From f1b1c6e3506fea734bc41cdb7794bf26666d293a Mon Sep 17 00:00:00 2001 From: Jack Lloyd Date: Tue, 21 Nov 2017 01:36:55 -0500 Subject: Update news --- news.rst | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/news.rst b/news.rst index 5bfb02428..ac6fe0fe2 100644 --- a/news.rst +++ b/news.rst @@ -47,6 +47,15 @@ Version 2.4.0, Not Yet Released character. In addition, UCS-4 strings are now supported. (GH #1113 #1250 #1287 #1289) +* In BER decoder, avoid unbounded stack recursion when parsing nested + indefinite length values. Now at most 16 nested indefinite length + values are accepted, anything deeper resulting in a decoding error. + (GH #1304 OSS-Fuzz 4353). + +* A new ASN.1 printer API allows generating a string representation of arbitrary + BER data. This is used in the ``asn1print`` command line utility and may be + useful in other applications, for instance for debugging. + * New functions for bit rotations that distinguish rotating by a compile-time constant vs a runtime variable rotation. This allows better optimizations in both cases. Notably performance of CAST-128 -- cgit v1.2.3