@marcuspuchalla/nachos 0.1.1 → 0.1.4

package/CHANGELOG.md

@@ -5,6 +5,61 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.4] - 2026-02-22
+
+### Fixed
+
+#### Security
+- **Duplicate map key bypass** - Semantic comparison now used for duplicate detection; different encodings of the same integer key (e.g. `0x01`, `0x1801`, `0x190001`) are correctly identified as duplicates (RFC 8949 Section 5.6)
+- **maxParseTime bypass** - Timeout is now enforced in standard `decode()`/`parse()` path, not only in `decodeWithSourceMap()`
+- **bytesWritten double-counting** - Removed broken value-copy tracking from `EncodeContext`; `maxOutputSize` is now checked once at root level after encoding completes
+
+#### Correctness
+- **Tag 4/5 integer validation** - `Number.isInteger()` check added to reject floats in exponent/mantissa positions (RFC 8949 requirement)
+- **Float16 IEEE 754 rounding** - Replaced truncating `>> 42` shift with guard/round/sticky round-half-to-even; also fixed 32-bit truncation bug that corrupted most float16 mantissas
+- **Exponential source-map re-parsing** - `validateTagSemantics` and `decodePlutusConstructor` now called directly on already-parsed values instead of re-parsing the entire tag subtree (O(D²) → O(D))
+
+### Performance
+- **Eliminated O(N²) parsing** - `parseItem` and `parseSequence` no longer slice and hex-encode the full remaining buffer on each element; all types now use buffer+offset native dispatch
+- **Map canonical sort** - Keys pre-encoded once before sort instead of re-encoded O(N log N) times inside comparator
+
+### Added
+- **Uint8Array input support** - `decode()`, `decodeWithSourceMap()`, `parseSequence()`, and `CborDecoder` class methods now accept `Uint8Array` directly, skipping hex conversion entirely
+- **Buffer-native parser exports** - `parseIntegerFromBuffer`, `parseFromBuffer` (float), `parseTagFromBuffer`, `validateTagSemantics`, `decodePlutusConstructor` exported for advanced use
+- 115 new tests
+
+## [0.1.3] - 2026-02-09
+
+### Fixed
+
+#### Critical Bugs
+- **Float parser ReferenceError** - `options` variable was not accessible in float parsing, causing 29 test failures
+- **Missing CborByteString import** - Tag parser failed when decoding byte-string tagged values
+- **Float16 subnormal encoding** - Mantissa bits were being lost for subnormal half-precision floats
+
+#### Security Hardening
+- **Tag parser internal security checks** - Added depth, array length, map size, and indefinite-length validation to tag-internal array/map parsing
+- **String encoder pre-allocation check** - Size validation now happens before buffer allocation (DoS prevention)
+- **Default nesting limits** - Updated default `maxDepth` and `maxTagDepth` to 100 (was hardcoded as 64)
+- **Replaced magic numbers** - All hardcoded limit values now use `DEFAULT_LIMITS` constants
+
+#### RFC 8949 Compliance
+- **Canonical NaN validation** - Float32/float64 NaN payloads are now validated in canonical mode
+- **Canonical shortest-form float validation** - Values that fit in float16 are rejected in float32/float64 canonical mode
+- **Indefinite-length chunk validation** - String chunks inside indefinite-length strings must be definite-length per RFC 3.2.3
+- **Canonical + indefinite conflict** - Auto-resolves `canonical: true` with `allowIndefinite: true` instead of silently misbehaving
+
+### Added
+
+#### Tests
+- 91 round-trip encode/decode tests covering all CBOR major types
+- 70 encoder error handling and canonical encoding tests
+- Total test count increased from 1038 to 1199
+
+### Removed
+- Stale Emacs backup file
+- Commented-out dead code in parser
+
 ## [0.1.0] - 2025-12-01
 
 ### Added