1D-Bus 1.6.8 (2012-09-28) 2== 3 4The "Fix one thing, break another" release. 5 6• Follow up to CVE-2012-3524: The additional hardening 7 work to use __secure_getenv() as a followup to bug #52202 8 broke certain configurations of gnome-keyring. Given 9 the difficulty of making this work without extensive 10 changes to gnome-keyring, use of __secure_getenv() is 11 deferred. 12 13D-Bus 1.6.6 (2012-09-28) 14== 15 16The "Clear the environment in your setuid binaries, please" release. 17 18• CVE-2012-3524: Don't access environment variables (fd.o #52202) 19 Thanks to work and input from Colin Walters, Simon McVittie, 20 Geoffrey Thomas, and others. 21• Unix-specific: 22 · Fix compilation on Solaris (fd.o #53286, Jonathan Perkin) 23 · Work around interdependent headers on OpenBSD by including sys/types.h 24 before each use of sys/socket.h (fd.o #54418, Brad Smith) 25 26D-Bus 1.6.4 (2012-07-18) 27== 28 29• Detect that users are "at the console" correctly when configured with 30 a non-default path such as --enable-console-auth-dir=/run/console 31 (fd.o #51521, Dave Reisner) 32 33• Remove an incorrect assertion from DBusTransport (fd.o #51657, 34 Simon McVittie) 35 36• Make --enable-developer default to "no" (regression in 1.6.2; 37 fd.o #51657, Simon McVittie) 38 39• Windows-specific: 40 · Launch dbus-daemon correctly if its path contains a space 41 (fd.o #49450, Wolfgang Baron) 42 43D-Bus 1.6.2 (2012-06-27) 44== 45 46The "Ice Cabbage" release. 47 48• Change how we create /var/lib/dbus so it works under Automake >= 1.11.4 49 (fd.o #51406, Simon McVittie) 50 51• Don't return from dbus_pending_call_set_notify with a lock held on OOM 52 (fd.o #51032, Simon McVittie) 53 54• Disconnect "developer mode" (assertions, verbose mode etc.) from 55 Automake maintainer mode. D-Bus developers should now configure with 56 --enable-developer. Automake maintainer mode is now on by default; 57 distributions can disable it with --disable-maintainer-mode. 58 (fd.o #34671, Simon McVittie) 59 60• Automatically define DBUS_STATIC_BUILD in static-only Autotools builds, 61 fixing linking when targeting Windows (fd.o #33973; william, Simon McVittie) 62 63• Unix-specific: 64 · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie) 65 66D-Bus 1.6.0 (2012-06-05) 67== 68 69The “soul of this machine has improved” release. 70 71This version starts a new stable branch of D-Bus: only bug fixes will 72be accepted into 1.6.x. Other changes will now go to the 1.7.x branch. 73 74Summary of changes since 1.4.x: 75 76• New requirements 77 · PTHREAD_MUTEX_RECURSIVE on Unix 78 · compiler support for 64-bit integers (int64_t or equivalent) 79 80• D-Bus Specification v0.19 81 82• New dbus-daemon features 83 · <allow own_prefix="com.example.Service"/> rules allow the service to 84 own names like com.example.Service.Instance3 85 · optional systemd integration when checking at_console policies 86 · --nopidfile option, mainly for use by systemd 87 · path_namespace and arg0namespace may appear in match rules 88 · eavesdropping is disabled unless the match rule contains eavesdrop=true 89 90• New public API 91 · functions to validate various string types (dbus_validate_path() etc.) 92 · dbus_type_is_valid() 93 · DBusBasicValue, a union of every basic type 94 95• Bug fixes 96 · removed an unsafe reimplementation of recursive mutexes 97 · dbus-daemon no longer busy-loops if it has far too many file descriptors 98 · dbus-daemon.exe --print-address works on Windows 99 · all the other bug fixes from 1.4.20 100 101• Other major implementation changes 102 · on Linux, dbus-daemon uses epoll if supported, for better scalability 103 · dbus_threads_init() ignores its argument and behaves like 104 dbus_threads_init_default() instead 105 · removed the per-connection link cache, improving dbus-daemon performance 106 107• Developer features 108 · optional Valgrind instrumentation (--with-valgrind) 109 · optional Stats interface on the dbus-daemon (--enable-stats) 110 · optionally abort whenever malloc() fails (--enable-embedded-tests 111 and export DBUS_MALLOC_CANNOT_FAIL=1) 112 113Changes since 1.5.12: 114 115• Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1 116 spec-compliance (fd.o #48580, David Zeuthen) 117 118• Don't use install(1) within the source/build trees, fixing the build as 119 non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot) 120 121• Add missing commas in some tcp and nonce-tcp addresses, and remove 122 an unused duplicate copy of the nonce-tcp transport in Windows builds 123 (fd.o #45896, Simon McVittie) 124 125D-Bus 1.5.12 (2012-03-27) 126== 127 128The “Big Book of Science” release. 129 130• Add public API to validate various string types: 131 dbus_validate_path(), dbus_validate_interface(), dbus_validate_member(), 132 dbus_validate_error_name(), dbus_validate_bus_name(), dbus_validate_utf8() 133 (fd.o #39549, Simon McVittie) 134 135• Turn DBusBasicValue into public API so bindings don't need to invent their 136 own "union of everything" type (fd.o #11191, Simon McVittie) 137 138• Enumerate data files included in the build rather than using find(1) 139 (fd.o #33840, Simon McVittie) 140 141• Add support for policy rules like <allow own_prefix="com.example.Service"/> 142 in dbus-daemon (fd.o #46273, Alban Crequy) 143 144• Windows-specific: 145 · make dbus-daemon.exe --print-address (and --print-pid) work again 146 on Win32, but not on WinCE (fd.o #46049, Simon McVittie) 147 · fix duplicate case value when compiling against mingw-w64 148 (fd.o #47321, Andoni Morales Alastruey) 149 150D-Bus 1.5.10 (2012-02-21) 151== 152 153The "fire in Delerium" release. 154 155On Unix platforms, PTHREAD_MUTEX_RECURSIVE (as specified in POSIX 2008 Base 156and SUSv2) is now required. 157 158• D-Bus Specification 0.19: 159 · Formally define unique connection names and well-known bus names, 160 and document best practices for interface, bus, member and error names, 161 and object paths (fd.o #37095, Simon McVittie) 162 · Document the search path for session and system services on Unix, and 163 where they should be installed by build systems (fd.o #21620, fd.o #35306; 164 Simon McVittie) 165 · Document the systemd transport (fd.o #35232, Lennart Poettering) 166 167• Make dbus_threads_init() use the same built-in threading implementation 168 as dbus_threads_init_default(); the user-specified primitives that it 169 takes as a parameter are now ignored (fd.o #43744, Simon McVittie) 170 171• Allow all configured auth mechanisms, not just one (fd.o #45106, 172 Pavel Strashkin) 173 174• Improve cmake build system (Ralf Habacker): 175 · simplify XML parser dependencies (fd.o #41027) 176 · generate build timestamp (fd.o #41029) 177 · only create batch files on Windows 178 · fix option and cache syntax 179 · add help-options target 180 · share dbus-arch-deps.h.in with autotools rather than having our 181 own version (fd.o #41033) 182 183• Build tests successfully with older GLib, as found in e.g. Debian 6 184 (fd.o #41219, Simon McVittie) 185 186• Avoid use of deprecated GThread API (fd.o #44413, Martin Pitt) 187 188• Build documentation correctly if man2html doesn't support filenames on 189 its command-line (fd.o #43875, Jack Nagel) 190 191• Improve test coverage. To get even more coverage, run the tests with 192 DBUS_TEST_SLOW=1 (fd.o #38285, #42811; Simon McVittie) 193 194• Reduce the size of the shared library by moving functionality only used 195 by dbus-daemon, tests etc. into their internal library and deleting 196 unused code (fd.o #34976, #39759; Simon McVittie) 197 198• Add dbus-daemon --nopidfile option, overriding the configuration, for 199 setups where the default configuration must include <pidfile/> to avoid 200 breaking traditional init, but the pid file is in fact unnecessary; use 201 it under systemd to improve startup time a bit (fd.o #45520, 202 Lennart Poettering) 203 204• Optionally (if configured --with-valgrind) add instrumentation to debug 205 libdbus and associated tools more meaningfully under Valgrind 206 (fd.o #37286, Simon McVittie) 207 208• Improve the dbus-send(1) man page (fd.o #14005, Simon McVittie) 209 210• Make dbus-protocol.h compatible with C++11 (fd.o #46147, Marc Mutz) 211 212• If tests are enabled and DBUS_MALLOC_CANNOT_FAIL is set in the environment, 213 abort on failure to malloc() (like GLib does), to turn runaway memory leaks 214 into a debuggable core-dump if a resource limit is applied (fd.o #41048, 215 Simon McVittie) 216 217• Don't crash if realloc() returns NULL in a debug build (fd.o #41048, 218 Simon McVittie) 219 220• Unix-specific: 221 · Replace our broken reimplementation of recursive mutexes, which has 222 been broken since 2006, with an ordinary pthreads recursive mutex 223 (fd.o #43744; Sigmund Augdal, Simon McVittie) 224 · Use epoll(7) for a more efficient main loop in Linux; equivalent patches 225 welcomed for other OSs' equivalents like kqueue, /dev/poll, or Solaris 226 event ports (fd.o #33337; Simon McVittie, Ralf Habacker) 227 · When running under systemd, use it instead of ConsoleKit to check 228 whether to apply at_console policies (fd.o #39609, Lennart Poettering) 229 · Avoid a highly unlikely fd leak (fd.o #29881, Simon McVittie) 230 · Don't close invalid fd -1 if getaddrinfo fails (fd.o #37258, eXeC001er) 231 · Don't touch ~/.dbus and ~/.dbus-keyrings when running 'make installcheck' 232 (fd.o #41218, Simon McVittie) 233 · Stop pretending we respect XDG_DATA_DIRS for system services: the launch 234 helper doesn't obey environment variables to avoid privilege escalation 235 attacks, so make the system bus follow the same rules 236 (fd.o #21620, Simon McVittie) 237 238• Windows-specific: 239 · Find the dbus-daemon executable next to the shared library (fd.o #41558; 240 Jesper Dam, Ralf Habacker) 241 · Remove the faulty implementation of _dbus_condvar_wake_all (fd.o #44609, 242 Simon McVittie) 243 244D-Bus 1.5.8 (2011-09-21) 245== 246 247The "cross-metering" release. 248 249In addition to dead code removal and refactoring, this release contains all 250of the bugfixes from 1.4.16. 251 252• Clean up dead code, and make more warnings fatal in development builds 253 (fd.o #39231, fd.o #41012; Simon McVittie) 254 255• If full test coverage is requested via --enable-tests, strictly require 256 Python, pygobject and dbus-python, which are required by some tests; if not, 257 and Python is missing, skip those tests rather than failing 258 (fd.o #37847, Simon McVittie) 259 260• When using cmake, provide the same version-info API in the installed headers 261 as for autotools (DBUS_VERSION, etc.) (fd.o #40905, Ralf Habacker) 262 263• Add a regression test for fd.o #38005 (fd.o #39836, Simon McVittie) 264 265• Make "NOCONFIGURE=1 ./autogen.sh" not run configure (Colin Walters) 266 267• Add _DBUS_STATIC_ASSERT and use it to check invariants (fd.o #39636, 268 Simon McVittie) 269 270• Fix duplicates in authors list (Ralf Habacker) 271 272• Fix broken links from dbus-tutorial.html if $(htmldir) != $(docdir) 273 (fd.o #39879, Chris Mayo) 274 275• Fix a small memory leak, and a failure to report errors, when updating 276 a service file entry for activation (fd.o #39230, Simon McVittie) 277 278• Unix-specific: 279 · Clean up (non-abstract) Unix sockets on bus daemon exit (fd.o #38656; 280 Brian Cameron, Simon McVittie) 281 · On systems that use libcap-ng but not systemd, drop supplemental groups 282 when switching to the daemon user (Red Hat #726953, Steve Grubb) 283 · Make the cmake build work again on GNU platforms (fd.o #29228, 284 Simon McVittie) 285 · Fix compilation on non-C99 systems that have inttypes.h but not stdint.h, 286 like Solaris (fd.o #40313, Dagobert Michelsen) 287 · Define CMSG_ALIGN, CMSG_LEN, CMSG_SPACE on Solaris < 10 288 (fd.o #40235, Simon McVittie) 289 · Cope with Unixes that don't have LOG_PERROR, like Solaris 10 290 (fd.o #39987, Simon McVittie) 291 · Cope with platforms whose vsnprintf violates both POSIX and C99, like 292 Tru64, IRIX and HP-UX (fd.o #11668, Simon McVittie) 293 294• Windows-specific: 295 · Fix compilation on MSVC, which doesn't understand "inline" with its 296 C99 meaning (fd.o #40000; Ralf Habacker, Simon McVittie) 297 · Fix misuse of GPid in test/dbus-daemon.c (fd.o #40003, Simon McVittie) 298 · Fix cross-compilation to Windows with Automake (fd.o #40003, Simon McVittie) 299 300D-Bus 1.5.6 (2011-07-29) 301== 302 303The "weird, gravy-like aftertaste" release. 304 305In addition to new features and refactoring, this release contains all of the 306bugfixes from 1.4.14. 307 308Potentially incompatible (Bustle and similar debugging tools will need 309changes to work as intended): 310 311• Do not allow match rules to "eavesdrop" (receive messages intended for a 312 different recipient) by mistake: eavesdroppers must now opt-in to this 313 behaviour by putting "eavesdrop='true'" in the match rule, which will 314 not have any practical effect on buses where eavesdropping is not allowed 315 (fd.o #37890, Cosimo Alfarano) 316 317Other changes: 318 319• D-Bus Specification version 0.18 (fd.o #37890, fd.o #39450, fd.o #38252; 320 Cosimo Alfarano, Simon McVittie) 321 · add the "eavesdrop" keyword to match rules 322 · define eavesdropping, unicast messages and broadcast messages 323 · stop claiming that match rules are needed to match unicast messages to you 324 · promote the type system to be a top-level section 325 326• Use DBUS_ERROR_OBJECT_PATH_IN_USE if dbus_connection_try_register_object_path 327 or dbus_connection_try_register_fallback fails, not ...ADDRESS_IN_USE, 328 and simplify object-path registration (fd.o #38874, Jiří Klimeš) 329 330• Consistently use atomic operations on everything that is ever manipulated 331 via atomic ops, as was done for changes to DBusConnection's refcount in 332 1.4.12 (fd.o #38005, Simon McVittie) 333 334• Fix a file descriptor leak when connecting to a TCP socket (fd.o #37258, 335 Simon McVittie) 336 337• Make "make check" in a clean tree work, by not running tests until 338 test data has been set up (fd.o #34405, Simon McVittie) 339 340• The dbus-daemon no longer busy-loops if it has a very large number of file 341 descriptors (fd.o #23194, Simon McVittie) 342 343• Refactor message flow through dispatching to avoid locking violations if 344 the bus daemon's message limit is hit; remove the per-connection link cache, 345 which was meant to improve performance, but now reduces it (fd.o #34393, 346 Simon McVittie) 347 348• Some cmake fixes (Ralf Habacker) 349 350• Remove dead code, mainly from DBusString (fd.o #38570, fd.o #39610; 351 Simon McVittie, Lennart Poettering) 352 353• Stop storing two extra byte order indicators in each D-Bus message 354 (fd.o #38287, Simon McVittie) 355 356• Add an optional Stats interface which can be used to get statistics from 357 a running dbus-daemon if enabled at configure time with --enable-stats 358 (fd.o #34040, Simon McVittie) 359 360• Fix various typos (fd.o #27227, fd.o #38284; Sascha Silbe, Simon McVittie) 361 362• Documentation (fd.o #36156, Simon McVittie): 363 · let xsltproc be overridden as usual: ./configure XSLTPROC=myxsltproc 364 · install more documentation automatically, including man2html output 365 · put dbus.devhelp in the right place (it must go in ${htmldir}) 366 367• Unix-specific: 368 · look for system services in /lib/dbus-1/system-services in addition to all 369 the other well-known locations; note that this should always be /lib, 370 even on platforms where shared libraries on the root FS would go in /lib64, 371 /lib/x86_64-linux-gnu or similar (fd.o #35229, Lennart Poettering) 372 · opt-in to fd passing on Solaris (fd.o #33465, Simon McVittie) 373 374• Windows-specific (Ralf Habacker): 375 · fix use of a mutex for autolaunch server detection 376 · don't crash on malloc failure in _dbus_printf_string_upper_bound 377 378D-Bus 1.5.4 (2011-06-10) 379== 380 381Security (local denial of service): 382 383• Byte-swap foreign-endian messages correctly, preventing a long-standing 384 local DoS if foreign-endian messages are relayed through the dbus-daemon 385 (backporters: this is git commit c3223ba6c401ba81df1305851312a47c485e6cd7) 386 (CVE-2011-2200, fd.o #38120, Debian #629938; Simon McVittie) 387 388New things: 389 390• The constant to use for an infinite timeout now has a name, 391 DBUS_TIMEOUT_INFINITE. It is numerically equivalent to 0x7fffffff (INT32_MAX) 392 which can be used for source compatibility with older versions of libdbus. 393 394• If GLib and DBus-GLib are already installed, more tests will be built, 395 providing better coverage. The new tests can also be installed via 396 ./configure --enable-installed-tests 397 for system integration testing, if required. (fd.o #34570, Simon McVittie) 398 399Changes: 400 401• Consistently use atomic operations for the DBusConnection's refcount, 402 fixing potential threading problems (fd.o #38005, Simon McVittie) 403 404• Don't use -Wl,--gc-sections by default: in practice the size decrease is 405 small (300KiB on x86-64) and it frequently doesn't work in unusual 406 toolchains. To optimize for minimum installed size, you should benchmark 407 various possibilities for CFLAGS and LDFLAGS, and set the best flags for 408 your particular toolchain at configure time. (fd.o #33466, Simon McVittie) 409 410• Use #!/bin/sh for run-with-tmp-session-bus.sh, making it work on *BSD 411 (fd.o #35880, Timothy Redaelli) 412 413• Use ln -fs to set up dbus for systemd, which should fix reinstallation 414 when not using a DESTDIR (fd.o #37870, Simon McVittie) 415 416• Windows-specific changes: 417 · don't try to build dbus-daemon-launch-helper (fd.o #37838, Mark Brand) 418 419D-Bus 1.5.2 (2011-06-01) 420== 421 422The "Boar Hunter" release. 423 424Notes for distributors: 425 426 This version of D-Bus no longer uses -fPIE by default. Distributions wishing 427 to harden the dbus-daemon and dbus-launch-helper can re-enable this if their 428 toolchain supports it reliably, via something like: 429 430 ./configure CFLAGS=-fPIE LDFLAGS="-pie -Wl,-z,relro" 431 432 or by using distribution-specific wrappers such as Debian's hardening-wrapper. 433 434Changes: 435 436 • D-Bus Specification v0.17 437 · Reserve the extra characters used in signatures by GVariant 438 (fd.o #34529, Simon McVittie) 439 · Define the ObjectManager interface (fd.o #34869, David Zeuthen) 440 • Don't force -fPIE: distributions and libtool know better than we do whether 441 it's desirable (fd.o #16621, fd.o #27215; Simon McVittie) 442 • Allow --disable-gc-sections, in case your toolchain offers the 443 -ffunction-sections, -fdata-sections and -Wl,--gc-sections options 444 but they're broken, as seen on Solaris (fd.o #33466, Simon McVittie) 445 • Install dbus-daemon and dbus-daemon-launch-helper in a more normal way 446 (fd.o #14512; Simon McVittie, loosely based on a patch from Luca Barbato) 447 • Ensure that maintainers upload documentation with the right permissions 448 (fd.o #36130, Simon McVittie) 449 • Don't force users of libdbus to be linked against -lpthread, -lrt 450 (fd.o #32827, Simon McVittie) 451 • Log system-bus activation information to syslog (fd.o #35705, 452 Colin Walters) 453 • Log messages dropped due to quotas to syslog (fd.o #35358, 454 Simon McVittie) 455 • Make the nonce-tcp transport work on Unix (fd.o #34569, Simon McVittie) 456 • On Unix, if /var/lib/dbus/machine-id cannot be read, try /etc/machine-id 457 (fd.o #35228, Lennart Poettering) 458 • In the regression tests, don't report fds as "leaked" if they were open 459 on startup (fd.o #35173, Simon McVittie) 460 • Make dbus-monitor bail out if asked to monitor more than one bus, 461 rather than silently using the last one (fd.o #26548, Will Thompson) 462 • Clarify documentation (fd.o #35182, Simon McVittie) 463 • Clean up minor dead code and some incorrect error handling 464 (fd.o #33128, fd.o #29881; Simon McVittie) 465 • Check that compiler options are supported before using them (fd.o #19681, 466 Simon McVittie) 467 • Windows: 468 • Remove obsolete workaround for winioctl.h (fd.o #35083, Ralf Habacker) 469 470D-Bus 1.5.0 (2011-04-11) 471== 472 473The "you never know when you need to tow something from your giant 474flying shark" release. 475 476 • D-Bus Specification v0.16 477 · Add support for path_namespace and arg0namespace in match rules 478 (fd.o #24317, #34870; Will Thompson, David Zeuthen, Simon McVittie) 479 · Make argNpath support object paths, not just object-path-like strings, 480 and document it better (fd.o #31818, Will Thompson) 481 • Let the bus daemon implement more than one interface (fd.o #33757, 482 Simon McVittie) 483 • Optimize _dbus_string_replace_len to reduce waste (fd.o #21261, 484 Roberto Guido) 485 • Require user intervention to compile with missing 64-bit support 486 (fd.o #35114, Simon McVittie) 487 • Add dbus_type_is_valid as public API (fd.o #20496, Simon McVittie) 488 • Raise UnknownObject instead of UnknownMethod for calls to methods on 489 paths that are not part of the object tree, and UnknownInterface for calls 490 to unknown interfaces in the bus daemon (fd.o #34527, Lennart Poettering) 491 492D-Bus 1.4.8 (2011-04-08) 493== 494 495The "It's like the beginning of a lobster" release. 496 497 • Rename configure.in to configure.ac, and update it to modern conventions 498 (fd.o #32245; Javier Jardón, Simon McVittie) 499 • Correctly give XDG_DATA_HOME priority over XDG_DATA_DIRS (fd.o #34496, 500 Anders Kaseorg) 501 • Prevent X11 autolaunching if $DISPLAY is unset or empty, and add 502 --disable-x11-autolaunch configure option to prevent it altogether 503 in embedded environments (fd.o #19997, NB#219964; Simon McVittie) 504 • Install the documentation, and an index for Devhelp (fd.o #13495, 505 Debian #454142; Simon McVittie, Matthias Clasen) 506 • If checks are not disabled, check validity of string-like types and 507 booleans when sending them (fd.o #16338, NB#223152; Simon McVittie) 508 • Add UnknownObject, UnknownInterface, UnknownProperty and PropertyReadOnly 509 errors to dbus-shared.h (fd.o #34527, Lennart Poettering) 510 • Break up a huge conditional in config-parser so gcov can produce coverage 511 data (fd.o #10887, Simon McVittie) 512 • List which parts of the Desktop Entry specification are applicable to 513 .service files (fd.o #19159, Sven Herzberg) 514 • Don't suppress service activation if two services have the same Exec= 515 (fd.o #35750, Colin Walters) 516 • Windows: 517 · Avoid the name ELEMENT_TYPE due to namespace-pollution from winioctl.h 518 (Andre Heinecke) 519 · Include _dbus_path_is_absolute in libdbus on Windows, fixing compilation 520 (fd.o #32805, Mark Brand) 521 522D-Bus 1.4.6 (2010-02-17) 523== 524 525The "1, 2, miss a few, 99, 100" release. 526 527 • Remove unfinished changes intended to support GTest-based tests, 528 which were mistakenly included in 1.4.4 529 530D-Bus 1.4.4 (2010-02-17) 531== 532 533 • Switch back to using even micro versions for stable releases; 1.4.1 534 should have been called 1.4.2, so skip that version number 535 • Don't leave bad file descriptors being watched when spawning processes, 536 which could result in a busy-loop (fd.o #32992, NB#200248; possibly 537 also LP#656134, LP#680444, LP#713157) 538 • Check for MSG_NOSIGNAL correctly 539 • Fix failure to detect abstract socket support (fd.o #29895) 540 • Make _dbus_system_logv actually exit with DBUS_SYSTEM_LOG_FATAL 541 (fd.o #32262, NB#180486) 542 • Improve some error code paths (fd.o #29981, fd.o #32264, fd.o #32262, 543 fd.o #33128, fd.o #33277, fd.o #33126, NB#180486) 544 • Avoid possible symlink attacks in /tmp during compilation (fd.o #32854) 545 • Tidy up dead code (fd.o #25306, fd.o #33128, fd.o #34292, NB#180486) 546 • Improve gcc malloc annotations (fd.o #32710) 547 • If the system bus is launched via systemd, protect it from the OOM killer 548 • Documentation improvements (fd.o #11190) 549 • Avoid readdir_r, which is difficult to use correctly (fd.o #8284, 550 fd.o #15922, LP#241619) 551 • Cope with invalid files in session.d, system.d (fd.o #19186, 552 Debian #230231) 553 • Don't distribute generated files that embed our builddir (fd.o #30285, 554 fd.o #34292) 555 • Raise the system bus's fd limit to be sufficient for its configuration 556 (fd.o #33474, LP#381063) 557 • Fix syslog string processing 558 • Ignore -Waddress 559 • Remove broken gcov parsing code and --enable-gcov, and replace them 560 with lcov HTML reports and --enable-compiler-coverage (fd.o #10887) 561 • Windows: 562 · avoid live-lock in Windows CE due to unfair condition variables 563 • OpenBSD: 564 · support credentials-passing (fd.o #32542) 565 • Solaris: 566 · opt-in to thread safety (fd.o #33464) 567 568D-Bus 1.4.1 (20 December 2010) 569== 570 571 • Fix for CVE-2010-4352: sending messages with excessively-nested variants can 572 crash the bus. The existing restriction to 64-levels of nesting previously 573 only applied to the static type signature; now it also applies to dynamic 574 nesting using variants. Thanks to Rémi Denis-Courmont for discoving this 575 issue. 576 • OS X portability fixes, including launchd support. 577 • Windows autolaunch improvements. 578 • Various bug fixes. 579 580D-Bus 1.4.0 (6 Sep 2010) 581== 582 - systemd hookup 583 584D-Bus 1.3.1 (23 June 2010) 585== 586 - New standardized PropertiesChanged signal in the properties interface 587 - Various portability fixes, in particular to Windows platforms 588 - Support forking bus services, for compatibility 589 590D-Bus 1.3.0 (29 July 2009) 591== 592 - ability for dbus-send to send to any bus (--address) 593 - file descriptor passing on Unix socket transports 594 - use of GCC atomic intrinsics for better processor support 595 (requires -march=i486 or above for x86 compilation) 596 - thread-safe FD_CLOEXEC setting on recent Linux kernels (2.6.24-27 and up) 597 and glibc (2.9 for pipe2 and 2.10 for accept4) 598 - feature negotiation in the bus daemon 599