Buffer overflow in dump, as reported from Bugtraq

[dump.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index d86fccbc4575139b6ef2a9071ab41ef2a09711aa..e4fdabfadceb66517f302a7db3499dbd9136a4e5 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,7 +1,19 @@
-$Id: CHANGES,v 1.38 2000/01/26 11:38:07 stelian Exp $
+$Id: CHANGES,v 1.45 2000/03/01 10:16:05 stelian Exp $
 
-Changes between versions 0.4b13 and 0.4b14 (released ????????????????)
-======================================================================
+Changes between versions 0.4b14 and 0.4b15 (released ?????????????????)
+=======================================================================
+
+1.     Added a prompt command in interactive restore mode. Thanks
+       to Andreas Dilger <adilger@home.com> for the patch.
+
+2.     Fixed a buffer overflow problem in dump (caused by 
+       not checking the size of the filesystem parameter). 
+       Thanks to Kim Yong-jun <loveyou@hackerslab.org> for
+       reporting this on Bugtraq (and to several dump users
+       who forwarded me his mail).
+
+Changes between versions 0.4b13 and 0.4b14 (released February 10, 2000)
+=======================================================================
 
 1.     Fixed a bug in dump which may have caused invalid deleted 
        directories to be dumped out if they were deleted after the
@@ -18,6 +30,32 @@ Changes between versions 0.4b13 and 0.4b14 (released ????????????????)
 3.     Improved the output of dump in order to tell which directory
        it is currently dumping (when dumping a subtree).
 
+4.     Added the '-e' exclude inode option to dump. Thanks to
+       Isaac Chuang <ike@isl.stanford.edu> for contributing with the patch.
+
+5.     Added a REPORTING-BUGS file in order to provide a guide
+       on how to correctly report a bug in dump/restore.
+
+6.     Fixed a restore problem when restoring a hard link to an inode
+       having the immutable or append-only attribute set. Thanks to
+       Ambrose Li <acli@mingpaoxpress.com> for submitting the patch.
+
+7.     Fixed a compatibility problem between dumps made on little
+       endian machines (the format was correct) and big endian 
+       machines (the format was incorrect). This fix break the
+       compatibility with the older dumps made on big endian 
+       machines (sparc, m86k, ppc etc). For the first time in
+       linux dump's history (I believe), the dumps made by *BSD, 
+       Linux/alpha, Linux/sparc and Linux/x86 are compatible, 
+       so interchangeable. Thanks to Rob Cermak
+       <cermak@ahab.rutgers.edu> for submitting the bug and
+       helping me test the fix.
+
+8.     Fixed the way dump reports the remaining percent/time, if
+       the number of blocks actually dumped exceeds the estimated
+       number of blocks. Thanks to Jean-Paul van der Jagt 
+       <jeanpaul@dutepp0.et.tudelft.nl> for reporting the bug.
+
 Changes between versions 0.4b12 and 0.4b13 (released January 21, 2000)
 ======================================================================