ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2024-12-20 05:28:01 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
47efee1df4
ZeroTierOne/ext/hiredis-1.0.2/CHANGELOG.md
Grant Limberg 183a9d7088
update controller image and some dependencies
2022-06-22 15:03:19 -07:00

24 KiB
Raw Blame History

1.0.2 - (2021-10-07)

Announcing Hiredis v1.0.2, which fixes CVE-2021-32765 but returns the SONAME to the correct value of 1.0.0.

1.0.1 - (2021-10-04)

This release erroneously bumped the SONAME, please use 1.0.2

Announcing Hiredis v1.0.1, a security release fixing CVE-2021-32765

Thanks to Yossi Gottlieb for the security fix and to Microsoft Security Vulnerability Research for finding the bug. 💖

1.0.0 - (2020-08-03)

Announcing Hiredis v1.0.0, which adds support for RESP3, SSL connections, allocator injection, and better Windows support! 🎉

A big thanks to everyone who helped with this release. The following list includes everyone who contributed at least five lines, sorted by lines contributed. 💖

Michael Grunder, Yossi Gottlieb, Mark Nunberg, Marcus Geelnard, Justin Brewer, Valentino Geron, Minun Dragonation, Omri Steiner, Sangmoon Yi, Jinjiazh, Odin Hultgren Van Der Horst, Muhammad Zahalqa, Nick Rivera, Qi Yang, kevin1018

Full Changelog

BREAKING CHANGES:

  • redisOptions now has two timeout fields. One for connecting, and one for commands. If you're presently using options->timeout you will need to change it to use options->connect_timeout. (See example)

  • Bulk and multi-bulk lengths less than -1 or greater than LLONG_MAX are now protocol errors. This is consistent with the RESP specification. On 32-bit platforms, the upper bound is lowered to SIZE_MAX.

  • redisReplyObjectFunctions.createArray now takes size_t for its length parameter.

New features:

Closed issues (that involved code changes):

  • Makefile does not install TLS libraries #809
  • redisConnectWithOptions should not set command timeout #722, #829 (valentinogeron)
  • Fix integer overflow in sdsrange #827
  • INFO & CLUSTER commands failed when using RESP3 #802
  • Windows compatibility patches #687, #838, #842
  • RESP3 PUSH messages incorrectly use pending callback #825
  • Asynchronous PSUBSCRIBE command fails when using RESP3 #815
  • New SSL API #804, #813
  • Hard-coded limit of nested reply depth #794
  • Fix TCP_NODELAY in Windows/OSX #679, #690, #779, #785,
  • Added timers to libev adapter. #778, #795
  • Initialization discards const qualifier #777
  • BUG
  • undefined reference to hi_malloc #769
  • hiredis pkg-config file incorrectly ignores multiarch libdir spec'n #767
  • Don't use -G to build shared object on Solaris #757
  • error when make USE_SSL=1 #748
  • Allow to change SSL Mode #646
  • hiredis/adapters/libevent.h memleak #618
  • redisLibuvPoll crash when server closes the connetion #545
  • about redisAsyncDisconnect question #518
  • hiredis adapters libuv error for help #508
  • API/ABI changes analysis #506
  • Memory leak patch in Redis #502
  • Remove the depth limitation #421

Merged pull requests:

* This Changelog was automatically generated by github_changelog_generator

1.0.0-rc1 - (2020-07-29)

Note: There were no changes to code between v1.0.0-rc1 and v1.0.0 so see v1.0.0 for changelog

0.14.1 (2020-03-13)

  • Adds safe allocation wrappers (CVE-2020-7105, #747, #752) (Michael Grunder)

0.14.0 (2018-09-25)

BREAKING CHANGES:

  • Change redisReply.len to size_t, as it denotes the the size of a string

    User code should compare this to size_t values as well. If it was used to compare to other values, casting might be necessary or can be removed, if casting was applied before.

  • Make string2ll static to fix conflict with Redis (Tom Lee [c3188b])

  • Use -dynamiclib instead of -shared for OSX (Ryan Schmidt [a65537])

  • Use string2ll from Redis w/added tests (Michael Grunder [7bef04, 60f622])

  • Makefile - OSX compilation fixes (Ryan Schmidt [881fcb, 0e9af8])

  • Remove redundant NULL checks (Justin Brewer [54acc8, 58e6b8])

  • Fix bulk and multi-bulk length truncation (Justin Brewer [109197])

  • Fix SIGSEGV in OpenBSD by checking for NULL before calling freeaddrinfo (Justin Brewer [546d94])

  • Several POSIX compatibility fixes (Justin Brewer [bbeab8, 49bbaa, d1c1b6])

  • Makefile - Compatibility fixes (Dimitri Vorobiev [3238cf, 12a9d1])

  • Makefile - Fix make install on FreeBSD (Zach Shipko [a2ef2b])

  • Makefile - don't assume $(INSTALL) is cp (Igor Gnatenko [725a96])

  • Separate side-effect causing function from assert and small cleanup (amallia [b46413, 3c3234])

  • Don't send negative values to __redisAsyncCommand (Frederik Deweerdt [706129])

  • Fix leak if setsockopt fails (Frederik Deweerdt [e21c9c])

  • Fix libevent leak (zfz [515228])

  • Clean up GCC warning (Ichito Nagata [2ec774])

  • Keep track of errno in __redisSetErrorFromErrno() as snprintf may use it (Jin Qing [25cd88])

  • Solaris compilation fix (Donald Whyte [41b07d])

  • Reorder linker arguments when building examples (Tustfarm-heart [06eedd])

  • Keep track of subscriptions in case of rapid subscribe/unsubscribe (Hyungjin Kim [073dc8, be76c5, d46999])

  • libuv use after free fix (Paul Scott [cbb956])

  • Properly close socket fd on reconnect attempt (WSL [64d1ec])

  • Skip valgrind in OSX tests (Jan-Erik Rediger [9deb78])

  • Various updates for Travis testing OSX (Ted Nyman [fa3774, 16a459, bc0ea5])

  • Update libevent (Chris Xin [386802])

  • Change sds.h for building in C++ projects (Ali Volkan ATLI [f5b32e])

  • Use proper format specifier in redisFormatSdsCommandArgv (Paulino Huerta, Jan-Erik Rediger [360a06, 8655a6])

  • Better handling of NULL reply in example code (Jan-Erik Rediger [1b8ed3])

  • Prevent overflow when formatting an error (Jan-Erik Rediger [0335cb])

  • Compatibility fix for strerror_r (Tom Lee [bb1747])

  • Properly detect integer parse/overflow errors (Justin Brewer [93421f])

  • Adds CI for Windows and cygwin fixes (owent, [6c53d6, 6c3e40])

  • Catch a buffer overflow when formatting the error message

  • Import latest upstream sds. This breaks applications that are linked against the old hiredis v0.13

  • Fix warnings, when compiled with -Wshadow

  • Make hiredis compile in Cygwin on Windows, now CI-tested

  • Bulk and multi-bulk lengths less than -1 or greater than LLONG_MAX are now protocol errors. This is consistent with the RESP specification. On 32-bit platforms, the upper bound is lowered to SIZE_MAX.

  • Remove backwards compatibility macro's

This removes the following old function aliases, use the new name now:

Old New
redisReplyReaderCreate redisReaderCreate
redisReplyReaderCreate redisReaderCreate
redisReplyReaderFree redisReaderFree
redisReplyReaderFeed redisReaderFeed
redisReplyReaderGetReply redisReaderGetReply
redisReplyReaderSetPrivdata redisReaderSetPrivdata
redisReplyReaderGetObject redisReaderGetObject
redisReplyReaderGetError redisReaderGetError
  • The DEBUG variable in the Makefile was renamed to DEBUG_FLAGS

Previously it broke some builds for people that had DEBUG set to some arbitrary value, due to debugging other software. By renaming we avoid unintentional name clashes.

Simply rename DEBUG to DEBUG_FLAGS in your environment to make it working again.

0.13.3 (2015-09-16)

  • Revert "Clear REDIS_CONNECTED flag when connection is closed".
  • Make tests pass on FreeBSD (Thanks, Giacomo Olgeni)

If the REDIS_CONNECTED flag is cleared, the async onDisconnect callback function will never be called. This causes problems as the disconnect is never reported back to the user.

0.13.2 (2015-08-25)

  • Prevent crash on pending replies in async code (Thanks, @switch-st)
  • Clear REDIS_CONNECTED flag when connection is closed (Thanks, Jerry Jacobs)
  • Add MacOS X addapter (Thanks, @dizzus)
  • Add Qt adapter (Thanks, Pietro Cerutti)
  • Add Ivykis adapter (Thanks, Gergely Nagy)

All adapters are provided as is and are only tested where possible.

0.13.1 (2015-05-03)

This is a bug fix release. The new reconnect method introduced new struct members, which clashed with pre-defined names in pre-C99 code. Another commit forced C99 compilation just to make it work, but of course this is not desirable for outside projects. Other non-C99 code can now use hiredis as usual again. Sorry for the inconvenience.

  • Fix memory leak in async reply handling (Salvatore Sanfilippo)
  • Rename struct member to avoid name clash with pre-c99 code (Alex Balashov, ncopa)

0.13.0 (2015-04-16)

This release adds a minimal Windows compatibility layer. The parser, standalone since v0.12.0, can now be compiled on Windows (and thus used in other client libraries as well)

  • Windows compatibility layer for parser code (tzickel)
  • Properly escape data printed to PKGCONF file (Dan Skorupski)
  • Fix tests when assert() undefined (Keith Bennett, Matt Stancliff)
  • Implement a reconnect method for the client context, this changes the structure of redisContext (Aaron Bedra)

0.12.1 (2015-01-26)

  • Fix make install: DESTDIR support, install all required files, install PKGCONF in proper location
  • Fix make test as 32 bit build on 64 bit platform

0.12.0 (2015-01-22)

  • Add optional KeepAlive support

  • Try again on EINTR errors

  • Add libuv adapter

  • Add IPv6 support

  • Remove possibility of multiple close on same fd

  • Add ability to bind source address on connect

  • Add redisConnectFd() and redisFreeKeepFd()

  • Fix getaddrinfo() memory leak

  • Free string if it is unused (fixes memory leak)

  • Improve redisAppendCommandArgv performance 2.5x

  • Add support for SO_REUSEADDR

  • Fix redisvFormatCommand format parsing

  • Add GLib 2.0 adapter

  • Refactor reading code into read.c

  • Fix errno error buffers to not clobber errors

  • Generate pkgconf during build

  • Silence _BSD_SOURCE warnings

  • Improve digit counting for multibulk creation

0.11.0

  • Increase the maximum multi-bulk reply depth to 7.

  • Increase the read buffer size from 2k to 16k.

  • Use poll(2) instead of select(2) to support large fds (>= 1024).

0.10.1

  • Makefile overhaul. Important to check out if you override one or more variables using environment variables or via arguments to the "make" tool.

  • Issue #45: Fix potential memory leak for a multi bulk reply with 0 elements being created by the default reply object functions.

  • Issue #43: Don't crash in an asynchronous context when Redis returns an error reply after the connection has been made (this happens when the maximum number of connections is reached).

0.10.0

  • See commit log.