ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/CBOR-XS/XS.pm
Revision: 1.90
Committed: Sat Nov 18 18:19:57 2023 UTC (5 months, 2 weeks ago) by root
Branch: MAIN
CVS Tags: HEAD
Changes since 1.89: +1 -1 lines
Log Message:
*** empty log message ***

File Contents

# Content
1 =head1 NAME
2
3 CBOR::XS - Concise Binary Object Representation (CBOR, RFC7049)
4
5 =encoding utf-8
6
7 =head1 SYNOPSIS
8
9 use CBOR::XS;
10
11 $binary_cbor_data = encode_cbor $perl_value;
12 $perl_value = decode_cbor $binary_cbor_data;
13
14 # OO-interface
15
16 $coder = CBOR::XS->new;
17 $binary_cbor_data = $coder->encode ($perl_value);
18 $perl_value = $coder->decode ($binary_cbor_data);
19
20 # prefix decoding
21
22 my $many_cbor_strings = ...;
23 while (length $many_cbor_strings) {
24 my ($data, $length) = $cbor->decode_prefix ($many_cbor_strings);
25 # data was decoded
26 substr $many_cbor_strings, 0, $length, ""; # remove decoded cbor string
27 }
28
29 =head1 DESCRIPTION
30
31 This module converts Perl data structures to the Concise Binary Object
32 Representation (CBOR) and vice versa. CBOR is a fast binary serialisation
33 format that aims to use an (almost) superset of the JSON data model, i.e.
34 when you can represent something useful in JSON, you should be able to
35 represent it in CBOR.
36
37 In short, CBOR is a faster and quite compact binary alternative to JSON,
38 with the added ability of supporting serialisation of Perl objects. (JSON
39 often compresses better than CBOR though, so if you plan to compress the
40 data later and speed is less important you might want to compare both
41 formats first).
42
43 The primary goal of this module is to be I<correct> and the secondary goal
44 is to be I<fast>. To reach the latter goal it was written in C.
45
46 To give you a general idea about speed, with texts in the megabyte range,
47 C<CBOR::XS> usually encodes roughly twice as fast as L<Storable> or
48 L<JSON::XS> and decodes about 15%-30% faster than those. The shorter the
49 data, the worse L<Storable> performs in comparison.
50
51 Regarding compactness, C<CBOR::XS>-encoded data structures are usually
52 about 20% smaller than the same data encoded as (compact) JSON or
53 L<Storable>.
54
55 In addition to the core CBOR data format, this module implements a
56 number of extensions, to support cyclic and shared data structures
57 (see C<allow_sharing> and C<allow_cycles>), string deduplication (see
58 C<pack_strings>) and scalar references (always enabled).
59
60 See MAPPING, below, on how CBOR::XS maps perl values to CBOR values and
61 vice versa.
62
63 =cut
64
65 package CBOR::XS;
66
67 use common::sense;
68
69 our $VERSION = 1.87;
70 our @ISA = qw(Exporter);
71
72 our @EXPORT = qw(encode_cbor decode_cbor);
73
74 use Exporter;
75 use XSLoader;
76
77 use Types::Serialiser;
78
79 our $MAGIC = "\xd9\xd9\xf7";
80
81 =head1 FUNCTIONAL INTERFACE
82
83 The following convenience methods are provided by this module. They are
84 exported by default:
85
86 =over 4
87
88 =item $cbor_data = encode_cbor $perl_scalar
89
90 Converts the given Perl data structure to CBOR representation. Croaks on
91 error.
92
93 =item $perl_scalar = decode_cbor $cbor_data
94
95 The opposite of C<encode_cbor>: expects a valid CBOR string to parse,
96 returning the resulting perl scalar. Croaks on error.
97
98 =back
99
100
101 =head1 OBJECT-ORIENTED INTERFACE
102
103 The object oriented interface lets you configure your own encoding or
104 decoding style, within the limits of supported formats.
105
106 =over 4
107
108 =item $cbor = new CBOR::XS
109
110 Creates a new CBOR::XS object that can be used to de/encode CBOR
111 strings. All boolean flags described below are by default I<disabled>.
112
113 The mutators for flags all return the CBOR object again and thus calls can
114 be chained:
115
116 my $cbor = CBOR::XS->new->encode ({a => [1,2]});
117
118 =item $cbor = new_safe CBOR::XS
119
120 Create a new, safe/secure CBOR::XS object. This is similar to C<new>,
121 but configures the coder object to be safe to use with untrusted
122 data. Currently, this is equivalent to:
123
124 my $cbor = CBOR::XS
125 ->new
126 ->validate_utf8
127 ->forbid_objects
128 ->filter (\&CBOR::XS::safe_filter)
129 ->max_size (1e8);
130
131 But is more future proof (it is better to crash because of a change than
132 to be exploited in other ways).
133
134 =cut
135
136 sub new_safe {
137 CBOR::XS
138 ->new
139 ->validate_utf8
140 ->forbid_objects
141 ->filter (\&CBOR::XS::safe_filter)
142 ->max_size (1e8)
143 }
144
145 =item $cbor = $cbor->max_depth ([$maximum_nesting_depth])
146
147 =item $max_depth = $cbor->get_max_depth
148
149 Sets the maximum nesting level (default C<512>) accepted while encoding
150 or decoding. If a higher nesting level is detected in CBOR data or a Perl
151 data structure, then the encoder and decoder will stop and croak at that
152 point.
153
154 Nesting level is defined by number of hash- or arrayrefs that the encoder
155 needs to traverse to reach a given point or the number of C<{> or C<[>
156 characters without their matching closing parenthesis crossed to reach a
157 given character in a string.
158
159 Setting the maximum depth to one disallows any nesting, so that ensures
160 that the object is only a single hash/object or array.
161
162 If no argument is given, the highest possible setting will be used, which
163 is rarely useful.
164
165 Note that nesting is implemented by recursion in C. The default value has
166 been chosen to be as large as typical operating systems allow without
167 crashing.
168
169 See L<SECURITY CONSIDERATIONS>, below, for more info on why this is useful.
170
171 =item $cbor = $cbor->max_size ([$maximum_string_size])
172
173 =item $max_size = $cbor->get_max_size
174
175 Set the maximum length a CBOR string may have (in bytes) where decoding
176 is being attempted. The default is C<0>, meaning no limit. When C<decode>
177 is called on a string that is longer then this many bytes, it will not
178 attempt to decode the string but throw an exception. This setting has no
179 effect on C<encode> (yet).
180
181 If no argument is given, the limit check will be deactivated (same as when
182 C<0> is specified).
183
184 See L<SECURITY CONSIDERATIONS>, below, for more info on why this is useful.
185
186 =item $cbor = $cbor->allow_unknown ([$enable])
187
188 =item $enabled = $cbor->get_allow_unknown
189
190 If C<$enable> is true (or missing), then C<encode> will I<not> throw an
191 exception when it encounters values it cannot represent in CBOR (for
192 example, filehandles) but instead will encode a CBOR C<error> value.
193
194 If C<$enable> is false (the default), then C<encode> will throw an
195 exception when it encounters anything it cannot encode as CBOR.
196
197 This option does not affect C<decode> in any way, and it is recommended to
198 leave it off unless you know your communications partner.
199
200 =item $cbor = $cbor->allow_sharing ([$enable])
201
202 =item $enabled = $cbor->get_allow_sharing
203
204 If C<$enable> is true (or missing), then C<encode> will not double-encode
205 values that have been referenced before (e.g. when the same object, such
206 as an array, is referenced multiple times), but instead will emit a
207 reference to the earlier value.
208
209 This means that such values will only be encoded once, and will not result
210 in a deep cloning of the value on decode, in decoders supporting the value
211 sharing extension. This also makes it possible to encode cyclic data
212 structures (which need C<allow_cycles> to be enabled to be decoded by this
213 module).
214
215 It is recommended to leave it off unless you know your
216 communication partner supports the value sharing extensions to CBOR
217 (L<http://cbor.schmorp.de/value-sharing>), as without decoder support, the
218 resulting data structure might be unusable.
219
220 Detecting shared values incurs a runtime overhead when values are encoded
221 that have a reference counter larger than one, and might unnecessarily
222 increase the encoded size, as potentially shared values are encoded as
223 shareable whether or not they are actually shared.
224
225 At the moment, only targets of references can be shared (e.g. scalars,
226 arrays or hashes pointed to by a reference). Weirder constructs, such as
227 an array with multiple "copies" of the I<same> string, which are hard but
228 not impossible to create in Perl, are not supported (this is the same as
229 with L<Storable>).
230
231 If C<$enable> is false (the default), then C<encode> will encode shared
232 data structures repeatedly, unsharing them in the process. Cyclic data
233 structures cannot be encoded in this mode.
234
235 This option does not affect C<decode> in any way - shared values and
236 references will always be decoded properly if present.
237
238 =item $cbor = $cbor->allow_cycles ([$enable])
239
240 =item $enabled = $cbor->get_allow_cycles
241
242 If C<$enable> is true (or missing), then C<decode> will happily decode
243 self-referential (cyclic) data structures. By default these will not be
244 decoded, as they need manual cleanup to avoid memory leaks, so code that
245 isn't prepared for this will not leak memory.
246
247 If C<$enable> is false (the default), then C<decode> will throw an error
248 when it encounters a self-referential/cyclic data structure.
249
250 This option does not affect C<encode> in any way - shared values and
251 references will always be encoded properly if present.
252
253 =item $cbor = $cbor->allow_weak_cycles ([$enable])
254
255 =item $enabled = $cbor->get_allow_weak_cycles
256
257 This works like C<allow_cycles> in that it allows the resulting data
258 structures to contain cycles, but unlike C<allow_cycles>, those cyclic
259 rreferences will be weak. That means that code that recurrsively walks
260 the data structure must be prepared with cycles, but at least not special
261 precautions must be implemented to free these data structures.
262
263 Only those references leading to actual cycles will be weakened - other
264 references, e.g. when the same hash or arrray is referenced multiple times
265 in an arrray, will be normal references.
266
267 This option does not affect C<encode> in any way - shared values and
268 references will always be encoded properly if present.
269
270 =item $cbor = $cbor->forbid_objects ([$enable])
271
272 =item $enabled = $cbor->get_forbid_objects
273
274 Disables the use of the object serialiser protocol.
275
276 If C<$enable> is true (or missing), then C<encode> will will throw an
277 exception when it encounters perl objects that would be encoded using the
278 perl-object tag (26). When C<decode> encounters such tags, it will fall
279 back to the general filter/tagged logic as if this were an unknown tag (by
280 default resulting in a C<CBOR::XC::Tagged> object).
281
282 If C<$enable> is false (the default), then C<encode> will use the
283 L<Types::Serialiser> object serialisation protocol to serialise objects
284 into perl-object tags, and C<decode> will do the same to decode such tags.
285
286 See L<SECURITY CONSIDERATIONS>, below, for more info on why forbidding this
287 protocol can be useful.
288
289 =item $cbor = $cbor->pack_strings ([$enable])
290
291 =item $enabled = $cbor->get_pack_strings
292
293 If C<$enable> is true (or missing), then C<encode> will try not to encode
294 the same string twice, but will instead encode a reference to the string
295 instead. Depending on your data format, this can save a lot of space, but
296 also results in a very large runtime overhead (expect encoding times to be
297 2-4 times as high as without).
298
299 It is recommended to leave it off unless you know your
300 communications partner supports the stringref extension to CBOR
301 (L<http://cbor.schmorp.de/stringref>), as without decoder support, the
302 resulting data structure might not be usable.
303
304 If C<$enable> is false (the default), then C<encode> will encode strings
305 the standard CBOR way.
306
307 This option does not affect C<decode> in any way - string references will
308 always be decoded properly if present.
309
310 =item $cbor = $cbor->text_keys ([$enable])
311
312 =item $enabled = $cbor->get_text_keys
313
314 If C<$enabled> is true (or missing), then C<encode> will encode all
315 perl hash keys as CBOR text strings/UTF-8 string, upgrading them as needed.
316
317 If C<$enable> is false (the default), then C<encode> will encode hash keys
318 normally - upgraded perl strings (strings internally encoded as UTF-8) as
319 CBOR text strings, and downgraded perl strings as CBOR byte strings.
320
321 This option does not affect C<decode> in any way.
322
323 This option is useful for interoperability with CBOR decoders that don't
324 treat byte strings as a form of text. It is especially useful as Perl
325 gives very little control over hash keys.
326
327 Enabling this option can be slow, as all downgraded hash keys that are
328 encoded need to be scanned and converted to UTF-8.
329
330 =item $cbor = $cbor->text_strings ([$enable])
331
332 =item $enabled = $cbor->get_text_strings
333
334 This option works similar to C<text_keys>, above, but works on all strings
335 (including hash keys), so C<text_keys> has no further effect after
336 enabling C<text_strings>.
337
338 If C<$enabled> is true (or missing), then C<encode> will encode all perl
339 strings as CBOR text strings/UTF-8 strings, upgrading them as needed.
340
341 If C<$enable> is false (the default), then C<encode> will encode strings
342 normally (but see C<text_keys>) - upgraded perl strings (strings
343 internally encoded as UTF-8) as CBOR text strings, and downgraded perl
344 strings as CBOR byte strings.
345
346 This option does not affect C<decode> in any way.
347
348 This option has similar advantages and disadvantages as C<text_keys>. In
349 addition, this option effectively removes the ability to automatically
350 encode byte strings, which might break some C<FREEZE> and C<TO_CBOR>
351 methods that rely on this.
352
353 A workaround is to use explicit type casts, which are unaffected by this option.
354
355 =item $cbor = $cbor->validate_utf8 ([$enable])
356
357 =item $enabled = $cbor->get_validate_utf8
358
359 If C<$enable> is true (or missing), then C<decode> will validate that
360 elements (text strings) containing UTF-8 data in fact contain valid UTF-8
361 data (instead of blindly accepting it). This validation obviously takes
362 extra time during decoding.
363
364 The concept of "valid UTF-8" used is perl's concept, which is a superset
365 of the official UTF-8.
366
367 If C<$enable> is false (the default), then C<decode> will blindly accept
368 UTF-8 data, marking them as valid UTF-8 in the resulting data structure
369 regardless of whether that's true or not.
370
371 Perl isn't too happy about corrupted UTF-8 in strings, but should
372 generally not crash or do similarly evil things. Extensions might be not
373 so forgiving, so it's recommended to turn on this setting if you receive
374 untrusted CBOR.
375
376 This option does not affect C<encode> in any way - strings that are
377 supposedly valid UTF-8 will simply be dumped into the resulting CBOR
378 string without checking whether that is, in fact, true or not.
379
380 =item $cbor = $cbor->filter ([$cb->($tag, $value)])
381
382 =item $cb_or_undef = $cbor->get_filter
383
384 Sets or replaces the tagged value decoding filter (when C<$cb> is
385 specified) or clears the filter (if no argument or C<undef> is provided).
386
387 The filter callback is called only during decoding, when a non-enforced
388 tagged value has been decoded (see L<TAG HANDLING AND EXTENSIONS> for a
389 list of enforced tags). For specific tags, it's often better to provide a
390 default converter using the C<%CBOR::XS::FILTER> hash (see below).
391
392 The first argument is the numerical tag, the second is the (decoded) value
393 that has been tagged.
394
395 The filter function should return either exactly one value, which will
396 replace the tagged value in the decoded data structure, or no values,
397 which will result in default handling, which currently means the decoder
398 creates a C<CBOR::XS::Tagged> object to hold the tag and the value.
399
400 When the filter is cleared (the default state), the default filter
401 function, C<CBOR::XS::default_filter>, is used. This function simply
402 looks up the tag in the C<%CBOR::XS::FILTER> hash. If an entry exists
403 it must be a code reference that is called with tag and value, and is
404 responsible for decoding the value. If no entry exists, it returns no
405 values. C<CBOR::XS> provides a number of default filter functions already,
406 the the C<%CBOR::XS::FILTER> hash can be freely extended with more.
407
408 C<CBOR::XS> additionally provides an alternative filter function that is
409 supposed to be safe to use with untrusted data (which the default filter
410 might not), called C<CBOR::XS::safe_filter>, which works the same as
411 the C<default_filter> but uses the C<%CBOR::XS::SAFE_FILTER> variable
412 instead. It is prepopulated with the tag decoding functions that are
413 deemed safe (basically the same as C<%CBOR::XS::FILTER> without all
414 the bignum tags), and can be extended by user code as wlel, although,
415 obviously, one should be very careful about adding decoding functions
416 here, since the expectation is that they are safe to use on untrusted
417 data, after all.
418
419 Example: decode all tags not handled internally into C<CBOR::XS::Tagged>
420 objects, with no other special handling (useful when working with
421 potentially "unsafe" CBOR data).
422
423 CBOR::XS->new->filter (sub { })->decode ($cbor_data);
424
425 Example: provide a global filter for tag 1347375694, converting the value
426 into some string form.
427
428 $CBOR::XS::FILTER{1347375694} = sub {
429 my ($tag, $value);
430
431 "tag 1347375694 value $value"
432 };
433
434 Example: provide your own filter function that looks up tags in your own
435 hash:
436
437 my %my_filter = (
438 998347484 => sub {
439 my ($tag, $value);
440
441 "tag 998347484 value $value"
442 };
443 );
444
445 my $coder = CBOR::XS->new->filter (sub {
446 &{ $my_filter{$_[0]} or return }
447 });
448
449
450 Example: use the safe filter function (see L<SECURITY CONSIDERATIONS> for
451 more considerations regarding security).
452
453 CBOR::XS->new->filter (\&CBOR::XS::safe_filter)->decode ($cbor_data);
454
455 =item $cbor_data = $cbor->encode ($perl_scalar)
456
457 Converts the given Perl data structure (a scalar value) to its CBOR
458 representation.
459
460 =item $perl_scalar = $cbor->decode ($cbor_data)
461
462 The opposite of C<encode>: expects CBOR data and tries to parse it,
463 returning the resulting simple scalar or reference. Croaks on error.
464
465 =item ($perl_scalar, $octets) = $cbor->decode_prefix ($cbor_data)
466
467 This works like the C<decode> method, but instead of raising an exception
468 when there is trailing garbage after the CBOR string, it will silently
469 stop parsing there and return the number of characters consumed so far.
470
471 This is useful if your CBOR texts are not delimited by an outer protocol
472 and you need to know where the first CBOR string ends amd the next one
473 starts - CBOR strings are self-delimited, so it is possible to concatenate
474 CBOR strings without any delimiters or size fields and recover their data.
475
476 CBOR::XS->new->decode_prefix ("......")
477 => ("...", 3)
478
479 =back
480
481 =head2 INCREMENTAL PARSING
482
483 In some cases, there is the need for incremental parsing of JSON
484 texts. While this module always has to keep both CBOR text and resulting
485 Perl data structure in memory at one time, it does allow you to parse a
486 CBOR stream incrementally, using a similar to using "decode_prefix" to see
487 if a full CBOR object is available, but is much more efficient.
488
489 It basically works by parsing as much of a CBOR string as possible - if
490 the CBOR data is not complete yet, the parser will remember where it was,
491 to be able to restart when more data has been accumulated. Once enough
492 data is available to either decode a complete CBOR value or raise an
493 error, a real decode will be attempted.
494
495 A typical use case would be a network protocol that consists of sending
496 and receiving CBOR-encoded messages. The solution that works with CBOR and
497 about anything else is by prepending a length to every CBOR value, so the
498 receiver knows how many octets to read. More compact (and slightly slower)
499 would be to just send CBOR values back-to-back, as C<CBOR::XS> knows where
500 a CBOR value ends, and doesn't need an explicit length.
501
502 The following methods help with this:
503
504 =over 4
505
506 =item @decoded = $cbor->incr_parse ($buffer)
507
508 This method attempts to decode exactly one CBOR value from the beginning
509 of the given C<$buffer>. The value is removed from the C<$buffer> on
510 success. When C<$buffer> doesn't contain a complete value yet, it returns
511 nothing. Finally, when the C<$buffer> doesn't start with something
512 that could ever be a valid CBOR value, it raises an exception, just as
513 C<decode> would. In the latter case the decoder state is undefined and
514 must be reset before being able to parse further.
515
516 This method modifies the C<$buffer> in place. When no CBOR value can be
517 decoded, the decoder stores the current string offset. On the next call,
518 continues decoding at the place where it stopped before. For this to make
519 sense, the C<$buffer> must begin with the same octets as on previous
520 unsuccessful calls.
521
522 You can call this method in scalar context, in which case it either
523 returns a decoded value or C<undef>. This makes it impossible to
524 distinguish between CBOR null values (which decode to C<undef>) and an
525 unsuccessful decode, which is often acceptable.
526
527 =item @decoded = $cbor->incr_parse_multiple ($buffer)
528
529 Same as C<incr_parse>, but attempts to decode as many CBOR values as
530 possible in one go, instead of at most one. Calls to C<incr_parse> and
531 C<incr_parse_multiple> can be interleaved.
532
533 =item $cbor->incr_reset
534
535 Resets the incremental decoder. This throws away any saved state, so that
536 subsequent calls to C<incr_parse> or C<incr_parse_multiple> start to parse
537 a new CBOR value from the beginning of the C<$buffer> again.
538
539 This method can be called at any time, but it I<must> be called if you want
540 to change your C<$buffer> or there was a decoding error and you want to
541 reuse the C<$cbor> object for future incremental parsings.
542
543 =back
544
545
546 =head1 MAPPING
547
548 This section describes how CBOR::XS maps Perl values to CBOR values and
549 vice versa. These mappings are designed to "do the right thing" in most
550 circumstances automatically, preserving round-tripping characteristics
551 (what you put in comes out as something equivalent).
552
553 For the more enlightened: note that in the following descriptions,
554 lowercase I<perl> refers to the Perl interpreter, while uppercase I<Perl>
555 refers to the abstract Perl language itself.
556
557
558 =head2 CBOR -> PERL
559
560 =over 4
561
562 =item integers
563
564 CBOR integers become (numeric) perl scalars. On perls without 64 bit
565 support, 64 bit integers will be truncated or otherwise corrupted.
566
567 =item byte strings
568
569 Byte strings will become octet strings in Perl (the Byte values 0..255
570 will simply become characters of the same value in Perl).
571
572 =item UTF-8 strings
573
574 UTF-8 strings in CBOR will be decoded, i.e. the UTF-8 octets will be
575 decoded into proper Unicode code points. At the moment, the validity of
576 the UTF-8 octets will not be validated - corrupt input will result in
577 corrupted Perl strings.
578
579 =item arrays, maps
580
581 CBOR arrays and CBOR maps will be converted into references to a Perl
582 array or hash, respectively. The keys of the map will be stringified
583 during this process.
584
585 =item null
586
587 CBOR null becomes C<undef> in Perl.
588
589 =item true, false, undefined
590
591 These CBOR values become C<Types:Serialiser::true>,
592 C<Types:Serialiser::false> and C<Types::Serialiser::error>,
593 respectively. They are overloaded to act almost exactly like the numbers
594 C<1> and C<0> (for true and false) or to throw an exception on access (for
595 error). See the L<Types::Serialiser> manpage for details.
596
597 =item tagged values
598
599 Tagged items consists of a numeric tag and another CBOR value.
600
601 See L<TAG HANDLING AND EXTENSIONS> and the description of C<< ->filter >>
602 for details on which tags are handled how.
603
604 =item anything else
605
606 Anything else (e.g. unsupported simple values) will raise a decoding
607 error.
608
609 =back
610
611
612 =head2 PERL -> CBOR
613
614 The mapping from Perl to CBOR is slightly more difficult, as Perl is a
615 typeless language. That means this module can only guess which CBOR type
616 is meant by a perl value.
617
618 =over 4
619
620 =item hash references
621
622 Perl hash references become CBOR maps. As there is no inherent ordering in
623 hash keys (or CBOR maps), they will usually be encoded in a pseudo-random
624 order. This order can be different each time a hash is encoded.
625
626 Currently, tied hashes will use the indefinite-length format, while normal
627 hashes will use the fixed-length format.
628
629 =item array references
630
631 Perl array references become fixed-length CBOR arrays.
632
633 =item other references
634
635 Other unblessed references will be represented using
636 the indirection tag extension (tag value C<22098>,
637 L<http://cbor.schmorp.de/indirection>). CBOR decoders are guaranteed
638 to be able to decode these values somehow, by either "doing the right
639 thing", decoding into a generic tagged object, simply ignoring the tag, or
640 something else.
641
642 =item CBOR::XS::Tagged objects
643
644 Objects of this type must be arrays consisting of a single C<[tag, value]>
645 pair. The (numerical) tag will be encoded as a CBOR tag, the value will
646 be encoded as appropriate for the value. You must use C<CBOR::XS::tag> to
647 create such objects.
648
649 =item Types::Serialiser::true, Types::Serialiser::false, Types::Serialiser::error
650
651 These special values become CBOR true, CBOR false and CBOR undefined
652 values, respectively.
653
654 =item other blessed objects
655
656 Other blessed objects are serialised via C<TO_CBOR> or C<FREEZE>. See
657 L<TAG HANDLING AND EXTENSIONS> for specific classes handled by this
658 module, and L<OBJECT SERIALISATION> for generic object serialisation.
659
660 =item simple scalars
661
662 Simple Perl scalars (any scalar that is not a reference) are the most
663 difficult objects to encode: CBOR::XS will encode undefined scalars as
664 CBOR null values, scalars that have last been used in a string context
665 before encoding as CBOR strings, and anything else as number value:
666
667 # dump as number
668 encode_cbor [2] # yields [2]
669 encode_cbor [-3.0e17] # yields [-3e+17]
670 my $value = 5; encode_cbor [$value] # yields [5]
671
672 # used as string, so dump as string (either byte or text)
673 print $value;
674 encode_cbor [$value] # yields ["5"]
675
676 # undef becomes null
677 encode_cbor [undef] # yields [null]
678
679 You can force the type to be a CBOR string by stringifying it:
680
681 my $x = 3.1; # some variable containing a number
682 "$x"; # stringified
683 $x .= ""; # another, more awkward way to stringify
684 print $x; # perl does it for you, too, quite often
685
686 You can force whether a string is encoded as byte or text string by using
687 C<utf8::upgrade> and C<utf8::downgrade> (if C<text_strings> is disabled).
688
689 utf8::upgrade $x; # encode $x as text string
690 utf8::downgrade $x; # encode $x as byte string
691
692 More options are available, see L<TYPE CASTS>, below, and the C<text_keys>
693 and C<text_strings> options.
694
695 Perl doesn't define what operations up- and downgrade strings, so if the
696 difference between byte and text is important, you should up- or downgrade
697 your string as late as possible before encoding. You can also force the
698 use of CBOR text strings by using C<text_keys> or C<text_strings>.
699
700 You can force the type to be a CBOR number by numifying it:
701
702 my $x = "3"; # some variable containing a string
703 $x += 0; # numify it, ensuring it will be dumped as a number
704 $x *= 1; # same thing, the choice is yours.
705
706 You can not currently force the type in other, less obscure, ways. Tell me
707 if you need this capability (but don't forget to explain why it's needed
708 :).
709
710 Perl values that seem to be integers generally use the shortest possible
711 representation. Floating-point values will use either the IEEE single
712 format if possible without loss of precision, otherwise the IEEE double
713 format will be used. Perls that use formats other than IEEE double to
714 represent numerical values are supported, but might suffer loss of
715 precision.
716
717 =back
718
719 =head2 TYPE CASTS
720
721 B<EXPERIMENTAL>: As an experimental extension, C<CBOR::XS> allows you to
722 force specific CBOR types to be used when encoding. That allows you to
723 encode types not normally accessible (e.g. half floats) as well as force
724 string types even when C<text_strings> is in effect.
725
726 Type forcing is done by calling a special "cast" function which keeps a
727 copy of the value and returns a new value that can be handed over to any
728 CBOR encoder function.
729
730 The following casts are currently available (all of which are unary
731 operators, that is, have a prototype of C<$>):
732
733 =over
734
735 =item CBOR::XS::as_int $value
736
737 Forces the value to be encoded as some form of (basic, not bignum) integer
738 type.
739
740 =item CBOR::XS::as_text $value
741
742 Forces the value to be encoded as (UTF-8) text values.
743
744 =item CBOR::XS::as_bytes $value
745
746 Forces the value to be encoded as a (binary) string value.
747
748 Example: encode a perl string as binary even though C<text_strings> is in
749 effect.
750
751 CBOR::XS->new->text_strings->encode ([4, "text", CBOR::XS::bytes "bytevalue"]);
752
753 =item CBOR::XS::as_bool $value
754
755 Converts a Perl boolean (which can be any kind of scalar) into a CBOR
756 boolean. Strictly the same, but shorter to write, than:
757
758 $value ? Types::Serialiser::true : Types::Serialiser::false
759
760 =item CBOR::XS::as_float16 $value
761
762 Forces half-float (IEEE 754 binary16) encoding of the given value.
763
764 =item CBOR::XS::as_float32 $value
765
766 Forces single-float (IEEE 754 binary32) encoding of the given value.
767
768 =item CBOR::XS::as_float64 $value
769
770 Forces double-float (IEEE 754 binary64) encoding of the given value.
771
772 =item CBOR::XS::as_cbor $cbor_text
773
774 Not a type cast per-se, this type cast forces the argument to be encoded
775 as-is. This can be used to embed pre-encoded CBOR data.
776
777 Note that no checking on the validity of the C<$cbor_text> is done - it's
778 the callers responsibility to correctly encode values.
779
780 =item CBOR::XS::as_map [key => value...]
781
782 Treat the array reference as key value pairs and output a CBOR map. This
783 allows you to generate CBOR maps with arbitrary key types (or, if you
784 don't care about semantics, duplicate keys or pairs in a custom order),
785 which is otherwise hard to do with Perl.
786
787 The single argument must be an array reference with an even number of
788 elements.
789
790 Note that only the reference to the array is copied, the array itself is
791 not. Modifications done to the array before calling an encoding function
792 will be reflected in the encoded output.
793
794 Example: encode a CBOR map with a string and an integer as keys.
795
796 encode_cbor CBOR::XS::as_map [string => "value", 5 => "value"]
797
798 =back
799
800 =cut
801
802 sub CBOR::XS::as_cbor ($) { bless [$_[0], 0, undef], CBOR::XS::Tagged:: }
803 sub CBOR::XS::as_int ($) { bless [$_[0], 1, undef], CBOR::XS::Tagged:: }
804 sub CBOR::XS::as_bytes ($) { bless [$_[0], 2, undef], CBOR::XS::Tagged:: }
805 sub CBOR::XS::as_text ($) { bless [$_[0], 3, undef], CBOR::XS::Tagged:: }
806 sub CBOR::XS::as_float16 ($) { bless [$_[0], 4, undef], CBOR::XS::Tagged:: }
807 sub CBOR::XS::as_float32 ($) { bless [$_[0], 5, undef], CBOR::XS::Tagged:: }
808 sub CBOR::XS::as_float64 ($) { bless [$_[0], 6, undef], CBOR::XS::Tagged:: }
809
810 sub CBOR::XS::as_bool ($) { $_[0] ? $Types::Serialiser::true : $Types::Serialiser::false }
811
812 sub CBOR::XS::as_map ($) {
813 ARRAY:: eq ref $_[0]
814 and $#{ $_[0] } & 1
815 or do { require Carp; Carp::croak ("CBOR::XS::as_map only acepts array references with an even number of elements, caught") };
816
817 bless [$_[0], 7, undef], CBOR::XS::Tagged::
818 }
819
820 =head2 OBJECT SERIALISATION
821
822 This module implements both a CBOR-specific and the generic
823 L<Types::Serialier> object serialisation protocol. The following
824 subsections explain both methods.
825
826 =head3 ENCODING
827
828 This module knows two way to serialise a Perl object: The CBOR-specific
829 way, and the generic way.
830
831 Whenever the encoder encounters a Perl object that it cannot serialise
832 directly (most of them), it will first look up the C<TO_CBOR> method on
833 it.
834
835 If it has a C<TO_CBOR> method, it will call it with the object as only
836 argument, and expects exactly one return value, which it will then
837 substitute and encode it in the place of the object.
838
839 Otherwise, it will look up the C<FREEZE> method. If it exists, it will
840 call it with the object as first argument, and the constant string C<CBOR>
841 as the second argument, to distinguish it from other serialisers.
842
843 The C<FREEZE> method can return any number of values (i.e. zero or
844 more). These will be encoded as CBOR perl object, together with the
845 classname.
846
847 These methods I<MUST NOT> change the data structure that is being
848 serialised. Failure to comply to this can result in memory corruption -
849 and worse.
850
851 If an object supports neither C<TO_CBOR> nor C<FREEZE>, encoding will fail
852 with an error.
853
854 =head3 DECODING
855
856 Objects encoded via C<TO_CBOR> cannot (normally) be automatically decoded,
857 but objects encoded via C<FREEZE> can be decoded using the following
858 protocol:
859
860 When an encoded CBOR perl object is encountered by the decoder, it will
861 look up the C<THAW> method, by using the stored classname, and will fail
862 if the method cannot be found.
863
864 After the lookup it will call the C<THAW> method with the stored classname
865 as first argument, the constant string C<CBOR> as second argument, and all
866 values returned by C<FREEZE> as remaining arguments.
867
868 =head3 EXAMPLES
869
870 Here is an example C<TO_CBOR> method:
871
872 sub My::Object::TO_CBOR {
873 my ($obj) = @_;
874
875 ["this is a serialised My::Object object", $obj->{id}]
876 }
877
878 When a C<My::Object> is encoded to CBOR, it will instead encode a simple
879 array with two members: a string, and the "object id". Decoding this CBOR
880 string will yield a normal perl array reference in place of the object.
881
882 A more useful and practical example would be a serialisation method for
883 the URI module. CBOR has a custom tag value for URIs, namely 32:
884
885 sub URI::TO_CBOR {
886 my ($self) = @_;
887 my $uri = "$self"; # stringify uri
888 utf8::upgrade $uri; # make sure it will be encoded as UTF-8 string
889 CBOR::XS::tag 32, "$_[0]"
890 }
891
892 This will encode URIs as a UTF-8 string with tag 32, which indicates an
893 URI.
894
895 Decoding such an URI will not (currently) give you an URI object, but
896 instead a CBOR::XS::Tagged object with tag number 32 and the string -
897 exactly what was returned by C<TO_CBOR>.
898
899 To serialise an object so it can automatically be deserialised, you need
900 to use C<FREEZE> and C<THAW>. To take the URI module as example, this
901 would be a possible implementation:
902
903 sub URI::FREEZE {
904 my ($self, $serialiser) = @_;
905 "$self" # encode url string
906 }
907
908 sub URI::THAW {
909 my ($class, $serialiser, $uri) = @_;
910 $class->new ($uri)
911 }
912
913 Unlike C<TO_CBOR>, multiple values can be returned by C<FREEZE>. For
914 example, a C<FREEZE> method that returns "type", "id" and "variant" values
915 would cause an invocation of C<THAW> with 5 arguments:
916
917 sub My::Object::FREEZE {
918 my ($self, $serialiser) = @_;
919
920 ($self->{type}, $self->{id}, $self->{variant})
921 }
922
923 sub My::Object::THAW {
924 my ($class, $serialiser, $type, $id, $variant) = @_;
925
926 $class-<new (type => $type, id => $id, variant => $variant)
927 }
928
929
930 =head1 MAGIC HEADER
931
932 There is no way to distinguish CBOR from other formats
933 programmatically. To make it easier to distinguish CBOR from other
934 formats, the CBOR specification has a special "magic string" that can be
935 prepended to any CBOR string without changing its meaning.
936
937 This string is available as C<$CBOR::XS::MAGIC>. This module does not
938 prepend this string to the CBOR data it generates, but it will ignore it
939 if present, so users can prepend this string as a "file type" indicator as
940 required.
941
942
943 =head1 THE CBOR::XS::Tagged CLASS
944
945 CBOR has the concept of tagged values - any CBOR value can be tagged with
946 a numeric 64 bit number, which are centrally administered.
947
948 C<CBOR::XS> handles a few tags internally when en- or decoding. You can
949 also create tags yourself by encoding C<CBOR::XS::Tagged> objects, and the
950 decoder will create C<CBOR::XS::Tagged> objects itself when it hits an
951 unknown tag.
952
953 These objects are simply blessed array references - the first member of
954 the array being the numerical tag, the second being the value.
955
956 You can interact with C<CBOR::XS::Tagged> objects in the following ways:
957
958 =over 4
959
960 =item $tagged = CBOR::XS::tag $tag, $value
961
962 This function(!) creates a new C<CBOR::XS::Tagged> object using the given
963 C<$tag> (0..2**64-1) to tag the given C<$value> (which can be any Perl
964 value that can be encoded in CBOR, including serialisable Perl objects and
965 C<CBOR::XS::Tagged> objects).
966
967 =item $tagged->[0]
968
969 =item $tagged->[0] = $new_tag
970
971 =item $tag = $tagged->tag
972
973 =item $new_tag = $tagged->tag ($new_tag)
974
975 Access/mutate the tag.
976
977 =item $tagged->[1]
978
979 =item $tagged->[1] = $new_value
980
981 =item $value = $tagged->value
982
983 =item $new_value = $tagged->value ($new_value)
984
985 Access/mutate the tagged value.
986
987 =back
988
989 =cut
990
991 sub tag($$) {
992 bless [@_], CBOR::XS::Tagged::;
993 }
994
995 sub CBOR::XS::Tagged::tag {
996 $_[0][0] = $_[1] if $#_;
997 $_[0][0]
998 }
999
1000 sub CBOR::XS::Tagged::value {
1001 $_[0][1] = $_[1] if $#_;
1002 $_[0][1]
1003 }
1004
1005 =head2 EXAMPLES
1006
1007 Here are some examples of C<CBOR::XS::Tagged> uses to tag objects.
1008
1009 You can look up CBOR tag value and emanings in the IANA registry at
1010 L<http://www.iana.org/assignments/cbor-tags/cbor-tags.xhtml>.
1011
1012 Prepend a magic header (C<$CBOR::XS::MAGIC>):
1013
1014 my $cbor = encode_cbor CBOR::XS::tag 55799, $value;
1015 # same as:
1016 my $cbor = $CBOR::XS::MAGIC . encode_cbor $value;
1017
1018 Serialise some URIs and a regex in an array:
1019
1020 my $cbor = encode_cbor [
1021 (CBOR::XS::tag 32, "http://www.nethype.de/"),
1022 (CBOR::XS::tag 32, "http://software.schmorp.de/"),
1023 (CBOR::XS::tag 35, "^[Pp][Ee][Rr][lL]\$"),
1024 ];
1025
1026 Wrap CBOR data in CBOR:
1027
1028 my $cbor_cbor = encode_cbor
1029 CBOR::XS::tag 24,
1030 encode_cbor [1, 2, 3];
1031
1032 =head1 TAG HANDLING AND EXTENSIONS
1033
1034 This section describes how this module handles specific tagged values
1035 and extensions. If a tag is not mentioned here and no additional filters
1036 are provided for it, then the default handling applies (creating a
1037 CBOR::XS::Tagged object on decoding, and only encoding the tag when
1038 explicitly requested).
1039
1040 Tags not handled specifically are currently converted into a
1041 L<CBOR::XS::Tagged> object, which is simply a blessed array reference
1042 consisting of the numeric tag value followed by the (decoded) CBOR value.
1043
1044 Future versions of this module reserve the right to special case
1045 additional tags (such as base64url).
1046
1047 =head2 ENFORCED TAGS
1048
1049 These tags are always handled when decoding, and their handling cannot be
1050 overridden by the user.
1051
1052 =over 4
1053
1054 =item 26 (perl-object, L<http://cbor.schmorp.de/perl-object>)
1055
1056 These tags are automatically created (and decoded) for serialisable
1057 objects using the C<FREEZE/THAW> methods (the L<Types::Serialier> object
1058 serialisation protocol). See L<OBJECT SERIALISATION> for details.
1059
1060 =item 28, 29 (shareable, sharedref, L<http://cbor.schmorp.de/value-sharing>)
1061
1062 These tags are automatically decoded when encountered (and they do not
1063 result in a cyclic data structure, see C<allow_cycles>), resulting in
1064 shared values in the decoded object. They are only encoded, however, when
1065 C<allow_sharing> is enabled.
1066
1067 Not all shared values can be successfully decoded: values that reference
1068 themselves will I<currently> decode as C<undef> (this is not the same
1069 as a reference pointing to itself, which will be represented as a value
1070 that contains an indirect reference to itself - these will be decoded
1071 properly).
1072
1073 Note that considerably more shared value data structures can be decoded
1074 than will be encoded - currently, only values pointed to by references
1075 will be shared, others will not. While non-reference shared values can be
1076 generated in Perl with some effort, they were considered too unimportant
1077 to be supported in the encoder. The decoder, however, will decode these
1078 values as shared values.
1079
1080 =item 256, 25 (stringref-namespace, stringref, L<http://cbor.schmorp.de/stringref>)
1081
1082 These tags are automatically decoded when encountered. They are only
1083 encoded, however, when C<pack_strings> is enabled.
1084
1085 =item 22098 (indirection, L<http://cbor.schmorp.de/indirection>)
1086
1087 This tag is automatically generated when a reference are encountered (with
1088 the exception of hash and array references). It is converted to a reference
1089 when decoding.
1090
1091 =item 55799 (self-describe CBOR, RFC 7049)
1092
1093 This value is not generated on encoding (unless explicitly requested by
1094 the user), and is simply ignored when decoding.
1095
1096 =back
1097
1098 =head2 NON-ENFORCED TAGS
1099
1100 These tags have default filters provided when decoding. Their handling can
1101 be overridden by changing the C<%CBOR::XS::FILTER> entry for the tag, or by
1102 providing a custom C<filter> callback when decoding.
1103
1104 When they result in decoding into a specific Perl class, the module
1105 usually provides a corresponding C<TO_CBOR> method as well.
1106
1107 When any of these need to load additional modules that are not part of the
1108 perl core distribution (e.g. L<URI>), it is (currently) up to the user to
1109 provide these modules. The decoding usually fails with an exception if the
1110 required module cannot be loaded.
1111
1112 =over 4
1113
1114 =item 0, 1 (date/time string, seconds since the epoch)
1115
1116 These tags are decoded into L<Time::Piece> objects. The corresponding
1117 C<Time::Piece::TO_CBOR> method always encodes into tag 1 values currently.
1118
1119 The L<Time::Piece> API is generally surprisingly bad, and fractional
1120 seconds are only accidentally kept intact, so watch out. On the plus side,
1121 the module comes with perl since 5.10, which has to count for something.
1122
1123 =item 2, 3 (positive/negative bignum)
1124
1125 These tags are decoded into L<Math::BigInt> objects. The corresponding
1126 C<Math::BigInt::TO_CBOR> method encodes "small" bigints into normal CBOR
1127 integers, and others into positive/negative CBOR bignums.
1128
1129 =item 4, 5, 264, 265 (decimal fraction/bigfloat)
1130
1131 Both decimal fractions and bigfloats are decoded into L<Math::BigFloat>
1132 objects. The corresponding C<Math::BigFloat::TO_CBOR> method I<always>
1133 encodes into a decimal fraction (either tag 4 or 264).
1134
1135 NaN and infinities are not encoded properly, as they cannot be represented
1136 in CBOR.
1137
1138 See L<BIGNUM SECURITY CONSIDERATIONS> for more info.
1139
1140 =item 30 (rational numbers)
1141
1142 These tags are decoded into L<Math::BigRat> objects. The corresponding
1143 C<Math::BigRat::TO_CBOR> method encodes rational numbers with denominator
1144 C<1> via their numerator only, i.e., they become normal integers or
1145 C<bignums>.
1146
1147 See L<BIGNUM SECURITY CONSIDERATIONS> for more info.
1148
1149 =item 21, 22, 23 (expected later JSON conversion)
1150
1151 CBOR::XS is not a CBOR-to-JSON converter, and will simply ignore these
1152 tags.
1153
1154 =item 32 (URI)
1155
1156 These objects decode into L<URI> objects. The corresponding
1157 C<URI::TO_CBOR> method again results in a CBOR URI value.
1158
1159 =back
1160
1161 =cut
1162
1163 =head1 CBOR and JSON
1164
1165 CBOR is supposed to implement a superset of the JSON data model, and is,
1166 with some coercion, able to represent all JSON texts (something that other
1167 "binary JSON" formats such as BSON generally do not support).
1168
1169 CBOR implements some extra hints and support for JSON interoperability,
1170 and the spec offers further guidance for conversion between CBOR and
1171 JSON. None of this is currently implemented in CBOR, and the guidelines
1172 in the spec do not result in correct round-tripping of data. If JSON
1173 interoperability is improved in the future, then the goal will be to
1174 ensure that decoded JSON data will round-trip encoding and decoding to
1175 CBOR intact.
1176
1177
1178 =head1 SECURITY CONSIDERATIONS
1179
1180 Tl;dr... if you want to decode or encode CBOR from untrusted sources, you
1181 should start with a coder object created via C<new_safe> (which implements
1182 the mitigations explained below):
1183
1184 my $coder = CBOR::XS->new_safe;
1185
1186 my $data = $coder->decode ($cbor_text);
1187 my $cbor = $coder->encode ($data);
1188
1189 Longer version: When you are using CBOR in a protocol, talking to
1190 untrusted potentially hostile creatures requires some thought:
1191
1192 =over 4
1193
1194 =item Security of the CBOR decoder itself
1195
1196 First and foremost, your CBOR decoder should be secure, that is, should
1197 not have any buffer overflows or similar bugs that could potentially be
1198 exploited. Obviously, this module should ensure that and I am trying hard
1199 on making that true, but you never know.
1200
1201 =item CBOR::XS can invoke almost arbitrary callbacks during decoding
1202
1203 CBOR::XS supports object serialisation - decoding CBOR can cause calls
1204 to I<any> C<THAW> method in I<any> package that exists in your process
1205 (that is, CBOR::XS will not try to load modules, but any existing C<THAW>
1206 method or function can be called, so they all have to be secure).
1207
1208 Less obviously, it will also invoke C<TO_CBOR> and C<FREEZE> methods -
1209 even if all your C<THAW> methods are secure, encoding data structures from
1210 untrusted sources can invoke those and trigger bugs in those.
1211
1212 So, if you are not sure about the security of all the modules you
1213 have loaded (you shouldn't), you should disable this part using
1214 C<forbid_objects> or using C<new_safe>.
1215
1216 =item CBOR can be extended with tags that call library code
1217
1218 CBOR can be extended with tags, and C<CBOR::XS> has a registry of
1219 conversion functions for many existing tags that can be extended via
1220 third-party modules (see the C<filter> method).
1221
1222 If you don't trust these, you should configure the "safe" filter function,
1223 C<CBOR::XS::safe_filter> (C<new_safe> does this), which by default only
1224 includes conversion functions that are considered "safe" by the author
1225 (but again, they can be extended by third party modules).
1226
1227 Depending on your level of paranoia, you can use the "safe" filter:
1228
1229 $cbor->filter (\&CBOR::XS::safe_filter);
1230
1231 ... your own filter...
1232
1233 $cbor->filter (sub { ... do your stuffs here ... });
1234
1235 ... or even no filter at all, disabling all tag decoding:
1236
1237 $cbor->filter (sub { });
1238
1239 This is never a problem for encoding, as the tag mechanism only exists in
1240 CBOR texts.
1241
1242 =item Resource-starving attacks: object memory usage
1243
1244 You need to avoid resource-starving attacks. That means you should limit
1245 the size of CBOR data you accept, or make sure then when your resources
1246 run out, that's just fine (e.g. by using a separate process that can
1247 crash safely). The size of a CBOR string in octets is usually a good
1248 indication of the size of the resources required to decode it into a Perl
1249 structure. While CBOR::XS can check the size of the CBOR text (using
1250 C<max_size> - done by C<new_safe>), it might be too late when you already
1251 have it in memory, so you might want to check the size before you accept
1252 the string.
1253
1254 As for encoding, it is possible to construct data structures that are
1255 relatively small but result in large CBOR texts (for example by having an
1256 array full of references to the same big data structure, which will all be
1257 deep-cloned during encoding by default). This is rarely an actual issue
1258 (and the worst case is still just running out of memory), but you can
1259 reduce this risk by using C<allow_sharing>.
1260
1261 =item Resource-starving attacks: stack overflows
1262
1263 CBOR::XS recurses using the C stack when decoding objects and arrays. The
1264 C stack is a limited resource: for instance, on my amd64 machine with 8MB
1265 of stack size I can decode around 180k nested arrays but only 14k nested
1266 CBOR objects (due to perl itself recursing deeply on croak to free the
1267 temporary). If that is exceeded, the program crashes. To be conservative,
1268 the default nesting limit is set to 512. If your process has a smaller
1269 stack, you should adjust this setting accordingly with the C<max_depth>
1270 method.
1271
1272 =item Resource-starving attacks: CPU en-/decoding complexity
1273
1274 CBOR::XS will use the L<Math::BigInt>, L<Math::BigFloat> and
1275 L<Math::BigRat> libraries to represent encode/decode bignums. These can be
1276 very slow (as in, centuries of CPU time) and can even crash your program
1277 (and are generally not very trustworthy). See the next section on bignum
1278 security for details.
1279
1280 =item Data breaches: leaking information in error messages
1281
1282 CBOR::XS might leak contents of your Perl data structures in its error
1283 messages, so when you serialise sensitive information you might want to
1284 make sure that exceptions thrown by CBOR::XS will not end up in front of
1285 untrusted eyes.
1286
1287 =item Something else...
1288
1289 Something else could bomb you, too, that I forgot to think of. In that
1290 case, you get to keep the pieces. I am always open for hints, though...
1291
1292 =back
1293
1294
1295 =head1 BIGNUM SECURITY CONSIDERATIONS
1296
1297 CBOR::XS provides a C<TO_CBOR> method for both L<Math::BigInt> and
1298 L<Math::BigFloat> that tries to encode the number in the simplest possible
1299 way, that is, either a CBOR integer, a CBOR bigint/decimal fraction (tag
1300 4) or an arbitrary-exponent decimal fraction (tag 264). Rational numbers
1301 (L<Math::BigRat>, tag 30) can also contain bignums as members.
1302
1303 CBOR::XS will also understand base-2 bigfloat or arbitrary-exponent
1304 bigfloats (tags 5 and 265), but it will never generate these on its own.
1305
1306 Using the built-in L<Math::BigInt::Calc> support, encoding and decoding
1307 decimal fractions is generally fast. Decoding bigints can be slow for very
1308 big numbers (tens of thousands of digits, something that could potentially
1309 be caught by limiting the size of CBOR texts), and decoding bigfloats or
1310 arbitrary-exponent bigfloats can be I<extremely> slow (minutes, decades)
1311 for large exponents (roughly 40 bit and longer).
1312
1313 Additionally, L<Math::BigInt> can take advantage of other bignum
1314 libraries, such as L<Math::GMP>, which cannot handle big floats with large
1315 exponents, and might simply abort or crash your program, due to their code
1316 quality.
1317
1318 This can be a concern if you want to parse untrusted CBOR. If it is, you
1319 might want to disable decoding of tag 2 (bigint) and 3 (negative bigint)
1320 types. You should also disable types 5 and 265, as these can be slow even
1321 without bigints.
1322
1323 Disabling bigints will also partially or fully disable types that rely on
1324 them, e.g. rational numbers that use bignums.
1325
1326
1327 =head1 CBOR IMPLEMENTATION NOTES
1328
1329 This section contains some random implementation notes. They do not
1330 describe guaranteed behaviour, but merely behaviour as-is implemented
1331 right now.
1332
1333 64 bit integers are only properly decoded when Perl was built with 64 bit
1334 support.
1335
1336 Strings and arrays are encoded with a definite length. Hashes as well,
1337 unless they are tied (or otherwise magical).
1338
1339 Only the double data type is supported for NV data types - when Perl uses
1340 long double to represent floating point values, they might not be encoded
1341 properly. Half precision types are accepted, but not encoded.
1342
1343 Strict mode and canonical mode are not implemented.
1344
1345
1346 =head1 LIMITATIONS ON PERLS WITHOUT 64-BIT INTEGER SUPPORT
1347
1348 On perls that were built without 64 bit integer support (these are rare
1349 nowadays, even on 32 bit architectures, as all major Perl distributions
1350 are built with 64 bit integer support), support for any kind of 64 bit
1351 value in CBOR is very limited - most likely, these 64 bit values will
1352 be truncated, corrupted, or otherwise not decoded correctly. This also
1353 includes string, float, array and map sizes that are stored as 64 bit
1354 integers.
1355
1356
1357 =head1 THREADS
1358
1359 This module is I<not> guaranteed to be thread safe and there are no
1360 plans to change this until Perl gets thread support (as opposed to the
1361 horribly slow so-called "threads" which are simply slow and bloated
1362 process simulations - use fork, it's I<much> faster, cheaper, better).
1363
1364 (It might actually work, but you have been warned).
1365
1366
1367 =head1 BUGS
1368
1369 While the goal of this module is to be correct, that unfortunately does
1370 not mean it's bug-free, only that I think its design is bug-free. If you
1371 keep reporting bugs they will be fixed swiftly, though.
1372
1373 Please refrain from using rt.cpan.org or any other bug reporting
1374 service. I put the contact address into my modules for a reason.
1375
1376 =cut
1377
1378 # clumsy and slow hv_store-in-hash helper function
1379 sub _hv_store {
1380 $_[0]{$_[1]} = $_[2];
1381 }
1382
1383 our %FILTER = (
1384 0 => sub { # rfc4287 datetime, utf-8
1385 require Time::Piece;
1386 # Time::Piece::Strptime uses the "incredibly flexible date parsing routine"
1387 # from FreeBSD, which can't parse ISO 8601, RFC3339, RFC4287 or much of anything
1388 # else either. Whats incredibe over standard strptime totally escapes me.
1389 # doesn't do fractional times, either. sigh.
1390 # In fact, it's all a lie, it uses whatever strptime it wants, and of course,
1391 # they are all incompatible. The openbsd one simply ignores %z (but according to the
1392 # docs, it would be much more incredibly flexible indeed. If it worked, that is.).
1393 scalar eval {
1394 my $s = $_[1];
1395
1396 $s =~ s/Z$/+00:00/;
1397 $s =~ s/(\.[0-9]+)?([+-][0-9][0-9]):([0-9][0-9])$//
1398 or die;
1399
1400 my $b = $1 - ($2 * 60 + $3) * 60; # fractional part + offset. hopefully
1401 my $d = Time::Piece->strptime ($s, "%Y-%m-%dT%H:%M:%S");
1402
1403 Time::Piece::gmtime ($d->epoch + $b)
1404 } || die "corrupted CBOR date/time string ($_[0])";
1405 },
1406
1407 1 => sub { # seconds since the epoch, possibly fractional
1408 require Time::Piece;
1409 scalar Time::Piece::gmtime (pop)
1410 },
1411
1412 2 => sub { # pos bigint
1413 require Math::BigInt;
1414 Math::BigInt->new ("0x" . unpack "H*", pop)
1415 },
1416
1417 3 => sub { # neg bigint
1418 require Math::BigInt;
1419 -Math::BigInt->new ("0x" . unpack "H*", pop)
1420 },
1421
1422 4 => sub { # decimal fraction, array
1423 require Math::BigFloat;
1424 Math::BigFloat->new ($_[1][1] . "E" . $_[1][0])
1425 },
1426
1427 264 => sub { # decimal fraction with arbitrary exponent
1428 require Math::BigFloat;
1429 Math::BigFloat->new ($_[1][1] . "E" . $_[1][0])
1430 },
1431
1432 5 => sub { # bigfloat, array
1433 require Math::BigFloat;
1434 scalar Math::BigFloat->new ($_[1][1]) * Math::BigFloat->new (2)->bpow ($_[1][0])
1435 },
1436
1437 265 => sub { # bigfloat with arbitrary exponent
1438 require Math::BigFloat;
1439 scalar Math::BigFloat->new ($_[1][1]) * Math::BigFloat->new (2)->bpow ($_[1][0])
1440 },
1441
1442 30 => sub { # rational number
1443 require Math::BigRat;
1444 Math::BigRat->new ("$_[1][0]/$_[1][1]") # separate parameters only work in recent versons
1445 },
1446
1447 21 => sub { pop }, # expected conversion to base64url encoding
1448 22 => sub { pop }, # expected conversion to base64 encoding
1449 23 => sub { pop }, # expected conversion to base16 encoding
1450
1451 # 24 # embedded cbor, byte string
1452
1453 32 => sub {
1454 require URI;
1455 URI->new (pop)
1456 },
1457
1458 # 33 # base64url rfc4648, utf-8
1459 # 34 # base64 rfc46484, utf-8
1460 # 35 # regex pcre/ecma262, utf-8
1461 # 36 # mime message rfc2045, utf-8
1462 );
1463
1464 sub default_filter {
1465 &{ $FILTER{$_[0]} or return }
1466 }
1467
1468 our %SAFE_FILTER = map { $_ => $FILTER{$_} } 0, 1, 21, 22, 23, 32;
1469
1470 sub safe_filter {
1471 &{ $SAFE_FILTER{$_[0]} or return }
1472 }
1473
1474 sub URI::TO_CBOR {
1475 my $uri = $_[0]->as_string;
1476 utf8::upgrade $uri;
1477 tag 32, $uri
1478 }
1479
1480 sub Math::BigInt::TO_CBOR {
1481 if (-2147483648 <= $_[0] && $_[0] <= 2147483647) {
1482 $_[0]->numify
1483 } else {
1484 my $hex = substr $_[0]->as_hex, 2;
1485 $hex = "0$hex" if 1 & length $hex; # sigh
1486 tag $_[0] >= 0 ? 2 : 3, pack "H*", $hex
1487 }
1488 }
1489
1490 sub Math::BigFloat::TO_CBOR {
1491 my ($m, $e) = $_[0]->parts;
1492
1493 -9223372036854775808 <= $e && $e <= 18446744073709551615
1494 ? tag 4, [$e->numify, $m]
1495 : tag 264, [$e, $m]
1496 }
1497
1498 sub Math::BigRat::TO_CBOR {
1499 my ($n, $d) = $_[0]->parts;
1500
1501 # older versions of BigRat need *1, as they not always return numbers
1502
1503 $d*1 == 1
1504 ? $n*1
1505 : tag 30, [$n*1, $d*1]
1506 }
1507
1508 sub Time::Piece::TO_CBOR {
1509 tag 1, 0 + $_[0]->epoch
1510 }
1511
1512 XSLoader::load "CBOR::XS", $VERSION;
1513
1514 =head1 SEE ALSO
1515
1516 The L<JSON> and L<JSON::XS> modules that do similar, but human-readable,
1517 serialisation.
1518
1519 The L<Types::Serialiser> module provides the data model for true, false
1520 and error values.
1521
1522 =head1 AUTHOR
1523
1524 Marc Lehmann <schmorp@schmorp.de>
1525 http://home.schmorp.de/
1526
1527 =cut
1528
1529 1
1530