~ chicken-core (chicken-5) 34f351983c70eee80538700770e0a5b00c0d82cf
commit 34f351983c70eee80538700770e0a5b00c0d82cf Author: Peter Bex <peter@more-magic.net> AuthorDate: Sun Jan 22 18:04:19 2017 +0100 Commit: Peter Bex <peter@more-magic.net> CommitDate: Sun Jan 22 18:04:19 2017 +0100 Consolidate NEWS file for 4.12.0 Conflicts: NEWS diff --git a/NEWS b/NEWS index eee35709..5099942f 100644 --- a/NEWS +++ b/NEWS @@ -58,36 +58,7 @@ - Removed support for (define-syntax (foo e r c) ...), which was undocumented and not officially supported anyway. -4.11.2 - -- Security fixes - - CVE-2016-9954: Irregex has been updated to 0.9.6, which fixes - an exponential explosion in compilation of nested "+" patterns. - -- Compiler: - - Fixed incorrect argvector restoration after GC in directly - recursive functions (#1317). - - "Direct" procedure invocations now also maintain debug info (#894). - -- Runtime system: - - "time" macro now shows peak memory usage (#1318, thanks to Kooda). - - Avoid crashes in ffi callbacks after GC (#1337, thanks to cosarara). - -- Core libraries: - - Keywords are more consistently read/written, like symbols (#1332). - - SRFI-39: When jumping out of a parameterized dynamic extent, - "parameterize" now remember the actual values, so when jumping back - in, they are restored (fixes #1336, thanks to Joo ChurlSoo). - This was a regression caused by the fix for #1227. - -- Tools: - - "chicken-install" - - When installing eggs in deploy mode with "-keep-installed", eggs - under the prefix won't unnecessarily be reinstalled (#1144). - - Added new option "-no-install-deps" which inhibits automatic - installation of dependencies, useful with "-prefix" (#1298). - -4.11.1 +4.12.0 - Security fixes - CVE-2016-6830: Fix buffer overrun due to excessively long argument @@ -98,6 +69,8 @@ process-spawn. If, during argument and environment list processing, a list item isn't a string, an exception is thrown, in which case previously malloc()ed strings weren't freed. + - CVE-2016-9954: Irregex has been updated to 0.9.6, which fixes + an exponential explosion in compilation of nested "+" patterns. - Compiler: - define-constant now correctly keeps symbol values quoted. @@ -106,6 +79,15 @@ for vectors and proper lists of a definitely known length. - The scrutinizer will no longer drop knowledge of the length of a vector. It still drops types of its contents (which may be mutated). + - Fixed incorrect argvector restoration after GC in directly + recursive functions (#1317). + - "Direct" procedure invocations now also maintain debug info (#894). + +- Syntax expander + - DSSSL lambda lists have improved hygiene, so they don't need + the chicken or scheme modules to be imported in full (#806). + - The let-optionals* macro no longer needs "quote", "car" and "cdr" + to be imported and bound to their default values (#806). - Runtime system: - C_locative_ref has been deprecated in favor of C_a_i_locative_ref, @@ -115,16 +97,25 @@ - Weak symbol GC (-:w) no longer drops random symbols (#1173). - The number of arguments to procedures, both via "apply" and direct invocation, are now limited only by the C stack size (#1098). + - "time" macro now shows peak memory usage (#1318, thanks to Kooda). + - Avoid crashes in ffi callbacks after GC (#1337, thanks to cosarara). -- Syntax expander - - DSSSL lambda lists have improved hygiene, so they don't need - the chicken or scheme modules to be imported in full (#806). - - The let-optionals* macro no longer needs "quote", "car" and "cdr" - to be imported and bound to their default values (#806). - -- Core libraries +- Core libraries: - Irregex has been updated to 0.9.5, which fixes matching of all "bow" occurrances beyond the first with irregex-fold (upstream issue #14). + - Keywords are more consistently read/written, like symbols (#1332). + - SRFI-39: When jumping out of a parameterized dynamic extent, + "parameterize" now remember the actual values, so when jumping back + in, they are restored (fixes #1336, thanks to Joo ChurlSoo). + This was a regression caused by the fix for #1227. + +- Tools: + - "chicken-install" + - When installing eggs in deploy mode with "-keep-installed", eggs + under the prefix won't unnecessarily be reinstalled (#1144). + - Added new option "-no-install-deps" which inhibits automatic + installation of dependencies, useful with "-prefix" (#1298). + 4.11.0Trap