commit 765544603198981079c0df1d8eb47077dc53fe0e from: Markus Uhlin date: Sun Sep 14 21:07:42 2025 UTC Updated the changelog commit - f9a388883ac97839a78dd0aed9dd7067981af009 commit + 765544603198981079c0df1d8eb47077dc53fe0e blob - 11438589844eaa9e77400b04613d299a57628bc5 blob + 778020592df2df4670434575fc35ce6e14a262ea --- CHANGELOG.md +++ CHANGELOG.md @@ -4,20 +4,20 @@ All notable changes to this fork of FICS version 1.6.2 documented in this file. ## [1.4.6] - 2025-09-14 ## -- Added validation of filenames and login names. -- Changed the program to use `int64_t` instead of `long int` in +- **Added** validation of filenames and login names. +- **Changed** the program to use `int64_t` instead of `long int` in contexts where `time_t` is used. - During file creation, took care to give it the most restrictive permissions possible. Multiple occurrences. -- Fixed missing return-value checks for a 'scanf'-like functions. -- Fixed multiplication result converted to larger type. Two +- **Fixed** missing return-value checks for 'scanf'-like functions. +- **Fixed** multiplication result converted to larger type. Two occurrences. -- Fixed overflowed integer argument in `readline2()` passed to +- **Fixed** overflowed integer argument in `readline2()` passed to `memmove()`. Found by Coverity. -- Fixed uncontrolled data used in path expressions, this in order to +- **Fixed** uncontrolled data used in path expressions, this in order to prevent path traversal. -- Renamed variables in order to avoid conflicts with system headers. -- Replaced non-reentrant functions with their corresponding thread +- **Renamed** variables in order to avoid conflicts with system headers. +- **Replaced** non-reentrant functions with their corresponding thread safe version. (Multiple occurrences, found by CodeQL.) ## [1.4.5] - 2025-04-09 ##