News - 2023/09/07 - FLL 0.6.7 Release
Author: Kevin Day
Description: News post on 2023/09/07.
Keywords: Kevin Day, Kevux, FLL, Featureless, Linux, Library, Distribution, Open-Source, News, 2023

# 2023 / 09 / 07 - FLL 0.6.7 Release

The Featureless Linux Library stable version `0.6.7` is released.

With this release I hope to see a very stable `0.6` release series.

Only a single functional feature is added and then it is a bug fix in the guise of a feature. The Featureless Make program has an oversight in regards to "specify a custom path" within the buid settings paths. I discovered this while working on the TacocaT program in the Kevux Tools project.

A new FSS standard, FSS-0010 (Encrypted Simple Packet), is added. This specification is generally going to be implemented in the `0.7.x` and greater versions.

There are several changes to the FSS specifications. The FSS standards themselves now have a "version" date added. The specifications are currently versioned by the dates rather than some arbitrary number. Should I get to an FLL `1.0.0`, I will have to decide on whether or not to use a numeric version as well. I very likely will have the specifications at `1.0.0` at that point as well.

I discovered a regression in the `0.6.6` release and possibly earlier regarding the dependencies in the stand alone builds. This should no longer be a problem as of `0.6.7`.

Several security concerns have been discovered and fixed in this release. There are no known reported exploits, but I decided to also start having an Exploit Fixes section. If there is any confusion, the Security Fixes involve areas of concern that may or may not potentially lead to a security problem or an exploit. Whereas the Exploit Fixes are focused around actual exploits rather than security concerns. There is also a fine line between a security fix and a bug fix. Unlike bug fixes, security fixes tend to have strong correlations to security problems and exploits or are of a significant security concern.

The following are changes since the `0.6.6` stable release.

Exploit Fixes:

- None.

Security Fixes:

- FLL: The `f_iki` allocation functions are calling `f_memory_destroy()` and `f_memory_delete()` when they should not, causing memory leak.
- FLL: Add additional checks against the parameters in `fll_execute_program()`.
- FLL: Invalid allocation size for `fll_execute_arguments_add_parameter_set()`.

Features:

- FSS: Add specification FSS-0010 (Encrypted Simple Packet).
- Fake: Add `-U/--under` parameter to Featureless Make.

Bug Fixes:

- FLL: Incorrect version numbers in some of the extra projects files.
- FLL: Incorrect `sizeof()` values for `f_thread_mutex_attribute` functions and `f_thread_lock` functions.
- FLL: Incorrect `sizeof()` values for numerous type array functions.
- FLL: Add missing parameter checking to `fll_program_*` functions, add "`const`" to parameter pointers, and add missing documentation comment for parameter.
- FLL: Problems exposed by CLang version 13.
- FSS: Mistakes in the FSS-000f (Simple Packet) specification.
- Byte Dump:: Program binary mode is printing wrong number of padding.
- Controller:: Incorrect function name in error message.

Refactors:

- None.

Regressions:

- FLL: Incorrect dependencies breaking some builds, specifically the stand alone builds.

Updates:

- FLL: The defines in cygwin.txt documentation are out of date
- FSS: FSS-000F (Simple Packet) Specification.
- FSS: Specifications, replacing "emphasis" with "italic".
- FSS: Specifications, adding explicit version date and change license line format.
- FSS: FSS-000F (Simple Packet) specification, adding reasoning and improve the wording.

Check out the project on the FLL release page.

The project is built like a tool chest. Individuals who are unfamiliar with the project should have an easier time trying out the pre-packaged monolithic sources. These programs, by default, are designed to build against a library built using the monolithic source tree.

The stand alone sources for the several programs can be found pre-packaged at Sourceforge.

Kevin Day