urban  <[email protected]>
+
+	replace prelim fuzz_dwg_decode.c with llvmfuzz.c
+	with proper coverage
+
+2021-02-23  davkor  <[email protected]>
+
+	Added initial fuzzer for OSS-Fuzz integration.
+
+2021-02-22  Reini Urban  <[email protected]>
+
+	add release-web maintainer target
+
+	docs: fix make refman out-of-tree
+
+	doxygen update to 1.8.20
+	which deprecated several external programs
+
 2021-02-22  Reini Urban  <[email protected]>
 
 	Release 0.12.2

Makefile.am

@@ -123,7 +123,7 @@ regen-swig-patch:
 WEB_DIR = $(srcdir)/../libredwg-web
 release-web: manual refman
 	if test -d $(WEB_DIR)/manual; then \
-	  rsync -avzC doc/manual/* $(WEB_DIR)/manual/; \
+	  rsync -avzC $(srcdir)/doc/manual/* $(WEB_DIR)/manual/; \
 	  rsync -avzC doc/refman/* $(WEB_DIR)/refman/; \
 	fi
 	cd $(WEB_DIR) && \

NEWS

@@ -2,16 +2,18 @@ GNU LibreDWG NEWS -- history of user-visible changes.  -*-indented-text-*-
 Copyright (C) 2021 Free Software Foundation, Inc.
 See the end for copying conditions.
 
-LibreDWG version 0.12.3 - 2021/xx/xx - beta:
+LibreDWG version 0.12.3 - 2021/02/26 - beta:
 
 Minor bugfixes:
-  * Fixed many more minor fuzzer errors, detected with llvmfuzz.
+  * Fixed many more minor fuzzer errors, detected with the new llvmfuzz.
   * Harmonize UBSAN access for unaligned shorts (unicode strings).
     Wrong only with UBSAN or HAVE_ALIGNED_ACCESS_REQUIRED.
   * Fix dwg2dxf/dxf2dwg uppercase extension problem (Windows) (GH #311).
   * Fix section_string_stream offset for r2010 beta 2 (many public samples) (GH #318)
 Minor features:
-  * Added examples/llvmfuzz for libfuzzer and the google ossfuzz service.
+  * Added google oss-fuzz integration, by David Korczynski (PR #316)
+    libredwg is now fuzzed twice daily.
+  * Added examples/llvmfuzz for libfuzzer and the google oss-fuzz service.
 
 LibreDWG version 0.12.2 - 2021/02/23 - beta:
 

doc/Makefile.am

@@ -24,8 +24,9 @@ info_TEXINFOS = LibreDWG.texi
 LibreDWG_TEXINFOS = fdl.texi dynapi.texi
 
 if HAVE_MAKEINFO
+.PHONY: manual
 manual:
-	../build-aux/gendocs.sh LibreDWG "GNU LibreDWG - Manual"
+	cd $(top_srcdir)/doc && ../build-aux/gendocs.sh LibreDWG "GNU LibreDWG - Manual"
 
 endif
 

libredwg.spec

@@ -1,6 +1,6 @@
 # -*- sh -*-
 Name:           libredwg
-Version:        0.12.2
+Version:        0.12.3
 Release:        1%{?dist}
 Summary:        GNU C library and programs to read and write DWG files
 
@@ -137,6 +137,9 @@ fi
 #TODO add to {_libdir}/perl5/perllocal.pod
 
 %changelog
+* Fri 26 Feb 2021 Reini Urban <[email protected]> 0.12.3-1
+- upstream update. Minor fixes
+
 * Tue 23 Feb 2021 Reini Urban <[email protected]> 0.12.2-1
 - upstream update. Minor fixes
 

programs/dwg2SVG.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWG2SVG "1" "February 2021" "dwg2SVG 0.12.2" "User Commands"
+.TH DWG2SVG "1" "February 2021" "dwg2SVG 0.12.3" "User Commands"
 .SH NAME
-dwg2SVG \- manual page for dwg2SVG 0.12.2
+dwg2SVG \- manual page for dwg2SVG 0.12.3
 .SH SYNOPSIS
 .B dwg2SVG
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE >SVGFILE\/\fR

programs/dwg2dxf.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWG2DXF "1" "February 2021" "dwg2dxf 0.12.2" "User Commands"
+.TH DWG2DXF "1" "February 2021" "dwg2dxf 0.12.3" "User Commands"
 .SH NAME
-dwg2dxf \- manual page for dwg2dxf 0.12.2
+dwg2dxf \- manual page for dwg2dxf 0.12.3
 .SH SYNOPSIS
 .B dwg2dxf
 [\fI\,OPTION\/\fR]... \fI\,DWGFILES\/\fR...

programs/dwg2ps.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWG2PS "1" "February 2021" "dwg2ps 0.12.2" "User Commands"
+.TH DWG2PS "1" "February 2021" "dwg2ps 0.12.3" "User Commands"
 .SH NAME
-dwg2ps \- manual page for dwg2ps 0.12.2
+dwg2ps \- manual page for dwg2ps 0.12.3
 .SH SYNOPSIS
 .B dwg2ps
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE \/\fR[\fI\,PSFILE\/\fR]

programs/dwgbmp.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWGBMP "1" "February 2021" "dwgbmp 0.12.2" "User Commands"
+.TH DWGBMP "1" "February 2021" "dwgbmp 0.12.3" "User Commands"
 .SH NAME
-dwgbmp \- manual page for dwgbmp 0.12.2
+dwgbmp \- manual page for dwgbmp 0.12.3
 .SH SYNOPSIS
 .B dwgbmp
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE \/\fR[\fI\,BMPFILE\/\fR]

programs/dwgfilter.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWGFILTER "1" "February 2021" "dwgfilter 0.12.2" "User Commands"
+.TH DWGFILTER "1" "February 2021" "dwgfilter 0.12.3" "User Commands"
 .SH NAME
-dwgfilter \- manual page for dwgfilter 0.12.2
+dwgfilter \- manual page for dwgfilter 0.12.3
 .SH DESCRIPTION
 dwgfilter [OPTIONS...] dwgfile
 .PP

programs/dwggrep.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWGGREP "1" "February 2021" "dwggrep 0.12.2" "User Commands"
+.TH DWGGREP "1" "February 2021" "dwggrep 0.12.3" "User Commands"
 .SH NAME
-dwggrep \- manual page for dwggrep 0.12.2
+dwggrep \- manual page for dwggrep 0.12.3
 .SH SYNOPSIS
 .B dwggrep
 [\fI\,OPTIONS\/\fR]... \fI\,pattern files\/\fR

programs/dwglayers.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWGLAYERS "1" "February 2021" "dwglayers 0.12.2" "User Commands"
+.TH DWGLAYERS "1" "February 2021" "dwglayers 0.12.3" "User Commands"
 .SH NAME
-dwglayers \- manual page for dwglayers 0.12.2
+dwglayers \- manual page for dwglayers 0.12.3
 .SH SYNOPSIS
 .B dwglayers
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE\/\fR

programs/dwgread.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWGREAD "1" "February 2021" "dwgread 0.12.2" "User Commands"
+.TH DWGREAD "1" "February 2021" "dwgread 0.12.3" "User Commands"
 .SH NAME
-dwgread \- manual page for dwgread 0.12.2
+dwgread \- manual page for dwgread 0.12.3
 .SH SYNOPSIS
 .B dwgread
 [\fI\,OPTION\/\fR]... \fI\,DWGFILE\/\fR

programs/dwgrewrite.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWGREWRITE "1" "February 2021" "dwgrewrite 0.12.2" "User Commands"
+.TH DWGREWRITE "1" "February 2021" "dwgrewrite 0.12.3" "User Commands"
 .SH NAME
-dwgrewrite \- manual page for dwgrewrite 0.12.2
+dwgrewrite \- manual page for dwgrewrite 0.12.3
 .SH SYNOPSIS
 .B dwgrewrite
 [\fI\,OPTION\/\fR]... \fI\,INFILE \/\fR[\fI\,OUTFILE\/\fR]

programs/dwgwrite.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DWGWRITE "1" "February 2021" "dwgwrite 0.12.2" "User Commands"
+.TH DWGWRITE "1" "February 2021" "dwgwrite 0.12.3" "User Commands"
 .SH NAME
-dwgwrite \- manual page for dwgwrite 0.12.2
+dwgwrite \- manual page for dwgwrite 0.12.3
 .SH SYNOPSIS
 .B dwgwrite
 [\fI\,OPTION\/\fR]... [\fI\,-o DWGFILE\/\fR] \fI\,INFILE\/\fR

programs/dxf2dwg.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DXF2DWG "1" "February 2021" "dxf2dwg 0.12.2" "User Commands"
+.TH DXF2DWG "1" "February 2021" "dxf2dwg 0.12.3" "User Commands"
 .SH NAME
-dxf2dwg \- manual page for dxf2dwg 0.12.2
+dxf2dwg \- manual page for dxf2dwg 0.12.3
 .SH SYNOPSIS
 .B dxf2dwg
 [\fI\,OPTION\/\fR]... \fI\,DXFFILES \/\fR...

programs/dxfwrite.1

@@ -1,7 +1,7 @@
 .\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.47.16.
-.TH DXFWRITE "1" "February 2021" "dxfwrite 0.12.2" "User Commands"
+.TH DXFWRITE "1" "February 2021" "dxfwrite 0.12.3" "User Commands"
 .SH NAME
-dxfwrite \- manual page for dxfwrite 0.12.2
+dxfwrite \- manual page for dxfwrite 0.12.3
 .SH SYNOPSIS
 .B dxfwrite
 [\fI\,OPTION\/\fR]... [\fI\,-o DXFFILE\/\fR] \fI\,INFILE\/\fR