v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():
ByteString.UnmarshalCBOR()RawTag.UnmarshalCBOR()SimpleValue.UnmarshalCBOR()
The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.
To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.
Before Upgrading to v2.7.1
v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.
v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.
What's Changed
- Update error handling in RawTag.UnmarshalCBOR(), etc. to match cbor.Unmarshal() by @fxamacker in https://github.com/fxamacker/cbor/pull/636
- Optimize internal calls to UnmarshalCBOR() by @fxamacker in https://github.com/fxamacker/cbor/pull/648
Special Thanks
Thanks @thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!
Full Changelog: https://github.com/fxamacker/cbor/compare/v2.7.0...v2.7.1