ChangeLog 20.9 KB
Newer Older
Lev Walkin's avatar
Lev Walkin committed
1

Lev Walkin's avatar
Lev Walkin committed
2
???:
3
	* Made -fskeletons-copy a default one; removed cmdline option.
Lev Walkin's avatar
Lev Walkin committed
4

Lev Walkin's avatar
Lev Walkin committed
5
0.9.24:	2013-Mar-16
Lev Walkin's avatar
Lev Walkin committed
6
7
8
9

	* GeneralizedTime fix for working with time offsets which are not
	  representable in whole hours. (Severity: low; Security impact: low)
	  Thanks to IP Fabrics, Inc.
10
11
	* Added -fincludes-quoted to asn1c to generate #includes in "double"
	  instead of <angle> quotes.
12
13
	* PER encoding correctness fix. (Severity: high; Security impact: low)
	  Reported by Grzegorz Aksamit.
Lev Walkin's avatar
Lev Walkin committed
14
	* ENUMERATED extension values check relaxed. Reported by Gabriel Burca.
Lev Walkin's avatar
Lev Walkin committed
15
16
	* Fixed decimal decoding of REAL values in -fnative-types mode
	  (Severity: medium; Security impact: medium)
Lev Walkin's avatar
Lev Walkin committed
17
	* Removed webcgi subproject (introduced in 2004) as useless.
Lev Walkin's avatar
Lev Walkin committed
18

19
0.9.22:	2008-Nov-19
Lev Walkin's avatar
Lev Walkin committed
20
21

	* Added -pdu=all and -pdu=<type> switches to asn1c.
Lev Walkin's avatar
Lev Walkin committed
22
	* Added PER support for most known-multiplier string types:
23
	  IA5String, VisibleString, PrintableString, BMPString, UniversalString;
Lev Walkin's avatar
Lev Walkin committed
24
25
	  useful types: GeneralizedTime, UTCTime, ObjectDescriptor;
	  as well as REAL and OBJECT IDENTIFIER.
26
	  TODO: SET type.
Lev Walkin's avatar
Lev Walkin committed
27
	* Added PER support for extensions in SEQUENCE.
Lev Walkin's avatar
Lev Walkin committed
28
	* Multiple enhancements by Daniele Varrazzo <daniele.varrazzo@gmail.com>
29
30
	* Fixed explicit tagging of an in-lined constructed type.
	  (Severity: low; Security impact: none).
31
32
	* Memory leak fixed in SET OF / SEQUENCE OF when wrong encoding
	  is encountered. (Severity: medium; Security impact: low)
33
34
	* Fixed extensibility handling of second SEQUENCE production.
	  (Severity: low; Security impact: none)
Lev Walkin's avatar
Lev Walkin committed
35
	* Added DEFAULT handling for known multiplier string.
36
	* Added a sample OMA ULP decoder (./examples/sample.source.ULP).
37
	* Added full-width 32-bit integer encoding support in PER.
38
39
40
	* Fixed 1-byte OOB write issue with non-standard and Windows
	  memory allocators (Severity: low; Security impact: medium).
	  Reported by Sheng Yu.
Lev Walkin's avatar
Lev Walkin committed
41

Lev Walkin's avatar
Lev Walkin committed
42
0.9.21:	2006-Sep-17
43

Lev Walkin's avatar
Lev Walkin committed
44
	* skeletons/standard-modules directory is now used for standard types.
Lev Walkin's avatar
Lev Walkin committed
45
	* Fixed class field access problem (Test case 98)
Lev Walkin's avatar
Lev Walkin committed
46
	  (Severity: medium; Security impact: none)
Lev Walkin's avatar
Lev Walkin committed
47
	* Refactored Information Object Classes parsing.
48
	* Refactored Parameterization support.
Lev Walkin's avatar
Lev Walkin committed
49
	* [typedef enum foo {}] foo_e; is now e_foo, see #1287989
Lev Walkin's avatar
Lev Walkin committed
50
	* Refactored ValueSetTypeAssignment parsing.
51
	* asn-decoder-template.c renamed into converter-sample.c
52
	* MEGACO (Media Gateway Control Protocol) decoder sample added.
Lev Walkin's avatar
Lev Walkin committed
53
	* First release of PER encoder (does not encode SETs yet).
Lev Walkin's avatar
Lev Walkin committed
54
55
56
	* Added a sample LDAP decoder (./examples/sample.source.LDAP3).
	* Added a sample 3GPP RRC decoder (./examples/sample.source.RRC).
	* Added a sample MEGACO (H.248.1) decoder (sample.source.MEGACO).
Lev Walkin's avatar
Lev Walkin committed
57

Lev Walkin's avatar
mar 6    
Lev Walkin committed
58
0.9.20:	2006-Mar-06
59
60

	* SET OF CHOICE, SEQUENCE OF CHOICE and a certain named S/O types
Lev Walkin's avatar
Lev Walkin committed
61
	  are represented differently in XER. THIS IS AN INCOMPATIBLE CHANGE.
62
	  (Test case 70) (Severity: low; Security impact: low)
Lev Walkin's avatar
Lev Walkin committed
63
	* asn1c: Removed -ftypes88 command line option.
Lev Walkin's avatar
mar 6    
Lev Walkin committed
64
	* Started PER implementation. Somewhat experimental!
65

Lev Walkin's avatar
Lev Walkin committed
66
0.9.19:	2005-Oct-06
Lev Walkin's avatar
Lev Walkin committed
67

Lev Walkin's avatar
Lev Walkin committed
68
69
70
	* A proper solution to circular references. No kludge flags
	  should be necessary anymore to produce reference-free code:
	  recursive dependencies are resolved automatically.
Lev Walkin's avatar
Lev Walkin committed
71
	* Test cases 73 & 92 keep track of various circular references.
72
73
	* Introduced compiler directives to allow finer control over the
	  generated code ("--<ASN1C...>--" in comments), (Test case 93).
Lev Walkin's avatar
Lev Walkin committed
74
	* New feature for unber(1): -s <skip> bytes.
Lev Walkin's avatar
Lev Walkin committed
75
76
	* Mandatory elements map for SET was not getting generated properly.
	  (Test case 94) (Severity: high; Security impact: low)
Lev Walkin's avatar
Lev Walkin committed
77
	* asn1c: new command line option: -fskeletons-copy.
Lev Walkin's avatar
Lev Walkin committed
78

79
0.9.18:	2005-Aug-14
Lev Walkin's avatar
Lev Walkin committed
80

Lev Walkin's avatar
Lev Walkin committed
81
82
	* The obsolete X.208 syntax is handled gracefully now (compound types'
	  member names are invented on the fly). (Test case 87).
83
	* Generating enumeration tables for INTEGER types (Test case 88).
Lev Walkin's avatar
Lev Walkin committed
84
	* Generating enumeration tables for BIT STRING types (Test case 89).
85
	* Conditional INTEGER/ENUMERATED representation: long vs. INTEGER_t
86
	  type is chosen based on PER visible constraints (Test cases 90, 91).
Lev Walkin's avatar
Lev Walkin committed
87
	* Union structures for CHOICE type are not anonymous anymore.
88
89
90
	* Made unber(1) program more verbose: effective structure length is
	  now displayed as L="<n>" at the closing tag. (Test check-xxber.sh).
	* Fixed unber(1)'s -1 switch for indefinite encoding length.
Lev Walkin's avatar
Lev Walkin committed
91
	* New command line option for unber(1): -m to enable minimalistic mode.
Lev Walkin's avatar
Lev Walkin committed
92

Lev Walkin's avatar
aug7    
Lev Walkin committed
93
0.9.17:	2005-Aug-07
94
95
96

	* Tagging mode is implicitly IMPLICIT if AUTOMATIC TAGS is used, #30.6.
	  (Test cases 55, 86).
Lev Walkin's avatar
Lev Walkin committed
97
98
99
	* Started to use extern "C" {} in skeleton headers.
	* Introduced -finline-choice command line option to fix
	  yet another class of circular references.
100
101

0.9.16:	2005-July-04
Lev Walkin's avatar
   
Lev Walkin committed
102

Lev Walkin's avatar
Lev Walkin committed
103
104
	* GeneralizedTime API now supports fractions of seconds.
	  Thanks to Bent Nicolaisen <BN@JAI.com> for support.
Lev Walkin's avatar
   
Lev Walkin committed
105
	* ASN.1 parser has been tweaked to allow parsing something like
Lev Walkin's avatar
Lev Walkin committed
106
	  "SEQUENCE----comment----", which is ambiguous for many reasons.
Lev Walkin's avatar
Lev Walkin committed
107
	* XER decoder better handles not-yet-defined future extensions.
Lev Walkin's avatar
   
Lev Walkin committed
108

Lev Walkin's avatar
gcc 4.x    
Lev Walkin committed
109
0.9.15: 2005-July-02
Lev Walkin's avatar
Lev Walkin committed
110
111
112

	* Compiler now checks 64-bit overflows in constraints range handling
	  code. No effect on the code produced by the compiler.
Lev Walkin's avatar
Lev Walkin committed
113
	* Compiler support for tagged and marked parametrized members.
Lev Walkin's avatar
Lev Walkin committed
114
	* Empty tags to element map avoided.
Lev Walkin's avatar
gcc 4.x    
Lev Walkin committed
115
	* Compiled code GCC 4.x compatibility.
Lev Walkin's avatar
Lev Walkin committed
116

Lev Walkin's avatar
Lev Walkin committed
117
118
119
120
121
0.9.14:	2005-Apr-29

	* Fixed check-70.-fnative-integers.c test (it was failing
	  when no test directory was found).

122
0.9.13:	2005-Apr-24
Lev Walkin's avatar
Lev Walkin committed
123
124

	* Added extra const qualifiers into the support code.
Lev Walkin's avatar
Lev Walkin committed
125
	* More RFC variations supported in crfc2asn1.pl.
Lev Walkin's avatar
Lev Walkin committed
126
	* Refined string values compatibility. (Test cases 77, 78).
Lev Walkin's avatar
Lev Walkin committed
127
	* Support for ContainedSubtype constraints. (Test case 16).
128
	* Parsing support for CONSTRAINED BY. (Test case 79).
Lev Walkin's avatar
Lev Walkin committed
129
130
	* Support for CharsDefn (Quadruple and Tuple, most used in
	  ASN1-CHARACTER-MODULE) (Test case 80).
Lev Walkin's avatar
Lev Walkin committed
131
	* Pretty-printing support for WITH COMPONENT[S]. (Test case 82).
132
133
134
	* Streamed OCTET STRING decoding of large values: fixed allocation
	  problem introduced in 0.9.9. (Severity: high; Security impact: medium)
	  Reported by Yann Grossel <olrick@users.sourceforge.net>.
135
	* Fixed BASIC-XER encoding of REAL numbers.
Lev Walkin's avatar
Lev Walkin committed
136

137
0.9.12:	2005-Mar-10
138
139

	* Fixed a name clash in produced constraint checking code.
Lev Walkin's avatar
Lev Walkin committed
140
141
	* #includes are now in single quotes (to solve a name
	  clash with system's <time.h> on a Win32 system). 
142
143
144
	* Small refinement of XML DTD generation (`asn1c -X`).
	* Relaxed XER processing rules to skip extra whitespace
	  in some more places. It also skips XML comments (although
Lev Walkin's avatar
Lev Walkin committed
145
	  XML comments in XER are prohibited by X.693, #8.2.1).
146
	  (Test case 70) (Severity: medium; Security impact: none)
147
	  Reported by <Dominique.Nerriec@alcatel.fr>.
148
	* Constraints on primitive types being defined are now supported.
149
	  (Test case 74) (Severity: low; Security impact: none)
Lev Walkin's avatar
Lev Walkin committed
150
	* XMLValueList generation fixed for CHOICE type.
151
	  (Severity: medium; Security impact: none)
Lev Walkin's avatar
TAP3    
Lev Walkin committed
152
	* Added the GSM TAP3 decoder into ./examples/sample.source.TAP3
153

Lev Walkin's avatar
Lev Walkin committed
154
0.9.11:	2005-Mar-04
155

Lev Walkin's avatar
Lev Walkin committed
156
157
	* Released -fcompound-names to fix the name clashes in the code
	  produced by the asn1c.
Lev Walkin's avatar
Lev Walkin committed
158
159
160
161
	* Released -fno-include-deps to avoid #including non-critical
	  external dependencies.
	* Compiler is taught to produce compilable code for yet another class
	  of circular ASN.1 type references.
Lev Walkin's avatar
Lev Walkin committed
162
163
	* X.693:8.3.4 prohibits anything but SignedNumber; fixed XER codec.
	* Fixed ENUMERATED identifier to value conversion in XER.
Lev Walkin's avatar
email    
Lev Walkin committed
164
	  Reported by <jacque.celaire@caramail.com>.
Lev Walkin's avatar
Lev Walkin committed
165
166
167
168
	* If the compiled file contents are the same as in already existing
	  file (left from previous compilation), the old file is retained.
	  This prevents thrashing `make` dependencies if amount of changes in
	  the original ASN.1 module(s) is small.
169

Lev Walkin's avatar
Lev Walkin committed
170
0.9.10:	2005-Feb-25
171

Lev Walkin's avatar
Lev Walkin committed
172
173
174
	* Completed the XER XMLValueList encoding and decoding.
	* Native integer type is now using "long".
	* Fixed #1150856. Reported by <vvvy@users.sourceforge.net>.
Lev Walkin's avatar
Lev Walkin committed
175
	* Some WIN32 portability fixes.
176

Lev Walkin's avatar
Lev Walkin committed
177
0.9.9:	2005-Feb-22
Lev Walkin's avatar
Lev Walkin committed
178

Lev Walkin's avatar
Lev Walkin committed
179
180
	* First release of XER (XML) decoding implementation (somewhat
	  experimental).
Lev Walkin's avatar
Lev Walkin committed
181
182
	* ANY allocation routine fixed.
	  Reported by <mikko.ahonen@elma.net>.
Lev Walkin's avatar
Lev Walkin committed
183
	* Fixed tag parsing (tags like "[ 0 ]" were not supported).
Lev Walkin's avatar
Lev Walkin committed
184
	* Compiler now checks for duplicate ASN.1 types across modules.
Lev Walkin's avatar
Lev Walkin committed
185

186
0.9.8:	2005-Jan-17
Lev Walkin's avatar
Lev Walkin committed
187
188
189
190
191
192
193
194

	* [NEW PLATFORM] Compiled and tested on Linux @ alpha64 (LP64).
	  Some code needed to be fixed regarding int-long conversions
	  (mostly inside the test suite), and floating point handling
	  code needed to be restructured to handle signalling NAN and
	  other floating point exceptions quietly. Smooth transition!
	* [NEW PLATFORM] Compiled and tested on Sun Solaris 9 @ sparc.
	  Improved includes/defines of/for system headers.
Lev Walkin's avatar
Lev Walkin committed
195
	* -X command line option added to asn1c to generate XML DTD.
Lev Walkin's avatar
Lev Walkin committed
196
	* Empty SEQUENCE and SET clauses are now allowed.
197
	* Removed confusion between &xNN; and &#xNN; in enber and unber.
198
199
	* Removed order dependency in DEFAULT references to ENUMERATED
	  identifiers (./tests/68-*-OK.asn1).
200
	* ber_dec_rval_t renamed into asn_dec_rval_t: more generality.
201
	* Extensions in CHOICE types are properly marked as non-pointers
202
	  (Test case 59) (Severity: medium; Security impact: medium)
203
	  Reported by <roman.pfender@sdm.de>.
204
	* Tagged CHOICE type is now supported again.
205
	  (Test case 59) (Severity: low; Security impact: low)
206
	  Reported by <orlinkata@dir.bg>.
Lev Walkin's avatar
Lev Walkin committed
207
	* Implemented der_encode_to_buffer() procedure.
Lev Walkin's avatar
Lev Walkin committed
208
209
210
211
212
213

0.9.7.1:	2004-Oct-12

	* Fixed automatic tagging for extensions of compound types.
	* Fixed ParametrizedReference parsing: {} are now recognized.

214
0.9.7:	2004-Oct-11
Lev Walkin's avatar
Lev Walkin committed
215

Lev Walkin's avatar
Lev Walkin committed
216
217
	* Finished CXER implementation by adding SET and SET OF canonical
	  ordering support.
Lev Walkin's avatar
Lev Walkin committed
218
	* Fixed unber(1) limits controlling logic.
Lev Walkin's avatar
Lev Walkin committed
219
	* Removed C99'izm from the x509dump, now understood by older compilers.
Lev Walkin's avatar
Lev Walkin committed
220
221
	* Enhanced UTF8String constraint validation, now it checks
	  for the minimal encoding length; API of UTF8String_length() changed.
222
223
224
	* Fixed SEQUENCE dealing with premature termination of the
	  optionals-laden indefinite length structure. The code was previously
	  refusing to parse such structures.
225
	* Fixed explicitly tagged ANY type encoding and decoding
226
	  (Severity: medium; Security impact: low).
227
	* Fixed CHOICE code spin when indefinite length structures appear
228
	  in the extensions (Severity: medium; Security impact: medium).
229
	  Reported by <siden@ul-gsm.ru>.
230
	* BIT STRING now stores the number of unused octets in a separate field.
Lev Walkin's avatar
Lev Walkin committed
231

232
0.9.6:	2004-Sep-29
233

234
235
	* Added several security firewalls: decoder's stack usage control
	  and the stricter checking of the TLV length.
Lev Walkin's avatar
Lev Walkin committed
236
	* Implemented BASIC-XER encoding support (X.693).
237
	* Implemented unber(1) and enber(1) for BER<->XML translation.
Lev Walkin's avatar
Lev Walkin committed
238
	* Implemented CGI for online ASN.1 compilation (asn1c/webcgi).
239
	* Implemented the sample X.509 decoder (./examples/sample.source.PKIX1).
Lev Walkin's avatar
Lev Walkin committed
240
	* NamedType is now supported for SET OF/SEQUENCE OF type.
Lev Walkin's avatar
Lev Walkin committed
241
242
	* Added -fno-constraints option to asn1c, which disabled generation of
	  ASN.1 subtype constraints checking code.
Lev Walkin's avatar
Lev Walkin committed
243
	* Added ASN1C_ENVIRONMENT_VERSION and get_asn1c_environment_version().
244
	* Fixed ANY type decoding (Severity: high; Security impact: low).
245
246
247
	* Fixed BER decoder restartability problem with certain primitive
	  types (BOOLEAN, INTEGER, and REAL). The problem occured when the
	  encoding of such type is split between several bytes.
248
	  (Severity: high; Security impact: low)
249
	* Support for cross-referencing type definitions (updated ./tests/43-*).
Lev Walkin's avatar
Lev Walkin committed
250
	* Fixed pretty-printing of the REAL type. Added lots of test cases.
251
	* Renamed asn1_* into asn_* in function and type names.
252
	* Updated documentation.
253

Lev Walkin's avatar
Lev Walkin committed
254
0.9.5:	2004-Sep-17
Lev Walkin's avatar
Lev Walkin committed
255
256
257
258
259
260

	* Fixed CER (common BER) decoder code. See check-25.c/VisibleString
	  case for details. X.690 specifies that inner structures in BER
	  encoding must be tagged by stripping off the outer tag for each
	  subsequent containment level. See also X.690: 8.21.5.4 and
	  the "Spouse" case in A.3.
261
	  (Severity: medium; Security impact: low)
Lev Walkin's avatar
Lev Walkin committed
262
	* Added converters between any generic type and the ANY type.
Lev Walkin's avatar
Lev Walkin committed
263
264
	* Parser fixed: Information Object Class fields may be taged.
	* Parser fixed: tagged types inside SEQUENCE OF/SET OF support.
265
266
267
	* Improved DEFAULT Value parsing and pretty-printing.
	* Condition on distinct tags checker was incorrectly dealing with
	  tagged CHOICE types. Fixed. Modified tests/37-indirect-choice-OK.asn1
Lev Walkin's avatar
Lev Walkin committed
268
	* Improved type name generation code ("struct foo" vs "foo_t").
269
270
	* Fixed constraint checking code incorrectly dealing with imported
	  types with constraint values defined in other modules.
Lev Walkin's avatar
Lev Walkin committed
271
272
	* Real REAL support! (Haven't tested denormals support yet!)
	  See skeletons/tests/check-REAL.c
Lev Walkin's avatar
Lev Walkin committed
273

Lev Walkin's avatar
Lev Walkin committed
274
0.9.4:	2004-Sep-10
Lev Walkin's avatar
Lev Walkin committed
275
276
277

	* More support for recursive type definitions.
	* Explicit support for ANY type decoding.
Lev Walkin's avatar
Lev Walkin committed
278
279
	* Refactored tags processing code.
	* Fixed constraints checking code: non-exploitable buffer overflow.
280
	  (Severity: medium; Security impact: low)
Lev Walkin's avatar
Lev Walkin committed
281

Lev Walkin's avatar
Lev Walkin committed
282
0.9.3:	2004-Sep-07
Lev Walkin's avatar
Lev Walkin committed
283

284
285
	* Extended constraints support in parametrized types.
	* Better support for parametrization and constraints handling.
Lev Walkin's avatar
Lev Walkin committed
286
	* Better handling of recursive type definitions.
Lev Walkin's avatar
Lev Walkin committed
287
	* Added support for ANY type.
Lev Walkin's avatar
Lev Walkin committed
288

289
290
0.9.2:	2004-Aug-24

Lev Walkin's avatar
Lev Walkin committed
291
292
	* More flexible subtype constraints handling, with relaxed
	  PER visibility rules for actual constraints checking code generator.
293
294
	* Indirect references in constraints resolver code fixed.
	* Avoided compilation warning on gcc 3.3.3 systems.
Lev Walkin's avatar
Lev Walkin committed
295
	* Better ValueSet printing.
296

297
298
299
300
301
302
0.9.1:	2004-Aug-23

	* Documentation updated: doc/asn1c-usage.pdf
	* Fixed OBJECT IDENTIFIER human-readable printing.
	  Reported by <siden@ul-gsm.ru>.

Lev Walkin's avatar
date    
Lev Walkin committed
303
0.9:	2004-Aug-23
Lev Walkin's avatar
Lev Walkin committed
304
305

	* Reworked subtype constraints handling, aiming at PER-applicability.
Lev Walkin's avatar
Lev Walkin committed
306
307
	* BOOLEAN and NULL are now implemented in terms of native int type.
	* Compiler now links in only necessary skeleton files.
Lev Walkin's avatar
Lev Walkin committed
308
	* -t option added to asn1c to ease manual BER/CER/DER decoding.
Lev Walkin's avatar
Lev Walkin committed
309
310
	* Added support COMPONENTS OF construct.
	* Numerous parser fixes and enhancements.
311
	* Better constraint failure reporting.
Lev Walkin's avatar
Lev Walkin committed
312

Lev Walkin's avatar
Lev Walkin committed
313
314
315
0.8.19:	2004-Aug-18

	* Fixed BER encoder (problem encoding large tag values)
316
	  (Severity: medium; Security impact: low)
Lev Walkin's avatar
Lev Walkin committed
317

Lev Walkin's avatar
Lev Walkin committed
318
319
320
321
322
0.8.18:	2004-Aug-12

	* Parser: fixed multiple IMPORTS problem (incorrect assertion).
	* Parser: constraints extensibility parsing fix.

Lev Walkin's avatar
Lev Walkin committed
323
0.8.17:	2004-Aug-11
Lev Walkin's avatar
Lev Walkin committed
324
325

	* Improved compiler output: duplicate #includes eliminated.
Lev Walkin's avatar
Lev Walkin committed
326
	* Win32 portability fixes.
Lev Walkin's avatar
Lev Walkin committed
327
	* More compatibility with C++ or non-GCC compilers.
Lev Walkin's avatar
Lev Walkin committed
328

Lev Walkin's avatar
Lev Walkin committed
329
330
331
0.8.16:	2004-Jul-22

	* Fixed application-level problem in SET OF/SEQUENCE OF array cleanup.
332
	  (Severity: medium; Security impact: low)
333
	* Improved asn_GT2time() and added asn_time2{GT,UT}() functions.
Lev Walkin's avatar
Lev Walkin committed
334
	* BIT STRING pretty-printing.
Lev Walkin's avatar
Lev Walkin committed
335

336
0.8.15:	2004-Jul-20
Lev Walkin's avatar
Lev Walkin committed
337
338

	* Fixed parser: memory leak in free_struct code for SET OF/SEQUENCE OF.
339
	  (Severity: high; Security impact: medium)
Lev Walkin's avatar
typo    
Lev Walkin committed
340
	* Fixed parser: invalid memory reference in code constructing tags.
341
	  (Test case 48) (Severity: high; Security impact: medium)
342
343
344
345
346
347
348
349
350
351
	  When encoding data for certain ASN.1 specifications containing
	  explicit tags, the tag is always written incorrectly due to
	  incorrect memory reference. The encoding will almost always produce
	  unparseable data and might well reference unmapped region so program
	  would produce segmentation violation. Fortunately, memory is
	  read, not written, so remote exploits cannot execute arbitrary
	  code and triggering unmapped memory reference is highly unlikely
	  even it attacker knows the code (basically, the compiler should place
	  asn1_DEF_... right before the end of the mapped memory region, which
	  is extremely rare).
Lev Walkin's avatar
Lev Walkin committed
352
	* Improved INTEGER type printing.
Lev Walkin's avatar
Lev Walkin committed
353

Lev Walkin's avatar
Lev Walkin committed
354
355
356
357
0.8.14:	2004-Jun-30

	* Fixed compiler: extensibility of CHOICE and SET type has not been
	  taken into account during table construction.
358
	  (Test case 47) (Severity: high; Security impact: low)
Lev Walkin's avatar
Lev Walkin committed
359

360
361
362
363
0.8.13:	2004-Jun-29

	* Fixed compiler: the skip values for IMPLICIT tagging were broken
	  in some complex cases where one type is defined using another.
364
	  (Test case 46) (Severity: medium; Security impact: low).
365
366
367
368
	* Added -fknown-extern-type command line parameter to asn1c.
	* Removed -N command line flag and underlying functionality
	  to honor KISS principle.

Lev Walkin's avatar
Lev Walkin committed
369
0.8.12:	2004-Jun-17
Lev Walkin's avatar
fixes    
Lev Walkin committed
370

Lev Walkin's avatar
Lev Walkin committed
371
372
373
374
	* RELATIVE-OID and OBJECT IDENTIFIER encoders/decoders are not bound
	  anymore to an integer type of specific size (unsigned long). The
	  size of an integer must be provided explicitly.
	  See {OBJECT_IDENTIFIER|RELATIVE_OID}_{get|set}_arcs().
Lev Walkin's avatar
fixes    
Lev Walkin committed
375
	* SEQUENCE BER decoder fixed again for complex CHOICE case
376
	  (Test case 44) (Severity: medium; Security impact: low).
Lev Walkin's avatar
fixes    
Lev Walkin committed
377

378
379
0.8.11:	2004-Jun-05

Lev Walkin's avatar
typo    
Lev Walkin committed
380
	* Enforced stricter conformance with C standards.
Lev Walkin's avatar
fixes    
Lev Walkin committed
381
	* SEQUENCE BER decoder is now equipped with the sorted map
Lev Walkin's avatar
Lev Walkin committed
382
	  in case of complex CHOICE descendants. Test case 44 created.
383

Lev Walkin's avatar
Lev Walkin committed
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
0.8.10:	2004-Jun-02

	* Added const qualifier where necessary.
	* Changed position of outmost_tag fetcher within asn1_TYPE_descriptor_t
	  structure.

0.8.9:	2004-May-26

	* Added *_{get|set}_arcs_*() functions for OBJECT IDENTIFIER
	  and RELATIVE-OID, together with test cases.

0.8.8:	2004-May-09

	* Introduced subtype constraints support (incomplete!).
	* Fixed compiler. If the last member of the SEQUENCE is OPTIONAL
	  and absent in the encoding, and the type is extensible (...) or
	  EXTENSIBILITY IMPLIED flag is set, then the structure could not
401
	  be correctly decoded. (Severity: high; Security impact: low).
Lev Walkin's avatar
Lev Walkin committed
402
403
404
	* Compiler: fixed recursive ASN.1 types inclusion (Severity: low,
	  Security impact: none).
	* Parser: IMPORTS/FROM fixes, now allowing multiple sections.
Lev Walkin's avatar
Lev Walkin committed
405
406
	* NEW PLATFORM: Compiled and tested on MacOS X (@ PowerPC).
	  No major portability issues experienced.
Lev Walkin's avatar
Lev Walkin committed
407
408
409
410
411

0.8.7:	2004-Apr-11	T-version-0-8-7

	* Fixed SEQUENCE BER decoder: if the last member of the SEQUENCE is
	  OPTIONAL and absent in the encoding, RC_FAIL was returned instead
412
	  of RC_OK (Severity: high; Security impact: low).
Lev Walkin's avatar
Lev Walkin committed
413
414
415
416
417
418
419
420
421
	* Added test case to check the above problem.
	* Added test case to check -fnative-integers mode.

0.8.6:	2004-Apr-03	T-version-0-8-6

	* Fixed compiler output for embedded ASN.1 structures.

0.8.5:	2004-Mar-28	T-version-0-8-5

422
	* Fixed ber_tlv_length() computation problem (Severity: high,
Lev Walkin's avatar
Lev Walkin committed
423
424
425
426
427
428
429
430
431
432
433
	  Security impact: none).
	  Reported by <vss@high.net.ru>

0.8.4:	2004-Mar-22

	* Removed RC_ITAG enumeration element from BER decoder.
	  This return code did not have much practical value.

0.8.3:	2004-Mar-14	T-version-0-8-3

	* Fixed SET::BER decoder: restart after reaching a buffer boundary
434
	  weas broken (Severity: high; Security impact: low).
Lev Walkin's avatar
Lev Walkin committed
435
	* Fixed OCTET STRING::BER decoder: restart after reaching a buffer
436
	  boundary was broken (Severity: high; Security impact: low).
Lev Walkin's avatar
Lev Walkin committed
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
	  Reported by <vss@high.net.ru>
	* Added test cases to check decoders restartability.
	* Slightly more general INTEGER2long decoder.
	* Allowed nested /* C-type */ comments, as per X.680:2002.

0.8.2:	2004-Mar-01	T-version-0-8-2

	* Fixed SEQUENCE BER decoder: an OPTIONAL element was required, where
	  should not have been (Severity: major; Security impact: low).
	* Fixed print_struct pointer inheritance.
	* Added -fno-c99 and -funnamed-unions

0.8.1:	2004-Feb-22

	* -R switch to asn1c: Omit support code, compile only the tables.
	* Introduced NativeInteger pseudotype.
	* Corrected the informal print_struct()'s output format.

0.8.0:	2004-Feb-03	T-version-0-8-0

	* Some documentation is created (a .pdf and a short manual page).
	* Last touches to the code.

0.7.9:	2004-Feb-01	T-version-0-7-9

	* Human readable printing support.
	* Support for implicit (standard) constraints.

0.7.8:	2004-Jan-31

	* SET now rejects duplicate fields in the data stream.

0.7.7:	2004-Jan-25

	* Added types: GeneralizedTime and UTCTime.

0.7.6:	2004-Jan-24	T-version-0-7-6

	* DER encoding of a SET OF now involves dynamic sorting.

0.7.5:	2004-Jan-24	T-version-0-7-5

	* DER encoding of a SET with untagged CHOICE
	  now involves dynamic sorting.

0.7.0:	2004-Jan-19	T-version-0-7-0

	* A bunch of DER encoders is implemented.

0.6.6:	2004-Jan-11

	* Implemented CHOICE decoder.
	* Implemented destructors support.

0.6.5:	2004-Jan-03

	* Implemented SET decoder.
	* Implemented SET OF and SEQUENCE OF decoders.

0.6.4:	2003-Dec-31

	* Implemented BOOLEAN, NULL, ENUMERATED decoders.
	* Implemented OCTET STRING decoder.
	* Implemented BIT STRING decoder.

0.6:	2003-Dec-30

	* First decoding of a BER-encoded structure!

0.5:	2003-Dec-28

	* Framework and most of the compiler backbone coding done.

0.1:	2003-Nov-28

	* Programming started.
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529

=== Bug importance disclosure terms ===

SEVERITY.
    This term applies to the frequence the particular construct is used
    in the real world. The higher the frequency, the more chances of triggering
    this bug.
	low:	The ASN.1 specifications which could trigger
		this kind of bug are not widespread.
	medium:	The particular ASN.1 construct is used quite often,
		so the chance of triggering an error is considerable.
	high:	This fix is considered urgent, or the particular ASN.1
		construct triggering this bug is in wide use.

SECURITY IMPACT.
    This term applies to the amount of potential damage a bug exploitation
    could cause.
Lev Walkin's avatar
Lev Walkin committed
530
	none:	No malicious exploitation is possible.
531
532
533
534
535
536
537
538
539
	low:	The local exploitation is unlikely; the remote exploitation
		is impossible.
	medium:	The remote exploitation is possible when a particular ASN.1
		construct is being used. If possible, only hard failure, spin
		or memory leak are the possible outcome: no shellcode
		injection could possibly be carried by the attack.
	high:	The remote shellcode injection is possible, or the bug is
		otherwise remotely exploitable for most specifications.