ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/CBOR-XS/Changes
(Generate patch)

Comparing CBOR-XS/Changes (file contents):
Revision 1.41 by root, Sun Dec 1 16:40:25 2013 UTC vs.
Revision 1.81 by root, Sun Nov 29 22:59:49 2020 UTC

1Revision history for Perl extension CBOR::XS 1Revision history for Perl extension CBOR::XS
2 2
3TODO: pack_keys? 3TODO: pack_keys?
4TODO: document encode_cbor_sharing? 4TODO: document encode_cbor_sharing?
5TODO: weaken cyclic structures? 5TODO: weaken cyclic structures?
6TODO: large negative integers
7TODO: type cast tests.
8TODO: possibly implement https://peteroupc.github.io/CBOR/extended.html, but NaNs are nonportable. rely on libecb?
9TODO: https://github.com/svaarala/cbor-specs/blob/master/cbor-nonutf8-string-tags.rst, but maybe that is overkill?
6 10
71.11 111.81
12 - Math::BigInt and Math::BigFloat are pretty broken (again),
13 so disable some tests. (try printing the bigfloat
14 799999999999999999998E99999999999999999998).
15
161.8 Sun Nov 29 22:35:13 CET 2020
17 - experimental support for some type casts, as well as embedding
18 raw cbor data.
19
201.71 Thu Nov 15 20:52:13 CET 2018
21 - work around what smells like a perl bug w.r.t. exceptions
22 thrown in callbacks.
23 - update libecb.
24
251.7 Tue Jun 27 04:02:23 CEST 2017
26 - SECURITY FIX: fix two bugs found by american fuzzy lop,
27 upgrade is advised if you accept data from untrusted
28 sources.
29 - an out-of bound sharedref or stringref index could cause an
30 out of bounds access - might be exploitable.
31 - a decoding error during indefinite array or hash decoding
32 could cause an endless loop.
33
341.6 Wed Dec 7 15:13:23 CET 2016
35 - greatly expand the SECURITY IMPLICATIONS and similar sections.
36 - new constructor new_safe, to create a secure CBOR::XS object.
37 - new option forbid_objects, to disallow serialisation.
38 - new CBOR::XS::safe_filter functionality.
39 - fix a crash when decoding a cyclic data structure using
40 stringref/pack_strings when allow_cycles is disabled.
41 - fix a crash when decoding hash keys with length >= 2**31.
42 - avoid unreasonably long decoding times for certain
43 types of (corrupt) cbor texts.
44 - support arrays and hashes with >= 2**31 members.
45 - avoid overflow on pointer arithmetic when checking whether enough
46 data is available.
47 - fix a memory leak that occured when decoding failed while decoding
48 a tagged value.
49 - do not leak the partially constructed result when stringifying
50 a hash key throws an exception.
51 - various code size and efficiency optimizations (reduced code
52 from 42 to 40kB on my system, despite the new features).
53
541.5 Wed Apr 27 11:38:39 CEST 2016
55 - Math::BigFloat madness workaround, see
56 http://blog.schmorp.de/2016-04-23-mathbigfloat-maintainer-fail.html
57 (bugreport by zdm@softvisio.net).
58 - add text_keys and text_strings options to force CBOR text encoding
59 for perl hash keys or all strings, as a result of discussions
60 with Fredrik Ljunggren.
61 - implement support for arbitrary-exponent numbers (see
62 http://peteroupc.github.io/CBOR/bigfrac.html, tags 264 and 265)
63 for both en- and decoding.
64 - implement support for rational numbers (see
65 http://peteroupc.github.io/CBOR/rational.html, tag 30) for both
66 en- and decoding.
67 - the above effectively implements all registered CBOR extensions
68 in a sensible manner.
69 - remove some weird dead code that was duplicated (%FILTER).
70 - add t/58_hv.t, which tests hashes and the new text_* flags.
71 hashes apparently were not encoded at all in any of the existing
72 tests.
73 - document Math::BigFloat base-2 performance/crash issues.
74 - use stability canary.
75
761.41 Thu 25 Feb 15:22:03 CET 2016
77 - avoid perl panics on nested FREEZE/THAW calls (testcase by
78 Victor Efimov).
79
801.4 Mon Feb 8 05:10:15 CET 2016
81 - buffer overflow fix: a fast path during decoding did not check
82 remaining length when decoding hash keys, found by fuzzing.
83 This can potentially leak information in the error message
84 or crash the process.
85 - use C style { 0 } struct initializer.
86 - upgrade libecb.
87
881.3 Mon Apr 27 22:21:04 CEST 2015
89 - the incremental parser didn't properly parse tagged values
90 (testcase by Mons Anderson).
91 - slightly speed up encoding of plain (nonmagical) arrays.
92 - try to clarify further that effectively all 32 bit architectures
93 have 64 bit integer support.
94 - upgrade libecb.
95
961.26 Sat Oct 25 08:35:44 CEST 2014
97 - update the t/57_incr.t subtest that would rely on 64 bit ints.
98 - disable t/50_rfc.t test that fails because of broken data::dumper.
99
1001.25 Sun Jan 5 15:19:14 CET 2014
101 - map key decoding was pretty much botched due to the recent cleanups.
102 - work around Time::Piece->epoch returning a string value, avoid encoding
103 this as a tag 1 string.
104 - enable more testcases in t/50_rfc.t, now that they work :)
105
1061.2 Tue Dec 10 22:06:42 CET 2013
107 - implement an incremental decoder.
108
1091.12 Tue Dec 3 11:23:22 CET 2013
110 - work around broken Time::Piece (in old versions of the module, %z doesn't
111 work as documented, gives different results on different platforms(!)).
112
1131.11 Sun Dec 1 18:00:00 CET 2013
8 - new setting: validate_utf8, for when you can't trust your cbor data. 114 - new setting: validate_utf8, for when you can't trust your cbor data.
9 - do not leak memory on decoding errors, when allow_cycles is enabled. 115 - do not leak memory on decoding errors, when allow_cycles is enabled.
10 - add default filters for tags 0 and 1, using Time::Piece. 116 - add default filters for tags 0 and 1, using Time::Piece.
117 - more tests added.
11 118
121.1 Sat Nov 30 19:14:27 CET 2013 1191.1 Sat Nov 30 19:14:27 CET 2013
13 - INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode 120 - INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode
14 cyclic data structures (to avoid memleaks in unsuspecting code). 121 cyclic data structures (to avoid memleaks in unsuspecting code).
15 - no longer "share" references that aren't, i.e. true/false/null/error/tagged. 122 - no longer "share" references that aren't, i.e. true/false/null/error/tagged.

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines