/ 
CBOR-XS-1.1
Security Advisories (1)
CPANSA-CBOR-XS-2017-01 (2017-07-27)

An out-of bound sharedref or stringref index could cause an out of bounds access - might be exploitable. A decoding error during indefinite array or hash decoding could cause an endless loop.

Changes for version 1.1 - 2013-11-30

  • INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode cyclic data structures (to avoid memleaks in unsuspecting code).
  • no longer "share" references that aren't, i.e. true/false/null/error/tagged.
  • fix stringref w.r.t. indefinite-length strings.
  • verify indefinite-length string chunk types.
  • do not allow extremely large arrays - assume an array element requires at least one CBOR byte, to avoid memory exhaustion attacks.
  • major code overhaul.

Modules

CBOR::XS
Concise Binary Object Representation (CBOR, RFC7049)

Other files