--- libgig/trunk/ChangeLog	2017/05/10 23:07:28	3173
+++ libgig/trunk/ChangeLog	2017/10/07 16:30:43	3351
@@ -8,6 +8,13 @@
       which allows to serialize and deserialize native C++ objects
       in a portable, easy and flexible way.
     - print compiler warning if no RTTI available
+    - Fixed potential crash in command line tools gig2stereo, korg2gig,
+      korgdump and sf2extract.
+    - Fixed CVE-2017-12950, CVE-2017-12952, CVE-2017-12953
+      (original patch by Paul Brossier, slightly modified).
+    - Debian: Fixed packaging error about invalid substitution variable
+      "Source-Version".
+    - Raised Debian compatibility level to Debian 9 "Stretch".
 
   * src/gig.cpp, src/gig.h:
     - fixed bug in Script::SetGroup: the script chunk wasn't moved
@@ -33,11 +40,27 @@
     - Added support for serializing & deserializing DimensionRegion
       objects (and crossfade_t and leverage_ctrl_t objects).
     - Added enum reflection API functions for retrieving enum declaration type
-      information at runtime (countEnum(), enumKey(), enumKeys(), enumValue()).
+      information at runtime (enumCount(), enumKey(), enumKeys(), enumValue()).
+    - Exception class now has a variadic constructor which allows to add
+      textual format specifiers like with printf().
+    - On unknown leverage controller exception: show precise unknown leverage
+      controller number found.
+    - Ignore invalid leverage controller types and just show a warning on the
+      console instead of throwing an exception.
+    - Added new struct eg_opt_t and new class member variable
+      DimensionRegion::EG1Options and DimensionRegion::EG2Options as an
+      extension to the gig file format, which allows to override the default
+      behavior of the first two EGs' state machines.
+    - Fixed undefined behavior when loading a gig file with invalid
+      velocity curve parameters (fixes CVE-2017-12951).
+    - Fixed undefined behavior when loading a gig file with invalid wave
+      pool index number (fixes CVE-2017-12954).
 
   * src/DLS.cpp, src/DLS.h:
     - Sample: wave pool offsets are now 64 bits (to allow support for files
       larger than 4 GB).
+    - Exception class now has a variadic constructor which allows to add
+      textual format specifiers like with printf().
       
   * src/RIFF.cpp, src/RIFF.h:
     - added support for RIFF files larger than 4 GB, by default the required
@@ -47,6 +70,8 @@
       with a new option added to the RIFF File constructor though
     - when saving a modified, grown RIFF file, the temporary file size during
       Save() operation will no longer be larger than the final grown file size
+    - Exception class now has a variadic constructor which allows to add
+      textual format specifiers like with printf().
 
   * src/Serialization.cpp, src/Serialization.h:
     - Archive: Added method isModified().
@@ -68,6 +93,12 @@
     - Archive: Added methods valueAsInt(), valueAsReal() and valueAsBool().
     - DataType: Implemented demangling C++ type names (for methods
       asLongDescr() and customTypeName(bool demangle=false)).
+    - Archive::setAutoValue(): Handle human readable boolean text
+      representations like "yes", "no", "true", "false" as expected.
+    - Exception class now has a variadic constructor which allows to add
+      textual format specifiers like with printf().
+    - DataType fix: Retain backward compatibility to older versions of native
+      C++ classes/structs.
 
   * src/tools/akaidump.cpp, src/tools/akaiextract.cpp:
     - improved output of non-ascii characters in usage messages
@@ -89,6 +120,7 @@
       rebuilding the gig file's global checksum table (i.e. in case the
       file's checksum table was damaged)
     - print samples' CRC32 checksums
+    - Print the new EG behavior options (eg_opt_t).
 
   * src/tools/gigextract.cpp:
     - Fix: if sample name contains a path separator (slash or backslash) then