NEWS 141 KB
Newer Older
Simon McVittie's avatar
Simon McVittie committed
1
dbus 1.13.18 (2020-07-02)
Simon McVittie's avatar
Simon McVittie committed
2 3
=========================

Simon McVittie's avatar
Simon McVittie committed
4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37
The carnivorous border release.

Maybe security fixes:

 On Unix, avoid a use-after-free if two usernames have the same
  numeric uid. In older versions this could lead to a crash (denial of
  service) or other undefined behaviour, possibly including incorrect
  authorization decisions if <policy group=...> is used.
  Like Unix filesystems, D-Bus' model of identity cannot distinguish
  between users of different names with the same numeric uid, so this
  configuration is not advisable on systems where D-Bus will be used.
  Thanks to Daniel Onaca.
  (dbus#305, dbus!166; Simon McVittie)

Other fixes:

• On Solaris and its derivatives, if a cmsg header is truncated, ensure
  that we do not overrun the buffer used for fd-passing, even if the
  kernel tells us to.
  (dbus#304, dbus!165; Andy Fiddaman)

• When built with CMake, use GNUInstallDirs' special-cases for prefixes
  /, /usr and /opt/*
  (dbus!155, Ralf Habacker)

 When built with CMake on Linux, allow systemd-specific features to be
  enabled, for feature parity with Autotools
  (dbus!155, Ralf Habacker)

 When built with CMake, install the same example files as with Autotools
  (dbus!155, Ralf Habacker)

 Correct the doc-comment for DBUS_ERROR_SPAWN_NO_MEMORY
  (dbus!163, Marc-André Lureau)
Simon McVittie's avatar
Simon McVittie committed
38

Simon McVittie's avatar
Simon McVittie committed
39
dbus 1.13.16 (2020-06-02)
40 41
=========================

Simon McVittie's avatar
Simon McVittie committed
42 43 44 45 46 47 48 49 50 51 52 53 54
The ominous mushroom hat release.

Denial of service fixes:

 CVE-2020-12049: If a message contains more file descriptors than can
  be sent, close those that did get through before reporting error.
  Previously, a local attacker could cause the system dbus-daemon (or
  another system service with its own DBusServer) to run out of file
  descriptors, by repeatedly connecting to the server and sending fds that
  would get leaked.
  Thanks to Kevin Backhouse of GitHub Security Lab.
  (dbus#294, GHSL-2020-057; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94
Enhancements:

 The API reference manual can be built as a Qt compiled help file if
  qhelpgenerator(-qt5) is available. This is controlled by
  --enable-qt-help and --with-qchdir in the Autotools build, or
  -DENABLE_QT_HELP and -DINSTALL_QCH_DIR in CMake.
  (dbus!150, Ralf Habacker)

Fixes:

 When built for Windows, return all autolaunch error information in
  the DBusError rather than printing some of it to stderr
  (dbus#191, dbus!131; Ralf Habacker)

 When built for Windows, don't truncate long log messages
  (dbus!134, Ralf Habacker)

• When built using CMake for a Unix platform, dbus-cleanup-sockets and
  dbus-uuidgen are now included (dbus!154, Ralf Habacker)

• When built for Windows with verbose mode enabled, don't print debugging
  messages related to poll() emulation into a fixed-size buffer that
  could overflow (dbus!125, Ralf Habacker)

 Adjust .desktop file parser to avoid a Coverity false positive
  (dbus!146, Coverity CID 354884; Ralf Habacker)

 Print shell-test diagnostics to stderr, avoiding warnings or errors
  from strict TAP parsers (dbus!157, Félix Piédallu)

Tests and CI enhancements:

 When the CI cross-builds Windows binaries on Linux, run unit tests
  using Wine (dbus#296, dbus!158; Ralf Habacker)

 Really build x86_64 Windows binaries in Gitlab-CI, instead of building
  i686 binaries a second time (Ralf Habacker)

 When tests will be run using Wine, use STABS debug symbol format so
  that Wine can display backtraces (dbus#133, dbus!104; Ralf Habacker)
95

96
dbus 1.13.14 (2020-04-21)
Simon McVittie's avatar
Simon McVittie committed
97 98
=========================

99 100
The mystery allium release.

Simon McVittie's avatar
Simon McVittie committed
101 102 103 104 105 106
Dependencies:

 On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented,
  they must be POSIX-conformant. The non-POSIX signature seen in ancient
  Solaris versions will no longer work. (dbus!11, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
107 108
Enhancements:

109
 D-Bus Specification 0.36:
Simon McVittie's avatar
Simon McVittie committed
110 111 112 113 114 115
  · Fix a typo in an annotated hexdump of part of a message
    (dbus!152, Zygmunt Krynicki)

 On Linux, use getrandom(2) in preference to /dev/urandom
  (dbus!147, Natanael Copa)

Simon McVittie's avatar
Simon McVittie committed
116 117 118
 Add a --sender option to dbus-send, which requests a name and holds it
  until the signal has been sent. (dbus!116, Christopher Morin)

Simon McVittie's avatar
Simon McVittie committed
119 120
Fixes:

Simon McVittie's avatar
Simon McVittie committed
121 122 123
 Fix a crash when the dbus-daemon is terminated while one or more
  monitors are active (dbus#291, dbus!140; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
124 125 126 127 128 129 130 131 132 133
 Fix several test failures if the build-time tests were run as uid 0.
  Note that running the tests with elevated privileges is likely to be
  insecure, and should only be attempted in an expendable container or
  virtual machine. (dbus!117, Simon McVittie)

 Fix an assertion failure if a client encounters an out-of-memory
  condition while sending its response to the "OK" authentication
  message, and processing of the "OK" message is subsequently retried
  when more memory is available (dbus!119, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
134 135 136 137
 Don't leak struct addrinfo if we run out of memory during a TCP
  connect()
  (dbus!143, dbus!144, Coverity CID 354880; Ralf Habacker, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
138 139 140 141 142 143 144
• On Linux with SELinux, don't assume that the system policy has the
  "dbus" security class or the associated AV
  (dbus#198, dbus!128; Laurent Bigonville)

 Handle dbus_connection_set_change_sigpipe() in a thread-safe way
  (dbus!132; Simon McVittie, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
145 146 147
 On Unix, use POSIX <poll.h> in preference to <sys/poll.h>
  (dbus!148, Natanael Copa)

Simon McVittie's avatar
Simon McVittie committed
148 149 150 151 152 153 154
 When building with CMake, cope with libX11 in a non-standard location
  (dbus!129, Tuomo Rinne)

 On Windows with verbose mode enabled and outputting to the debug port,
  use a dynamically-allocated buffer to avoid potential stack buffer
  overflows in long messages (dbus#45, dbus!133; Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
155 156 157 158 159
 The dbus-send(1) man page now documents --bus and --peer instead of
  the old --address synonym for --peer, which has been deprecated since
  the introduction of --bus and --peer in 1.7.6
  (fd.o #48816, dbus!115; Chris Morin)

Simon McVittie's avatar
Simon McVittie committed
160 161 162 163 164 165
 Fix a wrong environment variable name in dbus-daemon(1)
  (dbus#275, dbus!122; Mubin, Philip Withnall)

 Fix formatting of dbus_message_append_args example
  (dbus!126, Felipe Franciosi)

Simon McVittie's avatar
Simon McVittie committed
166 167 168
Internal changes:

 Move more test-only code from dbus/ to tests/
Simon McVittie's avatar
Simon McVittie committed
169
  (dbus!120, dbus!121, dbus!153; Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
170 171 172

 Improve diagnostics if memory or fd leaks are detected
  (dbus!118, dbus!120; Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
173

Simon McVittie's avatar
Simon McVittie committed
174 175 176
 Move from Debian 9 to Debian 10 for most continuous integration jobs
  (dbus!151, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
177 178 179
 On Windows, improve embedded version information
  (dbus!136, dbus!138, dbus!139; Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
180 181
 Indentation fixes (dbus!149, Taras Zaporozhets)

Simon McVittie's avatar
Simon McVittie committed
182
dbus 1.13.12 (2019-06-11)
183 184
=========================

Simon McVittie's avatar
Simon McVittie committed
185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208
The patio squirrel release.

Security fixes:

 CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
  authentication for identities that differ from the user running the
  DBusServer. Previously, a local attacker could manipulate symbolic
  links in their own home directory to bypass authentication and connect
  to a DBusServer with elevated privileges. The standard system and
  session dbus-daemons in their default configuration were immune to this
  attack because they did not allow DBUS_COOKIE_SHA1, but third-party
  users of DBusServer such as Upstart could be vulnerable.
  Thanks to Joe Vennix of Apple Information Security.
  (dbus#269, Simon McVittie)

Enhancements:

 dbus-daemon <allow> and <deny> rules can now specify a
  send_destination_prefix attribute, which is like a combination of
  send_destination and the arg0namespace keyword in match rules: a rule
  with send_destination_prefix="com.example.Foo" matches messages sent to
  any destination that is in the queue to own well-known names like
  com.example.Foo or com.example.Foo.A.B (but not com.example.Foobar).
  (dbus!85, Adrian Szyndela)
209

210
dbus 1.13.10 (2019-05-13)
Simon McVittie's avatar
Simon McVittie committed
211 212
=========================

213 214
The engineering brick release.

Simon McVittie's avatar
Simon McVittie committed
215 216 217 218 219
Dependencies:

 GLib >= 2.38 is required if full test coverage is enabled
  (reduced from 2.40 in dbus 1.12.x.)

220 221 222 223 224 225 226 227 228 229 230 231 232 233 234
Deprecations:

 Third-party software should install default dbus policies for the system
  bus into ${datadir}/dbus-1/system.d (this has been supported since dbus
  1.10, released in August 2015). Installing default dbus policies in
  ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy
  files in ${sysconfdir}/dbus-1/system.d continue to be read, but this
  directory should only be used by system administrators wishing to
  override the default policies.

  The ${datadir} applicable to dbus is usually /usr/share and the
  ${sysconfdir} is usually /etc.

 A similar pattern applies to the session bus policies in session.d.

Simon McVittie's avatar
Simon McVittie committed
235 236
Enhancements:

Simon McVittie's avatar
Simon McVittie committed
237 238 239 240 241 242
 D-Bus Specification 0.35:
  · Add UnixGroupIDs to GetConnectionCredentials()
    (dbus#196, dbus!105; Matthijs van Duin)
  · Remove some redundancies from the spec for interface names
    (dbus!102, Felipe Gasper)

Simon McVittie's avatar
Simon McVittie committed
243 244 245 246 247
 Raise soft fd limit to match hard limit, even if unprivileged.
  This makes session buses with many clients, or with clients that make
  heavy use of fd-passing, less likely to suffer from fd exhaustion.
  (dbus!103, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
248 249 250 251 252
 On Linux 4.13 or later when built against a suitable glibc version,
  GetConnectionCredentials() now includes UnixGroupIDs, the effective
  group IDs of the initiator of the connection, taken from
  SO_PEERGROUPS. (dbus#196, dbus!105; Matthijs van Duin)

Simon McVittie's avatar
Simon McVittie committed
253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281
 Embedded/special-purpose builds of dbus can now be configured with
  --disable-traditional-activation, to disable services being launched
  as a subprocess of the dbus-daemon. This allows the system dbus-daemon
  to be run in a more tightly restricted security profile (an example
  "drop-in" for systemd is provided).

  If systemd support is enabled, then services with a SystemdService
  configured can still be activated in these builds, via IPC to systemd.
  Otherwise, services will not be activatable at all.

  Please note that this option is not suitable for general-purpose
  Linux distributions that are intended to support running third-party
  D-Bus services.

  (dbus!107, Topi Miettinen)

 Move CMake build system to top level, matching normal practice for
  CMake projects (dbus!84, Ralf Habacker)

 Reformat CMake files (dbus#252, dbus!82, dbus!91; Ralf Habacker)

 Avoid GLib 2.40 dependencies (dbus!79, Ralf Habacker)

 Officially deprecate packaged XML policies in ${sysconfdir}, and
  document how to install system services correctly
  (dbus!76, Simon McVittie)

 Add AddressSanitizer and ubsan support (dbus!57, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
282 283
Fixes:

Simon McVittie's avatar
Simon McVittie committed
284 285 286 287 288 289 290 291 292 293 294 295 296 297
 If a privileged dbus-daemon has a hard fd limit greater than 64K, don't
  reduce it to 64K, ensuring that we can put back the original fd limits
  when carrying out traditional (non-systemd) activation. This fixes a
  regression with systemd >= 240 in which system services inherited
  dbus-daemon's hard and soft limit of 64K fds, instead of the intended
  soft limit of 1K and hard limit of 512K or 1M.
  (dbus!103, Debian#928877; Simon McVittie)

 Fix build failures caused by an AX_CODE_COVERAGE API change in newer
  autoconf-archive versions (dbus#249, dbus!88; Simon McVittie)

 Fix build failures with newer autoconf-archive versions that include
  AX_-prefixed shell variable names (dbus#249, dbus!86; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
298 299 300 301 302 303 304
 Avoid possible memory corruption in certain DBusHashTableIter use
  patterns, which in practice were never used (dbus!44, Simon McVittie)

 Avoid a test failure on Linux when built in a container as uid 0, but
  without the necessary privileges to increase resource limits
  (dbus!58, Debian #908092; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326
 Don't overwrite PKG_CONFIG_PATH and related environment variables when
  the pkg-config-based version of DBus1Config is used in a CMake project
  (dbus#267, dbus!96; Clemens Lang)

• In CMake builds, respect GNUInstallDirs variables
  (dbus!77, Ralf Habacker)

• In CMake builds, don't rebuild documentation every time
  (dbus!94, Ralf Habacker)

 In CMake builds for Windows, don't require libiconv
  (dbus#262, dbus!100; Ralf Habacker)

• Fix intermittent build failures with parallel CMake
  (dbus#266, dbus!113; Simon McVittie)

• Don't assume we can set permissions on a directory, for the benefit of
  MSYS and Cygwin builds (dbus#216, dbus!110; Simon McVittie)

 Avoid test failures with non-trivial NSS modules
  (dbus#256, dbus!93; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
327 328 329
 Fix test failures in test-syslog and test-sysdeps under Windows
  (dbus#238, dbus#243, dbus!61, dbus!62; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347
 Ensure that CTest build-time tests on Windows use the just-built
  libdbus-1-3.dll (dbus!83, Ralf Habacker)

 Don't take so long to run test-refs on Windows
  (dbus#244, dbus!65; Ralf Habacker)

• Fix memory leaks in tests (dbus!68, Simon McVittie)

• Avoid casting user-supplied pointers to DBusBasicValue *, which is
  formally undefined behaviour (dbus!69, Simon McVittie)

• Fix a non-exploitable stack array overrun in dbus-run-session on Windows
  (Ralf Habacker)

Tests and CI enhancements:

• Verify that the result of an Autotools `make dist` can be used for a
  successful CMake build (dbus#255, dbus!87; Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
348 349 350 351

• Rewrite Python tests into C to reduce circular dependencies and
  facilitate use of AddressSanitizer (dbus!37, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
352 353 354 355 356
• Refactor tests to extract most of their code from the bus/ and dbus/
  directories, and break them up into smaller modules
  (dbus#223, dbus#240, dbus!1, dbus!99, dbus!73, dbus!74, dbus!75;
  Simon McVittie, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
357
• Do CI builds in a more minimal environment (dbus!63, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
358

Simon McVittie's avatar
Simon McVittie committed
359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378
• Improve test coverage with CMake (dbus#135, dbus!23; Ralf Habacker)

• Avoid firewall exception requests when running build-time tests on
  Windows (dbus!64, Ralf Habacker)

• Allow use of Wine to run cross-compiled Windows tests on Linux
  (dbus!60, Ralf Habacker)

Internal changes:

• Rename DBusSocketSet to the more accurate DBusPollableSet
  (dbus!81, Ralf Habacker)

• Refactor Windows implementation of dbus-spawn
  (dbus!80; Ralf Habacker, Simon McVittie)

• Delete unused code from userdb module (dbus!92, Simon McVittie)

• Remove unnecessary _dbus_threads_init_debug() (dbus!72, Simon McVittie)

Simon McVittie's avatar
1.13.8  
Simon McVittie committed
379
dbus 1.13.8 (2018-12-04)
Simon McVittie's avatar
1.13.7  
Simon McVittie committed
380 381
========================

Simon McVittie's avatar
1.13.8  
Simon McVittie committed
382 383
The “demanding dragon” release.

Simon McVittie's avatar
Simon McVittie committed
384 385 386 387 388 389
dbus version control is now hosted on freedesktop.org's Gitlab
installation, and bug reports and feature requests have switched from
Bugzilla bugs (indicated by "fd.o #nnn") to Gitlab issues ("dbus#nnn")
and merge requests ("dbus!nnn"). See README and CONTRIBUTING.md for
more details.

Simon McVittie's avatar
Simon McVittie committed
390 391 392 393 394 395 396
Dependencies:

 dbus now requires at least a basic level of support for C99 variadic
  macros, as implemented in gcc >= 3, all versions of Clang, and
  MSVC >= 2005. In practice this requirement has existed since version
  1.9.2, but it is now official.

397 398 399 400
 dbus now requires a C99-compatible va_copy() macro (or a __va_copy()
  macro with the same behaviour), except when building for Windows using
  MSVC and CMake.

401 402 403 404 405
 Building documentation using CMake now requires xsltproc, Docbook DTDs
  (for example docbook-xml on Debian derivatives), and Docbook XSLT
  stylesheets (for example docbook-xsl on Debian derivatives). Using
  KDE's meinproc4 documentation processor is no longer supported.

Simon McVittie's avatar
Simon McVittie committed
406 407
Enhancements:

Simon McVittie's avatar
Simon McVittie committed
408 409 410
• Rewrite CONTRIBUTING.md to reflect the current setup
  (dbus!8, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
411 412 413 414
• D-Bus Specification v0.34:
  · Fix an incorrect AddMatch() call in sample code
    (dbus#221, dbus!56; Philip Withnall)

Simon McVittie's avatar
Simon McVittie committed
415 416 417 418 419 420
• Tarball releases no longer contain pre-2007 changelogs and are now
  compressed with xz, so they should be somewhat smaller
  (fd.o #107630; Francesco Turco, Simon McVittie)

• Reference the freedesktop.org Code of Conduct (Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
421 422 423 424 425 426 427 428 429 430 431 432 433 434
• Build an implementation of dbus-run-session for Windows
  (dbus#135, dbus!22; Ralf Habacker)

• On Linux with SELinux, use avc_open() and monitor the AVC netlink fd
  in the main event loop, instead of using the deprecated avc_init()
  and a thread (dbus#134, dbus!31; Laurent Bigonville)

• On Linux with SELinux, use the SELINUX_CB_POLICYRELOAD callback
  to detect policy reloads, instead of monitoring the access vector
  cache with AVC_CALLBACK_RESET
  (dbus#134, dbus!31; Laurent Bigonville)

• Avoid double slashes in pkg-config paths (dbus!30, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
435
• Improve test coverage and clean up dead code
Simon McVittie's avatar
Simon McVittie committed
436
  (fd.o #107739, dbus#222; Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
437

Simon McVittie's avatar
Simon McVittie committed
438 439 440
• Allow --enable-relocation in combination with absolute paths for
  --exec-prefix, --libdir (fd.o #107662, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
441 442 443 444 445
• Don't run a test program to check how to copy a va_list, which is
  awkward for cross-compiling; instead require that va_copy() or
  __va_copy() exists, except in older MSVC versions where we already
  know that simple assignment is enough (dbus!35, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
446 447 448 449 450
 Simplify configure checks (dbus!10, Simon McVittie)

 Improve CMake build system parity with Autotools, including:
  · Detect inotify, prctl() and getpwnam_r() correctly on Linux
  · Use xsltproc instead of meinproc4 for documentation
Simon McVittie's avatar
Simon McVittie committed
451
  (dbus#57, dbus#117, dbus#193, dbus#227, dbus!18, dbus!39;
452
  Ralf Habacker, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
453

Simon McVittie's avatar
Simon McVittie committed
454 455
Fixes:

Simon McVittie's avatar
Simon McVittie committed
456 457 458 459 460 461 462 463 464
 Stop the dbus-daemon leaking memory (an error message) if delivering
  the message that triggered auto-activation is forbidden. This is
  technically a denial of service because the dbus-daemon will
  run out of memory eventually, but it's a very slow and noisy one,
  because all the rejected messages are also very likely to have
  been logged to the system log, and its scope is typically limited by
  the finite number of activatable services available.
  (dbus#234, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
465 466 467 468
• Remove __attribute__((__malloc__)) attribute on dbus_realloc(),
  which does not meet the criteria for that attribute in gcc 4.7+,
  potentially leading to miscompilation (fd.o #107741, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
469 470 471 472 473 474
• Parse section/group names in .service files according to the syntax
  from the Desktop Entry Specification:
  · reject control characters and non-ASCII in section/group names
  · backslash escapes are not interpreted in section/group names
  (dbus#208; David King, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
475 476 477 478
• Always use select()-based poll() emulation on Darwin-based OSs
  (macOS, etc.) and on Interix, similar to what libcurl does
  (dbus#232, dbus!19; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
479 480 481
• Avoid undefined integer shifts when generating random tokens for
  the DBUS_COOKIE_SHA1 mechanism (dbus!45, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
482 483 484 485 486 487 488
• Document the max-connections-per-user limit as unimplemented on
  Windows, and don't fail tests when it isn't enforced there
  (dbus!54, Simon McVittie)

• Avoid unnecessary file descriptors being inherited by dbus-daemon and
  dbus-launch subprocesses (dbus!50, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
489 490
• Fix some minor memory leaks
  (fd.o #107320, dbus!41, dbus!42; Simon McVittie)
Simon McVittie's avatar
1.13.7  
Simon McVittie committed
491

Simon McVittie's avatar
Simon McVittie committed
492 493 494 495
• Don't fail tests if GetConnectionUnixProcessID() succeeds on Windows,
  which it normally will since 1.7.x
  (dbus#239, dbus!55; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
496 497 498
 Extend a test timeout to avoid spurious failures in CI
  (dbus!26, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
499 500 501
 Avoid undefined signed integer operations when generating random
  message content during regression tests (dbus!46, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
502 503 504 505
 Fix build warnings with recent gcc (dbus#208, dbus#225; David King)

 Fix build warnings without libX11 (dbus#228, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
506 507 508
 Fix whitespace and error behaviour for _dbus_command_from_pid()
  (dbus#222, dbus!28; Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
509 510 511
 Fix a race condition in the containers test
  (dbus!47, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
512 513 514 515 516 517 518
 When built with CMake, install dbus-daemon-launch-helper to
  ${CMAKE_INSTALL_LIBEXECDIR}, analogous to ${libexecdir} in
  Autotools (dbus!9, Simon McVittie)

 When built with CMake and disabling tests, still install
  dbus-daemon-launch-helper (dbus!9, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
519 520 521 522 523 524 525
Tests and CI:

 Add Travis-CI builds for 64-bit Windows using mingw-w64
  (fd.o #105662, Ralf Habacker)

 Add Gitlab-CI integration (fd.o #108177, Simon McVittie)

Simon McVittie's avatar
1.13.6  
Simon McVittie committed
526
dbus 1.13.6 (2018-08-02)
Simon McVittie's avatar
Simon McVittie committed
527 528
========================

Simon McVittie's avatar
1.13.6  
Simon McVittie committed
529 530
The vine cutting release.

Simon McVittie's avatar
Simon McVittie committed
531 532
Fixes:

Simon McVittie's avatar
Simon McVittie committed
533 534 535 536 537 538
 Prevent reading up to 3 bytes beyond the end of a truncated message.
  This could in principle be an information leak or denial of service
  on the system bus, but is not believed to be exploitable to crash
  the system bus or leak interesting information in practice.
  (fd.o #107332, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
539 540 541 542 543 544
 Fix build with gcc 8 -Werror=cast-function-type
  (fd.o #107349, Simon McVittie)

 Fix warning from gcc 8 about suspicious use of strncpy() when
  populating struct sockaddr_un (fd.o #107350, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
545 546 547 548 549 550 551 552 553
 Fix a minor memory leak when a DBusServer listens on a new address
  (fd.o #107194, Simon McVittie)

 Fix an invalid NULL argument to rmdir() if a nonce-tcp DBusServer
  runs out of memory (fd.o #107194, Simon McVittie)

 Fix various memory leaks during unit tests
  (fd.o #107194, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
554 555 556 557 558 559
 Don't use misleading errno-derived error names if getaddrinfo() or
  getnameinfo() fails with a code other than EAI_SYSTEM
  (fd.o #106395, Simon McVittie)

• Skip tests that require working TCP if we are in a container environment
  where 127.0.0.1 cannot be resolved (fd.o #106812, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
560

Simon McVittie's avatar
1.13.4  
Simon McVittie committed
561
dbus 1.13.4 (2018-04-30)
Simon McVittie's avatar
Simon McVittie committed
562 563
========================

Simon McVittie's avatar
Simon McVittie committed
564 565
The “parsimonious topping” release.

566 567 568 569 570 571
Dependencies:

• All Windows builds now require Windows Vista or later.
  (Note that we do not recommend or support use of dbus on operating
  systems outside their vendor's security support lifetime, such as Vista.)

572 573
Enhancements:

Simon McVittie's avatar
1.13.4  
Simon McVittie committed
574
 D-Bus Specification v0.33
Simon McVittie's avatar
Simon McVittie committed
575 576 577 578 579
  · Be clearer about the security properties of TCP transports, which
    have no integrity or confidentiality protection and so should not
    normally be used, except via the loopback interface on Windows
    (fd.o #106004, Simon McVittie)

580 581 582 583 584 585 586 587 588 589 590
 On Linux 4.13 or later, <policy group="…"> now uses the SO_PEERGROUPS
  credentials-passing socket option to get the effective group IDs
  of the initiator of the connection. On platforms where that socket
  option is not available, dbus-daemon continues to look up the
  connection's user ID in the system user and group databases and
  assume that it has the groups that would have been granted by
  initgroups(). (fd.o #103737, #97821; Simon McVittie)

• If the dbus-daemon is compiled for Linux with systemd support, it
  now informs systemd that it is ready for use via the sd_notify()
  mechanism. (fd.o #104641; Michal Sekletar, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
591

Simon McVittie's avatar
1.13.4  
Simon McVittie committed
592 593 594
• Several environment variables set by systemd are no longer passed
  on to activated services (fd.o #104641, Simon McVittie)

595 596 597 598 599 600 601 602 603 604 605 606
• Failing to bind a TCP socket to an address produces better error
  messages. (fd.o #61922; Simon McVittie, Ralf Habacker)

• Windows builds now set the SO_REUSEADDR and TCP_NODELAY options on
  TCP sockets (as Unix builds already did), which should improve
  robustness and performance (fd.o #61922, Ralf Habacker)

• Windows executables built with cmake have version information.
  When building for Windows with Autotools, only libdbus-1-3.dll
  has version information, matching previous behaviour with cmake.
  (fd.o #103387, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
607 608 609
• The Devhelp documentation index is now in version 2 format
  (fd.o #106186, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
610
• Give the dbus-daemon man page some scarier warnings about
611 612
  <allow_anonymous/> and non-local TCP, which are insecure and should
  not be used, particularly for the standard system and session buses
Simon McVittie's avatar
Simon McVittie committed
613 614
  (fd.o #106004, Simon McVittie)

615 616 617 618 619
Fixes:

• Listening on TCP sockets copes better with IPv6 being disabled
  (fd.o #61922; Ralf Habacker, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
620 621 622
• Fix installation of Ducktype documentation with newer yelp-build
  versions (fd.o #106171, Simon McVittie)

623 624 625
• Fix printf formats for pointer-sized integers on 64-bit Windows
  (fd.o #105662, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
626 627 628 629 630 631 632 633 634
Internal changes:

• The _DBUS_GNUC_WARN_UNUSED_RESULT macro has been replaced with
  _DBUS_WARN_UNUSED_RESULT, which is effective with gcc, clang and MSVC
  (with cl.exe /analyze). Note that for MSVC compatibility, it must
  appear before the return type in function declarations, whereas the
  older macro could also have appeared after the arguments.
  (fd.o #105460; Daniel Wendt, Ralf Habacker)

Simon McVittie's avatar
1.13.2  
Simon McVittie committed
635
dbus 1.13.2 (2018-03-01)
Simon McVittie's avatar
Simon McVittie committed
636 637
========================

Simon McVittie's avatar
1.13.2  
Simon McVittie committed
638 639
The “can break a man's arm release.

Simon McVittie's avatar
Simon McVittie committed
640 641 642 643 644 645
Enhancements:

 When a container manager creates an extra server at runtime, services
  can now request that messages from connections to that server are
  tagged with the container instance ID, providing a fast-path for
  identifying such connections. (fd.o #101899, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
646

Simon McVittie's avatar
Simon McVittie committed
647 648 649
Fixes:

 Increase system dbus-daemon's RLIMIT_NOFILE rlimit before it drops
650 651 652
  privileges, because it won't have permission afterwards. This fixes a
  regression in dbus 1.10.18 and 1.11.0 which made the standard system bus
  more susceptible to deliberate or accidental denial of service.
Simon McVittie's avatar
Simon McVittie committed
653 654
  (fd.o #105165, David King)

Simon McVittie's avatar
1.13.0  
Simon McVittie committed
655
dbus 1.13.0 (2018-02-08)
656 657
========================

Simon McVittie's avatar
1.13.0  
Simon McVittie committed
658 659
The Citispeed Eco 75 release.

660 661 662 663 664
This is a new development branch for the adventurous, and comes with a
risk of regressions. OS distributions should stay with the 1.12.x branch,
unless they can commit to following the 1.13.x branch until it reaches
a 1.14.0 stable release at an unspecified point in the future.

Simon McVittie's avatar
1.13.0  
Simon McVittie committed
665 666 667 668
In particular, the new Containers API is subject to change and shouldn't
be enabled in distributions yet, even those aimed at early adopters
(hello, Arch Linux).

Simon McVittie's avatar
Simon McVittie committed
669 670 671 672 673 674 675 676 677 678 679
Behaviour changes:

• DBusServer (and hence the dbus-daemon) no longer accepts usernames
  (login names) for the recommended EXTERNAL authentication mechanism,
  only numeric user IDs or the empty string. This is not believed to
  affect real D-Bus clients in practice, because most D-Bus clients
  send numeric user IDs: the only known client implementation that
  sends usernames is dbus-java, and that only when run on a system
  where the com.sun.security.auth.module.UnixSystem.getUid() method is
  not available. (fd.o #104588, Simon McVittie)

680 681
Enhancements:

Simon McVittie's avatar
Simon McVittie committed
682 683 684 685 686
• D-Bus Specification v0.32
  · Deprecate hyphen/minus in reversed domain names, recommending
    underscores instead. Recommend prepending an underscore to domain
    components that start with a digit, which would not be allowed.
    (fd.o #103914, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
687 688
  · Clarify how the SASL authentication handshake works
    (fd.o #104224, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
689 690 691 692
  · Recommend that the message bus should remove message header fields
    that it does not understand. The new item "HeaderFiltering" in the
    message bus' Features property indicates that it promises to do so.
    (fd.o #100317, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
693

Simon McVittie's avatar
Simon McVittie committed
694 695 696 697 698
 Add experimental support for creating extra servers at runtime, to
  be used by app containers like Flatpak or Snap. This API is still
  subject to change and is not compiled in by default.
  (fd.o #101354, Simon McVittie)

699 700
 Improve automated test logging (fd.o #103601, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
701 702 703 704 705 706
 The dbus-daemon now filters the messages that it relays, removing
  header fields that it does not understand. Clients must not rely on
  this behaviour unless they have confirmed that they are connected to
  a suitable message bus implementation, for example by querying its
  Features property. (fd.o #100317, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
707 708
Fixes:

Simon McVittie's avatar
Simon McVittie committed
709 710 711 712 713 714 715
 When iterating the DBusConnection while blocking on a pending call,
  don't wait for I/O if that pending call already has a result; and make
  sure that whether it has a result is propagated in a thread-safe way.
  This prevents certain multi-threaded calling patterns from blocking
  until their timeout even when they should have succeeded sooner.
  (fd.o #102839; Manish Narang, Michael Searle)

Simon McVittie's avatar
Simon McVittie committed
716 717 718 719 720
• Do not look up client-supplied strings in the system user database
  (NSS or equivalent) when using the recommended EXTERNAL auth mechanism.
  This could previously lead to a deadlock or timeout in the presence of
  slow or network-dependent NSS modules. (fd.o #104588, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
721 722 723 724 725 726 727 728 729 730 731 732 733
• Report the correct error if OOM is reached while trying to listen
  on a TCP socket (fd.o #89104, Simon McVittie)

• Fix a crash and an assertion failure in the server side of the
  nonce-tcp: transport under error conditions
  (fd.o #89104, Simon McVittie)

• Fix assertion failures in recovery from OOM while setting up a
  DBusServer (fd.o #89104, Simon McVittie)

• Don't leak a file descriptor if setting up a launchd server fails
  (fd.o #89104, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
734 735
 Add a missing space to a warning message (fd.o #103729, Thomas Zajic)

Simon McVittie's avatar
Simon McVittie committed
736 737 738
 Fix some memory leaks in automated tests
  (fd.o #103600, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
739 740 741
 Expand ${bindir} correctly when pkg-config is asked for dbus_daemondir
  (fd.o #104265, Benedikt Heine)

742 743
 On Linux systems with systemd < 237, if ${localstatedir}/dbus doesn't
  exist, create it before trying to create ${localstatedir}/dbus/machine-id
Simon McVittie's avatar
Simon McVittie committed
744 745
  (fd.o #104577, Chris Lesiak)

Simon McVittie's avatar
Simon McVittie committed
746 747
• Fix escaping in dbus-api-design document (fd.o #104925, Philip Withnall)

Simon McVittie's avatar
Simon McVittie committed
748 749 750 751 752 753 754
Internal changes:

• Harden the nonce-tcp: transport against resource leaks and
  use-after-free (fd.o #103597, Simon McVittie)

• Make _DBUS_STRING_DEFINE_STATIC more consistent with
  _dbus_string_init_const() (fd.o #89104, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
755

Simon McVittie's avatar
Simon McVittie committed
756 757 758 759 760 761 762 763
• Add _DBUS_STRING_INIT_INVALID, analogous to NULL, and use it to
  simplify error unwinding code paths (fd.o #89104, Simon McVittie)

• Make the behaviour of _dbus_string_init_const()/_dbus_string_free()
  consistent with _dbus_string_init()/_dbus_string_free(): it now clears
  the string to _DBUS_STRING_INIT_INVALID, whereas previously it left
  the string untouched (fd.o #89104, Simon McVittie)

764 765 766
• Remove automated test data for wire protocol version 0, which has not
  been supported since 2005 (fd.o #103758, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
767 768 769
• Simplify method calls in automated tests
  (fd.o #103600, Simon McVittie)

Simon McVittie's avatar
1.12.2  
Simon McVittie committed
770
dbus 1.12.2 (2017-11-13)
771 772
========================

Simon McVittie's avatar
1.12.2  
Simon McVittie committed
773
The “spider pumpkin” release.
774

Simon McVittie's avatar
Simon McVittie committed
775 776 777 778 779 780
Enhancements:

• Log a warning if a new connection cannot be accepted due to an
  out-of-memory condition or failure to identify its AppArmor or
  SELinux context (fd.o #103592, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
781 782 783 784 785
Fixes:

• Make use of $(MKDIR_P) compatible with install-sh, fixing build when a
  GNU-compatible `mkdir -p` is not available (fd.o #103521, ilovezfs)

Simon McVittie's avatar
Simon McVittie committed
786 787 788 789
• When building for Windows with Autotools, avoid `echo -e`, fixing
  cross-compilation on non-GNU platforms like macOS
  (fd.o #103493, Tony Theodore)

Simon McVittie's avatar
Simon McVittie committed
790 791 792 793 794 795
• Fix crashes in the server side of the nonce-tcp: transport under
  various error conditions. This transport should normally only be used
  on Windows, where AF_UNIX sockets are unavailable; the unix: transport
  is the only one recommended for production use on Unix platforms.
  (fd.o #103597, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
796 797
Internal changes:

Simon McVittie's avatar
Simon McVittie committed
798 799
• Improve test coverage on Travis-CI (Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
800
dbus 1.12.0 (2017-10-30)
801 802
========================

Simon McVittie's avatar
Simon McVittie committed
803 804 805 806
The “gingerbread skull” release.

1.12.x is a new stable branch, recommended for use in OS
distributions.
807 808 809 810 811 812

Summary of major changes between 1.10.x and 1.12.0
--------------------------------------------------

Dependencies:

Simon McVittie's avatar
Simon McVittie committed
813
• Expat >= 2.1.0 is required.
814 815 816 817 818 819 820
• GLib >= 2.40 is required if full test coverage is enabled.
• [Linux] libselinux >= 2.0.86 is required if SELinux support is
  enabled.
• [Unix] dbus now requires an <inttypes.h> that defines C99 constants
  such as PRId64 and PRIu64, except when building for Windows.
• [Autotools] Building from git (but not from tarballs) with Autotools
  now requires macros from the GNU Autoconf Archive.
Simon McVittie's avatar
Simon McVittie committed
821
• [CMake] Builds done using CMake now require CMake 3.0.2.
822 823 824 825 826 827 828 829 830 831 832 833 834 835

Build-time configuration changes:

• Expat is now found using pkg-config. See the release notes for
  1.11.14.
• The --disable-compiler-optimisations and --enable-compiler-coverage
  options no longer exist.  See the release notes for 1.11.4 and 1.11.8.
• [Unix] The --enable-abstract-sockets and --disable-abstract-sockets
  options no longer exist. See the release notes for 1.11.20.
• [Unix] Flag files in /var/run/console/${username} are no longer
  checked for at_console by default. See the release notes for 1.11.18.
• [Unix, Cygwin] Init scripts are no longer provided by upstream dbus,
  and packagers will now need to add these downstream (most already do).
  See the release notes for 1.11.18.
Simon McVittie's avatar
Simon McVittie committed
836 837 838 839
• [Unix] The process ID file no longer has a different default location
  on Red Hat derivatives. See the release notes for 1.11.18.
• [Unix] ${runstatedir} is now independent of ${localstatedir} with
  recent Autotools versions. See the release notes for 1.11.16.
840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880
• [Windows] The WINDRES variable is no longer used. See the release
  notes for 1.11.22.

Deprecations:

• Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
• [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.

New APIs:

• <allow> and <deny> rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
• dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
• New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
• The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
• DTDs for introspection XML and bus configuration are installed.
• dbus can be compiled to be relocatable, making it more suitable for
  binary bundling with other software. On Windows, this is on by
  default.
• [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
• [Unix] New option "dbus-launch --exit-with-x11".
• [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
• [Unix] A sysusers.d snippet can create the messagebus user on-demand.

Miscellaneous behaviour changes:

• [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
• [Unix] Internal warnings are logged to syslog if configured.
Simon McVittie's avatar
Simon McVittie committed
881 882
• [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
883

Simon McVittie's avatar
Simon McVittie committed
884 885 886 887
Changes since 1.11.22 release candidate
---------------------------------------

Standard stable-branch changes:
888

Simon McVittie's avatar
Simon McVittie committed
889
• Disable warnings about use of deprecated functions (Simon McVittie)
890

Simon McVittie's avatar
Simon McVittie committed
891 892 893 894 895 896 897 898 899
Fixes:

• Don't distribute files generated by ./configure in the source tarball
  (fd.o #103420, Simon McVittie)

Internal changes:

 Remove some unused files from the git repository
  (fd.o #103420, Simon McVittie)
900

Simon McVittie's avatar
Simon McVittie committed
901
D-Bus 1.11.22 (2017-10-23)
902
==========================
903

Simon McVittie's avatar
Simon McVittie committed
904 905 906 907
The fire surface release.

This is the first release-candidate for the 1.12.0 stable release.

Simon McVittie's avatar
Simon McVittie committed
908 909 910 911 912 913 914 915 916 917 918
Build-time configuration changes:

 When building for Windows with Autotools, setting the WINDRES variable
  no longer works to select a non-standard resource compiler. Use
  libtool's standard RC variable instead, for example
  "./configure RC=i686-w64-mingw32-windres"

Dependencies:

• Builds done using CMake now require CMake 3.0.2.

919 920 921 922 923
Enhancements:

• When building for Windows, improve quality of metadata in
  libdbus-1-3.dll (fd.o #103015, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
924 925 926 927 928 929 930 931 932
Fixes:

• Fix a typo "uint 16" in dbus-send(1) man page
  (fd.o #103075, David King)

• When building for Windows, libdbus-1-3.dll always includes version
  information. Previously, this was missing if using CMake and any
  non-MSVC compiler. (fd.o #103015, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
933 934 935
• Fix the build with MSVC, which regressed with the #102558 fix in
  1.11.20. (fd.o #102558, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
936 937 938 939
Internal changes:

• Simplify Windows resource embedding
  (fd.o #103015, Simon McVittie)
940

Simon McVittie's avatar
Simon McVittie committed
941
D-Bus 1.11.20 (2017-10-03)
Simon McVittie's avatar
Simon McVittie committed
942 943
==

944 945
The “wraith stun” release.

Simon McVittie's avatar
Simon McVittie committed
946 947 948
Build-time configuration changes:

• The --enable-abstract-sockets and --disable-abstract-sockets options
Simon McVittie's avatar
Simon McVittie committed
949 950 951
  no longer exist. Support for Linux's abstract AF_UNIX sockets is now
  unconditionally enabled on Linux and disabled everywhere else.
  (fd.o #34905, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973

Enhancements:

 Make slower tests less likely to time out, and improve diagnostics if
  tests do time out (fd.o #103009, Simon McVittie)

 On Windows, don't compile an unused stub implementation of
  _dbus_set_signal_handler() (fd.o #103010, Simon McVittie)

Fixes:

• Be more careful to save and restore errno in POSIX async signal
  handlers (fd.o #103010, Simon McVittie)

• On Windows, embed a manifest in dbus-update-activation-environment.exe
  so that the heuristics used for UAC do not assume it needs elevated
  privileges due to its name containing "update"
  (fd.o #102558, Ralf Habacker)

• On Windows with Automake, embed version information in libdbus-1,
  as was meant to happen in all versions since 2009
  (fd.o #103015, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
974

Simon McVittie's avatar
Simon McVittie committed
975
D-Bus 1.11.18 (2017-09-25)
Simon McVittie's avatar
Simon McVittie committed
976 977
==

Simon McVittie's avatar
Simon McVittie committed
978 979
The “vampire conquistador” release.

980 981 982 983 984 985 986 987 988 989 990 991 992
Build-time configuration changes:

• By default, dbus-daemon on Unix no longer checks for flag files
  /var/run/console/${username} created by the obsolete pam_console and
  pam_foreground PAM modules when deciding whether ${username} is
  currently at the console. The old default behaviour can be restored
  by specifying --with-console-auth-dir=/var/run/console in the
  recommended Autotools build system, or
  -DDBUS_CONSOLE_AUTH_DIR=/var/run/console in CMake. This feature is
  now deprecated, and will be removed in dbus 1.13 unless feedback via
  fd.o #101629 indicates that this would be problematic.
  (fd.o #101629, Simon McVittie)

993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017
• LSB-style init scripts for Red Hat and Slackware, and a non-LSB init
  script for Cygwin, are no longer provided in the upstream dbus
  source. We recommend that distributors who support non-systemd service
  management should maintain their own init scripts or other service
  manager integration as part of their downstream packaging, similar to
  the way Debian distributes a Debian-specific LSB init script for dbus.

  The systemd unit continues to be maintained as part of the upstream
  dbus source, because it receives regular testing and maintenance.

  (fd.o #101706, Simon McVittie)

• The process ID file created by the system bus is no longer influenced
  by the --with-init-scripts=redhat configure option or the presence of
  /etc/redhat-release at build time. If your OS's init script or other
  service management relies on the Red Hat-style pid file, it can be
  restored by specifying --with-system-pid-file=/run/messagebus.pid at
  configure time or using the <pidfile> directive in bus configuration.

  Note that the upstream-supplied systemd unit runs dbus-daemon with
  the --nopidfile option, so it does not normally write a pid file,
  regardless of whether the OS is Red-Hat-derived or not.

  (fd.o #101706, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1018 1019 1020 1021 1022 1023 1024 1025
Enhancements:

 <allow> and <deny> rules in dbus-daemon configuration can now
  include send_broadcast="true" or send_broadcast="false", which make
  the rule only match broadcast signals, or only match messages that
  are not broadcast signals, respectively.
  (fd.o #29853, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036
 <allow> and <deny> rules can now be configured to apply only to
  messages with or without Unix file descriptors attached. This would
  typically be used in rules like these:
  <allow send_destination="..." max_unix_fds="0"/>
  <deny send_destination="..." min_unix_fds="1"/>
  <deny receive_sender="..." min_unix_fds="1"/>
  but can also be used to set a nonzero upper limit on the number of
  file descriptors:
  <allow send_destination="..." max_unix_fds="4"/>
  (fd.o #101848, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1037 1038 1039 1040 1041 1042 1043 1044
 On Unix platforms, the DBUS_COOKIE_SHA1 authentication mechanism
  now respects the HOME environment variable on the client side, and
  on the server side when the uid attempting to connect is the same
  as the uid of the server. This allows the automated tests to pass in
  environments where the user's "official" home directory in /etc/passwd
  is nonexistent, such as Debian autobuilders.
  (fd.o #101960, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1045 1046 1047 1048 1049 1050 1051 1052 1053 1054
Fixes:

• When parsing dbus-daemon configuration, tell Expat not to use
  cryptographic-quality entropy as a salt for its hash tables: we trust
  the configuration files, so we are not concerned about algorithmic
  complexity attacks via hash table collisions. This prevents
  dbus-daemon --system from holding up the boot process (and causing
  early-boot system services like systemd, logind, networkd to time
  out) on entropy-starved embedded systems.
  (fd.o #101858, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1055

Simon McVittie's avatar
Simon McVittie committed
1056 1057 1058
• Avoid a -Werror=declaration-after-statement build failure on Solaris
  (fd.o #102145, Alan Coopersmith)

Simon McVittie's avatar
Simon McVittie committed
1059 1060 1061 1062
• On Unix platform, drop DBUS_SYSTEM_LOG_INFO messages from LOG_NOTICE
  to LOG_INFO, matching how we use this log level in practice
  (fd.o #102686, Simon McVittie)

Simon McVittie's avatar
1.11.16  
Simon McVittie committed
1063
D-Bus 1.11.16 (2017-07-27)
Simon McVittie's avatar
Simon McVittie committed
1064 1065
==

Simon McVittie's avatar
1.11.16  
Simon McVittie committed
1066 1067
The “south facing garden” release.

Simon McVittie's avatar
Simon McVittie committed
1068 1069 1070 1071 1072 1073 1074 1075
Build-time configuration changes:

• The Autotools build system now supports varying ${runstatedir}
  independently of ${localstatedir}, if using an Autoconf version
  that has that feature; version 2.70 will eventually have this, but
  many Linux distributions add it to version 2.69 as a patch.
  A typical use is to set prefix=/usr, sysconfdir=/etc, localstatedir=/var
  and runstatedir=/run. (fd.o #101569, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1076

1077 1078 1079 1080 1081 1082 1083 1084 1085 1086
Enhancements:

• New APIs DBUS_MESSAGE_ITER_INIT_CLOSED, dbus_message_iter_init_closed()
  and dbus_message_iter_abandon_container_if_open() simplify the
  single-exit-point ("goto out") style of resource cleanup. The API
  documentation around DBusMessageIter and containers has also been
  clarified. (fd.o #101568, Simon McVittie)

Fixes:

Simon McVittie's avatar
NEWS  
Simon McVittie committed
1087 1088 1089 1090
• Fix the implementation of re-enabling a timeout (again) so that its
  countdown is always restarted as intended. (fd.o #95619,
  Michal Koutný)

Simon McVittie's avatar
Simon McVittie committed
1091 1092 1093
• Make the dbus-daemon's Properties interface, as introduced in 1.11.14,
  available to all users on the system bus (fd.o #101700, Simon McVittie)

1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108
 dbus_message_iter_append_basic() no longer leaks memory if it fails to
  append a file descriptor to a message. (fd.o #101568, Simon McVittie)

 dbus_message_iter_open_container() no longer leaks memory if it runs out
  of memory. (fd.o #101568, Simon McVittie)

 dbus_message_append_args_valist() no longer leaks memory if given an
  unsupported type. This situation is still considered to be a programming
  error which needs to be corrected by the user of libdbus.
  (fd.o #101568, Simon McVittie)

 dbus_message_iter_append_basic() and dbus_message_iter_open_container()
  will no longer report that their arguments were invalid if they run out
  of memory at exactly the wrong time. (fd.o #101568, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1109 1110 1111
 Ensure that tests fail if they would otherwise have tried to connect to
  the real session bus (fd.o #101698, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1112 1113 1114
 Make build-time tests cope with finding Python 3, but not Python 2
  (fd.o #101716, Simon McVittie)

1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126
Internal changes relevant to dbus developers:

 DBusVariant is a new mechanism to copy single values from a message into
  a buffer without copying the entire message (fd.o #101568, Simon McVittie)

 DBUS_SYSTEM_LOG_FATAL has been replaced by DBUS_SYSTEM_LOG_ERROR.
  Logging an ERROR message does not make the process exit; the caller
  is responsible for calling abort() or exit(), whichever is more appropriate.
  (fd.o #101568, Simon McVittie)

 Better test coverage (fd.o #101568, Simon McVittie)

Simon McVittie's avatar
1.11.14  
Simon McVittie committed
1127
D-Bus 1.11.14 (2017-06-29)
Simon McVittie's avatar
Simon McVittie committed
1128 1129
==

Simon McVittie's avatar
1.11.14  
Simon McVittie committed
1130 1131
The irrational fear of bees release.

Simon McVittie's avatar
Simon McVittie committed
1132 1133
Dependencies:

Simon McVittie's avatar
Simon McVittie committed
1134 1135 1136
 Expat >= 2.1.0 is always required
 libselinux >= 2.0.86 is required if SELinux support is enabled
 GLib >= 2.40 is required if full test coverage is enabled
Simon McVittie's avatar
Simon McVittie committed
1137

Simon McVittie's avatar
Simon McVittie committed
1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151
Build-time configuration changes:

 We now use pkg-config to find libexpat in Autotools builds. This requires
  Expat 2.1.0 (March 2012) or later. In particular, this should remove the
  need to configure with LDFLAGS=-L/usr/local/lib on OpenBSD, which can
  itself cause compilation failures.

  As with all pkg-config-based configure checks, you can use
  PKG_CONFIG_PATH=/whatever/lib/pkgconfig to find expat.pc in a
  non-standard prefix, or EXPAT_CFLAGS="-I/whatever/include" and
  EXPAT_LIBS="-L/whatever/lib -lexpat" to avoid needing a .pc file
  at all.

  (fd.o #69801, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1152

Simon McVittie's avatar
Simon McVittie committed
1153 1154 1155
 Similarly, we now use pkg-config to find libselinux. Version 2.0.86
  is required due to the removal of explicit refcounting for SIDs.
  (fd.o #100912, Laurent Bigonville)
Simon McVittie's avatar
Simon McVittie committed
1156

Simon McVittie's avatar
NEWS  
Simon McVittie committed
1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171
Behaviour changes:

 Previously, /etc/machine-id could be copied to /var/lib/dbus/machine-id
  as a side-effect of a sufficiently privileged process merely reading the
  machine ID. It is no longer copied as a side-effect of reading.
  Running dbus-uuidgen --ensure, which should be done after installing dbus,
  continues to copy /etc/machine-id to /var/lib/dbus/machine-id if the
  former exists and the latter does not.
  (fd.o #101257, Simon McVittie)

 The undocumented Verbose interface, and the GetAllMatchRules method on
  the undocumented Stats interface, must now be used via the object path
  /org/freedesktop/DBus. Previously, they existed on all object paths.
  (fd.o #101257, Simon McVittie)

1172 1173 1174 1175 1176 1177 1178
 AddMatch() with a match rule containing eavesdrop='true' will now fail
  unless called by either the same user as the dbus-daemon, or Unix uid 0
  (root), matching the restrictions applied to the newer BecomeMonitor()
  method. On the session bus this has no practical effect. On the system
  bus this will prevent certain configurations that already did not
  work well in practice. (fd.o #101567, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1179 1180 1181 1182 1183 1184 1185
Enhancements:

 D-Bus Specification version 0.31
  · Don't require implementation-specific search paths to be lowest
    priority
  · Correct regex syntax for optionally-escaped bytes in addresses so it
    includes hyphen-minus, forward slash and underscore as intended
Simon McVittie's avatar
NEWS  
Simon McVittie committed
1186
  · Describe all message bus methods in the same section
Simon McVittie's avatar
NEWS  
Simon McVittie committed
1187
  · Clarify the correct object path for method calls to the message bus
Simon McVittie's avatar
NEWS  
Simon McVittie committed
1188 1189 1190 1191 1192
    (/org/freedesktop/DBus, DBUS_PATH_DBUS in the reference implementation)
  · Document that the message bus implements Introspectable, Peer and
    Properties
  · Add new Features and Interfaces properties for message bus
    feature-discovery
Simon McVittie's avatar
Simon McVittie committed
1193 1194
  · Add unix:dir=..., which resembles unix:tmpdir=... but never uses
    abstract sockets
1195 1196 1197
  · Don't require eavesdrop='true' to be accepted from connections not
    sufficiently privileged to use it successfully
  · Formally deprecate eavesdropping in favour of BecomeMonitor
Simon McVittie's avatar
Simon McVittie committed
1198
  (fd.o #99825, #100686, #100795, #101256, #101257, #101567;
Simon McVittie's avatar
NEWS  
Simon McVittie committed
1199 1200 1201 1202
  Simon McVittie, Tom Gundersen)

 Implement the Properties and Peer interfaces in dbus-daemon
  (fd.o #101257, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1203

Simon McVittie's avatar
NEWS  
Simon McVittie committed
1204 1205 1206
 New function dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returning a DBusError. Other code
  that needs the machine ID will now report a recoverable error (instead
Simon McVittie's avatar
Simon McVittie committed
1207 1208 1209
  of logging to stderr and aborting) if no machine ID is available.
  Generating a machine ID is still considered to be a required part of
  installing dbus correctly. (fd.o #13194, Simon McVittie)
Simon McVittie's avatar
NEWS  
Simon McVittie committed
1210

Simon McVittie's avatar
Simon McVittie committed
1211 1212 1213
 Implement GetConnectionSELinuxSecurityContext("org.freedesktop.DBus")
  (fd.o #101315, Laurent Bigonville)

Simon McVittie's avatar
Simon McVittie committed
1214 1215 1216
 Avoid deprecated API calls when using SELinux
  (fd.o #100912, Laurent Bigonville)

Simon McVittie's avatar
NEWS  
Simon McVittie committed
1217 1218 1219 1220
 Switch a test from the deprecated g_test_trap_fork() to
  g_test_trap_subprocess(), for Windows support and better robustness
  on Unix (fd.o #101362, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1221 1222 1223 1224 1225 1226 1227
 On systemd systems, if ${localstatedir}/dbus/machine-id doesn't exist,
  instruct systemd-tmpfiles to make it a symbolic link to /etc/machine-id.
  This prevents the two files from going out of sync on stateless or live
  images without needing to run dbus-uuidgen, and supports older D-Bus
  implementations that do not necessarily read /etc/machine-id themselves.
  (fd.o #101570, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1228 1229 1230 1231
• Implement unix:dir=..., which resembles unix:tmpdir=... but never uses
  abstract sockets. This is preferable when used with Linux containers.
  (fd.o #101567, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1232 1233
Fixes:

Simon McVittie's avatar
Simon McVittie committed
1234 1235 1236
• Fix a reference leak when blocking on a pending call on a connection
  that has been disconnected (fd.o #101481, Shin-ichi MORITA)

Simon McVittie's avatar
Simon McVittie committed
1237 1238 1239
• Don't put timestamps in the Doxygen-generated documentation,
  or hard-code the build directory into builds with embedded tests,
  for reproducible builds (fd.o #100692, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1240 1241 1242

 Fix some integration test issues (fd.o #100686, Simon McVittie)

Simon McVittie's avatar
NEWS  
Simon McVittie committed
1243 1244 1245 1246 1247 1248
 Fix memory leaks in the tests (fd.o #101257, Simon McVittie)

 If we somehow get an autolaunch address with multiple semicolon-separated
  components, and they don't work, don't invalidly "pile up" errors
  (fd.o #101257, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1249 1250 1251 1252
Documentation:

 Update git URIs in HACKING document to sync up with cgit.freedesktop.org
  (fd.o #100715, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1253

Simon McVittie's avatar
1.11.12  
Simon McVittie committed
1254
D-Bus 1.11.12 (2017-04-07)
Simon McVittie's avatar
Simon McVittie committed
1255 1256
==

Simon McVittie's avatar
1.11.12  
Simon McVittie committed
1257 1258
The it's something humans do” release.

Simon McVittie's avatar
Simon McVittie committed
1259 1260 1261 1262 1263 1264 1265 1266
Enhancements:

• The session dbus-daemon now supports transient .service files
  in $XDG_RUNTIME_DIR/dbus-1/services. Unlike the other standard
  service directories, this directory is not monitored with inotify
  or similar, and the service files must be named exactly
  ${bus_name}.service. (fd.o #99825, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285
• dbus can be configured with --enable-relocation when building with
  Autotools, or with -DDBUS_RELOCATABLE=ON when building with cmake,
  to make the pkg-config metadata relocatable. This is useful for
  non-standard prefixes, and in particular for Windows installations.
  However, it is not recommended for system-wide installations into
  /usr, because it interferes with pkg-config's ability to filter out
  compiler default linker directories.

  With Autotools, the default is --enable-relocation when building
  for Windows or --disable-relocation otherwise. With CMake, the default
  is -DDBUS_RELOCATABLE=ON.

  (fd.o #99721; Ralf Habacker, Simon McVittie)

 Users of CMake  2.6 can now link to libdbus without providing their
  own FindDBus.cmake macros, whether dbus was compiled with Autotools
  or with CMake. See the end of README.cmake for more information.
  (fd.o #99721; Ralf Habacker, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1286 1287 1288 1289 1290 1291 1292
Fixes:

 Always read service file directories in the intended order
  (fd.o #99825, Simon McVittie)

 When tests are skipped, don't try to kill nonexistent process 0
  (fd.o #99825, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1293

Simon McVittie's avatar
NEWS  
Simon McVittie committed
1294 1295
• Avoid valgrind false positives (fd.o #88808, Philip Withnall)

Simon McVittie's avatar
1.10.18  
Simon McVittie committed
1296 1297 1298
• Fix a harmless read overflow and some memory leaks in a unit test
  (fd.o #100568, Philip Withnall)

Simon McVittie's avatar
Simon McVittie committed
1299 1300 1301
• Fix some typos in test code
  (fd.o #99999, Coverity #141876, #141877; Philip Withnall)

Simon McVittie's avatar
Simon McVittie committed
1302 1303 1304
• Clarify the roles of /etc/dbus-1/s*.d and /usr/share/dbus-1/s*.d
  in documentation (fd.o #99901, Philip Withnall)

Simon McVittie's avatar
NEWS  
Simon McVittie committed
1305
• Fix and enable compiler warnings related to -Wswitch
Simon McVittie's avatar
NEWS  
Simon McVittie committed
1306 1307
  (fd.o #98191; Thomas Zimmermann, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1308 1309 1310
• Fix writing off the end of a fd_set when testing with valgrind
  (fd.o #99839, Philip Withnall)

Simon McVittie's avatar
Simon McVittie committed
1311
D-Bus 1.11.10 (2017-02-16)
Simon McVittie's avatar
Simon McVittie committed
1312 1313
==

Simon McVittie's avatar
Simon McVittie committed
1314 1315
The “purple hair gives you telekinesis?” release.

Simon McVittie's avatar
Simon McVittie committed
1316 1317 1318 1319 1320 1321 1322 1323 1324 1325
Dependencies:

• AppArmor support requires at least libapparmor 2.8.95, reduced
  from 2.10 in previous versions. One test requires 2.10 and is
  skipped if building with an older version.

Enhancements:

• Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
Simon McVittie's avatar
Simon McVittie committed
1326
  the default (fd.o #98889, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1327

Simon McVittie's avatar
Simon McVittie committed
1328
• Avoid some deprecated CMake functions (fd.o #99586, Ralf Habacker)
Simon McVittie's avatar
Simon McVittie committed
1329 1330 1331 1332

• Silence many -Wswitch-enum and -Wswitch-default warnings
  (fd.o #98191; Thomas Zimmermann, Simon McVittie)

Simon McVittie's avatar
Simon McVittie committed
1333 1334 1335 1336 1337 1338 1339 1340 1341 1342
• Install a sysusers.d snippet so `dbus-daemon --system` can be used
  with an unpopulated /etc (fd.o #99162, Lennart Poettering)

• Install pkg-config metadata on Unix even if building with CMake
  (fd.o #99752, Ralf Habacker)

• Exclude auth mechanisms from REJECTED message if they are supported
  in the code but but configured to be disallowed (fd.o #99621,
  Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
1343 1344
Fixes:

Simon McVittie's avatar
Simon McVittie committed
1345 1346 1347 1348 1349 1350 1351 1352 1353
• Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.

  On Unix systems we strongly recommend using only the unix: and systemd:
  transports, together with EXTERNAL authentication. These are the only
Simon McVittie's avatar
Simon McVittie committed
1354
  transports and authentication mechanisms enabled by default.
Simon McVittie's avatar
Simon McVittie committed
1355 1356 1357 1358 1359 1360

  (fd.o #99828, Simon McVittie)

• Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie)
Simon McVittie's avatar
Simon McVittie committed
1361

Simon McVittie's avatar
Simon McVittie committed
1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375
• Fix the implementation of re-enabling a timeout so that its
  countdown is restarted as intended, instead of continually
  decreasing. (fd.o #95619; Michal Koutný, Simon McVittie)

• When receiving a message with file descriptors, do not start reading
  the beginning of the next message, so that only one such message
  is processed at a time. In conjunction with the fix for #95619
  this means that processes sending many file descriptors, such as
  systemd-logind on a system that receives very rapid ssh connections,
  are not treated as abusive and kicked off the bus. Revert the previous
  workaround that special-cased uid 0.
  (fd.o #95263, LP#1591411; Simon McVittie)

• Do not require TMPDIR, TEMP or TMP to be set when cross-compiling
Simon McVittie's avatar
Simon McVittie committed
1376
  for Windows with CMake (fd.o #99586, Ralf Habacker)
Simon McVittie's avatar
Simon McVittie committed
1377 1378

• Do not set Unix-specific variables when targeting Windows
Simon McVittie's avatar
Simon McVittie committed
1379
  (fd.o #99586, Ralf Habacker)
Simon McVittie's avatar
Simon McVittie committed
1380

Simon McVittie's avatar
Simon McVittie committed
1381 1382 1383
• Install Unix executables to ${CMAKE_INSTALL_PREFIX}/bin as intended,
  not ${CMAKE_INSTALL_PREFIX}/lib (fd.o #99752, Ralf Habacker)

Simon McVittie's avatar
Simon McVittie committed
1384 1385
• Use relative install locations in CMake on Unix to respect DESTDIR,
  and use GNU-style install layout (fd.o #99721, #99752; Ralf Habacker)
Simon McVittie's avatar
Simon McVittie committed
1386

Simon McVittie's avatar
Simon McVittie committed
1387
• Install dbus-arch-deps.h correctly when using CMake
Simon McVittie's avatar
Simon McVittie committed
1388
  (fd.o #99586, #99721; Ralf Habacker)
Simon McVittie's avatar
Simon McVittie committed
1389

Simon McVittie's avatar
Simon McVittie committed
1390 1391 1392
• Improve argument validation for `dbus-test-tool spam`
  (ffd.o #99693, Coverity #54759; Philip Withnall)

Simon McVittie's avatar
Simon McVittie committed
1393 1394 1395