Carefully crafted invalid headers can cause buffer overrun.

[chaz/tar] / NEWS

diff --git a/NEWS b/NEWS
index 911592dc13074a8aedd55ad2a28394bac52fc2fb..ab057ecc86a52dfd719bd192ca2c0058e9b4d0a8 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -18,10 +18,22 @@ as option name within the file list file. Now any file whose name
 starts with - is handled as option. To insert file names starting with
 dash, use --add-file option.
 
 starts with - is handled as option. To insert file names starting with
 dash, use --add-file option.
 

+* List files containing null-separated file names are detected and processed
+automatically. It is not necessary to give --null option.
+

 * New option --no-unquote disables unquoting input file names. This
 is useful e.g. for processing output from `find dir -print0'.
 An orthogonal option --unquote is provided as well.
 
 * New option --no-unquote disables unquoting input file names. This
 is useful e.g. for processing output from `find dir -print0'.
 An orthogonal option --unquote is provided as well.
 

+* Better support for full-resolution time stamps.  Tar cannot restore
+time stamps to full nanosecond resolution, though, until the kernel
+guys get their act together and give us a system call to set file time
+stamps to nanosecond resolution.
+
+* The -v option now prints time stamps only to 1-minute resolution,
+not full resolution, to avoid using up too many output columns.
+Nanosecond resolution is now supported, but that would be too much.
+

 * Bugfixes
 
 ** Allow non-option arguments to be interspersed with options.
 * Bugfixes
 
 ** Allow non-option arguments to be interspersed with options.


@@ -30,6 +42,9 @@ used to read an extra block of data after a long name header
 if length of the member name was divisible by block size (512).
 Consequently, the file pointer was set off and the next member
 was not processed correctly.
 if length of the member name was divisible by block size (512).
 Consequently, the file pointer was set off and the next member
 was not processed correctly.

+** Previous version created invalid archives when files shrink
+during reading.
+** Compare mode (tar d) hanged when trying to compare file contents.

 
 \f
 version 1.15.1 - Sergey Poznyakoff, 2004-12-21
 
 \f
 version 1.15.1 - Sergey Poznyakoff, 2004-12-21


@@ -692,8 +707,8 @@ GNU General Public License for more details.
 
 You should have received a copy of the GNU General Public License
 along with tar; see the file COPYING.  If not, write to
 
 You should have received a copy of the GNU General Public License
 along with tar; see the file COPYING.  If not, write to

-the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-Boston, MA 02111-1307, USA.
+the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
+Boston, MA 02110-1301, USA.

 \f
 Local variables:
 mode: outline
 \f
 Local variables:
 mode: outline