JMR-dev and Claude Opus 4.8
768d49094c
Fix path traversal in Topaz extraction (arbitrary file write)
...
The Topaz header record "tag" is read verbatim from the untrusted book
file by bookReadString() and then used unsanitized to build the output
filename in extractFiles(). A crafted tag such as "../../foo" let a
malicious .azw/Topaz file write attacker-controlled bytes outside the
extraction directory. The payload content requires no book key, since an
unencrypted record with compressedLength == 0 is returned raw.
Strip the record name to its basename before joining it to destdir so
traversal sequences (../, /, \) can no longer escape, and add an
abspath-based containment check as defense in depth.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-22 18:21:42 -05:00
NoDRM
7379b45319
Remove future import from ion.py
2024-11-10 20:15:33 +01:00
NoDRM
bde82fd7ab
Fix python2 support for ion.py
2024-11-10 16:10:29 +01:00
NoDRM
de3d91f5e5
Don't repack EPUB if nothing has changed
2024-11-10 15:21:09 +01:00
NoDRM
c5ee327a60
Add note about key import/export for K4PC in the help file ( fixes #663 )
2024-11-10 14:44:57 +01:00
NoDRM
501a1e6d31
Update obok readme to include wmic requirement ( fixes #670 )
2024-11-10 14:41:38 +01:00
NoDRM
815d86efe0
Update changelog
2024-11-10 14:36:27 +01:00
NoDRM
65646f4493
Fix CI
2024-11-10 14:25:35 +01:00
Josh Cotton
808dc7d29a
Fix Obok import in Calibre flatpak by using /sys/class/net/IFACE/address instead of ip ( #586 )
...
Fix #585 .
Use /sys/class/net/IFACE/address for the MAC address instead of the ip
command.
2024-11-10 13:14:59 +00:00
precondition
2cd2792306
Obok.py/action.py: invoke _() only once
2024-11-10 13:11:28 +00:00
precondition
2e53d70e88
Catch FileNotFoundError due to undownloaded ebooks
2024-11-10 13:11:28 +00:00
Ben Combee
05fff5217b
Fix crash using bare sha1 symbol
...
Use sha1 from hashlib, as it isn't imported globally, fixed crash trying to decrypt a eReader PDB file
2024-11-10 13:10:11 +00:00
Martin Rys
34c4c067e8
DeDRM ion: Correctly throw last exception if decrypt fails
2024-11-10 13:09:45 +00:00
Martin Rys
195ea69537
DeDRM ion: Clean out errorneous whitespace and UTF8 definition from python 2 times
2024-11-10 13:09:45 +00:00
NoDRM
3373d93874
Add binascii import, fixes FileOpen #514
2024-03-15 13:13:45 +01:00
NoDRM
bf2471e65b
Update kfxdedrm as suggested in #440
2023-12-21 12:35:11 +01:00
NoDRM
5492dcdbf4
More FileOpen fixes
2023-12-21 11:57:39 +01:00
NoDRM
737d5e7f1e
Bunch of updates for the FileOpen script
2023-12-03 10:45:09 +01:00
NoDRM
e4e5808894
Fix file lock issue in androidkindlekey.py
2023-12-03 10:42:41 +01:00
NoDRM
ef67dbd204
Fix more Py2/Py3 stuff
2023-08-06 15:49:52 +02:00
NoDRM
10b6caf9f5
Enable autorelease into 2nd repo
2023-08-03 21:53:16 +02:00
NoDRM
53996cf49c
More Python2 fixes
2023-08-03 20:45:06 +02:00
NoDRM
d388ae72fd
More Py2 fixes
2023-08-03 20:14:33 +02:00
NoDRM
bc089ee46d
More Python2 bugfixes
2023-08-03 20:01:38 +02:00
NoDRM
e509b7d520
Fix python2 issues in kgenpids and kindlekey
2023-08-03 11:26:05 +02:00
NoDRM
e82d2b5c9c
Fix PDF decryption for 256-bit AES with V=5
2023-08-02 18:13:42 +02:00
NoDRM
7f6dd84389
Fix PDF decryption of ancient 40-bit RC4 with R=2
2023-08-02 16:55:41 +02:00
NoDRM
b9bad26d4b
Prepare release candidate v10.0.9
2023-08-02 07:39:35 +02:00
NoDRM
2a1413297e
Add warning to the standalone code
2023-08-02 07:30:39 +02:00
NoDRM
815f880e34
Disable auto-prerelease again ( #358 )
2023-06-25 18:51:46 +02:00
NoDRM
9ae77c438f
Update CI to create an automatic beta release
2023-06-25 18:21:20 +02:00
Satsuoni
abc5de018e
Added several more scramble functions to Kindle decrypt
2023-06-25 16:38:55 +02:00
NoDRM and Satsuoni
133e67fa03
Added fix for padding being correct on accident
...
Co-authored-by: Satsuoni <satsuoni@hotmail.com >
2023-06-25 16:27:31 +02:00
NoDRM
f86cff285b
Fix python2 issues in Kindle and Nook code ( #355 )
2023-06-24 09:53:55 +02:00
NoDRM
a553a71f45
Fix font decryption with multiple IDs ( #347 )
2023-06-23 19:44:24 +02:00
740b46546f
Try to add support for new K4PC
...
Co-authored-by: Andrew Innes <andrew.c12@gmail.com >
Co-authored-by: Satsuoni <satsuoni@hotmail.com >
2023-06-23 19:30:06 +02:00
NoDRM
fb8b003444
Support for Adobe's 'aes128-cbc-uncompressed' encryption (see #242 )
2023-01-06 14:32:25 +01:00
NoDRM
3c12806f38
Fix issue with remaining data in encryption.xml
2023-01-06 14:29:56 +01:00
NoDRM
3151dbbd98
Try fixing a Python2 bug in the Obok plugin ( #235 )
2022-12-29 19:58:29 +01:00
NoDRM
08e7ac79ca
Update CHANGELOG
2022-12-29 19:53:59 +01:00
NoDRM
a711954323
PDF: Ignore invalid objid in non-strict mode, fixes #233
2022-12-29 19:52:08 +01:00
NoDRM
a30405bebf
Fix Python3 bug in stylexml2css.py, fixes #232
2022-12-23 10:44:45 +01:00
NoDRM
901a6c091d
Fix exception in error logging in ineptpdf
2022-12-23 10:42:25 +01:00
NoDRM
e16748e854
Untested code for the Obok plugin to allow adding duplicate books.
...
See #148
2022-10-19 17:14:26 +02:00
NoDRM
06df18bea3
Strip whitespace from Kindle serials ( #158 )
2022-10-19 16:39:39 +02:00
NoDRM
06648eeb1c
Add support for empty arrays (<>) in PDF objects. Fixes #183 .
2022-10-17 17:13:41 +02:00
NoDRM
6c8051eded
Update changelog
2022-09-10 11:57:35 +02:00
NoDRM
1cc245b103
Update README, fixes #136
2022-09-10 11:47:15 +02:00
NoDRM
eb45c71fd9
Cleanup
2022-09-10 11:44:55 +02:00
NoDRM
2d4c5d2c4b
Fix key import sometimes generating corrupted keys.
...
Should fix #145 , #134 , #119 , #116 , #115 , #109 and maybe others.
2022-09-10 11:42:59 +02:00
JMR-devandClaude Opus 4.8