ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/CBOR-XS/Changes
(Generate patch)

Comparing CBOR-XS/Changes (file contents):
Revision 1.57 by root, Sun Apr 24 09:11:14 2016 UTC vs.
Revision 1.98 by root, Fri Sep 8 20:03:06 2023 UTC

1Revision history for Perl extension CBOR::XS 1Revision history for Perl extension CBOR::XS
2 2
3TODO: pack_keys? 3TODO: pack_keys?
4TODO: document encode_cbor_sharing? 4TODO: document encode_cbor_sharing?
5TODO: weaken cyclic structures? 5TODO: weaken cyclic structures?
6TODO: allowed_classes or so? 6TODO: large negative integers
7TODO: type cast tests.
8TODO: round-tripping of types, such as float16 - maybe types::Serialiser support?
9TODO: possibly implement https://peteroupc.github.io/CBOR/extended.html, but NaNs are nonportable. rely on libecb?
10TODO: https://github.com/svaarala/cbor-specs/blob/master/cbor-nonutf8-string-tags.rst, but maybe that is overkill?
7 11
8 - the Math::BigFloat maintainer apparently thinks that changing 12TODO: as_object -> key value pair list to allow non-string hash keys
9 documented maths function to suddenly yield different results or 13 - shared references were not decoded correctly: instead of getting
10 to fail completely on valid input is cool. Try to work around 14 multiple references to the same object, you got the same
11 this madness - if Math::BigFloat changes its API too much, 15 reference to the same object, causing a number of issues. For
12 future versions will have to remove support for bignums 16 example, modifying the reference would modify all places the
17 reference was used, and encoding the decoded structure would
18 unshare the previously shared hashes, as trheir reference count
19 would be 1. Fixcing this was rather involved, as perl lacks the ability
20 to easily swap or copy arrays and hashes.
21 - \0, \1, \undef do not work, and were not intended to ever work, as
22 special values, despite being mentioned in the documentation (reported
23 by nuclightq).
24 - new feature: allow_weak_cycles.
25
261.86 Thu 04 Nov 2021 17:48:16 CET
27 - fixed a wrong printf format specifier (reported by Petr Písař).
28
291.85 Sat 23 Oct 2021 04:59:56 CEST
30 - left debugging printf in code, need a test for that :(
31
321.84 Thu 21 Oct 2021 03:11:52 CEST
33 - fix a bug in validate_utf8 where we call perl's is_utf8_string with
34 a lenght of zero for empty strings, but perl interprets that as
35 "calculate length", causing spurious validation errors for
36 empty strings.
37 - include validate_utf8 in new_safe.
38 - avoid some warnings.
39
401.83 Tue Dec 8 09:27:06 CET 2020
41 - add CBOR::XS::as_map cast function.
42
431.82 Tue Dec 1 02:47:40 CET 2020
44 - add CBOR::XS::as_bool cast function.
45
461.81 Mon Nov 30 19:29:33 CET 2020
47 - cast functions were broken due to last-minute renaming. thats
48 what you get for not having a tessuite.
49 - Math::BigInt and Math::BigFloat are pretty broken (again),
50 so disable some tests. (try printing the bigfloat
51 799999999999999999998E99999999999999999998).
52
531.8 Sun Nov 29 22:35:13 CET 2020
54 - experimental support for some type casts, as well as embedding
55 raw cbor data.
56
571.71 Thu Nov 15 20:52:13 CET 2018
58 - work around what smells like a perl bug w.r.t. exceptions
59 thrown in callbacks.
60 - update libecb.
61
621.7 Tue Jun 27 04:02:23 CEST 2017
63 - SECURITY FIX: fix two bugs found by american fuzzy lop,
64 upgrade is advised if you accept data from untrusted
65 sources.
66 - an out-of bound sharedref or stringref index could cause an
67 out of bounds access - might be exploitable.
68 - a decoding error during indefinite array or hash decoding
69 could cause an endless loop.
70
711.6 Wed Dec 7 15:13:23 CET 2016
72 - greatly expand the SECURITY IMPLICATIONS and similar sections.
73 - new constructor new_safe, to create a secure CBOR::XS object.
74 - new option forbid_objects, to disallow serialisation.
75 - new CBOR::XS::safe_filter functionality.
76 - fix a crash when decoding a cyclic data structure using
77 stringref/pack_strings when allow_cycles is disabled.
78 - fix a crash when decoding hash keys with length >= 2**31.
79 - avoid unreasonably long decoding times for certain
80 types of (corrupt) cbor texts.
81 - support arrays and hashes with >= 2**31 members.
82 - avoid overflow on pointer arithmetic when checking whether enough
83 data is available.
84 - fix a memory leak that occured when decoding failed while decoding
85 a tagged value.
86 - do not leak the partially constructed result when stringifying
87 a hash key throws an exception.
88 - various code size and efficiency optimizations (reduced code
89 from 42 to 40kB on my system, despite the new features).
90
911.5 Wed Apr 27 11:38:39 CEST 2016
92 - Math::BigFloat madness workaround, see
93 http://blog.schmorp.de/2016-04-23-mathbigfloat-maintainer-fail.html
13 (bugreport by zdm@softvisio.net). 94 (bugreport by zdm@softvisio.net).
95 - add text_keys and text_strings options to force CBOR text encoding
96 for perl hash keys or all strings, as a result of discussions
97 with Fredrik Ljunggren.
98 - implement support for arbitrary-exponent numbers (see
99 http://peteroupc.github.io/CBOR/bigfrac.html, tags 264 and 265)
100 for both en- and decoding.
101 - implement support for rational numbers (see
102 http://peteroupc.github.io/CBOR/rational.html, tag 30) for both
103 en- and decoding.
104 - the above effectively implements all registered CBOR extensions
105 in a sensible manner.
106 - remove some weird dead code that was duplicated (%FILTER).
107 - add t/58_hv.t, which tests hashes and the new text_* flags.
108 hashes apparently were not encoded at all in any of the existing
109 tests.
110 - document Math::BigFloat base-2 performance/crash issues.
111 - use stability canary.
14 112
151.41 Thu 25 Feb 15:22:03 CET 2016 1131.41 Thu 25 Feb 15:22:03 CET 2016
16 - avoid perl panics on nested FREEZE/THAW calls (testcase by 114 - avoid perl panics on nested FREEZE/THAW calls (testcase by
17 Victor Efimov). 115 Victor Efimov).
18 116

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines