ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/CBOR-XS/Changes
Revision: 1.92
Committed: Wed Oct 27 14:59:22 2021 UTC (2 years, 6 months ago) by root
Branch: MAIN
Changes since 1.91: +2 -0 lines
Log Message:
*** empty log message ***

File Contents

# Content
1 Revision history for Perl extension CBOR::XS
2
3 TODO: pack_keys?
4 TODO: document encode_cbor_sharing?
5 TODO: weaken cyclic structures?
6 TODO: large negative integers
7 TODO: type cast tests.
8 TODO: possibly implement https://peteroupc.github.io/CBOR/extended.html, but NaNs are nonportable. rely on libecb?
9 TODO: https://github.com/svaarala/cbor-specs/blob/master/cbor-nonutf8-string-tags.rst, but maybe that is overkill?
10
11 - fixed a wrong printf format specifier (reported by Petr Písař).
12
13 1.85 Sat 23 Oct 2021 04:59:56 CEST
14 - left debugging printf in code, need a test for that :(
15
16 1.84 Thu 21 Oct 2021 03:11:52 CEST
17 - fix a bug in validate_utf8 where we call perl's is_utf8_string with
18 a lenght of zero for empty strings, but perl interprets that as
19 "calculate length", causing spurious validation errors for
20 empty strings.
21 - include validate_utf8 in new_safe.
22 - avoid some warnings.
23
24 1.83 Tue Dec 8 09:27:06 CET 2020
25 - add CBOR::XS::as_map cast function.
26
27 1.82 Tue Dec 1 02:47:40 CET 2020
28 - add CBOR::XS::as_bool cast function.
29
30 1.81 Mon Nov 30 19:29:33 CET 2020
31 - cast functions were broken due to last-minute renaming. thats
32 what you get for not having a tessuite.
33 - Math::BigInt and Math::BigFloat are pretty broken (again),
34 so disable some tests. (try printing the bigfloat
35 799999999999999999998E99999999999999999998).
36
37 1.8 Sun Nov 29 22:35:13 CET 2020
38 - experimental support for some type casts, as well as embedding
39 raw cbor data.
40
41 1.71 Thu Nov 15 20:52:13 CET 2018
42 - work around what smells like a perl bug w.r.t. exceptions
43 thrown in callbacks.
44 - update libecb.
45
46 1.7 Tue Jun 27 04:02:23 CEST 2017
47 - SECURITY FIX: fix two bugs found by american fuzzy lop,
48 upgrade is advised if you accept data from untrusted
49 sources.
50 - an out-of bound sharedref or stringref index could cause an
51 out of bounds access - might be exploitable.
52 - a decoding error during indefinite array or hash decoding
53 could cause an endless loop.
54
55 1.6 Wed Dec 7 15:13:23 CET 2016
56 - greatly expand the SECURITY IMPLICATIONS and similar sections.
57 - new constructor new_safe, to create a secure CBOR::XS object.
58 - new option forbid_objects, to disallow serialisation.
59 - new CBOR::XS::safe_filter functionality.
60 - fix a crash when decoding a cyclic data structure using
61 stringref/pack_strings when allow_cycles is disabled.
62 - fix a crash when decoding hash keys with length >= 2**31.
63 - avoid unreasonably long decoding times for certain
64 types of (corrupt) cbor texts.
65 - support arrays and hashes with >= 2**31 members.
66 - avoid overflow on pointer arithmetic when checking whether enough
67 data is available.
68 - fix a memory leak that occured when decoding failed while decoding
69 a tagged value.
70 - do not leak the partially constructed result when stringifying
71 a hash key throws an exception.
72 - various code size and efficiency optimizations (reduced code
73 from 42 to 40kB on my system, despite the new features).
74
75 1.5 Wed Apr 27 11:38:39 CEST 2016
76 - Math::BigFloat madness workaround, see
77 http://blog.schmorp.de/2016-04-23-mathbigfloat-maintainer-fail.html
78 (bugreport by zdm@softvisio.net).
79 - add text_keys and text_strings options to force CBOR text encoding
80 for perl hash keys or all strings, as a result of discussions
81 with Fredrik Ljunggren.
82 - implement support for arbitrary-exponent numbers (see
83 http://peteroupc.github.io/CBOR/bigfrac.html, tags 264 and 265)
84 for both en- and decoding.
85 - implement support for rational numbers (see
86 http://peteroupc.github.io/CBOR/rational.html, tag 30) for both
87 en- and decoding.
88 - the above effectively implements all registered CBOR extensions
89 in a sensible manner.
90 - remove some weird dead code that was duplicated (%FILTER).
91 - add t/58_hv.t, which tests hashes and the new text_* flags.
92 hashes apparently were not encoded at all in any of the existing
93 tests.
94 - document Math::BigFloat base-2 performance/crash issues.
95 - use stability canary.
96
97 1.41 Thu 25 Feb 15:22:03 CET 2016
98 - avoid perl panics on nested FREEZE/THAW calls (testcase by
99 Victor Efimov).
100
101 1.4 Mon Feb 8 05:10:15 CET 2016
102 - buffer overflow fix: a fast path during decoding did not check
103 remaining length when decoding hash keys, found by fuzzing.
104 This can potentially leak information in the error message
105 or crash the process.
106 - use C style { 0 } struct initializer.
107 - upgrade libecb.
108
109 1.3 Mon Apr 27 22:21:04 CEST 2015
110 - the incremental parser didn't properly parse tagged values
111 (testcase by Mons Anderson).
112 - slightly speed up encoding of plain (nonmagical) arrays.
113 - try to clarify further that effectively all 32 bit architectures
114 have 64 bit integer support.
115 - upgrade libecb.
116
117 1.26 Sat Oct 25 08:35:44 CEST 2014
118 - update the t/57_incr.t subtest that would rely on 64 bit ints.
119 - disable t/50_rfc.t test that fails because of broken data::dumper.
120
121 1.25 Sun Jan 5 15:19:14 CET 2014
122 - map key decoding was pretty much botched due to the recent cleanups.
123 - work around Time::Piece->epoch returning a string value, avoid encoding
124 this as a tag 1 string.
125 - enable more testcases in t/50_rfc.t, now that they work :)
126
127 1.2 Tue Dec 10 22:06:42 CET 2013
128 - implement an incremental decoder.
129
130 1.12 Tue Dec 3 11:23:22 CET 2013
131 - work around broken Time::Piece (in old versions of the module, %z doesn't
132 work as documented, gives different results on different platforms(!)).
133
134 1.11 Sun Dec 1 18:00:00 CET 2013
135 - new setting: validate_utf8, for when you can't trust your cbor data.
136 - do not leak memory on decoding errors, when allow_cycles is enabled.
137 - add default filters for tags 0 and 1, using Time::Piece.
138 - more tests added.
139
140 1.1 Sat Nov 30 19:14:27 CET 2013
141 - INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode
142 cyclic data structures (to avoid memleaks in unsuspecting code).
143 - no longer "share" references that aren't, i.e. true/false/null/error/tagged.
144 - fix stringref w.r.t. indefinite-length strings.
145 - verify indefinite-length string chunk types.
146 - do not allow extremely large arrays - assume an array element
147 requires at least one CBOR byte, to avoid memory exhaustion attacks.
148 - major code overhaul.
149
150 1.0 Thu Nov 28 16:43:31 CET 2013
151 - use the now official tag values for extensions. remove the
152 experimental notice. it's the real thing now, with real bugs.
153 - renamed allow_stringref to pack_strings.
154 - port to perl <= 5.16.
155 - slightly improve the documentation.
156
157 0.09 Fri Nov 22 16:54:18 CET 2013
158 - bignum/bigfloat/decimal support.
159 - uri support.
160 - tag filter functions support for decoding.
161 - do not support reference-to-1/0/undef anymore, you need to use
162 the Types::Serialiser objects now.
163 - experimental sharable extension support (http://cbor.schmorp.de/value-sharing).
164 - experimental stringref extension support (http://cbor.schmorp.de/stringref).
165 - implement indirection tag (http://cbor.schmorp.de/indirection).
166
167 0.08 Wed Oct 30 11:10:43 CET 2013
168 - defused another too fragile test.
169
170 0.07 Tue Oct 29 23:04:07 CET 2013
171 - don't crash in decode when silly values are passed in.
172 - considerably speed up map decoding when map keys
173 are utf-8 or byte strings.
174 - raising an exception in THAW should now work without
175 leaking.
176
177 0.06 Tue Oct 29 16:56:07 CET 2013
178 - do not leak when deserialiasing via THAW.
179 - implement and document CBOR::XS creation/access/mutate
180 methods.
181
182 0.05 Mon Oct 28 22:27:47 CET 2013
183 - do not leak hash keys on decoding.
184
185 0.04 Sun Oct 27 23:47:47 CET 2013
186 - implement TO_CBOR/FREEZE/THAW serialisation protocols.
187 - requested perl-object and generic-object tags from iana.
188 - switched to Types::Serialiser for true, false and error.
189 - disabled some fragile tests (thanks, andk).
190
191 0.03 Sun Oct 27 00:28:41 CEST 2013
192 - improve 32 bit platform compatibility.
193 - take more advantage of ecb.h.
194 - preliminary and bare-bones tagged support.
195 - improved docs.
196
197 0.02 Sat Oct 26 13:08:05 CEST 2013
198 - no aborts left.
199 - add $CBOR::XS::MAGIC.
200 - preliminary tagged decoding to arrayref.
201 - indefinite encoding fixed.
202 - half float decoding implemented.
203 - t/50_rfc.t adds test vectors from the rfc, which
204 are checked as applicable.
205
206 0.01 Fri Oct 25 21:39:56 CEST 2013
207 - original version; cloned from JSON-XS
208