- Dillo-dev - lists.mailman3.com

BUG#471

by Jorge Arellano Cid

Hi there, In BUG#471 (bad rendering for http://futurezone.orf.at) the problem is their html (extensive use of deprecated NOWRAP tag). sed 's/NOWRAP//g' solves the problem! Please tell the webmaster (they're usually responsive to HTML fault reports). Cheers Jorge.-

July 16, 2003

Re: [Dillo-dev] Selection segfault again

by Paul Pelzl

On Tue, Jul 15, 2003 at 02:01:23AM +0300, Silviu Cojocaru wrote: > On Mon, 14 Jul 2003, Andrew A. Gill wrote: > > > Friggin' black-text-on-black-background! Select within the text and drag > > the cursor to the lower right corner of the screen. > > > > Voila! All the text within the page is selected! Now you can read it > > without changing the dillorc! > > > > Which reminds me--maybe there should be a way to change page layout per > > page. > > Some of those pages use CSS to define page background/text color. Since > dillo is CSS blind for now, you get what you get. > > body { > margin-top: 10; > margin-left: 0; > margin-right: 0; > margin-bottom: 10; > font-family: > verdana; color: white; > background-color:black;} > > This is part of the CSS integrated in the pages there :) It would certainly be a nice feature to have some sort of "ignore formatting" toggle. If you turn it on, Dillo renders all pages with sensible font sizes, colors, etc. Paul

July 16, 2003

Re: [Dillo-dev] dillo size is 1.2mb ?

by Jorge Arellano Cid

Nagaraja wrote: > Hi All, Hi. > I got dillo compiled on arm with natively build toolchain, when I > check the size of dillo it is 1.2mb. > > my configure option is: > > ./configure --with-gtk-prefix=/etc/gtk --x-includes=/usr/X11R6/include > --x-libraries=/opt/toolchain/arm-linux/lib/X11 > --with-jpeg-lib=/opt/toolchain/arm-linux/lib > > when I do file dillo ....... I am getting. > dillo: ELF 32-bit LSB executable, Advanced RISC Machines ARM, version 1, > dynamically linked (uses shared libs), stripped > > nothing seems satically linked. :( Well, please assert not a single library was linked in statically. Maybe `strings dillo` or better `nm dillo` could help. (IO/libDio.a is OK to be included statically! ;) > could any one please tell me what could be the cause..... A long time ago I was getting huge binaries for dillo with lcc, I don't know which compiler you're using, but it can be an issue. (On 64bit machines it also grows somehow). Please tell us what you find out. Cheers Jorge.-

July 15, 2003

Re: [Dillo-dev] Selection segfault again

by Silviu Cojocaru

On Mon, 14 Jul 2003, Andrew A. Gill wrote: > Friggin' black-text-on-black-background! Select within the text and drag > the cursor to the lower right corner of the screen. > > Voila! All the text within the page is selected! Now you can read it > without changing the dillorc! > > Which reminds me--maybe there should be a way to change page layout per > page. Some of those pages use CSS to define page background/text color. Since dillo is CSS blind for now, you get what you get. body { margin-top: 10; margin-left: 0; margin-right: 0; margin-bottom: 10; font-family: verdana; color: white; background-color:black;} This is part of the CSS integrated in the pages there :) -- Insanity is the final defense ... It's hard to get a refund when the salesman is sniffing your crotch and baying at the moon.

July 14, 2003

Re: [Dillo-dev] dillo size is 1.2mb ?

by Kelson Vibber

At 12:11 AM 7/14/2003, Nagaraja wrote: >could any one please tell me what could be the cause..... You have debug info in the file. You can either run make install-strip to install instead of just "make install", or you can go into /usr/local/bin (or wherever you installed it) and run strip dillo strip bm_srv12 Either of these will bring it down to the expected size. Kelson Vibber www.hyperborea.org

July 14, 2003

Re: [Dillo-dev] Re: Some news...

by Ferdi Franceschini

On Mon, Jul 14, 2003 at 02:18:49AM +0200, Diego S?enz wrote: > I have see the dpi code and think that it is a very good approach. Only > one think: how do you integrate a plug-in without patch dillo? I known > that dpi is not finished, but i am impatient. If the PIs can add menu > entries to dillo menus it can be easy to start/call a PI when a menu > entrie is clicked and the PI can ask some dillo state(like url below the > mouse) or open a save dialog or etc using a dpi tag. A cfg file can > asociate prefix(ftp://), sufix(.swf) and menu entries with PIs. It can > be modified on PI install or be generated. There must be some code for > dinamics menus in dillo for history yet. About PIs that render to a zone > in a web page it can be done like Sylpheed-claws integrate dillo in > it(GTK X sockets or something that i think). I hope to help something > even if nobody ask. At the moment there is no means for adding dpi menu entries or buttons to dillo, and it may be a long time before this is implemented. In the meantime maybe we could create a plugins page of dpi urls to launch plugins and then simply provide a link to it on the splash screen. Cheers Ferdi

July 14, 2003

*** Lowest Rate Mortgages - Personal Service *** vmigiij r

by w2E1R786gI＠process4unow.com

July 14, 2003

Selection segfault again

by Andrew A. Gill

[I'm not subscribed to this list, but I do regularly check the archives. Lets see if this gets through.] Sebastian Geerken: > > Something I forgot: The fix does not work perfectly, when, in the test > page, you start select within the text, and then move the pointer > below the text, the selection starts at the beginning. This is a known > bug, and it won't be fixed for 0.7.3. If you're referring to what I think you're referring to, I prefer to think of that as a feature. Well, now that I test it, it looks like a different feature. Go to: <http://www.planetnintendo.com/ff1/> Friggin' black-text-on-black-background! Select within the text and drag the cursor to the lower right corner of the screen. Voila! All the text within the page is selected! Now you can read it without changing the dillorc! Which reminds me--maybe there should be a way to change page layout per page. -- |Andrew A. Gill |<superluser(a)frontiernet.net>

July 14, 2003

dillo size is 1.2mb ?

by Nagaraja

Hi All, I got dillo compiled on arm with natively build toolchain, when I check the size of dillo it is 1.2mb. my configure option is: ./configure --with-gtk-prefix=/etc/gtk --x-includes=/usr/X11R6/include --x-libraries=/opt/toolchain/arm-linux/lib/X11 --with-jpeg-lib=/opt/toolchain/arm-linux/lib when I do file dillo ....... I am getting. dillo: ELF 32-bit LSB executable, Advanced RISC Machines ARM, version 1, dynamically linked (uses shared libs), stripped nothing seems satically linked. could any one please tell me what could be the cause..... Thanks and regards Nags

July 14, 2003

Re: [Dillo-dev] Re: Some news...

by TheStar

On Mon, 14 Jul 2003 10:18 am, Diego Sáenz wrote: > I have see the dpi code and think that it is a very good approach. Only > one think: how do you integrate a plug-in without patch dillo? I known > that dpi is not finished, but i am impatient. If the PIs can add menu > entries to dillo menus it can be easy to start/call a PI when a menu > entrie is clicked and the PI can ask some dillo state(like url below the > mouse) or open a save dialog or etc using a dpi tag. A cfg file can > asociate prefix(ftp://), sufix(.swf) and menu entries with PIs. It can > be modified on PI install or be generated. There must be some code for > dinamics menus in dillo for history yet. About PIs that render to a zone > in a web page it can be done like Sylpheed-claws integrate dillo in > it(GTK X sockets or something that i think). I hope to help something > even if nobody ask. > > Diego. > Also, would the dpi code also allow shockwave, java, client-side scripts, and other plugins to be added, if re-written (ie, utilising kaffe for java). I know that the plugins themselves will take a LOT of work, but I'm asking about the actual dpi...

July 14, 2003

Re: [Dillo-dev] Re: Some news...

by Diego Sáenz

I have see the dpi code and think that it is a very good approach. Only one think: how do you integrate a plug-in without patch dillo? I known that dpi is not finished, but i am impatient. If the PIs can add menu entries to dillo menus it can be easy to start/call a PI when a menu entrie is clicked and the PI can ask some dillo state(like url below the mouse) or open a save dialog or etc using a dpi tag. A cfg file can asociate prefix(ftp://), sufix(.swf) and menu entries with PIs. It can be modified on PI install or be generated. There must be some code for dinamics menus in dillo for history yet. About PIs that render to a zone in a web page it can be done like Sylpheed-claws integrate dillo in it(GTK X sockets or something that i think). I hope to help something even if nobody ask. Diego. El Mon, 7 Jul 2003 15:35:30 -0400 (CLT) Jorge Arellano Cid <jcid(a)softhome.net> escribio: > > Hi! > > > > > This has been a very busy week. I didn't anticipate how much > > work the dpid (dpi daemon) integration could take. Don't panic > > though!, the code that binds it all is running (to some extent) > > in my machine. The time consuming problem is that while making > > the integration, a lot of design matters spring in, and they take > > a lot of time to solve. > > > > The good news is that it all starts to shape into a more clear > > design (the code is still hackish at parts, but it is clear what, > > where and how to fix it). > > > > While working the gory details of it, I realized it'd be a good > > idea to make the 0.7.3 release with what we have now (plus a > > little bug fix we're working on with Sebastian). That way, > > there'll be less pressure on us while polishing the new dpid > > implementation, and hey!, it's been a long time since our last > > release. > > > > I'll keep the CVS free of the dpid code until the 0.7.3 release > > is done. For the meanwhile, I'll provide a tarball to the new > > code. (and if I can't wrap the new code before Monday, I'll > > provide a link to the latest dpid testing tarball I have). > > > First, the final code for the 0.7.3 is on the CVS (unless you > find a bug in it). It will be released by Wednesday, so please > give it a hard test today and tomorrow! > > With regard to 0.8.0-pre (aka dillo with dpid), here's the good > news: > > * Finally I have a tarball that does bookmarks and downloads > with dpid (using wget)! It can handle multiple plugins and is > working smoothly. > > I want to add one more plugin (at least) and update the > documentation before commiting it to the CVS (after releasing > 0.7.3 of course). > > For those very interested in studying it, please review: > > http://dillo.org/download/dpid4.tgz > > (not my tarball but the dpid testing suite itself) > > Cheers > Jorge.- > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev(a)lists.auriga.wearlab.de > http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev

July 14, 2003

Re: [Dillo-dev] Another delay for 0.7.3 :(

by Sebastian Geerken

On Sun, Jul 13, Joe Crayne wrote: > Does this fix it? > > > --- source.cvs/src/dw_page.c 2003-07-12 14:17:12.000000000 -0400 > +++ source.fix/src/dw_page.c 2003-07-13 00:16:32.000000000 -0400 > @@ -451,7 +451,7 @@ static void Dw_page_get_extremes (DwWidg > /* no rewrap necessary -> values in lines are up to date */ > line = &page->lines[page->num_lines - 1]; > if (page->words[line->first_word].style->nowrap) > - extremes->min_width = MAX (line->max_word_min, line->par_min); > + extremes->min_width = MAX (line->max_line_width, line->par_min); > else > extremes->min_width = line->max_word_min; > extremes->max_width = MAX (line->max_par_max, line->par_max); No, you cannot compare minimal widths (line->par_min) with actual widths (line->max_line_width), the problem is another one. I've just committed a fix, I'll summarize it here. The first part is: @@ -450,10 +450,11 @@ static void Dw_page_get_extremes (DwWidg } else if (page->wrap_ref == -1) { /* no rewrap necessary -> values in lines are up to date */ line = &page->lines[page->num_lines - 1]; - if (page->words[line->first_word].style->nowrap) - extremes->min_width = MAX (line->max_word_min, line->par_min); - else - extremes->min_width = line->max_word_min; + /* Historical note: The former distinction between lines with and without + * words[first_word]->nowrap set is no longer necessary, since + * Dw_page_real_word_wrap sets max_word_min to the correct value in any + * case. */ + extremes->min_width = line->max_word_min; extremes->max_width = MAX (line->max_par_max, line->par_max); } else { /* Calculate the extremes, based on the values in the line from Why it is not neccessary anymore, is clear from the second part (simplified): @@ -907,9 +916,15 @@ static void Dw_page_real_word_wrap (DwPa if (!new_par) last_line->par_max += last_space; if (word->style->nowrap) { last_line->par_min += word_extremes.min_width; + /* This may also increase the accumulated minimum word width. */ + last_line->max_word_min = + MAX (last_line->max_word_min, last_line->par_min); + /* NOTE: Most code relies on that all values of nowrap are equal for all + * words within one line. */ } else /* Simple case. */ last_line->max_word_min = MAX (last_line->max_word_min, word_extremes.min_width); Actually, this bug has existed for a longer time, what I assume (but did not investigate further) is that the fixed code was never used before, i.e. instead of handling this case: } else if (page->wrap_ref == -1) { /* no rewrap necessary -> values in lines are up to date */ [...] this case: } else { /* Calculate the extremes, based on the values in the line from where a rewrap is necessary. */ [...] was *always* handled, due to the rewrapping bug I fixed some time ago. So this bug was hid by another one. There is still another bug: At http://bbs.archlinux.org/viewtopic.php?t=771 the text is not rewapped sometimes. I'm working on it. Sebastain

July 13, 2003

Re: [Dillo-dev] Another delay for 0.7.3 :(

by Joe Crayne

On Thu, Jul 10, 2003 at 01:27:48PM -0400, Jorge Arellano Cid wrote: > > So the 0.7.3 release will be held until I have some news about > this bug. (Jorge, sorry for the double emails, I meant to send to the list before.) Does this fix it? --- source.cvs/src/dw_page.c 2003-07-12 14:17:12.000000000 -0400 +++ source.fix/src/dw_page.c 2003-07-13 00:16:32.000000000 -0400 @@ -451,7 +451,7 @@ static void Dw_page_get_extremes (DwWidg /* no rewrap necessary -> values in lines are up to date */ line = &page->lines[page->num_lines - 1]; if (page->words[line->first_word].style->nowrap) - extremes->min_width = MAX (line->max_word_min, line->par_min); + extremes->min_width = MAX (line->max_line_width, line->par_min); else extremes->min_width = line->max_word_min; extremes->max_width = MAX (line->max_par_max, line->par_max);

July 13, 2003

Re: [Dillo-dev] selection segfault again

by Sebastian Geerken

I wrote: > FYI: I seem to have fixed the bug, expect it to be committed > today. Those interested should look at the differences in the code, it > is only a simple coding bug, nothing very interesting. (Has been committed.) Something I forgot: The fix does not work perfectly, when, in the test page, you start select within the text, and then move the pointer below the text, the selection starts at the beginning. This is a known bug, and it won't be fixed for 0.7.3. Sebastian

July 12, 2003

Re: [Dillo-dev] selection segfault again

by Sebastian Geerken

On Sat, Jul 12, Jamin W. Collins wrote: > On Sat, Jul 12, 2003 at 04:58:42PM +0200, Sebastian Geerken wrote: > > > Since the </table> tag is mandatory, we are not obliged to handle > > this. Anyway, a missing </table> tag will leave a well-defined widget > > tree, which the selection must be able to handle. > > While not required to handle it, the application should *never* segfault > when provided bad data. Dillo does not segfault anymore ;-) (Fix has been committed.) The problem is unrelated to the missing </table>, there may be *valid* pages which would have caused dillo to segfault due to the same bug. Sebastian

July 12, 2003

Re: [Dillo-dev] selection segfault again

by Jamin W. Collins

On Sat, Jul 12, 2003 at 04:58:42PM +0200, Sebastian Geerken wrote: > Since the </table> tag is mandatory, we are not obliged to handle > this. Anyway, a missing </table> tag will leave a well-defined widget > tree, which the selection must be able to handle. While not required to handle it, the application should *never* segfault when provided bad data. -- Jamin W. Collins Linux is not The Answer. Yes is the answer. Linux is The Question. - Neo

July 12, 2003

Re: [Dillo-dev] selection segfault again

by Sebastian Geerken

Hi, FYI: I seem to have fixed the bug, expect it to be committed today. Those interested should look at the differences in the code, it is only a simple coding bug, nothing very interesting. On Fri, Jul 11, Joe Crayne wrote: > <html> <title>Selection Bug</title> > <body> > > <table> > <tr><td></td></tr> > > <tr><td> > Select beyond the end of the text and > Dillo segfaults. > </td></tr> >  > > </body> > </html> The reason, why the missing </table> tag matters, is that Html_close_tag_table() will insert a break after the table, which makes iterators behave different. > [...] > I see 3 possible attacks on this one: > > 1. Add a check for NULL on the return value of > a_Dw_ext_iterator_new_variant(). a_Dw_ext_iterator_new() returns NULL, if the page does not contain any non-widget contents. After it one succeeded, it should always succeed. That it does not, was a bug, and is fixed now. BTW: Actually, this is only true, as long as no contents is *removed* from the page, which does not yet happen. If it happens, the selection will anyway get more complicated, a check in this case would not make much sense. > 2. Do that special empty DwExtIterator idea you > mentioned. Yes, this will probably part of 0.7.4. But in this case, you would have to compare empty with non-empty iterators ;-) > 3. Make html.c clean up the <table> tag better. > The missing closer probably shouldn't make a > difference in this example, but the segfault only > happens if the closer is missing. Since the </table> tag is mandatory, we are not obliged to handle this. Anyway, a missing </table> tag will leave a well-defined widget tree, which the selection must be able to handle. Sebastian

July 12, 2003

Re: [Dillo-dev] Some news...

by Ferdi Franceschini

Lars Segerlund wrote: > I have been looking at the dpid, and from what I can see it looks > good, it would be a piece of cake to whip up some usefull dpi's now :-) That's great! > ... I will however dig a bit more, the issue that I am concearned is if > it prohibits some action to be implemented, ( workarounds are ok for me > :-) ). dpid does not prohibit anything, it simply starts a plugin on demand (similar to inetd). > I also have a related question about the dpi's, whith the new > interface, how it fx. a https dpi supposed to work ? and would it be > possible to make fw a svg dpi ? ( thus enabling the dpi to do the > rendering ? I don't think dillo supports https (other than to check that it is used for cookies), and I don't know what plans there are for https support. Can you explain what "fw" and "svg" stand for. For now, just have the dpi open its own window for rendering, we'll worry about how to integrate this with dillo later, you will also need to do this for GUI controls. > Anyhow, for my stumbling attempts whith dpi's it seems to be fully > adequat. That's good. If you have any further questions please let us know. I plan to make a new version of dpid which supports a dpi directory structure in a few days. Regards Ferdi

July 12, 2003

TIPS!

by Jorge Arellano Cid

Hi there! From time to time I find some remarkable articles. The next couple is in our [Links] section, but as most probably some of us have missed them, I want to recommend them explicitly. The make an excellent read for every developer, regardless of the project they're working on. Please take my advice and spare some time to read them, it's all worth of it! http://www.dillo.org/ui-prefs-tips.html http://ometer.com/features.html (both by Havoc Pennington). -- I also noice that sometimes it gets a bit tedious to dig in the mailing list archives, and there was this ancient email about GMANE, and hey! they have a nice search engine. Now there's a link to it from our [Mailing list] page. Enjoy! Jorge.-

July 11, 2003

selection segfault again

by Joe Crayne

<html> <title>Selection Bug</title> <body> <table> <tr><td></td></tr> <tr><td> Select beyond the end of the text and Dillo segfaults. </td></tr>  </body> </html>

July 11, 2003

Re: [Dillo-dev] Another delay for 0.7.3 :(

by Andreas Schweitzer

Hi, On Thu, Jul 10, 2003 at 01:27:48PM -0400, Jorge Arellano Cid wrote: > So the 0.7.3 release will be held until I have some news about > this bug. > > How to reproduce: > > > [Andreas wrote:] > > > > Well, I found a recently introduced rendering problem : > > For example > > http://bbs.archlinux.org/viewtopic.php?t=771 > > the 4th post has one line extending to the right, w/o a scroll > > bar on the bottom. You need to resize the window to get > > the page re-rendered. Just to clarify for everybody else on the list : This probably affects all boards managed with phpBB - and there are lots of them. Cheers, Andreas -- **************************** NEW ADDRESS ****************************** Hamburger Sternwarte Universitaet Hamburg Gojenbergsweg 112 Tel. ++49 40 42891 4016 D-21029 Hamburg, Germany Fax. ++49 40 42891 4198

July 11, 2003

Re: [Dillo-dev] selecting text block larger than window

by Andreas Schweitzer

Hi - also to everybody replying, On Thu, Jul 10, 2003 at 04:33:37AM -0500, Albert Wagner wrote: > I am having difficulty selecting a block of text that is larger than the > window. Moving the cursor above/below the window limits doesn't cause > the window to scroll while selecting. Is this something configurable > that I have overlooked? Or is it still on a TO-DO list? ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ As far as I remember one of Sebastian's first mails on selection, this is indeed the case ! I'm too lazy to search the archive, though. Cheers, Andreas -- **************************** NEW ADDRESS ****************************** Hamburger Sternwarte Universitaet Hamburg Gojenbergsweg 112 Tel. ++49 40 42891 4016 D-21029 Hamburg, Germany Fax. ++49 40 42891 4198

July 11, 2003

Re: [Dillo-dev] selecting text block larger than window

by Frédéric Bothamy

* George Mason <georgemason(a)mindspring.com> [2003-07-10 22:08] : > On Thu, Jul 10, 2003 at 04:33:37AM -0500, Albert Wagner wrote: > > I am having difficulty selecting a block of text that is larger than the > > window. Moving the cursor above/below the window limits doesn't cause > > the window to scroll while selecting. Is this something configurable > > that I have overlooked? Or is it still on a TO-DO list? > > Its not exactly configurable but after starting the selection you > can still scroll with arrow keys or PgUp PgDown. I've been using > that trick since cut and paste was introduced. Thanks for the tip, this (supposed) limitation was really annoying to me. Maybe this could be documented in the Copy&Paste section in http://www.dillo.org/dillo-help.html? Fred

July 11, 2003

Re: [Dillo-dev] selecting text block larger than window

by Kelson Vibber

On Thursday 10 July 2003 7:08 pm, George Mason wrote: > Its not exactly configurable Why would anyone want this to be configurable? That would be like having an option for whether or not you follow links when you click on them. Or one to flat-out disable selection. Sorry, I recently re-read "Free software and good user interfaces" <http://www106.pair.com/rhp/free-software-ui.html>. The original post reminded me of the section where the author describes people who assume bugs are intentional and request a preference instead of a fix. -- Kelson Vibber www.hyperborea.org

July 11, 2003

Re: [Dillo-dev] selecting text block larger than window

by George Mason

On Thu, Jul 10, 2003 at 04:33:37AM -0500, Albert Wagner wrote: > I am having difficulty selecting a block of text that is larger than the > window. Moving the cursor above/below the window limits doesn't cause > the window to scroll while selecting. Is this something configurable > that I have overlooked? Or is it still on a TO-DO list? Its not exactly configurable but after starting the selection you can still scroll with arrow keys or PgUp PgDown. I've been using that trick since cut and paste was introduced. george

July 11, 2003

Re: [Dillo-dev] selecting text block larger than window

by Kelson Vibber

At 02:33 AM 7/10/2003, Albert Wagner wrote: >I am having difficulty selecting a block of text that is larger than the >window. Moving the cursor above/below the window limits doesn't cause >the window to scroll while selecting. Is this something configurable >that I have overlooked? Or is it still on a TO-DO list? I would assume it's a bug. Kelson Vibber www.hyperborea.org

July 11, 2003

Another delay for 0.7.3 :(

by Jorge Arellano Cid

Hi there! On Wed, 9 Jul 2003, Sebastian Geerken wrote: > Hi Jorge, > > there is another bug, which should be fixed before, I'll forward you a > mail from Andreas. It can be reproduced quite well with the "slow" CGI > program I sent you some time ago, and another example is > <http://www.dillo.org/cvs.html>. More on this soon. > > Sebastian So the 0.7.3 release will be held until I have some news about this bug. How to reproduce: > [Andreas wrote:] > > Well, I found a recently introduced rendering problem : > For example > http://bbs.archlinux.org/viewtopic.php?t=771 > the 4th post has one line extending to the right, w/o a scroll > bar on the bottom. You need to resize the window to get > the page re-rendered. In the meanwhile, I'm working on a bare bones FTP example for dpi... Cheers Jorge.-

July 10, 2003

Re: [Dillo-dev] Some news...

by Lars Segerlund

Jorge Arellano Cid wrote: > Hi there! > > This has been a very busy week. I didn't anticipate how much > work the dpid (dpi daemon) integration could take. Don't panic > though!, the code that binds it all is running (to some extent) > in my machine. ...snip... > > Cheers > Jorge.- > I have been looking at the dpid, and from what I can see it looks good, it would be a piece of cake to whip up some usefull dpi's now :-) ... I will however dig a bit more, the issue that I am concearned is if it prohibits some action to be implemented, ( workarounds are ok for me :-) ). I also have a related question about the dpi's, whith the new interface, how it fx. a https dpi supposed to work ? and would it be possible to make fw a svg dpi ? ( thus enabling the dpi to do the rendering ? Anyhow, for my stumbling attempts whith dpi's it seems to be fully adequat. / regards, Lars Segerlund.

July 10, 2003

selecting text block larger than window

by Albert Wagner

I am having difficulty selecting a block of text that is larger than the window. Moving the cursor above/below the window limits doesn't cause the window to scroll while selecting. Is this something configurable that I have overlooked? Or is it still on a TO-DO list?

July 10, 2003

Re: [Dillo-dev] Dillo 0.7.3 delayed...

by Jorge Arellano Cid

On Wed, 9 Jul 2003, Kelson Vibber wrote: > It looks like dillo.auriga.wearlab.de is still referenced in several places > in CVS (at least a few hours ago). > dillorc > doc/Dillo.txt > src/prefs.h > > The second one probably doesn't matter much, but the first and third mean > that the default home page is still pointing to the old site. Thanks a lot Kelson! I just made the changes and commited. Jorge.- PS: I almost forgot to sync with dillo package maintainers (.rpm .deb .tgz).

July 9, 2003

Re: [Dillo-dev] Suggestion & patch for browser identification (user-agent)

by Phil Pennock

On 2003-07-09 at 08:55 -0700, Kelson Vibber wrote: > However, it seems to me that it would be just as trivial to put several > malicious images on a single page, each targeting a different system. It's > not as if multiple images on a page - or even multiple broken images - > would raise much suspicion. No, because the first one that overflows the buffer will either crash the browser or successfully exploit the issue. People tend to notice when their browser crashes ;^) -- or at least, I do which is another reason why I like Dillo. :^) My boss too is a convert because of the simplicity, stability and speed, only resorting to other browsers when necessary. So it's an all-or-nothing attack -- unless you happen to know that on one platform the browser loads images in one order and on another platform it loads them in reverse order, in which case you can conceivably get two attack opportunities for the price of one. You don't see a broken image link if the browser has already been compromised or crashed. Hence a user-agent saying "I'm this version of this browser running on this OS on this hardware platform" is, uhm, interesting. Knowing Netscape 4.76 tells the attacker which security holes you're vulnerable to; knowing the other details says which exploit is likely to work. Many types of shellcode can to some extent successfully handle different builds using different locations. But hey, it's trivial to find the place in the code to make such changes in Dillo, so anyone who's bothered by the issue can do something about it. So don't let people like me stop you from doing this -- I just ask that people consider the issues before doing something just because every other browser does it. -- 2001: Blogging invented. Promises to change the way people bore strangers with banal anecdotes about their pets. <http://www.thelemon.net/issues/timeline.php>

July 9, 2003

Re: [Dillo-dev] # users (OT)

by Kelson Vibber

At 06:33 AM 7/9/2003, JoeHill wrote: >linux seaq <linux(a)seaq.com.co> uttered: > > Hi, i wonder how many of us (dillo's users) exists already? > >42 So *that's* the question! Kelson Vibber www.hyperborea.org

July 9, 2003

Re: [Dillo-dev] Suggestion & patch for browser identification (user-agent)

by Kelson Vibber

At 06:41 AM 7/9/2003, Diego Sáenz wrote: >I agree with this. Only one detail about the path: what about use >autoconfig to fill a define with the system and plataform instead to add >code? I thought about that, but it's a matter of accuracy where systems are compatible, but named differently. The only sure example I can think of is Intel-style processors - you can compile a program on an i386 and run it on an i686, for instance, or the other way around if you don't use Pentium-specific optimizations. If the various *BSDs are binary-compatible, that would be another case (i.e. if you can compile on FreeBSD and run on OpenBSD), but I don't know if that's possible. Kelson Vibber www.hyperborea.org

July 9, 2003

Re: [Dillo-dev] Suggestion & patch for browser identification (user-agent)

by Kelson Vibber

At 06:15 AM 7/9/2003, Phil Pennock wrote: >The problem with these is when there are security holes in image >rendering libraries (eg, versions of Netscape with custom handlers for >extended information in GIF files). If you state the system >architecture then it's relatively trivial to use the User-Agent field on >the server-side to select the image with the correct shell-code to >exploit your system. Hmm, I hadn't thought of that one. There are a couple of discussions linked to from the Mozilla page I mentioned, but they're mainly focused on things like revealing the OS version to make follow-up hacking attempts easier. However, it seems to me that it would be just as trivial to put several malicious images on a single page, each targeting a different system. It's not as if multiple images on a page - or even multiple broken images - would raise much suspicion. >open source >means I get to run stuff how I like it; everyone gets what they want (as >long as they can make trivial hacks) so everyone's happy. Agreed! Kelson Vibber www.hyperborea.org

July 9, 2003

Re: [Dillo-dev] Dillo 0.7.3 delayed...

by Jorge Arellano Cid

On Wed, 9 Jul 2003, Jorge Arellano Cid wrote: > [...] > The good/bad news (depends on being optimistic/pesimistic!) is > that yesterday I found a bug. The newest CVS has a g_print that > makes it evident. I digged in a bit more and found the bug! Just a missing "break;" inside a case. The patch is in CVS. In any case, I'll wait for Sebastian to confirm me that. At first I hesitated because 5 anchors in the splash page produced about 15 extra calls, but this seems OK because they need to update the offset as the text rewraps. Once this is confirmed, 0.7.3 will be released (on Thursday). Cheers Jorge.-

July 9, 2003

Re: [Dillo-dev] Suggestion & patch for browser identification (user-agent)

by Nicolas Kaiser

* Kelson Vibber <kelson(a)pobox.com>: > So does anyone else think this is a good/bad/interesting idea? And is anyone > interested in testing it on *BSD/Solaris/Mac/etc.? I think it is a good idea. Working nicely on Gentoo Linux ppc. User-agent says Dillo/0.7.2 (Linux ppc). Have a nice day, n.

July 9, 2003

Dillo 0.7.3 delayed...

by Jorge Arellano Cid

Hi guys! Did you test 0.7.3 as I suggested? The good/bad news (depends on being optimistic/pesimistic!) is that yesterday I found a bug. The newest CVS has a g_print that makes it evident. Valgrind says: ==983== Invalid memory access of size 1 ==983== at 0x4014861B: strcmp (in /usr/local/lib/valgrind/valgrind.so) ==983== by 0x403CABAD: g_str_equal (in /usr/lib/libglib-1.2.so.0.0.10) ==983== by 0x403BDB38: g_hash_table_lookup_extended (in /usr/lib/libglib-1.2 ==983== by 0x805B912: p_Dw_gtk_viewport_put_anchor (dw_gtk_viewport.c:770) ==983== Address 0x41054960 is 0 bytes inside a block of size 12 free'd ==983== at 0x40148050: free (in /usr/local/lib/valgrind/valgrind.so) ==983== by 0x403C1FE8: g_free (in /usr/lib/libglib-1.2.so.0.0.10) ==983== by 0x805D646: Dw_page_destroy (dw_page.c:338) ==983== by 0x402EB876: gtk_marshal_NONE__NONE (in /usr/lib/libgtk-1.2.so.0.9 Note the p_Dw_gtk_viewport_put_anchor where the g_print is. This may come from somewhere else, so let's hunt. It should be solved before making the release. Cheers Jorge.-

July 9, 2003

Re: [Dillo-dev] Suggestion & patch for browser identification (user-agent)

by Todd Carson

On Tue, 8 Jul 2003 19:44:50 -0700 Kelson Vibber <kelson(a)pobox.com> wrote: > > So does anyone else think this is a good/bad/interesting idea? And is > anyone interested in testing it on *BSD/Solaris/Mac/etc.? > Your patch works for me on Solaris. It sets the user-agent to Dillo/0.7.2 (SunOS sun4u).

July 9, 2003

Re: [Dillo-dev] Porting to Windows?

by Jorge Arellano Cid

On Wed, 9 Jul 2003, Lars Segerlund wrote: > > It seem's the windows platform is losing ground rather rapidly, so it > might not be worth the trouble to support at soon to be obsolete system. I'd love to be able to cite these words in the future! I'll be looking forward! > ;-) Lars Segerlund. > > ( there is a smiley above, no flames :-) ). Technically, Dillo aims to run in POSIX compatible systems. Cheers Jorge.-

July 9, 2003

Re: [Dillo-dev] Suggestion & patch for browser identification (user-agent)

by Diego Sáenz

I agree with this. Only one detail about the path: what about use autoconfig to fill a define with the system and plataform instead to add code? Diego. El Tue, 8 Jul 2003 19:44:50 -0700 Kelson Vibber <kelson(a)pobox.com> escribio: > I know this is too late to even consider for 0.7.3, but I thought I'd > get this out for discussion. > > I've been looking at browser statistics on my website, and started > thinking about what various browsers do and don't report in their > User-Agent identification. All report their name. Many report the > rendering engine (Gecko, KHTML, etc.) Many also report the operating > system and the type of system (with varying levels of detail), and > some even report the language of the user interface. > > Here are some examples from my website's server logs: > > Mozilla/4.7 [en] (WinNT; U) > Mozilla/5.0 (compatible; Konqueror/3.1; Linux) > Mozilla/4.72 [en] (X11; U; Linux 2.4.18 i686) > Opera/7.11 (Linux 2.4.20-18.9 i686 [en] > Opera/6.0 (Macintosh; PPC Mac OS X; U) [en] > Mozilla/4.0 (compatible; MSIE 5.22; Mac_PowerPC) > Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3.1) > Gecko/20030524 Mozilla/5.0 (Macintosh; U; PPC Mac OS X; > en-us) AppleWebKit/85 (KHTML, like Gecko) Safari/85 > > Some interesting notes: > - Netscape and Mozilla always use "X11" for anything X-based, and have > a separate field to indicate the actual OS (Linux, Solaris, *BSD, > etc.)- Konqueror lets you configure the amount of detail you report. > The example here is the default. > - Most of the *nix-based strings use qhat you get from uname -sm or > uname -srm. > - Most browsers designed for Mac OS X report "PPC Mac OS X" > - There are possible privacy/security implications of revealing too > much information, like your system's kernel version or your primary > language. > > I think that knowing the operating system is interesting, but much > more than that probably isn't necessary, so I'd like to suggest one of > the following syntaxes to extend the Dillo user-agent string: > Dillo/<version> (<system>) > Dillo/<version> (<platform>; <system>) > > Where <system> is the output of "uname -sm" (i.e. Linux PPC, FreeBSD > i386, etc) and <platform> is of the form (Windows|Macintosh|X11|etc.) > as used by Mozilla (see > http://www.mozilla.org/build/revised-user-agent-strings.html ). > > This would result in identification like the following: > Dillo/0.8 (Linux i386) > Dillo/0.8 (FreeBSD i686) > Dillo/0.8 (Linux PPC) > Dillo/0.8 (PPC Mac OS X)* > and so on, or perhaps: > Dillo/0.8 (X11; Linux i386) > Dillo/0.8 (X11; CYGWIN_NT-5.0 i686) > to fit Netscape/Mozilla's pattern. > > * (Aside from the reversed order, Mac OS X would probably show up as > Darwin unless a special case is made. This would probably mean > setting the User-Agent string once and keeping it in memory instead of > building it with each HTTP request. And for the longer syntax there's > the issue that it still runs under X, so the platform would probably > be X11 instead of Macintosh.) > > I have attached a quick patch which uses the utsname struct to create > the first syntax, and I've tested it successfully on Linux and Cygwin > on Intel hardware. > > So does anyone else think this is a good/bad/interesting idea? And is > anyone interested in testing it on *BSD/Solaris/Mac/etc.? > > -- > Kelson Vibber > www.hyperborea.org > >

July 9, 2003

Re: [Dillo-dev] # users (OT)

by JoeHill

On Wed, 9 Jul 2003 08:10:56 -0500 linux seaq <linux(a)seaq.com.co> uttered: > Hi, i wonder how many of us (dillo's users) exists already? 42 -- Joehill Registered Linux user #282046 Homepage: http://nodex.sytes.net 09:32:47 up 14 days, 15:13, 4 users, load average: 0.05, 0.01, 0.00

July 9, 2003

Re: [Dillo-dev] Suggestion & patch for browser identification (user-agent)

by Phil Pennock

On 2003-07-08 at 19:44 -0700, Kelson Vibber wrote: > syntaxes to extend the Dillo user-agent string: > Dillo/<version> (<system>) > Dillo/<version> (<platform>; <system>) > > Where <system> is the output of "uname -sm" (i.e. Linux PPC, FreeBSD i386, > etc) and <platform> is of the form (Windows|Macintosh|X11|etc.) as used by > Mozilla (see http://www.mozilla.org/build/revised-user-agent-strings.html ). > > This would result in identification like the following: > Dillo/0.8 (Linux i386) The problem with these is when there are security holes in image rendering libraries (eg, versions of Netscape with custom handlers for extended information in GIF files). If you state the system architecture then it's relatively trivial to use the User-Agent field on the server-side to select the image with the correct shell-code to exploit your system. If you say "FreeBSD" or "Linux" then you're stating which system calls are where. All of which helps a malicious web-site operator target their exploit to your browser. As you note, Konqueror lets you configure the amount of information available without a source-patch. I'm one of those who reduces the information to the minimum -- I'm happy supplying something saying "Konqueror" or "Dillo" and don't get upset at the version being present. I like to turn it off though -- this is one of the things which I like about Dillo -- it's so fast to compile that trivial local hacks like this become feasible. I don't supply patches for stuff that removes things that the developers like because it's their baby, but open source means I get to run stuff how I like it; everyone gets what they want (as long as they can make trivial hacks) so everyone's happy. Since I patch anyway, it makes no difference to me -- I'd just remove the extra information. But I do think that people should think about how easy it is to target shell-code exploits with this sort of information given away. -- 2001: Blogging invented. Promises to change the way people bore strangers with banal anecdotes about their pets. <http://www.thelemon.net/issues/timeline.php>

July 9, 2003

# users (OT)

by linux seaq

Hi, i wonder how many of us (dillo's users) exists already? --- Andres Mauricio Mujica SEAQ SERVICIOS CIA LTDA www.seaq.com.co

July 9, 2003

Suggestion & patch for browser identification

by linux seaq

It's a good idea; Would be nice if also the info reported could be configured with dillorc. -- Andres Mauricio Mujica SEAQ SERVICIOS CIA LTDA www.seaq.com.co

July 9, 2003

Re: [Dillo-dev] Porting to Windows?

by Lars Segerlund

It seem's the windows platform is losing ground rather rapidly, so it might not be worth the trouble to support at soon to be obsolete system. ;-) Lars Segerlund. ( there is a smiley above, no flames :-) ). Andreas Tolfsen wrote: > I've just been wondering; Are there any future plans for porting Dillo > to the Windows platform? Or is Dillo to stay on GNU/Linux? > > I think porting to Windows would let Dillo have a much bigger audience > to speak to (since about 90% of the worlds computers run Windows). > > I just wondered if there were any plans? > > > Best regards for a wonderful open-source browser, > > Andreas Tolfsen > <ato(a)itnerd.net> > > > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev(a)lists.auriga.wearlab.de > http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev >

July 9, 2003

the same name ronnie!!!!!!

by ronnie

July 9, 2003

Suggestion & patch for browser identification (user-agent)

by Kelson Vibber

I know this is too late to even consider for 0.7.3, but I thought I'd get this out for discussion. I've been looking at browser statistics on my website, and started thinking about what various browsers do and don't report in their User-Agent identification. All report their name. Many report the rendering engine (Gecko, KHTML, etc.) Many also report the operating system and the type of system (with varying levels of detail), and some even report the language of the user interface. Here are some examples from my website's server logs: Mozilla/4.7 [en] (WinNT; U) Mozilla/5.0 (compatible; Konqueror/3.1; Linux) Mozilla/4.72 [en] (X11; U; Linux 2.4.18 i686) Opera/7.11 (Linux 2.4.20-18.9 i686; U) [en] Opera/6.0 (Macintosh; PPC Mac OS X; U) [en] Mozilla/4.0 (compatible; MSIE 5.22; Mac_PowerPC) Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3.1) Gecko/20030524 Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85 (KHTML, like Gecko) Safari/85 Some interesting notes: - Netscape and Mozilla always use "X11" for anything X-based, and have a separate field to indicate the actual OS (Linux, Solaris, *BSD, etc.) - Konqueror lets you configure the amount of detail you report. The example here is the default. - Most of the *nix-based strings use qhat you get from uname -sm or uname -srm. - Most browsers designed for Mac OS X report "PPC Mac OS X" - There are possible privacy/security implications of revealing too much information, like your system's kernel version or your primary language. I think that knowing the operating system is interesting, but much more than that probably isn't necessary, so I'd like to suggest one of the following syntaxes to extend the Dillo user-agent string: Dillo/<version> (<system>) Dillo/<version> (<platform>; <system>) Where <system> is the output of "uname -sm" (i.e. Linux PPC, FreeBSD i386, etc) and <platform> is of the form (Windows|Macintosh|X11|etc.) as used by Mozilla (see http://www.mozilla.org/build/revised-user-agent-strings.html ). This would result in identification like the following: Dillo/0.8 (Linux i386) Dillo/0.8 (FreeBSD i686) Dillo/0.8 (Linux PPC) Dillo/0.8 (PPC Mac OS X)* and so on, or perhaps: Dillo/0.8 (X11; Linux i386) Dillo/0.8 (X11; CYGWIN_NT-5.0 i686) to fit Netscape/Mozilla's pattern. * (Aside from the reversed order, Mac OS X would probably show up as Darwin unless a special case is made. This would probably mean setting the User-Agent string once and keeping it in memory instead of building it with each HTTP request. And for the longer syntax there's the issue that it still runs under X, so the platform would probably be X11 instead of Macintosh.) I have attached a quick patch which uses the utsname struct to create the first syntax, and I've tested it successfully on Linux and Cygwin on Intel hardware. So does anyone else think this is a good/bad/interesting idea? And is anyone interested in testing it on *BSD/Solaris/Mac/etc.? -- Kelson Vibber www.hyperborea.org

July 9, 2003

some newbie questions!!

by ronnic

hi all I have enjoied dillo and want make it support chinese (a challenge to me ^o^ ),but i encountered some questions: 1)I can not understand the CCC function modules; 2)How the dillo get the HTML documents after establish socket connect; 3)when getting the file how dillo write to the proper dw archtecture; (please tell me by using detail function ) thanks all !!!!! --http://www.eyou.com --ÎÈ¶š¿É¿¿µÄÃâ·Ñµç×ÓÐÅÏä ÓïÒôÓÊŒþ ÒÆ¶¯ÊéÇ© ÈÕÀú·þÎñ ÍøÂçŽæŽ¢...ÒÚÓÊÎŽŸ¡

July 9, 2003

Re: [Dillo-dev] Porting to Windows?

by Kelson Vibber

At 03:37 AM 7/7/2003, Andreas Tolfsen wrote: >I've just been wondering; Are there any future plans for porting Dillo to >the Windows platform? Or is Dillo to stay on GNU/Linux? Good question. (Although technically it's not Linux-only right now, it's Linux & Unix only.) Just for fun I tried building it on Windows 2000 with Cygwin. It seems to work fine, although I can't say I've done any serious stress testing. Note that you do need to download and compile glib and gtk+ <http://www.gtk.org/> and make one change to the glib source <http://www.cygwin.com/ml/cygwin-xfree/2002-07/msg00276.html>. Of course this is no real solution, because you have to: (1) Install Cygwin with XFree86, (2) Install Glib/GTK+, and (3) Run X every time you want to use Dillo. There is a port of GTK+ to Windows, though, which was originally done for the Windows port of GIMP <http://www.gimp.org/~tml/gimp/win32/>. I have no idea what else would be needed to port Dillo using these, or whether any of the main developers would think it was worth the effort. Kelson Vibber www.hyperborea.org

July 8, 2003

Re: Some news...

by Jorge Arellano Cid

Hi! > > This has been a very busy week. I didn't anticipate how much > work the dpid (dpi daemon) integration could take. Don't panic > though!, the code that binds it all is running (to some extent) > in my machine. The time consuming problem is that while making > the integration, a lot of design matters spring in, and they take > a lot of time to solve. > > The good news is that it all starts to shape into a more clear > design (the code is still hackish at parts, but it is clear what, > where and how to fix it). > > While working the gory details of it, I realized it'd be a good > idea to make the 0.7.3 release with what we have now (plus a > little bug fix we're working on with Sebastian). That way, > there'll be less pressure on us while polishing the new dpid > implementation, and hey!, it's been a long time since our last > release. > > I'll keep the CVS free of the dpid code until the 0.7.3 release > is done. For the meanwhile, I'll provide a tarball to the new > code. (and if I can't wrap the new code before Monday, I'll > provide a link to the latest dpid testing tarball I have). First, the final code for the 0.7.3 is on the CVS (unless you find a bug in it). It will be released by Wednesday, so please give it a hard test today and tomorrow! With regard to 0.8.0-pre (aka dillo with dpid), here's the good news: * Finally I have a tarball that does bookmarks and downloads with dpid (using wget)! It can handle multiple plugins and is working smoothly. I want to add one more plugin (at least) and update the documentation before commiting it to the CVS (after releasing 0.7.3 of course). For those very interested in studying it, please review: http://dillo.org/download/dpid4.tgz (not my tarball but the dpid testing suite itself) Cheers Jorge.-

July 7, 2003