From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/724 Path: news.gmane.org!not-for-mail From: Isaac Dunham Newsgroups: gmane.linux.lib.musl.general Subject: Re: musl 0.8.8 released; all users should upgrade or patch Date: Wed, 18 Apr 2012 19:13:28 -0700 Message-ID: <20120418191328.5ea16f57@newbook> References: <20120418090756.GW7281@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Trace: dough.gmane.org 1334801641 1172 80.91.229.3 (19 Apr 2012 02:14:01 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Thu, 19 Apr 2012 02:14:01 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-725-gllmg-musl=m.gmane.org@lists.openwall.com Thu Apr 19 04:13:57 2012 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1SKgsc-0007Zk-49 for gllmg-musl@plane.gmane.org; Thu, 19 Apr 2012 04:13:54 +0200 Original-Received: (qmail 14323 invoked by uid 550); 19 Apr 2012 02:13:52 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 14315 invoked from network); 19 Apr 2012 02:13:52 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lavabit; d=lavabit.com; b=vu3jbHriFRmu7rjd21D52yR8hvbDnuEbwguFvY0YtuQZ3Ln4s+4HVt180is6PxkxVwlCXxfM60lftjQmvrs23ByL7lupkYv+1FX2C+T3gfwCKgDvHPIRshimABqAM5nyNwpafpTzUYC2lSciLJ0slhqwRLaU3obUR7DiwkDToAI=; h=Date:From:To:Subject:Message-ID:In-Reply-To:References:X-Mailer:Mime-Version:Content-Type:Content-Transfer-Encoding; In-Reply-To: <20120418090756.GW7281@brightrain.aerifal.cx> X-Mailer: Claws Mail 3.7.4 (GTK+ 2.20.1; i486-pc-linux-gnu) Xref: news.gmane.org gmane.linux.lib.musl.general:724 Archived-At: On Wed, 18 Apr 2012 05:07:56 -0400 Rich Felker wrote: > Hi everyone, > > I've released musl 0.8.8 including a fix for the buffer overflow issue > discovered yesterday. Release summary: > > Fix for critical buffer overflow vulnerability in fprintf with > unbuffered files. Major math library correctness and performance > improvements, including x86 assembly. New floating point > parser/converter with correct rounding, new scanf that corrects > many corner-case errors, and new wcstod/f/ld (previously missing). > Various compatibility improvements and small bug fixes. > > http://www.etalabs.net/musl/releases/musl-0.8.8.tar.gz > > With this release, musl seems to have complete interface-level > coverage of ISO C99 and POSIX 2008. There are still some features I forget what they were, but ISTR seeing one or two missing functions in one of the headers I worked on. > math, float parsing, and scanf code. I'd also like to get the > in-progress _BSD_SOURCE feature test macro patchset finished and > integrated. If all goes well, we might just have one or two more > releases in this series before 0.9 begins. What I'd had in mind was to have _BSD_SOURCE ready "before 0.9.0" (when you were talking about having the license change). I haven't made much progress on it lately, and have been going through header by header (there are no patches I haven't sent left). If anyone wants to work on the other headers, they're welcome to do so. A header should take less than 3 hours to go over, from my experience. > Just looked back at the list archives and my original goals for 1.0, > and it seems we're nearly there, and already exceeding the goals in > some areas like application compatibility. A big thanks goes out to > everyone who's been testing and reporting the issues you run into > building apps! You're welcome, and thank you for developing musl! Isaac Dunham