diff --git a/ChangeLog.md b/ChangeLog.md index 6a7b282..3e5a974 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -2,7 +2,7 @@
-# wolfSentry Release 1.6.2 (December 29, 2023) +# wolfSentry Release 1.6.2 (January 2, 2024) Release 1.6.2 of the wolfSentry embedded firewall/IDPS has enhancements, additions, and improvements including: @@ -13,16 +13,24 @@ In scripts and Makefile, interpreters (`bash` and `awk`) now follow search `PATH Change type of length argument to `wolfsentry_action_res_assoc_by_name()` to `int`, to allow it to accept `WOLFSENTRY_LENGTH_NULL_TERMINATED` (negative number). +Makefile option `STRIPPED` has been split into `STRIPPED` and `FUNCTION_SECTIONS`, the latter directing the compiler and linker to cull any unused object code (with function granularity) to minimize total size. + ## Bug Fixes, Cleanups, and Debugging Aids In `handle_route_endpoint_clause()`, add casts to work around an implicit-promotion bug in gcc-7.5. +In `wolfsentry_route_table_max_purgeable_idle_time_get()` and `_set()`, don't use atomic operations, as the context is already locked and the operand is an `int64_t`. This avoids an inadvertent dependency on software __atomic_load_8() and __atomic_store_8() on 32 bit targets. + Various fixes for benign `cppcheck` reports (`duplicateCondition`, `unsignedLessThanZero`, `unreadVariable`, `invalidPrintfArgType_uint`, `invalidPrintfArgType_sint`, `shadowFunction`, `constVariablePointer`, `preprocessorErrorDirective`). ## Self-Test Enhancements Add `replace_rule_transactionally()`, now used in `test_static_routes()` for a thorough workout. +Enhance `freertos-arm32-build-test` target to do two builds, one with and one without `FUNCTION_SECTIONS`, for more thorough coverage. + +In `test_lwip()` (`tests/unittests.c`), pass a trivial JSON config to `activate_wolfsentry_lwip()`, to avoid compiler optimizing away `wolfsentry_config_json_oneshot()` and its dependencies. + Split cppcheck-analyze recipe into cppcheck-library, cppcheck-force-library, cppcheck-extras, and cppcheck-force-extras, with increased coverage. Only cppcheck-library and cppcheck-extras are included in the "check-all" dependency list.
diff --git a/README.md b/README.md index 18ee0b5..521bbce 100644 --- a/README.md +++ b/README.md @@ -104,7 +104,9 @@ topic. | `make` Option | Macro Option | Description | | -------------- | ------------ | ----------- | -| `V` | | Verbose `make` output
e.g. `make V=1 -j test` | +| `SHELL` | | Supplies an explicit/alternative path to `bash`. | +| `AWK` | | Supplies an explicit/alternative path to Gnu `awk`. | +| `V` | | Verbose `make` output
e.g. `make V=1 -j test` | | `USER_MAKE_CONF` | | User-defined make clauses to include at the top of the main Makefile
e.g. `make -j USER_MAKE_CONF=Makefile.settings` | | `EXTRA_CFLAGS` | | Additional arguments to be passed verbatim to the compiler | | `EXTRA_LDFLAGS` | | Additional arguments to be passed verbatim to the linker | @@ -117,6 +119,7 @@ topic. | `C_WARNFLAGS` | | The warning flags to use (overriding the generally applicable defaults) | | `STATIC` | | Build statically linked unit tests | | `STRIPPED` | | Strip binaries of debugging symbols | +| `FUNCTION_SECTIONS` | | Cull any unused object code (with function granularity) to minimize total size. | | `BUILD_DYNAMIC` | | Build dynamically linked library | | `VERY_QUIET` | | Inhibit all non-error output during build | | `TAR` | | Path to GNU tar binary for `make dist`, should be set to `gtar` for macOS | diff --git a/doc/wolfSentry_refman.pdf b/doc/wolfSentry_refman.pdf index 9f450f4..243499f 100644 Binary files a/doc/wolfSentry_refman.pdf and b/doc/wolfSentry_refman.pdf differ