ChangeLog 8.04 KB
Newer Older
Lev Walkin's avatar
Lev Walkin committed
1

Lev Walkin's avatar
Lev Walkin committed
2
3
4
5
6
7
8
9
10
11
0.9.5:	2004-Sep-13

	* Fixed CER (common BER) decoder code. See check-25.c/VisibleString
	  case for details. X.690 specifies that inner structures in BER
	  encoding must be tagged by stripping off the outer tag for each
	  subsequent containment level. See also X.690: 8.21.5.4 and
	  the "Spouse" case in A.3.
	  (Severity: medium, Security impact: low)
	* Added converters between any generic type and the ANY type.

Lev Walkin's avatar
Lev Walkin committed
12
0.9.4:	2004-Sep-10
Lev Walkin's avatar
Lev Walkin committed
13
14
15

	* More support for recursive type definitions.
	* Explicit support for ANY type decoding.
Lev Walkin's avatar
Lev Walkin committed
16
17
18
	* Refactored tags processing code.
	* Fixed constraints checking code: non-exploitable buffer overflow.
	  (Severity: medium, Security impact: low)
Lev Walkin's avatar
Lev Walkin committed
19

Lev Walkin's avatar
Lev Walkin committed
20
0.9.3:	2004-Sep-07
Lev Walkin's avatar
Lev Walkin committed
21

22
23
	* Extended constraints support in parametrized types.
	* Better support for parametrization and constraints handling.
Lev Walkin's avatar
Lev Walkin committed
24
	* Better handling of recursive type definitions.
Lev Walkin's avatar
Lev Walkin committed
25
	* Added support for ANY type.
Lev Walkin's avatar
Lev Walkin committed
26

27
28
0.9.2:	2004-Aug-24

Lev Walkin's avatar
Lev Walkin committed
29
30
	* More flexible subtype constraints handling, with relaxed
	  PER visibility rules for actual constraints checking code generator.
31
32
	* Indirect references in constraints resolver code fixed.
	* Avoided compilation warning on gcc 3.3.3 systems.
Lev Walkin's avatar
Lev Walkin committed
33
	* Better ValueSet printing.
34

35
36
37
38
39
40
0.9.1:	2004-Aug-23

	* Documentation updated: doc/asn1c-usage.pdf
	* Fixed OBJECT IDENTIFIER human-readable printing.
	  Reported by <siden@ul-gsm.ru>.

Lev Walkin's avatar
date    
Lev Walkin committed
41
0.9:	2004-Aug-23
Lev Walkin's avatar
Lev Walkin committed
42
43

	* Reworked subtype constraints handling, aiming at PER-applicability.
Lev Walkin's avatar
Lev Walkin committed
44
45
	* BOOLEAN and NULL are now implemented in terms of native int type.
	* Compiler now links in only necessary skeleton files.
Lev Walkin's avatar
Lev Walkin committed
46
	* -t option added to asn1c to ease manual BER/CER/DER decoding.
Lev Walkin's avatar
Lev Walkin committed
47
48
	* Added support COMPONENTS OF construct.
	* Numerous parser fixes and enhancements.
49
	* Better constraint failure reporting.
Lev Walkin's avatar
Lev Walkin committed
50

Lev Walkin's avatar
Lev Walkin committed
51
52
53
54
55
0.8.19:	2004-Aug-18

	* Fixed BER encoder (problem encoding large tag values)
	  (Severity: medium, Security impact: low)

Lev Walkin's avatar
Lev Walkin committed
56
57
58
59
60
0.8.18:	2004-Aug-12

	* Parser: fixed multiple IMPORTS problem (incorrect assertion).
	* Parser: constraints extensibility parsing fix.

Lev Walkin's avatar
Lev Walkin committed
61
0.8.17:	2004-Aug-11
Lev Walkin's avatar
Lev Walkin committed
62
63

	* Improved compiler output: duplicate #includes eliminated.
Lev Walkin's avatar
Lev Walkin committed
64
	* Win32 portability fixes.
Lev Walkin's avatar
Lev Walkin committed
65
	* More compatibility with C++ or non-GCC compilers.
Lev Walkin's avatar
Lev Walkin committed
66

Lev Walkin's avatar
Lev Walkin committed
67
68
69
70
0.8.16:	2004-Jul-22

	* Fixed application-level problem in SET OF/SEQUENCE OF array cleanup.
	  (Severity: medium, Security impact: low)
71
	* Improved asn_GT2time() and added asn_time2{GT,UT}() functions.
Lev Walkin's avatar
Lev Walkin committed
72
	* BIT STRING pretty-printing.
Lev Walkin's avatar
Lev Walkin committed
73

74
0.8.15:	2004-Jul-20
Lev Walkin's avatar
Lev Walkin committed
75
76
77

	* Fixed parser: memory leak in free_struct code for SET OF/SEQUENCE OF.
	  (Severity: high, Security impact: medium)
Lev Walkin's avatar
typo    
Lev Walkin committed
78
	* Fixed parser: invalid memory reference in code constructing tags.
79
80
81
82
83
84
85
86
87
88
89
	  (Test case 48) (Severity: high, Security impact: medium)
	  When encoding data for certain ASN.1 specifications containing
	  explicit tags, the tag is always written incorrectly due to
	  incorrect memory reference. The encoding will almost always produce
	  unparseable data and might well reference unmapped region so program
	  would produce segmentation violation. Fortunately, memory is
	  read, not written, so remote exploits cannot execute arbitrary
	  code and triggering unmapped memory reference is highly unlikely
	  even it attacker knows the code (basically, the compiler should place
	  asn1_DEF_... right before the end of the mapped memory region, which
	  is extremely rare).
Lev Walkin's avatar
Lev Walkin committed
90
	* Improved INTEGER type printing.
Lev Walkin's avatar
Lev Walkin committed
91

Lev Walkin's avatar
Lev Walkin committed
92
93
94
95
96
97
0.8.14:	2004-Jun-30

	* Fixed compiler: extensibility of CHOICE and SET type has not been
	  taken into account during table construction.
	  (Test case 47) (Severity: high, Security impact: low)

98
99
100
101
102
103
104
105
106
0.8.13:	2004-Jun-29

	* Fixed compiler: the skip values for IMPLICIT tagging were broken
	  in some complex cases where one type is defined using another.
	  (Test case 46) (Severity: medium, Security impact: low).
	* Added -fknown-extern-type command line parameter to asn1c.
	* Removed -N command line flag and underlying functionality
	  to honor KISS principle.

Lev Walkin's avatar
Lev Walkin committed
107
0.8.12:	2004-Jun-17
Lev Walkin's avatar
fixes    
Lev Walkin committed
108

Lev Walkin's avatar
Lev Walkin committed
109
110
111
112
	* RELATIVE-OID and OBJECT IDENTIFIER encoders/decoders are not bound
	  anymore to an integer type of specific size (unsigned long). The
	  size of an integer must be provided explicitly.
	  See {OBJECT_IDENTIFIER|RELATIVE_OID}_{get|set}_arcs().
Lev Walkin's avatar
fixes    
Lev Walkin committed
113
	* SEQUENCE BER decoder fixed again for complex CHOICE case
Lev Walkin's avatar
Lev Walkin committed
114
	  (Test case 44) (Severity: medium, Security impact: low).
Lev Walkin's avatar
fixes    
Lev Walkin committed
115

116
117
0.8.11:	2004-Jun-05

Lev Walkin's avatar
typo    
Lev Walkin committed
118
	* Enforced stricter conformance with C standards.
Lev Walkin's avatar
fixes    
Lev Walkin committed
119
	* SEQUENCE BER decoder is now equipped with the sorted map
Lev Walkin's avatar
Lev Walkin committed
120
	  in case of complex CHOICE descendants. Test case 44 created.
121

Lev Walkin's avatar
Lev Walkin committed
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
0.8.10:	2004-Jun-02

	* Added const qualifier where necessary.
	* Changed position of outmost_tag fetcher within asn1_TYPE_descriptor_t
	  structure.

0.8.9:	2004-May-26

	* Added *_{get|set}_arcs_*() functions for OBJECT IDENTIFIER
	  and RELATIVE-OID, together with test cases.

0.8.8:	2004-May-09

	* Introduced subtype constraints support (incomplete!).
	* Fixed compiler. If the last member of the SEQUENCE is OPTIONAL
	  and absent in the encoding, and the type is extensible (...) or
	  EXTENSIBILITY IMPLIED flag is set, then the structure could not
	  be correctly decoded. (Severity: high, Security impact: low).
	* Compiler: fixed recursive ASN.1 types inclusion (Severity: low,
	  Security impact: none).
	* Parser: IMPORTS/FROM fixes, now allowing multiple sections.
	* Code compiled and checked on PowerPC (@MacOS X). No major portability
	  issues experienced.

0.8.7:	2004-Apr-11	T-version-0-8-7

	* Fixed SEQUENCE BER decoder: if the last member of the SEQUENCE is
	  OPTIONAL and absent in the encoding, RC_FAIL was returned instead
	  of RC_OK (Severity: high, Security impact: low).
	* Added test case to check the above problem.
	* Added test case to check -fnative-integers mode.

0.8.6:	2004-Apr-03	T-version-0-8-6

	* Fixed compiler output for embedded ASN.1 structures.

0.8.5:	2004-Mar-28	T-version-0-8-5

	* Fixed ber_tlv_length() computation problem (Severity: blocker,
	  Security impact: none).
	  Reported by <vss@high.net.ru>

0.8.4:	2004-Mar-22

	* Removed RC_ITAG enumeration element from BER decoder.
	  This return code did not have much practical value.

0.8.3:	2004-Mar-14	T-version-0-8-3

	* Fixed SET::BER decoder: restart after reaching a buffer boundary
	  weas broken (Severity: blocker, Security impact: low).
	* Fixed OCTET STRING::BER decoder: restart after reaching a buffer
	  boundary was broken (Severity: blocker, Security impact: low).
	  Reported by <vss@high.net.ru>
	* Added test cases to check decoders restartability.
	* Slightly more general INTEGER2long decoder.
	* Allowed nested /* C-type */ comments, as per X.680:2002.

0.8.2:	2004-Mar-01	T-version-0-8-2

	* Fixed SEQUENCE BER decoder: an OPTIONAL element was required, where
	  should not have been (Severity: major; Security impact: low).
	* Fixed print_struct pointer inheritance.
	* Added -fno-c99 and -funnamed-unions

0.8.1:	2004-Feb-22

	* -R switch to asn1c: Omit support code, compile only the tables.
	* Introduced NativeInteger pseudotype.
	* Corrected the informal print_struct()'s output format.

0.8.0:	2004-Feb-03	T-version-0-8-0

	* Some documentation is created (a .pdf and a short manual page).
	* Last touches to the code.

0.7.9:	2004-Feb-01	T-version-0-7-9

	* Human readable printing support.
	* Support for implicit (standard) constraints.

0.7.8:	2004-Jan-31

	* SET now rejects duplicate fields in the data stream.

0.7.7:	2004-Jan-25

	* Added types: GeneralizedTime and UTCTime.

0.7.6:	2004-Jan-24	T-version-0-7-6

	* DER encoding of a SET OF now involves dynamic sorting.

0.7.5:	2004-Jan-24	T-version-0-7-5

	* DER encoding of a SET with untagged CHOICE
	  now involves dynamic sorting.

0.7.0:	2004-Jan-19	T-version-0-7-0

	* A bunch of DER encoders is implemented.

0.6.6:	2004-Jan-11

	* Implemented CHOICE decoder.
	* Implemented destructors support.

0.6.5:	2004-Jan-03

	* Implemented SET decoder.
	* Implemented SET OF and SEQUENCE OF decoders.

0.6.4:	2003-Dec-31

	* Implemented BOOLEAN, NULL, ENUMERATED decoders.
	* Implemented OCTET STRING decoder.
	* Implemented BIT STRING decoder.

0.6:	2003-Dec-30

	* First decoding of a BER-encoded structure!

0.5:	2003-Dec-28

	* Framework and most of the compiler backbone coding done.

0.1:	2003-Nov-28

	* Programming started.