Binary compatibility report for the MatrixSSL library between 3.2.1 and 3.3 versions on x86

Test Info

Library Name	MatrixSSL
Version #1	3.2.1
Version #2	3.3
CPU Type	x86
GCC Version	4.6.1

Test Results

Total Header Files	1
Total Shared Libraries	1
Total Symbols / Types	186 / 126
Verdict	Incompatible (15.1%)

Problem Summary

	Severity	Count
Added Symbols	-	3
Removed Symbols	High	0
Problems with Data Types	High	0
	Medium	7
	Low	3
Problems with Symbols	High	2
	Medium	0
	Low	1
Problems with Constants	Low	8

Added Symbols (3)

cryptoApi.h, libmatrixssl.so
pkcs5pbkdf1 ( unsigned char* pass, uint32 passlen, unsigned char* salt, int32 iter, unsigned char* key )
pkcs5pbkdf2 ( unsigned char* password, uint32 pLen, unsigned char* salt, uint32 sLen, int32 rounds, unsigned char* key, uint32 kLen )

matrixssllib.h, libmatrixssl.so
matrixSslAddRehandshakeCredits ( ssl_t* ssl, int32 credits )

to the top

Problems with Symbols, High Severity (2)

matrixssllib.h, libmatrixssl.so
[+] tlsGenerateFinishedHash ( union psDigestContext_t* md5, union psDigestContext_t* sha1, unsigned char* masterSecret, unsigned char* out, int32 sender ) (2)

changed to:
tlsGenerateFinishedHash ( ssl_t* ssl, union psDigestContext_t* md5, union psDigestContext_t* sha1, union psDigestContext_t* sha256, unsigned char* masterSecret, unsigned char* out, int32 sender )

	Change	Effect
1	Parameter ssl of type ssl_t* has been added to the calling stack at the middle position.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.
2	Parameter sha256 of type union psDigestContext_t* has been added to the calling stack at the middle position.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.

to the top

Problems with Data Types, Medium Severity (7)

matrixssllib.h
[+] struct ssl (3)

	Change	Effect
1	Field rehandshakeBytes has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field rehandshakeCount has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Size of field sec has been changed from 2232 bytes to 2280 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.

[+] affected symbols (47)

matrixClearSession ( ssl_t* ssl, int32 remove )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixRegisterSession ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixResumeSession ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslDecode ( ssl_t* ssl, unsigned char** buf, uint32* len, uint32 size, uint32* remaining, uint32* requiredLen, int32* error, unsigned char* alertLevel, unsigned char* alertDescription )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslDeleteSession ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslEncode ( ssl_t* ssl, unsigned char* buf, uint32 size, unsigned char* ptBuf, uint32* len )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslEncodeClientHello ( ssl_t* ssl, sslBuf_t* out, uint32 cipherSpec, uint32* requiredLen, tlsExtension_t* userExt )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslEncodeClosureAlert ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslEncodeHelloRequest ( ssl_t* ssl, sslBuf_t* out, uint32* reqLen )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslEncodeRehandshake ( ssl_t* ssl, struct sslKeys_t* keys, int32(*certCb)(ssl_t*, psX509Cert_t*, int32), uint32 sessionOption, uint32 cipherSpec )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslEncodeToOutdata ( ssl_t* ssl, unsigned char* buf, uint32 len )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslEncodeWritebuf ( ssl_t* ssl, uint32 len )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslGetAnonStatus ( ssl_t* ssl, int32* anonArg )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslGetEncodedSize ( ssl_t* ssl, uint32 len )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslGetOutdata ( ssl_t* ssl, unsigned char** buf )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslGetReadbuf ( ssl_t* ssl, unsigned char** buf )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslGetSessionId ( ssl_t* ssl, struct sslSessionId_t* sessionId )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslGetWritebuf ( ssl_t* ssl, unsigned char** buf, uint32 reqLen )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslHandshakeIsComplete ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslNewClientSession ( ssl_t** ssl, struct sslKeys_t* keys, struct sslSessionId_t* sid, uint32 cipherSpec, int32(*certCb)(ssl_t*, psX509Cert_t*, int32), tlsExtension_t* extensions, int32(*extCb)(ssl_t*, unsigned short, unsigned short, void*) )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslNewServerSession ( ssl_t** ssl, struct sslKeys_t* keys, int32(*certCb)(ssl_t*, psX509Cert_t*, int32) )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslNewSession ( ssl_t** ssl, struct sslKeys_t* keys, struct sslSessionId_t* session, int32 flags )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslProcessedData ( ssl_t* ssl, unsigned char** ptbuf, uint32* ptlen )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslReceivedData ( ssl_t* ssl, uint32 bytes, unsigned char** ptbuf, uint32* ptlen )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslSentData ( ssl_t* ssl, uint32 bytes )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslSetCertValidator ( ssl_t* ssl, int32(*certValidator)(void*, psX509Cert_t*, int32) )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslSetCipherSuiteEnabledStatus ( ssl_t* ssl, uint16 cipherId, uint32 status )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixSslSetSessionOption ( ssl_t* ssl, int32 option, void* arg )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixUpdateSession ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

matrixUserCertValidator ( ssl_t* ssl, int32 alert, psX509Cert_t* subjectCert, sslCertCb_t certCb )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

psWriteHandshakeHeader ( ssl_t* ssl, unsigned char type, int32 len, int32 seq, int32 fragOffset, int32 fragLen, unsigned char* c )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

psWriteRecordInfo ( ssl_t* ssl, unsigned char type, int32 len, unsigned char* c )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslActivateReadCipher ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslActivateWriteCipher ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslCreateKeys ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslDeriveKeys ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslEncodeClosureAlert ( ssl_t* ssl, sslBuf_t* out, uint32* reqLen )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslEncodeResponse ( ssl_t* ssl, struct psBuf_t* out, uint32* requiredLen )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslGetCipherSpec ( ssl_t* ssl, uint32 cid )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslGetCipherSpecList ( ssl_t* ssl, unsigned char* c, int32 len, int32 addScsv )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslGetCipherSpecListLen ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslInitHSHash ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslResetContext ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslSnapshotHSHash ( ssl_t* ssl, unsigned char* out, int32 senderFlag )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

sslUpdateHSHash ( ssl_t* ssl, unsigned char* in, uint32 len )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

tlsDeriveKeys ( ssl_t* ssl )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

tlsHMACSha1 ( ssl_t* ssl, int32 mode, unsigned char type, unsigned char* data, uint32 len, unsigned char* mac )

1st parameter 'ssl' (pointer) has base type 'struct ssl'.

[+] struct sslSec_t (3)

	Change	Effect
1	Type of field keyBlock has been changed from unsigned char[156] (156 bytes) to unsigned char[180] (180 bytes).	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
2	Type of field readMAC has been changed from unsigned char[20] (20 bytes) to unsigned char[32] (32 bytes).	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
3	Type of field writeMAC has been changed from unsigned char[20] (20 bytes) to unsigned char[32] (32 bytes).	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.

[+] affected symbols (47)

matrixClearSession ( ssl_t* ssl, int32 remove )

Field 'ssl->sec' in 1st parameter 'ssl' (pointer) has type 'struct sslSec_t'.