What's Changed
- Fix Bundler error on Ruby head by @david942j in #346
- Make disasm round-trip spec arch-independent by @david942j in #350
- Make readme task arch-aware and fail loudly by @david942j in #352
- Improve YARD documentation by @david942j in #353
- Add emu spec for --ip option by @david942j in #354
- Fix typos and grammar in comments by @david942j in #355
- Handle strict mode by @david942j in #357
- Add timeout option to dump by @david942j in #358
- Remove clone/vfork TODO in dumper by @david942j in #359
- Add RISC64 support by @david942j in #360
- Make dump's -c/--sh-exec take precedence over the positional exec by @david942j in #361
- Refactor shared dumping by @david942j in #362
- Fix big-endian (s390x) arg word order by @david942j in #363
- Add SeccompTools::Symbolic BPF execution engine by @david942j in #364
- Normalize reversed comparisons by @david942j in #365
- Use Const::BPF::SeccompData across disasm, emu and asm by @david942j in #366
- Dedup shared helpers by @david942j in #367
- Name disasm arguments by the inferred arch, not the declared one by @david942j in #368
- Reuse Symbolic State/Expr/Constraint in the disassembler by @david942j in #369
- Share the seccomp action-label decoder, fixing disasm ret_str by @david942j in #370
- Add an
explaincommand: summarize a filter as a per-action policy by @david942j in #371 - Make the symbolic key a string so states hash without collapsing by @david942j in #372
- Warn when a dump finds no seccomp filter by @david942j in #373
- Extract Explain::ArchScope for reuse by @david942j in #374
- Extract CLI::FilterInput for reuse by @david942j in #375
- Text cleanup by @david942j in #376
- Detect the architecture when dumping by pid by @david942j in #377
- DRY filter options by @david942j in #378
- Give warn and info a color by @david942j in #379
- Rename ArchScope to Analysis by @david942j in #380
- Capitalize and end doc sentences by @david942j in #381
- Add the audit engine: scan a filter for weaknesses by @david942j in #382
- Add the
auditcommand by @david942j in #383 - Color syscall names and wrap findings to 120 columns by @david942j in #384
- Polish wording to native English by @david942j in #385
- Fail fast when the host arch is undetectable by @david942j in #386
- Explain why BPF_MOD is unsupported by @david942j in #387
- Emulate division by zero as KILL instead of crashing by @david942j in #388
- Bump simplecov to ~> 1.0 by @david942j in #389
- Add CHANGELOG.md by @david942j in #390
- Add shell completion for bash, zsh and fish by @david942j in #391
- Release 1.7.0 by @david942j in #392
Full Changelog: v1.6.2...v1.7.0