Carefully crafted invalid headers can cause buffer overrun.

[chaz/tar] / NEWS

diff --git a/NEWS b/NEWS
index 59f5e74ba2607723da54eb0bfc20f3de33ae51c1..ab057ecc86a52dfd719bd192ca2c0058e9b4d0a8 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,32 @@ Please send GNU tar bug reports to <bug-tar@gnu.org>
 \f
 version 1.15.2 (CVS version -- unreleased)
 
 \f
 version 1.15.2 (CVS version -- unreleased)
 

+* New features
+
+* Any number of -T (--files-from) options may be used in command line.
+The file specified with -T may include any valid `tar' options,
+including another -T option.
+Compatibility note: older versions of tar would only recognize -C
+as option name within the file list file. Now any file whose name
+starts with - is handled as option. To insert file names starting with
+dash, use --add-file option.
+
+* List files containing null-separated file names are detected and processed
+automatically. It is not necessary to give --null option.
+
+* New option --no-unquote disables unquoting input file names. This
+is useful e.g. for processing output from `find dir -print0'.
+An orthogonal option --unquote is provided as well.
+
+* Better support for full-resolution time stamps.  Tar cannot restore
+time stamps to full nanosecond resolution, though, until the kernel
+guys get their act together and give us a system call to set file time
+stamps to nanosecond resolution.
+
+* The -v option now prints time stamps only to 1-minute resolution,
+not full resolution, to avoid using up too many output columns.
+Nanosecond resolution is now supported, but that would be too much.
+

 * Bugfixes
 
 ** Allow non-option arguments to be interspersed with options.
 * Bugfixes
 
 ** Allow non-option arguments to be interspersed with options.


@@ -16,11 +42,14 @@ used to read an extra block of data after a long name header
 if length of the member name was divisible by block size (512).
 Consequently, the file pointer was set off and the next member
 was not processed correctly.
 if length of the member name was divisible by block size (512).
 Consequently, the file pointer was set off and the next member
 was not processed correctly.

+** Previous version created invalid archives when files shrink
+during reading.
+** Compare mode (tar d) hanged when trying to compare file contents.

 
 \f
 version 1.15.1 - Sergey Poznyakoff, 2004-12-21
 
 
 \f
 version 1.15.1 - Sergey Poznyakoff, 2004-12-21
 

-This version fixes a bug introduced in 1.15 which caused 
+This version fixes a bug introduced in 1.15 which caused

 tar to refuse to extract files from standard input.
 
 \f
 tar to refuse to extract files from standard input.
 
 \f


@@ -55,7 +84,7 @@ the file names had their prefixes stripped off.
 automatically on archive creation. Cache directories are those
 containing a standardized tag file, as specified at:
 
 automatically on archive creation. Cache directories are those
 containing a standardized tag file, as specified at:
 

-       http://www.brynosaurus.com/cachedir/spec.html   
+       http://www.brynosaurus.com/cachedir/spec.html

 
 * New configure option --with-rmt allows to specify full path name to
 the `rmt' utility. This supercedes DEFAULT_RMT_COMMAND variable
 
 * New configure option --with-rmt allows to specify full path name to
 the `rmt' utility. This supercedes DEFAULT_RMT_COMMAND variable


@@ -79,12 +108,12 @@ lead to removing the already extracted copy. Preserve the first
 extracted copy in such cases.
 ** Restore script was passing improper argument to tar --listed option (which
 didn't affect the functionality, but was logically incorrect).
 extracted copy in such cases.
 ** Restore script was passing improper argument to tar --listed option (which
 didn't affect the functionality, but was logically incorrect).

-** Fixed verification of created archives. 
+** Fixed verification of created archives.

 ** Fixed unquoting of file names containing backslash escapes (previous
 versions failed to recognize \a and \v).
 ** When attempting to delete a non-existing member from the archive, previous
 versions of tar used to overwrite last archive block with zeroes.
 ** Fixed unquoting of file names containing backslash escapes (previous
 versions failed to recognize \a and \v).
 ** When attempting to delete a non-existing member from the archive, previous
 versions of tar used to overwrite last archive block with zeroes.

-  
+

 \f
 version 1.14 - Sergey Poznyakoff, 2004-05-11
 
 \f
 version 1.14 - Sergey Poznyakoff, 2004-05-11
 


@@ -112,7 +141,7 @@ version 1.14 - Sergey Poznyakoff, 2004-05-11
   with previous releases, however such usage is strongly deprecated as
   the option will change to its UNIX98 semantics in the future releases.
 
   with previous releases, however such usage is strongly deprecated as
   the option will change to its UNIX98 semantics in the future releases.
 

-* New option --occurrence[=N] can be used in conjunction with one of 
+* New option --occurrence[=N] can be used in conjunction with one of

   the subcommands --delete, --diff, --extract or --list when a list of
   files is given either on the command line or via -T option. This
   option instructs tar to process only the Nth occurrence of each named
   the subcommands --delete, --diff, --extract or --list when a list of
   files is given either on the command line or via -T option. This
   option instructs tar to process only the Nth occurrence of each named


@@ -143,8 +172,8 @@ DEFAULT_RMT_COMMAND=/etc/rmt.
 
 Notice also that the full path name of the "rmt" utility to
 use can be set at runtime, by giving option --rmt-command to
 
 Notice also that the full path name of the "rmt" utility to
 use can be set at runtime, by giving option --rmt-command to

-tar. 
-      
+tar.
+

 * Removed obsolete command line options:
 ** --absolute-paths superseded by --absolute-names
 ** --block-compress is not needed any longer
 * Removed obsolete command line options:
 ** --absolute-paths superseded by --absolute-names
 ** --block-compress is not needed any longer


@@ -157,7 +186,7 @@ tar.
 * New message translations fi (Finnish), gl (Galician), hr (Croatian),
   hu (Hungarian), ms (Malaysian), nb (Norwegian), ro (Romanian), sk
   (Slovak), zh_CN (Chinese simplified), zh_TW (Chinese traditional).
 * New message translations fi (Finnish), gl (Galician), hr (Croatian),
   hu (Hungarian), ms (Malaysian), nb (Norwegian), ro (Romanian), sk
   (Slovak), zh_CN (Chinese simplified), zh_TW (Chinese traditional).

-  The code 'no' for Norwegian (Bokmål) has been withdrawn; use 'nb' instead.
+  The code 'no' for Norwegian (Bokmål) has been withdrawn; use 'nb' instead.

 
 * Bug fixes.
 
 
 * Bug fixes.
 


@@ -215,7 +244,7 @@ version 1.13.20 - Paul Eggert, 2001-08-27
   The translation for Korean has been withdrawn due to encoding errors.
   It will be reissued once those are fixed.
 
   The translation for Korean has been withdrawn due to encoding errors.
   It will be reissued once those are fixed.
 

-\f  
+\f

 version 1.13.19 - Paul Eggert, 2001-01-13
 
 * The -I option has been withdrawn, as it was buggy and confusing.
 version 1.13.19 - Paul Eggert, 2001-01-13
 
 * The -I option has been withdrawn, as it was buggy and confusing.


@@ -224,7 +253,7 @@ version 1.13.19 - Paul Eggert, 2001-01-13
 * With an option like -N DATE, if DATE starts with "/" or ".", it is taken
   to be a file name; the last-modified time of that file is used as the date.
 
 * With an option like -N DATE, if DATE starts with "/" or ".", it is taken
   to be a file name; the last-modified time of that file is used as the date.
 

-\f  
+\f

 version 1.13.18 - Paul Eggert, 2000-10-29
 
 * Some security problems have been fixed.  `tar -x' now modifies only
 version 1.13.18 - Paul Eggert, 2000-10-29
 
 * Some security problems have been fixed.  `tar -x' now modifies only


@@ -252,7 +281,7 @@ version 1.13.18 - Paul Eggert, 2000-10-29
 
 * This version of tar works best with GNU gzip test version 1.3 or later.
   Please see <ftp://alpha.gnu.org/gnu/gzip/>.
 
 * This version of tar works best with GNU gzip test version 1.3 or later.
   Please see <ftp://alpha.gnu.org/gnu/gzip/>.

-  
+

 * `tar --delete -f -' now works again.
 
 \f
 * `tar --delete -f -' now works again.
 
 \f


@@ -305,13 +334,13 @@ version 1.13.16 - Paul Eggert, 1999-12-13.
 * tar now ignores socket files when creating an archive.
   Previously tar archived sockets as fifos, which caused problems.
 
 * tar now ignores socket files when creating an archive.
   Previously tar archived sockets as fifos, which caused problems.
 

-\f  
+\f

 version 1.13.15 - Paul Eggert, 1999-12-03.
 
 * If a file's ctime changes when being archived, report an error.
   Previously tar looked at mtime, which missed some errors.
 
 version 1.13.15 - Paul Eggert, 1999-12-03.
 
 * If a file's ctime changes when being archived, report an error.
   Previously tar looked at mtime, which missed some errors.
 

-\f  
+\f

 version 1.13.14 - Paul Eggert, 1999-11-07.
 
 * New translations ja, pt_BR.
 version 1.13.14 - Paul Eggert, 1999-11-07.
 
 * New translations ja, pt_BR.


@@ -678,8 +707,8 @@ GNU General Public License for more details.
 
 You should have received a copy of the GNU General Public License
 along with tar; see the file COPYING.  If not, write to
 
 You should have received a copy of the GNU General Public License
 along with tar; see the file COPYING.  If not, write to

-the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-Boston, MA 02111-1307, USA.
+the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
+Boston, MA 02110-1301, USA.

 \f
 Local variables:
 mode: outline
 \f
 Local variables:
 mode: outline