blob: b2be36b08509e09e38d517520af196f1dcebfb4c [file] [log] [blame]
vlmfa67ddc2004-06-03 03:38:44 +00001
vlm2f2df932005-03-10 18:53:33 +000020.9.13: 2005-Mar-10
3
4 * Added extra const qualifiers into the support code.
5
vlmb04419e2005-03-10 11:27:28 +000060.9.12: 2005-Mar-10
vlm67d57fe2005-03-06 09:29:03 +00007
8 * Fixed a name clash in produced constraint checking code.
vlm24b7eb12005-03-06 09:31:59 +00009 * #includes are now in single quotes (to solve a name
10 clash with system's <time.h> on a Win32 system).
vlm4df9cc12005-03-09 22:19:25 +000011 * Small refinement of XML DTD generation (`asn1c -X`).
12 * Relaxed XER processing rules to skip extra whitespace
13 in some more places. It also skips XML comments (although
vlmbe7a5322005-03-10 11:50:12 +000014 XML comments in XER are prohibited by X.693, #8.2.1).
vlm4df9cc12005-03-09 22:19:25 +000015 (Test case 70) (Severity: medium, Security impact: none)
16 Reported by <Dominique.Nerriec@alcatel.fr>.
vlmb04419e2005-03-10 11:27:28 +000017 * Constraints on primitive types being defined are now supported.
18 (Test case 74) (Severity: low, Security impact: none)
vlmf726ec32005-03-10 13:44:50 +000019 * XMLValueList generation fixed for CHOICE type.
20 (Severity: medium, Security impact: none)
vlmb7353712005-03-10 15:09:02 +000021 * Added the GSM TAP3 decoder into ./examples/sample.source.TAP3
vlm67d57fe2005-03-06 09:29:03 +000022
vlm4fff94d2005-03-04 09:01:15 +0000230.9.11: 2005-Mar-04
vlmdca48302005-03-03 21:29:10 +000024
vlm4fff94d2005-03-04 09:01:15 +000025 * Released -fcompound-names to fix the name clashes in the code
26 produced by the asn1c.
vlm9f554a32005-03-05 00:33:27 +000027 * Released -fno-include-deps to avoid #including non-critical
28 external dependencies.
29 * Compiler is taught to produce compilable code for yet another class
30 of circular ASN.1 type references.
vlm9a89df62005-03-04 11:18:59 +000031 * X.693:8.3.4 prohibits anything but SignedNumber; fixed XER codec.
32 * Fixed ENUMERATED identifier to value conversion in XER.
vlm560eeb82005-03-04 11:20:17 +000033 Reported by <jacque.celaire@caramail.com>.
vlm4fff94d2005-03-04 09:01:15 +000034 * If the compiled file contents are the same as in already existing
35 file (left from previous compilation), the old file is retained.
36 This prevents thrashing `make` dependencies if amount of changes in
37 the original ASN.1 module(s) is small.
vlmdca48302005-03-03 21:29:10 +000038
vlm80a48592005-02-25 12:10:27 +0000390.9.10: 2005-Feb-25
vlma9e55432005-02-24 21:07:35 +000040
vlm80a48592005-02-25 12:10:27 +000041 * Completed the XER XMLValueList encoding and decoding.
42 * Native integer type is now using "long".
43 * Fixed #1150856. Reported by <vvvy@users.sourceforge.net>.
vlm90717f62005-02-25 14:26:43 +000044 * Some WIN32 portability fixes.
vlma9e55432005-02-24 21:07:35 +000045
vlmd7f47c02005-02-22 08:14:24 +0000460.9.9: 2005-Feb-22
vlm54af01c2005-01-17 15:27:47 +000047
vlm0b09f2a2005-02-18 18:16:14 +000048 * First release of XER (XML) decoding implementation (somewhat
49 experimental).
vlm6bbe0bc2005-01-22 00:13:45 +000050 * ANY allocation routine fixed.
51 Reported by <mikko.ahonen@elma.net>.
vlm62a14752005-01-23 09:51:53 +000052 * Fixed tag parsing (tags like "[ 0 ]" were not supported).
vlmd7f47c02005-02-22 08:14:24 +000053 * Compiler now checks for duplicate ASN.1 types across modules.
vlm54af01c2005-01-17 15:27:47 +000054
vlm34dcd572005-01-17 11:40:49 +0000550.9.8: 2005-Jan-17
vlm0aa86902004-10-12 23:26:53 +000056
vlm32d29a52004-10-26 10:44:18 +000057 * [NEW PLATFORM] Compiled and tested on Linux @ alpha64 (LP64).
58 Some code needed to be fixed regarding int-long conversions
59 (mostly inside the test suite), and floating point handling
60 code needed to be restructured to handle signalling NAN and
61 other floating point exceptions quietly. Smooth transition!
62 * [NEW PLATFORM] Compiled and tested on Sun Solaris 9 @ sparc.
63 Improved includes/defines of/for system headers.
vlm60e7ef02004-10-13 09:13:56 +000064 * -X command line option added to asn1c to generate XML DTD.
vlm0aa86902004-10-12 23:26:53 +000065 * Empty SEQUENCE and SET clauses are now allowed.
vlmba67bd12004-10-25 22:58:49 +000066 * Removed confusion between &xNN; and &#xNN; in enber and unber.
vlm79729272004-10-31 00:11:50 +000067 * Removed order dependency in DEFAULT references to ENUMERATED
68 identifiers (./tests/68-*-OK.asn1).
vlmbd8d05f2005-01-17 12:35:57 +000069 * ber_dec_rval_t renamed into asn_dec_rval_t: more generality.
vlm34dcd572005-01-17 11:40:49 +000070 * Extensions in CHOICE types are properly marked as non-pointers
vlm4df9cc12005-03-09 22:19:25 +000071 (Test case 59) (Severity: medium, Security impact: medium)
vlm34dcd572005-01-17 11:40:49 +000072 Reported by <roman.pfender@sdm.de>.
vlmbd8d05f2005-01-17 12:35:57 +000073 * Tagged CHOICE type is now supported again.
74 (Test case 59) (Severity: low, Security impact: low)
75 Reported by <orlinkata@dir.bg>.
vlmcd05d3d2004-11-16 09:46:00 +000076 * Implemented der_encode_to_buffer() procedure.
vlm0aa86902004-10-12 23:26:53 +000077
780.9.7.1: 2004-Oct-12
79
80 * Fixed automatic tagging for extensions of compound types.
81 * Fixed ParametrizedReference parsing: {} are now recognized.
82
vlm267b7fd2004-10-11 11:43:08 +0000830.9.7: 2004-Oct-11
vlm745fe252004-10-02 00:12:11 +000084
vlmaa930cb2005-02-24 22:37:07 +000085 * Finished CXER implementation by adding SET and SET OF canonical
86 ordering support.
vlm17cbadb2004-10-03 10:55:08 +000087 * Fixed unber(1) limits controlling logic.
vlm745fe252004-10-02 00:12:11 +000088 * Removed C99'izm from the x509dump, now understood by older compilers.
vlmee5afb02004-10-02 15:55:20 +000089 * Enhanced UTF8String constraint validation, now it checks
90 for the minimal encoding length; API of UTF8String_length() changed.
vlm5cb31d52004-10-05 06:39:35 +000091 * Fixed SEQUENCE dealing with premature termination of the
92 optionals-laden indefinite length structure. The code was previously
93 refusing to parse such structures.
vlm267b7fd2004-10-11 11:43:08 +000094 * Fixed explicitly tagged ANY type encoding and decoding
vlm4df9cc12005-03-09 22:19:25 +000095 (Severity: medium, Security impact: low).
vlm5cb31d52004-10-05 06:39:35 +000096 * Fixed CHOICE code spin when indefinite length structures appear
97 in the extensions (Severity: medium, Security impact: medium).
98 Reported by <siden@ul-gsm.ru>.
vlm0f1ab762004-10-12 05:57:23 +000099 * BIT STRING now stores the number of unused octets in a separate field.
vlm745fe252004-10-02 00:12:11 +0000100
vlm0d181f22004-09-29 13:30:32 +00001010.9.6: 2004-Sep-29
vlme43659a2004-09-19 19:40:52 +0000102
vlm0d181f22004-09-29 13:30:32 +0000103 * Added several security firewalls: decoder's stack usage control
104 and the stricter checking of the TLV length.
vlmf7ed1482004-09-22 16:06:52 +0000105 * Implemented BASIC-XER encoding support (X.693).
vlm74e9e342004-09-24 21:06:19 +0000106 * Implemented unber(1) and enber(1) for BER<->XML translation.
vlmf7ed1482004-09-22 16:06:52 +0000107 * Implemented CGI for online ASN.1 compilation (asn1c/webcgi).
vlm74e9e342004-09-24 21:06:19 +0000108 * Implemented the sample X.509 decoder (./examples/sample.source.PKIX1).
vlmf7ed1482004-09-22 16:06:52 +0000109 * NamedType is now supported for SET OF/SEQUENCE OF type.
vlm986afd62004-09-26 13:16:56 +0000110 * Added -fno-constraints option to asn1c, which disabled generation of
111 ASN.1 subtype constraints checking code.
vlmf7ed1482004-09-22 16:06:52 +0000112 * Added ASN1C_ENVIRONMENT_VERSION and get_asn1c_environment_version().
vlm4df9cc12005-03-09 22:19:25 +0000113 * Fixed ANY type decoding (Severity: high, Security impact: low).
vlm74e9e342004-09-24 21:06:19 +0000114 * Fixed BER decoder restartability problem with certain primitive
115 types (BOOLEAN, INTEGER, and REAL). The problem occured when the
116 encoding of such type is split between several bytes.
117 (Severity: high, Security impact: low)
vlm0d181f22004-09-29 13:30:32 +0000118 * Support for cross-referencing type definitions (updated ./tests/43-*).
vlmc8ee3052004-09-27 20:56:03 +0000119 * Fixed pretty-printing of the REAL type. Added lots of test cases.
vlm0d181f22004-09-29 13:30:32 +0000120 * Renamed asn1_* into asn_* in function and type names.
vlm74e9e342004-09-24 21:06:19 +0000121 * Updated documentation.
vlme43659a2004-09-19 19:40:52 +0000122
vlmbed6f812004-09-17 06:46:10 +00001230.9.5: 2004-Sep-17
vlmf72653e2004-09-13 08:32:15 +0000124
125 * Fixed CER (common BER) decoder code. See check-25.c/VisibleString
126 case for details. X.690 specifies that inner structures in BER
127 encoding must be tagged by stripping off the outer tag for each
128 subsequent containment level. See also X.690: 8.21.5.4 and
129 the "Spouse" case in A.3.
130 (Severity: medium, Security impact: low)
131 * Added converters between any generic type and the ANY type.
vlmb807ac42004-09-14 02:46:22 +0000132 * Parser fixed: Information Object Class fields may be taged.
133 * Parser fixed: tagged types inside SEQUENCE OF/SET OF support.
vlm9e4815d2004-09-15 12:01:04 +0000134 * Improved DEFAULT Value parsing and pretty-printing.
135 * Condition on distinct tags checker was incorrectly dealing with
136 tagged CHOICE types. Fixed. Modified tests/37-indirect-choice-OK.asn1
vlmb47f48e2004-09-17 06:32:12 +0000137 * Improved type name generation code ("struct foo" vs "foo_t").
vlm9e4815d2004-09-15 12:01:04 +0000138 * Fixed constraint checking code incorrectly dealing with imported
139 types with constraint values defined in other modules.
vlmf9d178d2004-09-14 12:47:45 +0000140 * Real REAL support! (Haven't tested denormals support yet!)
141 See skeletons/tests/check-REAL.c
vlmf72653e2004-09-13 08:32:15 +0000142
vlm1308d2b2004-09-10 15:49:15 +00001430.9.4: 2004-Sep-10
vlmdbf655b2004-09-10 09:38:17 +0000144
145 * More support for recursive type definitions.
146 * Explicit support for ANY type decoding.
vlm1308d2b2004-09-10 15:49:15 +0000147 * Refactored tags processing code.
148 * Fixed constraints checking code: non-exploitable buffer overflow.
149 (Severity: medium, Security impact: low)
vlmdbf655b2004-09-10 09:38:17 +0000150
vlm8c80dc52004-09-08 02:49:06 +00001510.9.3: 2004-Sep-07
vlm7a35b652004-08-26 06:19:23 +0000152
vlme9a56c92004-09-05 10:41:39 +0000153 * Extended constraints support in parametrized types.
154 * Better support for parametrization and constraints handling.
vlm21c70452004-09-08 00:27:33 +0000155 * Better handling of recursive type definitions.
vlm39c50612004-09-04 05:02:31 +0000156 * Added support for ANY type.
vlm7a35b652004-08-26 06:19:23 +0000157
vlmd86c9252004-08-25 01:34:11 +00001580.9.2: 2004-Aug-24
159
vlm3231b9f2004-08-25 02:06:48 +0000160 * More flexible subtype constraints handling, with relaxed
161 PER visibility rules for actual constraints checking code generator.
vlmd86c9252004-08-25 01:34:11 +0000162 * Indirect references in constraints resolver code fixed.
163 * Avoided compilation warning on gcc 3.3.3 systems.
vlmda4df3f2004-08-25 02:27:47 +0000164 * Better ValueSet printing.
vlmd86c9252004-08-25 01:34:11 +0000165
vlmef427fd2004-08-24 05:25:57 +00001660.9.1: 2004-Aug-23
167
168 * Documentation updated: doc/asn1c-usage.pdf
169 * Fixed OBJECT IDENTIFIER human-readable printing.
170 Reported by <siden@ul-gsm.ru>.
171
vlm82620702004-08-23 09:24:40 +00001720.9: 2004-Aug-23
vlmd3d0fbd2004-08-18 05:43:55 +0000173
174 * Reworked subtype constraints handling, aiming at PER-applicability.
vlm7ce9add2004-08-19 13:35:01 +0000175 * BOOLEAN and NULL are now implemented in terms of native int type.
176 * Compiler now links in only necessary skeleton files.
vlmf25d2812004-08-20 13:38:25 +0000177 * -t option added to asn1c to ease manual BER/CER/DER decoding.
vlmdae7f9d2004-08-22 03:25:24 +0000178 * Added support COMPONENTS OF construct.
179 * Numerous parser fixes and enhancements.
vlm758530a2004-08-22 13:47:59 +0000180 * Better constraint failure reporting.
vlmd3d0fbd2004-08-18 05:43:55 +0000181
vlm19aae982004-08-18 09:05:12 +00001820.8.19: 2004-Aug-18
183
184 * Fixed BER encoder (problem encoding large tag values)
185 (Severity: medium, Security impact: low)
186
vlm22736492004-08-13 12:39:17 +00001870.8.18: 2004-Aug-12
188
189 * Parser: fixed multiple IMPORTS problem (incorrect assertion).
190 * Parser: constraints extensibility parsing fix.
191
vlm6e73a042004-08-11 07:17:22 +00001920.8.17: 2004-Aug-11
vlm8ed2f6f2004-08-11 05:35:51 +0000193
194 * Improved compiler output: duplicate #includes eliminated.
vlm6e73a042004-08-11 07:17:22 +0000195 * Win32 portability fixes.
vlme167bf72004-08-11 08:11:50 +0000196 * More compatibility with C++ or non-GCC compilers.
vlm8ed2f6f2004-08-11 05:35:51 +0000197
vlm972a5382004-07-22 12:19:42 +00001980.8.16: 2004-Jul-22
199
200 * Fixed application-level problem in SET OF/SEQUENCE OF array cleanup.
201 (Severity: medium, Security impact: low)
vlm81057a82004-08-07 03:52:26 +0000202 * Improved asn_GT2time() and added asn_time2{GT,UT}() functions.
vlm49b511a2004-08-07 05:01:45 +0000203 * BIT STRING pretty-printing.
vlm972a5382004-07-22 12:19:42 +0000204
vlm796c1da2004-07-21 03:55:44 +00002050.8.15: 2004-Jul-20
vlmf0769b42004-07-15 10:52:58 +0000206
207 * Fixed parser: memory leak in free_struct code for SET OF/SEQUENCE OF.
208 (Severity: high, Security impact: medium)
vlmde1d8f72004-07-21 04:15:24 +0000209 * Fixed parser: invalid memory reference in code constructing tags.
vlm796c1da2004-07-21 03:55:44 +0000210 (Test case 48) (Severity: high, Security impact: medium)
211 When encoding data for certain ASN.1 specifications containing
212 explicit tags, the tag is always written incorrectly due to
213 incorrect memory reference. The encoding will almost always produce
214 unparseable data and might well reference unmapped region so program
215 would produce segmentation violation. Fortunately, memory is
216 read, not written, so remote exploits cannot execute arbitrary
217 code and triggering unmapped memory reference is highly unlikely
218 even it attacker knows the code (basically, the compiler should place
219 asn1_DEF_... right before the end of the mapped memory region, which
220 is extremely rare).
vlm7d278c42004-07-19 17:30:25 +0000221 * Improved INTEGER type printing.
vlmf0769b42004-07-15 10:52:58 +0000222
vlm79b08d52004-07-01 00:52:50 +00002230.8.14: 2004-Jun-30
224
225 * Fixed compiler: extensibility of CHOICE and SET type has not been
226 taken into account during table construction.
227 (Test case 47) (Severity: high, Security impact: low)
228
vlm65328a82004-06-28 21:22:20 +00002290.8.13: 2004-Jun-29
230
231 * Fixed compiler: the skip values for IMPLICIT tagging were broken
232 in some complex cases where one type is defined using another.
233 (Test case 46) (Severity: medium, Security impact: low).
234 * Added -fknown-extern-type command line parameter to asn1c.
235 * Removed -N command line flag and underlying functionality
236 to honor KISS principle.
237
vlmd315be52004-06-18 00:03:54 +00002380.8.12: 2004-Jun-17
vlme511d3e2004-06-14 13:53:32 +0000239
vlmd315be52004-06-18 00:03:54 +0000240 * RELATIVE-OID and OBJECT IDENTIFIER encoders/decoders are not bound
241 anymore to an integer type of specific size (unsigned long). The
242 size of an integer must be provided explicitly.
243 See {OBJECT_IDENTIFIER|RELATIVE_OID}_{get|set}_arcs().
vlme511d3e2004-06-14 13:53:32 +0000244 * SEQUENCE BER decoder fixed again for complex CHOICE case
vlm23ea2c72004-06-14 13:54:21 +0000245 (Test case 44) (Severity: medium, Security impact: low).
vlme511d3e2004-06-14 13:53:32 +0000246
vlm97986e42004-06-05 08:47:18 +00002470.8.11: 2004-Jun-05
248
vlm387ab0c2004-07-21 04:28:32 +0000249 * Enforced stricter conformance with C standards.
vlme511d3e2004-06-14 13:53:32 +0000250 * SEQUENCE BER decoder is now equipped with the sorted map
vlm45191f52004-06-06 07:20:37 +0000251 in case of complex CHOICE descendants. Test case 44 created.
vlm97986e42004-06-05 08:47:18 +0000252
vlmfa67ddc2004-06-03 03:38:44 +00002530.8.10: 2004-Jun-02
254
255 * Added const qualifier where necessary.
256 * Changed position of outmost_tag fetcher within asn1_TYPE_descriptor_t
257 structure.
258
2590.8.9: 2004-May-26
260
261 * Added *_{get|set}_arcs_*() functions for OBJECT IDENTIFIER
262 and RELATIVE-OID, together with test cases.
263
2640.8.8: 2004-May-09
265
266 * Introduced subtype constraints support (incomplete!).
267 * Fixed compiler. If the last member of the SEQUENCE is OPTIONAL
268 and absent in the encoding, and the type is extensible (...) or
269 EXTENSIBILITY IMPLIED flag is set, then the structure could not
270 be correctly decoded. (Severity: high, Security impact: low).
271 * Compiler: fixed recursive ASN.1 types inclusion (Severity: low,
272 Security impact: none).
273 * Parser: IMPORTS/FROM fixes, now allowing multiple sections.
vlm32d29a52004-10-26 10:44:18 +0000274 * NEW PLATFORM: Compiled and tested on MacOS X (@ PowerPC).
275 No major portability issues experienced.
vlmfa67ddc2004-06-03 03:38:44 +0000276
2770.8.7: 2004-Apr-11 T-version-0-8-7
278
279 * Fixed SEQUENCE BER decoder: if the last member of the SEQUENCE is
280 OPTIONAL and absent in the encoding, RC_FAIL was returned instead
281 of RC_OK (Severity: high, Security impact: low).
282 * Added test case to check the above problem.
283 * Added test case to check -fnative-integers mode.
284
2850.8.6: 2004-Apr-03 T-version-0-8-6
286
287 * Fixed compiler output for embedded ASN.1 structures.
288
2890.8.5: 2004-Mar-28 T-version-0-8-5
290
291 * Fixed ber_tlv_length() computation problem (Severity: blocker,
292 Security impact: none).
293 Reported by <vss@high.net.ru>
294
2950.8.4: 2004-Mar-22
296
297 * Removed RC_ITAG enumeration element from BER decoder.
298 This return code did not have much practical value.
299
3000.8.3: 2004-Mar-14 T-version-0-8-3
301
302 * Fixed SET::BER decoder: restart after reaching a buffer boundary
303 weas broken (Severity: blocker, Security impact: low).
304 * Fixed OCTET STRING::BER decoder: restart after reaching a buffer
305 boundary was broken (Severity: blocker, Security impact: low).
306 Reported by <vss@high.net.ru>
307 * Added test cases to check decoders restartability.
308 * Slightly more general INTEGER2long decoder.
309 * Allowed nested /* C-type */ comments, as per X.680:2002.
310
3110.8.2: 2004-Mar-01 T-version-0-8-2
312
313 * Fixed SEQUENCE BER decoder: an OPTIONAL element was required, where
314 should not have been (Severity: major; Security impact: low).
315 * Fixed print_struct pointer inheritance.
316 * Added -fno-c99 and -funnamed-unions
317
3180.8.1: 2004-Feb-22
319
320 * -R switch to asn1c: Omit support code, compile only the tables.
321 * Introduced NativeInteger pseudotype.
322 * Corrected the informal print_struct()'s output format.
323
3240.8.0: 2004-Feb-03 T-version-0-8-0
325
326 * Some documentation is created (a .pdf and a short manual page).
327 * Last touches to the code.
328
3290.7.9: 2004-Feb-01 T-version-0-7-9
330
331 * Human readable printing support.
332 * Support for implicit (standard) constraints.
333
3340.7.8: 2004-Jan-31
335
336 * SET now rejects duplicate fields in the data stream.
337
3380.7.7: 2004-Jan-25
339
340 * Added types: GeneralizedTime and UTCTime.
341
3420.7.6: 2004-Jan-24 T-version-0-7-6
343
344 * DER encoding of a SET OF now involves dynamic sorting.
345
3460.7.5: 2004-Jan-24 T-version-0-7-5
347
348 * DER encoding of a SET with untagged CHOICE
349 now involves dynamic sorting.
350
3510.7.0: 2004-Jan-19 T-version-0-7-0
352
353 * A bunch of DER encoders is implemented.
354
3550.6.6: 2004-Jan-11
356
357 * Implemented CHOICE decoder.
358 * Implemented destructors support.
359
3600.6.5: 2004-Jan-03
361
362 * Implemented SET decoder.
363 * Implemented SET OF and SEQUENCE OF decoders.
364
3650.6.4: 2003-Dec-31
366
367 * Implemented BOOLEAN, NULL, ENUMERATED decoders.
368 * Implemented OCTET STRING decoder.
369 * Implemented BIT STRING decoder.
370
3710.6: 2003-Dec-30
372
373 * First decoding of a BER-encoded structure!
374
3750.5: 2003-Dec-28
376
377 * Framework and most of the compiler backbone coding done.
378
3790.1: 2003-Nov-28
380
381 * Programming started.
vlm5cb31d52004-10-05 06:39:35 +0000382
383=== Bug importance disclosure terms ===
384
385SEVERITY.
386 This term applies to the frequence the particular construct is used
387 in the real world. The higher the frequency, the more chances of triggering
388 this bug.
389 low: The ASN.1 specifications which could trigger
390 this kind of bug are not widespread.
391 medium: The particular ASN.1 construct is used quite often,
392 so the chance of triggering an error is considerable.
393 high: This fix is considered urgent, or the particular ASN.1
394 construct triggering this bug is in wide use.
395
396SECURITY IMPACT.
397 This term applies to the amount of potential damage a bug exploitation
398 could cause.
399 low: The local exploitation is unlikely; the remote exploitation
400 is impossible.
401 medium: The remote exploitation is possible when a particular ASN.1
402 construct is being used. If possible, only hard failure, spin
403 or memory leak are the possible outcome: no shellcode
404 injection could possibly be carried by the attack.
405 high: The remote shellcode injection is possible, or the bug is
406 otherwise remotely exploitable for most specifications.
407