1 |
root |
1.1 |
Revision history for Perl extension CBOR::XS |
2 |
|
|
|
3 |
root |
1.30 |
TODO: pack_keys? |
4 |
root |
1.36 |
TODO: document encode_cbor_sharing? |
5 |
root |
1.38 |
TODO: weaken cyclic structures? |
6 |
root |
1.70 |
TODO: large negative integers |
7 |
root |
1.79 |
TODO: type cast tests. |
8 |
root |
1.81 |
TODO: possibly implement https://peteroupc.github.io/CBOR/extended.html, but NaNs are nonportable. rely on libecb? |
9 |
|
|
TODO: https://github.com/svaarala/cbor-specs/blob/master/cbor-nonutf8-string-tags.rst, but maybe that is overkill? |
10 |
root |
1.84 |
|
11 |
root |
1.89 |
- include validate_utf8 in new_safe. |
12 |
root |
1.88 |
- avoid some warnings. |
13 |
|
|
|
14 |
root |
1.87 |
1.83 Tue Dec 8 09:27:06 CET 2020 |
15 |
|
|
- add CBOR::XS::as_map cast function. |
16 |
|
|
|
17 |
root |
1.85 |
1.82 Tue Dec 1 02:47:40 CET 2020 |
18 |
root |
1.84 |
- add CBOR::XS::as_bool cast function. |
19 |
root |
1.81 |
|
20 |
root |
1.82 |
1.81 Mon Nov 30 19:29:33 CET 2020 |
21 |
root |
1.84 |
- cast functions were broken due to last-minute renaming. thats |
22 |
|
|
what you get for not having a tessuite. |
23 |
root |
1.81 |
- Math::BigInt and Math::BigFloat are pretty broken (again), |
24 |
|
|
so disable some tests. (try printing the bigfloat |
25 |
|
|
799999999999999999998E99999999999999999998). |
26 |
root |
1.79 |
|
27 |
root |
1.80 |
1.8 Sun Nov 29 22:35:13 CET 2020 |
28 |
root |
1.79 |
- experimental support for some type casts, as well as embedding |
29 |
|
|
raw cbor data. |
30 |
root |
1.76 |
|
31 |
root |
1.78 |
1.71 Thu Nov 15 20:52:13 CET 2018 |
32 |
|
|
- work around what smells like a perl bug w.r.t. exceptions |
33 |
|
|
thrown in callbacks. |
34 |
|
|
- update libecb. |
35 |
|
|
|
36 |
root |
1.77 |
1.7 Tue Jun 27 04:02:23 CEST 2017 |
37 |
|
|
- SECURITY FIX: fix two bugs found by american fuzzy lop, |
38 |
|
|
upgrade is advised if you accept data from untrusted |
39 |
|
|
sources. |
40 |
|
|
- an out-of bound sharedref or stringref index could cause an |
41 |
|
|
out of bounds access - might be exploitable. |
42 |
|
|
- a decoding error during indefinite array or hash decoding |
43 |
|
|
could cause an endless loop. |
44 |
|
|
|
45 |
root |
1.76 |
1.6 Wed Dec 7 15:13:23 CET 2016 |
46 |
root |
1.75 |
- greatly expand the SECURITY IMPLICATIONS and similar sections. |
47 |
root |
1.74 |
- new constructor new_safe, to create a secure CBOR::XS object. |
48 |
|
|
- new option forbid_objects, to disallow serialisation. |
49 |
|
|
- new CBOR::XS::safe_filter functionality. |
50 |
root |
1.69 |
- fix a crash when decoding a cyclic data structure using |
51 |
|
|
stringref/pack_strings when allow_cycles is disabled. |
52 |
root |
1.71 |
- fix a crash when decoding hash keys with length >= 2**31. |
53 |
|
|
- avoid unreasonably long decoding times for certain |
54 |
root |
1.75 |
types of (corrupt) cbor texts. |
55 |
root |
1.71 |
- support arrays and hashes with >= 2**31 members. |
56 |
|
|
- avoid overflow on pointer arithmetic when checking whether enough |
57 |
|
|
data is available. |
58 |
root |
1.72 |
- fix a memory leak that occured when decoding failed while decoding |
59 |
|
|
a tagged value. |
60 |
root |
1.73 |
- do not leak the partially constructed result when stringifying |
61 |
|
|
a hash key throws an exception. |
62 |
root |
1.74 |
- various code size and efficiency optimizations (reduced code |
63 |
root |
1.75 |
from 42 to 40kB on my system, despite the new features). |
64 |
root |
1.46 |
|
65 |
root |
1.67 |
1.5 Wed Apr 27 11:38:39 CEST 2016 |
66 |
root |
1.61 |
- Math::BigFloat madness workaround, see |
67 |
|
|
http://blog.schmorp.de/2016-04-23-mathbigfloat-maintainer-fail.html |
68 |
root |
1.57 |
(bugreport by zdm@softvisio.net). |
69 |
root |
1.61 |
- add text_keys and text_strings options to force CBOR text encoding |
70 |
|
|
for perl hash keys or all strings, as a result of discussions |
71 |
|
|
with Fredrik Ljunggren. |
72 |
root |
1.64 |
- implement support for arbitrary-exponent numbers (see |
73 |
|
|
http://peteroupc.github.io/CBOR/bigfrac.html, tags 264 and 265) |
74 |
|
|
for both en- and decoding. |
75 |
root |
1.65 |
- implement support for rational numbers (see |
76 |
|
|
http://peteroupc.github.io/CBOR/rational.html, tag 30) for both |
77 |
|
|
en- and decoding. |
78 |
root |
1.67 |
- the above effectively implements all registered CBOR extensions |
79 |
root |
1.66 |
in a sensible manner. |
80 |
root |
1.67 |
- remove some weird dead code that was duplicated (%FILTER). |
81 |
root |
1.60 |
- add t/58_hv.t, which tests hashes and the new text_* flags. |
82 |
root |
1.67 |
hashes apparently were not encoded at all in any of the existing |
83 |
root |
1.60 |
tests. |
84 |
root |
1.67 |
- document Math::BigFloat base-2 performance/crash issues. |
85 |
root |
1.62 |
- use stability canary. |
86 |
root |
1.57 |
|
87 |
root |
1.56 |
1.41 Thu 25 Feb 15:22:03 CET 2016 |
88 |
|
|
- avoid perl panics on nested FREEZE/THAW calls (testcase by |
89 |
|
|
Victor Efimov). |
90 |
|
|
|
91 |
root |
1.54 |
1.4 Mon Feb 8 05:10:15 CET 2016 |
92 |
|
|
- buffer overflow fix: a fast path during decoding did not check |
93 |
|
|
remaining length when decoding hash keys, found by fuzzing. |
94 |
root |
1.55 |
This can potentially leak information in the error message |
95 |
|
|
or crash the process. |
96 |
root |
1.53 |
- use C style { 0 } struct initializer. |
97 |
root |
1.54 |
- upgrade libecb. |
98 |
root |
1.53 |
|
99 |
root |
1.52 |
1.3 Mon Apr 27 22:21:04 CEST 2015 |
100 |
|
|
- the incremental parser didn't properly parse tagged values |
101 |
|
|
(testcase by Mons Anderson). |
102 |
root |
1.50 |
- slightly speed up encoding of plain (nonmagical) arrays. |
103 |
root |
1.51 |
- try to clarify further that effectively all 32 bit architectures |
104 |
|
|
have 64 bit integer support. |
105 |
root |
1.52 |
- upgrade libecb. |
106 |
root |
1.50 |
|
107 |
root |
1.49 |
1.26 Sat Oct 25 08:35:44 CEST 2014 |
108 |
root |
1.47 |
- update the t/57_incr.t subtest that would rely on 64 bit ints. |
109 |
root |
1.48 |
- disable t/50_rfc.t test that fails because of broken data::dumper. |
110 |
root |
1.47 |
|
111 |
root |
1.46 |
1.25 Sun Jan 5 15:19:14 CET 2014 |
112 |
|
|
- map key decoding was pretty much botched due to the recent cleanups. |
113 |
|
|
- work around Time::Piece->epoch returning a string value, avoid encoding |
114 |
|
|
this as a tag 1 string. |
115 |
|
|
- enable more testcases in t/50_rfc.t, now that they work :) |
116 |
|
|
|
117 |
|
|
1.2 Tue Dec 10 22:06:42 CET 2013 |
118 |
|
|
- implement an incremental decoder. |
119 |
root |
1.39 |
|
120 |
root |
1.44 |
1.12 Tue Dec 3 11:23:22 CET 2013 |
121 |
root |
1.45 |
- work around broken Time::Piece (in old versions of the module, %z doesn't |
122 |
|
|
work as documented, gives different results on different platforms(!)). |
123 |
root |
1.43 |
|
124 |
root |
1.42 |
1.11 Sun Dec 1 18:00:00 CET 2013 |
125 |
root |
1.39 |
- new setting: validate_utf8, for when you can't trust your cbor data. |
126 |
|
|
- do not leak memory on decoding errors, when allow_cycles is enabled. |
127 |
root |
1.41 |
- add default filters for tags 0 and 1, using Time::Piece. |
128 |
root |
1.42 |
- more tests added. |
129 |
root |
1.30 |
|
130 |
root |
1.37 |
1.1 Sat Nov 30 19:14:27 CET 2013 |
131 |
root |
1.36 |
- INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode |
132 |
|
|
cyclic data structures (to avoid memleaks in unsuspecting code). |
133 |
root |
1.37 |
- no longer "share" references that aren't, i.e. true/false/null/error/tagged. |
134 |
root |
1.32 |
- fix stringref w.r.t. indefinite-length strings. |
135 |
|
|
- verify indefinite-length string chunk types. |
136 |
root |
1.35 |
- do not allow extremely large arrays - assume an array element |
137 |
root |
1.37 |
requires at least one CBOR byte, to avoid memory exhaustion attacks. |
138 |
root |
1.34 |
- major code overhaul. |
139 |
root |
1.32 |
|
140 |
root |
1.31 |
1.0 Thu Nov 28 16:43:31 CET 2013 |
141 |
root |
1.28 |
- use the now official tag values for extensions. remove the |
142 |
|
|
experimental notice. it's the real thing now, with real bugs. |
143 |
root |
1.29 |
- renamed allow_stringref to pack_strings. |
144 |
root |
1.27 |
- port to perl <= 5.16. |
145 |
root |
1.31 |
- slightly improve the documentation. |
146 |
root |
1.27 |
|
147 |
root |
1.25 |
0.09 Fri Nov 22 16:54:18 CET 2013 |
148 |
root |
1.24 |
- bignum/bigfloat/decimal support. |
149 |
|
|
- uri support. |
150 |
|
|
- tag filter functions support for decoding. |
151 |
root |
1.21 |
- do not support reference-to-1/0/undef anymore, you need to use |
152 |
|
|
the Types::Serialiser objects now. |
153 |
|
|
- experimental sharable extension support (http://cbor.schmorp.de/value-sharing). |
154 |
root |
1.22 |
- experimental stringref extension support (http://cbor.schmorp.de/stringref). |
155 |
root |
1.21 |
- implement indirection tag (http://cbor.schmorp.de/indirection). |
156 |
|
|
|
157 |
root |
1.20 |
0.08 Wed Oct 30 11:10:43 CET 2013 |
158 |
root |
1.19 |
- defused another too fragile test. |
159 |
|
|
|
160 |
root |
1.18 |
0.07 Tue Oct 29 23:04:07 CET 2013 |
161 |
root |
1.17 |
- don't crash in decode when silly values are passed in. |
162 |
|
|
- considerably speed up map decoding when map keys |
163 |
|
|
are utf-8 or byte strings. |
164 |
root |
1.18 |
- raising an exception in THAW should now work without |
165 |
|
|
leaking. |
166 |
root |
1.17 |
|
167 |
root |
1.16 |
0.06 Tue Oct 29 16:56:07 CET 2013 |
168 |
root |
1.14 |
- do not leak when deserialiasing via THAW. |
169 |
root |
1.15 |
- implement and document CBOR::XS creation/access/mutate |
170 |
|
|
methods. |
171 |
root |
1.14 |
|
172 |
root |
1.13 |
0.05 Mon Oct 28 22:27:47 CET 2013 |
173 |
root |
1.12 |
- do not leak hash keys on decoding. |
174 |
|
|
|
175 |
root |
1.11 |
0.04 Sun Oct 27 23:47:47 CET 2013 |
176 |
root |
1.10 |
- implement TO_CBOR/FREEZE/THAW serialisation protocols. |
177 |
root |
1.7 |
- requested perl-object and generic-object tags from iana. |
178 |
root |
1.9 |
- switched to Types::Serialiser for true, false and error. |
179 |
root |
1.8 |
- disabled some fragile tests (thanks, andk). |
180 |
root |
1.7 |
|
181 |
root |
1.6 |
0.03 Sun Oct 27 00:28:41 CEST 2013 |
182 |
root |
1.4 |
- improve 32 bit platform compatibility. |
183 |
root |
1.5 |
- take more advantage of ecb.h. |
184 |
root |
1.6 |
- preliminary and bare-bones tagged support. |
185 |
|
|
- improved docs. |
186 |
root |
1.4 |
|
187 |
root |
1.3 |
0.02 Sat Oct 26 13:08:05 CEST 2013 |
188 |
|
|
- no aborts left. |
189 |
|
|
- add $CBOR::XS::MAGIC. |
190 |
|
|
- preliminary tagged decoding to arrayref. |
191 |
root |
1.2 |
- indefinite encoding fixed. |
192 |
|
|
- half float decoding implemented. |
193 |
|
|
- t/50_rfc.t adds test vectors from the rfc, which |
194 |
|
|
are checked as applicable. |
195 |
|
|
|
196 |
root |
1.1 |
0.01 Fri Oct 25 21:39:56 CEST 2013 |
197 |
|
|
- original version; cloned from JSON-XS |
198 |
|
|
|