Buffer overflow in dump, as reported from Bugtraq

[dump.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 77420a68073830edb89d06dca62d04bc374cad28..e4fdabfadceb66517f302a7db3499dbd9136a4e5 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,60 @@
-$Id: CHANGES,v 1.36 2000/01/21 10:33:40 stelian Exp $
+$Id: CHANGES,v 1.45 2000/03/01 10:16:05 stelian Exp $
+
+Changes between versions 0.4b14 and 0.4b15 (released ?????????????????)
+=======================================================================
+
+1.     Added a prompt command in interactive restore mode. Thanks
+       to Andreas Dilger <adilger@home.com> for the patch.
+
+2.     Fixed a buffer overflow problem in dump (caused by 
+       not checking the size of the filesystem parameter). 
+       Thanks to Kim Yong-jun <loveyou@hackerslab.org> for
+       reporting this on Bugtraq (and to several dump users
+       who forwarded me his mail).
+
+Changes between versions 0.4b13 and 0.4b14 (released February 10, 2000)
+=======================================================================
+
+1.     Fixed a bug in dump which may have caused invalid deleted 
+       directories to be dumped out if they were deleted after the
+       mapping pass. This could occure on active filesystem and lead
+       to heap corruption (causing dump malfunction in many possible ways).
+       Thanks to Jan Sanislo <oystr@cs.washington.edu> for finding this
+       bug and submitting the patch.
+
+2.     Fixed the handling of the filesystem parameter in dump. A
+       '/mnt/disk' parameter caused the disk contents to be dumped,
+       but a '/mnt/disk/' parameter caused the mountpoint directory
+       to be dumped (generally an empty directory).
+
+3.     Improved the output of dump in order to tell which directory
+       it is currently dumping (when dumping a subtree).
+
+4.     Added the '-e' exclude inode option to dump. Thanks to
+       Isaac Chuang <ike@isl.stanford.edu> for contributing with the patch.
+
+5.     Added a REPORTING-BUGS file in order to provide a guide
+       on how to correctly report a bug in dump/restore.
+
+6.     Fixed a restore problem when restoring a hard link to an inode
+       having the immutable or append-only attribute set. Thanks to
+       Ambrose Li <acli@mingpaoxpress.com> for submitting the patch.
+
+7.     Fixed a compatibility problem between dumps made on little
+       endian machines (the format was correct) and big endian 
+       machines (the format was incorrect). This fix break the
+       compatibility with the older dumps made on big endian 
+       machines (sparc, m86k, ppc etc). For the first time in
+       linux dump's history (I believe), the dumps made by *BSD, 
+       Linux/alpha, Linux/sparc and Linux/x86 are compatible, 
+       so interchangeable. Thanks to Rob Cermak
+       <cermak@ahab.rutgers.edu> for submitting the bug and
+       helping me test the fix.
+
+8.     Fixed the way dump reports the remaining percent/time, if
+       the number of blocks actually dumped exceeds the estimated
+       number of blocks. Thanks to Jean-Paul van der Jagt 
+       <jeanpaul@dutepp0.et.tudelft.nl> for reporting the bug.
 
 Changes between versions 0.4b12 and 0.4b13 (released January 21, 2000)
 ======================================================================