blob: 0bafe940f313699c27781ed549b97366d293bd7d [file] [log] [blame]
vlmfa67ddc2004-06-03 03:38:44 +00001
vlm5fbaa132006-03-14 11:52:12 +000020.9.21: 2006-Mar-14
vlm79d4e632006-03-06 14:51:00 +00003
vlmed76d9a2006-03-06 11:25:53 +00004 * skeletons/standard-modules directory is now used for standard types.
vlm5fbaa132006-03-14 11:52:12 +00005 * Fixed class field access problem (Test case 98)
6 (Severity: medim; Security impact: none)
vlm63fead62006-03-16 13:31:55 +00007 * Refactored Information Object Classes parsing.
vlmed76d9a2006-03-06 11:25:53 +00008
vlm0bea9192006-03-06 10:10:28 +000090.9.20: 2006-Mar-06
vlm6d44a542005-11-08 03:06:16 +000010
11 * SET OF CHOICE, SEQUENCE OF CHOICE and a certain named S/O types
12 are represented differently in XER. THIS IS AN ICOMPATIBLE CHANGE.
13 (Test case 70) (Severity: low; Security impact: low)
vlm337167e2005-11-26 11:25:14 +000014 * asn1c: Removed -ftypes88 command line option.
vlm0bea9192006-03-06 10:10:28 +000015 * Started PER implementation. Somewhat experimental!
vlm6d44a542005-11-08 03:06:16 +000016
vlm11bea882005-10-06 10:09:34 +0000170.9.19: 2005-Oct-06
vlm5a6fc652005-08-16 17:00:21 +000018
vlm6c4a8502005-08-18 13:38:19 +000019 * A proper solution to circular references. No kludge flags
20 should be necessary anymore to produce reference-free code:
21 recursive dependencies are resolved automatically.
vlm5a6fc652005-08-16 17:00:21 +000022 * Test cases 73 & 92 keep track of various circular references.
vlm177a5b62005-09-05 05:17:57 +000023 * Introduced compiler directives to allow finer control over the
24 generated code ("--<ASN1C...>--" in comments), (Test case 93).
vlmedd2f1b2005-09-30 05:23:40 +000025 * New feature for unber(1): -s <skip> bytes.
vlme2873192005-10-05 08:59:03 +000026 * Mandatory elements map for SET was not getting generated properly.
27 (Test case 94) (Severity: high; Security impact: low)
vlm11bea882005-10-06 10:09:34 +000028 * asn1c: new command line option: -fskeletons-copy.
vlm5a6fc652005-08-16 17:00:21 +000029
vlm27028582005-08-14 14:45:44 +0000300.9.18: 2005-Aug-14
vlm131ba382005-08-12 05:13:35 +000031
vlm5d89c3d2005-08-13 09:07:11 +000032 * The obsolete X.208 syntax is handled gracefully now (compound types'
33 member names are invented on the fly). (Test case 87).
vlm4573af02005-08-13 23:30:24 +000034 * Generating enumeration tables for INTEGER types (Test case 88).
vlm96853d82005-08-13 23:51:47 +000035 * Generating enumeration tables for BIT STRING types (Test case 89).
vlm75b3a532005-08-14 02:18:27 +000036 * Conditional INTEGER/ENUMERATED representation: long vs. INTEGER_t
vlm27028582005-08-14 14:45:44 +000037 type is chosen based on PER visible constraints (Test cases 90, 91).
vlm2e774282005-08-14 15:03:31 +000038 * Union structures for CHOICE type are not anonymous anymore.
vlme0297112005-08-15 03:28:06 +000039 * Made unber(1) program more verbose: effective structure length is
40 now displayed as L="<n>" at the closing tag. (Test check-xxber.sh).
41 * Fixed unber(1)'s -1 switch for indefinite encoding length.
vlm1f137432005-08-15 07:21:22 +000042 * New command line option for unber(1): -m to enable minimalistic mode.
vlm131ba382005-08-12 05:13:35 +000043
vlmed18fe12005-08-08 01:34:03 +0000440.9.17: 2005-Aug-07
vlmb012da82005-07-21 01:18:19 +000045
46 * Tagging mode is implicitly IMPLICIT if AUTOMATIC TAGS is used, #30.6.
47 (Test cases 55, 86).
vlm3a417582005-07-24 09:03:44 +000048 * Started to use extern "C" {} in skeleton headers.
49 * Introduced -finline-choice command line option to fix
50 yet another class of circular references.
vlmb012da82005-07-21 01:18:19 +000051
520.9.16: 2005-July-04
vlmb5abdc92005-07-02 21:42:40 +000053
vlm50f0a172005-07-03 05:32:55 +000054 * GeneralizedTime API now supports fractions of seconds.
55 Thanks to Bent Nicolaisen <BN@JAI.com> for support.
vlmb5abdc92005-07-02 21:42:40 +000056 * ASN.1 parser has been tweaked to allow parsing something like
vlm754a90f2005-07-04 02:03:57 +000057 "SEQUENCE----comment----", which is ambiguous for many reasons.
vlm50f0a172005-07-03 05:32:55 +000058 * XER decoder better handles not-yet-defined future extensions.
vlmb5abdc92005-07-02 21:42:40 +000059
vlm67b528d2005-07-02 08:19:26 +0000600.9.15: 2005-July-02
vlme6c89732005-05-17 21:46:18 +000061
62 * Compiler now checks 64-bit overflows in constraints range handling
63 code. No effect on the code produced by the compiler.
vlm1457c0d2005-06-02 17:53:17 +000064 * Compiler support for tagged and marked parametrized members.
vlm611bc332005-05-27 21:58:52 +000065 * Empty tags to element map avoided.
vlm67b528d2005-07-02 08:19:26 +000066 * Compiled code GCC 4.x compatibility.
vlme6c89732005-05-17 21:46:18 +000067
vlmfca0fe42005-04-29 18:55:12 +0000680.9.14: 2005-Apr-29
69
70 * Fixed check-70.-fnative-integers.c test (it was failing
71 when no test directory was found).
72
vlm82abba82005-04-25 19:38:21 +0000730.9.13: 2005-Apr-24
vlm2f2df932005-03-10 18:53:33 +000074
75 * Added extra const qualifiers into the support code.
vlm35fcb7c2005-03-18 04:25:17 +000076 * More RFC variations supported in crfc2asn1.pl.
vlm5e2c4b92005-03-20 11:12:40 +000077 * Refined string values compatibility. (Test cases 77, 78).
vlma6a12e32005-03-20 12:58:00 +000078 * Support for ContainedSubtype constraints. (Test case 16).
vlm6611add2005-03-20 14:28:32 +000079 * Parsing support for CONSTRAINED BY. (Test case 79).
vlme1e6ed82005-03-24 14:26:38 +000080 * Support for CharsDefn (Quadruple and Tuple, most used in
81 ASN1-CHARACTER-MODULE) (Test case 80).
vlm7bbdc9f2005-03-28 15:01:27 +000082 * Pretty-printing support for WITH COMPONENT[S]. (Test case 82).
vlm82abba82005-04-25 19:38:21 +000083 * Streamed OCTET STRING decoding of large values: fixed allocation
84 problem introduced in 0.9.9. (Severity: high; Security impact: medium)
85 Reported by Yann Grossel <olrick@users.sourceforge.net>.
vlm0919fcc2005-04-25 21:08:25 +000086 * Fixed BASIC-XER encoding of REAL numbers.
vlm2f2df932005-03-10 18:53:33 +000087
vlmb04419e2005-03-10 11:27:28 +0000880.9.12: 2005-Mar-10
vlm67d57fe2005-03-06 09:29:03 +000089
90 * Fixed a name clash in produced constraint checking code.
vlm24b7eb12005-03-06 09:31:59 +000091 * #includes are now in single quotes (to solve a name
92 clash with system's <time.h> on a Win32 system).
vlm4df9cc12005-03-09 22:19:25 +000093 * Small refinement of XML DTD generation (`asn1c -X`).
94 * Relaxed XER processing rules to skip extra whitespace
95 in some more places. It also skips XML comments (although
vlmbe7a5322005-03-10 11:50:12 +000096 XML comments in XER are prohibited by X.693, #8.2.1).
vlm82abba82005-04-25 19:38:21 +000097 (Test case 70) (Severity: medium; Security impact: none)
vlm4df9cc12005-03-09 22:19:25 +000098 Reported by <Dominique.Nerriec@alcatel.fr>.
vlmb04419e2005-03-10 11:27:28 +000099 * Constraints on primitive types being defined are now supported.
vlm82abba82005-04-25 19:38:21 +0000100 (Test case 74) (Severity: low; Security impact: none)
vlmf726ec32005-03-10 13:44:50 +0000101 * XMLValueList generation fixed for CHOICE type.
vlm82abba82005-04-25 19:38:21 +0000102 (Severity: medium; Security impact: none)
vlmb7353712005-03-10 15:09:02 +0000103 * Added the GSM TAP3 decoder into ./examples/sample.source.TAP3
vlm67d57fe2005-03-06 09:29:03 +0000104
vlm4fff94d2005-03-04 09:01:15 +00001050.9.11: 2005-Mar-04
vlmdca48302005-03-03 21:29:10 +0000106
vlm4fff94d2005-03-04 09:01:15 +0000107 * Released -fcompound-names to fix the name clashes in the code
108 produced by the asn1c.
vlm9f554a32005-03-05 00:33:27 +0000109 * Released -fno-include-deps to avoid #including non-critical
110 external dependencies.
111 * Compiler is taught to produce compilable code for yet another class
112 of circular ASN.1 type references.
vlm9a89df62005-03-04 11:18:59 +0000113 * X.693:8.3.4 prohibits anything but SignedNumber; fixed XER codec.
114 * Fixed ENUMERATED identifier to value conversion in XER.
vlm560eeb82005-03-04 11:20:17 +0000115 Reported by <jacque.celaire@caramail.com>.
vlm4fff94d2005-03-04 09:01:15 +0000116 * If the compiled file contents are the same as in already existing
117 file (left from previous compilation), the old file is retained.
118 This prevents thrashing `make` dependencies if amount of changes in
119 the original ASN.1 module(s) is small.
vlmdca48302005-03-03 21:29:10 +0000120
vlm80a48592005-02-25 12:10:27 +00001210.9.10: 2005-Feb-25
vlma9e55432005-02-24 21:07:35 +0000122
vlm80a48592005-02-25 12:10:27 +0000123 * Completed the XER XMLValueList encoding and decoding.
124 * Native integer type is now using "long".
125 * Fixed #1150856. Reported by <vvvy@users.sourceforge.net>.
vlm90717f62005-02-25 14:26:43 +0000126 * Some WIN32 portability fixes.
vlma9e55432005-02-24 21:07:35 +0000127
vlmd7f47c02005-02-22 08:14:24 +00001280.9.9: 2005-Feb-22
vlm54af01c2005-01-17 15:27:47 +0000129
vlm0b09f2a2005-02-18 18:16:14 +0000130 * First release of XER (XML) decoding implementation (somewhat
131 experimental).
vlm6bbe0bc2005-01-22 00:13:45 +0000132 * ANY allocation routine fixed.
133 Reported by <mikko.ahonen@elma.net>.
vlm62a14752005-01-23 09:51:53 +0000134 * Fixed tag parsing (tags like "[ 0 ]" were not supported).
vlmd7f47c02005-02-22 08:14:24 +0000135 * Compiler now checks for duplicate ASN.1 types across modules.
vlm54af01c2005-01-17 15:27:47 +0000136
vlm34dcd572005-01-17 11:40:49 +00001370.9.8: 2005-Jan-17
vlm0aa86902004-10-12 23:26:53 +0000138
vlm32d29a52004-10-26 10:44:18 +0000139 * [NEW PLATFORM] Compiled and tested on Linux @ alpha64 (LP64).
140 Some code needed to be fixed regarding int-long conversions
141 (mostly inside the test suite), and floating point handling
142 code needed to be restructured to handle signalling NAN and
143 other floating point exceptions quietly. Smooth transition!
144 * [NEW PLATFORM] Compiled and tested on Sun Solaris 9 @ sparc.
145 Improved includes/defines of/for system headers.
vlm60e7ef02004-10-13 09:13:56 +0000146 * -X command line option added to asn1c to generate XML DTD.
vlm0aa86902004-10-12 23:26:53 +0000147 * Empty SEQUENCE and SET clauses are now allowed.
vlmba67bd12004-10-25 22:58:49 +0000148 * Removed confusion between &xNN; and &#xNN; in enber and unber.
vlm79729272004-10-31 00:11:50 +0000149 * Removed order dependency in DEFAULT references to ENUMERATED
150 identifiers (./tests/68-*-OK.asn1).
vlmbd8d05f2005-01-17 12:35:57 +0000151 * ber_dec_rval_t renamed into asn_dec_rval_t: more generality.
vlm34dcd572005-01-17 11:40:49 +0000152 * Extensions in CHOICE types are properly marked as non-pointers
vlm82abba82005-04-25 19:38:21 +0000153 (Test case 59) (Severity: medium; Security impact: medium)
vlm34dcd572005-01-17 11:40:49 +0000154 Reported by <roman.pfender@sdm.de>.
vlmbd8d05f2005-01-17 12:35:57 +0000155 * Tagged CHOICE type is now supported again.
vlm82abba82005-04-25 19:38:21 +0000156 (Test case 59) (Severity: low; Security impact: low)
vlmbd8d05f2005-01-17 12:35:57 +0000157 Reported by <orlinkata@dir.bg>.
vlmcd05d3d2004-11-16 09:46:00 +0000158 * Implemented der_encode_to_buffer() procedure.
vlm0aa86902004-10-12 23:26:53 +0000159
1600.9.7.1: 2004-Oct-12
161
162 * Fixed automatic tagging for extensions of compound types.
163 * Fixed ParametrizedReference parsing: {} are now recognized.
164
vlm267b7fd2004-10-11 11:43:08 +00001650.9.7: 2004-Oct-11
vlm745fe252004-10-02 00:12:11 +0000166
vlmaa930cb2005-02-24 22:37:07 +0000167 * Finished CXER implementation by adding SET and SET OF canonical
168 ordering support.
vlm17cbadb2004-10-03 10:55:08 +0000169 * Fixed unber(1) limits controlling logic.
vlm745fe252004-10-02 00:12:11 +0000170 * Removed C99'izm from the x509dump, now understood by older compilers.
vlmee5afb02004-10-02 15:55:20 +0000171 * Enhanced UTF8String constraint validation, now it checks
172 for the minimal encoding length; API of UTF8String_length() changed.
vlm5cb31d52004-10-05 06:39:35 +0000173 * Fixed SEQUENCE dealing with premature termination of the
174 optionals-laden indefinite length structure. The code was previously
175 refusing to parse such structures.
vlm267b7fd2004-10-11 11:43:08 +0000176 * Fixed explicitly tagged ANY type encoding and decoding
vlm82abba82005-04-25 19:38:21 +0000177 (Severity: medium; Security impact: low).
vlm5cb31d52004-10-05 06:39:35 +0000178 * Fixed CHOICE code spin when indefinite length structures appear
vlm82abba82005-04-25 19:38:21 +0000179 in the extensions (Severity: medium; Security impact: medium).
vlm5cb31d52004-10-05 06:39:35 +0000180 Reported by <siden@ul-gsm.ru>.
vlm0f1ab762004-10-12 05:57:23 +0000181 * BIT STRING now stores the number of unused octets in a separate field.
vlm745fe252004-10-02 00:12:11 +0000182
vlm0d181f22004-09-29 13:30:32 +00001830.9.6: 2004-Sep-29
vlme43659a2004-09-19 19:40:52 +0000184
vlm0d181f22004-09-29 13:30:32 +0000185 * Added several security firewalls: decoder's stack usage control
186 and the stricter checking of the TLV length.
vlmf7ed1482004-09-22 16:06:52 +0000187 * Implemented BASIC-XER encoding support (X.693).
vlm74e9e342004-09-24 21:06:19 +0000188 * Implemented unber(1) and enber(1) for BER<->XML translation.
vlmf7ed1482004-09-22 16:06:52 +0000189 * Implemented CGI for online ASN.1 compilation (asn1c/webcgi).
vlm74e9e342004-09-24 21:06:19 +0000190 * Implemented the sample X.509 decoder (./examples/sample.source.PKIX1).
vlmf7ed1482004-09-22 16:06:52 +0000191 * NamedType is now supported for SET OF/SEQUENCE OF type.
vlm986afd62004-09-26 13:16:56 +0000192 * Added -fno-constraints option to asn1c, which disabled generation of
193 ASN.1 subtype constraints checking code.
vlmf7ed1482004-09-22 16:06:52 +0000194 * Added ASN1C_ENVIRONMENT_VERSION and get_asn1c_environment_version().
vlm82abba82005-04-25 19:38:21 +0000195 * Fixed ANY type decoding (Severity: high; Security impact: low).
vlm74e9e342004-09-24 21:06:19 +0000196 * Fixed BER decoder restartability problem with certain primitive
197 types (BOOLEAN, INTEGER, and REAL). The problem occured when the
198 encoding of such type is split between several bytes.
vlm82abba82005-04-25 19:38:21 +0000199 (Severity: high; Security impact: low)
vlm0d181f22004-09-29 13:30:32 +0000200 * Support for cross-referencing type definitions (updated ./tests/43-*).
vlmc8ee3052004-09-27 20:56:03 +0000201 * Fixed pretty-printing of the REAL type. Added lots of test cases.
vlm0d181f22004-09-29 13:30:32 +0000202 * Renamed asn1_* into asn_* in function and type names.
vlm74e9e342004-09-24 21:06:19 +0000203 * Updated documentation.
vlme43659a2004-09-19 19:40:52 +0000204
vlmbed6f812004-09-17 06:46:10 +00002050.9.5: 2004-Sep-17
vlmf72653e2004-09-13 08:32:15 +0000206
207 * Fixed CER (common BER) decoder code. See check-25.c/VisibleString
208 case for details. X.690 specifies that inner structures in BER
209 encoding must be tagged by stripping off the outer tag for each
210 subsequent containment level. See also X.690: 8.21.5.4 and
211 the "Spouse" case in A.3.
vlm82abba82005-04-25 19:38:21 +0000212 (Severity: medium; Security impact: low)
vlmf72653e2004-09-13 08:32:15 +0000213 * Added converters between any generic type and the ANY type.
vlmb807ac42004-09-14 02:46:22 +0000214 * Parser fixed: Information Object Class fields may be taged.
215 * Parser fixed: tagged types inside SEQUENCE OF/SET OF support.
vlm9e4815d2004-09-15 12:01:04 +0000216 * Improved DEFAULT Value parsing and pretty-printing.
217 * Condition on distinct tags checker was incorrectly dealing with
218 tagged CHOICE types. Fixed. Modified tests/37-indirect-choice-OK.asn1
vlmb47f48e2004-09-17 06:32:12 +0000219 * Improved type name generation code ("struct foo" vs "foo_t").
vlm9e4815d2004-09-15 12:01:04 +0000220 * Fixed constraint checking code incorrectly dealing with imported
221 types with constraint values defined in other modules.
vlmf9d178d2004-09-14 12:47:45 +0000222 * Real REAL support! (Haven't tested denormals support yet!)
223 See skeletons/tests/check-REAL.c
vlmf72653e2004-09-13 08:32:15 +0000224
vlm1308d2b2004-09-10 15:49:15 +00002250.9.4: 2004-Sep-10
vlmdbf655b2004-09-10 09:38:17 +0000226
227 * More support for recursive type definitions.
228 * Explicit support for ANY type decoding.
vlm1308d2b2004-09-10 15:49:15 +0000229 * Refactored tags processing code.
230 * Fixed constraints checking code: non-exploitable buffer overflow.
vlm82abba82005-04-25 19:38:21 +0000231 (Severity: medium; Security impact: low)
vlmdbf655b2004-09-10 09:38:17 +0000232
vlm8c80dc52004-09-08 02:49:06 +00002330.9.3: 2004-Sep-07
vlm7a35b652004-08-26 06:19:23 +0000234
vlme9a56c92004-09-05 10:41:39 +0000235 * Extended constraints support in parametrized types.
236 * Better support for parametrization and constraints handling.
vlm21c70452004-09-08 00:27:33 +0000237 * Better handling of recursive type definitions.
vlm39c50612004-09-04 05:02:31 +0000238 * Added support for ANY type.
vlm7a35b652004-08-26 06:19:23 +0000239
vlmd86c9252004-08-25 01:34:11 +00002400.9.2: 2004-Aug-24
241
vlm3231b9f2004-08-25 02:06:48 +0000242 * More flexible subtype constraints handling, with relaxed
243 PER visibility rules for actual constraints checking code generator.
vlmd86c9252004-08-25 01:34:11 +0000244 * Indirect references in constraints resolver code fixed.
245 * Avoided compilation warning on gcc 3.3.3 systems.
vlmda4df3f2004-08-25 02:27:47 +0000246 * Better ValueSet printing.
vlmd86c9252004-08-25 01:34:11 +0000247
vlmef427fd2004-08-24 05:25:57 +00002480.9.1: 2004-Aug-23
249
250 * Documentation updated: doc/asn1c-usage.pdf
251 * Fixed OBJECT IDENTIFIER human-readable printing.
252 Reported by <siden@ul-gsm.ru>.
253
vlm82620702004-08-23 09:24:40 +00002540.9: 2004-Aug-23
vlmd3d0fbd2004-08-18 05:43:55 +0000255
256 * Reworked subtype constraints handling, aiming at PER-applicability.
vlm7ce9add2004-08-19 13:35:01 +0000257 * BOOLEAN and NULL are now implemented in terms of native int type.
258 * Compiler now links in only necessary skeleton files.
vlmf25d2812004-08-20 13:38:25 +0000259 * -t option added to asn1c to ease manual BER/CER/DER decoding.
vlmdae7f9d2004-08-22 03:25:24 +0000260 * Added support COMPONENTS OF construct.
261 * Numerous parser fixes and enhancements.
vlm758530a2004-08-22 13:47:59 +0000262 * Better constraint failure reporting.
vlmd3d0fbd2004-08-18 05:43:55 +0000263
vlm19aae982004-08-18 09:05:12 +00002640.8.19: 2004-Aug-18
265
266 * Fixed BER encoder (problem encoding large tag values)
vlm82abba82005-04-25 19:38:21 +0000267 (Severity: medium; Security impact: low)
vlm19aae982004-08-18 09:05:12 +0000268
vlm22736492004-08-13 12:39:17 +00002690.8.18: 2004-Aug-12
270
271 * Parser: fixed multiple IMPORTS problem (incorrect assertion).
272 * Parser: constraints extensibility parsing fix.
273
vlm6e73a042004-08-11 07:17:22 +00002740.8.17: 2004-Aug-11
vlm8ed2f6f2004-08-11 05:35:51 +0000275
276 * Improved compiler output: duplicate #includes eliminated.
vlm6e73a042004-08-11 07:17:22 +0000277 * Win32 portability fixes.
vlme167bf72004-08-11 08:11:50 +0000278 * More compatibility with C++ or non-GCC compilers.
vlm8ed2f6f2004-08-11 05:35:51 +0000279
vlm972a5382004-07-22 12:19:42 +00002800.8.16: 2004-Jul-22
281
282 * Fixed application-level problem in SET OF/SEQUENCE OF array cleanup.
vlm82abba82005-04-25 19:38:21 +0000283 (Severity: medium; Security impact: low)
vlm81057a82004-08-07 03:52:26 +0000284 * Improved asn_GT2time() and added asn_time2{GT,UT}() functions.
vlm49b511a2004-08-07 05:01:45 +0000285 * BIT STRING pretty-printing.
vlm972a5382004-07-22 12:19:42 +0000286
vlm796c1da2004-07-21 03:55:44 +00002870.8.15: 2004-Jul-20
vlmf0769b42004-07-15 10:52:58 +0000288
289 * Fixed parser: memory leak in free_struct code for SET OF/SEQUENCE OF.
vlm82abba82005-04-25 19:38:21 +0000290 (Severity: high; Security impact: medium)
vlmde1d8f72004-07-21 04:15:24 +0000291 * Fixed parser: invalid memory reference in code constructing tags.
vlm82abba82005-04-25 19:38:21 +0000292 (Test case 48) (Severity: high; Security impact: medium)
vlm796c1da2004-07-21 03:55:44 +0000293 When encoding data for certain ASN.1 specifications containing
294 explicit tags, the tag is always written incorrectly due to
295 incorrect memory reference. The encoding will almost always produce
296 unparseable data and might well reference unmapped region so program
297 would produce segmentation violation. Fortunately, memory is
298 read, not written, so remote exploits cannot execute arbitrary
299 code and triggering unmapped memory reference is highly unlikely
300 even it attacker knows the code (basically, the compiler should place
301 asn1_DEF_... right before the end of the mapped memory region, which
302 is extremely rare).
vlm7d278c42004-07-19 17:30:25 +0000303 * Improved INTEGER type printing.
vlmf0769b42004-07-15 10:52:58 +0000304
vlm79b08d52004-07-01 00:52:50 +00003050.8.14: 2004-Jun-30
306
307 * Fixed compiler: extensibility of CHOICE and SET type has not been
308 taken into account during table construction.
vlm82abba82005-04-25 19:38:21 +0000309 (Test case 47) (Severity: high; Security impact: low)
vlm79b08d52004-07-01 00:52:50 +0000310
vlm65328a82004-06-28 21:22:20 +00003110.8.13: 2004-Jun-29
312
313 * Fixed compiler: the skip values for IMPLICIT tagging were broken
314 in some complex cases where one type is defined using another.
vlm82abba82005-04-25 19:38:21 +0000315 (Test case 46) (Severity: medium; Security impact: low).
vlm65328a82004-06-28 21:22:20 +0000316 * Added -fknown-extern-type command line parameter to asn1c.
317 * Removed -N command line flag and underlying functionality
318 to honor KISS principle.
319
vlmd315be52004-06-18 00:03:54 +00003200.8.12: 2004-Jun-17
vlme511d3e2004-06-14 13:53:32 +0000321
vlmd315be52004-06-18 00:03:54 +0000322 * RELATIVE-OID and OBJECT IDENTIFIER encoders/decoders are not bound
323 anymore to an integer type of specific size (unsigned long). The
324 size of an integer must be provided explicitly.
325 See {OBJECT_IDENTIFIER|RELATIVE_OID}_{get|set}_arcs().
vlme511d3e2004-06-14 13:53:32 +0000326 * SEQUENCE BER decoder fixed again for complex CHOICE case
vlm82abba82005-04-25 19:38:21 +0000327 (Test case 44) (Severity: medium; Security impact: low).
vlme511d3e2004-06-14 13:53:32 +0000328
vlm97986e42004-06-05 08:47:18 +00003290.8.11: 2004-Jun-05
330
vlm387ab0c2004-07-21 04:28:32 +0000331 * Enforced stricter conformance with C standards.
vlme511d3e2004-06-14 13:53:32 +0000332 * SEQUENCE BER decoder is now equipped with the sorted map
vlm45191f52004-06-06 07:20:37 +0000333 in case of complex CHOICE descendants. Test case 44 created.
vlm97986e42004-06-05 08:47:18 +0000334
vlmfa67ddc2004-06-03 03:38:44 +00003350.8.10: 2004-Jun-02
336
337 * Added const qualifier where necessary.
338 * Changed position of outmost_tag fetcher within asn1_TYPE_descriptor_t
339 structure.
340
3410.8.9: 2004-May-26
342
343 * Added *_{get|set}_arcs_*() functions for OBJECT IDENTIFIER
344 and RELATIVE-OID, together with test cases.
345
3460.8.8: 2004-May-09
347
348 * Introduced subtype constraints support (incomplete!).
349 * Fixed compiler. If the last member of the SEQUENCE is OPTIONAL
350 and absent in the encoding, and the type is extensible (...) or
351 EXTENSIBILITY IMPLIED flag is set, then the structure could not
vlm82abba82005-04-25 19:38:21 +0000352 be correctly decoded. (Severity: high; Security impact: low).
vlmfa67ddc2004-06-03 03:38:44 +0000353 * Compiler: fixed recursive ASN.1 types inclusion (Severity: low,
354 Security impact: none).
355 * Parser: IMPORTS/FROM fixes, now allowing multiple sections.
vlm32d29a52004-10-26 10:44:18 +0000356 * NEW PLATFORM: Compiled and tested on MacOS X (@ PowerPC).
357 No major portability issues experienced.
vlmfa67ddc2004-06-03 03:38:44 +0000358
3590.8.7: 2004-Apr-11 T-version-0-8-7
360
361 * Fixed SEQUENCE BER decoder: if the last member of the SEQUENCE is
362 OPTIONAL and absent in the encoding, RC_FAIL was returned instead
vlm82abba82005-04-25 19:38:21 +0000363 of RC_OK (Severity: high; Security impact: low).
vlmfa67ddc2004-06-03 03:38:44 +0000364 * Added test case to check the above problem.
365 * Added test case to check -fnative-integers mode.
366
3670.8.6: 2004-Apr-03 T-version-0-8-6
368
369 * Fixed compiler output for embedded ASN.1 structures.
370
3710.8.5: 2004-Mar-28 T-version-0-8-5
372
vlm82abba82005-04-25 19:38:21 +0000373 * Fixed ber_tlv_length() computation problem (Severity: high,
vlmfa67ddc2004-06-03 03:38:44 +0000374 Security impact: none).
375 Reported by <vss@high.net.ru>
376
3770.8.4: 2004-Mar-22
378
379 * Removed RC_ITAG enumeration element from BER decoder.
380 This return code did not have much practical value.
381
3820.8.3: 2004-Mar-14 T-version-0-8-3
383
384 * Fixed SET::BER decoder: restart after reaching a buffer boundary
vlm82abba82005-04-25 19:38:21 +0000385 weas broken (Severity: high; Security impact: low).
vlmfa67ddc2004-06-03 03:38:44 +0000386 * Fixed OCTET STRING::BER decoder: restart after reaching a buffer
vlm82abba82005-04-25 19:38:21 +0000387 boundary was broken (Severity: high; Security impact: low).
vlmfa67ddc2004-06-03 03:38:44 +0000388 Reported by <vss@high.net.ru>
389 * Added test cases to check decoders restartability.
390 * Slightly more general INTEGER2long decoder.
391 * Allowed nested /* C-type */ comments, as per X.680:2002.
392
3930.8.2: 2004-Mar-01 T-version-0-8-2
394
395 * Fixed SEQUENCE BER decoder: an OPTIONAL element was required, where
396 should not have been (Severity: major; Security impact: low).
397 * Fixed print_struct pointer inheritance.
398 * Added -fno-c99 and -funnamed-unions
399
4000.8.1: 2004-Feb-22
401
402 * -R switch to asn1c: Omit support code, compile only the tables.
403 * Introduced NativeInteger pseudotype.
404 * Corrected the informal print_struct()'s output format.
405
4060.8.0: 2004-Feb-03 T-version-0-8-0
407
408 * Some documentation is created (a .pdf and a short manual page).
409 * Last touches to the code.
410
4110.7.9: 2004-Feb-01 T-version-0-7-9
412
413 * Human readable printing support.
414 * Support for implicit (standard) constraints.
415
4160.7.8: 2004-Jan-31
417
418 * SET now rejects duplicate fields in the data stream.
419
4200.7.7: 2004-Jan-25
421
422 * Added types: GeneralizedTime and UTCTime.
423
4240.7.6: 2004-Jan-24 T-version-0-7-6
425
426 * DER encoding of a SET OF now involves dynamic sorting.
427
4280.7.5: 2004-Jan-24 T-version-0-7-5
429
430 * DER encoding of a SET with untagged CHOICE
431 now involves dynamic sorting.
432
4330.7.0: 2004-Jan-19 T-version-0-7-0
434
435 * A bunch of DER encoders is implemented.
436
4370.6.6: 2004-Jan-11
438
439 * Implemented CHOICE decoder.
440 * Implemented destructors support.
441
4420.6.5: 2004-Jan-03
443
444 * Implemented SET decoder.
445 * Implemented SET OF and SEQUENCE OF decoders.
446
4470.6.4: 2003-Dec-31
448
449 * Implemented BOOLEAN, NULL, ENUMERATED decoders.
450 * Implemented OCTET STRING decoder.
451 * Implemented BIT STRING decoder.
452
4530.6: 2003-Dec-30
454
455 * First decoding of a BER-encoded structure!
456
4570.5: 2003-Dec-28
458
459 * Framework and most of the compiler backbone coding done.
460
4610.1: 2003-Nov-28
462
463 * Programming started.
vlm5cb31d52004-10-05 06:39:35 +0000464
465=== Bug importance disclosure terms ===
466
467SEVERITY.
468 This term applies to the frequence the particular construct is used
469 in the real world. The higher the frequency, the more chances of triggering
470 this bug.
471 low: The ASN.1 specifications which could trigger
472 this kind of bug are not widespread.
473 medium: The particular ASN.1 construct is used quite often,
474 so the chance of triggering an error is considerable.
475 high: This fix is considered urgent, or the particular ASN.1
476 construct triggering this bug is in wide use.
477
478SECURITY IMPACT.
479 This term applies to the amount of potential damage a bug exploitation
480 could cause.
vlm5fbaa132006-03-14 11:52:12 +0000481 none: No malicious exploitation is possible.
vlm5cb31d52004-10-05 06:39:35 +0000482 low: The local exploitation is unlikely; the remote exploitation
483 is impossible.
484 medium: The remote exploitation is possible when a particular ASN.1
485 construct is being used. If possible, only hard failure, spin
486 or memory leak are the possible outcome: no shellcode
487 injection could possibly be carried by the attack.
488 high: The remote shellcode injection is possible, or the bug is
489 otherwise remotely exploitable for most specifications.
490