HISTORY (afio-2.5.1.tgz) | : | HISTORY (afio-2.5.2.tgz) | ||
---|---|---|---|---|
skipping to change at line 864 | skipping to change at line 864 | |||
reported openSuse 10.3 and 11.4. (I have been unable to reproduce the | reported openSuse 10.3 and 11.4. (I have been unable to reproduce the | |||
bugs in my environment, so I hope the fixes work.) Bugs reported and | bugs in my environment, so I hope the fixes work.) Bugs reported and | |||
fixes proposed by Fred Wright. | fixes proposed by Fred Wright. | |||
Added .ogg as an extensions to the list of those to be excluded from | Added .ogg as an extensions to the list of those to be excluded from | |||
compression by default. Proposed by Dirk Eddelbuettel. | compression by default. Proposed by Dirk Eddelbuettel. | |||
Fixed logic in in() to correctly report failure with a warning message | Fixed logic in in() to correctly report failure with a warning message | |||
when uncompression of a commpressed-archived file fails. Also fixes | when uncompression of a commpressed-archived file fails. Also fixes | |||
that, potentially valid archive data would be skipped after this | that, potentially valid archive data would be skipped after this | |||
error. Based on bug report by Daniel Webb. | error. Based on bug report by Daniel Webb. Closes Debian bug | |||
#291364. | ||||
In next(), changed msg to variable-length string, to avoid possible | In next(), changed msg to variable-length string, to avoid possible | |||
buffer overflow. Part of the patch by Erik Schanze (downstream Debian). | buffer overflow. Part of the patch by Erik Schanze (downstream Debian). | |||
Extended -0 option to influence -t processing and -w and -W file | Extended -0 option to influence -t processing and -w and -W file | |||
reading too. The -0 option now toggles when used multiple times. | reading too. The -0 option now toggles when used multiple times. | |||
Added -7 option to disable/enable globbing in processing -yYwW | Added -7 option to disable/enable globbing in processing -yYwW | |||
filename patterns. Based on feature request and patch by Christian | filename patterns. Based on feature request and patch by Christian | |||
Schrader (via Debian). Note that the semantics of the -7 command line | Schrader (via Debian). Note that the semantics of the -7 command line | |||
options is sligtly different than it was in the Debian 2.5-3 to 2.5-6 | options is sligtly different than it was in the Debian 2.5-3 to 2.5-6 | |||
skipping to change at line 921 | skipping to change at line 922 | |||
Updated legal information for redistributers about the afio license in | Updated legal information for redistributers about the afio license in | |||
afio.c and in the .lsm files. Removed earlier text concluding that by | afio.c and in the .lsm files. Removed earlier text concluding that by | |||
Linux Software Map standards, the correct afio license label was LGPL. | Linux Software Map standards, the correct afio license label was LGPL. | |||
Added the text file afio_license_issues_v5.txt. All of this was | Added the text file afio_license_issues_v5.txt. All of this was | |||
triggerd by a blog entry writen by Tom Callaway, and informed in part | triggerd by a blog entry writen by Tom Callaway, and informed in part | |||
by further discussion in the blog comment section and on some Debian | by further discussion in the blog comment section and on some Debian | |||
mailing lists. Thanks to Mark Brukhartz for going on record to clarify | mailing lists. Thanks to Mark Brukhartz for going on record to clarify | |||
the intent of the original license text. | the intent of the original license text. | |||
Increase default size for -M option from 2 to 250 megabytes. | Increase default size for -M option from 2 to 250 megabytes. | |||
Version 2.5.1-2: | ||||
Improved typesetting and ordering of manpage material: patch by Jaari | ||||
Aalto. | ||||
Some things to improve git compatibility: removed RCS tags from afio.1 | ||||
and afio.c, removed trailing whitespace from files. Based om report | ||||
by Jaari Aalto. | ||||
Improved some questionable code in incheckdata(). Removed unused | ||||
variable (causing compiler warning) in outflush() and compressfile(). | ||||
Created afio home page on the web. | ||||
Fixed bug in handling buffer size calculations when -s and -c options | ||||
settings that create a 2GB memory buffer, by upgrading various | ||||
variables to size_t size. Based on bug report and patch by Yuri | ||||
D'Elia. Tests have shown that (at least on i386 with 32 bit ints and | ||||
size_t) this fix does not handle correctly buffer sizes >2GB, probably | ||||
because size_t is 4 byte, not 8, and I still have doubts about 2GB | ||||
too. Fixing everything and testing it is just too painful on my | ||||
current 32 bit Linux install on a box that has only like 700M real | ||||
memory. | ||||
Therefore: added code to prevent memory buffer sizes larger than 1.5 | ||||
GB being used by -s and -c and by -M. For -M, probably a limit of | ||||
3.5GB is still OK but I have not tested it so better safe than sorry. | ||||
On native 64 bit installs, these limits may be over-cautious | ||||
(especially if the compiler uses sizeof(int)==8, which is NOT the case | ||||
for Linux amd64), but as I have no way to test this I'd rather get bug | ||||
reports and patches from 64 bit platform people who run into this | ||||
limit than have their backups silently fail. Closes(?) Debian bug | ||||
#578046. | ||||
Added %V and %S subsitution in input/output file name and !script name | ||||
generation if -s option used. Based on idea and patch by Gabor Kiss. | ||||
Closes Debian bug #310806. | ||||
Changed makefile to use $(CPPFLAGS) $(CFLAGS) $(LDFLAGS) out of | ||||
environment variables, these are set in some compile environments. | ||||
Based on report and patch by Jari Aalto. | ||||
Version 2.5.2: | ||||
Fixed bug (introduced in 2.5) of afio giving an error message (and | ||||
nonzero exit) when including a control file in an archive. Bug | ||||
reported by Ian Campbell. Closes Debian bug #686613. | ||||
Added d letter for the -1 option. | ||||
Fixed two compiler errors (as reported by recent gcc) due to | ||||
discrepancies between function declarations in afio.h and afio.c. | ||||
Problem reported by Jari Aalto. Added some more size_t and ssize_t. | ||||
Fixed formatting bug to restore output behavior of afio -o -0 -vv like | ||||
it was in afio 2.5. Based on bug report by Corey Mann. Closes Debian | ||||
bug #420654. | ||||
Improved -r option: if a file with 0 length is in the archive, but the | ||||
file on the filesystem is now longer, the -r option will now report an | ||||
error (except for hard linked files). Based on problem report by | ||||
Christian Schneider. Also updated -r description in manpage. Closes | ||||
Debian bug #565202. | ||||
Fixed typos in manual file (contol->control). Contributed by | ||||
bfontaine on github. | ||||
Added support in compfile.c for musl libc (http://musl-libc.org) which | ||||
does not have MAXNAMLEN nor DIRSIZ. Based on patch by doughdemon on | ||||
github. | ||||
In savedirstamp and restoredirstamps: fixed a very unlikely memory | ||||
leak. Changed to keep the head of a list that is never freed | ||||
reachable, to make Valgrind happy. Contributed by Philipp Gesang. | ||||
Tweaked regtest script to make it remove test directories left | ||||
after a failed test before re-testing. | ||||
Added -Wno-unused-result flag in Makefile to make compilation shut up | ||||
about unused system call results from calls like dup() and nice(). The | ||||
fact that the compiler issues these warnings is due to (in my opinion) | ||||
a declaration bug in glibc, as not checking there results is fully | ||||
legitimate in many situations. | ||||
Removed the feature to optimise path names ('Optimizes pathnames with | ||||
respect to the current and parent directories. For example | ||||
./src/sh/../misc/afio.c becomes src/misc/afio.c'). Only optimisation | ||||
remaining in nameopt() is that multiple leading /// in path name get | ||||
simplified into one leading /. This change is related to the other | ||||
security related changes below. | ||||
Improved security of handling of archives from untrusted sources when | ||||
they are unpacked. Added the -8 options allowinsecurepaths, | ||||
allowinsecuresymlinks, and the default behavior described in the | ||||
manpage when these options are not used. Also added the -1 s | ||||
option. Updated reregression test input archives to account for new | ||||
behavior. Based on patch and e-mail input from Philipp Gesang. | ||||
Added the -8 nosymlinks option and the -1 l option. Based on patch by | ||||
Philipp Gesang. | ||||
Fixed buffer overflow risk in inhead() when reading symlink | ||||
destination value from corrupt or tampered-with archive. | ||||
Changed -H promptscript argument processing to allow prompt script | ||||
path names containing spaces or other special characters. This | ||||
improves compatibility with naming conventions on Windows-centric | ||||
filesystem. This breaks old behavior where spaces in the prompt | ||||
script argument could be used to add extra arguments. Based on bug | ||||
report and suggestion by Philipp Gesang. | ||||
Added SECURITY CONSIDERATIONS section to the manpage. | ||||
End of changes. 2 change blocks. | ||||
1 lines changed or deleted | 2 lines changed or added |