Revision history for EV::Nats
0.05 2026-07-23
- Fix stack overflow decoding an over-long NKey seed, and out-of-bounds
reads in the INFO parser
- Fix wrong subject/reply when a message spans reads; bound inbound
control lines and a hostile max_payload
- Fix the CONNECT flush stalling on EAGAIN, and failover to the
remaining resolved addresses
- Defer DESTROY while a callback is on the stack (use-after-free)
- Refuse a plaintext CONNECT to a tls_required server; treat auth
errors as fatal regardless of case
- Fix builds without OpenSSL
- ObjectStore wire format now matches nats.go/ADR-20 (base64url names and
digests, deleted markers, overwrite cleanup); older buckets still read
- Add a mock-server test suite; fix POD links
0.04 2026-06-02
- Fix use-after-free when a callback clears its own handler
- Clamp control-line length to prevent a stack over-read
- Fix stale CONNECT version; handle JetStream status frames
0.03 2026-06-01
- Fix an HMSG header out-of-bounds read and a stack-pointer drift when
cancelling pending requests
0.02 2026-04-29
- Hardened TLS (hostname verification) and NKey auth (CRC + prefix
fixes; both were latently broken in 0.01).
- JetStream / KV / ObjectStore protocol fixes.
- Expanded tests; CI now runs JS + TLS + NKey suites.
0.01 2026-04-09
- Initial release.