ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/CBOR-XS/Changes
(Generate patch)

Comparing CBOR-XS/Changes (file contents):
Revision 1.54 by root, Mon Feb 8 04:11:11 2016 UTC vs.
Revision 1.76 by root, Wed Dec 7 14:14:30 2016 UTC

1Revision history for Perl extension CBOR::XS 1Revision history for Perl extension CBOR::XS
2 2
3TODO: pack_keys? 3TODO: pack_keys?
4TODO: document encode_cbor_sharing? 4TODO: document encode_cbor_sharing?
5TODO: weaken cyclic structures? 5TODO: weaken cyclic structures?
6TODO: allowed_classes or so? 6TODO: large negative integers
7
81.6 Wed Dec 7 15:13:23 CET 2016
9 - greatly expand the SECURITY IMPLICATIONS and similar sections.
10 - new constructor new_safe, to create a secure CBOR::XS object.
11 - new option forbid_objects, to disallow serialisation.
12 - new CBOR::XS::safe_filter functionality.
13 - fix a crash when decoding a cyclic data structure using
14 stringref/pack_strings when allow_cycles is disabled.
15 - fix a crash when decoding hash keys with length >= 2**31.
16 - avoid unreasonably long decoding times for certain
17 types of (corrupt) cbor texts.
18 - support arrays and hashes with >= 2**31 members.
19 - avoid overflow on pointer arithmetic when checking whether enough
20 data is available.
21 - fix a memory leak that occured when decoding failed while decoding
22 a tagged value.
23 - do not leak the partially constructed result when stringifying
24 a hash key throws an exception.
25 - various code size and efficiency optimizations (reduced code
26 from 42 to 40kB on my system, despite the new features).
27
281.5 Wed Apr 27 11:38:39 CEST 2016
29 - Math::BigFloat madness workaround, see
30 http://blog.schmorp.de/2016-04-23-mathbigfloat-maintainer-fail.html
31 (bugreport by zdm@softvisio.net).
32 - add text_keys and text_strings options to force CBOR text encoding
33 for perl hash keys or all strings, as a result of discussions
34 with Fredrik Ljunggren.
35 - implement support for arbitrary-exponent numbers (see
36 http://peteroupc.github.io/CBOR/bigfrac.html, tags 264 and 265)
37 for both en- and decoding.
38 - implement support for rational numbers (see
39 http://peteroupc.github.io/CBOR/rational.html, tag 30) for both
40 en- and decoding.
41 - the above effectively implements all registered CBOR extensions
42 in a sensible manner.
43 - remove some weird dead code that was duplicated (%FILTER).
44 - add t/58_hv.t, which tests hashes and the new text_* flags.
45 hashes apparently were not encoded at all in any of the existing
46 tests.
47 - document Math::BigFloat base-2 performance/crash issues.
48 - use stability canary.
49
501.41 Thu 25 Feb 15:22:03 CET 2016
51 - avoid perl panics on nested FREEZE/THAW calls (testcase by
52 Victor Efimov).
7 53
81.4 Mon Feb 8 05:10:15 CET 2016 541.4 Mon Feb 8 05:10:15 CET 2016
9 - buffer overflow fix: a fast path during decoding did not check 55 - buffer overflow fix: a fast path during decoding did not check
10 remaining length when decoding hash keys, found by fuzzing. 56 remaining length when decoding hash keys, found by fuzzing.
57 This can potentially leak information in the error message
58 or crash the process.
11 - use C style { 0 } struct initializer. 59 - use C style { 0 } struct initializer.
12 - upgrade libecb. 60 - upgrade libecb.
13 61
141.3 Mon Apr 27 22:21:04 CEST 2015 621.3 Mon Apr 27 22:21:04 CEST 2015
15 - the incremental parser didn't properly parse tagged values 63 - the incremental parser didn't properly parse tagged values

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines