|
|
|
|
@ -1,11 +1,16 @@
|
|
|
|
|
0.7.5 (2009-12-23)
|
|
|
|
|
------------------------------------------------------------------------
|
|
|
|
|
(None)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.7.5-RC1 (2009-12-14)
|
|
|
|
|
------------------------------------------------------------------------
|
|
|
|
|
- Add: Some missing latin-ish characters from the OpenGFX set (r18431)
|
|
|
|
|
- Change [FS#3349]: Recolour the bubble generator just like any other industry (r18409)
|
|
|
|
|
- Change: Recolour the bubble generator just like any other industry [FS#3349] (r18409)
|
|
|
|
|
- Fix: Read after free in case no network connection could be made with the content server (r18493)
|
|
|
|
|
- Fix: [NewGRF] Initialisation of cargo payment was broken for NewGRF cargos [FS#3344] (r18475)
|
|
|
|
|
- Fix: [NoAI] AIOrder::SkipToOrder did not properly resolve ORDER_CURRENT (r18471)
|
|
|
|
|
- Fix: When moving a wagon and only the last part of a dual headed engine you could split the dual headed engine over two vehicles (r18462)
|
|
|
|
|
- Fix: When moving a wagon and only the last part of a dual headed engine you could split the dual headed engine over two vehicles. This could be used to crash servers [CVE-2009-4007] (r18462)
|
|
|
|
|
- Fix: [Windows] Forgot to load the symbol from SDL.dll (r18439)
|
|
|
|
|
- Fix: Do not run the 'jam protection' for vehicles in a depot [FS#3360] (r18428)
|
|
|
|
|
- Fix: [Windows] the help window would be too large in some cases [FS#3327] (r18424)
|
|
|
|
|
@ -647,7 +652,7 @@
|
|
|
|
|
- Fix: In some cases the sprite cache could be filled with unremovable items [FS#2153] (r13869)
|
|
|
|
|
- Fix: Return of wrong parent scope of (NewGRF) industry variables (r13868)
|
|
|
|
|
- Fix: Loading of TTD(Patch) savegames from the command line did not work (r13859)
|
|
|
|
|
- Fix: Buffer overflow for too long filename supplied as '-g' parameter (r13858)
|
|
|
|
|
- Fix: Buffer overflow for too long filename supplied as '-g' parameter [CVE-2008-3577] (r13858)
|
|
|
|
|
- Fix: Cargo type lookup was incorrect for NewGRF version 7 files without a translation table [FS#2157] (r13855)
|
|
|
|
|
- Fix: GetTownByTile() is only valid for houses and roads (r13851)
|
|
|
|
|
- Fix: Power, running cost and capacity of multiheaded engines were (too often) doubled in newspaper resp. offer window (r13844)
|
|
|
|
|
@ -668,13 +673,13 @@
|
|
|
|
|
- Fix: Possible desync on the autorenew settings 20+ game years (i.e. 4.5+ hours) after a company was started (r13718)
|
|
|
|
|
- Fix: Any player could construct new companies [FS#2144] (r13716)
|
|
|
|
|
- Fix: Remove the unique_id from the message that a client has joined as it is only exposes the unique_id more than needed (r13714)
|
|
|
|
|
- Fix: Possible crash on creating a network packet (r13713)
|
|
|
|
|
- Fix: Possible crash on creating a network packet [CVE-2008-3547] (r13713)
|
|
|
|
|
- Fix: Enforce the length restrictions of company and president name in the commands too (r13712)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
0.6.2-RC1 (2008-07-16)
|
|
|
|
|
------------------------------------------------------------------------
|
|
|
|
|
- Fix: Possible buffer overflow in string truncation code (r13700)
|
|
|
|
|
- Fix: Possible buffer overflow in string truncation code [CVE-2008-3576] (r13700)
|
|
|
|
|
- Fix: Handle SETX(Y) properly when truncating a string instead of ignoring it and returning a too long string (r13699)
|
|
|
|
|
- Fix: In some cases the (sound) mixer could overflow causing artefacts in the sound [FS#2120] (r13695)
|
|
|
|
|
- Fix: Do not rely on .tar files always ending with a block of zeros (r13693)
|
|
|
|
|
@ -1733,7 +1738,7 @@
|
|
|
|
|
- Fix: Danish town names were saved/loaded as Swiss
|
|
|
|
|
- Fix: Removing roads on crossings was done without a check for ownership
|
|
|
|
|
- Fix: [Autoreplace] Fix drawing of train list for outdated engines
|
|
|
|
|
- Fix: Malicious clients/servers could crash the game
|
|
|
|
|
- Fix: Malicious clients/servers could crash the game [CVE-2006-1999, CVE-2006-1998]
|
|
|
|
|
- Fix: [Autoreplace] allow replacement of wagons even when the engine fails to be replaced
|
|
|
|
|
- Fix: Certain operations involving trains inside a depot could cause a crash
|
|
|
|
|
- Fix: [Autoreplace] cost for refitting a new vehicle is added to the cost animation (player always paid for it, it just was not shown)
|
|
|
|
|
@ -1883,7 +1888,7 @@
|
|
|
|
|
- Fix: On OS/2 show the trailing \ if the current directory is a root directory (r2860)
|
|
|
|
|
- Fix: Return a proper version number, when testing the TTDPatch version in the SkipIf action (r2862)
|
|
|
|
|
- Fix: Change the way NewGRFs are loaded, this saves quite some sprite slots - about 2000 for DBSetXL for example (r2868)
|
|
|
|
|
- Fix: Several format string vulnerabilities and buffer overflows in the network code (r2899)
|
|
|
|
|
- Fix: Several format string vulnerabilities and buffer overflows in the network code [CVE-2005-2764, CVE-2005-2763] (r2899)
|
|
|
|
|
- Fix: fixed issue where autorenewed vehicles did not get all stats updated (r2912)
|
|
|
|
|
- Fix: Exit the child of the extmidi backend with _exit() instead of exit(), because we do not want any atexit handlers - especially flushing output streams - to run, if exec() fails (r2938)
|
|
|
|
|
- Fix: Server crash with 'say'-command (r2950)
|
|
|
|
|
|
rubidium