Binary compatibility report for the PolarSSL library between 1.2.10 and 1.3.0 versions on x86

Test Info

Library Name	PolarSSL
Version #1	1.2.10
Version #2	1.3.0
CPU Type	x86
GCC Version	4.6.1

Test Results

Total Header Files	45
Total Shared Libraries	1
Total Symbols / Types	363 / 211
Verdict	Incompatible (37.9%)

Problem Summary

	Severity	Count
Added Symbols	-	241
Removed Symbols	High	48
Problems with Data Types	High	8
	Medium	79
	Low	44
Problems with Symbols	High	3
	Medium	27
	Low	37
Problems with Constants	Low	45
Other Changes in Data Types	-	17
Other Changes in Constants	-	145

Added Symbols (241)

asn1.h, libpolarssl.so.1.3.0
asn1_find_named_data ( asn1_named_data* list, char const* oid, size_t len )
asn1_free_named_data ( asn1_named_data* entry )
asn1_free_named_data_list ( asn1_named_data** head )
asn1_get_alg ( unsigned char** p, unsigned char const* end, asn1_buf* alg, asn1_buf* params )
asn1_get_alg_null ( unsigned char** p, unsigned char const* end, asn1_buf* alg )
asn1_get_bitstring_null ( unsigned char** p, unsigned char const* end, size_t* len )

asn1write.h, libpolarssl.so.1.3.0
asn1_store_named_data ( asn1_named_data** list, char const* oid, size_t oid_len, unsigned char const* val, size_t val_len )
asn1_write_bitstring ( unsigned char** p, unsigned char* start, unsigned char const* buf, size_t bits )
asn1_write_bool ( unsigned char** p, unsigned char* start, int boolean )
asn1_write_octet_string ( unsigned char** p, unsigned char* start, unsigned char const* buf, size_t size )
asn1_write_raw_buffer ( unsigned char** p, unsigned char* start, unsigned char const* buf, size_t size )

certs.h, libpolarssl.so.1.3.0
test_ca_crt_ec [data]
test_ca_crt_rsa [data]
test_ca_key_ec [data]
test_ca_key_rsa [data]
test_ca_list [data]
test_ca_pwd_ec [data]
test_ca_pwd_rsa [data]
test_cli_crt_ec [data]
test_cli_crt_rsa [data]
test_cli_key_ec [data]
test_cli_key_rsa [data]
test_srv_crt_ec [data]
test_srv_crt_rsa [data]
test_srv_key_ec [data]
test_srv_key_rsa [data]

cipher.h, libpolarssl.so.1.3.0
cipher_check_tag ( struct cipher_context_t* ctx, unsigned char const* tag, size_t tag_len )
cipher_info_from_values ( enum cipher_id_t const cipher_id, int key_length, enum cipher_mode_t const mode )
cipher_set_iv ( struct cipher_context_t* ctx, unsigned char const* iv, size_t iv_len )
cipher_set_padding_mode ( struct cipher_context_t* ctx, enum cipher_padding_t mode )
cipher_update_ad ( struct cipher_context_t* ctx, unsigned char const* ad, size_t ad_len )
cipher_write_tag ( struct cipher_context_t* ctx, unsigned char* tag, size_t tag_len )

cipher_wrap.h, libpolarssl.so.1.3.0
cipher_definitions [data]
supported_ciphers [data]

debug.h, libpolarssl.so.1.3.0
debug_print_ecp ( ssl_context const* ssl, int level, char const* file, int line, char const* text, struct ecp_point const* X )

dhm.h, libpolarssl.so.1.3.0
dhm_parse_dhm ( struct dhm_context* dhm, unsigned char const* dhmin, size_t dhminlen )
dhm_parse_dhmfile ( struct dhm_context* dhm, char const* path )

ecdh.h, libpolarssl.so.1.3.0
ecdh_calc_secret ( struct ecdh_context* ctx, size_t* olen, unsigned char* buf, size_t blen, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecdh_compute_shared ( struct ecp_group* grp, struct mpi* z, struct ecp_point const* Q, struct mpi const* d, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecdh_free ( struct ecdh_context* ctx )
ecdh_gen_public ( struct ecp_group* grp, struct mpi* d, struct ecp_point* Q, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecdh_init ( struct ecdh_context* ctx )
ecdh_make_params ( struct ecdh_context* ctx, size_t* olen, unsigned char* buf, size_t blen, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecdh_make_public ( struct ecdh_context* ctx, size_t* olen, unsigned char* buf, size_t blen, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecdh_read_params ( struct ecdh_context* ctx, unsigned char const** buf, unsigned char const* end )
ecdh_read_public ( struct ecdh_context* ctx, unsigned char const* buf, size_t blen )
ecdh_self_test ( int verbose )

ecdsa.h, libpolarssl.so.1.3.0
ecdsa_free ( struct ecdsa_context* ctx )
ecdsa_from_keypair ( struct ecdsa_context* ctx, struct ecp_keypair const* key )
ecdsa_genkey ( struct ecdsa_context* ctx, enum ecp_group_id gid, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecdsa_init ( struct ecdsa_context* ctx )
ecdsa_read_signature ( struct ecdsa_context* ctx, unsigned char const* hash, size_t hlen, unsigned char const* sig, size_t slen )
ecdsa_self_test ( int verbose )
ecdsa_sign ( struct ecp_group* grp, struct mpi* r, struct mpi* s, struct mpi const* d, unsigned char const* buf, size_t blen, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecdsa_verify ( struct ecp_group* grp, unsigned char const* buf, size_t blen, struct ecp_point const* Q, struct mpi const* r, struct mpi const* s )
ecdsa_write_signature ( struct ecdsa_context* ctx, unsigned char const* hash, size_t hlen, unsigned char* sig, size_t* slen, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )

ecp.h, libpolarssl.so.1.3.0
ecp_add ( struct ecp_group const* grp, struct ecp_point* R, struct ecp_point const* P, struct ecp_point const* Q )
ecp_check_privkey ( struct ecp_group const* grp, struct mpi const* d )
ecp_check_pubkey ( struct ecp_group const* grp, struct ecp_point const* pt )
ecp_copy ( struct ecp_point* P, struct ecp_point const* Q )
ecp_curve_info_from_grp_id ( enum ecp_group_id grp_id )
ecp_curve_info_from_tls_id ( uint16_t tls_id )
ecp_curve_list ( )
ecp_gen_keypair ( struct ecp_group* grp, struct mpi* d, struct ecp_point* Q, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecp_group_copy ( struct ecp_group* dst, struct ecp_group const* src )
ecp_group_free ( struct ecp_group* grp )
ecp_group_init ( struct ecp_group* grp )
ecp_group_read_string ( struct ecp_group* grp, int radix, char const* p, char const* b, char const* gx, char const* gy, char const* n )
ecp_is_zero ( struct ecp_point* pt )
ecp_keypair_free ( struct ecp_keypair* key )
ecp_keypair_init ( struct ecp_keypair* key )
ecp_mul ( struct ecp_group* grp, struct ecp_point* R, struct mpi const* m, struct ecp_point const* P, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
ecp_point_free ( struct ecp_point* pt )
ecp_point_init ( struct ecp_point* pt )
ecp_point_read_binary ( struct ecp_group const* grp, struct ecp_point* P, unsigned char const* buf, size_t ilen )
ecp_point_read_string ( struct ecp_point* P, int radix, char const* x, char const* y )
ecp_point_write_binary ( struct ecp_group const* grp, struct ecp_point const* P, int format, size_t* olen, unsigned char* buf, size_t buflen )
ecp_self_test ( int verbose )
ecp_set_zero ( struct ecp_point* pt )
ecp_sub ( struct ecp_group const* grp, struct ecp_point* R, struct ecp_point const* P, struct ecp_point const* Q )
ecp_tls_read_group ( struct ecp_group* grp, unsigned char const** buf, size_t len )
ecp_tls_read_point ( struct ecp_group const* grp, struct ecp_point* pt, unsigned char const** buf, size_t len )
ecp_tls_write_group ( struct ecp_group const* grp, size_t* olen, unsigned char* buf, size_t blen )
ecp_tls_write_point ( struct ecp_group const* grp, struct ecp_point const* pt, int format, size_t* olen, unsigned char* buf, size_t blen )
ecp_use_known_dp ( struct ecp_group* grp, enum ecp_group_id index )

entropy.h, libpolarssl.so.1.3.0
entropy_free ( struct entropy_context* ctx )

error.h, libpolarssl.so.1.3.0
polarssl_strerror ( int errnum, char* buffer, size_t buflen )

gcm.h, libpolarssl.so.1.3.0
gcm_finish ( struct gcm_context* ctx, unsigned char* tag, size_t tag_len )
gcm_free ( struct gcm_context* ctx )
gcm_starts ( struct gcm_context* ctx, int mode, unsigned char const* iv, size_t iv_len, unsigned char const* add, size_t add_len )
gcm_update ( struct gcm_context* ctx, size_t length, unsigned char const* input, unsigned char* output )

md.h, libpolarssl.so.1.3.0
md_process ( struct md_context_t* ctx, unsigned char const* data )

oid.h, libpolarssl.so.1.3.0
oid_get_attr_short_name ( asn1_buf const* oid, char const** short_name )
oid_get_cipher_alg ( asn1_buf const* oid, enum cipher_type_t* cipher_alg )
oid_get_ec_grp ( asn1_buf const* oid, enum ecp_group_id* grp_id )
oid_get_extended_key_usage ( asn1_buf const* oid, char const** desc )
oid_get_md_alg ( asn1_buf const* oid, enum md_type_t* md_alg )
oid_get_numeric_string ( char* buf, size_t size, asn1_buf const* oid )
oid_get_oid_by_ec_grp ( enum ecp_group_id grp_id, char const** oid, size_t* olen )
oid_get_oid_by_md ( enum md_type_t md_alg, char const** oid, size_t* olen )
oid_get_oid_by_pk_alg ( enum pk_type_t pk_alg, char const** oid, size_t* olen )
oid_get_oid_by_sig_alg ( enum pk_type_t pk_alg, enum md_type_t md_alg, char const** oid, size_t* olen )
oid_get_pk_alg ( asn1_buf const* oid, enum pk_type_t* pk_alg )
oid_get_pkcs12_pbe_alg ( asn1_buf const* oid, enum md_type_t* md_alg, enum cipher_type_t* cipher_alg )
oid_get_sig_alg ( asn1_buf const* oid, enum md_type_t* md_alg, enum pk_type_t* pk_alg )
oid_get_sig_alg_desc ( asn1_buf const* oid, char const** desc )
oid_get_x509_ext_type ( asn1_buf const* oid, int* ext_type )

pbkdf2.h, libpolarssl.so.1.3.0
pbkdf2_hmac ( struct md_context_t* ctx, unsigned char const* password, size_t plen, unsigned char const* salt, size_t slen, unsigned int iteration_count, uint32_t key_length, unsigned char* output )
pbkdf2_self_test ( int verbose )

pem.h, libpolarssl.so.1.3.0
pem_write_buffer ( char const* header, char const* footer, unsigned char const* der_data, size_t der_len, unsigned char* buf, size_t buf_len, size_t* olen )

pk.h, libpolarssl.so.1.3.0
pk_can_do ( struct pk_context* ctx, enum pk_type_t type )
pk_debug ( struct pk_context const* ctx, struct pk_debug_item* items )
pk_decrypt ( struct pk_context* ctx, unsigned char const* input, size_t ilen, unsigned char* output, size_t* olen, size_t osize, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
pk_encrypt ( struct pk_context* ctx, unsigned char const* input, size_t ilen, unsigned char* output, size_t* olen, size_t osize, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
pk_free ( struct pk_context* ctx )
pk_get_name ( struct pk_context const* ctx )
pk_get_size ( struct pk_context const* ctx )
pk_get_type ( struct pk_context const* ctx )
pk_info_from_type ( enum pk_type_t pk_type )
pk_init ( struct pk_context* ctx )
pk_init_ctx ( struct pk_context* ctx, struct pk_info_t const* info )
pk_init_ctx_rsa_alt ( struct pk_context* ctx, void* key, pk_rsa_alt_decrypt_func decrypt_func, pk_rsa_alt_sign_func sign_func, pk_rsa_alt_key_len_func key_len_func )
pk_parse_key ( struct pk_context* ctx, unsigned char const* key, size_t keylen, unsigned char const* pwd, size_t pwdlen )
pk_parse_keyfile ( struct pk_context* ctx, char const* path, char const* password )
pk_parse_public_key ( struct pk_context* ctx, unsigned char const* key, size_t keylen )
pk_parse_public_keyfile ( struct pk_context* ctx, char const* path )
pk_parse_subpubkey ( unsigned char** p, unsigned char const* end, struct pk_context* pk )
pk_sign ( struct pk_context* ctx, enum md_type_t md_alg, unsigned char const* hash, size_t hash_len, unsigned char* sig, size_t* sig_len, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
pk_verify ( struct pk_context* ctx, enum md_type_t md_alg, unsigned char const* hash, size_t hash_len, unsigned char const* sig, size_t sig_len )
pk_write_key_der ( struct pk_context* pk, unsigned char* buf, size_t size )
pk_write_key_pem ( struct pk_context* key, unsigned char* buf, size_t size )
pk_write_pubkey ( unsigned char** p, unsigned char* start, struct pk_context const* key )
pk_write_pubkey_der ( struct pk_context* key, unsigned char* buf, size_t size )
pk_write_pubkey_pem ( struct pk_context* key, unsigned char* buf, size_t size )

pk_wrap.h, libpolarssl.so.1.3.0
ecdsa_info [data]
eckey_info [data]
eckeydh_info [data]
rsa_alt_info [data]
rsa_info [data]

rsa.h, libpolarssl.so.1.3.0
rsa_copy ( struct rsa_context* dst, struct rsa_context const* src )

sha256.h, libpolarssl.so.1.3.0
sha256 ( unsigned char const* input, size_t ilen, unsigned char* output, int is224 )
sha256_file ( char const* path, unsigned char* output, int is224 )
sha256_finish ( struct sha256_context* ctx, unsigned char* output )
sha256_hmac ( unsigned char const* key, size_t keylen, unsigned char const* input, size_t ilen, unsigned char* output, int is224 )
sha256_hmac_finish ( struct sha256_context* ctx, unsigned char* output )
sha256_hmac_reset ( struct sha256_context* ctx )
sha256_hmac_starts ( struct sha256_context* ctx, unsigned char const* key, size_t keylen, int is224 )
sha256_hmac_update ( struct sha256_context* ctx, unsigned char const* input, size_t ilen )
sha256_process ( struct sha256_context* ctx, unsigned char const* data )
sha256_self_test ( int verbose )
sha256_starts ( struct sha256_context* ctx, int is224 )
sha256_update ( struct sha256_context* ctx, unsigned char const* input, size_t ilen )

sha512.h, libpolarssl.so.1.3.0
sha512 ( unsigned char const* input, size_t ilen, unsigned char* output, int is384 )
sha512_file ( char const* path, unsigned char* output, int is384 )
sha512_finish ( struct sha512_context* ctx, unsigned char* output )
sha512_hmac ( unsigned char const* key, size_t keylen, unsigned char const* input, size_t ilen, unsigned char* output, int is384 )
sha512_hmac_finish ( struct sha512_context* ctx, unsigned char* output )
sha512_hmac_reset ( struct sha512_context* ctx )
sha512_hmac_starts ( struct sha512_context* ctx, unsigned char const* key, size_t keylen, int is384 )
sha512_hmac_update ( struct sha512_context* ctx, unsigned char const* input, size_t ilen )
sha512_process ( struct sha512_context* ctx, unsigned char const* data )
sha512_self_test ( int verbose )
sha512_starts ( struct sha512_context* ctx, int is384 )
sha512_update ( struct sha512_context* ctx, unsigned char const* input, size_t ilen )

ssl.h, libpolarssl.so.1.3.0
ssl_get_session ( ssl_context const* ssl, ssl_session* session )
ssl_list_ciphersuites ( )
ssl_md_alg_from_hash ( unsigned char hash )
ssl_pk_alg_from_sig ( unsigned char sig )
ssl_set_max_frag_len ( ssl_context* ssl, unsigned char mfl_code )
ssl_set_own_cert_rsa ( ssl_context* ssl, x509_crt* own_cert, struct rsa_context* rsa_key )
ssl_set_psk ( ssl_context* ssl, unsigned char const* psk, size_t psk_len, unsigned char const* psk_identity, size_t psk_identity_len )
ssl_set_psk_cb ( ssl_context* ssl, int(*f_psk)(void*, ssl_context*, unsigned char const*, size_t), void* p_psk )
ssl_set_session_ticket_lifetime ( ssl_context* ssl, int lifetime )
ssl_set_session_tickets ( ssl_context* ssl, int use_tickets )
ssl_set_truncated_hmac ( ssl_context* ssl, int truncate )
ssl_sig_from_pk ( struct pk_context* pk )

ssl_ciphersuites.h, libpolarssl.so.1.3.0
ssl_ciphersuite_from_id ( int ciphersuite_id )
ssl_ciphersuite_from_string ( char const* ciphersuite_name )
ssl_ciphersuite_uses_ec ( ssl_ciphersuite_t const* info )
ssl_get_ciphersuite_sig_pk_alg ( ssl_ciphersuite_t const* info )

x509.h, libpolarssl.so.1.3.0
x509_dn_gets ( char* buf, size_t size, struct _asn1_named_data const* dn )
x509_get_alg_null ( unsigned char** p, unsigned char const* end, x509_buf* alg )
x509_get_ext ( unsigned char** p, unsigned char const* end, x509_buf* ext, int tag )
x509_get_name ( unsigned char** p, unsigned char const* end, struct _asn1_named_data* cur )
x509_get_serial ( unsigned char** p, unsigned char const* end, x509_buf* serial )
x509_get_sig ( unsigned char** p, unsigned char const* end, x509_buf* sig )
x509_get_sig_alg ( x509_buf const* sig_oid, enum md_type_t* md_alg, enum pk_type_t* pk_alg )
x509_get_time ( unsigned char** p, unsigned char const* end, x509_time* time )
x509_key_size_helper ( char* buf, size_t size, char const* name )
x509_load_file ( char const* path, unsigned char** buf, size_t* n )
x509_serial_gets ( char* buf, size_t size, x509_buf const* serial )
x509_set_extension ( asn1_named_data** head, char const* oid, size_t oid_len, int critical, unsigned char const* val, size_t val_len )
x509_string_to_names ( asn1_named_data** head, char* name )
x509_time_expired ( x509_time const* time )
x509_write_extensions ( unsigned char** p, unsigned char* start, asn1_named_data* first )
x509_write_names ( unsigned char** p, unsigned char* start, asn1_named_data* first )

x509_crl.h, libpolarssl.so.1.3.0
x509_crl_info ( char* buf, size_t size, char const* prefix, x509_crl const* crl )
x509_crl_init ( x509_crl* crl )
x509_crl_parse ( x509_crl* chain, unsigned char const* buf, size_t buflen )
x509_crl_parse_file ( x509_crl* chain, char const* path )

x509_crt.h, libpolarssl.so.1.3.0
x509_crt_free ( x509_crt* crt )
x509_crt_info ( char* buf, size_t size, char const* prefix, x509_crt const* crt )
x509_crt_init ( x509_crt* crt )
x509_crt_parse ( x509_crt* chain, unsigned char const* buf, size_t buflen )
x509_crt_parse_der ( x509_crt* chain, unsigned char const* buf, size_t buflen )
x509_crt_parse_file ( x509_crt* chain, char const* path )
x509_crt_parse_path ( x509_crt* chain, char const* path )
x509_crt_revoked ( x509_crt const* crt, x509_crl const* crl )
x509_crt_verify ( x509_crt* crt, x509_crt* trust_ca, x509_crl* ca_crl, char const* cn, int* flags, int(*f_vrfy)(void*, x509_crt*, int, int*), void* p_vrfy )
x509write_crt_der ( x509write_cert* ctx, unsigned char* buf, size_t size, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
x509write_crt_free ( x509write_cert* ctx )
x509write_crt_init ( x509write_cert* ctx )
x509write_crt_pem ( x509write_cert* ctx, unsigned char* buf, size_t size, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
x509write_crt_set_authority_key_identifier ( x509write_cert* ctx )
x509write_crt_set_basic_constraints ( x509write_cert* ctx, int is_ca, int max_pathlen )
x509write_crt_set_extension ( x509write_cert* ctx, char const* oid, size_t oid_len, int critical, unsigned char const* val, size_t val_len )
x509write_crt_set_issuer_key ( x509write_cert* ctx, struct pk_context* key )
x509write_crt_set_issuer_name ( x509write_cert* ctx, char* issuer_name )
x509write_crt_set_key_usage ( x509write_cert* ctx, unsigned char key_usage )
x509write_crt_set_md_alg ( x509write_cert* ctx, enum md_type_t md_alg )
x509write_crt_set_ns_cert_type ( x509write_cert* ctx, unsigned char ns_cert_type )
x509write_crt_set_serial ( x509write_cert* ctx, struct mpi const* serial )
x509write_crt_set_subject_key ( x509write_cert* ctx, struct pk_context* key )
x509write_crt_set_subject_key_identifier ( x509write_cert* ctx )
x509write_crt_set_subject_name ( x509write_cert* ctx, char* subject_name )
x509write_crt_set_validity ( x509write_cert* ctx, char* not_before, char* not_after )

x509_csr.h, libpolarssl.so.1.3.0
x509_csr_free ( x509_csr* csr )
x509_csr_info ( char* buf, size_t size, char const* prefix, x509_csr const* csr )
x509_csr_init ( x509_csr* csr )
x509_csr_parse ( x509_csr* csr, unsigned char const* buf, size_t buflen )
x509_csr_parse_file ( x509_csr* csr, char const* path )
x509write_csr_der ( x509write_csr* ctx, unsigned char* buf, size_t size, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
x509write_csr_free ( x509write_csr* ctx )
x509write_csr_init ( x509write_csr* ctx )
x509write_csr_pem ( x509write_csr* ctx, unsigned char* buf, size_t size, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )
x509write_csr_set_extension ( x509write_csr* ctx, char const* oid, size_t oid_len, unsigned char const* val, size_t val_len )
x509write_csr_set_key ( x509write_csr* ctx, struct pk_context* key )
x509write_csr_set_key_usage ( x509write_csr* ctx, unsigned char key_usage )
x509write_csr_set_md_alg ( x509write_csr* ctx, enum md_type_t md_alg )
x509write_csr_set_ns_cert_type ( x509write_csr* ctx, unsigned char ns_cert_type )
x509write_csr_set_subject_name ( x509write_csr* ctx, char* subject_name )

to the top

Removed Symbols (48)

sha2.h, libpolarssl.so.1.2.10
sha2 ( unsigned char const* input, size_t ilen, unsigned char* output, int is224 )
sha2_file ( char const* path, unsigned char* output, int is224 )
sha2_finish ( struct sha2_context* ctx, unsigned char* output )
sha2_hmac ( unsigned char const* key, size_t keylen, unsigned char const* input, size_t ilen, unsigned char* output, int is224 )
sha2_hmac_finish ( struct sha2_context* ctx, unsigned char* output )
sha2_hmac_reset ( struct sha2_context* ctx )
sha2_hmac_starts ( struct sha2_context* ctx, unsigned char const* key, size_t keylen, int is224 )
sha2_hmac_update ( struct sha2_context* ctx, unsigned char const* input, size_t ilen )
sha2_process ( struct sha2_context* ctx, unsigned char const* data )
sha2_self_test ( int verbose )
sha2_starts ( struct sha2_context* ctx, int is224 )
sha2_update ( struct sha2_context* ctx, unsigned char const* input, size_t ilen )

sha4.h, libpolarssl.so.1.2.10
sha4 ( unsigned char const* input, size_t ilen, unsigned char* output, int is384 )
sha4_file ( char const* path, unsigned char* output, int is384 )
sha4_finish ( struct sha4_context* ctx, unsigned char* output )
sha4_hmac ( unsigned char const* key, size_t keylen, unsigned char const* input, size_t ilen, unsigned char* output, int is384 )
sha4_hmac_finish ( struct sha4_context* ctx, unsigned char* output )
sha4_hmac_reset ( struct sha4_context* ctx )
sha4_hmac_starts ( struct sha4_context* ctx, unsigned char const* key, size_t keylen, int is384 )
sha4_hmac_update ( struct sha4_context* ctx, unsigned char const* input, size_t ilen )
sha4_self_test ( int verbose )
sha4_starts ( struct sha4_context* ctx, int is384 )
sha4_update ( struct sha4_context* ctx, unsigned char const* input, size_t ilen )

ssl.h, libpolarssl.so.1.2.10
ssl_default_ciphersuites [data]
ssl_get_ciphersuite_min_version ( int const ciphersuite_id )

x509.h, libpolarssl.so.1.2.10
x509_free ( struct _x509_cert* crt )
x509parse_cert_info ( char* buf, size_t size, char const* prefix, struct _x509_cert const* crt )
x509parse_crl ( x509_crl* chain, unsigned char const* buf, size_t buflen )
x509parse_crl_info ( char* buf, size_t size, char const* prefix, x509_crl const* crl )
x509parse_crlfile ( x509_crl* chain, char const* path )
x509parse_crt ( struct _x509_cert* chain, unsigned char const* buf, size_t buflen )
x509parse_crt_der ( struct _x509_cert* chain, unsigned char const* buf, size_t buflen )
x509parse_crtfile ( struct _x509_cert* chain, char const* path )
x509parse_crtpath ( struct _x509_cert* chain, char const* path )
x509parse_dhm ( struct dhm_context* dhm, unsigned char const* dhmin, size_t dhminlen )
x509parse_dhmfile ( struct dhm_context* dhm, char const* path )
x509parse_dn_gets ( char* buf, size_t size, struct _x509_name const* dn )
x509parse_key ( struct rsa_context* rsa, unsigned char const* key, size_t keylen, unsigned char const* pwd, size_t pwdlen )
x509parse_keyfile ( struct rsa_context* rsa, char const* path, char const* password )
x509parse_public_key ( struct rsa_context* rsa, unsigned char const* key, size_t keylen )
x509parse_public_keyfile ( struct rsa_context* rsa, char const* path )
x509parse_revoked ( struct _x509_cert const* crt, x509_crl const* crl )
x509parse_serial_gets ( char* buf, size_t size, x509_buf const* serial )
x509parse_time_expired ( x509_time const* time )
x509parse_verify ( struct _x509_cert* crt, struct _x509_cert* trust_ca, x509_crl* ca_crl, char const* cn, int* flags, int(*f_vrfy)(void*, struct _x509_cert*, int, int*), void* p_vrfy )

x509write.h, libpolarssl.so.1.2.10
x509_write_cert_req ( unsigned char* buf, size_t size, struct rsa_context* rsa, x509_req_name* req_name, int hash_id )
x509_write_key_der ( unsigned char* buf, size_t size, struct rsa_context* rsa )
x509_write_pubkey_der ( unsigned char* buf, size_t size, struct rsa_context* rsa )

to the top

Problems with Data Types, High Severity (8)

	Change	Effect
1	Field aes_ctx has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field ciphersuites has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field own_cert has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field rsa_decrypt has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field rsa_key_len has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field rsa_sign has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field fin_sha2 has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field fin_sha4 has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

gcm.h
[+] struct gcm_context (1)

ssl.h
[+] struct _ssl_context (5)
[+] struct _ssl_handshake_params (2)

to the top

Problems with Symbols, High Severity (3)

	Change	Effect
1	Parameter oid of type char const* has been added to the calling stack at the middle position.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.

	Change	Effect
1	Parameter cipher of type enum cipher_id_t has been added to the calling stack at the middle position.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.

	Change	Effect
1	The pointer level of 2nd parameter ciphersuite has been increased from 0 to 1.	The library function may try to access unallocated memory by the dereferencing of old parameter value and therefore cause a crash of applications.

asn1write.h, libpolarssl.so.1.2.10
[+] asn1_write_algorithm_identifier ( unsigned char** p, unsigned char* start, char* algorithm_oid ) (1)

gcm.h, libpolarssl.so.1.2.10
[+] gcm_init ( struct gcm_context* ctx, unsigned char const* key, unsigned int keysize ) (1)

ssl.h, libpolarssl.so.1.2.10
[+] ssl_optimize_checksum ( ssl_context* ssl, int ciphersuite ) (1)

to the top

Problems with Data Types, Medium Severity (79)

	Change	Effect
1	Value of member POLARSSL_CIPHER_AES_128_CBC has been changed from 2 to 5.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
2	Value of member POLARSSL_CIPHER_AES_128_CFB128 has been changed from 5 to 8.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
3	Value of member POLARSSL_CIPHER_AES_128_CTR has been changed from 8 to 11.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
4	Value of member POLARSSL_CIPHER_AES_192_CBC has been changed from 3 to 6.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
5	Value of member POLARSSL_CIPHER_AES_192_CFB128 has been changed from 6 to 9.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
6	Value of member POLARSSL_CIPHER_AES_192_CTR has been changed from 9 to 12.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
7	Value of member POLARSSL_CIPHER_AES_256_CBC has been changed from 4 to 7.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
8	Value of member POLARSSL_CIPHER_AES_256_CFB128 has been changed from 7 to 10.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
9	Value of member POLARSSL_CIPHER_AES_256_CTR has been changed from 10 to 13.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
10	Value of member POLARSSL_CIPHER_BLOWFISH_CBC has been changed from 23 to 36.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
11	Value of member POLARSSL_CIPHER_BLOWFISH_CFB64 has been changed from 24 to 37.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
12	Value of member POLARSSL_CIPHER_BLOWFISH_CTR has been changed from 25 to 38.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
13	Value of member POLARSSL_CIPHER_CAMELLIA_128_CBC has been changed from 11 to 20.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
14	Value of member POLARSSL_CIPHER_CAMELLIA_128_CFB128 has been changed from 14 to 23.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
15	Value of member POLARSSL_CIPHER_CAMELLIA_128_CTR has been changed from 17 to 26.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
16	Value of member POLARSSL_CIPHER_CAMELLIA_192_CBC has been changed from 12 to 21.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
17	Value of member POLARSSL_CIPHER_CAMELLIA_192_CFB128 has been changed from 15 to 24.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
18	Value of member POLARSSL_CIPHER_CAMELLIA_192_CTR has been changed from 18 to 27.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
19	Value of member POLARSSL_CIPHER_CAMELLIA_256_CBC has been changed from 13 to 22.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
20	Value of member POLARSSL_CIPHER_CAMELLIA_256_CFB128 has been changed from 16 to 25.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
21	Value of member POLARSSL_CIPHER_CAMELLIA_256_CTR has been changed from 19 to 28.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
22	Value of member POLARSSL_CIPHER_DES_CBC has been changed from 20 to 30.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
23	Value of member POLARSSL_CIPHER_DES_EDE3_CBC has been changed from 22 to 34.	Applications may execute a wrong branch of code in the library and therefore change the behavior.
24	Value of member POLARSSL_CIPHER_DES_EDE_CBC has been changed from 21 to 32.	Applications may execute a wrong branch of code in the library and therefore change the behavior.

	Change	Effect
1	Field ecb_func has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field stream_func has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field iv_size has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field add_padding has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field get_padding has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field accepts_variable_iv_size has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field Vf has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field Vi has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field cipher_ctx has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field Vf has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field Vi has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field ciphersuite_list has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field f_psk has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field in_iv has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field key_cert has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field mfl_code has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
6	Field p_psk has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
7	Field psk has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
8	Field psk_identity has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
9	Field psk_identity_len has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
10	Field psk_len has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
11	Field record_read has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
12	Field session_tickets has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
13	Field ticket_keys has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
14	Field ticket_lifetime has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
15	Field trunc_hmac has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
16	The relative position of field f_get_cache has been changed from 13 to 12.	Applications will access incorrect memory when attempting to access this field.
17	The relative position of field f_set_cache has been changed from 14 to 13.	Applications will access incorrect memory when attempting to access this field.
18	The relative position of field f_sni has been changed from 15 to 21.	Applications will access incorrect memory when attempting to access this field.
19	The relative position of field f_vrfy has been changed from 12 to 23.	Applications will access incorrect memory when attempting to access this field.
20	The relative position of field out_left has been changed from 48 to 49.	Applications will access incorrect memory when attempting to access this field.
21	The relative position of field out_msg has been changed from 45 to 46.	Applications will access incorrect memory when attempting to access this field.
22	The relative position of field out_msglen has been changed from 47 to 48.	Applications will access incorrect memory when attempting to access this field.
23	The relative position of field out_msgtype has been changed from 46 to 47.	Applications will access incorrect memory when attempting to access this field.
24	The relative position of field p_dbg has been changed from 17 to 15.	Applications will access incorrect memory when attempting to access this field.
25	The relative position of field p_get_cache has been changed from 21 to 18.	Applications will access incorrect memory when attempting to access this field.
26	The relative position of field p_hw_data has been changed from 24 to 20.	Applications will access incorrect memory when attempting to access this field.
27	The relative position of field p_recv has been changed from 18 to 16.	Applications will access incorrect memory when attempting to access this field.
28	The relative position of field p_rng has been changed from 16 to 14.	Applications will access incorrect memory when attempting to access this field.
29	The relative position of field p_send has been changed from 19 to 17.	Applications will access incorrect memory when attempting to access this field.
30	The relative position of field p_set_cache has been changed from 22 to 19.	Applications will access incorrect memory when attempting to access this field.
31	The relative position of field p_sni has been changed from 23 to 22.	Applications will access incorrect memory when attempting to access this field.
32	The relative position of field p_vrfy has been changed from 20 to 24.	Applications will access incorrect memory when attempting to access this field.

	Change	Effect
1	Field curves has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field ecdh_ctx has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field fin_sha256 has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field fin_sha512 has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field key_cert has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
6	Field sni_key_cert has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
7	Size of field dhm_ctx has been changed from 88 bytes to 124 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.

	Change	Effect
1	Field ciphersuite_info has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field ctx_dec has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
3	Field ctx_enc has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Size of field session has been changed from 100 bytes to 124 bytes.	1) Size of the inclusive type has been changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.

	Change	Effect
1	Field sig_pk has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

cipher.h
[+] enum cipher_type_t (24)
[+] struct cipher_base_t (2)
[+] struct cipher_context_t (3)
[+] struct cipher_info_t (1)

dhm.h
[+] struct dhm_context (2)

gcm.h
[+] struct gcm_context (1)

rsa.h
[+] struct rsa_context (2)

ssl.h
[+] struct _ssl_context (32)
[+] struct _ssl_handshake_params (7)
[+] struct _ssl_transform (3)

ssl_cache.h
[+] struct _ssl_cache_entry (1)

x509.h
[+] struct _x509_crl (1)

to the top

Problems with Symbols, Medium Severity (27)

	Change	Effect
1	Parameter oid_len of type size_t has been added to the calling stack.	This parameter will not be initialized by old clients.
2	Parameter par_len of type size_t has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter text_len of type size_t has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter oid_len of type size_t has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Parameter text_len of type size_t has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Size of this global data has been changed from 1307 bytes to 4 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 1782 bytes to 4 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 13 bytes to 4 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 1209 bytes to 4 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 1707 bytes to 4 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 1209 bytes to 4 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 1703 bytes to 4 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	2nd parameter iv has been removed from the calling stack.	This parameter will be ignored by the function.

	Change	Effect
1	Base type of 6th parameter crt has been changed from struct _x509_cert (460 bytes) to struct _x509_crt (312 bytes).	This parameter may be incorrectly initialized by applications.

	Change	Effect
1	Parameter f_rng of type int()(void,unsigned char*,size_t) has been added to the calling stack.	This parameter will not be initialized by old clients.
2	Parameter p_rng of type void* has been added to the calling stack.	This parameter will not be initialized by old clients.

	Change	Effect
1	Size of this global data has been changed from 60 bytes to 64 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 60 bytes to 64 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 60 bytes to 64 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 60 bytes to 64 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 60 bytes to 64 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Size of this global data has been changed from 60 bytes to 64 bytes.	Applications will obtain a different value and execution may change.

	Change	Effect
1	Base type of return value has been changed from struct _x509_cert (460 bytes) to struct _x509_crt (312 bytes).	Applications will obtain a different return value and execution may change.

	Change	Effect
1	Base type of 2nd parameter ca_chain has been changed from struct _x509_cert (460 bytes) to struct _x509_crt (312 bytes).	This parameter may be incorrectly initialized by applications.

	Change	Effect
1	Base type of 2nd parameter own_cert has been changed from struct _x509_cert (460 bytes) to struct _x509_crt (312 bytes).	This parameter may be incorrectly initialized by applications.
2	Base type of 3rd parameter rsa_key has been changed from struct rsa_context (148 bytes) to struct pk_context (8 bytes).	This parameter may be incorrectly initialized by applications.

	Change	Effect
1	Base type of 2nd parameter own_cert has been changed from struct _x509_cert (460 bytes) to struct _x509_crt (312 bytes).	This parameter may be incorrectly initialized by applications.

asn1write.h, libpolarssl.so.1.2.10
[+] asn1_write_algorithm_identifier ( unsigned char** p, unsigned char* start, char* algorithm_oid ) (2)
[+] asn1_write_ia5_string ( unsigned char** p, unsigned char* start, char* text ) (1)
[+] asn1_write_oid ( unsigned char** p, unsigned char* start, char* oid ) (1)
[+] asn1_write_printable_string ( unsigned char** p, unsigned char* start, char* text ) (1)

certs.h, libpolarssl.so.1.2.10
[+] test_ca_crt [data] (1)
[+] test_ca_key [data] (1)
[+] test_ca_pwd [data] (1)
[+] test_cli_crt [data] (1)
[+] test_cli_key [data] (1)
[+] test_srv_crt [data] (1)
[+] test_srv_key [data] (1)

cipher.h, libpolarssl.so.1.2.10
[+] cipher_reset ( struct cipher_context_t* ctx, unsigned char const* iv ) (1)

debug.h, libpolarssl.so.1.2.10
[+] debug_print_crt ( ssl_context const* ssl, int level, char const* file, int line, char const* text, struct _x509_cert const* crt ) (1)

dhm.h, libpolarssl.so.1.2.10
[+] dhm_calc_secret ( struct dhm_context* ctx, unsigned char* output, size_t* olen ) (2)

md_wrap.h, libpolarssl.so.1.2.10
[+] md5_info [data] (1)
[+] sha1_info [data] (1)
[+] sha224_info [data] (1)
[+] sha256_info [data] (1)
[+] sha384_info [data] (1)
[+] sha512_info [data] (1)

ssl.h, libpolarssl.so.1.2.10
[+] ssl_get_peer_cert ( ssl_context const* ssl ) (1)
[+] ssl_set_ca_chain ( ssl_context* ssl, struct _x509_cert* ca_chain, x509_crl* ca_crl, char const* peer_cn ) (1)
[+] ssl_set_own_cert ( ssl_context* ssl, struct _x509_cert* own_cert, struct rsa_context* rsa_key ) (2)
[+] ssl_set_own_cert_alt ( ssl_context* ssl, struct _x509_cert* own_cert, void* rsa_key, int(*rsa_decrypt)(void*, int(*)(void*, unsigned char*, size_t), void*, int, size_t*, unsigned char const*, unsigned char*, size_t), rsa_sign_func rsa_sign, rsa_key_len_func rsa_key_len ) (1)

to the top

Problems with Data Types, Low Severity (44)

	Change	Effect
1	Name of member with value 1 has been changed from POLARSSL_MODE_NULL to POLARSSL_MODE_ECB.	Applications may execute a wrong branch of code in the library and therefore change the behavior.

	Change	Effect
1	Size of this type has been changed from 32 bytes to 40 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 52 bytes to 64 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 28 bytes to 32 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 88 bytes to 124 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

cipher.h
[+] enum cipher_mode_t (1)
[+] struct cipher_base_t (1)
[+] struct cipher_context_t (1)
[+] struct cipher_info_t (1)

dhm.h
[+] struct dhm_context (1)

entropy.h
[+] struct entropy_context (1)

gcm.h
[+] struct gcm_context (7)

md.h
[+] struct md_info_t (2)

rsa.h
[+] struct rsa_context (1)

ssl.h
[+] struct _ssl_context (4)
[+] struct _ssl_handshake_params (6)
[+] struct _ssl_session (8)
[+] struct _ssl_transform (5)
[+] typedef rsa_decrypt_func (1)

ssl_cache.h
[+] struct _ssl_cache_entry (1)

x509.h
[+] struct _x509_crl (2)
[+] typedef x509_name (1)

to the top

Problems with Symbols, Low Severity (37)

asn1write.h, libpolarssl.so.1.2.10
[+] asn1_write_ia5_string ( unsigned char** p, unsigned char* start, char* text ) (1)
[+] asn1_write_oid ( unsigned char** p, unsigned char* start, char* oid ) (1)
[+] asn1_write_printable_string ( unsigned char** p, unsigned char* start, char* text ) (1)

certs.h, libpolarssl.so.1.2.10
[+] test_ca_crt [data] (1)
[+] test_ca_key [data] (1)
[+] test_ca_pwd [data] (1)
[+] test_cli_crt [data] (1)
[+] test_cli_key [data] (1)
[+] test_srv_crt [data] (1)
[+] test_srv_key [data] (1)

pem.h, libpolarssl.so.1.2.10
[+] pem_read_buffer ( struct pem_context* ctx, char* header, char* footer, unsigned char const* data, unsigned char const* pwd, size_t pwdlen, size_t* use_len ) (2)

rsa.h, libpolarssl.so.1.2.10
[+] rsa_pkcs1_sign ( struct rsa_context* ctx, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng, int mode, int hash_id, unsigned int hashlen, unsigned char const* hash, unsigned char* sig ) (2)
[+] rsa_pkcs1_verify ( struct rsa_context* ctx, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng, int mode, int hash_id, unsigned int hashlen, unsigned char const* hash, unsigned char* sig ) (3)
[+] rsa_rsassa_pkcs1_v15_sign ( struct rsa_context* ctx, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng, int mode, int hash_id, unsigned int hashlen, unsigned char const* hash, unsigned char* sig ) (2)
[+] rsa_rsassa_pkcs1_v15_verify ( struct rsa_context* ctx, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng, int mode, int hash_id, unsigned int hashlen, unsigned char const* hash, unsigned char* sig ) (3)
[+] rsa_rsassa_pss_sign ( struct rsa_context* ctx, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng, int mode, int hash_id, unsigned int hashlen, unsigned char const* hash, unsigned char* sig ) (2)
[+] rsa_rsassa_pss_verify ( struct rsa_context* ctx, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng, int mode, int hash_id, unsigned int hashlen, unsigned char const* hash, unsigned char* sig ) (3)

ssl.h, libpolarssl.so.1.2.10
[+] ssl_optimize_checksum ( ssl_context* ssl, int ciphersuite ) (2)
[+] ssl_set_own_cert ( ssl_context* ssl, struct _x509_cert* own_cert, struct rsa_context* rsa_key ) (2)
[+] ssl_set_own_cert_alt ( ssl_context* ssl, struct _x509_cert* own_cert, void* rsa_key, int(*rsa_decrypt)(void*, int(*)(void*, unsigned char*, size_t), void*, int, size_t*, unsigned char const*, unsigned char*, size_t), rsa_sign_func rsa_sign, rsa_key_len_func rsa_key_len ) (1)
[+] ssl_set_session ( ssl_context* ssl, ssl_session const* session ) (1)
[+] ssl_set_verify ( ssl_context* ssl, int(*f_vrfy)(void*, struct _x509_cert*, int, int*), void* p_vrfy ) (1)

xtea.h, libpolarssl.so.1.2.10
[+] xtea_crypt_cbc ( struct xtea_context* ctx, int mode, size_t length, unsigned char* iv, unsigned char* input, unsigned char* output ) (1)
[+] xtea_crypt_ecb ( struct xtea_context* ctx, int mode, unsigned char* input, unsigned char* output ) (1)
[+] xtea_setup ( struct xtea_context* ctx, unsigned char* key ) (1)

to the top

Problems with Constants, Low Severity (45)

rsa.h
[+] SIG_RSA_MD2
[+] SIG_RSA_MD4
[+] SIG_RSA_MD5
[+] SIG_RSA_SHA1
[+] SIG_RSA_SHA224
[+] SIG_RSA_SHA256
[+] SIG_RSA_SHA384
[+] SIG_RSA_SHA512

sha2.h
[+] POLARSSL_ERR_SHA2_FILE_IO_ERROR

sha4.h
[+] POLARSSL_ERR_SHA4_FILE_IO_ERROR

ssl.h
[+] POLARSSL_ERR_SSL_BAD_HS_CLIENT_KEY_EXCHANGE_DHM_CS
[+] POLARSSL_ERR_SSL_BAD_HS_CLIENT_KEY_EXCHANGE_DHM_RP

x509.h
[+] PEM_LINE_LENGTH
[+] PKCS9_EMAIL
[+] POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS
[+] POLARSSL_ERR_X509_CERT_INVALID_PEM
[+] POLARSSL_ERR_X509_CERT_INVALID_PUBKEY
[+] POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE
[+] POLARSSL_ERR_X509_CERT_SIG_MISMATCH
[+] POLARSSL_ERR_X509_CERT_UNKNOWN_FORMAT
[+] POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG
[+] POLARSSL_ERR_X509_CERT_VERIFY_FAILED
[+] POLARSSL_ERR_X509_FILE_IO_ERROR
[+] POLARSSL_ERR_X509_INVALID_INPUT
[+] POLARSSL_ERR_X509_KEY_INVALID_FORMAT
[+] POLARSSL_ERR_X509_MALLOC_FAILED
[+] POLARSSL_ERR_X509_PASSWORD_MISMATCH
[+] POLARSSL_ERR_X509_PASSWORD_REQUIRED
[+] POLARSSL_ERR_X509_UNKNOWN_PK_ALG
[+] STRING_CLIENT_AUTH
[+] STRING_CODE_SIGNING
[+] STRING_EMAIL_PROTECTION
[+] STRING_OCSP_SIGNING
[+] STRING_SERVER_AUTH
[+] STRING_TIME_STAMPING
[+] X509_ISSUER
[+] X509_OUTPUT_DER
[+] X509_OUTPUT_PEM
[+] X509_SUBJECT
[+] X520_COMMON_NAME
[+] X520_COUNTRY
[+] X520_LOCALITY
[+] X520_ORG_UNIT
[+] X520_ORGANIZATION
[+] X520_STATE

to the top

Other Changes in Data Types (17)

cipher.h
[+] enum cipher_id_t (1)
[+] enum cipher_mode_t (2)
[+] enum cipher_type_t (14)

to the top

Other Changes in Constants (145)

cipher.h
[+] POLARSSL_ERR_CIPHER_AUTH_FAILED

dhm.h
[+] POLARSSL_ERR_DHM_FILE_IO_ERROR
[+] POLARSSL_ERR_DHM_INVALID_FORMAT
[+] POLARSSL_ERR_DHM_MALLOC_FAILED

ecp.h
[+] POLARSSL_ECP_DP_MAX
[+] POLARSSL_ECP_MAX_BITS
[+] POLARSSL_ECP_MAX_BYTES
[+] POLARSSL_ECP_MAX_PT_LEN
[+] POLARSSL_ECP_PF_COMPRESSED
[+] POLARSSL_ECP_PF_UNCOMPRESSED
[+] POLARSSL_ECP_TLS_NAMED_CURVE
[+] POLARSSL_ECP_WINDOW_SIZE
[+] POLARSSL_ERR_ECP_BAD_INPUT_DATA
[+] POLARSSL_ERR_ECP_BUFFER_TOO_SMALL
[+] POLARSSL_ERR_ECP_FEATURE_UNAVAILABLE
[+] POLARSSL_ERR_ECP_INVALID_KEY
[+] POLARSSL_ERR_ECP_MALLOC_FAILED
[+] POLARSSL_ERR_ECP_RANDOM_FAILED
[+] POLARSSL_ERR_ECP_VERIFY_FAILED

memory.h
[+] MEMORY_VERIFY_ALLOC
[+] MEMORY_VERIFY_FREE
[+] MEMORY_VERIFY_NONE
[+] POLARSSL_MEMORY_ALIGN_MULTIPLE

oid.h
[+] POLARSSL_ERR_OID_NOT_FOUND

pk.h
[+] POLARSSL_ERR_PK_BAD_INPUT_DATA
[+] POLARSSL_ERR_PK_FEATURE_UNAVAILABLE
[+] POLARSSL_ERR_PK_FILE_IO_ERROR
[+] POLARSSL_ERR_PK_INVALID_ALG
[+] POLARSSL_ERR_PK_INVALID_PUBKEY
[+] POLARSSL_ERR_PK_KEY_INVALID_FORMAT
[+] POLARSSL_ERR_PK_MALLOC_FAILED
[+] POLARSSL_ERR_PK_PASSWORD_MISMATCH
[+] POLARSSL_ERR_PK_PASSWORD_REQUIRED
[+] POLARSSL_ERR_PK_TYPE_MISMATCH
[+] POLARSSL_ERR_PK_UNKNOWN_NAMED_CURVE
[+] POLARSSL_ERR_PK_UNKNOWN_PK_ALG
[+] POLARSSL_PK_DEBUG_MAX_ITEMS

sha256.h
[+] POLARSSL_ERR_SHA256_FILE_IO_ERROR

sha512.h
[+] POLARSSL_ERR_SHA512_FILE_IO_ERROR

ssl.h
[+] POLARSSL_ERR_SSL_BAD_HS_CLIENT_KEY_EXCHANGE_CS
[+] POLARSSL_ERR_SSL_BAD_HS_CLIENT_KEY_EXCHANGE_RP
[+] POLARSSL_ERR_SSL_BAD_HS_NEW_SESSION_TICKET
[+] POLARSSL_ERR_SSL_PK_TYPE_MISMATCH
[+] POLARSSL_ERR_SSL_SESSION_TICKET_EXPIRED
[+] POLARSSL_ERR_SSL_UNKNOWN_IDENTITY
[+] POLARSSL_PREMASTER_SIZE
[+] SSL_ALERT_MSG_UNKNOWN_PSK_IDENTITY
[+] SSL_CERT_TYPE_ECDSA_SIGN
[+] SSL_DEFAULT_TICKET_LIFETIME
[+] SSL_HS_NEW_SESSION_TICKET
[+] SSL_MAX_FRAG_LEN_1024
[+] SSL_MAX_FRAG_LEN_2048
[+] SSL_MAX_FRAG_LEN_4096
[+] SSL_MAX_FRAG_LEN_512
[+] SSL_MAX_FRAG_LEN_INVALID
[+] SSL_MAX_FRAG_LEN_NONE
[+] SSL_SESSION_TICKETS_DISABLED
[+] SSL_SESSION_TICKETS_ENABLED
[+] SSL_SIG_ANON
[+] SSL_SIG_ECDSA
[+] SSL_TRUNC_HMAC_DISABLED
[+] SSL_TRUNC_HMAC_ENABLED
[+] SSL_TRUNCATED_HMAC_LEN
[+] TLS_EXT_MAX_FRAGMENT_LENGTH
[+] TLS_EXT_SESSION_TICKET
[+] TLS_EXT_SUPPORTED_ELLIPTIC_CURVES
[+] TLS_EXT_SUPPORTED_POINT_FORMATS
[+] TLS_EXT_TRUNCATED_HMAC

ssl_ciphersuites.h
[+] POLARSSL_CIPHERSUITE_WEAK
[+] TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
[+] TLS_DHE_PSK_WITH_AES_128_CBC_SHA
[+] TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
[+] TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
[+] TLS_DHE_PSK_WITH_AES_256_CBC_SHA
[+] TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
[+] TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
[+] TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
[+] TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
[+] TLS_DHE_PSK_WITH_NULL_SHA
[+] TLS_DHE_PSK_WITH_NULL_SHA256
[+] TLS_DHE_PSK_WITH_NULL_SHA384
[+] TLS_DHE_PSK_WITH_RC4_128_SHA
[+] TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
[+] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
[+] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
[+] TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
[+] TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
[+] TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
[+] TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
[+] TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
[+] TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
[+] TLS_ECDHE_ECDSA_WITH_NULL_SHA
[+] TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
[+] TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
[+] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
[+] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
[+] TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
[+] TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
[+] TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
[+] TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[+] TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
[+] TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
[+] TLS_ECDHE_RSA_WITH_NULL_SHA
[+] TLS_ECDHE_RSA_WITH_RC4_128_SHA
[+] TLS_PSK_WITH_3DES_EDE_CBC_SHA
[+] TLS_PSK_WITH_AES_128_CBC_SHA
[+] TLS_PSK_WITH_AES_128_CBC_SHA256
[+] TLS_PSK_WITH_AES_128_GCM_SHA256
[+] TLS_PSK_WITH_AES_256_CBC_SHA
[+] TLS_PSK_WITH_AES_256_CBC_SHA384
[+] TLS_PSK_WITH_AES_256_GCM_SHA384
[+] TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
[+] TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
[+] TLS_PSK_WITH_NULL_SHA
[+] TLS_PSK_WITH_NULL_SHA256
[+] TLS_PSK_WITH_NULL_SHA384
[+] TLS_PSK_WITH_RC4_128_SHA
[+] TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
[+] TLS_RSA_PSK_WITH_AES_128_CBC_SHA
[+] TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
[+] TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
[+] TLS_RSA_PSK_WITH_AES_256_CBC_SHA
[+] TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
[+] TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
[+] TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
[+] TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
[+] TLS_RSA_PSK_WITH_NULL_SHA
[+] TLS_RSA_PSK_WITH_NULL_SHA256
[+] TLS_RSA_PSK_WITH_NULL_SHA384
[+] TLS_RSA_PSK_WITH_RC4_128_SHA

threading.h
[+] POLARSSL_ERR_THREADING_BAD_INPUT_DATA
[+] POLARSSL_ERR_THREADING_FEATURE_UNAVAILABLE
[+] POLARSSL_ERR_THREADING_MUTEX_ERROR

x509.h
[+] POLARSSL_ERR_X509_BAD_INPUT_DATA
[+] POLARSSL_ERR_X509_INVALID_ALG
[+] POLARSSL_ERR_X509_INVALID_EXTENSIONS
[+] POLARSSL_ERR_X509_INVALID_FORMAT
[+] POLARSSL_ERR_X509_INVALID_NAME
[+] POLARSSL_ERR_X509_INVALID_SERIAL
[+] POLARSSL_ERR_X509_INVALID_SIGNATURE
[+] POLARSSL_ERR_X509_SIG_MISMATCH
[+] POLARSSL_ERR_X509_UNKNOWN_OID
[+] POLARSSL_ERR_X509_UNKNOWN_SIG_ALG

x509_crt.h
[+] X509_RFC5280_MAX_SERIAL_LEN
[+] X509_RFC5280_UTC_TIME_LEN

to the top

Header Files (45)

aes.h
arc4.h
asn1.h
asn1write.h
base64.h
bignum.h
blowfish.h
bn_mul.h
camellia.h
certs.h
cipher.h
cipher_wrap.h
config.h
ctr_drbg.h
debug.h
des.h
dhm.h
entropy.h
entropy_poll.h
error.h
gcm.h
havege.h
md.h
md2.h
md4.h
md5.h
md_wrap.h
net.h
padlock.h
pbkdf2.h
pem.h
pkcs11.h
pkcs12.h
pkcs5.h
rsa.h
sha1.h
sha2.h
sha4.h
ssl.h
ssl_cache.h
timing.h
version.h
x509.h
x509write.h
xtea.h

to the top

Shared Libraries (1)

libpolarssl.so.1.2.10

to the top

	Change	Effect
1	Field add_len has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Field base_ectr has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
3	Field buf has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
4	Field len has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
5	Field mode has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
6	Field y has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
7	Size of this type has been changed from 536 bytes to 388 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 368 bytes to 420 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field ca_chain has been changed from struct _x509_cert (460 bytes) to struct _x509_crt (312 bytes).	Possible access of applications to incorrect memory through the pointer.
3	Base type of field f_vrfy has been changed from *int()(void,x509_cert,int,int)* to *int()(void,x509_crt,int,int)*.	Replacement of field base type may indicate a change in the semantic meaning of the field.
4	Field rsa_key has been renamed to out_iv.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Field max_major_ver has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Field max_minor_ver has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
3	Field new_session_ticket has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
4	Size of this type has been changed from 1840 bytes to 2208 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
5	Base type of field tls_prf has been changed from int()(unsigned char,size_t,char,unsigned char,size_t,unsigned char,size_t) to int()(unsigned char const,size_t,char const,unsigned char const,size_t,unsigned char,size_t).	Replacement of field base type may indicate a change in the semantic meaning of the field.
6	Base type of field update_checksum has been changed from void()(ssl_context,unsigned char,size_t) to void()(ssl_context,unsigned char const,size_t).	Replacement of field base type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Field mfl_code has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Field ticket has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
3	Field ticket_len has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
4	Field ticket_lifetime has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
5	Field trunc_hmac has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
6	Field verify_result has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
7	Size of this type has been changed from 100 bytes to 124 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
8	Base type of field peer_cert has been changed from struct _x509_cert (460 bytes) to struct _x509_crt (312 bytes).	Possible access of applications to incorrect memory through the pointer.

	Change	Effect
1	Field cipher_ctx_dec has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Field cipher_ctx_enc has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
3	Field md_ctx_dec has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
4	Field md_ctx_enc has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
5	Size of this type has been changed from 1204 bytes to 264 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Field process_func has been added to this type.	1) This field will not be initialized by old clients. 2) Size of the inclusive type has been changed. NOTE: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Size of this type has been changed from 60 bytes to 64 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 236 bytes to 240 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Field sig_alg has been renamed to sig_md.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Type of 3rd parameter footer has been changed from char* to char const*.	Replacement of parameter data type may indicate a change in its semantic meaning.
2	Type of 2nd parameter header has been changed from char* to char const*.	Replacement of parameter data type may indicate a change in its semantic meaning.

	Change	Effect
1	5th parameter hash_id has been renamed to md_alg.	Renaming of a parameter may indicate a change in its semantic meaning.
2	Type of 5th parameter hash_id has been changed from int to enum md_type_t.	Replacement of parameter data type may indicate a change in its semantic meaning.

	Change	Effect
1	2nd parameter ciphersuite has been renamed to ciphersuite_info.	Renaming of a parameter may indicate a change in its semantic meaning.
2	Type of 2nd parameter ciphersuite has been changed from int to ssl_ciphersuite_t const*.	Replacement of parameter data type may indicate a change in its semantic meaning.

	Change	Effect
1	3rd parameter rsa_key has been renamed to pk_key.	Renaming of a parameter may indicate a change in its semantic meaning.
2	Type of return value has been changed from void to int (4 bytes).	Replacement of return type may indicate a change in its semantic meaning.

	Change	Effect
1	The member POLARSSL_MODE_GCM with value 6 has been added.	No effect.
2	The member POLARSSL_MODE_STREAM with value 7 has been added.	No effect.

	Change	Effect
1	The member POLARSSL_CIPHER_AES_128_ECB with value 2 has been added.	No effect.
2	The member POLARSSL_CIPHER_AES_128_GCM with value 14 has been added.	No effect.
3	The member POLARSSL_CIPHER_AES_192_ECB with value 3 has been added.	No effect.
4	The member POLARSSL_CIPHER_AES_192_GCM with value 15 has been added.	No effect.
5	The member POLARSSL_CIPHER_AES_256_ECB with value 4 has been added.	No effect.
6	The member POLARSSL_CIPHER_AES_256_GCM with value 16 has been added.	No effect.
7	The member POLARSSL_CIPHER_ARC4_128 with value 39 has been added.	No effect.
8	The member POLARSSL_CIPHER_BLOWFISH_ECB with value 35 has been added.	No effect.
9	The member POLARSSL_CIPHER_CAMELLIA_128_ECB with value 17 has been added.	No effect.
10	The member POLARSSL_CIPHER_CAMELLIA_192_ECB with value 18 has been added.	No effect.
11	The member POLARSSL_CIPHER_CAMELLIA_256_ECB with value 19 has been added.	No effect.
12	The member POLARSSL_CIPHER_DES_ECB with value 29 has been added.	No effect.
13	The member POLARSSL_CIPHER_DES_EDE3_ECB with value 33 has been added.	No effect.
14	The member POLARSSL_CIPHER_DES_EDE_ECB with value 31 has been added.	No effect.