ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/CBOR-XS/Changes
(Generate patch)

Comparing CBOR-XS/Changes (file contents):
Revision 1.36 by root, Sat Nov 30 18:13:53 2013 UTC vs.
Revision 1.95 by root, Mon Dec 19 20:31:33 2022 UTC

1Revision history for Perl extension CBOR::XS 1Revision history for Perl extension CBOR::XS
2 2
3TODO: pack_keys? 3TODO: pack_keys?
4TODO: document encode_cbor_sharing? 4TODO: document encode_cbor_sharing?
5TODO: weaken cyclic structures?
6TODO: large negative integers
7TODO: type cast tests.
8TODO: round-tripping of types, such as float16 - maybe types::Serialiser support?
9TODO: possibly implement https://peteroupc.github.io/CBOR/extended.html, but NaNs are nonportable. rely on libecb?
10TODO: https://github.com/svaarala/cbor-specs/blob/master/cbor-nonutf8-string-tags.rst, but maybe that is overkill?
5 11
12TODO: as_object -> key value pair list to allow non-string hash keys
13 - \0, \1, \undef do not work, and were not intended to ever work, as
14 special values, despite being mentioned in the documentation (reported
15 by nuclightq).
16
171.86 Thu 04 Nov 2021 17:48:16 CET
18 - fixed a wrong printf format specifier (reported by Petr Písař).
19
201.85 Sat 23 Oct 2021 04:59:56 CEST
21 - left debugging printf in code, need a test for that :(
22
231.84 Thu 21 Oct 2021 03:11:52 CEST
24 - fix a bug in validate_utf8 where we call perl's is_utf8_string with
25 a lenght of zero for empty strings, but perl interprets that as
26 "calculate length", causing spurious validation errors for
27 empty strings.
28 - include validate_utf8 in new_safe.
29 - avoid some warnings.
30
311.83 Tue Dec 8 09:27:06 CET 2020
32 - add CBOR::XS::as_map cast function.
33
341.82 Tue Dec 1 02:47:40 CET 2020
35 - add CBOR::XS::as_bool cast function.
36
371.81 Mon Nov 30 19:29:33 CET 2020
38 - cast functions were broken due to last-minute renaming. thats
39 what you get for not having a tessuite.
40 - Math::BigInt and Math::BigFloat are pretty broken (again),
41 so disable some tests. (try printing the bigfloat
42 799999999999999999998E99999999999999999998).
43
441.8 Sun Nov 29 22:35:13 CET 2020
45 - experimental support for some type casts, as well as embedding
46 raw cbor data.
47
481.71 Thu Nov 15 20:52:13 CET 2018
49 - work around what smells like a perl bug w.r.t. exceptions
50 thrown in callbacks.
51 - update libecb.
52
531.7 Tue Jun 27 04:02:23 CEST 2017
54 - SECURITY FIX: fix two bugs found by american fuzzy lop,
55 upgrade is advised if you accept data from untrusted
56 sources.
57 - an out-of bound sharedref or stringref index could cause an
58 out of bounds access - might be exploitable.
59 - a decoding error during indefinite array or hash decoding
60 could cause an endless loop.
61
621.6 Wed Dec 7 15:13:23 CET 2016
63 - greatly expand the SECURITY IMPLICATIONS and similar sections.
64 - new constructor new_safe, to create a secure CBOR::XS object.
65 - new option forbid_objects, to disallow serialisation.
66 - new CBOR::XS::safe_filter functionality.
67 - fix a crash when decoding a cyclic data structure using
68 stringref/pack_strings when allow_cycles is disabled.
69 - fix a crash when decoding hash keys with length >= 2**31.
70 - avoid unreasonably long decoding times for certain
71 types of (corrupt) cbor texts.
72 - support arrays and hashes with >= 2**31 members.
73 - avoid overflow on pointer arithmetic when checking whether enough
74 data is available.
75 - fix a memory leak that occured when decoding failed while decoding
76 a tagged value.
77 - do not leak the partially constructed result when stringifying
78 a hash key throws an exception.
79 - various code size and efficiency optimizations (reduced code
80 from 42 to 40kB on my system, despite the new features).
81
821.5 Wed Apr 27 11:38:39 CEST 2016
83 - Math::BigFloat madness workaround, see
84 http://blog.schmorp.de/2016-04-23-mathbigfloat-maintainer-fail.html
85 (bugreport by zdm@softvisio.net).
86 - add text_keys and text_strings options to force CBOR text encoding
87 for perl hash keys or all strings, as a result of discussions
88 with Fredrik Ljunggren.
89 - implement support for arbitrary-exponent numbers (see
90 http://peteroupc.github.io/CBOR/bigfrac.html, tags 264 and 265)
91 for both en- and decoding.
92 - implement support for rational numbers (see
93 http://peteroupc.github.io/CBOR/rational.html, tag 30) for both
94 en- and decoding.
95 - the above effectively implements all registered CBOR extensions
96 in a sensible manner.
97 - remove some weird dead code that was duplicated (%FILTER).
98 - add t/58_hv.t, which tests hashes and the new text_* flags.
99 hashes apparently were not encoded at all in any of the existing
100 tests.
101 - document Math::BigFloat base-2 performance/crash issues.
102 - use stability canary.
103
1041.41 Thu 25 Feb 15:22:03 CET 2016
105 - avoid perl panics on nested FREEZE/THAW calls (testcase by
106 Victor Efimov).
107
1081.4 Mon Feb 8 05:10:15 CET 2016
109 - buffer overflow fix: a fast path during decoding did not check
110 remaining length when decoding hash keys, found by fuzzing.
111 This can potentially leak information in the error message
112 or crash the process.
113 - use C style { 0 } struct initializer.
114 - upgrade libecb.
115
1161.3 Mon Apr 27 22:21:04 CEST 2015
117 - the incremental parser didn't properly parse tagged values
118 (testcase by Mons Anderson).
119 - slightly speed up encoding of plain (nonmagical) arrays.
120 - try to clarify further that effectively all 32 bit architectures
121 have 64 bit integer support.
122 - upgrade libecb.
123
1241.26 Sat Oct 25 08:35:44 CEST 2014
125 - update the t/57_incr.t subtest that would rely on 64 bit ints.
126 - disable t/50_rfc.t test that fails because of broken data::dumper.
127
1281.25 Sun Jan 5 15:19:14 CET 2014
129 - map key decoding was pretty much botched due to the recent cleanups.
130 - work around Time::Piece->epoch returning a string value, avoid encoding
131 this as a tag 1 string.
132 - enable more testcases in t/50_rfc.t, now that they work :)
133
1341.2 Tue Dec 10 22:06:42 CET 2013
135 - implement an incremental decoder.
136
1371.12 Tue Dec 3 11:23:22 CET 2013
138 - work around broken Time::Piece (in old versions of the module, %z doesn't
139 work as documented, gives different results on different platforms(!)).
140
1411.11 Sun Dec 1 18:00:00 CET 2013
142 - new setting: validate_utf8, for when you can't trust your cbor data.
143 - do not leak memory on decoding errors, when allow_cycles is enabled.
144 - add default filters for tags 0 and 1, using Time::Piece.
145 - more tests added.
146
1471.1 Sat Nov 30 19:14:27 CET 2013
6 - INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode 148 - INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode
7 cyclic data structures (to avoid memleaks in unsuspecting code). 149 cyclic data structures (to avoid memleaks in unsuspecting code).
8 - no longer "share" references that aren't, i.e. 150 - no longer "share" references that aren't, i.e. true/false/null/error/tagged.
9 as true/false/null/error/tagged.
10 - fix stringref w.r.t. indefinite-length strings. 151 - fix stringref w.r.t. indefinite-length strings.
11 - verify indefinite-length string chunk types. 152 - verify indefinite-length string chunk types.
12 - do not allow extremely large arrays - assume an array element 153 - do not allow extremely large arrays - assume an array element
13 requires at least one CBOR byte. 154 requires at least one CBOR byte, to avoid memory exhaustion attacks.
14 - major code overhaul. 155 - major code overhaul.
15 156
161.0 Thu Nov 28 16:43:31 CET 2013 1571.0 Thu Nov 28 16:43:31 CET 2013
17 - use the now official tag values for extensions. remove the 158 - use the now official tag values for extensions. remove the
18 experimental notice. it's the real thing now, with real bugs. 159 experimental notice. it's the real thing now, with real bugs.

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines