1 0.5.0 - initial release
5 0.5.9 - signal ABI bugfix, various cleanup and fixes:
7 sigset_t was wrongly defined as 1024 bytes instead of 1024 bits,
8 breaking the intended ABI compatibility with the LSB/glibc sigaction
9 structure. users should upgrade immediately and rebuild any libraries
10 or object files that might be using the incorrect definitions.
12 improved security against DoS with tcb shadow passwords by checking
13 that the file opened was really an ordinary file.
15 fixed a bug in the implementation of atomic ops that could have
16 allowed the compiler to incorrectly reorder them (in practice, gcc
17 with the default settings on i386 was not reordering them).
19 greatly improved conformance to the C and POSIX standards regarding
20 what the standard header files make visible. _POSIX_C_SOURCE is now
21 needed to get POSIX functions in standard C headers, and _XOPEN_SOURCE
22 or _GNU_SOURCE are required to get XSI interfaces or GNU extensions,
25 many internal improvements have been made to the syscall-related code
26 in preparation for porting to x86_64 and other archs.
30 0.6.0 - x86_64 port, various important bugs fixed
32 new x86_64 (amd64) architecture port, contributed by Nicholas J. Kain,
33 along with PORTING guide. source tree layout and build system have
34 been improved to accommodate further ports.
36 various bugs that were introduced while making the headers respect C
37 and POSIX namespace standards have been fixed. conformance to the
38 standards has been improved.
40 fixed an inefficiency in qsort that triggered a bug (occasionaly
41 internal compiler error) in some versions of gcc.
43 fixed a major bug in the printf %n specifier that prevented it from
44 working and caused memory corruption.
48 0.7.0 - major improvements to posix conformance and completeness
50 implemented posix shared memory and semaphore interfaces.
52 implemented all remaining required pthread and clock interfaces.
54 major fixes to signal semantics.
56 greatly improved temporary file name generation for safety against
57 denial of service due to intentional name collisions.
59 added syscall wrappers for the linux inotify interface.
61 malloc(0) now returns a non-null pointer.
63 fixed printf %n specifier (again), pthread_once (it was always
64 hanging), and non-default-type mutex behavior.
66 added ucontext/sigcontext support in headers to facilitate building
67 libgcc with dwarf2 unwind support, and possibly other low-level tools.
69 improved musl-gcc compiler wrapper.
71 implemented many small missing functions here and there, minor header
76 0.7.1 - improvements to completeness, bug fixes
78 implemented flockfile, wprintf, and robust mutex functions.
80 fixed stack corruption bug in times(), minor header bugs, and some
81 error return value bugs in thread interfaces.
85 0.7.5 - new features, major optimization, and robustness
87 implemented POSIX timers.
89 optimized and simplified many thread-related functions.
91 eliminated resource leak races in thread cancellation. (almost all
92 existing implementations, including glibc, have these leaks.)
94 overhauled stdio implementation to take advantage of readv/writev for
95 reduced syscall load, and improved stdio's handling of error status.
97 added syscall header and interface for applications to use and
98 greatly simplified internal system for making syscalls.
100 strangthened tmpnam/tempnam/tmpfile filename generation and made the
101 straight C functions not depend on POSIX symbols.
103 fixed pthread cancellation ABI on i386 to match the LSB/glibc ABI
105 better double-free handling in malloc
107 various minor bug fixes
111 0.7.6 - major bug fixes
113 fixed rare but serious under-allocation bug in malloc.
115 fixed signedness bug in strchr that prevented finding high bytes.
117 fixed serious parsing bugs in strtold.
119 fixed statvfs syscall (it was always failing with EINVAL).
121 fixed race condition in set*id() functions with threads (possible
122 deadlock). further audit still needed though.
124 fseek no longer sets the stream error flag on failed seeks (this was
125 wrong and broke some programs, notably GNU m4).
127 nl_langinfo is no longer a dummy function. (the functionality was
128 previously implemented but accidentally left unused).
130 various small fixes have been made to the implementations and
131 prototypes for nonstandard and obsolete functions
135 0.7.7 - more bug fixes and program-compatibility improvements
137 fixed floating point formatting and rounding bugs in printf.
139 fixed broken %N$ positional argument specifiers in printf.
141 fixed misaligned read/overread bug in strchr which could lead to
142 crashes scanning tiny strings at the end of a page when the next page
143 is not readable, or on archs (not yet supported) that forbid
146 fixed breakage of statvfs on x86_64
148 fixed crash in getmntent_r
150 fixed bug in POSIX timers created with NULL sigevent argument
152 improved semaphore performance, and sem_wait is now interruptable by
153 signals, as required by POSIX.
155 added many compatibility and system-level interfaces, increasing the
156 proportion of busybox that works with musl.
160 0.7.8 - more bug fixes and compatibility improvements
162 fixed problems with ipv6 dns and address printing code that made ipv6
163 support practically unusable, and some other getaddrinfo bugs.
165 fixed broken sendmsg/recvmsg functions on x86_64 (caused by incorrect
168 fixed broken sigsetjmp asm on x86_64.
170 worked around a problem with input buffering on terminals reblocking
171 after getting a blank line, due to a bug in the linux readv syscall.
173 various improvements to the "rsyscall" system used to implement
174 threaded setuid, setgid, etc.
176 exiting/cancelling the a timer handler thread no longer kills the
179 fixed incorrect trailing zeros on some %g conversions in printf.
181 fixed buggy byte-swapping functions and moved them to inlines in
184 many small improvements to header/application compatibility, support
185 for nonstandard macros, etc.
191 new pthread cancellation implementation:
192 - safe against resource-leak/side-effect-leak race conditions
193 - safe against interruption by signal handlers
194 - reduced bloat in all cancellable functions
195 - reduced bloat for blocking cancellation
197 new interfaces implemented:
198 - realpath (limited functionality)
199 - wordexp (limited functionality)
200 - flock (nonstandard)
201 - forkpty (nonstandard)
206 - syslog function failure to communicate with syslogd
207 - bug in siginfo_t definition if wait.h was included before signal.h
208 - incorrect struct definitions for most of sysv ipc
209 - pthread_exit/cancel on timer handler wrongly destroying the timer
210 - linux dup2 ebusy workaround
211 - obscure issues in non-threaded programs using some pthread functions
212 - getopt_long allowed mismatch in last char of option name
213 - incorrect parsing of obscure ip address forms
214 - initgroups not working reliably (uninitialized var)
215 - shadow pass treating empty expiry field as pass-expired-in-1970
216 - bogus longjmp if pthread_exit was called from cancellation handlers
218 x86_64-specific bug fixes:
220 - thread stack alignment
221 - broken select timeouts due to incorrect timeval definition
228 - ipv6 numeric string parsing
229 - eventfd syscall wrappers
232 - new qsort implementation using the smoothsort algorithm
233 - much smaller/faster sigset_t handling functions
234 - lowered spin count before futex wait in synchronization functions
237 - incorrect floating point round-to-even behavior in printf
238 - major bugs in pthread barrier implementation
239 - off-by-one error in scanf %n results
240 - scanf failure to report EOF when scanning for literal text
241 - minor missing/incorrect prototype issues
242 - dependency on undefined call order in fclose
244 compiler issue workarounds:
245 - incorrect inlining of variadic functions on recent gcc versions
246 - pcc preprocessor bug with recursive macro expansion
253 - integrated dynamic linker
254 - dynamic loading (dlopen/dlsym) (for dynamic-linked programs only)
256 - POSIX message queues
257 - POSIX spawn interfaces
258 - BSD pseudo-random number generator API (random/srandom/initstate/etc.)
259 - floating point environment (limited usefulness due to gcc bugs)
262 - possible crashes with wordexp due to uninitialized variable
263 - race condition in pthread_kill (also present and unfixed in glibc/nptl)
264 - pthread exit destructors called too late
265 - dangerous unbounded vla in glob
266 - brk/sbrk legacy functions mismatching legacy semantics
267 - wcsncpy dest buffer overflow
268 - strncat and wcsncat possible overflows due to double-termination
275 - support for textrels in shared objects
276 - rpath support in dynamic linker
277 - stdio_ext.h functions (for better gnu software compatibility)
280 - some compilers miscompiling dlopen due to misuse of longjmp
281 - safe handling of invalid long-double bit patterns (affects printf)
282 - workaround for bugs in linux mprotect syscall
283 - thread-safety for random() functions
284 - various minor issues
291 - chinese and japanese legacy charset support in iconv
292 - zero-syscall clock_gettime support (dynamic-linked x86_64 only)
293 - futex-based locking for stdio (previously used spinlocks)
294 - LD_PRELOAD and RTLD_NEXT support in dynamic linker
295 - strptime (mostly working but incomplete)
296 - posix aio (mostly working but not entirely conformant)
297 - memory streams (fmemopen, open_memstream, ...)
298 - stub/dummy implementations for various useless legacy functions
302 - setuid, etc. should not longer be able to "partially fail" with threads
303 - ensure suid programs start with fd 0,1,2 open
304 - improved openpty/forkpty failure checks
306 threads/synchronization bug fixes:
307 - dangerous spurious wakeup in pthread_join lead to early return
308 - race condition enabling async cancellation (delayed/lost cancellation)
309 - destruction/unmapping race conditions in semaphores, mutexes, rwlocks
310 - recursive rwlock_rdlock deadlock when a writer is waiting
311 - race condition in sigqueue with fork
312 - timer expiration thread exit wasn't running dtors
313 - timer threads weren't blocking signals
314 - close was wrongly cancellable after succeeding on some devices
315 - robust mutex list was not reset on fork
318 - incorrect logic in fread (spurious blocking; crash on write-only files)
319 - many corner cases and overflow cases for strtol-family functions
320 - various printf integer formatting issues with flags/width/precision
321 - incorrect iconv return value on failure
322 - broken FD_* macros on 64-bit targets
323 - clock function returning wrong value (real time not cpu time)
324 - siglongjmp signal mask clobbering (off-by-one pointer error)
325 - dynamic linker weak symbol resolution issues
326 - fdopendir failure to set errno
327 - various minor header fixes
334 - mismatching prototypes caused build failure on 64-bit
335 - other minor prototype errors in the headers have been fixed
336 - various other small omissions fixed
343 - ptrace syscall support
346 - const error (only a warning with many compilers) in lio_listio
347 - minor portability fixes aimed at supporting new arch targets
354 - arm port (experimental)
355 - better musl-gcc wrapper script for building against musl
356 - added clone system call
359 - numerous header file typos, copy/paste errors, omissions
360 - statfs and statvfs ABI are now LSB-conformant (and actually work)
367 - arm dynamic linker support
368 - process-shared pthread barriers now work
369 - efficient futex-requeue-based cond var broadcast
370 - more optional cancellation points are now cancellable
371 - printf accepts null pointers with %s, prints as "(null)"
372 - recursive mutexes are now fully reentrant
373 - __cxa_atexit support
375 - dynamic linker now gold-compatible
377 - support for large limits with setrlimit/getrlimit (even on 32-bit)
378 - glob now supports GLOB_PERIOD option (GNU extension)
381 - many serious issues in condition variables
382 - rwlock failure-to-wake deadlock issues
383 - various small header files bugs/omissions
384 - wrong failure return for pthread_create
385 - path handling issues on execvp
386 - lock count corruption with robust recursive mutexes on owner death
387 - integer overflows in atoi, etc. reading most-negative value
388 - spurious mremaps on every realloc of large memory chunks
389 - pthread cancellation failure in single-threaded programs
392 - avoid fd_set overflow in dns lookups
399 - stdio operations are now cancellable (only when low-level io happens)
400 - global ctor/dtor support in main program start code and shared libs
401 - dynamic linker support for PIE executables (but missing startup code)
402 - vfork support on x86_64
403 - complete set of locale_t functions (all ignore the locale argument)
404 - provide define float_t and double_t in math.h
405 - lighter/faster cancellation cleanup handler register/unregister
408 - gcc wrapper now supports -shared, -nostdlib, -nostartfiles
409 - removed one wrongly-classified character from iswspace set (zwsp)
410 - fixed crashes in dns lookup on some errors, e.g. resolv.conf missing
411 - "make install" no longer tries to build shared libc if disabled
412 - ptrace argument handling bugs fixed
413 - work around visibility-hidden bugs in gcc 3.x
414 - fix thread-pointer-loss issue when it's initialized in signal handlers
415 - various minor typo/misc fixes in headers
418 - glob behaves more like traditional implementations w.r.t. GLOB_MARK
419 - added legacy futimes, lutimes functions
420 - more compatibility macros in sys/param.h (nonstandard header)
421 - setfs[ug]id syscall wrappers (linux specific)
422 - fgetpwent function (nonstandard)
423 - utmp.h matches traditional version more closely
424 - caddr_t now matches glibc type (void * instead of long)
425 - dummy (always-fail) dlopen and dlsym functions for static linked programs
426 - [efg]cvt functions (previously posix, removed from standard)
427 - get_current_dir_name function (nonstandard)
434 - fix crash in dns lookups for all static-linked, non-threaded programs
441 - c++ support with g++'s libstdc++
442 - c99 math library (float, long double, complex, etc.)
443 - numerous wchar_t functions
444 - a64l, l64a functions
448 - c89 compatibility in math.h
449 - syscall.h alias for sys/syscall.h
450 - memory.h alias for string.h
451 - getcwd supports null buffer argument (auto-allocation)
454 - major fenv (floating point environment) fixes and optimizations
455 - strptime mishandling of day/month names
456 - strtoull wrongly rejecting the highest 16 possible values as overflow
457 - math.h constant expression fixes for INFINITY/NAN/etc.
458 - scanf mishandling of "0" with "%x"
465 - major math correctness and performance improvements
466 - many math functions implemented in asm for i386
467 - some math functions (mostly long double) in asm for x86_64
468 - new floating point parser/converter with correct rounding
469 - implement wcstod, wcstof, and wcstold
470 - new scanf implementation - cleaner, faster, more correct
471 - minimal/incomplete strfmon implementation
474 - header fixes for c++
475 - regex code resync with TRE; support common regex extensions
476 - support for compiling apps with gcc's -funsigned-char
477 - sysconf now returns dynamic limits for open files, processes
478 - give dlerror proper error status stickiness
479 - make alloca work even with -fno-builtin
481 critical security fixes:
482 - stack-based buffer overflow in fprintf on unbuffered files
485 - rare gcc register allocation (miscompilation) bug in syscall wrappers
486 - printf was rejecting the valid (but redundant) %lf format specifier
487 - fixed big data bloat (missing const) in math functions
488 - many math fixes related to floating point exceptions and rounding
489 - corrected DECIMAL_DIG definitions
490 - tgammal was wrongly setting global signgam
491 - crash in wordfree with uninitialized we_offs
492 - fix wordexp not null-initializing the we_offs initial slots
499 - major breakage in strtol and family: failure to accept leading spaces
500 - incorrect name for MATH_ERREXCEPT in math.h
503 - prototypes for a few additional nonstandard functions
510 - correct over/underflow detection (ERANGE setting) for strtod
511 - new musl-gcc wrapper, specfile based, faster and more robust
512 - meaningful return strings for dlerror
513 - new iswalpha, iswpunct, and wcwidth; sync'd to Unicode 6.1
514 - towupper/towlower sync'd with Unicode 6.1
515 - new futex-based libc-internal locks instead of spinlocks
516 - experimental stack protector support (minimal; no random canary)
517 - experimental gdb shared library tracking support
520 - getusershell family functions
521 - getresuid and getresgid syscall wrappers
522 - byte swapping macros in endian.h
523 - getdtablesize was wrongly declared in unistd.h for _XOPEN_SOURCE
526 - iconv_open wrongly rejecting most dest charsets (broken in 0.8.0)
527 - sysconf failure when correct value is -1 (broken in 0.8.8)
528 - scanf and strtod family functions overreading past NAN (4 bytes vs 3)
529 - scanf and strtod wrongly treating "0.00000000001", etc. as 0
530 - many bugs in towupper/towlower (never seriously tested before)
531 - int8_t definition was wrong when gcc -funsigned-char was used
540 - configure script, improved build system
541 - full stack protector support
542 - PIE support on x86 and x86_64
543 - new O(1) space, O(nm) time implementation of fnmatch
544 - improved support for sse2 floating point mode on x86
547 - added linux unshare syscall
548 - exp10/pow10 function
549 - sqrtl support on arm (previously missing)
550 - removed minimal linux/*.h headers that could conflict with real ones
551 - support for _LARGEFILE64_SOURCE (mapped to standard fcns with #define)
552 - better c89 compatibility in headers
553 - stub versions of sched_* functions (previously missing)
554 - pthread stacks no longer executable (compat with hardened kernels)
555 - new ar.h and lastlog.h (legacy junk)
556 - various other header improvements
559 - additional x86_64 math asm
560 - better formula for acos use in i386 asm
563 - large (up to a few %) errors in strtod for certain values due to bug
564 - mbsnrtowcs and wcsnrtombs were completely broken (bad exit logic)
565 - wide printf %.0s could fail due to uninitialized variable
566 - missing dlerror strings for dlsym in some cases
573 - dynamic linker can be used as a program to explicitly load/run executables
574 - ldd command, usable by making a symlink to the dynamic linker named ldd
577 - major bugs in POSIX BRE parsing inherited from TRE regex code
578 - character matching bug in regex on ARM: WCHAR_MAX was assumed to be signed
579 - various obscure fixes related to signals and pthread cancellation
580 - remquot subnormal remainder bug
581 - buggy macros in (nonstandard) sys/param.h
582 - major bug in pthread barriers on x86_64 (out of bounds write)
583 - utimes (legacy) function was making wrong syscall (utime instead of utimes)
584 - avoid using "old" syscalls that don't exist on arm eabi linux
585 - broken strrchr(str, 0)
588 - syntax error in nextafter macro in tgmath.h
589 - missing support for -pie in musl-gcc wrapper
590 - abort could wrongly fail to terminate the program in some cases
593 - increase default thread stack size to 80k
594 - support _BSD_SOURCE feature test macro
595 - support _LARGEFILE64_SOURCE feature test macro (merely exposes alt names)
596 - lots of legacy-compatibility improvements in headers
597 - various minor GNU extension functions
598 - sysconf reporting number of available CPUs/cores
599 - various LSB/glibc ABI interfaces aimed at compatibility with some binaries
600 - use fistpll asm mnemonic instead of fistpq for compat with clang
607 - pointer overflow in printf (crash on 32bit userspace, 64bit kernel)
608 - printf %ls over-read bug
609 - strtod failure to read -0x as negative zero
610 - flush stdio after dtors, not before
611 - wrong file position for buffered input streams on exit
612 - popen was broken when stdin/out were already closed
613 - broken wcwidth tables (missing many characters)
614 - fwrite: wrong return value of partial/failed write
615 - broken utf-16 conversions
616 - bad buffer length check in getlogin_r
617 - bad perror("") behavior; did not match perror(0)
618 - broken sysinfo syscall/structure
619 - stdint.h const macro signedness bugs
620 - broken include guards in some headers
621 - bogus localeconv values
622 - cancellation-safety for popen and pclose
623 - fma corner cases wrong on i386
624 - fcntl F_GETOWN errno missing on failure.
625 - char signedness bug in dynamic linker broke dlopen on arm
626 - mprotect failure in dynamic linker caused crash instead of error
629 - configure check to work around hacked-up gcc versions
630 - test for old binutils that can't support musl dynamic linker
633 - make _GNU_SOURCE imply _LARGEFILE64_SOURCE
634 - syscall wrapper for lots of nonstandard and/or legacy linux syscalls
636 - timegm function (inverse of gmtime)
637 - various minor header tweaks
638 - make __freading/__fwriting semantics match traditional ones
639 - added gnulib-compatibility stdio interfaces
640 - added pthread_attr_setstack interface
641 - make strerror_r return partial string when buffer is too small
642 - duplocale should accept LC_GLOBAL_LOCALE
643 - align ptsname_r to upcoming posix requirements
644 - support invalid ld80 bit patterns as extra nans.
651 - mips (32-bit, o32 abi) port, currently static-linked only
652 - newly overhauled crypt implementation
653 - improved library pathname info for debugger from the dynamic linker
654 - getaddrinfo (and getservbyname) now support /etc/services lookups
655 - pipe2 syscall wrapper
656 - splice and vmsplice syscall wrappers
657 - syscall wrappers for extended attribute interfaces
658 - ioperm/iopl syscall wrappers on archs that support these operations
661 - dlsym RTLD_NEXT library search order was wrong
662 - multiple dlopen pathname and library name handling errors
663 - potential race condition in detached thread exit
664 - broken internal-lock-handling code not updated for futex-based __lock
665 - sem_trywait spurious EAGAIN errors arising from CAS failures
666 - workaround kernel bug in cmsghdr size_t vs socklen_t issue (64-bit)
667 - getservby* crash on null protocol argument
668 - logic error skipping failed interfaces in if_nameindex
669 - various minor header/declaration related issues
671 arm-specific bug fixes:
672 - broken crti/crtn startup code when gcc crtbegin/end files are linked
673 - sigsetjmp tail call optimization failure broke the function
674 - incorrect little-endian assumptions in atomic.h functions
675 - use of blx instruction in asm (not supported on pre-v5 arm)
678 - only use expensive -ffloat-store cflag on archs/compilers that need it
679 - make musl-gcc wrapper support -lgcc (mainly for self-hosting)
687 - dynamic linking on mips
688 - arm hard float support
689 - BSD fgetln function in stdio
690 - minor header improvements for compatibility
691 - support for CROSS_COMPILE variable to configure
692 - legacy significand function
693 - better support for SUSv3-targeted programs
696 - assembly (string ops based) memcpy for i386 and x86_64
697 - reduce printf overhead
700 - failure of strtod, etc. to process extremely long strings correctly
701 - read overrun in wcsstr for short needles
702 - various major mips issues that prevented most software from working
703 - erroneous floating point exception behavior in i386/x86_64 exp asm
704 - crashes on null arguments to legacy err.h functions
705 - various header file/type issues
706 - extremely rare/obscure race condition with robust mutexes
707 - crypt now never returns null (most programs don't check, then crash)
708 - missing xattr remove functions
projects / musl / blob