Binary compatibility report for the PolarSSL library between 1.1.8 and 1.2.0 versions on x86

Test Info

Library Name	PolarSSL
Version #1	1.1.8
Version #2	1.2.0
CPU Type	x86
GCC Version	4.6.1

Test Results

Total Header Files	37
Total Shared Libraries	1
Total Symbols / Types	325 / 193
Verdict	Incompatible (20.3%)

Problem Summary

	Severity	Count
Added Symbols	-	49
Removed Symbols	High	5
Problems with Data Types	High	19
	Medium	66
	Low	33
Problems with Symbols	High	1
	Medium	3
	Low	6
Problems with Constants	Low	22
Other Changes in Data Types	-	8
Other Changes in Constants	-	85

Added Symbols (49)

asn1write.h, libpolarssl.so.1.2.0
asn1_write_algorithm_identifier ( unsigned char** p, unsigned char* start, char* algorithm_oid )
asn1_write_ia5_string ( unsigned char** p, unsigned char* start, char* text )
asn1_write_int ( unsigned char** p, unsigned char* start, int val )
asn1_write_len ( unsigned char** p, unsigned char* start, size_t len )
asn1_write_mpi ( unsigned char** p, unsigned char* start, struct mpi* X )
asn1_write_null ( unsigned char** p, unsigned char* start )
asn1_write_oid ( unsigned char** p, unsigned char* start, char* oid )
asn1_write_printable_string ( unsigned char** p, unsigned char* start, char* text )
asn1_write_tag ( unsigned char** p, unsigned char* start, unsigned char tag )

blowfish.h, libpolarssl.so.1.2.0
blowfish_crypt_cbc ( struct blowfish_context* ctx, int mode, size_t length, unsigned char* iv, unsigned char const* input, unsigned char* output )
blowfish_crypt_cfb64 ( struct blowfish_context* ctx, int mode, size_t length, size_t* iv_off, unsigned char* iv, unsigned char const* input, unsigned char* output )
blowfish_crypt_ctr ( struct blowfish_context* ctx, size_t length, size_t* nc_off, unsigned char* nonce_counter, unsigned char* stream_block, unsigned char const* input, unsigned char* output )
blowfish_crypt_ecb ( struct blowfish_context* ctx, int mode, unsigned char const* input, unsigned char* output )
blowfish_setkey ( struct blowfish_context* ctx, unsigned char const* key, unsigned int keysize )

cipher_wrap.h, libpolarssl.so.1.2.0
blowfish_cbc_info [data]
blowfish_cfb64_info [data]
blowfish_ctr_info [data]

entropy_poll.h, libpolarssl.so.1.2.0
havege_poll ( void* data, unsigned char* output, size_t len, size_t* olen )

gcm.h, libpolarssl.so.1.2.0
gcm_auth_decrypt ( struct gcm_context* ctx, size_t length, unsigned char const* iv, size_t iv_len, unsigned char const* add, size_t add_len, unsigned char const* tag, size_t tag_len, unsigned char const* input, unsigned char* output )
gcm_crypt_and_tag ( struct gcm_context* ctx, int mode, size_t length, unsigned char const* iv, size_t iv_len, unsigned char const* add, size_t add_len, unsigned char const* input, unsigned char* output, size_t tag_len, unsigned char* tag )
gcm_init ( struct gcm_context* ctx, unsigned char const* key, unsigned int keysize )
gcm_self_test ( int verbose )

havege.h, libpolarssl.so.1.2.0
havege_init ( struct havege_state* hs )
havege_random ( void* p_rng, unsigned char* output, size_t len )

ssl.h, libpolarssl.so.1.2.0
ssl_get_peer_cert ( ssl_context const* ssl )
ssl_handshake_free ( ssl_handshake_params* handshake )
ssl_handshake_wrapup ( ssl_context* ssl )
ssl_legacy_renegotiation ( ssl_context* ssl, int allow_legacy )
ssl_optimize_checksum ( ssl_context* ssl, int ciphersuite )
ssl_renegotiate ( ssl_context* ssl )
ssl_send_alert_message ( ssl_context* ssl, unsigned char level, unsigned char message )
ssl_send_fatal_handshake_failure ( ssl_context* ssl )
ssl_session_free ( ssl_session* session )
ssl_set_min_version ( ssl_context* ssl, int major, int minor )
ssl_set_own_cert_alt ( ssl_context* ssl, x509_cert* own_cert, void* rsa_key, rsa_decrypt_func rsa_decrypt, rsa_sign_func rsa_sign, rsa_key_len_func rsa_key_len )
ssl_set_renegotiation ( ssl_context* ssl, int renegotiation )
ssl_set_session_cache ( ssl_context* ssl, int(*f_get_cache)(void*, ssl_session*), void* p_get_cache, int(*f_set_cache)(void*, ssl_session const*), void* p_set_cache )
ssl_set_sni ( ssl_context* ssl, int(*f_sni)(void*, ssl_context*, unsigned char const*, size_t), void* p_sni )
ssl_transform_free ( ssl_transform* transform )

ssl_cache.h, libpolarssl.so.1.2.0
ssl_cache_free ( ssl_cache_context* cache )
ssl_cache_get ( void* data, ssl_session* session )
ssl_cache_init ( ssl_cache_context* cache )
ssl_cache_set ( void* data, ssl_session const* session )
ssl_cache_set_max_entries ( ssl_cache_context* cache, int max )
ssl_cache_set_timeout ( ssl_cache_context* cache, int timeout )

x509.h, libpolarssl.so.1.2.0
x509parse_crtpath ( x509_cert* chain, char const* path )

x509write.h, libpolarssl.so.1.2.0
x509_write_cert_req ( unsigned char* buf, size_t size, struct rsa_context* rsa, x509_req_name* req_name, int hash_id )
x509_write_key_der ( unsigned char* buf, size_t size, struct rsa_context* rsa )
x509_write_pubkey_der ( unsigned char* buf, size_t size, struct rsa_context* rsa )

to the top

Removed Symbols (5)

md5.h, libpolarssl.so.1.1.8
md5_process ( struct md5_context* ctx, unsigned char const* data )

sha1.h, libpolarssl.so.1.1.8
sha1_process ( struct sha1_context* ctx, unsigned char const* data )

sha2.h, libpolarssl.so.1.1.8
sha2_process ( struct sha2_context* ctx, unsigned char const* data )

ssl.h, libpolarssl.so.1.1.8
ssl_calc_verify ( ssl_context* ssl, unsigned char* hash )
ssl_set_scb ( ssl_context* ssl, int(*s_get)(ssl_context*), int(*s_set)(ssl_context*) )

to the top

Problems with Data Types, High Severity (19)

	Change	Effect
1	Field ctx_dec has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field ctx_enc has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field dhm_ctx has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field do_crypt has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field fin_md5 has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
6	Field fin_sha1 has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
7	Field iv_dec has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
8	Field iv_enc has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
9	Field ivlen has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
10	Field mac_dec has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
11	Field mac_enc has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
12	Field maclen has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
13	Field minlen has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
14	Field peer_cert has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
15	Field premaster has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
16	Field randbytes has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
17	Field s_get has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
18	Field s_set has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
19	Field timeout has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

ssl.h
[+] struct _ssl_context (19)

to the top

Problems with Symbols, High Severity (1)

	Change	Effect
1	2nd middle parameter resume has been removed from the calling stack.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.

ssl.h, libpolarssl.so.1.1.8
[+] ssl_set_session ( ssl_context* ssl, int resume, int timeout, ssl_session* session ) (1)

to the top

Problems with Data Types, Medium Severity (66)

	Change	Effect
1	Value of member POLARSSL_CIPHER_ID_3DES has been changed from 3 to 4.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
2	Value of member POLARSSL_CIPHER_ID_AES has been changed from 1 to 2.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
3	Value of member POLARSSL_CIPHER_ID_CAMELLIA has been changed from 4 to 5.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
4	Value of member POLARSSL_CIPHER_ID_DES has been changed from 2 to 3.	Applications may execute a wrong branch of code in the library and therefore change the behavior.

	Change	Effect
1	Value of member POLARSSL_MODE_CBC has been changed from 1 to 2.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
2	Value of member POLARSSL_MODE_CTR has been changed from 4 to 5.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
3	Value of member POLARSSL_MODE_OFB has been changed from 3 to 4.	Applications may execute a wrong branch of code in the library and therefore change the behavior.

	Change	Effect
1	Value of member POLARSSL_CIPHER_AES_128_CBC has been changed from 1 to 2.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
2	Value of member POLARSSL_CIPHER_AES_128_CFB128 has been changed from 4 to 5.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
3	Value of member POLARSSL_CIPHER_AES_128_CTR has been changed from 7 to 8.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
4	Value of member POLARSSL_CIPHER_AES_192_CBC has been changed from 2 to 3.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
5	Value of member POLARSSL_CIPHER_AES_192_CFB128 has been changed from 5 to 6.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
6	Value of member POLARSSL_CIPHER_AES_192_CTR has been changed from 8 to 9.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
7	Value of member POLARSSL_CIPHER_AES_256_CBC has been changed from 3 to 4.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
8	Value of member POLARSSL_CIPHER_AES_256_CFB128 has been changed from 6 to 7.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
9	Value of member POLARSSL_CIPHER_AES_256_CTR has been changed from 9 to 10.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
10	Value of member POLARSSL_CIPHER_CAMELLIA_128_CBC has been changed from 10 to 11.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
11	Value of member POLARSSL_CIPHER_CAMELLIA_128_CFB128 has been changed from 13 to 14.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
12	Value of member POLARSSL_CIPHER_CAMELLIA_128_CTR has been changed from 16 to 17.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
13	Value of member POLARSSL_CIPHER_CAMELLIA_192_CBC has been changed from 11 to 12.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
14	Value of member POLARSSL_CIPHER_CAMELLIA_192_CFB128 has been changed from 14 to 15.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
15	Value of member POLARSSL_CIPHER_CAMELLIA_192_CTR has been changed from 17 to 18.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
16	Value of member POLARSSL_CIPHER_CAMELLIA_256_CBC has been changed from 12 to 13.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
17	Value of member POLARSSL_CIPHER_CAMELLIA_256_CFB128 has been changed from 15 to 16.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
18	Value of member POLARSSL_CIPHER_CAMELLIA_256_CTR has been changed from 18 to 19.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
19	Value of member POLARSSL_CIPHER_DES_CBC has been changed from 19 to 20.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
20	Value of member POLARSSL_CIPHER_DES_EDE3_CBC has been changed from 21 to 22.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
21	Value of member POLARSSL_CIPHER_DES_EDE_CBC has been changed from 20 to 21.	Applications may execute a wrong branch of code in the library and therefore change the behavior.

	Change	Effect
1	Field allow_legacy_renegotiation has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field dhm_G has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field dhm_P has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field disable_renegotiation has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field f_get_cache has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
6	Field f_set_cache has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
7	Field handshake has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
8	Field min_major_ver has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
9	Field min_minor_ver has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
10	Field p_get_cache has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
11	Field p_set_cache has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
12	Field p_sni has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
13	Field renegotiation has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
14	Field rsa_decrypt has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
15	Field session_in has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
16	Field session_negotiate has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
17	Field session_out has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
18	Field transform has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
19	Field transform_in has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
20	Field transform_negotiate has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
21	Field transform_out has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
22	The relative position of field authmode has been changed from 38 to 40.	Applications will access incorrect memory when attempting to access this field.
23	The relative position of field ca_chain has been changed from 34 to 36.	Applications will access incorrect memory when attempting to access this field.
24	The relative position of field ca_crl has been changed from 35 to 37.	Applications will access incorrect memory when attempting to access this field.
25	The relative position of field ciphersuites has been changed from 41 to 43.	Applications will access incorrect memory when attempting to access this field.
26	The relative position of field client_auth has been changed from 39 to 41.	Applications will access incorrect memory when attempting to access this field.
27	The relative position of field endpoint has been changed from 37 to 39.	Applications will access incorrect memory when attempting to access this field.
28	The relative position of field own_cert has been changed from 33 to 35.	Applications will access incorrect memory when attempting to access this field.
29	The relative position of field p_dbg has been changed from 11 to 12.	Applications will access incorrect memory when attempting to access this field.
30	The relative position of field p_recv has been changed from 12 to 13.	Applications will access incorrect memory when attempting to access this field.
31	The relative position of field p_rng has been changed from 10 to 11.	Applications will access incorrect memory when attempting to access this field.
32	The relative position of field p_send has been changed from 13 to 14.	Applications will access incorrect memory when attempting to access this field.
33	The relative position of field p_vrfy has been changed from 14 to 15.	Applications will access incorrect memory when attempting to access this field.
34	The relative position of field peer_cn has been changed from 36 to 38.	Applications will access incorrect memory when attempting to access this field.
35	The relative position of field verify_result has been changed from 40 to 42.	Applications will access incorrect memory when attempting to access this field.

	Change	Effect
1	Field compression has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field next has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field subject_alt_names has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

cipher.h
[+] enum cipher_id_t (4)
[+] enum cipher_mode_t (3)
[+] enum cipher_type_t (21)

ssl.h
[+] struct _ssl_context (35)
[+] struct _ssl_session (2)

x509.h
[+] struct _x509_cert (1)

to the top

Problems with Symbols, Medium Severity (3)

	Change	Effect
1	Size of this global data has been changed from 52 bytes to 100 bytes.	Applications will obtain a different value and execution may change.
2	This global data became const.	Any attempts of old applications to change this global data may result in crash.

	Change	Effect
1	3rd parameter timeout has been removed from the calling stack.	This parameter will be ignored by the function.

ssl.h, libpolarssl.so.1.1.8
[+] ssl_default_ciphersuites [data] (2)
[+] ssl_set_session ( ssl_context* ssl, int resume, int timeout, ssl_session* session ) (1)

to the top

Problems with Data Types, Low Severity (33)

	Change	Effect
1	Base type of field rk has been changed from unsigned long to unsigned int.	Replacement of field base type may indicate a change in the semantic meaning of the field.
2	Type of field buf has been changed from unsigned long[68] to uint32_t[68].	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Base type has been changed from long to int.	Replacement of the base data type may indicate a change in its semantic meaning.

	Change	Effect
1	Base type has been changed from unsigned long to unsigned int.	Replacement of the base data type may indicate a change in its semantic meaning.

	Change	Effect
1	The member POLARSSL_MODE_CFB128 has been removed.	This may result in crash or incorrect behavior of applications because the library may not handle removed member anymore.

	Change	Effect
1	Field cfb128_func has been renamed to cfb_func.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Type of field sk has been changed from unsigned long[96] to uint32_t[96].	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Type of field sk has been changed from unsigned long[32] to uint32_t[32].	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Field havege_data has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Size of this type has been changed from 792 bytes to 37672 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Type of field state has been changed from unsigned long[4] to uint32_t[4].	Replacement of the field data type may indicate a change in the semantic meaning of the field.
2	Type of field total has been changed from unsigned long[2] to uint32_t[2].	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Type of field state has been changed from unsigned long[5] to uint32_t[5].	Replacement of the field data type may indicate a change in the semantic meaning of the field.
2	Type of field total has been changed from unsigned long[2] to uint32_t[2].	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Type of field state has been changed from unsigned long[8] to uint32_t[8].	Replacement of the field data type may indicate a change in the semantic meaning of the field.
2	Type of field total has been changed from unsigned long[2] to uint32_t[2].	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Type of field state has been changed from unsigned long long[8] to uint64_t[8].	Replacement of the field data type may indicate a change in the semantic meaning of the field.
2	Type of field total has been changed from unsigned long long[2] to uint64_t[2].	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Field own_verify_data has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Field peer_verify_data has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
3	Field secure_renegotiation has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
4	Field verify_data_len has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
5	Size of this type has been changed from 2180 bytes to 364 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
6	Base type of field f_vrfy has been changed from *int()(void,x509_cert,int,int) to int()(void,x509_cert,int,int)**.	Replacement of field base type may indicate a change in the semantic meaning of the field.
7	Field ciphersuites became const.	The value of this field is expected to be const in new library version, but can be modified by old applications.
8	Type of field ciphersuites has been changed from int* to int const*.	Replacement of the field data type may indicate a change in the semantic meaning of the field.
9	Type of field rsa_key has been changed from struct rsa_context* to void*.	Replacement of the field data type may indicate a change in the semantic meaning of the field.
10	Field keylen has been renamed to rsa_key_len.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.
11	Field pmslen has been renamed to rsa_sign.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.
12	Field resume has been renamed to f_sni.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Field peer_cert has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Size of this type has been changed from 96 bytes to 100 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 444 bytes to 460 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

aes.h
[+] struct aes_context (2)

bignum.h
[+] typedef t_sint (1)
[+] typedef t_uint (1)

cipher.h
[+] enum cipher_mode_t (1)
[+] struct cipher_base_t (1)

des.h
[+] struct des3_context (1)
[+] struct des_context (1)

entropy.h
[+] struct entropy_context (2)

md5.h
[+] struct md5_context (2)

sha1.h
[+] struct sha1_context (2)

sha2.h
[+] struct sha2_context (2)

sha4.h
[+] struct sha4_context (2)

ssl.h
[+] struct _ssl_context (12)
[+] struct _ssl_session (2)

x509.h
[+] struct _x509_cert (1)

to the top

Problems with Symbols, Low Severity (6)

	Change	Effect
1	Type of 1st parameter X has been changed from struct mpi* to struct mpi const*.	Replacement of parameter data type may indicate a change in its semantic meaning.

	Change	Effect
1	Type of this global data has been changed from int[] to int[] const.	Replacement of data type may indicate a change in semantic meaning.

	Change	Effect
1	Type of return value has been changed from void to int (4 bytes).	Replacement of return type may indicate a change in its semantic meaning.

	Change	Effect
1	Type of 2nd parameter ciphersuites has been changed from int* to int const*.	Replacement of parameter data type may indicate a change in its semantic meaning.

	Change	Effect
1	Base type of 2nd parameter f_vrfy has been changed from *int()(void,x509_cert,int,int) to int()(void,x509_cert,int,int)**.	Replacement of parameter base type may indicate a change in its semantic meaning.

	Change	Effect
1	Base type of 6th parameter f_vrfy has been changed from *int()(void,x509_cert,int,int) to int()(void,x509_cert,int,int)**.	Replacement of parameter base type may indicate a change in its semantic meaning.

bignum.h, libpolarssl.so.1.1.8
[+] mpi_get_bit ( struct mpi* X, size_t pos ) (1)

ssl.h, libpolarssl.so.1.1.8
[+] ssl_default_ciphersuites [data] (1)
[+] ssl_session_reset ( ssl_context* ssl ) (1)
[+] ssl_set_ciphersuites ( ssl_context* ssl, int* ciphersuites ) (1)
[+] ssl_set_verify ( ssl_context* ssl, int(*f_vrfy)(void*, x509_cert*, int, int), void* p_vrfy ) (1)

x509.h, libpolarssl.so.1.1.8
[+] x509parse_verify ( x509_cert* crt, x509_cert* trust_ca, x509_crl* ca_crl, char const* cn, int* flags, int(*f_vrfy)(void*, x509_cert*, int, int), void* p_vrfy ) (1)

to the top

Problems with Constants, Low Severity (22)

	Change	Effect
1	The value of constant POLARSSL_ERR_ASN1_INVALID_DATA has been changed from -0x001C to -0x0068.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant POLARSSL_ERR_ASN1_INVALID_LENGTH has been changed from -0x0018 to -0x0064.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant POLARSSL_ERR_ASN1_LENGTH_MISMATCH has been changed from -0x001A to -0x0066.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant POLARSSL_ERR_ASN1_MALLOC_FAILED has been changed from -0x001E to -0x006A.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant POLARSSL_ERR_ASN1_OUT_OF_DATA has been changed from -0x0014 to -0x0060.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The value of constant POLARSSL_ERR_ASN1_UNEXPECTED_TAG has been changed from -0x0016 to -0x0062.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The constant POLARSSL_MPI_READ_BUFFER_SIZE with value 1250 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The value of constant POLARSSL_ERR_NET_UNKNOWN_HOST has been changed from -0x0040 to -0x0056.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

	Change	Effect
1	The constant POLARSSL_ERR_PEM_BAD_INPUT_DATA with value -0x1480 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The constant POLARSSL_ERR_PEM_NO_HEADER_FOOTER_PRESENT with value -0x1080 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The constant SSL_EDH_RSA_AES_128_SHA with value 0x33 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The constant SSL_EDH_RSA_AES_256_SHA with value 0x39 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The constant SSL_EDH_RSA_CAMELLIA_128_SHA with value 0x45 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The constant SSL_EDH_RSA_CAMELLIA_256_SHA with value 0x88 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The constant SSL_EDH_RSA_DES_168_SHA with value 0x16 has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

	Change	Effect
1	The constant SSL_RSA_AES_128_SHA with value 0x2F has been removed.	The value of this constant may no longer be properly handled by new-version library functions.

asn1.h
[+] POLARSSL_ERR_ASN1_INVALID_DATA
[+] POLARSSL_ERR_ASN1_INVALID_LENGTH
[+] POLARSSL_ERR_ASN1_LENGTH_MISMATCH
[+] POLARSSL_ERR_ASN1_MALLOC_FAILED
[+] POLARSSL_ERR_ASN1_OUT_OF_DATA
[+] POLARSSL_ERR_ASN1_UNEXPECTED_TAG

bignum.h
[+] POLARSSL_MPI_READ_BUFFER_SIZE

net.h
[+] POLARSSL_ERR_NET_UNKNOWN_HOST

pem.h
[+] POLARSSL_ERR_PEM_BAD_INPUT_DATA
[+] POLARSSL_ERR_PEM_NO_HEADER_FOOTER_PRESENT

ssl.h
[+] SSL_EDH_RSA_AES_128_SHA
[+] SSL_EDH_RSA_AES_256_SHA
[+] SSL_EDH_RSA_CAMELLIA_128_SHA
[+] SSL_EDH_RSA_CAMELLIA_256_SHA
[+] SSL_EDH_RSA_DES_168_SHA
[+] SSL_RSA_AES_128_SHA
[+] SSL_RSA_AES_256_SHA
[+] SSL_RSA_CAMELLIA_128_SHA
[+] SSL_RSA_CAMELLIA_256_SHA
[+] SSL_RSA_DES_168_SHA
[+] SSL_RSA_RC4_128_MD5
[+] SSL_RSA_RC4_128_SHA

to the top

Other Changes in Data Types (8)

cipher.h
[+] enum cipher_id_t (2)
[+] enum cipher_mode_t (2)
[+] enum cipher_type_t (4)

to the top

Other Changes in Constants (85)

asn1.h
[+] POLARSSL_ERR_ASN1_BUF_TOO_SMALL

bignum.h
[+] LN_2_DIV_LN_10_SCALE100
[+] POLARSSL_MPI_MAX_BITS_SCALE100
[+] POLARSSL_MPI_RW_BUFFER_SIZE

blowfish.h
[+] BLOWFISH_BLOCKSIZE
[+] BLOWFISH_DECRYPT
[+] BLOWFISH_ENCRYPT
[+] BLOWFISH_MAX_KEY
[+] BLOWFISH_MIN_KEY
[+] BLOWFISH_ROUNDS
[+] POLARSSL_ERR_BLOWFISH_INVALID_INPUT_LENGTH
[+] POLARSSL_ERR_BLOWFISH_INVALID_KEY_LENGTH

dhm.h
[+] POLARSSL_DHM_RFC3526_MODP_2048_G
[+] POLARSSL_DHM_RFC3526_MODP_2048_P
[+] POLARSSL_DHM_RFC3526_MODP_3072_G
[+] POLARSSL_DHM_RFC3526_MODP_3072_P
[+] POLARSSL_DHM_RFC5114_MODP_1024_G
[+] POLARSSL_DHM_RFC5114_MODP_1024_P
[+] POLARSSL_DHM_RFC5114_MODP_2048_G
[+] POLARSSL_DHM_RFC5114_MODP_2048_P

gcm.h
[+] GCM_DECRYPT
[+] GCM_ENCRYPT
[+] POLARSSL_ERR_GCM_AUTH_FAILED
[+] POLARSSL_ERR_GCM_BAD_INPUT

pbkdf2.h
[+] POLARSSL_ERR_PBKDF2_BAD_INPUT_DATA

pem.h
[+] POLARSSL_ERR_PEM_NO_HEADER_PRESENT

ssl.h
[+] POLARSSL_ERR_SSL_COMPRESSION_FAILED
[+] POLARSSL_ERR_SSL_HW_ACCEL_FAILED
[+] POLARSSL_ERR_SSL_HW_ACCEL_FALLTHROUGH
[+] SSL_ALERT_MSG_UNRECOGNIZED_NAME
[+] SSL_ALERT_MSG_UNSUPPORTED_EXT
[+] SSL_COMPRESS_DEFLATE
[+] SSL_COMPRESSION_ADD
[+] SSL_EMPTY_RENEGOTIATION_INFO
[+] SSL_HASH_MD5
[+] SSL_HASH_NONE
[+] SSL_HASH_SHA1
[+] SSL_HASH_SHA224
[+] SSL_HASH_SHA256
[+] SSL_HASH_SHA384
[+] SSL_HASH_SHA512
[+] SSL_INITIAL_HANDSHAKE
[+] SSL_LEGACY_ALLOW_RENEGOTIATION
[+] SSL_LEGACY_BREAK_HANDSHAKE
[+] SSL_LEGACY_NO_RENEGOTIATION
[+] SSL_LEGACY_RENEGOTIATION
[+] SSL_RENEGOTIATION
[+] SSL_RENEGOTIATION_DISABLED
[+] SSL_RENEGOTIATION_ENABLED
[+] SSL_SECURE_RENEGOTIATION
[+] SSL_SIG_RSA
[+] TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
[+] TLS_DHE_RSA_WITH_AES_128_CBC_SHA
[+] TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
[+] TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
[+] TLS_DHE_RSA_WITH_AES_256_CBC_SHA
[+] TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
[+] TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
[+] TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
[+] TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
[+] TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
[+] TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
[+] TLS_DHE_RSA_WITH_DES_CBC_SHA
[+] TLS_EXT_RENEGOTIATION_INFO
[+] TLS_EXT_SIG_ALG
[+] TLS_RSA_WITH_3DES_EDE_CBC_SHA
[+] TLS_RSA_WITH_AES_128_CBC_SHA
[+] TLS_RSA_WITH_AES_128_CBC_SHA256
[+] TLS_RSA_WITH_AES_128_GCM_SHA256
[+] TLS_RSA_WITH_AES_256_CBC_SHA
[+] TLS_RSA_WITH_AES_256_CBC_SHA256
[+] TLS_RSA_WITH_AES_256_GCM_SHA384
[+] TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
[+] TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
[+] TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
[+] TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
[+] TLS_RSA_WITH_DES_CBC_SHA
[+] TLS_RSA_WITH_NULL_MD5
[+] TLS_RSA_WITH_NULL_SHA
[+] TLS_RSA_WITH_NULL_SHA256
[+] TLS_RSA_WITH_RC4_128_MD5
[+] TLS_RSA_WITH_RC4_128_SHA

ssl_cache.h
[+] SSL_CACHE_DEFAULT_MAX_ENTRIES
[+] SSL_CACHE_DEFAULT_TIMEOUT

x509.h
[+] BADCERT_OTHER

to the top

Header Files (37)

aes.h
arc4.h
asn1.h
base64.h
bignum.h
bn_mul.h
camellia.h
certs.h
cipher.h
cipher_wrap.h
config.h
ctr_drbg.h
debug.h
des.h
dhm.h
entropy.h
entropy_poll.h
error.h
havege.h
md.h
md2.h
md4.h
md5.h
md_wrap.h
net.h
padlock.h
pem.h
pkcs11.h
rsa.h
sha1.h
sha2.h
sha4.h
ssl.h
timing.h
version.h
x509.h
xtea.h

to the top

Shared Libraries (1)

libpolarssl.so.1.1.8

to the top

	Change	Effect
1	The member POLARSSL_CIPHER_ID_BLOWFISH with value 6 has been added.	No effect.
2	The member POLARSSL_CIPHER_ID_NULL with value 1 has been added.	No effect.

	Change	Effect
1	The member POLARSSL_MODE_CFB with value 3 has been added.	No effect.
2	The member POLARSSL_MODE_NULL with value 1 has been added.	No effect.

	Change	Effect
1	The member POLARSSL_CIPHER_BLOWFISH_CBC with value 23 has been added.	No effect.
2	The member POLARSSL_CIPHER_BLOWFISH_CFB64 with value 24 has been added.	No effect.
3	The member POLARSSL_CIPHER_BLOWFISH_CTR with value 25 has been added.	No effect.
4	The member POLARSSL_CIPHER_NULL with value 1 has been added.	No effect.