| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Fix possible stack overflow in date parsing routine | Michael Budde | 2019-01-26 | 1 | -0/+3 | |
| | | | | | | | | | | | | | | | | It is possible to create a stack overflow by giving a date that is longer than the buffer that is used during date parsing because the length of the input string is not checked. The `VERIFY` macro is only enabled when debug-mode is enabled and the `--verify-memory` argument is used. Prevent the issue by always checking the input string length and discarding dates that does not fit in the buffer as invalid. This issue has been assigned CVE-2017-12482. Fixes #1224 | |||||
| * | Ignore null deferred postings | Michael Budde | 2019-01-23 | 1 | -0/+3 | |
| | | | | | | | | | | | | | | | | | | | All-null transactions (i.e. a transaction where all postings have a null amount) are discarded during parsing and the `xact` object is free'd. But if the transaction contains a deferred posting this results in a use-after-free vulnerability because a reference to the deferred posting is stored in the account object which is later read when deferred postings are applied after parsing is finished. Ignore null deferred postings to prevent this – they should not have any effect any way. Thanks to Cory Duplantis for reporting this issue and providing an initial analysis. Ref TALOS-2017-0304, CVE-2017-2808 Fixes #1723 | |||||
| * | Fix parsing issue involving effective dates | Martin Michlmayr | 2019-01-15 | 1 | -0/+3 | |
| | | | | | | | | | | | | | | | | | | Cory Duplantis reported that "A specially crafted journal file can cause [an] integer underflow resulting in code execution". Cory provided this test case: Expenses:Food:Groceries $ 37.50 ; ] [=2004/01/01] Note the ] that comes before [ after the ;. This issue was reported and described in great detail by Cory Duplantis of Cisco Talos. This issue is known as TALOS-2017-0303 and has been assigned CVE-2017-2807. Cory's description can be found at https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0303 Fixes #1722 | |||||
| * | Update NEWS for 3.1.2 | Martin Michlmayr | 2019-01-12 | 1 | -9/+42 | |
| | | ||||||
| * | Add release dates to doc/NEWS | Martin Michlmayr | 2019-01-12 | 1 | -3/+3 | |
| | | ||||||
| * | Remove trailing whitespace | Martin Michlmayr | 2019-01-09 | 2 | -11/+11 | |
| | | ||||||
| * | explain round brackets in section on funds | Georg J.P. Link | 2018-11-18 | 1 | -4/+5 | |
| | | | | Section "Working with multiple funds and accounts" introduces square brackets and explains them but does not explain round brackets in the following example. This commit adds the explanation what the round brackets do. | |||||
| * | Fix broken link in manual | Martin Michlmayr | 2018-11-14 | 1 | -1/+1 | |
| | | ||||||
| * | A minor suggested change in the documentation | John Wiegley | 2018-09-20 | 1 | -3/+3 | |
| | | ||||||
| * | Fix two bugs in the documentation | John Wiegley | 2018-09-03 | 1 | -2/+2 | |
| | | ||||||
| * | Clarify regex vs exact matches with has_tag() | Martin Michlmayr | 2018-08-31 | 1 | -1/+2 | |
| | | ||||||
| * | Fix texinfo syntax | Martin Michlmayr | 2018-08-30 | 1 | -1/+1 | |
| | | ||||||
| * | Clarify tag() and has_tag() | Martin Michlmayr | 2018-08-30 | 1 | -2/+6 | |
| | | | | | Fixes #1676 | |||||
| * | Correct some instance of @@ to @@@@ (for Texinfo escaping) | John Wiegley | 2018-08-09 | 1 | -8/+8 | |
| | | ||||||
| * | Mention and point to related bug for Payee metadata tag | Scott Carpenter | 2018-08-08 | 1 | -2/+5 | |
| | | ||||||
| * | Add notes to 5.7.1.1 Payee metadata tag doc | Scott Carpenter | 2018-08-02 | 1 | -0/+4 | |
| | | ||||||
| * | Added more documentation about assertions. | Pascal Fleury | 2018-07-18 | 1 | -0/+39 | |
| | | ||||||
| * | Fix order of transaction state in txn header | Scott Carpenter | 2018-07-09 | 1 | -1/+1 | |
| | | | | | The transaction state comes before (not after) the code. | |||||
| * | Document keywords "any" and "all" | Martin Michlmayr | 2018-07-06 | 1 | -0/+13 | |
| | | | | | Fixes #1192 | |||||
| * | Document the use of wildcards for !include | Martin Michlmayr | 2018-06-28 | 1 | -1/+3 | |
| | | | | | Fixes #1658 | |||||
| * | Documents commodity directive's alias sub-directive | Colin Dean | 2018-06-10 | 1 | -0/+4 | |
| | | ||||||
| * | Fix documentation for apply fixed | Martin Michlmayr | 2018-06-01 | 1 | -43/+35 | |
| | | | | | | | | | | The old "fixed" and "endfixed" are no longer used (and afaict don't work). You have to use "apply fixed" and "end apply" instead. Fixes issue #789 Signed-off-by: Martin Michlmayr <tbm@cyrius.com> | |||||
| * | Remove references to Bugzilla | Martin Michlmayr | 2018-06-01 | 1 | -1/+1 | |
| | | ||||||
| * | Add documentation on how to sort in reverse order | Vishesh Handa | 2018-04-08 | 1 | -0/+3 | |
| | | ||||||
| * | Fix Python example | Martin Michlmayr | 2018-03-25 | 1 | -1/+1 | |
| | | | | | | | Thanks to Brian Carlson for pointing this out. Fixes #547 | |||||
| * | Fix documentation about the "end" directive | Martin Michlmayr | 2018-03-25 | 1 | -1/+1 | |
| | | | | | | "tag" is not a block command. This was probably supposed to be "apply" which can be used to apply tags to several transactions. | |||||
| * | [misc] Update year in copyright notice to 2017 | Alexis Hildebrandt | 2018-01-27 | 1 | -1/+1 | |
| | | | | | [ci skip] | |||||
| * | For now, comment out a documented function whose test is failing | John Wiegley | 2017-12-30 | 1 | -10/+10 | |
| | | | | | Plus, the test was not testing the documented function! | |||||
| * | ledger3.texi: Fix two more typos | Daniel Mueller | 2017-12-20 | 1 | -5/+6 | |
| | | ||||||
| * | Merge pull request #500 from d-e-s-o/fix-another-typo | John Wiegley | 2017-12-15 | 1 | -1/+1 | |
| |\ | | | | | ledger3.texi: Fix typo | |||||
| | * | ledger3.texi: Fix typo | Daniel Mueller | 2017-12-15 | 1 | -1/+1 | |
| | | | ||||||
| * | | ledger3.texi: Fix typo | Daniel Mueller | 2017-12-15 | 1 | -1/+1 | |
| |/ | ||||||
| * | Fix sentence broken by d1928e64 | Michael Budde | 2017-10-30 | 1 | -1/+1 | |
| | | ||||||
| * | Merge pull request #487 from craig9/craig9-improve-wording | John Wiegley | 2017-10-26 | 1 | -1/+1 | |
| |\ | | | | | Improve wording, remove connection between financial worth and personal worth. | |||||
| | * | Improve wording, remove connection between financial worth and personal worth | Craig Marshall | 2017-02-17 | 1 | -1/+1 | |
| | | | ||||||
| * | | Merge pull request #488 from bkuhn/doc-mention-third-party-tutorials | John Wiegley | 2017-10-26 | 1 | -1/+19 | |
| |\ \ | | | | | | | Add mention of third-party tutorials to documentation | |||||
| | * | | Update nodes and menus based on section just added | Bradley M. Kuhn | 2017-02-23 | 1 | -2/+3 | |
| | | | | ||||||
| | * | | Section on Third-Party Tutorials available. | Bradley M. Kuhn | 2017-02-23 | 1 | -0/+17 | |
| | |/ | | | | | | | | | | | | | I was updating the tutorial that Conservancy published regarding how it uses Ledger CLI for non-profit accounting and realized that mentioning the tutorial's availability in Ledger's own documentation might be useful as well. | |||||
| * | | Merge pull request #492 from CrackedP0t/patch-1 | John Wiegley | 2017-10-26 | 1 | -1/+1 | |
| |\ \ | | | | | | | Fix small typo | |||||
| | * | | Fix small typo | Elaina Martineau | 2017-06-16 | 1 | -1/+1 | |
| | |/ | ||||||
| * | | Update: ledger3.texi: fix calculatiots | myq | 2017-05-28 | 1 | -4/+4 | |
| | | | | | | | Unless I'm missing something, these don't balance @ $750 | |||||
| * | | Update ledger3.texi: grammar and typos | myq | 2017-05-28 | 1 | -2/+2 | |
| |/ | | | | - removed redundant preposition - fixed calculation on unvalidated smallexample block | |||||
| * | Flip ordering of "options" and "command" in the man page | John Wiegley | 2017-02-16 | 1 | -2/+2 | |
| | | ||||||
| * | typo in docs | Alexander Pletnev | 2017-01-27 | 1 | -1/+1 | |
| | | | | | fix test | |||||
| * | [misc] Update year in copyright notice to 2017 | Alexis Hildebrandt | 2017-01-05 | 1 | -1/+1 | |
| | | | | | [ci skip] | |||||
| * | [doc] Use two ascii hyphen instead of one utf-8 en dash | Alexis Hildebrandt | 2017-01-05 | 1 | -6/+6 | |
| | | | | | [ci skip] | |||||
| * | fix typo in documentation | Andreas Hilboll | 2016-12-03 | 1 | -1/+1 | |
| | | ||||||
| * | Merge pull request #479 from thdox/fix-copyright | Alexis Hildebrandt | 2016-11-12 | 1 | -1/+1 | |
| |\ | | | | | | | | | Fix copyright year [ci skip] | |||||
| | * | Fix copyright year | thdox | 2016-11-01 | 1 | -1/+1 | |
| | | | ||||||
| * | | doc quoted_rfc4180 in man page | Gina White | 2016-11-12 | 1 | -0/+4 | |
| | | | ||||||
 |
index : fork-ledger.git | |
| summaryrefslogtreecommitdiff |