Find file
Fetching contributors…
Cannot retrieve contributors at this time
621 lines (366 sloc) 17 KB
** Changes in version 4.4 (29 Jan 2014)
* New Features
Added case insensitive auditing with -E mode
* Bug Fixes
Added checks against user errors on Hashdeep command line
Fixed bug for known filenames with the directory in the filename
Fixed bug for double dots in the filename
** Changes in version 4.3 (24 Oct 2012)
* Bug Fixes
Fixed check for endian-ness, affecting hash generation on
big-endian platforms.
Fixed minor bugs related to OpenSolaris.
** Changes in version 4.2 (11 Jun 2012)
* Bug Fixes
Fixed padding in Tiger hashes for large files
** Changes in version 4.1.1 (5 Jun 2012)
* Bug Fixes
Fixed hashdeep bug for known files with commas in their names.
Cleaned up usage message
** Changes in version 4.1.0 (14 Feb 2012)
* New Features
Added expert mode option to parse Windows PE files
* Bug Fixes
Fixed junction point handling on Win32
** Changes in version 4.0.1 (22 Jan 2012)
* Bug Fixes
Fixed hang on DFXML generation on Win32
Fixed incorrect hashes via stdin on Win32
Fixed "Too many open files" error on OS X
Doc files in Win32 have been corrected.
** Changes in version 4.0 (6 Jan 2012)
* New Features
Rewrote most of the program in C++.
Enabled multiprocessor support on all platforms.
Removed ten character limit on file size mode
* Bug Fixes
Too numerous to count!
** Changes in version 3.9.1 (31 May 2011)
* Bug Fixes
Fixed a cosmetic bugs regarding processing standard input
in piecewise mode.
Fixed a bug regarding processing known hash files which have
parenthesis in the filename.
Clarified documentation regarding multipliers in piecewise
mode. They are IEC multipliers, or blocks of 1,024. Side note:
also spelled 'multipliers' correctly.
** Changes in version 3.9 (21 Apr 2011)
* Bug Fixes
Fixed a critical bug in hashdeep regarding processing
standard input
** Changes in version 3.8 (15 Apr 2011)
* New Features
Added -f mode to get the list of input files from
a file on the disk.
Added 64-bit executables for Windows.
* Bug Fixes
Fixed a cosmetic bug regarding the error messages for
piecewise mode.
** Changes in version 3.7 (18 Dec 2010)
* New Features
Added triage mode, -Z flag, to compute file size and partial
hashes in addition to full file hash.
Updated Windows cross-compiler to MinGW-4.2.1
* Bug Fixes
Fixed hashdeep piecewise mode to include the correct size
of each piece being hashed. This enables audit mode to
work correctly.
Addressed display problem for time estimates of files with
long filenames in the current directory.
Added "Input/Output error" to the list of fatal errors when
processing files
** Changes in version 3.6 (23 Mar 2010)
* New Features
Added expert mode found in md5deep to hashdeep.
* Bug Fixes
Fixed error checking in helper routines.
** Changes in version 3.5.1 (30 Dec 2009)
* Bug Fixes
Fixed processing of zero byte files.
** Changes in version 3.5 (22 Dec 2009)
* New Features
Added mode to load list of files to process from a file (-f mode)
* Bug Fixes
Fixed file size computation for piecewise hashing of standard input.
Fixed error when auditing a directory to check for identical copies
of a file if one copy is removed.
** Changes in version 3.4 (11 Jun 2009)
* Bug Fixes
Fixed directory handle leak during recursive parsing on Windows
Fixed -n mode (display unused hashes)
** Changes in version 3.3 (4 Apr 2009)
* New Features
* Bug Fixes
Skip all reparse points (symbolic links and junction points)
on Windows. Required for sane parsing of Windows Vista or 7 systems.
Fixed handling of 64-bit timestamps on Windows.
** Changes in version 3.2 (25 Jan 2009)
* New Features
Added Comma Separated Value (CSV) mode.
* Bug Fixes
Fixed support for 64-bit files on Windows
Fixed hashdeep input file parsing to allow filenames with
commas and properly handle other kinds of errors. Also
modified the invocation listing in output files such that
even long lines can be successfully parsed.
** Changes in version 3.1 (23 Jul 2008)
* New Features
Added size threshold modes to only process files smaller
than a given size.
Added a timestamp mode that records the creation time time
for each file on Win32, the change time on all other operating
Streamlined file size computation process, which makes
the programs about 15% faster.
* Bug Fixes
Corrected time estimates for large files (e.g. files which
require more than one day).
** Changes in version 3.0 (10 May 2008)
* New Features
Added hashdeep program to support multihashing and
hash file auditing
Added support for new iLook style hashes
* Bug Fixes
Fixed obscure bug that caused a crash (double free) when
attempting to check a very small file for EnCase hashes
** Changes in version 2.0.1 (31 Oct 2007)
* Bug Fixes
Added support for older Linux systems that don't have the
latest and greatest ioctl functions.
** Changes in version 2.0 (15 Oct 2007)
* New Features
Using GNU Autotools for configuration and compilation. This
should help avoid platform specific issues such as SHA-1
problems previously found on 64-bit versions of AIX.
Added support for files with Unicode characters in their
filenames on Microsoft Windows.
Added support for EnCase hash sets (.hash files).
Updated web site and quick start guide
Slightly reduced the size of all of the executables by removing
duplicated code.
* Bug Fixes
Fixed time estimation mode for block devices on OS X and Linux
Fixed cosmetic error where estimated time remaining mode is
being used in conjunction with piecewise hashing. Time estimates
are now based on the whole file, not just each piece.
Clarified licensing issues in COPYING for tiger.c
Changed some data types in hashing functions to C99 standard.
Whirlpool seems to be working well enough without changes.
Wrapped all of the global variables into the state structure
** Changes in version 1.13 (6 Aug 2007)
* New Features
Added HP/UX as a support platform
Added -S mode to only display warnings for improperly
formatted hashes.
Created an internal state variable to central program structure.
This will help to simplify future development. Also moved
md5deep.h to main.h.
Moved print functions to ui.c for easier abstraction
* Bug Fixes
Changed piecewise hashing block size to a 64-bit value.
Fixed a cosmetic error regarding newlines in -n mode.
Fixed error on Win32 in file estimate mode. Although it appeared
to be solely cosmetic, the functions to produce the status message
could potentially overwrite other memory and create inconsistencies
Removed make macg5 option as it didn't work with new
versions of gcc.
Updated the maximum line length to 2048 bytes. This should
avoid errors reading in files with very long lines.
** Changes in version 1.12 (3 Apr 2006)
* New Features
Added multipliers for piecewise hashing mode.
* Bug Fixes
Fixed Gentoo compilation and the use of BLOCK_SIZE in hash.c.
Fixed piecewise hashing bugs: filename display, correct offset
when block size is larger than file, and ability to handle
large block sizes.
Version 1.11 - 31 Mar 2006
- Added piecewise mode -p
- Added support for using md5deep output while file sizes (-z mode) in
matching mode.
- Added flush to output after newline generation in helpers.c
- Fixed SHA-1 to work on 64-bit platforms (changed unsigned long to uin32_t)
- For good measure, eliminated a few other unsigned long references
throughout the source code
- Added -W to the compiler flags to catch lots of other little bugs,
many little fixes. Mostly eliminating comparisons between signed and
unsigned. Some warnings, especially "unused paramter" are ok.
Version 1.10 - 2 Feb 2006
- Fixed Tiger hashes being displayed in big endian instead of little endian
Thanks to Peter Chuenkov (aka ODB) for finding this bug
- Fixed cosmetic bug in usage message
Version 1.9.3 - 5 Jan 2006
- Added Cygwin as a supported platform
- Fixed expert mode to remove a number of logical errors
that prevented the program from correctly identifying which
files should be hashed. Symbolic links, in particular, were not
being chosen or excluded correctly.
- Added quiet mode, -q, filename is omitted from the output.
- Added Makefile directive macg5 to compile OS X G5 specific code
- Fixed comparisons between signed and unsigned variables in helpers.c
and dig.c
Version 1.9.2 - 14 Nov 2005
- Fixed Makefile to include compiler optimizations for hashing algorithms
Version 1.9.1 - 8 Nov 2005
- Fixed bug when processing symlinks to directories introduced in
version 1.9 by accidently removing known good code. Oops.
Version 1.9 - 7 Nov 2005
- Changed the existing return values and added ones for the matching modes
to indicate if any of the input files did not match a known hash and
if any hashes were unused. See "RETURN VALUES" section of the manpage.
- Added -n mode to display which files from the list of known hashes did
not match any of the input files.
- Fixed dig.c code to correctly handle links to Solaris doors.
- Fixed cosmetic bug that caused the leading slash to be omitted from the
output under 'which matching file', or -w mode.
- Changed text displayed in matching modes for standard input. Now displays
just "stdin" in matching mode
- Fixed bug in files.c:valid_hash that caused crash by casting
character value into a signed integer.
- Fixed bug in BSD hash file importing that caused crash when processing a
line with two parenthesis but was shorter than a valid hash.
- Fixed cosmetic bug in hash.c:update_display to prevent the first time
estimate to be wildly off if it takes more than one second to read
the first megabyte of each input file.
- Simplified hash.c by removing match_name from hash_info structure
- Minor changes to Makefile defines
Version 1.8 - 8 Aug 2005
- Added Tiger algorithm to make tigerdeep.
- Added -k mode to insert asterisks before filename, like md5sum -b
- Fixed a bug that prevented the first BSD style hash from being
loaded during any of the matching modes.
- Continued to simplify the Makefile. To wit:
- Changed checks for __WIN32 to _WIN32, which is defined by the compiler.
Removed -D__WIN32 from the Makefile.
- Greatly reduced the number of instructions for cross compiling
- Simplified rules for building all applications
Version 1.7 - 23 May 2005
- Added support to use BSD style hashes in matching modes
- Fixed support for Hashkeeper files that have directory information.
Matt Kucenski helped to track this down.
- While fixing Hashkeeper support, improved support for other hash
file formats and generalized the code in files.c
- Fixed a bug for displaying the correct matching filename in -w mode
(ensured that extra characters are erased)
- Fixed cosmetic bug to avoid extra characters on time estimation mode
- Removed 32-bit number limitation from Win32 code, which allows
the display of file sizes larger than 4GB. (Note that time estimates
for files larger than 4GB is still not available on Windows.)
- Switched printing of large numbers to C99 style (e.g. PRIu64 et al)
- Simplified the operating systems defines in the Makefile. To wit:
- Removed -D__MACOSX for Mac. Instead check for __APPLE__, which
the compiler defines by default for us.
- Removed the -D__UNIX directive. Instead just check the __WIN32
is *not* defined whenever we put in *nix code.
Version 1.6 - 4 May 2005
- Added Whirlpool algorithm to make whirlpooldeep.
- Fixed bug to prevent trying to access 'busy' files. This happens when
trying to access system files on Win32 that are mounted via Samba.
Jeff Bryner helped to track this one down
- Added -w flag to display, in matching mode, which known hash matched
the input file
- Added -b flag to remove leading directory information from filenames
- Added -a and -A flags to add a single hash to
positive and negative matching, respectively
- Removed -t as a valid flag, breaking compatibility with md5sum
- Enabled control of FIFO pages via expert mode on Windows
- Combined all manpages into single md5deep man page
- Added error checking to hash table functions
- Removed algorithm specific code from hash table code
- Fixed __USE_BSD define in md5deep.h to avoid compiler warnings
- Fixed minor bug to clean up Windows version of man page
- Updated install process to use $(PREFIX) for installed location
- Removed macinstall option
Version 1.5 - 31 Aug 2004
- Added SHA-256 algorithm to make sha256deep. Special thanks to
Christophe Devine his SHA-256 implementation.
- Fixed typo in files.c for unsupport file type processing
- Fixed typo in sha1deep man page. (Had wrong reference in description.)
- Man pages are now installed mode 444 instead of 755. (i.e. non-executable)
- Cleaned up Makefile. Yes, again.
Version 1.4 - 16 Aug 2004
- Added relative paths mode
- Fixed printing of file sizes larger than 9GB for Mac, *BSD.
- Changed return values so that always returns 0 on success
positive integer on failure (1 = user error, 2 = internal error)
- Fixed memory leak on directory open failures in dig.c
- Fixed memory leak in directory release code in cycles.c
- Fixed potential information leak in md5.c (thanks to Derek Jones)
- Removed possible supression of critical error messages in cycles.c
- Fixed size computation for standard input
- Added support for Win32 logical drives (e.g. \\.\C:)
- Changed data structures in hash.c for ease of reading
- Added overflow counter for Win32 for files larger than 4GB
- Put Windows style newlines in copyright message
Version 1.3 - 24 Jun 2004
- Fixed Windows version to handle physical devices and UNC paths
(e.g. \\.\PhysicalDrive0 \\.\tape0 \\server\share\file etc)
- Removed halting on fatal errors except "Permission Denied"
- Added error checking for cycles created by symbolic links
- Added -z flag to print file sizes
- Added -0 flag to end lines with /0 instead of newlines
- Updated documentation regarding Cygwin and Win32 compilation
- Cleaned up Makefile, fixed "make windows"
Version 1.2 - 16 Apr 2004
- Added sha1deep to compute SHA-1 hashes
- Abstracted hash functions to allow other algorithms to be inserted
- Windows version now generates output with line feeds AND carriage returns
- Fixed printing of error messages for positive and negative matching together
- Cleaned up display for matching of standard input
Version 1.1 - 25 Mar 2004
- Fixed processing of standard input on Windows
- Fixed cosmetic errors with time estimation to now produce a fixed length
output and avoid spanning multiple lines
Version 1.0 - 15 Mar 2004
(better late than never!)
- Moved hierarchy traversal code into separate file, dig.c
- Now able to handle symbolic links properly
- If no input files are given, uses standard input
- Added file read error handling (display an error message, pad missing data
with zeros and continue execution).
- Added expert mode; allows user to choose which and only which types of
files are processed
- Added -X and -M to print hashes as well as matches
- Errors in files of known hashes are now treated an non-fatal
- When estimating completion time, print the filename being processed
- Corrected NSRL import code
- Cleaned up time estimation calculation
- Fixed block device time estimation for *BSD
- Switched from unsigned long long to off_t type
- Fixed duplicate slashes in filenames from root directory (e.g. //usr/src)
- Fixed install process. Generally this meant removing flags from
the install command.
- Added *BSD-specific includes
- Fixed minor data type issue for Gentoo linux
- Fixed typos in copyright and error messages
Version 0.16 - 7 Mar 2003
Added -x flag for negative matching
Made the Makefile nicer
Added code for compatibility with FreeBSD, Solaris, and OS X.
Added support for symbolic links to files
Changed the rules for a valid plain hash such that it only needs to
be followed by one space instead of two
Version 0.15 - 5 Jan 2003
Added -m flag for matching support
Made the help message more helpful
** Changes in version 0.14 (2 Dec 2002)
* New Features
Added better checks for avoiding symbolic links on *nix
Added -V flag for copyright information
* Buf Fixes
Fixed time estimation for block devices on Linux
Program now identifies itself correctly in Windows error messages.
** Changes in version 0.13 (7 Nov 2002)
* New Features
Added -r and -e flags for recursion and time
estimation, respectively.
* Bug Fixes
Fixed Windows version to generate correct MD5 values.
(u_int_32 should have been unsigned long instead of long. Oops.)
** Changes in version 0.12 (1 Nov 2002)
* New Features
First (internally) published version
Added -b and -t switches for compability with md5sum
Cleaned up README and man page
* Bug Fixes
Removed Linux specific code