Binary compatibility report for the MatrixSSL library between 3.3 and 3.3.1 versions on x86

Test Info

Library Name	MatrixSSL
Version #1	3.3
Version #2	3.3.1
CPU Type	x86
GCC Version	4.6.1

Test Results

Total Header Files	1
Total Shared Libraries	1
Total Symbols / Types	189 / 128
Verdict	Incompatible (30.7%)

Problem Summary

	Severity	Count
Added Symbols	-	4
Removed Symbols	High	3
Problems with Data Types	High	1
	Medium	12
	Low	10
Problems with Symbols	High	0
	Medium	8
	Low	0
Problems with Constants	Low	5

Added Symbols (4)

matrixssllib.h, libmatrixssl.so
csAesDecrypt ( void* ssl, unsigned char* ct, unsigned char* pt, uint32 len )
csAesEncrypt ( void* ssl, unsigned char* pt, unsigned char* ct, uint32 len )
csAesInit ( struct sslSec_t* sec, int32 type, uint32 keysize )

pstm.h, libmatrixssl.so
pstm_exch ( struct pstm_int* a, struct pstm_int* b )

to the top

Removed Symbols (3)

matrixssllib.h, libmatrixssl.so
ssl3HMACSha1 ( unsigned char* key, unsigned char* seq, unsigned char type, unsigned char* data, uint32 len, unsigned char* mac )
sslDeriveKeys ( ssl_t* ssl )
sslGenerateFinishedHash ( union psDigestContext_t* md5, union psDigestContext_t* sha1, unsigned char* masterSecret, unsigned char* out, int32 sender )

to the top

Problems with Data Types, High Severity (1)

	Change	Effect
1	Field explicitIv has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

matrixssllib.h
[+] struct sslSec_t (1)

to the top

Problems with Data Types, Medium Severity (12)

	Change	Effect
1	Field fragIndex has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field fragMessage has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field fragTotal has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field maxPtFrag has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field outRecType has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
6	Size of field sec has been changed from 2280 bytes to 2268 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.

	Change	Effect
1	Size of field encryptCtx has been changed from 784 bytes to 780 bytes.	Previous accesses of applications and library functions to this field may be broken.
2	Size of field decryptCtx has been changed from 784 bytes to 780 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.

	Change	Effect
1	Field explicitIV has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field explicitIV has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Size of field des3 has been changed from 784 bytes to 780 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
2	Size of field aes has been changed from 540 bytes to 536 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field may be broken.

matrixssllib.h
[+] struct ssl (6)
[+] struct sslSec_t (2)

symmetric.h
[+] struct aes_CBC (1)
[+] struct des3_CBC (1)
[+] union psCipherContext_t (2)

to the top

Problems with Symbols, Medium Severity (8)

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter data of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

cryptoApi.h, libmatrixssl.so
[+] psRsaCrypt ( psPool_t* pool, unsigned char const* in, uint32 inlen, unsigned char* out, uint32* outlen, struct psRsaKey_t* key, int32 type ) (1)
[+] psRsaDecryptPriv ( psPool_t* pool, struct psRsaKey_t* key, unsigned char* in, uint32 inlen, unsigned char* out, uint32 outlen ) (1)
[+] psRsaDecryptPub ( psPool_t* pool, struct psRsaKey_t* key, unsigned char* in, uint32 inlen, unsigned char* out, uint32 outlen ) (1)
[+] psRsaEncryptPub ( psPool_t* pool, struct psRsaKey_t* key, unsigned char* in, uint32 inlen, unsigned char* out, uint32 outlen ) (1)

matrixssllib.h, libmatrixssl.so
[+] csRsaDecryptPriv ( psPool_t* pool, struct psPubKey_t* key, unsigned char* in, uint32 inlen, unsigned char* out, uint32 outlen ) (1)
[+] csRsaDecryptPub ( psPool_t* pool, struct psPubKey_t* key, unsigned char* in, uint32 inlen, unsigned char* out, uint32 outlen ) (1)
[+] csRsaEncryptPriv ( psPool_t* pool, struct psPubKey_t* key, unsigned char* in, uint32 inlen, unsigned char* out, uint32 outlen ) (1)
[+] csRsaEncryptPub ( psPool_t* pool, struct psPubKey_t* key, unsigned char* in, uint32 inlen, unsigned char* out, uint32 outlen ) (1)

to the top

Problems with Data Types, Low Severity (10)

	Change	Effect
1	Field sha512 has been added to this type.	NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.

	Change	Effect
1	Size of this type has been changed from 2536 bytes to 2544 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field decrypt has been changed from int32()(union psCipherContext_t,unsigned char,unsigned char,uint32) to int32()(void,unsigned char,unsigned char,uint32).	Replacement of field base type may indicate a change in the semantic meaning of the field.
3	Base type of field encrypt has been changed from int32()(union psCipherContext_t,unsigned char,unsigned char,uint32) to int32()(void,unsigned char,unsigned char,uint32).	Replacement of field base type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Base type of field decrypt has been changed from int32()(union psCipherContext_t,unsigned char,unsigned char,uint32) to int32()(void,unsigned char,unsigned char,uint32).	Replacement of field base type may indicate a change in the semantic meaning of the field.
2	Base type of field encrypt has been changed from int32()(union psCipherContext_t,unsigned char,unsigned char,uint32) to int32()(void,unsigned char,unsigned char,uint32).	Replacement of field base type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 2280 bytes to 2268 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 540 bytes to 536 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 784 bytes to 780 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 784 bytes to 780 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

digest.h
[+] union anon-union-digest.h-97 (1)

matrixssllib.h
[+] struct ssl (3)
[+] struct sslCipherSpec_t (2)
[+] struct sslSec_t (1)

symmetric.h
[+] struct aes_CBC (1)
[+] struct des3_CBC (1)
[+] union psCipherContext_t (1)

to the top

Problems with Constants (5)

	Change	Effect
1	The value of constant CRYPTO_FLAGS_ARC4INIT has been changed from 0x400 to 0x1000.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant CRYPTO_FLAGS_BLOCKING has been changed from 0x800 to 0x2000.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant CRYPTO_FLAGS_DISABLED has been changed from 0x1000 to 0x4000.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant CRYPTO_FLAGS_INBOUND has been changed from 0x200 to 0x800.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant SSL_FLAGS_TLS_1_2 has been changed from 0x400000 to 0x00001000.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

cryptolib.h
[+] CRYPTO_FLAGS_ARC4INIT
[+] CRYPTO_FLAGS_BLOCKING
[+] CRYPTO_FLAGS_DISABLED
[+] CRYPTO_FLAGS_INBOUND

matrixssllib.h
[+] SSL_FLAGS_TLS_1_2

to the top

Header Files (1)

matrixsslApi.h

to the top

Shared Libraries (1)

libmatrixssl.so

to the top