Binary compatibility report for the libssl.so library between MeeGo 1.2 Core and 0.9.8-MeeGo 1.2 Harmattan versions on x86

Test Info

Library Name	libssl.so
Version #1	MeeGo 1.2 Core (gcc 4.5.1)
Version #2	0.9.8-MeeGo 1.2 Harmattan (gcc 4.4.1)
CPU Architecture	x86

Test Results

Total Header Files	2
Total Shared Libraries	1
Total Symbols / Types	233 / 368
Verdict	Incompatible (84.55%)

Problem Summary

	Severity	Count
Added Symbols	-	4
Removed Symbols	High	17
Problems with Data Types	High	42
	Medium	35
	Low	61
Problems with Symbols	High	0
	Medium	5
	Low	29
Problems with Constants	Low	70

Added Symbols (4)

ssl.h, libssl.so.0.9.8
SSL_CTX_set_tmp_ecdh_callback ( SSL_CTX* ctx, EC_KEY*(*ecdh)(SSL*, int, int) ) @@ OPENSSL_0.9.8
SSL_SESSION_cmp ( SSL_SESSION const* a, SSL_SESSION const* b ) @@ OPENSSL_0.9.8
SSL_SESSION_hash ( SSL_SESSION const* a ) @@ OPENSSL_0.9.8
SSL_set_tmp_ecdh_callback ( SSL* ssl, EC_KEY*(*ecdh)(SSL*, int, int) ) @@ OPENSSL_0.9.8

to the top

Removed Symbols (17)

ssl.h, libssl.so.1.0.0c
PEM_read_bio_SSL_SESSION ( BIO* bp, SSL_SESSION** x, int(*cb)(char*, int, int, void*), void* u )
PEM_read_SSL_SESSION ( FILE* fp, SSL_SESSION** x, int(*cb)(char*, int, int, void*), void* u )
PEM_write_bio_SSL_SESSION ( BIO* bp, SSL_SESSION* x )
PEM_write_SSL_SESSION ( FILE* fp, SSL_SESSION* x )
SSL_CTX_set1_param ( SSL_CTX* ctx, X509_VERIFY_PARAM* vpm )
SSL_CTX_set_psk_client_callback ( SSL_CTX* ctx, unsigned int(*psk_client_callback)(SSL*, char const*, char*, unsigned int, unsigned char*, unsigned int) )
SSL_CTX_set_psk_server_callback ( SSL_CTX* ctx, unsigned int(*psk_server_callback)(SSL*, char const*, unsigned char*, unsigned int) )
SSL_CTX_use_psk_identity_hint ( SSL_CTX* ctx, char const* identity_hint )
SSL_get_psk_identity ( SSL const* s )
SSL_get_psk_identity_hint ( SSL const* s )
SSL_set1_param ( SSL* ssl, X509_VERIFY_PARAM* vpm )
SSL_set_psk_client_callback ( SSL* ssl, unsigned int(*psk_client_callback)(SSL*, char const*, char*, unsigned int, unsigned char*, unsigned int) )
SSL_set_psk_server_callback ( SSL* ssl, unsigned int(*psk_server_callback)(SSL*, char const*, unsigned char*, unsigned int) )
SSL_set_session_secret_cb ( SSL* s, tls_session_secret_cb_fn tls_session_secret_cb, void* arg )
SSL_set_session_ticket_ext ( SSL* s, void* ext_data, int ext_len )
SSL_set_session_ticket_ext_cb ( SSL* s, tls_session_ticket_ext_cb_fn cb, void* arg )
SSL_use_psk_identity_hint ( SSL* s, char const* identity_hint )

to the top

Problems with Data Types, High Severity (42)

	Change	Effect
1	Field buffered_app_data has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field last_write_sequence has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field next_timeout has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field timeout_duration has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field ameth has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field engine has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field algorithm_auth has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field algorithm_enc has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field algorithm_mac has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field algorithm_ssl has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field max_send_fragment has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field psk_identity has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field psk_identity_hint has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field mac_flags has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field max_send_fragment has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field psk_client_callback has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field psk_server_callback has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field tls_session_secret_cb has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
6	Field tls_session_secret_cb_arg has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
7	Field tls_session_ticket_ext_cb has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
8	Field tls_session_ticket_ext_cb_arg has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
9	Field tlsext_opaque_prf_input has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
10	Field tlsext_opaque_prf_input_len has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
11	Field tlsext_session_ticket has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field new_mac_pkey_type has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field new_mac_secret_size has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field client_opaque_prf_input has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field client_opaque_prf_input_len has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field handshake_buffer has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field handshake_dgst has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field init_extra has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
6	Field read_mac_secret_size has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
7	Field server_opaque_prf_input has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
8	Field server_opaque_prf_input_len has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
9	Field write_mac_secret_size has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field altname has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field crldp has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Field nc has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
4	Field rfc3779_addr has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
5	Field rfc3779_asid has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

	Change	Effect
1	Field lookup_certs has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field lookup_crls has been removed from the middle position of this structural type.	1) Previous accesses of applications to the removed field will be incorrect. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.

dtls1.h
[+] struct dtls1_state_st (4)

evp.h
[+] struct evp_pkey_st (2)

ssl.h
[+] struct ssl_cipher_st (4)
[+] struct ssl_ctx_st (1)
[+] struct ssl_session_st (2)
[+] struct ssl_st (11)

ssl3.h
[+] struct anon-struct-ssl3.h-458 (2)
[+] struct ssl3_state_st (9)

x509.h
[+] struct x509_st (5)

x509_vfy.h
[+] struct x509_store_st (2)

to the top

Problems with Data Types, Medium Severity (35)

	Change	Effect
1	Type of field n0 has been changed from unsigned int[2] (8 bytes) to unsigned long (4 bytes).	This field may be incorrectly initialized or accessed by applications.

	Change	Effect
1	Field length has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Type of field map has been changed from unsigned long (4 bytes) to unsigned long long (8 bytes).	1) Size of the inclusive type has changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
3	Type of field max_seq_num has been changed from unsigned char[8] to unsigned long long of different format.	This field may be incorrectly initialized or accessed by applications.

	Change	Effect
1	Size of field w_msg_hdr has been changed from 44 bytes to 24 bytes.	Previous accesses of applications and library functions to this field may be broken.
2	Size of field bitmap has been changed from 12 bytes to 20 bytes.	1) Size of the inclusive type has changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
3	Size of field next_bitmap has been changed from 12 bytes to 20 bytes.	1) Size of the inclusive type has changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
4	Size of field r_msg_hdr has been changed from 44 bytes to 24 bytes.	1) Size of the inclusive type has changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
5	Type of field cookie has been changed from unsigned char[256] (256 bytes) to unsigned char[32] (32 bytes).	This field may be incorrectly initialized or accessed by applications.
6	Type of field rcvd_cookie has been changed from unsigned char[256] (256 bytes) to unsigned char[32] (32 bytes).	1) Size of the inclusive type has changed. 2) Previous accesses of applications and library functions to this field and fields at higher positions of the structure definition may be broken.
7	Field change_cipher_spec_ok has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
8	Field listen has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field saved_retransmit_state has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field md_ctrl has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field freelist_max_len has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
2	Field psk_client_callback has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
3	Field psk_identity_hint has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
4	Field psk_server_callback has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
5	Field rbuf_freelist has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
6	Field tlsext_opaque_prf_input_callback has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
7	Field tlsext_opaque_prf_input_callback_arg has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
8	Field wbuf_freelist has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field ecdh has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Type of field ctype has been changed from char[9] (9 bytes) to char[7] (7 bytes).	1) This field may be incorrectly initialized or accessed by applications. 2) Size of the inclusive type has changed.

	Change	Effect
1	Type of field seq_num has been changed from unsigned char[8] to unsigned long long of different format.	This field may be incorrectly initialized or accessed by applications.

	Change	Effect
1	Field finish_dgst1 has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
2	Field finish_dgst2 has been added at the middle position of this structural type.	1) Size of the inclusive type has been changed. 2) Layout of structure fields has been changed and therefore fields at higher positions of the structure definition may be incorrectly accessed by applications.
3	Size of field tmp has been changed from 476 bytes to 468 bytes.	1) Size of the inclusive type has changed. 2) Previous accesses of applications and library functions to this field may be broken.
4	Field previous_client_finished has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
5	Field previous_client_finished_len has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
6	Field previous_server_finished has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
7	Field previous_server_finished_len has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.
8	Field send_connection_binding has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field enc has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

	Change	Effect
1	Field canon_enclen has been removed from this type.	1) Applications will access incorrect memory when attempting to access this field. 2) Size of the inclusive type has been changed.

bn.h
[+] struct bn_mont_ctx_st (1)

dtls1.h
[+] struct dtls1_bitmap_st (3)
[+] struct dtls1_state_st (8)
[+] struct hm_header_st (1)

evp.h
[+] struct env_md_st (1)

ssl.h
[+] struct ssl_ctx_st (8)

ssl3.h
[+] struct anon-struct-ssl3.h-458 (2)
[+] struct ssl3_record_st (1)
[+] struct ssl3_state_st (8)

x509.h
[+] struct x509_cinf_st (1)
[+] struct X509_name_st (1)

to the top

Problems with Symbols, Medium Severity (5)

	Change	Effect
1	Type of 1st parameter p1 has been changed from SSL_CIPHER const* to SSL_CIPHER*.	This function may change parameter p1, but it will be treated as const by applications. This may result in crash or incorrect behavior of applications.

	Change	Effect
1	Type of 1st parameter meth has been changed from SSL_METHOD const* to SSL_METHOD*.	This function may change parameter meth, but it will be treated as const by applications. This may result in crash or incorrect behavior of applications.

	Change	Effect
1	Base type of return value has been changed from lhash_st_SSL_SESSION (4 bytes) to lhash_st (96 bytes).	Applications will obtain a different return value and execution may change.

	Change	Effect
1	Type of 2nd parameter meth has been changed from SSL_METHOD const* to SSL_METHOD*.	This function may change parameter meth, but it will be treated as const by applications. This may result in crash or incorrect behavior of applications.

	Change	Effect
1	Type of 2nd parameter method has been changed from SSL_METHOD const* to SSL_METHOD*.	This function may change parameter method, but it will be treated as const by applications. This may result in crash or incorrect behavior of applications.

ssl.h, libssl.so.1.0.0c
[+] SSL_CIPHER_description ( SSL_CIPHER const* p1, char* buf, int size ) (1)
[+] SSL_CTX_new ( SSL_METHOD const* meth ) (1)
[+] SSL_CTX_sessions ( SSL_CTX* ctx ) (1)
[+] SSL_CTX_set_ssl_version ( SSL_CTX* ctx, SSL_METHOD const* meth ) (1)
[+] SSL_set_ssl_method ( SSL* s, SSL_METHOD const* method ) (1)

to the top

Problems with Data Types, Low Severity (61)

	Change	Effect
1	Type of field data has been changed from unsigned char const* to unsigned char*.	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Base type of field d has been changed from unsigned int to unsigned long.	Replacement of field base type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 76 bytes to 72 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Type of field length has been changed from size_t to int.	Replacement of the field data type may indicate a change in the semantic meaning of the field.
2	Type of field max has been changed from size_t to int.	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Base type of field sk has been changed from stack_st_void to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.

	Change	Effect
1	Base type of field dsa_paramgen has been changed from int()(DSA,int,unsigned char const,int,int,unsigned long,BN_GENCB) to int()(DSA,int,unsigned char,int,int,unsigned long,BN_GENCB).	Replacement of field base type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 12 bytes to 20 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 744 bytes to 240 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 44 bytes to 24 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 76 bytes to 72 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Size of this type has been changed from 32 bytes to 24 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field attributes has been changed from stack_st_X509_ATTRIBUTE to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.

	Change	Effect
1	Field ec has been added to this type.	ATTENTION: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.

	Change	Effect
1	Base type of field rsa_verify has been changed from int()(int,unsigned char const,unsigned int,unsigned char const,unsigned int,RSA const) to int()(int,unsigned char const,unsigned int,unsigned char,unsigned int,RSA const).	Replacement of field base type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Field mask has been added to this type.	Size of the inclusive type has been changed. ATTENTION: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
2	Field mask_strength has been added to this type.	Size of the inclusive type has been changed. ATTENTION: this field should be accessed only from the new library functions, otherwise it may result in crash or incorrect behavior of applications.
3	Size of this type has been changed from 48 bytes to 40 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
4	Field algorithm_mkey has been renamed to algorithms.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 356 bytes to 320 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field sessions has been changed from lhash_st_SSL_SESSION (4 bytes) to lhash_st (96 bytes).	Possible access of applications to incorrect memory through the pointer.
3	Base type of field cipher_list has been changed from stack_st_SSL_CIPHER to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
4	Base type of field cipher_list_by_id has been changed from stack_st_SSL_CIPHER to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
5	Base type of field client_CA has been changed from stack_st_X509_NAME to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
6	Base type of field comp_methods has been changed from stack_st_SSL_COMP to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
7	Base type of field extra_certs has been changed from stack_st_X509 to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
8	Type of field method has been changed from SSL_METHOD const* to SSL_METHOD*.	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Base type of field get_cipher has been changed from SSL_CIPHER const()(unsigned int) to SSL_CIPHER()(unsigned int).	Replacement of field base type may indicate a change in the semantic meaning of the field.
2	Base type of field get_cipher_by_char has been changed from SSL_CIPHER const()(unsigned char const) to SSL_CIPHER()(unsigned char const).	Replacement of field base type may indicate a change in the semantic meaning of the field.
3	Base type of field get_ssl_method has been changed from ssl_method_st const()(int) to *ssl_method_st()(int)*.	Replacement of field base type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 224 bytes to 216 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field ciphers has been changed from stack_st_SSL_CIPHER to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
3	Type of field cipher has been changed from SSL_CIPHER const* to SSL_CIPHER*.	Replacement of the field data type may indicate a change in the semantic meaning of the field.
4	Type of field compress_meth has been changed from unsigned int to int.	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 356 bytes to 312 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field read_hash has been changed from env_md_ctx_st (24 bytes) to env_md_st (72 bytes).	Possible access of applications to incorrect memory through the pointer.
3	Base type of field write_hash has been changed from env_md_ctx_st (24 bytes) to env_md_st (72 bytes).	Possible access of applications to incorrect memory through the pointer.
4	Base type of field cipher_list has been changed from stack_st_SSL_CIPHER to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
5	Base type of field cipher_list_by_id has been changed from stack_st_SSL_CIPHER to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
6	Base type of field client_CA has been changed from stack_st_X509_NAME to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
7	Base type of field tlsext_ocsp_exts has been changed from stack_st_X509_EXTENSION to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
8	Base type of field tlsext_ocsp_ids has been changed from stack_st_OCSP_RESPID to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
9	Type of field method has been changed from SSL_METHOD const* to SSL_METHOD*.	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 476 bytes to 468 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field ca_names has been changed from stack_st_X509_NAME to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
3	Type of field new_cipher has been changed from SSL_CIPHER const* to SSL_CIPHER*.	Replacement of the field data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 1048 bytes to 900 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.

	Change	Effect
1	Base type of field other has been changed from stack_st_X509_ALGOR to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
2	Base type of field reject has been changed from stack_st_ASN1_OBJECT to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
3	Base type of field trust has been changed from stack_st_ASN1_OBJECT to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.

asn1.h
[+] struct asn1_object_st (1)

bn.h
[+] struct bignum_st (1)
[+] struct bn_mont_ctx_st (1)

buffer.h
[+] struct buf_mem_st (2)

crypto.h
[+] struct crypto_ex_data_st (1)

dsa.h
[+] struct dsa_method (1)

dtls1.h
[+] struct dtls1_bitmap_st (1)
[+] struct dtls1_state_st (1)
[+] struct hm_header_st (1)

evp.h
[+] struct env_md_st (1)
[+] struct evp_pkey_st (2)
[+] union anon-union-evp.h-138 (1)

rsa.h
[+] struct rsa_meth_st (1)

ssl.h
[+] struct ssl_cipher_st (4)
[+] struct ssl_ctx_st (8)
[+] struct ssl_method_st (3)
[+] struct ssl_session_st (4)
[+] struct ssl_st (9)

ssl3.h
[+] struct anon-struct-ssl3.h-458 (3)
[+] struct ssl3_state_st (1)

x509.h
[+] struct x509_cert_aux_st (3)
[+] struct x509_cinf_st (2)
[+] struct X509_name_st (3)
[+] struct x509_st (1)
[+] typedef X509_EXTENSIONS (1)

x509_vfy.h
[+] struct x509_store_st (3)
[+] struct X509_VERIFY_PARAM_st (1)

to the top

Problems with Symbols, Low Severity (29)

ssl.h, libssl.so.1.0.0c
[+] DTLSv1_client_method ( ) (1)
[+] DTLSv1_method ( ) (1)
[+] DTLSv1_server_method ( ) (1)
[+] SSL_add_dir_cert_subjects_to_stack ( stack_st_X509_NAME* stackCAs, char const* dir ) (1)
[+] SSL_add_file_cert_subjects_to_stack ( stack_st_X509_NAME* stackCAs, char const* file ) (1)
[+] SSL_COMP_get_compression_methods ( ) (1)
[+] SSL_CTX_get_client_CA_list ( SSL_CTX const* s ) (1)
[+] SSL_CTX_set_client_CA_list ( SSL_CTX* ctx, stack_st_X509_NAME* name_list ) (1)
[+] SSL_dup_CA_list ( stack_st_X509_NAME* sk ) (2)
[+] SSL_get_ciphers ( SSL const* s ) (1)
[+] SSL_get_client_CA_list ( SSL const* s ) (1)
[+] SSL_get_current_cipher ( SSL const* s ) (1)
[+] SSL_get_peer_cert_chain ( SSL const* s ) (1)
[+] SSL_get_ssl_method ( SSL* s ) (1)
[+] SSL_load_client_CA_file ( char const* file ) (1)
[+] SSL_set_client_CA_list ( SSL* s, stack_st_X509_NAME* name_list ) (1)
[+] SSLv23_client_method ( ) (1)
[+] SSLv23_method ( ) (1)
[+] SSLv23_server_method ( ) (1)
[+] SSLv2_client_method ( ) (1)
[+] SSLv2_method ( ) (1)
[+] SSLv2_server_method ( ) (1)
[+] SSLv3_client_method ( ) (1)
[+] SSLv3_method ( ) (1)
[+] SSLv3_server_method ( ) (1)
[+] TLSv1_client_method ( ) (1)
[+] TLSv1_method ( ) (1)
[+] TLSv1_server_method ( ) (1)

to the top

Problems with Constants (70)

asn1.h
[+] ASN1_F_ASN1_OUTPUT_DATA
[+] ASN1_F_B64_READ_ASN1
[+] ASN1_F_B64_WRITE_ASN1
[+] ASN1_F_BIO_NEW_NDEF
[+] ASN1_F_SMIME_READ_ASN1
[+] ASN1_F_SMIME_TEXT
[+] ASN1_R_ASN1_PARSE_ERROR
[+] ASN1_R_ASN1_SIG_PARSE_ERROR
[+] ASN1_R_BMPSTRING_IS_WRONG_LENGTH
[+] ASN1_R_INVALID_MIME_TYPE
[+] ASN1_R_MIME_NO_CONTENT_TYPE
[+] ASN1_R_MIME_PARSE_ERROR
[+] ASN1_R_MIME_SIG_PARSE_ERROR
[+] ASN1_R_NO_CONTENT_TYPE
[+] ASN1_R_NO_MULTIPART_BODY_FAILURE
[+] ASN1_R_NO_MULTIPART_BOUNDARY
[+] ASN1_R_NO_SIG_CONTENT_TYPE
[+] ASN1_R_SIG_INVALID_MIME_TYPE
[+] ASN1_R_STREAMING_NOT_SUPPORTED
[+] ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH

bn.h
[+] BN_DEC_FMT1
[+] BN_DEC_FMT2
[+] BN_LONG

crypto.h
[+] CRYPTO_NUM_LOCKS

dh.h
[+] DH_F_DH_COMPUTE_KEY
[+] DH_F_DH_GENERATE_KEY
[+] DH_R_KEY_SIZE_TOO_SMALL

dsa.h
[+] DSA_F_DSA_BUILTIN_KEYGEN
[+] DSA_F_DSA_BUILTIN_PARAMGEN
[+] DSA_F_DSA_GENERATE_PARAMETERS
[+] DSA_R_KEY_SIZE_TOO_SMALL
[+] DSA_R_NON_FIPS_METHOD
[+] DSA_R_OPERATION_NOT_ALLOWED_IN_FIPS_MODE

dtls1.h
[+] DTLS1_COOKIE_LENGTH

evp.h
[+] EVP_CIPH_MODE
[+] EVP_R_DISABLED_FOR_FIPS

rsa.h
[+] RSA_F_RSA_PRIVATE_ENCRYPT
[+] RSA_F_RSA_PUBLIC_DECRYPT
[+] RSA_F_RSA_SET_DEFAULT_METHOD
[+] RSA_F_RSA_SET_METHOD
[+] RSA_R_NON_FIPS_METHOD
[+] RSA_R_OPERATION_NOT_ALLOWED_IN_FIPS_MODE

ssl.h
[+] SSL_DEFAULT_CIPHER_LIST
[+] SSL_F_DTLS1_PREPROCESS_FRAGMENT
[+] SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC
[+] SSL_F_SSL3_GET_CERT_STATUS
[+] SSL_F_SSL3_NEW_SESSION_TICKET
[+] SSL_F_SSL_ADD_CLIENTHELLO_TLSEXT
[+] SSL_F_SSL_ADD_SERVERHELLO_TLSEXT
[+] SSL_F_SSL_CHECK_SERVERHELLO_TLSEXT
[+] SSL_F_SSL_CTX_SET_CLIENT_CERT_ENGINE
[+] SSL_F_SSL_PREPARE_CLIENTHELLO_TLSEXT
[+] SSL_F_SSL_PREPARE_SERVERHELLO_TLSEXT
[+] SSL_OP_ALL
[+] SSL_R_CLIENTHELLO_TLSEXT
[+] SSL_R_INVALID_STATUS_RESPONSE
[+] SSL_R_INVALID_TICKET_KEYS_LENGTH
[+] SSL_R_NO_CLIENT_CERT_METHOD
[+] SSL_R_NO_RENEGOTIATION
[+] SSL_R_PARSE_TLSEXT
[+] SSL_R_SERVERHELLO_TLSEXT
[+] SSL_R_SSL3_EXT_INVALID_SERVERNAME
[+] SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE
[+] SSL_R_TLS_INVALID_ECPOINTFORMAT_LIST

ssl3.h
[+] SSL3_CT_NUMBER
[+] SSL3_RT_MAX_COMPRESSED_LENGTH
[+] SSL3_RT_MAX_ENCRYPTED_LENGTH

tls1.h
[+] TLS_CT_NUMBER

x509.h
[+] X509_TRUST_MAX

x509_vfy.h
[+] X509_V_ERR_UNNESTED_RESOURCE

to the top

Header Files (2)

ssl.h
tls1.h

to the top

Shared Libraries (1)

libssl.so.1.0.0c

to the top

	Change	Effect
1	Base type of parameter sk has been changed from stack_st_X509_NAME to stack_st of different format.	This parameter may be incorrectly initialized by applications.
2	Base type of return value has been changed from stack_st_X509_NAME to stack_st of different format.	This parameter may be incorrectly initialized by applications.

	Change	Effect
1	Size of this type has been changed from 52 bytes to 40 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field extensions has been changed from stack_st_X509_EXTENSION to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.

	Change	Effect
1	Size of this type has been changed from 20 bytes to 16 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field entries has been changed from stack_st_X509_NAME_ENTRY to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
3	Field canon_enc has been renamed to hash.	Renaming of a field in data type may indicate a change in the semantic meaning of the field.

	Change	Effect
1	Size of this type has been changed from 72 bytes to 64 bytes.	The fields or parameters of such data type may be incorrectly initialized or accessed by old client applications.
2	Base type of field get_cert_methods has been changed from stack_st_X509_LOOKUP to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.
3	Base type of field objs has been changed from stack_st_X509_OBJECT to stack_st of different format.	This field may be incorrectly initialized or accessed by applications.