Entries dated after 2024-04-26 are generated from the public Git history; bracketed commit IDs identify each changeset.

2026-08-17  Simson L. Garfinkel  <simsong@acm.org>

	* [dc87bb61] dedup mode is now --dedupe-mode, with default 2

2026-08-17  Simson L. Garfinkel  <simsong@acm.org>

	* [0ba99351] dedup mode is now --dedupe-mode, with default 2

2026-08-17  Simson L. Garfinkel  <simsong@acm.org>

	* [187c361f] updated AUTHORS

2026-08-16  Simson L. Garfinkel  <simsong@acm.org>

	* [13322831] Merge pull request #685 from simsong/fix-git-commit-beta-4

2026-08-16  Codex AI Assistant  <simsong+codex@acm.org>

	* [bee3a564] Merge remote-tracking branch 'origin/main' into fix-git-commit-beta-4

2026-08-16  Codex AI Assistant  <simsong+codex@acm.org>

	* [ff7e0bf9] Merge tag 'v2.2.0beta3' into fix-git-commit-beta-4

2026-08-16  Simson L. Garfinkel  <simsong@acm.org>

	* [46ad815e] Merge pull request #683 from simsong/codex/issue-682-deduplication-switch

2026-08-16  Codex AI Assistant  <simsong+codex@acm.org>

	* [fa7c0133] Address beta4 review feedback

2026-08-16  Codex AI Assistant  <simsong+codex@acm.org>

	* [472df5e0] Add beta4 deduplication modes

2026-08-15  Codex AI Assistant  <simsong+codex@acm.org>

	* [6719bf93] fixed another GIT_COMMIT

2026-08-15  Codex AI Assistant  <simsong+codex@acm.org>

	* [e21c094d] Fix DFXML Git commit fallback for beta4

2026-08-14  Codex AI Assistant  <simsong+codex@acm.org>

	* [572af197] Fix duplicate scanner bypass semantics

2026-08-14  Codex AI Assistant  <simsong+codex@acm.org>

	* [7a02c17e] Make deduplication opt-in for beta3

2026-08-14  Simson L. Garfinkel  <simsong@acm.org>

	* [aa5b1365] Merge pull request #679 from simsong/codex/issue-678-threadpool-shutdown

2026-08-13  Codex AI Assistant  <simsong+codex@acm.org>

	* [cbc2cc99] Prepare v2.2.0beta2

2026-08-13  Codex AI Assistant  <simsong+codex@acm.org>

	* [6a2af6da] Fix thread pool shutdown synchronization

2026-08-11  Simson L. Garfinkel  <simsong@acm.org>

	* [586a75a3] Merge pull request #675 from simsong/v2.2.0beta1

2026-08-11  Codex AI Assistant  <simsong+codex@acm.org>

	* [9b1df929] Address release review feedback

2026-08-11  Codex AI Assistant  <simsong+codex@acm.org>

	* [7ed5ce96] Revert "Merge remote-tracking branch 'origin/copilot/turn-comments-into-issues' into v2.2.0beta1"

2026-08-11  Codex AI Assistant  <simsong+codex@acm.org>

	* [7cd5e88a] Merge remote-tracking branch 'origin/copilot/turn-comments-into-issues' into v2.2.0beta1

2026-08-11  Codex AI Assistant  <simsong+codex@acm.org>

	* [44915260] Merge remote-tracking branch 'origin/codex/issue-424-install-guide' into v2.2.0beta1

2026-08-11  Codex AI Assistant  <simsong+codex@acm.org>

	* [b40f8023] Merge remote-tracking branch 'origin/main' into v2.2.0beta1

2026-08-11  Simson L. Garfinkel  <simsong@acm.org>

	* [12de1837] Merge pull request #674 from simsong/codex/winpe-sbuf-range

2026-08-11  Codex AI Assistant  <simsong+codex@acm.org>

	* [906acc60] set version to 2.2.0beta1

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [0390de6d] Model truncated PE input in regression test

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [eec903fa] Guard winpe fixture mutations in tests

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [6ce0a3a6] Bound winpe hashes to short scanner buffers

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [62d3b006] Derive PE certificate directory in regression test

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [46cc6172] Avoid winpe carves beyond scanner buffers

2026-08-10  Simson L. Garfinkel  <simsong@acm.org>

	* [96387779] Merge pull request #673 from simsong/codex/issue-672-memory-display

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [5021379c] Stabilize process memory statistics

2026-08-10  Simson L. Garfinkel  <simsong@acm.org>

	* [ec6b96e0] Merge pull request #671 from simsong/codex/bootstrap-warning-cleanup

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [0102f249] Report process memory in progress display

2026-08-10  Codex AI Assistant  <simsong+codex@acm.org>

	* [d3a8fe72] Eliminate bootstrap portability warnings

2026-08-10  Simson L. Garfinkel  <simsong@acm.org>

	* [ac275dc5] Merge pull request #670 from simsong/codex/issue-238-scanner-offset-tests

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [61b50268] Require top-level forensic offset shifts

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [65b29e8f] Update Snap workflow for Node 24

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [8a0fd41f] Test scanner output positions at nonzero offsets

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [f69f9302] Merge pull request #668 from simsong/codex/issue-617-wifi-pcap-validation

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [01a68932] Merge remote-tracking branch 'origin/codex/issue-617-wifi-pcap-validation' into codex/issue-617-wifi-pcap-validation

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [8ff3754e] Merge remote-tracking branch 'origin/main' into codex/issue-617-wifi-pcap-validation

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [84f20a60] Distinguish short WiFi control headers

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [1f2c13b2] Merge pull request #660 from simsong/codex/release-snap-assets

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [f11f2595] Merge branch 'main' into codex/issue-617-wifi-pcap-validation

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [525ab7b5] Merge pull request #664 from simsong/codex/issue-225-bulk-diff-escapes

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [578833e8] Merge pull request #666 from simsong/codex/issue-159-docker-appliance

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [a952239b] Merge remote-tracking branch 'origin/main' into codex/issue-617-wifi-pcap-validation

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [9691322c] Validate carved IEEE 802.11 frames

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [8554e249] Merge pull request #661 from simsong/codex/coverity-correctness

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [a4c0f1af] Merge pull request #667 from simsong/doc-mingw-notes

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [56c6aa10] Merge branch 'main' into doc-mingw-notes

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [f884492b] Merge branch 'main' into codex/release-snap-assets

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [44634926] Merge branch 'main' into codex/issue-159-docker-appliance

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [b457bb71] Merge pull request #665 from simsong/codex/thread-safety-tsan

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [76ad3587] Merge pull request #662 from simsong/codex/coverity-performance

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [40d8e733] Merge branch 'main' into codex/issue-159-docker-appliance

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [61dc8e8f] Merge branch 'main' into codex/release-snap-assets

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [eba2af20] Merge branch 'main' into doc-mingw-notes

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [03a3b133] Merge pull request #663 from simsong/codex/fix-coverity-review

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [15d988e0] Pass release ref to reusable Snap build

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [a9947cd0] Address parser hardening review findings

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [dfe6a5dd] Address bulk diff review findings

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [219010b0] Define MinGW dependency target root

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [f4e90278] Reuse Snap build workflow for releases

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [53c395ac] Clarify Snap asset validation

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [94325529] Document Docker runtime cleanup

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [db53e984] Document parser hardening

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [68bb83e3] Fix MinGW documentation references

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [75d603cd] Run bulk diff regression with pytest

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [64f518ea] Preserve release asset checksums

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [ff29f929] Add release manager runbook

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [1f027d5d] Attach tested Snap packages to releases

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [35abfc96] Merge remote-tracking branch 'origin/main' into doc-mingw-notes

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [6b89caef] Merge remote-tracking branch 'origin/main' into codex/issue-159-docker-appliance

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [f0ed270d] Merge remote-tracking branch 'origin/main' into codex/fix-coverity-review

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [7dfe54d0] Merge remote-tracking branch 'origin/main' into codex/thread-safety-tsan

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [567d0a72] Merge remote-tracking branch 'origin/main' into codex/issue-225-bulk-diff-escapes

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [2602ca92] Merge remote-tracking branch 'origin/main' into codex/coverity-performance

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [8892ea7f] Merge remote-tracking branch 'origin/main' into codex/coverity-correctness

2026-08-09  Simson L. Garfinkel  <simsong@acm.org>

	* [a85f10c7] Merge pull request #659 from simsong/codex/release-2-2-executive-summary

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [6be5a914] Clarify GitHub release publication

2026-08-09  Codex AI Assistant  <simsong+codex@acm.org>

	* [45dcc640] Set v2.2.0alpha1 development version

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [2dc72ee9] Clarify 2.2 documentation terminology

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [2c17f6b7] Clarify 2.2 release summary and plugin support

2026-08-08  Simson L. Garfinkel  <simsong@acm.org>

	* [f6c69639] Merge pull request #657 from simsong/codex/issue-240-status-display

2026-08-08  Simson L. Garfinkel  <simsong@acm.org>

	* [2cdde50f] Merge branch 'main' into codex/issue-240-status-display

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [1fd044b5] Address progress display review feedback

2026-08-08  Simson L. Garfinkel  <simsong@acm.org>

	* [c8d04618] Merge pull request #656 from simsong/codex/issue-655-windows-e01

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [2e3eb8d5] Merge main into codex/issue-424-install-guide

2026-08-08  Simson L. Garfinkel  <simsong@acm.org>

	* [048c0f90] Potential fix for pull request finding

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [6b4f9997] Fix MinGW libewf build dependency

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [4ce22d49] Replace generic INSTALL instructions

2026-08-08  Simson L. Garfinkel  <simsong@acm.org>

	* [69cee854] Merge branch 'main' into codex/issue-655-windows-e01

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [66fbbafe] Improve progress memory display

2026-08-08  Codex AI Assistant  <simsong+codex@acm.org>

	* [65c1469e] Enable E01 support in Windows artifact

2026-08-07  Simson L. Garfinkel  <simsong@acm.org>

	* [e956bec1] Merge pull request #648 from simsong/release-aws-624

2026-08-07  Simson L. Garfinkel  <simsong@acm.org>

	* [b7570d40] Merge branch 'main' into release-aws-624

2026-08-07  Simson L. Garfinkel  <simsong@acm.org>

	* [d25c68df] Merge pull request #654 from simsong/codex/wiki-doc-migration

2026-08-06  Codex AI Assistant  <simsong+codex@acm.org>

	* [f2cb20f2] docs: begin wiki documentation migration

2026-08-06  Codex AI Assistant  <simsong+codex@acm.org>

	* [7f1ff5d2] Default AWS validation to default VPC subnet

2026-08-06  Codex AI Assistant  <simsong+codex@acm.org>

	* [0768ae75] Replace AWS release validation launcher

2026-08-06  Simson L. Garfinkel  <simsong@acm.org>

	* [f628c5f0] Merge pull request #647 from simsong/codex/issue-626-snap-package

2026-08-05  Simson L. Garfinkel  <simsong@acm.org>

	* [81ebb53b] Merge branch 'main' into release-aws-624

2026-08-05  Simson L. Garfinkel  <simsong@acm.org>

	* [e6e522e6] Merge pull request #652 from simsong/codex/manual-migration-scanner-api

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [e3499d71] Fix migration guide grammar

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [faf75ab3] Clarify scanner lifecycle diagrams

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [a38cff29] Document release migration and scanner lifecycle

2026-08-05  Simson L. Garfinkel  <simsong@acm.org>

	* [d6b3bd6b] Merge pull request #650 from simsong/doc-release-2.2-planning

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [6cbdc1dd] Render Windows raw paths literally

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [c7419cd5] Correct restored investigation prose

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [d39e7426] Clarify pull request CI scope

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [6790d31e] Polish restored worked examples

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [ee05663a] Make manual asset manifest portable

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [d040940e] Skip code CI for LaTeX-only workflow changes

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [4d9d9289] Correct worked example details

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [c1b6f984] Correct manual bibliography styling

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [c89eb227] Address final manual grammar findings

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [1900276d] Address suppressed manual review findings

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [e40be944] Address manual review and build drafts

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [2a4b8d94] Restore comprehensive 2.2 manuals

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [fb35f876] Merge remote-tracking branch 'origin/codex/issue-626-snap-package' into codex/issue-626-snap-package

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [21c75d64] Fix Snap packaging review findings

2026-08-05  Simson L. Garfinkel  <simsong@acm.org>

	* [615ef2d8] Merge branch 'main' into codex/issue-626-snap-package

2026-08-05  Simson L. Garfinkel  <simsong@acm.org>

	* [78ec89a9] Merge pull request #649 from simsong/release-rpm-623

2026-08-05  Codex AI Assistant  <simsong+codex@acm.org>

	* [6a4b94fc] Fail closed AWS large-image validation

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [18cb787c] Harden RPM release build gate

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [ef0a68c7] Run installed Snap through snap command

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [414f9a2f] Add reproducible RPM release builds

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [3078922b] Disable optional Lightgrep in Snap build

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [05c1e186] Fix core22 Snap runtime package

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [9286168e] Add AWS large-image release gate

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [cb3ed1c0] Gate Snap publication on configured credentials

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [4e78ae92] Add strict Snap package workflow

2026-08-04  Simson L. Garfinkel  <simsong@acm.org>

	* [6d2ee617] Merge pull request #645 from simsong/codex/rar-optional-tests

2026-08-04  Simson L. Garfinkel  <simsong@acm.org>

	* [febbd71a] Merge pull request #638 from simsong/fix-637-package-provenance

2026-08-04  Simson L. Garfinkel  <simsong@acm.org>

	* [f0026196] Merge branch 'main' into codex/rar-optional-tests

2026-08-04  Simson L. Garfinkel  <simsong@acm.org>

	* [b33bc02b] Merge pull request #640 from simsong/codex/update-pr-review-lifecycle

2026-08-04  Simson L. Garfinkel  <simsong@acm.org>

	* [8fe8de43] Merge pull request #644 from simsong/codex/retire-todo-ledgers

2026-08-04  Simson L. Garfinkel  <simsong@acm.org>

	* [ec309ddf] Merge pull request #639 from simsong/fix-636-release-permissions

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [22ddca59] Document periodic release follow-through

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [5daff3a7] Support out-of-tree Debian release builds

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [d064ab08] Name the Copilot-to-Ready lifecycle

2026-08-04  Codex AI Assistant  <simsong+codex@acm.org>

	* [02400967] Add Debian revision to quilt packages

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [b53cccae] Preserve artifact access in release publishing

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [188d0143] Honor explicit RAR enablement

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [88f6f422] Preserve Debian package artifacts

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [672cc3e3] Handle RAR-disabled test builds

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [3738b45f] Retire stale source TODO ledgers

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [f9aa85a3] Document Copilot review lifecycle

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [ecc496e3] Harden Debian release package gating

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [3ec2b504] Scope draft release write permission

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [ff341aa1] Preserve Debian source package provenance

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [ba99f002] Merge pull request #637 from simsong/release-debian-622

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [a6e4d289] Merge branch 'main' into release-debian-622

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [8256e16a] Merge pull request #636 from simsong/release-automation-621

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [9a99a905] Fix release-deb to extract artifacts to RELEASE_ARTIFACT_DIR

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [2de8b11c] Potential fix for pull request finding

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [438e8511] Potential fix for pull request finding

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [e8957e74] Potential fix for pull request finding

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [1e0ac97a] Merge branch 'main' into release-debian-622

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [896f3b58] Merge branch 'main' into release-automation-621

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [952700ab] Merge pull request #635 from simsong/fix-license-attribution-628

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [f6850dee] Merge pull request #634 from simsong/doc-release-2.2-planning

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [a518bdd8] Merge pull request #633 from simsong/doc-man-copilot-fixes

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [f0c3e233] Potential fix for pull request finding

2026-08-03  Simson L. Garfinkel  <simsong@acm.org>

	* [5c42922e] Merge pull request #625 from simsong/dev-release

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [7fbeff05] Add Debian release package build

2026-08-03  Codex AI Assistant  <simsong+codex@acm.org>

	* [3ea71a98] Automate draft GitHub release assembly

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [81d01c23] Correct license attribution metadata

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [da822b15] Move technical-debt audit to release planning

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [33c141c6] Correct path-printer man page options

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [bc2b992b] Merge pull request #630 from simsong/doc-man

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [3d0b1f91] Merge branch 'dev-release' into doc-man

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [adf0c6f8] Merge pull request #628 from simsong/codex/gpl-license

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [c98248d4] Merge pull request #629 from simsong/doc-fix-release-notes

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [0d819a83] Merge branch 'dev-release' into doc-fix-release-notes

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [2d2df8dd] Remove obsolete performance notes

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [fcce808e] Rename and update MinGW notes

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [fed5755d] Update man page for bulk_extractor 2.2

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [b7326e09] Remove obsolete HTML overview

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [61773d9e] Consolidate historical roadmaps into release notes

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [9c27bc51] Clarify GPL licensing after NPS

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [d79d91bf] Harden release preparation workflow

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [e2735214] Document distribution source-package submissions

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [f4b20252] Skip Debian CI job for draft pull requests

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [b52aff25] Merge current main into dev-release

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [cb7bc274] Merge origin/main into dev-release

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [0b21e6e2] Merge pull request #612 from simsong/codex/issue-376-stack-protector

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [f1cccb54] Isolate release orchestration in a script

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [e1e6e557] Add release procedure and automation gates

2026-08-02  copilot-swe-agent[bot]  <198982749+Copilot@users.noreply.github.com>

	* [3e8cff6d] doc: update RELEASE_NOTES for email boundary fixes

2026-08-02  copilot-swe-agent[bot]  <198982749+Copilot@users.noreply.github.com>

	* [62ea3a2c] Fix ASCII email trailing context regression and add end-of-sentence test

2026-08-02  copilot-swe-agent[bot]  <198982749+Copilot@users.noreply.github.com>

	* [d85e45ff] Fix review-comment bugs from PRs #559, #562, #583, #593

2026-08-02  copilot-swe-agent[bot]  <198982749+Copilot@users.noreply.github.com>

	* [f7407c59] Initial plan

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [e02264af] Merge pull request #614 from simsong/codex/release-copilot-audit

2026-08-02  copilot-swe-agent[bot]  <198982749+Copilot@users.noreply.github.com>

	* [a8739974] Fix stack-protector probes to use warning-free trivial program body

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [e074e6db] Address missed release Copilot findings

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [65adade7] Merge pull request #613 from simsong/codex/copilot-thread-reply-policy

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [58543daf] Skip build workflows for documentation-only PRs

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [df96d523] Document Copilot fix thread replies

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [810d2ad0] Merge branch 'main' into codex/issue-376-stack-protector

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [ddfd5cb3] Merge pull request #606 from simsong/codex/thread-safety-tsan

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [c9c02b88] Enable basic compiler stack protection

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [45505f2c] Handle ThreadSanitizer test configuration

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [d0e6483a] Fix thread pool worker shutdown synchronization

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [7fcf5c9e] Merge pull request #602 from simsong/codex/fix-rar-ppm-copystring-bounds

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [56e988ad] Merge branch 'main' into codex/fix-rar-ppm-copystring-bounds

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [057c075a] Merge pull request #610 from simsong/codex/issue-319-restart-status

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [508073cb] Merge pull request #609 from simsong/codex/issue-246-remove-base16-lg

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [b48b2366] Merge pull request #604 from simsong/codex/issue-586-tld-support

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [70e49b53] Merge branch 'main' into codex/fix-rar-ppm-copystring-bounds

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [2c2406bb] Merge branch 'main' into codex/issue-586-tld-support

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [0dde2df5] Merge branch 'main' into codex/issue-246-remove-base16-lg

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [dc2db2ad] Join workers before scanner set destruction

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [1347e18f] Merge branch 'main' into codex/issue-319-restart-status

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [d9432024] Remove stale Lightgrep Base16 scanner

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [349d953e] Merge pull request #608 from simsong/codex/fix-coverity-review

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [ef1dc1cd] Merge pull request #607 from simsong/codex/issue-159-docker-appliance

2026-08-02  Simson L. Garfinkel  <simsong@acm.org>

	* [375a0eef] Merge pull request #603 from simsong/codex/fix-scoped-environment-werror

2026-08-02  Codex AI Assistant  <simsong+codex@acm.org>

	* [41cb7409] Trim unused PCAP runtime library

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [52f8c93c] Stabilize ThreadSanitizer pool test

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [39ccf517] Keep Codecov coverage informational

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [4e48f2a3] Harden truncated hibernation headers

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [681adede] Accept punycode email TLDs

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [190b3407] Merge pull request #605 from simsong/codex/coverity-new-2026

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [216093d8] Include Winsock before Windows headers

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [c3abc4e5] Normalize legacy escapes in bulk diff

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [ae6437b8] Initialize RAR DBCS mode

2026-08-01  Simson Garfinkel  <simsong@acm.org>

	* [9fc1a13b] Add ThreadSanitizer thread-pool test

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [d381489a] Add container image for regular scans

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [85873aff] Accept current email TLDs

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [dcd39c05] Fix Coverity 2026 parser findings

2026-08-01  Codex AI Assistant  <simsong+codex@acm.org>

	* [4fe2cc56] Fix warning-fatal cross-platform builds

2026-08-01  Simson Garfinkel  <simsong@acm.org>

	* [e53d9643] Merge branch 'main' of github-codex:simsong/bulk_extractor into codex/pr602-warning-clean

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [2ce3fb44] Initialize scoped environment state

2026-08-01  Simson Garfinkel  <simsong@acm.org>

	* [b5df127e] Make C++ warnings fatal

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [f99a0c2c] Report restart recovery status

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [45b6f0d7] Merge pull request #597 from simsong/codex/issue-202-restart-self-test

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [fa73711f] Merge branch 'main' into codex/issue-202-restart-self-test

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [9bec6d91] Merge branch 'main' into codex/fix-rar-ppm-copystring-bounds

2026-08-01  Simson Garfinkel  <simsong@acm.org>

	* [e3992892] Fix RAR Coverity bounds findings

2026-08-01  Simson Garfinkel  <simsong@acm.org>

	* [730cdfb6] Avoid unnecessary Coverity-reported copies

2026-08-01  Simson Garfinkel  <simsong@acm.org>

	* [8417c285] Fix Coverity parser and bounds findings

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [5bfe87b2] Merge pull request #599 from simsong/codex/issue-403-debug-options

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [3db59415] Report retired numeric debug options clearly

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [ef1cdcee] Strengthen RAR PPM bounds regression

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [b1d357f1] Merge pull request #600 from simsong/codex/copilot-review-instructions

2026-08-01  copilot-swe-agent[bot]  <198982749+Copilot@users.noreply.github.com>

	* [0c5d9589] Merge main into codex/issue-202-restart-self-test

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [8a4dc691] Merge pull request #598 from simsong/codex/issue-244-dfxml-schema

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [33af249b] Merge pull request #596 from simsong/codex/issue-264-carve-mode-docs

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [4b175fbc] Merge branch 'main' into codex/issue-202-restart-self-test

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [66f1540a] Merge branch 'main' into codex/issue-403-debug-options

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [dab0f0a3] Merge branch 'main' into codex/fix-rar-ppm-copystring-bounds

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [26af74b4] Document CVE-2026-24857 fix

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [dce29151] Fix deterministic DFXML schema validation

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [a5d15cad] Bound RAR PPM dictionary copies

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [d125951e] Merge pull request #594 from simsong/codex/issue-212-rar-jpegs

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [2fcb390c] Merge branch 'main' into codex/issue-212-rar-jpegs

2026-08-01  Simson L. Garfinkel  <simsong@acm.org>

	* [29c8743f] Merge pull request #595 from simsong/codex/issue-311-window-resize

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [4ddb9d31] Make restart crash hook thread-safe

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [b7e85403] Bound RAR relative seek arithmetic

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [4b60ad3e] Correct carving recorder documentation

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [40fc2f17] Verify Copilot review requests

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [b5aec96d] Retire obsolete numeric debug mask

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [e4d71415] Preserve restart skipping of interrupted work

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [c34c2d17] Validate report DFXML against bundled schema

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [7280166e] Test and repair interrupted-run restart

2026-08-01  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [7aac558d] Document carve mode behavior

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [6e7b8237] Adapt progress display to Windows resize

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [3f9d180f] Merge branch 'main' into codex/issue-212-rar-jpegs

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [8e832e00] Merge pull request #592 from simsong/codex/issue-249-findopts

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [a3d0032d] Merge pull request #593 from simsong/codex/issue-585-email-lengths

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [c1746a3a] Merge pull request #588 from simsong/codex/issue-258-raw-devices

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [54912f87] Recover all members from RAR archives

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [fc57594c] Avoid redundant raw-device EOF read

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [df54335b] Bound email local parts and domains independently

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [63810a15] Add scanner configuration isolation regression

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [82de2a4e] Merge branch 'main' into codex/issue-258-raw-devices

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [3a76152e] Merge pull request #587 from simsong/codex/issue-483-find-case-sensitive

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [903a4f87] Merge branch 'main' into codex/issue-258-raw-devices

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [a3f16806] Merge pull request #591 from simsong/codex/issue-49-pdf-email-regression

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [be01d740] Complete expected Windows exit-code checks

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [7797343e] Show Windows raw-device forms in help

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [d1d7bdc0] Make Windows raw-device help check platform-neutral

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [ca933d4a] Normalize Windows drive volumes correctly

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [ae748464] Fix Windows drive-root diagnostic build

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [9a1c7104] Merge remote-tracking branch 'origin/codex/issue-258-raw-devices' into codex/issue-258-raw-devices

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [ace5d5e6] Merge remote-tracking branch 'origin/codex/issue-258-raw-devices' into codex/issue-258-raw-devices

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [e99cd887] Clarify Windows raw-volume input

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [7dce5fcf] Test Word PDF email extraction

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [d4f2a728] Merge branch 'main' into codex/issue-258-raw-devices

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [05d4f029] Merge pull request #589 from simsong/codex/project-maintenance-release-notes

2026-07-31  Simson L. Garfinkel  <simsong@acm.org>

	* [bd10e14b] Merge pull request #590 from simsong/codex/issue-242-jpeg-carve-limits

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [37ac81f9] Honor JPEG recorder carve limits

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [c049dff2] Allow recognized Windows raw devices at startup

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [30c35d6f] Use a valid FAT32 volume label in raw-device test

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [1c87e23d] Use a valid FAT32 size in Windows raw-device test

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [e071ad44] Use a valid FAT32 size in Windows raw-device test

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [4d9afe1d] Document contributor review policy and ignore build outputs

2026-07-31  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [5e9eb2b8] Harden Windows raw-device CI setup

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [d04ec197] Add case-sensitive find option

2026-07-30  Simson Garfinkel  <simsong@acm.org>

	* [67d7e16c] Merge remote-tracking branch 'origin/main' into codex/issue-258-raw-devices

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [0305d60a] Support Windows raw device input

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [e102a54d] Merge pull request #584 from simsong/codex/fix-duplicate-bypass-review

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [788e29a3] Exercise duplicate-bypass diagnostic

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [4e497f22] Merge pull request #581 from simsong/codex/issue-239-zap-directories

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [ae382912] Merge pull request #575 from simsong/codex/issue-488-logging-foundation

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [14d4e004] Merge pull request #583 from simsong/codex/issue-380-context-stop-list-test

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [627b3ca6] Merge pull request #582 from simsong/codex/issue-336-zip-carved-dir

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [b81e7731] Potential fix for pull request finding

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [f2b553a0] Harden duplicate-sbuf diagnostics

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [3dc57edb] Test context-sensitive stop lists

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [c15510fb] Require release-note updates

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [4fde5c55] Close logging test case

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [9a5b1b37] Use zip_carved output directory

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [1d1cedd0] Remove nested output directories with -Z

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [d7241cfa] Merge pull request #580 from simsong/codex/remove-dead-mt-test

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [fa912b08] Merge branch 'main' into codex/remove-dead-mt-test

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [46adde32] Merge branch 'main' into codex/issue-488-logging-foundation

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [f5223309] Merge pull request #576 from simsong/codex/reapply-o3-warning-stderr

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [b3848760] Merge pull request #578 from simsong/codex/issue-310-duplicate-bypass

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [b616e60b] Merge pull request #579 from simsong/codex/release-notes-recent-closures

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [b37253c2] Remove disabled scanner set test

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [f8d269c0] Refresh release notes for recent closures

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [99ee2ef8] Merge pull request #577 from simsong/codex/fix-xmllint-path-quoting

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [a63d3c37] Bypass duplicate sbuf scanner fan-out

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [432ebe2b] Exclude vendored third-party code from coverage

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [15ea2dcd] Quote xmllint test paths

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [bca939e5] Send O3 warning to diagnostic stream

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [540d947a] Add diagnostic logging foundation

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [1e9ecfd9] Merge pull request #574 from simsong/codex/tighten-windows-ip-assertion

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [e0e3ee74] Tighten Windows IP regression assertion

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [7a89aa70] Merge pull request #571 from simsong/codex/issue-566-cpp-cleanups

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [c71c9c57] Merge pull request #564 from simsong/codex/issue-349-optimization-warning

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [ba4ece78] Merge pull request #573 from simsong/codex/issue-388-windows-net

2026-07-30  Simson L. Garfinkel  <simsong@acm.org>

	* [c8c13e1b] Merge pull request #572 from simsong/codex/document-debian-ci-scope-codex

2026-07-30  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [8840480a] Fix Windows IP address formatting

2026-07-29  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [592ff862] Clean up C++ initialization warnings

2026-07-29  Simson L. Garfinkel  <simsong@acm.org>

	* [a92823f6] Merge pull request #567 from simsong/copilot/fix-with-copilot

2026-07-29  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [80ae10bb] Document Debian CI scope

2026-07-28  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [25eaffea] Gate optional-dependency end-to-end test paths

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [b08f4ab3] Merge pull request #563 from simsong/codex/issue-363-big-endian-utmp

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [378e5980] Merge branch 'main' into codex/issue-363-big-endian-utmp

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [3131b7a8] Merge pull request #568 from simsong/codex/issue-69-url-html-entity

2026-07-28  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [8958b420] Exclude HTML quote entities from URLs

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [cac8cf40] Merge pull request #565 from simsong/codex/issue-452-debian-build

2026-07-28  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [13f38e1d] Test builds in Debian Bookworm

2026-07-28  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [e3030c30] Warn when built without O3 optimization

2026-07-28  simsong-codex  <simsong-codex@users.noreply.github.com>

	* [c4967ff3] Support big-endian utmp records

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [bf719875] Merge pull request #561 from simsong/codex/issue-424-install-guide

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [8d91c752] Replace generic INSTALL instructions

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [eb218ceb] Merge pull request #558 from simsong/codex/latex-manuals-pages

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [5ffc5c9f] Merge branch 'main' into codex/latex-manuals-pages

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [717bed45] Merge pull request #559 from simsong/codex/issue-515-wifi-pcap-pr

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [fe6155c8] Merge pull request #560 from simsong/codex/refresh-release-notes

2026-07-28  Simson L. Garfinkel  <simsong@acm.org>

	* [02a6bfb9] Merge pull request #562 from simsong/codex/issue-273-enable-all

2026-07-28  Simson Garfinkel  <simsong@acm.org>

	* [d36c86cd] Test -e all scanner selection

2026-07-28  Simson Garfinkel (Codex)  <simsong+codex@acm.org>

	* [b68d0020] Add bulk extractor Pages icon

2026-07-28  Codex AI Assistant  <simsong+codex@acm.org>

	* [bdbc20e0] Refresh 2.2.0 release notes

2026-07-28  Codex AI Assistant  <simsong+codex@acm.org>

	* [1a874ef6] Fix #515: preserve 802.11 PCAP frames

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [7664c3ed] Expand scanner development manual

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [b9a5d362] Merge pull request #557 from simsong/codex/latex-manuals-pages

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [ad1adb93] Add documentation landing page

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [adba52c7] Merge main and scope LaTeX builds

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [a7720e1f] Merge pull request #554 from simsong/codex/issue-351-ipv6

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [f043935c] Merge pull request #552 from simsong/codex/issue-356-stop-lists

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [109fb58f] Use captured IPv6 checksum fixtures

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [9331d400] Merge branch 'main' into codex/latex-manuals-pages

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [23cab0b4] Merge pull request #556 from simsong/codex/issue-460-rtti

2026-07-27  Codex  <simsong+codex@acm.org>

	* [bd5a8c92] Publish current LaTeX documentation on Pages

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [3fd2bcbf] Accept documented RTTI portrait dimensions

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [8308abb3] Restore Codecov baseline target

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [c840250f] Limit RTTI thumbnails by configurable dimensions

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [3c666991] Embed RTTI test vector in PPM image

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [07a8a450] Set Codecov coverage targets to 80 percent

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [b6dc7801] Merge pull request #553 from simsong/codex/issue-357-alert-lists

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [d1063763] Add RTTI Image8 test fixture

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [531a9a40] Own generated RTTI carve headers

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [447a84ea] Merge updated stop-list base

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [5207c665] Avoid redundant alert-list processing

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [5e227207] Protect alerts from stop-list diversion

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [779b117a] Add RawTherapee thumbnail carver

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [24641579] Fix IPv6 packet checksum validation

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [a0cacd65] Restore alert-list processing

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [c087e0f3] Merge pull request #551 from simsong/codex/community-guidelines

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [507cc1e4] Restore stop-list processing

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [b8cd88cb] Add community contribution guidelines

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [aeb9c3df] Merge pull request #549 from simsong/codex/issue-91-windows-unicode

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [5b7d8625] Merge branch 'main' into codex/issue-91-windows-unicode

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [5b03b624] Merge pull request #546 from simsong/codex/move-tech-debt-scoreboard

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [c7c2b5b2] Test Unicode filenames with Windows executable

2026-07-27  Codex AI Assistant  <simsong+codex@acm.org>

	* [bca5f539] Move technical debt scoreboard to GitHub Discussion

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [4d2bde1d] Merge pull request #540 from simsong/codex/honor-max-minute-wait

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [7f10f879] Merge pull request #538 from simsong/codex/fix-code-scanning-alerts

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [5028f016] Merge branch 'main' into codex/fix-code-scanning-alerts

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [b8710133] Merge branch 'main' into codex/honor-max-minute-wait

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [d0d846cd] Merge pull request #543 from simsong/codex/ubuntu-mingw-artifact

2026-07-27  Simson L. Garfinkel  <simsong@acm.org>

	* [645c9b6c] Merge pull request #544 from simsong/codex/release-notes-2.2.0

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [20a6b0e7] Merge remote-tracking branch 'origin/main' into codex/fix-code-scanning-alerts

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [2e0c8887] Make timed thread join honor deadline

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [dbb291da] Fix SQLite carve length

2026-07-26  Simson L. Garfinkel  <simsong@acm.org>

	* [05317a1d] Merge branch 'main' into codex/ubuntu-mingw-artifact

2026-07-26  Simson L. Garfinkel  <simsong@acm.org>

	* [3aeb7f22] Merge pull request #541 from simsong/codex/safe-directory-traversal

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [d8dfaa73] Add consolidated release notes

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [392d19c8] Print non-system MinGW DLL imports

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [a5876b48] Handle libtool static executable layout

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [0ff30af5] Force static MinGW dependency linking

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [9c316f4a] Upload the linked Windows executable

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [c5503017] Use Node 24 artifact upload action

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [6248a8a9] Add Ubuntu MinGW Windows artifact build

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [a9b1d93b] Fix PR checks and integrate Exiv2 testing

2026-07-26  Simson L. Garfinkel  <simsong@acm.org>

	* [91eabf59] Apply suggestions from code review

2026-07-26  Simson L. Garfinkel  <simsong@acm.org>

	* [70fcbe2c] Merge branch 'main' into codex/safe-directory-traversal

2026-07-26  Simson L. Garfinkel  <simsong@acm.org>

	* [a5ed827f] Merge pull request #539 from simsong/codex/limit-zip-filenames

2026-07-26  Simson L. Garfinkel  <simsong@acm.org>

	* [3aad8d21] Merge pull request #542 from simsong/codex/github-identity-guidance

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [f49a88e7] Document Codex GitHub identity

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [b7ad29f5] Limit ZIP carved filenames

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [2f65fff6] Make directory traversal deterministic and safe

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [7962aace] Honor max minute wait

2026-07-26  Codex AI Assistant  <simsong+codex@acm.org>

	* [3c292197] Fix code scanning alerts

2026-07-25  Simson L. Garfinkel  <simsong@acm.org>

	* [757f962b] Merge pull request #537 from simsong/codex/fix-msxml-sbuf-leak

2026-07-25  Codex AI Assistant  <simsong+codex@acm.org>

	* [d9a0e2d1] Fix MSXML sbuf leak handling

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [9167afee] Merge pull request #536 from simsong/codex/recent-work-report

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [a6b12fdf] Add recent work report and briefing

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [ce00e352] Merge pull request #532 from simsong/codex/issue-433-exiv2-config

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [c929c36d] Merge pull request #528 from simsong/codex/issue-505-plugin-loader

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [9a1ef84d] Install Exiv2 CI test prerequisites

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [a6316666] Print Exiv2 test failures in CI

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [6155b019] Merge branch 'main' into codex/issue-505-plugin-loader

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [6654dd3b] Merge pull request #535 from simsong/codex/issue-534-histogram-low-memory

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [65f70a7d] Install RE2 for Exiv2 CI job

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [3f2bd8c5] Test enabled Exiv2 scanner in CI

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [df724d4b] Update Codecov action runtime

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [8724817f] Fix histogram low-memory merge integration

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [be7ca5c1] Merge remote-tracking branch 'origin/main' into codex/issue-534-histogram-low-memory

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [a50ac6f3] Merge remote-tracking branch 'origin/main' into codex/issue-433-exiv2-config

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [c7d0198d] Merge branch 'main' into codex/issue-505-plugin-loader

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [603dfd66] Merge pull request #533 from simsong/codex/issue-370-banner

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [28dc7047] Preserve features after histogram allocation failures

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [6759cb9f] Merge pull request #531 from simsong/codex/issue-510-feature-recorder

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [846f976e] Restore loadable scanner modules

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [1db4b03d] Propagate banner file to feature recorders

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [af074629] Fix feature recorder banner and histogram contract

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [c6553c3a] Fix optional Exiv2 configuration

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [86e0ce62] Merge pull request #529 from simsong/codex/issue-522-scanner-api-docs

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [61f3c180] Merge pull request #530 from simsong/codex/issue-501-pcap-bounds

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [4157656e] Bound fallback PCAP reads

2026-07-21  Simson L. Garfinkel  <simsong@acm.org>

	* [cb7ab941] Merge branch 'main' into codex/issue-522-scanner-api-docs

2026-07-21  Codex AI Assistant  <simsong+codex@acm.org>

	* [c061d142] Add scanner lifecycle call diagrams

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [b06ad188] Document scanner API lifecycle

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [182707a1] Merge pull request #526 from simsong/codex/issue-420

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [01eb160b] Merge pull request #524 from simsong/codex/issue-504

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [1c94a2a1] Merge pull request #525 from simsong/codex/issue-480

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [6f3169f7] Merge pull request #527 from simsong/codex/issue-412

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [556f7f49] Cover explicit Outlook scanner selection

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [2bfd0b99] Remove resolved issue 420 from debt tracker

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [d87ee631] Honor disabled carve modes

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [c839af42] Repair sbuf file mapping ownership

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [71203c97] Merge pull request #518 from simsong/codex/issue-507-short-reads

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [93fc1cc2] Cover early end of EWF reads

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [87a23263] Test short EWF image reads

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [476e4fa6] Avoid signed short-read comparison

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [9bd7e5d7] Handle short image reads

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [5abbd866] Merge pull request #519 from simsong/codex/fix-image-reader-cleanup

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [df98876d] Merge pull request #520 from simsong/codex/version-develop

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [522f92ee] Let image reader clean up on disk errors

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [1a5037f6] Merge pull request #514 from simsong/codex/one-asan-per-pr

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [b4b02e81] Merge pull request #516 from simsong/codex/issue-509-packet-parsing

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [d6f43d60] Mark 2.2.0 development builds

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [13d34581] Let the image reader clean up on disk errors

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [bd41af07] Merge pull request #517 from simsong/codex/issue-508-e01-input

2026-07-20  Simson L. Garfinkel  <simsong@acm.org>

	* [a9dab2a2] Merge pull request #513 from simsong/codex/issue-503-notifier-shutdown

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [f8fc296e] Make E01 input selection safe

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [e7c227d1] Repair packet address parsing

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [91afc4d3] Own phase-one hash state

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [7084121c] Clean up email scanner on write failure

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [b5e39cba] Clean up phase-one write failures

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [c000ce62] Handle phase-one disk write failures

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [3300af90] Run AddressSanitizer once per pull request

2026-07-20  Codex AI Assistant  <simsong+codex@acm.org>

	* [f81331a2] Stop notifier on phase-one write failures

2026-07-19  Simson L. Garfinkel  <simsong@acm.org>

	* [1eeac2c5] Merge pull request #511 from simsong/codex/fix-sbuf-contract

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [5f381424] Fix sbuf bounds contract

2026-07-19  Simson L. Garfinkel  <simsong@acm.org>

	* [db71cd9a] Merge pull request #498 from simsong/dev-tech-debt

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [ec32e66b] Bump version to 2.2.0

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [dace0933] Finish worker shutdown before join returns

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [93682cbe] Fix thread pool shutdown deadlock

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [b72994d7] Make Codecov PR uploads deterministic

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [4da06b00] Make scheduled Coverity scans upload

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [2d6500b4] Repair release and action workflows

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [5070547f] Consolidate CI validation

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [dd0670a2] Mark imported dependencies as vendored

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [26c9272c] Fix integrated dependency CI build

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [822f3f15] Vendor all remaining dependencies

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [ea73c509] Restore external dependencies as submodules

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [1d02b4f2] Integrate be20 sources into bulk_extractor

2026-07-19  Codex AI Assistant  <simsong+codex@acm.org>

	* [24d0e107] Add technical debt remediation checklist

2026-07-18  Codex AI Assistant  <simsong+codex@acm.org>

	* [cd3f02a9] Document technical debt and repair bootstrap

2026-01-29  Simson L. Garfinkel  <simsong@acm.org>

	* [898db1b7] Revise security policy for clarity and reporting

2025-11-06  Simson L. Garfinkel  <simsong@acm.org>

	* [a6be88e7] Merge pull request #494 from kamwoods/new-vinscan

2025-11-06  Simson L. Garfinkel  <simsong@acm.org>

	* [b313ccc4] Merge pull request #495 from simsong/patch-maint

2025-11-06  Kam Woods  <kamwoods@gmail.com>

	* [19d0afdd] VIN histogram cleanup

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [b1ac17cc] get bugfix from be20_api

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [3e6c4db7] install lcov

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [81a1352d] move codecov to ubuntu

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [25bddab4] move codecov to ubuntu

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [2b53bb8d] upgrade be20_api

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [949d6389] hotfix

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [77cb946e] simplified ci-cd

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [b1691b79] new codecov action

2025-11-06  Kam Woods  <kamwoods@gmail.com>

	* [90fdd271] Code cleanup

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [50d162de] updated [[noreturn]] in API

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [ce39790d] simplified CI/CD to just run on macos-latest and ubuntu-latest

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [e953bfc1] removed a test we have not used in years

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [76196f5c] renamed file to be something sensible

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [68b5d1aa] new codecov

2025-11-06  Simson Garfinkel  <simsong@acm.org>

	* [82d939e2] updated be20_api

2025-11-06  Kam Woods  <kamwoods@gmail.com>

	* [91c78a0d] Resolved some issues identified by Copilot

2025-11-06  Simson L. Garfinkel  <simsong@acm.org>

	* [74d4a2f9] Merge pull request #492 from rick-gnous/main

2025-11-05  Kam Woods  <kamwoods@gmail.com>

	* [1f8fc286] Additional tests for VIN scanner

2025-11-05  Kam Woods  <kamwoods@gmail.com>

	* [c4f5e7e0] Unit tests for VIN scanner (scan_vin.cpp)

2025-10-30  Kam Woods  <kamwoods@gmail.com>

	* [5fb68737] Initial commit of Vehicle Identification Number (VIN) scanner New files associated with this scanner are:

2025-05-14  rick  <rick@gnous.eu>

	* [4edd5caa] add missing include

2024-12-20  Simson L. Garfinkel  <simsong@acm.org>

	* [659c1e03] Merge pull request #478 from simsong/simsong-patch-copyright

2024-12-20  Simson Garfinkel  <simsong@acm.org>

	* [1da3c267] Merge branch 'main' into simsong-patch-copyright

2024-12-17  Simson L. Garfinkel  <simsong@acm.org>

	* [b42e4127] Merge pull request #482 from h-ssh/main

2024-12-17  h-ssh  <57681015+h-ssh@users.noreply.github.com>

	* [0697d7ca] Update identify_filenames.py

2024-12-14  Simson L. Garfinkel  <simsong@acm.org>

	* [b0a498c5] Merge pull request #479 from simsong/simsong-patch-upload-artifact

2024-12-11  Simson L. Garfinkel  <simsong@acm.org>

	* [6c8bdfb9] Update continuous-integration-pip.yml

2024-12-11  Simson L. Garfinkel  <simsong@acm.org>

	* [cd1d6e57] Update LICENSE.md

2024-04-27  Simson L. Garfinkel  <simsong@acm.org>

	* [b2279ce0] Merge pull request #470 from simsong/dev-hotfix-nist-cfreds

2024-04-27  Simson Garfinkel  <simsong@acm.org>

	* [46f445f7] update help for scanner carving mode


2024-04-26 Simson Garfinkel <simsong@acm.org>
	* renamed jpeg_carved feature recorder to jpeg, so that the jpeg carve mode can be set with -S jpeg_carve_mode=2, rather than -S jpeg_carved_carve_mode=2, which was confusing.

2023-04-15 Simson Garfinkel <simsong@acm.org>
	* fixed typo in src/scan_aes.cpp that caused buffer overrun error
	* Updated to 2.0.5

2023-04-15 Simson Garfinkel <simsong@acm.org>
	* Updated to 2.0.4

2023-04-07 Simson Garfinkel <simsong@acm.org>
	* Updated to 2.0.3
	* Created distribution

2023-02-25 Simson Garfinkel <simsong@acm.org>
	* Compiles on Fedora 36 for windows
	* Updated to 2.0.2

2021-10-18 Simson Garfinkel
	* Removed plugins directory
	* Updated to 2.0.0-beta1

2020-06-20 simson garfinkel
	* Removed Java GUI

2020-06-14  fedora Cloud User  <fedora@ip-172-30-4-244.ec2.internal>

	* src/threadpool.cpp: numCPU() now simply calls std::thread::hardware_concurrency(). Perhaps more should be replaced over time, but it would be super-exciting to see the threadpool be able to spin of threads onto other servers, which was the original intent.

2020-06-13  Simson Garfinkel <simsong@acm.org>
	* updated license to MIT License, copyright Simson L. Garfinkel, consistent with the fact that this is no longer an official US Government work product.

2019-11-10  Simson Garfinkel  <simsong@acm.org>

	* tests/data_check.txt: updated offset for JAVA.EXE
	sadly, Data/WindowsXPPrefetch_JAVA.exe.pdf was removed because it seems that the file was not in the git repo.

	* src/scan_wordlist.cpp (scan_wordlist): changed sbuf.buf[i] to sbuf.get8u(i) to eliminate crash.
	(scan_wordlist): cleaned up state machine. (The above fix made it clear there was a state machine error.)

	* configure.ac: increased version number to 1.6.0 to celebrate the new scanners

	* src/scan_utmp.cpp: added scanner

	* src/scan_ntfsmft.cpp: added scanner

	* src/scan_ntfslogfile.cpp: added scanner

	* src/scan_ntfsindx.cpp: added scanner

	* src/scan_evtx.cpp: added scanner

2019-11-09 Overall <simsong@acm.org>

	* ChangeLog - cleaned up for current release. Incremented version number to 1.5.6

2014-08-20  Basic  <simsong@r4.ncr.nps.edu>

	* src/scan_pipe.cpp (scan_pipe): removed scan_pipe (since you don't want to fork with threads)

2014-08-12  Man Page  <simsong@mncrnpsedu.local>

	* doc/announce_1.5.2.md: annouced release 1.5.2

2014-08-03  Basic  <simsong@r4.ncr.nps.edu>

	* configure.ac: incremented version number

2014-07-18  Basic  <simsong@r4.ncr.nps.edu>

	* src/image_process.cpp: multi-split files was not working properly on Windows. Fixed

2014-07-17  Basic  <simsong@r4.ncr.nps.edu>

	* src/scan_rar.cpp (scan_rar): fixed typo. raw_find_volume becomes rar_find_volume

2014-05-17  Basic  <simsong@Dance.local>

	* src/scan_base16.flex (public): fixed decoder so that what is decoded is a child sbuf with a specific offset and length

2014-04-17  Basic  <simsong@r4.ncr.nps.edu>

	* src/be13_api/feature_recorder.cpp (hexval): fixed hexval(); it was not working properly for letters A through F. (I wrote this myself becuase it isn't present on mingw.)

2014-04-15  Basic  <simsong@r3.ncr.nps.edu>

	* src/be13_api/feature_recorder.h (f): several of the flags were the same, resulting in behavior that was incorrect.

2014-04-03  Basic  <simsong@Dance.local>

	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::unset_flag): changed clear_flag to unset_flag for consistency.

2014-04-02  Basic  <simsong@Dance.local>

	* bugfix: featurefiles for carved elements no longer include the name of the -o directory.

2014-02-25  Man Page  <simsong@mncrnpsedu.local>

	* src/scan_vcard.cpp (scan_vcard): removed     string myString;


2014-01-26  Basic  <simsong@Dance.local>

	* src/image_process.h (class process_dir): changed blocks() to max_blocks().

2014-01-10  Basic  <simsong@t193-251.demo.tuwien.ac.at>

	* src/be13_api/feature_recorder.cpp (feature_recorder::dump_histogram): moved regex into histogram_def so that it could be run in write(), rather than in post-processing.

2014-01-07  Basic  <simsong@Dance.local>

	* src/be13_api/feature_recorder.h (class feature_recorder): removed outdir and input_fname from feature_recorder, since they are in the feature_recorder_set

2014-01-02  Man Page  <simsong@mncrnpsedu.local>

	* src/be13_api/feature_recorder.h (class feature_recorder): carve no longer needs hasher passed in, becuase it is in the feature_recorder_set

	* src/be13_api/bulk_extractor_i.h (be13): hash_def moved from be13 namespace to feature_recorder_set

2013-12-13  Basic  <simsong@npsair.local>

	* src/image_process.h (class process_dir): implemented const correctness for a whole bunch of methods

	* src/be13_api/feature_recorder.h: removed using namespace std

2013-12-11  Basic  <simsong@npsair.local>

	* src/be13_api/feature_recorder_set.h (class feature_recorder_set): process_histograms changed to make_histograms, because that's what it is doing

	* src/be13_api/feature_recorder.h (class feature_recorder): make_histogram renamed to dump_histogram (because that's what it's doing; callback function added)

2013-11-13  Basic  <simsong@Mucha.local>

	* src/be13_api: USE_HISTOGRAMS is gone; everybody uses them now.

	* src/main.cpp (main): alert_list and stop_list are no longer global variables; they are now local to main() and added to the feature_recorder_set

	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::init): stop_list and alert_list are now part of the feature_recorder_set.

2013-11-11  Basic  <simsong@Mucha.local>

	* src/be13_api/Makefile.defs: moved word_and_context_list.* from bulk_extractor to be13_api

	* src/be13_api/feature_recorder.cpp (feature_recorder::feature_recorder): now has reference to feature_recorder_set

	* src/stand.cpp (main): replaced manual histogram generator in stand with call to phase_histogram in be13::plugin

2013-11-08  Basic  <simsong@Mucha.local>

	* src/be13_api/bulk_extractor_i.h (be13): added proper #ifdefs for each type

2013-11-05  Basic  <simsong@mucha.local.tld>

	* src/be13_api/feature_recorder_set.h (class feature_recorder_set): more functions were made virtual and more instance values were made private

2013-10-26  Basic  <simsong@Mucha.local>

	* src/be13_api/bulk_extractor_i.h: process_packet_info renamed to process_packet.

	* src/be13_api/sbuf.h (class sbuf_t): removed pos0_t from map_file because it can be inferred.

2013-09-27  Basic  <simsong@ncr.nps.edu>

	* python/bulk_extractor_reader.py (BulkReport): changed .imagefile() to .image_filename

	* python/identify_filenames.py: changed .imagefile to .image_filename
2013-10-22  Basic  <simsong@Mucha.local>

	* configure.ac: updated for C++ and MacOS Mavericks. Changed version to 1.4.2

2013-10-15  Basic  <simsong@Mucha.local>

	* src/main.cpp (main): removed BULK_EXTRACTOR_DEBUG.

2013-10-08  Basic  <simsong@npsair.local>

	* src/scan_net.cpp (p): removed packetset (no longer used)

	* src/be13_api/sbuf.h (stoi64): stoi() removed because it is part of stdc11

2013-10-08  Simson Garfinkel  <simsong@npsair.local>

	* src/be13_api/feature_recorder.h (f): removed tags

2013-10-07  Basic  <simsong@arlington-38-68-232-163.ncr.vt.edu>

	* src/be13_api/plugin.cpp (plugin::phase_histogram): cleaned up printing of newlines during histogram output printing.

	* src/be13_api/feature_recorder.cpp (feature_recorder::write): replace substr with in-place resize

2013-10-07  Basic  <simsong@npsair.local>

	* src/be13_api/feature_recorder.h (class feature_recorder): added MAINTHREAD() to set_flag(), becuase flags should only be set in the main thread. Also moved definition into feature_recorder.cpp, so that the in-memory histogram can be created if that flag is set.

2013-09-25  Basic  <simsong@Mucha.local>

	* src/bulk_extractor.cpp (main): added reporting of MD5 of disk image

2013-09-18  Simson Garfinkel  <simsong@npsair.local>

	* src/be13_api/feature_recorder.cpp (carve): valid_dosname has to be applied to ext, since ext may come with slashes in it.

2013-09-17  Simson Garfinkel  <simsong@npsair.local>

	* src/scan_bulk.cpp (dfrws2012_bulk_process_dump): removed DFRWS code.

2013-09-16  Simson Garfinkel  <simsong@npsair.local>

	* configure.ac: incremented version to 1.4.1-dev. Enabled LT_INIT support; removed RANLIB support.

2013-08-20  Basic  <simsong@Mucha.local>

	* src/scan_accts.flex (dob): DOBs, Fedex#s, and SSNs are now recorded to a feature recorder called 'pii.txt'.

2013-08-20  Man Page  <simsong@mncrnpsedu.local>

	* configure.ac: updated to beta6

	* src/be13_api/feature_recorder.cpp (feature_recorder::write_tag): disabled recorders no longer carve or have tag support.

2013-08-18  Man Page  <simsong@mncrnpsedu.local>

	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::create_name): added warning if feature recorder already exists.

	* src/bulk_extractor.cpp (main): removed explicit creation of alert recorder; no longer needed.

	* src/be13_api/feature_recorder_set.h (class feature_recorder_set): alert_recorder should not be a global static; it is now per feature_recorder_set.

2013-08-02  Basic  <simsong@Mucha.local>

	* src/be13_api/feature_recorder.cpp (feature_recorder::feature_recorder): removed carved_set that was keeping track of what was carved, as it is no longer necessary.

2013-08-01  Basic  <simsong@ncr.nps.edu>

	* src/scan_exif.cpp (scan_exif): jpeg carver feature recorder renamed to jpeg_carved.

2013-07-30  Basic  <simsong@ncr.nps.edu>

	* src/be13_api/plugin.cpp (info_scanners): now only prints -H info if it is provided by the scanner.
2013-07-29  Man Page  <simsong@mncrnpsedu.local>

	* src/scan_zip.cpp (scan_zip_component): now records general_purpose_bit_flags in XML. Bit 1 indicates that a component is encrypted
	(scan_zip_component): removed max_depth check; it's in plugin system

2013-07-26  Simson Garfinkel  <simsong@Mucha.local>

	* src/scan_net.cpp (scan_net): the -S variable carve_tcp is now implemented by the scan_net scanner to enable or disable TCP/IP memory structure carving. It is disabled by default.

2013-07-17  Basic  <simsong@sg1.ncr.nps.edu>

	* src/scan_windirs.cpp (scan_windirs): windirs now only runs at top level

	* src/scan_zip.cpp (scan_zip_component): now prints mtime in ISO8601 format
	(scan_zip_component): (previously mtime and ctime were wrong parts)

2013-07-16  Man Page  <simsong@mncrnpsedu.local>

	* src/scan_xor.cpp (scan_xor): will not XOR on either side of a ZIP. improved error handling

	* tests/regress.py: updated numbers for 1.4 release

2013-07-14  Basic  <simsong@Mucha.local>

	* configure.ac: updated to beta4

2013-07-11  Basic  <simsong@Mucha.local>

	* configure.ac: updated to beta3

	* src/scan_exif.cpp: fixed jpeg validation. carving now works.

2013-07-09  Simson Garfinkel  <simsong@sg1.ncr.nps.edu>

	* src/be13_api/plugin.cpp (GET_CONFIG): fixed bug in handling of uint8_t config values. They weren't getting set properly.. Ugh.

	* src/scan_xor.cpp (scan_xor): fixed error when XOR mask was specified as 0. Previously it recused; now it does not.

2013-07-02  Simson Garfinkel  <simsong@Mucha.local>

	* configure.ac: removed defines we aren't using anymore

2013-06-27  Basic  <simsong@Mucha.local>

	* src/be13_api/feature_recorder.h (class feature_recorder): as a result of popular demand, the UTF8 BOM and BOM EXPLAINATION have been removed from the feature files

2013-06-26  Basic  <simsong@Mucha.local>

	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::get_name): get_name() now returns NULL if feature recorder does not exist.

	* src/be13_api/feature_recorder.h (class feature_recorder): added context_window_before() and context_window_after().

	* src/bulk_extractor.cpp (main): replaced context_window with context_window_default.

2013-06-21  Man Page  <simsong@mncrnpsedu.local>

	* src/be13_api/bulk_extractor_i.h (class scanner_params): made more variables const.
	(class recursion_control_block): removed returnAfterFound(raf); now implemented with exceptions

2013-06-19  Basic  <simsong@Mucha.local>

	* src/bulk_extractor.cpp (]): fixed handling of LIB_EXPAT
	(b): restart logic did not compile. Now it is fixed.

	* configure.ac: fixed bug in which expat.h was not being checked for. use AC_CHECK_HEADERS() instead of AC_CHECK_HEADER(), as AC_CHECK_HEADER() requires that you add additional logic and AC_CHECK_HEADERS() automatically adds HAVE_HEADER_H.

2013-06-18  Basic  <simsong@Mucha.local>

	* src/scan_zip.cpp (scan_zip): removed name_len (not needed)

2013-06-17  Basic  <simsong@mucha.lan>

	* src/pyxpress.h: removed 'extern' designation

	* src/image_process.h (i): removed extern size_t opt_pagesize and extern size_t opt_margin. These are now phase1 configuration variables that are passed into the image_iterator.

2013-06-15  Basic  <simsong@Mucha.local>

	* src/scan_email.flex (Host): removed ip_written and ip_tested (always remove dead code)

2013-06-08  Basic  <simsong@Mucha.local>

	* src/be13_api/feature_recorder.cpp (feature_recorder::carve): changed carving so that carved files are stored with the filename of their location. Also, fixed check-then-access race error in feature_record.cpp
	(feature_recorder::carve): fixed race conditon in carving.

2013-05-28  Basic  <simsong@ncr.nps.edu>

	* feature_recorder_set.cpp - debug is now a static variable

	* src/image_process.h (image_process): debug is now a local variable for image_process.h

2013-05-22  Man Page  <simsong@mncrnpsedu.local>

	* src/be13_api/bulk_extractor_i.h (DEBUG_EXIT_EARLY): removed DEBUG_MALLOC and DEBUG_MALLOC_FAIL_FREQUENCY; now is handled with -S system

	* src/bulk_extractor.h: removed all global options; replaced with the be config system

	* src/pyxpress.c: added OpenSSL exemption per email from Matthieu Suiche

	* src/be13_api/sbuf.h: md5 support removed from sbuf

2013-05-21  Basic  <simsong@public-172-21-213-43.near.uiuc.edu>

	* src/be13_api/plugin.cpp (plugin::get_scanner_feature_file_names): extensive changes to make the global functions part of the be13::plugin class.

2013-05-20  Basic  <simsong@npsair.local>

	* src/bulk_extractor.cpp (main): -S now sets options; -s now sets sampling fraction.

2013-05-13  Simson Garfinkel  <simsong@Mucha.local>

	* src/bulk_extractor.cpp (usage): The -B option for specifying the blocksize for bulk data analysis has been removed. Instead specify it with -S block_size=NN.

	* src/be13_api/xml.cpp (xml::xml): Routine for opening an existing DFXML file is removed. Anyone who processes XML with regular expressions is in a state of sin.

2013-05-12  Basic  <simsong@Mucha.local>

	* src/be13_api/plugin.cpp: max_depth changed to 7
2013-05-11    <simsong@ncr.nps.edu>

	* src/scan_winpe.cpp (scan_winpe_verify): added verification of section names and DLL names to reject false positives.

2013-05-09    <simsong@ncr.nps.edu>

	* src/scan_net.cpp (p): carved ethernet packets are now properly recorded in ether.txt and tcp.txt

	* packet carving for disembodied ethernet packets fixed!  In 3ad21780, simsong was creating the hz structure but not setting it, so all carved packets had zero length

2013-05-08    <simsong@ncr.nps.edu>

	* src/be13_api/feature_recorder.cpp (banner_stamp): added \n to # BANNER FILE NOT PROVIDED

	* src/scan_elf.cpp (scan_elf_verify): fixed bug in scan_elf where XML was incorrect and being generated for invalid ELF headers.

2013-03-23  Simson Garfinkel  <simsong@Mucha.local>

	* src/bulk_extractor.cpp (main): -Z is no longer fatal if directory does not exist.
2013-03-23  Simson Garfinkel  <simsong@r2.ncr.nps.edu>

	* configure.ac: fixed AX_PTHREAD test to fail if pthreads are not found.

2013-03-22    <simsong@ncr.nps.edu>

	* src/be13_api/feature_recorder_set.cpp (get_name): renamed Mstats to Mlock. Added Mlock to get_name() (apparently this isn't thread safe?)

2013-01-29  Simson Garfinkel  <simsong@Mucha.local>

	* src/threadpool.h (class worker): removed pesky noreturn problem with threadpool.

2012-12-25  Simson Garfinkel  <simsong@Mucha.local>

	* python/identify_filenames.py (process_featurefile): added #'s to report printed at bottom
	(process_featurefile): added format

	* python/bulk_extractor_reader.py (is_feature_line): Now handles annotated feature files.
	(BulkReport.__init__.validate): added programmer notice for error of providing a feature file instead of a report directory

2012-11-25  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/be13_api/feature_recorder.cpp (feature_recorder::carve): fixed bad mode on mkdir

2012-11-22  Simson Garfinkel  <simsong@Mucha.local>

	* src/scan_aes.cpp (rotate): changed implementation to avoid casting error.

	* src/be13_api/bulk_extractor_i.h (class scanner_def): const scanner_t *changed to scanner_t for compliance with clang.

	* src/be13_api/sbuf.h (class sbuf_t): changed cast for clang

2012-11-21  Simson Garfinkel  <simsong@ubuntu>

	* src/utils.h: moved ishexnumber from bulk_extractor.h to utils.h

2012-11-14  Simson Garfinkel  <simsong@npsair.local>

	* src/plugin.cpp (process_sbuf): renamed process_extract to process_sbuf and put it here.

	* src/bulk_extractor.h: removed lowerstr() as it wasn't being used.

	* src/word_and_context_list.h: replaced multimap with tr1/unordered_map

2012-11-06  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/scan_email.flex (Host): maximum URL size increased to 384 bytes

2012-11-05  Simson Garfinkel  <simsong@npsair.local>

	* src/be13_api/feature_recorder_set.h (class feature_recorder_set): changed constructor so that ALERT_RECORDER is now created in bulk_extractor.cpp and not in the constructor. This improves code reuse in other programs

	* src/feature_recorder_set.cpp (feature_recorder_set::get_alert_recorder): changed ALERT_RECORDER to ALERT_RECORDER_NAME.

2012-10-27  Simson Garfinkel  <simsong@npsair.local>

	* src/sbuf_private.h (sbuf_t::get16i): fixed get16i return error.

2012-10-29  Simson Garfinkel  <simsong@air2.local>

	* src/Makefile.am: updated for be13_api directory

2012-10-22  Simson Garfinkel  <simsong@air2.local>

	* src/sbuf_private.h (sbuf_t::get16u): fixed typo in get16u().

2012-10-14  user  <user@localhost.localdomain>

	* src_win/Makefile.am (EXTRA_DIST): folded CONFIGURE_LIBRARIES into CONFIGURE_FC17.sh. Modified script so that tre gets built static under windows.

2012-10-09  Simson Garfinkel  <simsong@air2.local>

	* Makefile.am (release): removed AM_CFLAGS   = -Wall; AM_CPPFLAGS = -Wall ; AM_CXXFLAGS = -Wall as they didn't do anything



2012-09-29  Simson Garfinkel  <simsong@air2.local>

	* java_gui/BEViewer: added #!/bin/sh

2012-09-20  Simson Garfinkel  <simsong@air2.local>

	* configure.ac: version 1.3

	* src/xml.cpp (xml::add_DFXML_build_environment): now checks for TRE version

2012-09-16  Simson Garfinkel  <simsong@Mucha.local>

	* src/xml.cpp (xml::add_DFXML_execution_environment): replaced call to gmtime with gmtime_r

2012-09-13  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* configure.ac: fixed introduced bug with GET_DIAGNOSTIC_PRAGMA and exiv2

2012-09-13  Simson Garfinkel  <simsong@air2.local>

	* configure.ac (HAVE_ASM_CPUID): now choses -O3

2012-09-13  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/feature_recorder.cpp (feature_recorder::write_tag): #ifdef'ed out write_tag debug point

2012-09-12  Simson Garfinkel  <simsong@air2.local>

	* src/bulk_extractor.cpp (phase1): removed trapping of zero-length pages. Yes, pages may be zero length. Now it just iterates through them. Who knows, some scanner may want to count them.

2012-09-05  Simson Garfinkel  <simsong@air2>

	* src/exif_entry.cpp (add_user_comment_entry): corrected potential overflow error

2012-09-03  Simson Garfinkel  <simsong@air2.local>

	* src/scan_net.cpp (class packet_carver): no longer reports bad checksums unless option is set. (option is not set by default and there is no way to set it)

2012-09-02  Simson Garfinkel  <simsong@air2.local>

	* src/scan_email.flex (Host): added a cast for both sides of the for loop.

	* src/bulk_extractor.cpp (main): now reports overall performance in MBytes/sec and total number of email features found after each rune.

2012-09-03  Simson Garfinkel  <simsong@imac3.local>

	* src/xml.cpp (xml::add_DFXML_build_environment): added support for libtree in DFXML output.

2012-09-02  Simson Garfinkel  <simsong@FC17>

	* src/xml.cpp (add_rusage): now reports win32 usage information.

2012-09-01  Simson Garfinkel  <simsong@localhost.localdomain>

	* configure.ac: removed FlexLexer.h test, as we no longer use the c++ flex

2012-08-27  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/image_process.cpp (image_process_open):  now gives error if directory specified but opt_recurse not set

	* configure.ac: removed fts; imageprocess will now use dig.

2012-08-25  Simson Garfinkel  <simsong@FC17>

	* configure.ac: increased version number to 1.3b8

2012-08-22  Simson Garfinkel  <simsong@imac3.local>

	* src/bulk_extractor_i.h: phase2 now can flush report

	* src/scan_email.flex (Host): no longer reports ethernet addresses 00:00:00:00:00:00 and 00:11:22:33:44:55

2012-08-21  Simson Garfinkel  <simsong@imac3.local>

	* src/bulk_extractor.cpp: pagesize moved back to 16MiB

2012-08-21  Simson Garfinkel  <simsong@FC17>

	* src/scan_winprefetch.cpp (p): added initializations for declared variables.

2012-08-20  Simson Garfinkel  <simsong@FC17>

	* configure.ac: removed ,,[AC_MSG_WARN([libewf_handle_get_utf8_header_value_notes not found, no E01 Header Notes])]) warning, becuase I'm really tired of seeing it. If they don't have the right libewf they won't get the notes.

2012-08-12  Simson Garfinkel  <simsong@Mucha.local>

	* src/Makefile.am (bulk_extractor_SOURCES): removed regex_list.h; it's now in beregex.h

	* src/beregex.h: myregex.h renamed to beregex.h.
	(class beregex): bulk_extractor regular expressions are now pure regular expressions, and not globs

2012-08-11  Simson Garfinkel  <simsong@FC17>

	* src/base64_forensic.cpp (b64_pton_forensic): added initializers to avoid warnings.

2012-08-08  Simson Garfinkel  <simsong@imac3.local>

	* src/scan_bulk.cpp (sd_autocorrelation_cosine_variance): removed alloca, since it is bad.

2012-08-05  Simson Garfinkel  <simsong@Mucha.local>

	* python/Makefile.am (EXTRA_DIST): cda2.py removed  cda_test.py removed

2012-08-04  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* python/bulk_diff.py: minor changes to sort order and formatting; increased vesion number to 1.3

	* src/word_and_context_list.cpp (word_and_context_list::readfile): changed printout

2012-07-29  Simson Garfinkel  <simsong@FC17>

	* src/utils.cpp (get_filesize): changed pread64() to ::pread64 to avoid some weird linking problem that never showed up before.

	* src/cppmutex.h: added <string.h>, as strerror is defined there on Linux

	* configure.ac (HAVE_ASM_CPUID): now only adds -D_FORTIFY_SOURCE=2 if we are compiling with the optimizer

	* src/utils.cpp: renamed utils.c to be utils.cpp

	* src/utils.c: removed support for PRIVATE_REGEX

	* configure.ac (HAVE_REGEX_H): removed support for PRIVATE_REGEX

	* src_win/CONFIGURE_FC17.sh (MPKGS): now adds mingw64-libgnurx and mingw32-libgnurx

2012-07-29  Simson Garfinkel  <simsong@Mucha.local>

	* src/exif_entry.cpp (exif_entry::get_full_name): made invalid ifd type return that as a message, rather than assert(0)

2012-07-26  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/sbuf.h: added #define SBUF_TRACK to disable reference tracking (causing crash in scan_net)

2012-07-20  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/histogram.cpp (HistogramMaker::add): now catches utf8->utf16 and utf16->utf8 conversion exceptions when FLAG_LOWERCASE or FLAG_NUMERIC is specified.

2012-07-22  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/scan_find.cpp (scan_find): find now makes a histogram

2012-07-21  Simson Garfinkel  <simsong@Mucha.local>

	* src/sbuf.h (class sbuf_t): made sbuf_t() empty allocator private.
	(class sbuf_t): cleaned up code by adding some explicits, per "More Effective C++"

2012-07-17  Simson Garfinkel  <simsong@Mucha.local>

	* src/sbuf.cpp (sbuf_t::map_file): was not closing files when MMAP was not included.

	* src/bulk_extractor.cpp (phase1): added debug:exception to report.xml

2012-07-16  Simson Garfinkel  <simsong@Mucha.local>

	* configure.ac: increased version to 1.3b5

	* Makefile.am (EXTRA_DIST): changed from CONFIGURE_F17.sh to CONFIGURE_FC17.sh

2012-07-14  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/bulk_extractor.cpp: default pagesize changed to 4MiB; default margin size changed to 4MiB.

	* configure.ac: version number bumped to 1.3b4

2012-07-12  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/threadpool.cpp (worker::do_work): added threadid to debug:work_end (why wasn't it there?)

	* src/utils.c (gmtime_r): moved to utils.c
	(localtime_r): moved to utils.c

2012-07-07  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/scan_windirs.cpp (scan_ntfsdirs): scan_windirs now prints $NOFILENAME for no file name

2012-07-05  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/histogram.cpp: added UTF-8 escaping to histogram file.

2012-07-04  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/unicode_escape.cpp (validateOrEscapeUTF8): UTF-8 that expands to surrogate pairs is now also invalid UTF-8

	* src/threadpool.h (class threadpool): added thread_status vector

	* src/scan_json.cpp (scan_json): the json scanner now writes the MD5 hash of the feature as its context

2012-07-01  Simson Garfinkel  <simsong@ncr.nps.edu>

	* configure.ac: upgraded version number to 1.3b1-dev1

2012-06-23  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/Makefile.am (bulk_extractor_SOURCES): added TSK3 includes

	* COPYING: clarified copyright.

2012-06-15  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/scan_kml.cpp: Complete rewrite on KML scanner. Faster now.

	* src/scan_accts.flex: modified regular expressions, replaced [^0-9] with [^0-9a-z] so that a CCN or phone number can't be immediately prefixed with a letter.

2012-06-13  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/sbuf.h (class sbuf_t): fixed error when adding an size_t
	offset to an sbuf where the offset was larger than the pagesize.

2012-06-03  Simson Garfinkel  <simsong@Mucha.local>

	* src/bulk_extractor_i.h (class scanner_params): added phase_t as an additional quantifier to all scanner_params

	* src/scan_lift/linear_binary_svm.h (class LinearBinarySVM): added wt_max(), which is the maximum weights read.
	(class LinearBinarySVM): changed classifier numbers from signed to unsigned

2012-05-29  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/scan_lift/linear_binary_svm.cpp (LinearBinarySVM::clear): replaced REP(i,wt_capacity) weights[i]=0 with memset(weights,0,sizeof(weights[0])*wt_capacity);

	* configure.ac: increased version to 1.3-devel_005

2012-05-24  Bruce Allen  <bdallen@nps.edu>

	* ../branches/: Added and then removed testing branch
	../branches/1.2.x_Bruce, r9369 for testing scan_winprefetch on
	Windows.

2012-05-24  Bruce Allen  <bdallen@nps.edu>

	* ../branches/: Added ../branches/ directory to stage work on older
	revisions.  bulk_extractor V1.2.x is r8561.  bulk_extractor V1.2.0 is
	r8193.  Removed ../tags/1.2.x and ../tags/1.2.0.

2012-05-16  Simson Garfinkel  <simsong@Mucha.local>

	* src/feature_recorder.h (class feature_recorder): banner_stamp is no longer static, as we now want to put the name in the feature file.

	* src/scan_base16.flex (public): changed from case-insensitive to sensitive. Let's see if that gets rid of the junk.

2012-05-08  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/sbuf.h (class sbuf_t): get32i changed to get32u (because that's what it is)

2012-05-07  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/scan_zip.cpp (scan_zip): now only processes buffer in phase 1

	* src/scan_wordlist.cpp (scan_wordlist): now only processes buffer in phase 1

	* src/scan_winprefetch.cpp (scan_winprefetch): now only processes buffer in phase 1

	* src/scan_vcard.cpp (scan_vcard): now only processes buffer in phase 1

	* src/scan_pipe.cpp (scan_pipe): now only processes buffer in phase 1

	* src/scan_pdf.cpp (scan_pdf): now only processes buffer in phase 1

	* src/scan_net.cpp (scan_net): now only processes buffer in phase 1

	* src/scan_json.cpp (scan_json): now only processes buffer in phase 1

	* src/scan_hiberfile.cpp (scan_hiberfile): now only processes buffer in phase 1

	* src/scan_gzip.cpp (scan_gzip): now only processes buffer in phase 1

	* src/scan_gps.flex: now only processes buffer in phase 1

	* src/scan_exiv2.cpp (scan_exiv2): now only processes buffer in phase 1

	* src/scan_exif.cpp (scan_exif): now only processes buffer in phase 1

	* src/scan_email.flex (Host): now only processes buffer in phase 1

	* src/scan_base64.cpp (scan_base64): now only processes buffer in phase 1

	* src/scan_ascii85.cpp (scan_ascii84): now only processes buffer in phase 1

	* src/scan_aes.cpp (scan_aes): now only processes buffer in phase 1

	* src/scan_accts.flex (dob): now only processes scanner in phase1

2012-04-27  Simson Garfinkel  <simsong@Mucha.local>

	* src/bulk_extractor.cpp (validate_fn): usage now goes to stdout.

2012-04-25  Simson Garfinkel  <simsong@Mucha.local>

	* src/scan_email.flex (Host): ethernet "MAC" suppressed there is a : on either side

	* src/scan_accts.cpp (scan_accts): added author information.

2012-04-22  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/bulk_extractor.cpp (usage): usage now sorts scanners

2012-04-21  Simson Garfinkel  <simsong@imac3.home>

	* src/scan_exif.cpp: renamed from scan_be_exif.cpp

	* src/scan_exiv2.cpp: renamed from scan_exif.cpp

2012-04-20  Simson Garfinkel  <slgarfin@submit-0.local>

	* src/bulk_extractor.cpp: scan_be_exif now enabled by default.

2012-04-20  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: incremented to 1.3-devel_003

	* src/scan_exif.cpp (scan_exif): disabled by default now.

	* src/scan_be_exif.cpp (scan_be_exif): enabled by default.

2012-03-27  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/scan_base64.cpp: changed startup code to be called in Phase 1. (Why didn't I do that before?)

	* src/scan_winprefetch.cpp (class PrefetchDecoder): now stops if string has fewewr than 8 characters

2012-03-27  Simson Garfinkel  <simsong@imac3.home>

	* src/cppmutex.h: added stdlib.h

	* src/scan_headers.flex: updated scanner for years in 201x

2012-03-26  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: increased devel to 002

	* src/scan_zip.cpp (scan_zip): changed sanity check so that compr_size and uncompr_size need to be <0, not <=0.

2012-03-19  Simson Garfinkel  <simsong@imac3.home>

	* src/scan_accts.flex: YEAR now accepts dates in years 2010-2009

2012-03-12  Simson Garfinkel  <simsong@mncrnpsedu.local>

	* src/bulk_extractor_i.h (class scanner_params): moved #include <tr1/unordered_map> to bulk_extractor_i.h

2012-03-03  Simson Garfinkel  <simsong@imac3.home>

	* src/scan_winprefetch.cpp (PrefetchDecoder::identifyBuf): patches provided by Ketil Froyn and Luis Garcia fixes behavior under for Windows 7 Super Prefetch.

2012-02-22  Simson Garfinkel  <simsong@Mucha.local>

	* configure.ac: changed revision to 1.3-devel_001

2012-03-09  Simson Garfinkel  <simsong@Mucha.local>

	* src/threadpool.cpp (threadpool::win32_init): created for administrative simplification.

	* src/threadpool.h (class cppmutex): moved cppmutex to this file.

	* src/feature_recorder.h: replaced #include "cppmutex.h" with #include "threadpool.h"

2012-03-06  Simson Garfinkel  <simsong@Mucha.local>

	* src/xml.cpp (xml::close): removed dtd making

2012-03-05  Simson Garfinkel  <simsong@Mucha.local>

	* src/cppmutex.h: added cppmutex.h

	* src/feature_recorder.h (class feature_recorder): replaced pthread_mutex_t with cppmutex, a C++ cover class for mutexes.

	* src/bulk_extractor.cpp (phase1): added #ifdef HAVE_LOCALTIME_R to cover systems that do not have localtime_r.

	* src/aftimer.h (aftimer::eta_time): changed from 'when' to 't' for consistency.

2012-02-21  Simson Garfinkel  <simsong@Mucha.local>

	* src/scan_aes.cpp (scan_aes): added check -- if sp.buf.bufsize<WINDOW_SIZE, don't scan.

2012-02-15  Simson Garfinkel  <simsong@arlington-8-30-72-63.ncr.vt.edu>

	* python/Makefile.am (EXTRA_DIST): version 1.2.0 released.

2012-02-11  Simson Garfinkel  <simsong@imac3.home>

	* src/regex_list.h (class regex_list): removed globbing

2012-02-05  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/scan_zip.cpp (scan_zip): now detects decmopression bomb attack and changes mode of operation so that buffers are hashed prior to being decompressed and the same buffer will only be hashed just one.

2012-02-04  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/feature_recorder_set.cpp (scan_zip): alert_recorder is now in feature_recorder_set.

2012-02-03  Simson Garfinkel  <simsong@Mucha.local>

	* src/feature_recorder.cpp (feature_recorder::banner_stamp): banner_stamp moved to feature_recorder

	* src/bulk_extractor.h: opt_banner_file moved to feature_recorder

	* src/bulk_extractor.cpp (main): outdir now an instance variable

	* src/feature_recorder_set.h (class feature_recorder_set): outdir now an instance variable

	* src/feature_recorder_set.cpp (feature_recorder_set::feature_recorder_set): outdir now an instance variable

	* src/feature_recorder.h (class feature_recorder): outdir now an instance variables

	* src/feature_recorder.cpp (feature_recorder::feature_recorder): outdir now an instance variable

	* src/scan_net.cpp (class packet_carver): outdir now read from feature recorder.

	* src/scan_wordlist.cpp (wordlist_split_and_dedup): outdir now read from feature recorder.

	* src/MANY - outdir is no longer global.

2012-02-01  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/bulk_extractor.cpp (main): added -G to specify page size

2012-01-29  Simson Garfinkel  <simsong@imac3.home>

	* src/xml.h (class xml): added svn_version to DFXML output.

	* src/scan_net.cpp: now carries its own ipv6 implementation.

2012-01-27  Simson Garfinkel  <simsong@Mucha.local>

	* configure.ac: advanced version number to 1.2.0RC1
	GNUC_HAS_DIAGNOSTIC_PRAGMA now set in configure.ac

	* src/bulk_extractor.cpp (main): the -s (context-sensitive stop
	list) option is removed. The -r (alert list) and -w (stop list)
	will now take a list of regular expressions, a list of globs or
	feature files.

	* src/feature_recorder.cpp (feature_recorder::make_histogram): removed get_line_offset(); no longer needed

2012-01-20  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/scan_email.flex: eliminated an increment in LexerInput()
	validate_email now inline.
	find_domain_in_email now inline.
	find_domain_in_url now inline

2012-01-18  Simson Garfinkel  <simsong@imac3.home>

	* src/scan_aes.cpp (scan_aes): scan_aes now runs in 15% the time of the original version. It is now, therefore, enabled by default.

2012-01-16  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/feature_recorder_set.cpp (feature_recorder_set::dump_stats): seconds scanners in states changed to scanner_times

2012-01-13  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/bulk_extractor.h: removed gnuexif

	* src/bulk_extractor.cpp (scanners_builtin): removed gnuexif info.

	* src/scan_gnuexif.cpp: removed file.

	* src/xml.cpp (xml::add_DFXML_build_environment): removed gnuexif support.

	* configure.ac (HAVE_LIBEWF_H): removed gnuexif support.

2011-12-29  Simson Garfinkel  <simsong@Mucha.local>

	* configure.ac: removed check for libpcap because we don't actually use it.

	* src/scan_net.cpp: removed #include for libpcap because we didn't actually use it.

	* Makefile.am (EXTRA_DIST): added m4/ax_pthread.m4 to EXTRA_DIST.

2011-12-25  Simson Garfinkel  <simsong@Mucha.local>

	* src/scan_exif.cpp (scan_exif): removed md5hex_4k since the code was already in sbuf_t.

2011-12-20  Simson Garfinkel  <simsong@arlington-8-30-79-4.ncr.vt.edu>

	* src/sbuf.h (class sbuf_t): whoops. should have been assert(bufsize>=pagesize), not vice-versa
	(class pos0_t): stoi64() moved to pos0_t.

2011-12-18  Simson Garfinkel  <simsong@imac3.home>

	* src/sbuf.h (class sbuf_t): When we create a new sbuf with the + operator, we need to also add +i to the pos0.
	(class sbuf_t): + now asserts that bufsize cannot be smaller than pagesize.

	* src/scan_exif.cpp (md5hex_4k): Whoops. Should be hashing min of the pagesize and 4096, not max.

2011-12-14  Simson Garfinkel  <simsong@imac3.home>

	* src/xml.cpp: now works with older and newer versions of exiv2

2011-12-01  Simson Garfinkel  <simsong@imac3.home>

	* src/histogram.cpp (HistogramMaker::add): looks for \000 in utf16 strings converted to utf8 and erases them (We were getting them in histograms)

2011-11-26  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/scan_wordlist.cpp (wordlist_split_and_dedup): no longer adds zero-length words to wordlist

	* src/feature_recorder.cpp (feature_recorder::make_histogram): histograms no longer banner stamp or version stamp if there is no corresponding feature.

2011-11-25  Simson Garfinkel  <simsong@imac3.home>

	* src/scan_net.cpp (pcap_writepkt): changed file extension from .dmp to .pcap for packets

2011-11-23  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (phase1): added -Y  start-end notation in addition to -Y start notation.
	* src/bulk_extractor.cpp (phase1): added -A offset to add an offset.

	* src/feature_recorder.cpp (feature_recorder::write): added support for opt_offset_add to allow output to be shifted (for parallelizing across multiple systems.)

	* src/sbuf.h (class pos0_t): removed snprintf; now uses stringstream.
	(operator +): changed most functions to take const & rather than a new object.

	* src/feature_recorder.cpp (feature_recorder::write): now always writes out the second \t for the context, even if there is no context.

2011-11-21  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* configure.ac: advanced to beta9
	added AC_PROG_CC AC_PROG_CXX and AC_PROG_INSTALL

	* src/Makefile.am (.flex.o): FlexLexer.h moved to MyFlexLexer.h to support CentOS where an out-of-date flex is installed.

2011-11-16  Simson Garfinkel  <simsong@FC15>

	* src/bulk_extractor.cpp (process_path): fixed handling of /h and /r with -p option

2011-11-12  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: removed pcap.h tests becuase its not needed
	increased to beta4

2011-11-05  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/scan_email.flex (Host): now only writes domains>0.

	* src/scan_zip.cpp (scan_zip): zip components with no name are now given <NONAME>

	* src/scan_winprefetch.cpp (scan_winprefetch): modified to only write out prefect files with non-zero exec name

	* src/scan_net.cpp (scan_net): significant update --- I don't need libpcap to do packet carving!

2011-11-09  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* configure.ac: updated to beta3

2011-11-08  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/image_process.cpp (sbuf_alloc): added a new iterator method it->pos0() returns the pos0 of the sbuf to be allocated by it->sbuf_alloc()
	(sbuf_alloc): changed calloc to malloc for performance
	(process_aff::sbuf_alloc): now thorws bad_alloc if an exception is encountered
	(process_ewf::sbuf_alloc): now thorws bad_alloc
	(process_raw::sbuf_alloc): now thorws bad_alloc

2011-11-07  Simson Garfinkel  <simsong@alphonse-mucha>

	* src/bulk_extractor.cpp: removed scanner_enabled().

	* src/Makefile.am (bulk_extractor_SOURCES): removed checkpoint.h

	* src/bulk_extractor.cpp (main): checkpoint removed; restarting now done through dfxml file.
	(phase1): do_phase1 renamed phase1; just_phase1 renamed do_phase1. phase1 and phase2 flags removed. Now automatic.
	(main): -2 option removed

2011-11-04  Simson Garfinkel  <simsong@arlington-8-30-77-137.ncr.vt.edu>

	* src/image_process_fts.cpp (process_dir::process_dir): added E01 detection.

2011-11-04  Simson Garfinkel  <simsong@t.nitroba.org>

	* src/scan_email.flex (Host): fixed crashing bug on context extraction in MAKESTRING6.

	* configure.ac: fixed conforming/non-conforming test for strchr

2011-11-03  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp: added HTTP_EOL which is \r\n in Unix and Mac and

2011-10-19  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/histogram.cpp (HistogramMaker::looks_like_utf16): now recognizes both little-endian and big-endian UTF-16 strings and properly converts them.

	* regress.py (analyze): now enables all scanners including wordlist

	* python/bulk_extractor.py (BulkReport.open): openfile renamed open

2011-10-18  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/bulk_extractor.cpp (process_find_file): now ignores lines that begin with #

2011-10-17  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/scan_winprefetch.cpp (P): changed utf16_string to wstring (which is the standard).

	* src/scan_accts.flex: replaced unicode16_to_string with utf16to8

2011-10-16  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* configure.ac: increased version to 1.1.0_alpha3

2011-10-15  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/checkpoint.h (load): named and val no longer shadow values

2011-10-11  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/histogram.h (>): big surprise: it turns out that you should not subclass STL containers! Who knew? Well, a lot of people, apparently:
	http://stackoverflow.com/questions/4353203/thou-shalt-not-inherit-from-stdvector
	http://stackoverflow.com/questions/245475/how-do-i-create-a-generic-stdvector-destructor
	http://stackoverflow.com/questions/3601431/base-class-class-stdvector-has-a-non-virtual-destructor
	http://stackoverflow.com/questions/1647298/why-dont-stl-containers-have-virtual-destructors

	* src/threadpool.cpp (threadpool): modified so that master and worker are now references, rather than pointers.

2011-10-11  Simson Garfinkel  <simsong@alphonse-mucha>

	* configure.ac (HAVE_PTHREAD): added warnings for C++

	* src/base64_forensic.cpp: cleaned up prototypes.

2011-10-07  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* src/scan_aes.cpp (valid_aes256_schedule): updated off-by-one problem.
	(valid_aes192_schedule): updated off-by-one problem.
	(valid_aes128_schedule): updated off-by-one problem.

2011-09-29  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* configure.ac: updated version to 1.0.7; don't want anyone using 1.0.5

	* python/identify_filenames.py: updated for 0-fill files

	* configure.ac: updated version to 1.0.6; don't want anyone using 1.0.5

2011-09-29  System Administrator  <root@arlington-8-30-77-137.ncr.vt.edu>

	* src/sbuf.h (class sbuf_t): whoops! Fixed bug in find() where it was running off the end.

	* src/bulk_extractor.cpp (do_phase1): -Y (opt_offst_start) was not implemented. Now it is.

2011-09-29  Simson Garfinkel  <simsong@arlington-8-30-77-137.ncr.vt.edu>

	* src/scan_email.flex: removed #include utils.h; now uses private ISHEXNUMBER implementation. All to avoid including config.h

	* src/Makefile.am (EXTRA_DIST): removed flexpp.pl
	(bulk_extractor_SOURCES): broke feature_recorder_set into its own file

	* configure.ac: config header renamed from config.h to src/config.h to deal with flex compile issue

2011-09-29  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* configure.ac: increased version number to 1.0.5

	* src/scan_pdf.cpp (scan_pdf): individual searches for beginstream and endstream replaced with find commands.

	* src/bulk_extractor.cpp (main): -3 option changed to -2, since there is no longer a phase 3.
	(main): -Z option added to zap output directory.

2011-09-28  Simson Garfinkel  <simsong@arlington-8-30-77-137.ncr.vt.edu>

	* src/sbuf.h (class sbuf_t): added find for strings.

	* src/scan_pdf.cpp (scan_pdf): modified to not call recursively if no data is found.

2011-09-28  Simson Garfinkel  <simsong@ncr.nps.edu>

	* src/bulk_extractor.cpp (process_find_file): no longer prints added find expressions.
	(main): prints package version on start up.

2011-09-28  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* src/feature_recorder.cpp (unquote_string): fixed termination bug. Function no longer modifies its argument. I really should stop doing that.

2011-09-27  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* configure.ac: updated to 1.0.4

	* src/scan_pdf.cpp: added termination code to handle with infinite loop in image 0005.aff

2011-09-26  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* configure.ac: increased version number to 1.0.3.

	* configure.ac: Fixed CPPFLAG issue

2011-09-25  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* src/feature_recorder.cpp (feature_recorder_set): added mechanisms for recording number of calls

2011-09-22  Simson Garfinkel  <simsong@FC15>

	* src/md5.h (md5_t): added some #include files for md5_t class.

2011-09-19  Simson Garfinkel  <simsong@dhcp184-49-148-159.whfp.phl.wayport.net>

	* configure.ac: changed #include on strchr test from #include <cstring> to #include <string.h>

2011-09-18  Simson Garfinkel  <simsong@imac3.home>

	* src/md5.h (class md5_t): bulk_extractor now has its own md5 implementation and no longer relies on openssl.

	* src/bulk_extractor_i.h (class scanner_info): histograms_defs_t has been renamed histograms_t.

2011-09-13  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* configure.ac: turns out that adding -I/opt/usr/include to CPPFLAGS was not causing the directory to be added on compiles. This caused bulk_extractor to crash when compiled on MacOS X 10.7 when the OpenSSL library in /opt was incompatiable with the include files in /usr/. Now -I flags are added to CFLAGS, CXXFLAGS, and CPPFLAGS. Also the plugins are now not compiled as part of bulk_extractor, so we can remove bulk_extractor's usage of libtool

2011-08-22  Simson Garfinkel  <simsong@Alphonse-Mucha.cust.hotspot.t-mobile.com>

	* src/scan_email.flex (Host): domains.txt now includes domains from email.txt and url.txt

2011-08-22  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/feature_recorder.h (class feature_recorder): DISALBED renamed FLAG_DISABLED.  FLAG_NOCONTEXT created.

	* src/feature_recorder.cpp (feature_recorder::write): write now takes a std::string &, instead of a buf*, as prelude to eliminating FILE *.

2011-08-21  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/scan_json.cpp: added json carver

2011-08-17  Simson Garfinkel  <simsong@imac3.local>

	* src/scan_email.flex (Host): added finding of ethernet addresses in ASCII
	(Host): added histograms for microsoft-live and facebook-id

2011-08-14  Simson Garfinkel  <simsong@t.nitroba.org>

	* src/bulk_extractor.cpp (usage): To remove the OpenSSL dependency, the wordlist is now deduplicated with a red/black tree, and not with a bloom filter. This may require the use of a 64-bit computer in some cases.

2011-07-31  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* README: added information to the README.

2011-07-25  Simson Garfinkel  <simsong@imac3.home>

	* python/identify_filenames.py (featuredb.add): fixed off-by-one erro

2011-07-24  Simson Garfinkel  <simsong@imac3.home>

	* src/feature_recorder.cpp: feature_recorder now escapes features and context with \000 (octal) notation.

2011-07-17  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: increased version number to 1.0.1

2011-06-27  Simson Garfinkel  <simsong@163.sub-75-195-180.myvzw.com>

	* src/scan_exif.cpp (scan_exif): increased exif_gulp_size from 64K to 1MiB

2011-06-20  Simson L. Garfinkel  <simsong@ps14412.dreamhostps.com>

	* Makefile.am (ACLOCAL_AMFLAGS): Added -ldl because dlopen must now be explicitly logged in on new versions of Linux.

2011-06-17  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/bulk_extractor.cpp (main): sp.fs is now set on phase 2 in plug-in

2011-06-14  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: updated to version 1.0.0

	* Makefile.am (ACLOCAL_AMFLAGS): fixed longstanding -I m4 error in Makefile.am; (should have been -Im4)

	* man/bulk_extractor.1: updated man page.

2011-06-14  Simson Garfinkel  <simsong@alphonse-mucha.local.tld>

	* src/bulk_extractor_i.h (class scanner_info): added author, description, and other fields to scanner_info.

2011-06-13  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (process_extract): removed crash protection; it was causing incorrect errors when the system wasn't crashing.

2011-06-13  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/scan_exif.cpp (md5hex_4k): fixed CRASHING BUG present in 0.7.25 (and other versions) in which the first 4k of the buffer was being hashed, even when the buffer was less than 4K in size.

2011-06-08  Simson L. Garfinkel  <simsong@ps14412.dreamhostps.com>

	* src/feature_recorder.h: added support for flags, for disabled recorders, for ALERT_ONLY.

	* src/bulk_extractor.cpp (process_path_printer): now passes sp.fs through to next sp when calling self recursively.


2011-06-01  Simson Garfinkel  <simsong@alphonse-mucha>

	* src/scan_pdf.cpp (scan_pdf): corrected cc[1]=='\n' to cc[7]==']\n';

2011-05-24  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* configure.ac: increased version to 0.8.0

	* src/scan_gps.flex: added with support for Garmin <trkpt> records

2011-05-14  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/bulk_extractor.cpp: bulk_extractor now automatically computes the MD5 of any disk image that it reads and reports the MD5 in the report.xml file. If there is a bad block or break in the data the MD5 is not reported.

2011-05-11  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* src/scan_wordlist.cpp: changed max_outfile_size back to 100M

2011-05-09  Simson Garfinkel  <simsong@75.sub-75-208-78.myvzw.com>

	* configure.ac (HAVE_EXIV2): changed all LIBS to LDFLAGS; wonder why they stopped working? Perhaps I'm now using an older version of autoconf/automake?
	increased version counter to 0.7.24

2011-05-07  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: increased version number to 0.7.23

	* src/image_process.h: fixed iterator comparision and initialization problems.

	* configure.ac: cleaned up error message when libexiv2-dev is not installed.

2011-05-07  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* src/bulk_extractor.cpp (main): now only creates histograms if there is an actual feature recorder.

2011-05-06  Simson Garfinkel  <simsong@Alphonse-Mucha.local>

	* configure.ac: increased version number to 0.7.21

	* src/bulk_extractor.cpp (main): added explicit exit if error count is exceeded.

	* src/image_process.cpp (process_dir::sbuf_alloc): now can set EOF flag in iterator if reaches end of file.

2011-05-05  Simson Garfinkel  <simsong@alphonse-mucha.home>

	* src/utils.c (get_filesize): significantly cleaner handling of systems with 4-byte off_t that don't have pread64.

2011-05-05  Simson Garfinkel  <simsong@imac3.home>

	* src/image_process.cpp (process_dir::process_dir): fts is incompatiable with -D_FILE_OFFSET_BITS==64 on some systems.
	(process_raw::pread): removed lseek; now only uses ::pread.

	* configure.ac: fixed -DUTC_OFFSET bug

2011-05-04  Simson L. Garfinkel  <simsong@ps14412.dreamhostps.com>

	* src/image_process.cpp (end): removed using_raw_offset and using_page_counter as they were redundent.

2011-05-01  Simson Garfinkel  <simsong@localhost6.localdomain6>

	* src/bulk_extractor.cpp (main): hostname is now always reported.

	* src/image_process.h: cleaned up include files. removed wincrypt.

2011-04-23  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (load_scanner_file): dlopen() is now conditional

	* src/image_process.h: removed wincrypt.h

	* src/sbuf.cpp: removed wincrypt.h

	* src/support.cpp (lowerstr): commented out wincrypt.h

2011-04-20  Simson Garfinkel  <simsong@213.sub-75-243-6.myvzw.com>

	* src/bulk_extractor.cpp (main): outer tag changed from <bulk_extractor> to <dfxml>

2011-04-15  Simson Garfinkel  <simsong@Magneto.local>

	* src/bulk_extractor.cpp (scanners_builtin): removed scan_bulk, as it is now a plug_in
	(usage): loadable plugins implemented

	* src/feature_recorder.h: made pthread mandatory

	* src/bulk_extractor.cpp: made pthread mandatory

2011-04-13  Simson Garfinkel  <simsong@Magneto.local>

	* src/support.cpp: changed #ifdef WIN to appropriate #ifdefs

	* src/scan_email.flex: #ifdef WIN32 and #include malloc removed, as we are now using C++ objects.

	* src/bulk_extractor.h: largefile defines moved to image_process.h

2011-03-24  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: updated version number

2011-03-23  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (usage): fixed usage.

2011-03-20  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: added -D_FORTIFY_SOURCE=2 to configure script.
	increased version number to 0.7.17

2011-01-29  User User  <user@ubuntu>

	* src/image_process.cpp: added #include <string.h> for sterrror on Linux
	added #include <algorithm> to get transform()

2011-03-19  Simson Garfinkel  <simsong@imac3.home>

	* Makefile.am (EXTRA_DIST): removed FlexLexer.h from libs.

2011-03-16  Simson Garfinkel  <simsong@imac3.local>

	* src/scan_wordlist.cpp (wordlist_split_and_dedup): moved to scan_wordlist.cpp

	* src/bulk_extractor.cpp (set): significant rewrite to enable plug-in system.

	* src/feature_recorder.cpp (feature_recorder::write_buf): all feature recorders are now context recorders. If you don't want to record context, don't call write_buf.

2011-03-07  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: increased version to 0.7.16

2011-03-03  simsong  <simsong@domex.nps.edu>

	* src/bulk_extractor.cpp (process_path_printer): fixed handling of http options for compound paths

2011-03-01  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* configure.ac: incremented to 0.7.15

	* src/image_process.cpp (process_ewf::pread): better handling of libewf not present, and of errno not being declared in the scope (which seems weird)

2011-02-26  Simson Garfinkel  <simsong@imac3.home>

	* src/scan_zip.cpp (scan_zip): no longer carves zero-length names or with compr_size or uncompr_size less than 0.
	(scan_zip):

2011-02-26  Simson Garfinkel  <simsong@imac3.local>

	* src/bulk_extractor.cpp (process_path_printer): now handles byte-range requested larger than the 16MB page.

2011-02-25  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (main): fixed error message

2011-02-24  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (main): restart logic now checks to make
	sure that the restart directory is valid.

2011-02-23  Simson Garfinkel  <simsong@imac3.local>

	* src/bulk_extractor.cpp (usage): now suppresses scanner usage for scanners that have no usage.

2011-02-23  Simson Garfinkel  <simsong@m-ern-nps-edu.local>

	* configure.ac: version updated to 0.7.14

	* src/bulk_extractor.cpp (main): better status reporting at end of scan.

2011-02-23  Simson Garfinkel  <simsong@imac3.local>

	* src/scan_find.cpp (scan_find): made a bit faster and defended against 0-length patterns.

2011-02-22  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (process_extract): now has alerts.txt.

	* src/scan_accts.flex: now finds bitlocker recovery keys in text and UTF-16 and writes them to alerts.txt

2011-02-22  Simson Garfinkel  <simsong@216.sub-75-197-79.myvzw.com>

	* src/bulk_extractor.cpp (main): scan_find no longer appears in usage (it was confusing people.)

2011-02-22  Simson Garfinkel  <simsong@m-ern-nps-edu.local>

	* configure.ac: increased version counter to 0.7.13

	* src/bulk_extractor.cpp (process_path_printer): fixed http handling for Content-Range specifications at end of a compressed region.

2011-02-18  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: updated to version 0.7.12

	* src/bulk_extractor.cpp (process_path): removed final "." on raw printing
	(process_path_printer): fixed http handling.

2011-02-15  Simson Garfinkel  <simsong@imac3.home>

	* src/image_process.h: added #include sbuf.h, <vector>
	(class process_raw): removed process_with_callback.

	* configure.ac: incremented version counter

	* src/bulk_extractor.cpp (main): added -C switch to set context window size.

2011-02-13  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: version number increased to 0.7.10

	* src/bulk_extractor.cpp (process_path): options now reset after each HTTP GET
	(process_path_printer): Overcomes off by one on print_len.

2011-02-07  Simson Garfinkel  <simsong@imac3.local>

	* src/bulk_extractor.cpp (process_path_printer): updated http mode to termiante lines \r\n and not\n.
	(remove_cr): removed \r at the end of input HTTP lines

2011-02-06  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (process_path_printer): added full support for HTTP interface for GUI

2011-01-31  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: version increased to 0.7.9

	* configure.ac: added python tools to distribution


2011-01-27  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (main): -R removed. Restart is now automatic.
	(main): Completely rewrote the restart logic so that now you can just hit up-arrow and restart.

2011-01-24  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (usage): removed -k option.

	* man/bulk_extractor.1: significant updates to man page to make it correct.

2011-01-23  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/Makefile.am (bulk_SCANNERS): added scan_aes.cpp

2011-01-23  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: increased version counter to 0.7.7

2011-01-22  Simson Garfinkel  <simsong@imac3.local>

	* src/scan_find.cpp (scan_find): fixed scanner; it actually works now.

	* src/bulk_extractor.cpp (set_scanner_enabled): removed     feature_recorder_control since child scanners are no longer run.
	(main): cleaned up code for set_scanner_enabled()

2011-01-21  Simson Garfinkel  <simsong@imac3.home>

	* src/image_process.h (class process_ewf): removed process_with_callback

	* src/bulk_extractor.cpp (main): removed report.txt. Removed -P and -T.

	* src/feature_recorder.h (feature_recorder *>): removed num_slots and this_slot, mandating that we will only support -P threading.

2011-01-18  Simson Garfinkel  <simsong@imac3.home>

	* Makefile.am (RELEASE_USER): added win32/bulk_extractor_dlls.zip to distribution

	* src/feature_recorder.cpp (feature_recorder::carve): mkdir=>MKDIR for compilation on windows

2011-01-17  Simson Garfinkel  <slgarfin@submit-0.local>

	* src/image_process.cpp (open): opening up invalid AFF files now produces error

	* src/scan_hiberfile.cpp (scan_hiberfile): modified so it won't call itself recursively.
	(scan_hiberfile):

2011-01-16  simsong  <simsong@domex.nps.edu>

	* src/scan_hiberfile.cpp (scan_hiberfile): error in memory allocation found and fixed.

2011-01-15  Simson Garfinkel  <simsong@silver-surfer.home>

	* src/feature_recorder.cpp (feature_recorder::carve): KML carving works

2011-01-12  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: version number incremented to 0.7.6

	* src/scan_pdf.cpp (pdf_extract_text): rewritten to avoid the allocation of strings.

2011-01-11  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: version number increased to 0.7.5

	* src/bulk_extractor.h (class scanner_params): moved print_raw flag into the constructor

2011-01-10  Simson Garfinkel  <slgarfin@compute-1-33.local>

	* src/bulk_extractor.cpp (numCPU): now picks up number of cores on RHEL systems where only _SC_NPROCESSORS_ONLN is defined.

2011-01-07  Simson Garfinkel  <simsong@imac3.local>

	* src/bulk_extractor.cpp (main): now turns off opt_pthread if -S is specified.

2011-01-06  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: increased verison to 0.7.4

	* src/scan_accts.flex: added more context to the email scanner. No more false positives from PDF files.

	* src/feature_recorder.cpp (feature_recorder::write): write with context now calls write.

	* src/feature_recorder.cpp (feature_recorder::write): Created a new mutex for redlist file.

2011-01-04  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: increased version number to 0.7.3

2011-01-04  Simson Garfinkel  <slgarfin@submit-0.local>

	* src/xml.h: fixed overloading problem

	* configure.ac: updated to use _lseeki64

	* src/utils.c: changed to use _lseeki64 instead of lseek64

2011-01-04  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/image_process.cpp: added #define HAVE_STL for new AFFLIB

2010-12-31  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: increased version number to 0.7.1

	* src/Makefile.am (bulk_SCANNERS): removed scan_net.h; it's now part of scan_net.cpp

	* src/bulk_extractor.cpp: changed opt_margin to 1MiB after testing.

	* src/scan_wordlist.cpp (scan_wordlist): scan to the end of the page

	* src/scan_net.cpp (scan_net): only scan to the end of the page

	* src/scan_bulk.cpp (scan_bulk): only scan to the end of the page

	* src/scan_find.cpp (scan_find): only scan to the end of the page

	* src/scan_hiberfile.cpp (scan_hiberfile): only scans to end of the page.

	* src/scan_pdf.cpp (scan_pdf): only scans to end of page.

	* src/scan_base64.cpp (scan_base64): only scans to end of page, not end of buffer.

	* src/scan_gzip.cpp (scan_gzip): only scans to end of the page, not end of the buffer

	* src/scan_zip.cpp (scan_zip): only scans to end of page, not end of buffer (ignores zipfiles starting in margin)

	* src/bulk_extractor.cpp: increased pagesize to 16MiB and Margin
	to 4MiB after testing revealed that larger margins found
	significantly more features.

2010-12-22  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/utils.h: cleaned up __BEGIN_DECLS and __END_DECLS

	* src/utils.c: moved atoi64 to here.

	* src/sbuf.cpp: moreve dto an independent file

	* src/sbuf.h: moved to an independent file.

2010-12-21  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/scan_hiberfile.cpp (scan_hiberfile): if max_uncompr_size<4096, set it to 4096. (A full page.)

	* src/bulk_extractor.cpp (histogram_files): added ip, tcp and ether to the list of histogram_files.

2010-12-20  Simson Garfinkel  <slgarfin@submit-0.local>

	* src/image_process.cpp (open): err message now prints name of libewf that can't be opened.

2010-12-18  Simson Garfinkel  <simsong@imac3.local>

	* src/scan_*.cpp (scan_zip):  now all free their decompression buf before returning in case of rcb.returnAfterFound.

	* src/bulk_extractor.cpp (process_path_printer): only prints process_path_printer in debug mode.

	* src/scan_*.cpp (scan_wordlist): sp.fs==0 on -p traversal, so sp.feature_names!=0 now used to indicate no scanning necessary.

	* src/scan_zip.cpp (scan_zip): added name to XML <zipinfo> structure; I can't believe it wasn't there!
	(scan_zip): added crc32 to zip structure
	(scan_zip): added extra_field_len to structure.

	* src/bulk_extractor.cpp (usage): announced EXIV2 prominently in usage
	(main): added hostname reporting

	* configure.ac: increased version number to 0.7.0

	* src/bulk_extractor.cpp (main): set POSIX threads to be the default.

2010-12-17  Simson Garfinkel  <simsong@imac3.home>

	* src/image_process.cpp (process_ewf::open): open() now returns -1 if it fails, rather than 0
	(process_ewf::open): Now states if E01 is not compiled in.

	* src/bulk_extractor.cpp: removed call to increase number of file descriptors with setrlimit, as it is no longer needed

	* configure.ac: removed check for setrlimit and limits.h

2010-12-16  Simson Garfinkel  <simsong@247.sub-69-99-140.myvzw.com>

	* src/bulk_extractor.h (class scanner_params): added print_raw field.

	* src/bulk_extractor.cpp (process_path): added /r support for printing raw.

2010-12-14  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* src/support.cpp: added #include <stdarg.h>

2010-12-13  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* configure.ac: increased version number to 0.6.7.

	* src/bulk_extractor.cpp: added /c to the feature files we wanted
	to histogram because they were all the context-enabled feature
	files.

	* src/bulk_extractor.cpp: re-enabled histogram files



2010-12-13  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (process_extract): re-worked
	scanner_params so be passed in, not constructed.

2010-12-12  Simson Garfinkel  <simsong@silver-surfer.home>

	* configure.ac: increased version counter to 0.6.6

	* src/bulk_extractor.cpp (process_extract): depth processing moved
	from feature_recorder_set to scanner_params, since POSIX threading
	uses a single fs structure for all threads.

2010-12-10  Simson Garfinkel  <simsong@imac3.home>

	* src/support.cpp: added windows defs

2010-12-10  Simson Garfinkel  <simsong@silver-surfer.home>

	* configure.ac: increased version counter to 0.6.5.

	* src/bulk_extractor.cpp: changed default from -P to -T

	* src/bulk_extractor.h: documented that putting /c on a feature name causes the feature file to be context enabled.

	* configure.ac: increased version counter to 0.6.4

2010-12-08  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (scanners): cleaned up multi threading a bit more

	* src/scan_pdf.cpp (scan_pdf_text): fixed PDF handling

2010-12-06  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (usage): detects number of CPUs and enables -P by default.
	(restart): changed this_num to -1  for recombining

2010-12-06  Simson Garfinkel  <simsong@imac3.local>

	* src/Makefile.am (bulk_SCANNERS): added scan_net.h

	* src/scan_net.cpp (testSockAddrIn): added HAVE_SOCKADDR_IN_SIN_LEN check

	* configure.ac (HAVE_SOCKADDR_IN): added HAVE_SOCKADDR_IN_SIN_LEN test

2010-12-06  sansforensics  <sansforensics@SIFT-Workstation>

	* src/image_process.cpp (pread): updated to use libewf_read_random when old libewf is present

2010-12-05  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: increased version number to 0.6.2

	* configure.ac: fixed test because uname -a works on Msys but not on darwin


2010-12-05  Robert Beverly <rbeverly@nps.edu>

	* configure.ac: check for netinet/ip.h

	* src/scan_tcp.cpp: renamed to scan_net.cpp as it's more general than tcp

        * src/scan_net.cpp: added Ethernet, sockaddr_in carving

 2010-12-05  Robert Beverly <rbeverly@nps.edu>

	* src/image_process.cpp: fix macros for EWF

2010-12-05  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: updated to 0.6.1

2010-12-04  Simson L. Garfinkel  <simsong@ps14412.dreamhostps.com>

	* src/utils.c (get_filesize): updated for Linux.

	* src/bulk_extractor.cpp: updated resource limits to work properly on Linux.

	* configure.ac (HAVE_EXIV2): updated to make work in Linux.

2010-12-04  Simson Garfinkel  <simsong@imac3.home>

	* src/utils.c (get_filesize): changed all u_int64_t to uint64_t.

	* configure.ac: added /usr/local/ssl to the list of searched directories

2010-12-03  Simson Garfinkel  <simsong@imac3.home>

	* src/feature_recorder.cpp (feature_recorder::write): Implemented margin. removed recent_offsets hack. Not needed with margin
	(feature_recorder::write): removed debugging code

2010-12-02  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (process_extract): added "once" to recursion control block so that printer only prints 4096 bytes (and doesn't keep printing other areas).

2010-12-01  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* src/scan_pdf.cpp (scan_pdf): ignore inflate() return and reprocess if zs.total_out>0;

2010-11-30  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* src/bulk_extractor.cpp (process_extract): suppression of identical pages removed.

2010-11-28  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (main): opt_margin can now be specified by the user.

	* configure.ac: version number incremented to 0.6.0.

	* src/scan_find.cpp (scan_find): added.

	* src/myregex.h (class myregex): made search threadsafe

	* src/scan_exif.cpp (md5hex_4k): moved to scan_exif.cpp.

	* src/feature_recorder.h: removed Bloom from feature_recorder. Now
	it is only used for deduplication of the wordlist.

2010-11-26  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/feature_recorder.cpp (feature_recorder::write): removed
	"unique" feature from feature recorder. uniqueness is now done in
	post-processing (only wordlist employs uniqueness.)

2010-11-25  Simson Garfinkel  <simsong@223.sub-75-222-6.myvzw.com>

	* src/bulk_extractor.cpp (main): path processing now works with the -p option.

2010-11-24  Simson Garfinkel  <simsong@silver-surfer.home>

	* src/bulk_extractor.h (struct recursion_control_block): added so
	that recursive scanners can callback to a different caller than
	process_extract. This allows the process_path_printer to decode a path.

	* src/scan_zip.cpp (scan_zip): changed compr_size and uncompr_size
	from u_int to int in an attempt to fix the crashing problem.  I
	suspect that they are being caused by improper sign extension
	under Windows.

	* (scan_zip): fixed bug where a name extending beyond the end of the
	zip region might cause a crash.

2010-11-22  Simson Garfinkel  <simsong@imac3.local>

	* configure.ac: increased version counter to 0.5.8

2010-11-21  Simson Garfinkel  <simsong@imac3.local>

	* src/scan_zip.cpp (scan_zip): changed r==0 to r>=0 so that it will process partially decompressed stream

2010-11-20  Simson Garfinkel  <simsong@imac3.local>

	* src/feature_recorder.h (feature_recorder *>): removed histogram_all; histograms now specified in bulk_extractor.

	* src/bulk_extractor.cpp (scanners): added scan_pdf to remove the text from PDF files.

2010-11-03  Simson Garfinkel  <simsong@imac3.home>

	* src/image_process.cpp (process_raw::process): now handles multi-volume VMDK files as well

2010-11-01  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* src/feature_recorder.h (feature_recorder *>): getname() now
	generates an error if the feature file doesn't exist. We don't
	want to have a file created in just one high-numbered thread

	* src/checkpoint.h (class checkpoint): added debug option.

2010-10-31  Simson Garfinkel  <simsong@imac3.home>

	* configure.ac: updated version number to 0.5.5

	* src/scan_zip.cpp (scan_zip): now scans on any decompression that results in partial results.

2010-10-29  Simson Garfinkel  <simsong@imac3.local>

	* src/bulk_extractor.cpp (main): added quotes to progname and outdir when run under windows.

2010-10-27  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (seen_sbuf): renamed seen_page to seen_sbuf and process_page to process_sbuf

2010-10-27  Simson Garfinkel  <simsong@imac3.local>

	* src/image_process.cpp (process_raw::process): big bug - wasn't freeing data allocated in reading raw

2010-10-19  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.h: removed a lot of legacy junk.

2010-10-15  Simson Garfinkel  <simsong@imac3.home>

	* src/bulk_extractor.cpp (itos): itos now takes 64bit number to avoid 32-bit overflow.

2010-10-15  Simson Garfinkel  <simsong@imac3.local>

	* Patches applied to add support for additional credit card numbers.

2010-10-13  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/image_process.cpp (process_ewf::open_ewf): removed routine that print the libewf filenames on globbing

2010-10-12  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp: word_min changed to 6.

	* removed "margin" feature.

	* src/feature_recorder.h (class feature_recorder): pos0 is now a type, pos0_t, which has more info

	* src/feature_recorder.h (class feature_recorder): changed order of write_buf arguments.

2010-10-01  Simson Garfinkel  <simsong@fc13>

	* src/image_process.cpp: moved get_filesize to image_process.cpp

2010-09-27  simsong  <simsong@domex.nps.edu>

	* src/image_process.cpp (process_ewf::process): now works with older libewf

2010-09-22  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/scan_exif.cpp (scan_exif): removed offset and sector from exif XML. It broke the stop list.

2010-09-13  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/image_process.cpp (image_process::seen_page): previously seen_page only ran if we had MD5. Now it runs all the time and we need to have a local MD5 implementation.

2010-08-26  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/feature_recorder.h (feature_recorder *>): removed outdir from all of the prototypes; it's never changed, so it only needs to be in one place.

	* src/bulk_extractor.cpp (main): significant changes in handling
	of scanners. Now we enable or disable scanners (not feature
	recorders), and disabled scanners do not run (rather than having
	them run but not record their results.) This will improve speed significantly.

2010-08-25  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (main): wordlist disabled by default.

2010-08-04  Simson Garfinkel  <simsong@host-241-211.pubnet.pdx.edu>

	* src/feature_recorder.cpp (feature_recorder::write): removes invalid text from feature

2010-08-02  Simson Garfinkel  <simsong@host-241-211.pubnet.pdx.edu>

	* configure.ac: increased the version to 0.3.5

	* src/feature_recorder.cpp: now uses atoi64() instead of atoi() for recombining feature files, to avoid negative offsets.

2010-07-13  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (main): now prints version number with -V.

2010-07-02  Simson L. Garfinkel  <simsong@imac2.home>

	* src/image_process.cpp: now handles split-raw files. Just specify filename.000 or filename.001 as the first file, and it will search for and use them all.

2010-06-26  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/image_process.cpp (process): created with code from bulk_extractor.cpp.

	* src/image_process.h (image_process_): created with code from bulk_extractor.cpp

	* src/bulk_extractor.cpp (main): now using nsrl_print_usage print_usage into

2010-06-22  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* removed ringbuffer.h

2010-06-04  Simson L. Garfinkel  <simsong@imac2.local>

	* src/scan_accts.flex: fixed regular expression scan_accts.flex:REGEX7 to allow:
	  - no space between (800)555-1212
	  - periods to terminate (800)555-1212.


2010-06-03  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* src/bulk_extractor.cpp (process_aff::process): fixed bug where multi-threading did not work with AFF files.

2010-06-02  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/scan_email.flex (Host): fixed bug in which domains.txt had the offset of the original email address, not the domain itself.

2010-06-01  Simson L. Garfinkel  <simsong@imac2.local>

	* src/utils.c (get_filesize): fixed search feature to operate properly with raw partitions with mingw, which apparenly handles << differently than on Unix.

2010-06-01  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* src/bulk_extractor.cpp (main): added _ to url_searches.txt and url_services.txt
	(process_aff::process): fixed handling of AFF files.

2010-05-24  Simson L. Garfinkel  <simsong@imac2.local>

	* configure.ac: increased version number to 0.3.2

	* src/scan_email.flex (Host): fixed crashing bug on some numeric IP addresses.

2010-05-22  Simson L. Garfinkel  <simsong@imac2.local>

	* configure.ac: increased version number to 0.3.1

2010-05-17  Simson Garfinkel  <simsong@t>

	* src/scan_accts.flex: Credit Card number detector now requirest 15-digit Amex numbers or 16-digit Visas.

2010-05-16  Simson Garfinkel  <simsong@t>

	* src/scan_tcp.cpp: modified scan_tcp.cpp to work with any header style.

2010-05-13  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* Added recognition of phone numbers and fedex numbers.

2010-05-01  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* released version 0.3.0

2010-04-25  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* configure.ac: version increased to 0.2.1

2010-04-24  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* src/bulk_extractor.cpp (found_feature): fixed a bug in which COOKIES caused crash in CCN handler.

2010-04-12  Simson Garfinkel  <simsong@Silver-Surfer.local>


	* configure.ac: version increased to 0.1.0
	* src/bulk_reporter.cpp (bulk_reporter): created file; simplified histogram creation.

2010-04-08  Simson Garfinkel  <simsong@46.sub-75-211-31.myvzw.com>

	* src/scan_wordlist.cpp: added support for extracting wordlist.
	* src/bulk_extractor.cpp (main): removed verbose flag.
	* Added explicit support for E01 files.
	* implemented two-phase process with lots of easy-to-use temp files.

2009-10-05  Simson Garfinkel  <simsong@Silver-Surver.local>

	* configure.ac: version counter bumped to 0.0.13

	* java/Makefile.am (CONFIG_CLEAN_FILES): extensive work to make "make dist", "make distcheck" and "make distclean" work.

	* java/BinaryLexer.flex: made TokenObject an embedded class inside BinaryLexer to avoid compilation order issues in autoconf "make distcheck"

2009-10-01  Simson L. Garfinkel  <simsong@imac2.local>

	* src/bloom.c: updated for Win32

2008-11-15  Simson Garfinkel  <simsong@Silver-Surfer.lan>

	* src/bulk_extractor.cpp (feature_found): removed -a option; now use -m for low memory

2008-10-07  Simson Garfinkel  <simsong@Silver-Surfer.local>

	* configure.ac: incremented version number to 0.0.8.

	* src/scan_email.fp (Cookie): added emaillex_destroy() to scan_email.fp. This was the memory leak!

2008-08-29  Simson Garfinkel  <simsong@m.ern.nps.edu>

	* src/bulk_extractor.cpp (main): added -s option to specify starting page number.

	Will no longer overwrite existing output files.
