Binary compatibility report for the PolarSSL library between 1.2.6 and 1.2.7 versions on x86

Test Info

Library Name	PolarSSL
Version #1	1.2.6
Version #2	1.2.7
CPU Type	x86
GCC Version	4.6.1

Test Results

Total Header Files	43
Total Shared Libraries	1
Total Symbols / Types	381 / 244
Verdict	Incompatible (7.3%)

Problem Summary

	Severity	Count
Added Symbols	-	1
Removed Symbols	High	0
Problems with Data Types	High	0
	Medium	1
	Low	1
Problems with Symbols	High	0
	Medium	0
	Low	0
Problems with Constants	Low	0

Added Symbols (1)

ssl.h, libpolarssl.so.1.2.7
ssl_set_ciphersuites_for_version ( ssl_context* ssl, int const* ciphersuites, int major, int minor )

to the top

Problems with Data Types, Medium Severity (1)

ssl.h
[+] struct _ssl_context (1)

	Change	Effect
1	The pointer level of field ciphersuites has been increased from 1 to 2.	The library functions may try to access unallocated memory by the dereferencing of old field value and therefore cause a crash of applications.

[+] affected symbols (56)

debug_print_buf ( ssl_context const* ssl, int level, char const* file, int line, char const* text, unsigned char* buf, size_t len )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

debug_print_crt ( ssl_context const* ssl, int level, char const* file, int line, char const* text, x509_cert const* crt )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

debug_print_mpi ( ssl_context const* ssl, int level, char const* file, int line, char const* text, struct mpi const* X )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

debug_print_msg ( ssl_context const* ssl, int level, char const* file, int line, char const* text )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

debug_print_ret ( ssl_context const* ssl, int level, char const* file, int line, char const* text, int ret )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_close_notify ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_derive_keys ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_fetch_input ( ssl_context* ssl, size_t nb_want )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_flush_output ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_free ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_get_bytes_avail ( ssl_context const* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_get_ciphersuite ( ssl_context const* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_get_peer_cert ( ssl_context const* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_get_verify_result ( ssl_context const* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_get_version ( ssl_context const* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_handshake ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_handshake_client_step ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_handshake_server_step ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_handshake_step ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_handshake_wrapup ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_init ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_legacy_renegotiation ( ssl_context* ssl, int allow_legacy )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_optimize_checksum ( ssl_context* ssl, int ciphersuite )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_parse_certificate ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_parse_change_cipher_spec ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_parse_finished ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_read ( ssl_context* ssl, unsigned char* buf, size_t len )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_read_record ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_renegotiate ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_send_alert_message ( ssl_context* ssl, unsigned char level, unsigned char message )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_send_fatal_handshake_failure ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_session_reset ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_authmode ( ssl_context* ssl, int authmode )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_bio ( ssl_context* ssl, int(*f_recv)(void*, unsigned char*, size_t), void* p_recv, int(*f_send)(void*, unsigned char const*, size_t), void* p_send )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_ca_chain ( ssl_context* ssl, x509_cert* ca_chain, x509_crl* ca_crl, char const* peer_cn )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_ciphersuites ( ssl_context* ssl, int const* ciphersuites )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_dbg ( ssl_context* ssl, void(*f_dbg)(void*, int, char const*), void* p_dbg )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_dh_param ( ssl_context* ssl, char const* dhm_P, char const* dhm_G )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_dh_param_ctx ( ssl_context* ssl, struct dhm_context* dhm_ctx )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_endpoint ( ssl_context* ssl, int endpoint )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_hostname ( ssl_context* ssl, char const* hostname )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_max_version ( ssl_context* ssl, int major, int minor )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_min_version ( ssl_context* ssl, int major, int minor )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_own_cert ( ssl_context* ssl, x509_cert* own_cert, struct rsa_context* rsa_key )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_own_cert_alt ( ssl_context* ssl, x509_cert* own_cert, void* rsa_key, rsa_decrypt_func rsa_decrypt, rsa_sign_func rsa_sign, rsa_key_len_func rsa_key_len )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_renegotiation ( ssl_context* ssl, int renegotiation )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_rng ( ssl_context* ssl, int(*f_rng)(void*, unsigned char*, size_t), void* p_rng )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_session ( ssl_context* ssl, ssl_session const* session )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_session_cache ( ssl_context* ssl, int(*f_get_cache)(void*, ssl_session*), void* p_get_cache, int(*f_set_cache)(void*, ssl_session const*), void* p_set_cache )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_sni ( ssl_context* ssl, int(*f_sni)(void*, ssl_context*, unsigned char const*, size_t), void* p_sni )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_set_verify ( ssl_context* ssl, int(*f_vrfy)(void*, x509_cert*, int, int*), void* p_vrfy )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_write ( ssl_context* ssl, unsigned char const* buf, size_t len )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_write_certificate ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_write_change_cipher_spec ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_write_finished ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

ssl_write_record ( ssl_context* ssl )

1st parameter 'ssl' (pointer) has base type 'struct _ssl_context'.

to the top

Problems with Data Types, Low Severity (1)

ssl.h
[+] struct _ssl_context (1)

	Change	Effect
1	Type of field ciphersuites has been changed from int const* to int const**.	Replacement of the field data type may indicate a change in the semantic meaning of the field.