[Squashfs-announce] [ANNOUNCE] squashfs-tools-ng 1.1.2 & 1.0.5 are released

[David O. <go...@in...>]

Hi,

I am pleased to announce the release of squashfs-tools-ng 1.1.2, as well as a
simultaneous release of 1.0.5 which contains bug-fixes that where back-ported
to a separate branch off of the 1.0.4 release tag.


The 1.1.2 release contains primarily another bug fix for tar2sqfs, regarding
support for bzip2 compressed archives that have been generated with parallel
compression, resulting in premature stream terminations in the tar archive.

Another fix for libsquashfs is added, regarding output block alignment. This
is a feature that is implemented in the library, but currently not exposed
through the command line tools.

In addition, new compiler warning flags were added and addressed accordingly
with further hardening against potential integer overflows, alignment issues,
and some printf format string signdness mismatches.



As mentioned above, any bug-fixes on the 1.1.x branch that also affect
the older 1.0.4 release have been continuously back-ported to a separate
branch called "fixes-1.0.0". Because those have become quite numerous
by now, a new 1.0.5 release tarball was generated. Individual patches on
top of the 1.0.4 tarball are also available here:

     https://infraroot.at/pub/squashfs/patches-1.0.4/

Please note that the libtool so-version of 1.0.5 clashes with the one from
the 1.1.1 release. They implement the exact same API and should in theory be
perfectly ABI compatible, with the main difference being that the later
contains internal restructurings and performance improvements, while the former
only contains back-ported fixes.



Tarball:    https://infraroot.at/pub/squashfs/squashfs-tools-ng-1.1.2.tar.xz
             https://infraroot.at/pub/squashfs/squashfs-tools-ng-1.0.5.tar.xz

Signature:  https://infraroot.at/pub/squashfs/squashfs-tools-ng-1.1.2.tar.xz.asc
             https://infraroot.at/pub/squashfs/squashfs-tools-ng-1.0.5.tar.xz.asc

Signed tag: https://github.com/AgentD/squashfs-tools-ng.git v1.1.2
             https://github.com/AgentD/squashfs-tools-ng.git v1.0.5

             https://git.infraroot.at/squashfs-tools-ng.git v1.1.2
             https://git.infraroot.at/squashfs-tools-ng.git v1.0.5



Pre-compiled Windows binaries, built using a MinGW cross toolchain,
are available here:

https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.1.2-mingw32.zip
https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.1.2-mingw32.zip.asc

https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.0.5-mingw32.zip
https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.0.5-mingw32.zip.asc

https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.1.2-mingw64.zip
https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.1.2-mingw64.zip.asc

https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.0.5-mingw64.zip
https://infraroot.at/pub/squashfs/windows/squashfs-tools-ng-1.0.5-mingw64.zip.asc


Fixed from 1.1.1 to 1.1.2:
- libsquashfs: preserve alignment flag in block processor
- libsquashfs: broken block alignment in block write
- allow concatenated Bzip2 streams
- Some documentation clarifications and typo fixes
- Use Automake conditional for zstd stream compression support
- Additional compiler warnings were turned on and addressed
- libfstream: Add printf format specifier attribute
- libfstream: guard against potential integer overflows
- libfstree: guard against link count and inode number overflow
- libfstree: guard against possible overflow in readlink()
- libcommon: potentially un-aligned data access in LZO compressor
- libsquashfs: potentially unaligned data access in meta data handling
- Some format string type/signedness mismatch issues


Fixed from 1.0.4 to 1.0.5:
- Fix format string type/signedness mismatch issues
- Add default cases for every switch block
- Remove casual un-const casting in various places
- libsquashfs: get rid of potentially unaligned access and VLAs
- libcommon: remove potentially un-aligned access in LZO compressor
- libfstree: guard against link count and inode number overflow
- Backport documentation clarifications and typo fixes
- Fix: libsquashfs: allow static linking on Windows
- Fix: libsquashfs: add sqfs_free() function
- libsquashfs: fix: also preserve alignment flag in block processor
- libsquashfs: fix block alignment if requested
- added shared read access when opening sqfs image with read-only flags (win32)


Regards,

David