[ViewVC] Annotation of: cvs/CBOR-XS/Changes

Revision history for Perl extension CBOR::XS

TODO: pack_keys?
TODO: document encode_cbor_sharing?
TODO: weaken cyclic structures?
TODO: allowed_classes or so?

1.4  Mon Feb  8 05:10:15 CET 2016
        - buffer overflow fix: a fast path during decoding did not check
          remaining length when decoding hash keys, found by fuzzing.
          This can potentially leak information in the error message
          or crash the process.
        - use C style { 0 } struct initializer.
        - upgrade libecb.

1.3  Mon Apr 27 22:21:04 CEST 2015
        - the incremental parser didn't properly parse tagged values
          (testcase by Mons Anderson).
        - slightly speed up encoding of plain (nonmagical) arrays.
        - try to clarify further that effectively all 32 bit architectures
          have 64 bit integer support.
        - upgrade libecb.

1.26 Sat Oct 25 08:35:44 CEST 2014
        - update the t/57_incr.t subtest that would rely on 64 bit ints.
        - disable t/50_rfc.t test that fails because of broken data::dumper.

1.25 Sun Jan  5 15:19:14 CET 2014
        - map key decoding was pretty much botched due to the recent cleanups.
        - work around Time::Piece->epoch returning a string value, avoid encoding
          this as a tag 1 string.
        - enable more testcases in t/50_rfc.t, now that they work :)

1.2  Tue Dec 10 22:06:42 CET 2013
        - implement an incremental decoder.

1.12 Tue Dec  3 11:23:22 CET 2013
        - work around broken Time::Piece (in old versions of the module, %z doesn't
          work as documented, gives different results on different platforms(!)).

1.11 Sun Dec  1 18:00:00 CET 2013
        - new setting: validate_utf8, for when you can't trust your cbor data.
        - do not leak memory on decoding errors, when allow_cycles is enabled.
        - add default filters for tags 0 and 1, using Time::Piece.
        - more tests added.

1.1  Sat Nov 30 19:14:27 CET 2013
        - INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode
          cyclic data structures (to avoid memleaks in unsuspecting code).
        - no longer "share" references that aren't, i.e. true/false/null/error/tagged.
        - fix stringref w.r.t. indefinite-length strings.
        - verify indefinite-length string chunk types.
        - do not allow extremely large arrays - assume an array element
          requires at least one CBOR byte, to avoid memory exhaustion attacks.
        - major code overhaul.

1.0  Thu Nov 28 16:43:31 CET 2013
        - use the now official tag values for extensions. remove the
          experimental notice. it's the real thing now, with real bugs.
        - renamed allow_stringref to pack_strings.
        - port to perl <= 5.16.
        - slightly improve the documentation.

0.09  Fri Nov 22 16:54:18 CET 2013
        - bignum/bigfloat/decimal support.
        - uri support.
        - tag filter functions support for decoding.
        - do not support reference-to-1/0/undef anymore, you need to use
          the Types::Serialiser objects now.
        - experimental sharable extension support (http://cbor.schmorp.de/value-sharing).
        - experimental stringref extension support (http://cbor.schmorp.de/stringref).
        - implement indirection tag (http://cbor.schmorp.de/indirection).

0.08  Wed Oct 30 11:10:43 CET 2013
        - defused another too fragile test.

0.07  Tue Oct 29 23:04:07 CET 2013
        - don't crash in decode when silly values are passed in.
        - considerably speed up map decoding when map keys
          are utf-8 or byte strings.
        - raising an exception in THAW should now work without
          leaking.

0.06  Tue Oct 29 16:56:07 CET 2013
        - do not leak when deserialiasing via THAW.
        - implement and document CBOR::XS creation/access/mutate
          methods.

0.05  Mon Oct 28 22:27:47 CET 2013
        - do not leak hash keys on decoding.

0.04  Sun Oct 27 23:47:47 CET 2013
        - implement TO_CBOR/FREEZE/THAW serialisation protocols.
        - requested perl-object and generic-object tags from iana.
        - switched to Types::Serialiser for true, false and error.
        - disabled some fragile tests (thanks, andk).

0.03  Sun Oct 27 00:28:41 CEST 2013
        - improve 32 bit platform compatibility.
        - take more advantage of ecb.h.
        - preliminary and bare-bones tagged support.
        - improved docs.

0.02  Sat Oct 26 13:08:05 CEST 2013
        - no aborts left.
        - add $CBOR::XS::MAGIC.
        - preliminary tagged decoding to arrayref.
        - indefinite encoding fixed.
        - half float decoding implemented.
        - t/50_rfc.t adds test vectors from the rfc, which
          are checked as applicable.

0.01  Fri Oct 25 21:39:56 CEST 2013
        - original version; cloned from JSON-XS

Revision:	1.55
Committed:	Mon Feb 8 04:37:12 2016 UTC (8 years, 3 months ago) by root
Branch:	MAIN
CVS Tags:	rel-1_4
Changes since 1.54:	+2 -0 lines
Log Message:	1.4
#	User	Rev	Content
1	root	1.1	Revision history for Perl extension CBOR::XS
2
3	root	1.30	TODO: pack_keys?
4	root	1.36	TODO: document encode_cbor_sharing?
5	root	1.38	TODO: weaken cyclic structures?
6	root	1.54	TODO: allowed_classes or so?
7	root	1.46
8	root	1.54	1.4 Mon Feb 8 05:10:15 CET 2016
9			- buffer overflow fix: a fast path during decoding did not check
10			remaining length when decoding hash keys, found by fuzzing.
11	root	1.55	This can potentially leak information in the error message
12			or crash the process.
13	root	1.53	- use C style { 0 } struct initializer.
14	root	1.54	- upgrade libecb.
15	root	1.53
16	root	1.52	1.3 Mon Apr 27 22:21:04 CEST 2015
17			- the incremental parser didn't properly parse tagged values
18			(testcase by Mons Anderson).
19	root	1.50	- slightly speed up encoding of plain (nonmagical) arrays.
20	root	1.51	- try to clarify further that effectively all 32 bit architectures
21			have 64 bit integer support.
22	root	1.52	- upgrade libecb.
23	root	1.50
24	root	1.49	1.26 Sat Oct 25 08:35:44 CEST 2014
25	root	1.47	- update the t/57_incr.t subtest that would rely on 64 bit ints.
26	root	1.48	- disable t/50_rfc.t test that fails because of broken data::dumper.
27	root	1.47
28	root	1.46	1.25 Sun Jan 5 15:19:14 CET 2014
29			- map key decoding was pretty much botched due to the recent cleanups.
30			- work around Time::Piece->epoch returning a string value, avoid encoding
31			this as a tag 1 string.
32			- enable more testcases in t/50_rfc.t, now that they work :)
33
34			1.2 Tue Dec 10 22:06:42 CET 2013
35			- implement an incremental decoder.
36	root	1.39
37	root	1.44	1.12 Tue Dec 3 11:23:22 CET 2013
38	root	1.45	- work around broken Time::Piece (in old versions of the module, %z doesn't
39			work as documented, gives different results on different platforms(!)).
40	root	1.43
41	root	1.42	1.11 Sun Dec 1 18:00:00 CET 2013
42	root	1.39	- new setting: validate_utf8, for when you can't trust your cbor data.
43			- do not leak memory on decoding errors, when allow_cycles is enabled.
44	root	1.41	- add default filters for tags 0 and 1, using Time::Piece.
45	root	1.42	- more tests added.
46	root	1.30
47	root	1.37	1.1 Sat Nov 30 19:14:27 CET 2013
48	root	1.36	- INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode
49			cyclic data structures (to avoid memleaks in unsuspecting code).
50	root	1.37	- no longer "share" references that aren't, i.e. true/false/null/error/tagged.
51	root	1.32	- fix stringref w.r.t. indefinite-length strings.
52			- verify indefinite-length string chunk types.
53	root	1.35	- do not allow extremely large arrays - assume an array element
54	root	1.37	requires at least one CBOR byte, to avoid memory exhaustion attacks.
55	root	1.34	- major code overhaul.
56	root	1.32
57	root	1.31	1.0 Thu Nov 28 16:43:31 CET 2013
58	root	1.28	- use the now official tag values for extensions. remove the
59			experimental notice. it's the real thing now, with real bugs.
60	root	1.29	- renamed allow_stringref to pack_strings.
61	root	1.27	- port to perl <= 5.16.
62	root	1.31	- slightly improve the documentation.
63	root	1.27
64	root	1.25	0.09 Fri Nov 22 16:54:18 CET 2013
65	root	1.24	- bignum/bigfloat/decimal support.
66			- uri support.
67			- tag filter functions support for decoding.
68	root	1.21	- do not support reference-to-1/0/undef anymore, you need to use
69			the Types::Serialiser objects now.
70			- experimental sharable extension support (http://cbor.schmorp.de/value-sharing).
71	root	1.22	- experimental stringref extension support (http://cbor.schmorp.de/stringref).
72	root	1.21	- implement indirection tag (http://cbor.schmorp.de/indirection).
73
74	root	1.20	0.08 Wed Oct 30 11:10:43 CET 2013
75	root	1.19	- defused another too fragile test.
76
77	root	1.18	0.07 Tue Oct 29 23:04:07 CET 2013
78	root	1.17	- don't crash in decode when silly values are passed in.
79			- considerably speed up map decoding when map keys
80			are utf-8 or byte strings.
81	root	1.18	- raising an exception in THAW should now work without
82			leaking.
83	root	1.17
84	root	1.16	0.06 Tue Oct 29 16:56:07 CET 2013
85	root	1.14	- do not leak when deserialiasing via THAW.
86	root	1.15	- implement and document CBOR::XS creation/access/mutate
87			methods.
88	root	1.14
89	root	1.13	0.05 Mon Oct 28 22:27:47 CET 2013
90	root	1.12	- do not leak hash keys on decoding.
91
92	root	1.11	0.04 Sun Oct 27 23:47:47 CET 2013
93	root	1.10	- implement TO_CBOR/FREEZE/THAW serialisation protocols.
94	root	1.7	- requested perl-object and generic-object tags from iana.
95	root	1.9	- switched to Types::Serialiser for true, false and error.
96	root	1.8	- disabled some fragile tests (thanks, andk).
97	root	1.7
98	root	1.6	0.03 Sun Oct 27 00:28:41 CEST 2013
99	root	1.4	- improve 32 bit platform compatibility.
100	root	1.5	- take more advantage of ecb.h.
101	root	1.6	- preliminary and bare-bones tagged support.
102			- improved docs.
103	root	1.4
104	root	1.3	0.02 Sat Oct 26 13:08:05 CEST 2013
105			- no aborts left.
106			- add $CBOR::XS::MAGIC.
107			- preliminary tagged decoding to arrayref.
108	root	1.2	- indefinite encoding fixed.
109			- half float decoding implemented.
110			- t/50_rfc.t adds test vectors from the rfc, which
111			are checked as applicable.
112
113	root	1.1	0.01 Fri Oct 25 21:39:56 CEST 2013
114			- original version; cloned from JSON-XS
115