housekeeping items for 3.6.5 - first pass

README

@@ -1,14 +1,15 @@
-          NetHack 3.6.4 -- General information December 18, 2019
+          NetHack 3.6.5 -- General information January 2020
 
 NetHack 3.6 is an enhancement to the dungeon exploration game NetHack,
 which is a distant descendent of Rogue and Hack, and a direct descendent of
 NetHack 3.4 as there was no NetHack 3.5 release.
 
-NetHack 3.6.4 is the official release of NetHack that follows NetHack 3.6.3
-and contains all bug fixes since 3.6.3, including one security-related fix for
-a vulnerability that affects NetHack versions 3.6.0, 3.6.1, 3.6.2, and 3.6.3.
+NetHack 3.6.5 is the official release of NetHack that follows NetHack 3.6.4
+and contains all bug fixes since 3.6.4, including some fixes for exploitable 
+security-related vulnerabilities that affected NetHack versions between 3.6.0
+and 3.6.4.
 
-The file doc/fixes36.4 in the source distribution has a full list of fixes. The
+The file doc/fixes36.5 in the source distribution has a full list of fixes. The
 text in there was written for the development team's own use and is provided
 "as is", so please do not ask us to further explain the entries in that file.
 Some entries might be considered "spoilers", particularly in the "new features"
@@ -17,28 +18,22 @@ section.
 Below you will find some other general notes that were not considered
 spoilers:
 
- *  fix potential buffer overflow when parsing run-time configuration file
- *  GDBPATH and GREPPATH from sysconf or -D... on compilation command line were
- *      being processed even if PANICTRACE was disabled but only being freed
- *      at end of game when that was enabled
- *  fix the article used in the message when your steed encounters a polymorph
- *      trap
- *  allow teleporting onto the vibrating square
- *  message "your knapsack can't accomodate any more items" when picking stuff
- *      up or removing such from container was inaccurate if there was some
- *      gold pending; vary the message rather than add more convoluted pickup
- *      code
- *  dozen-ish assorted spelling/typo fixes in messages and source comments
- *  wizard mode wishing for terrain would leave it unmapped if done while blind
- *  wizard mode terrain wish could leave hero in water (severe vision limits)
- *      or in lava (trapped, sinking) which wasn't there any more
- *  flying hero can go down (via '>') holes or trap doors instead of escaping
- *      trap
- *  polymorphed hero hiding on the ceiling can now use '>' to unhide instead of
- *      being told "you can't go down here"
- *  fix compilation on platforms that split the ncurses and tinfo libraries
- *  Windows: allow all game files to be on a portable device via the sysconf
- *      option 'portable_device_paths'
+FIXME: Update depending on whether cherry-picks are included or not
+-- start cherry-pick entries
+ *  fix accessing mons[-1] when trying to gate in a non-valid demon
+ *  fix accessing mons[-1] when monster figures out if a tin cures stoning
+ *  walking out of tethered-to-buried-object trap condition was supposed to
+ *      reinstate punishment but wasn't finding the buried iron ball because
+ *      the trap condition was cleared first to indicate escape; result was
+ *      attached chain that got dragged around but had no ball attached
+--- end cherry-pick entries
+ *  have string_for_opt() return empty_optstr on failure
+ *  ensure existing callers of string_for_opt() check return value before using it
+ *  fix potential buffer overflow in add_menu_coloring()0
+ *  fix potential buffer overflow in sym_val()
+ *  fix potential buffer overflow in pline(), raw_printf(), and config_error_add()
+ *  Windows: incldues a fix from a 3.6.4 post-release update where 
+ *      OPTIONS=map_mode:fit_to_screen could cause a game start failure
 
                         - - - - - - - - - - -