Skip to content

0.15.0

Latest
Latest

Choose a tag to compare

View all tags
@sentry-release-bot sentry-release-bot released this 11 Jun 11:28
0.15.0
42ca73a

Breaking:

  • sentry_value_incref now returns sentry_value_t and sentry_value_decref returns int (0 if freed). (#1763)

Features:

  • Native: add opt-in async crash upload mode so crashed apps can exit early after crash data is captured, while the crash daemon finishes potentially large uploads in the background. (#1739)
  • Native/Linux: symbolicate stack frames in the crash daemon. (#1747, #1764)
  • Add a transfer_timeout option for SDK-managed HTTP transports. (#1741)
  • Apple: use os_sync_wait_on_address for the level-triggered waitable flag in the batcher on modern macOS(14.4+) and iOS(17.4+). (#1765)
  • Native/macOS: add thread names. (#1766)
  • Add Upload-Metadata header to TUS requests. (#1795)

Fixes:

  • Native/macOS: crash reports now include full stack traces for all threads. Previously, non-crashing threads showed only a single frame. (#1768)
  • Native/Linux: resolve function names for the crashed thread's stacktrace from on-disk ELF symbol tables in the crash daemon, so the most important thread gets symbolicated without ptrace. (#1764)
  • Finish active trace on crash. (#1667)
  • Native/macOS: fix module image_size computation, which could have caused the symbolicator to misattribute every frame to the lowest-addressed image (typically dyld or libsystem). (#1740)
  • Native: raise SENTRY_CRASH_MAX_MODULES from 512 to 2048 so processes that load many shared libraries no longer have their minidump module list truncated, which left frames in unrecorded modules without a debug_id and unsymbolicatable.
    (#1738)
  • Reject overly deep JSON and msgpack payloads during deserialization. (#1727, #1748)
  • Read lengths for variadic fingerprints. (#1730)
  • Guard against JSON token allocation overflow on 32-bit platforms. (#1733)
  • Windows: fix HTTP rate limit response header parsing. (#1732)
  • POSIX: prevent condition-variable timeout overflow from busy-spinning flush and shutdown waits. (#1731)
  • Native/macOS: fix thread stack descriptor. (#1726)
  • Native/macOS: honor the system_crash_reporter_enabled option. (#1743)
  • Cap rate-limit retry-after values at 24 hours to prevent a MITM-provided response from disabling event delivery for the process lifetime. (#1744)
  • Fix a shutdown-time use-after-free window in sentry_close(). (#1750)
  • curl: free duplicate HTTP response headers to avoid potential leaks. (#1791)
  • Native: validate ELF header entry sizes. (#1746)
  • Native: clamp module_count from the shared crash context. (#1770)
  • Prevent database cleanup from following symlinks in run and cache directories. (#1751)
  • Structured logs: respect printf argument widths when extracting log parameters to avoid stack-data disclosure and corrupted attributes on 32-bit platforms. (#1752)
  • Fix TOCTOU races in transaction/span refcounting by switching to the atomic decref return value. (#1763)
  • Fix signed-to-unsigned cast in rate-limit parsing to prevent permanent event suppression. (#1790)
  • Fix a potential out-of-bounds read when parsing non-NUL-terminated sentry-trace headers. (#1749)
  • Harden ELF note parsing against overflow and OOB reads. (#1773)
  • Fix memory leak in session deserialization on malformed cached files. (#1789)
  • Fix division by zero when breadcrumbs are disabled. (#1767)
  • Native: escape JSON attachments. (#1771)
  • Reject NaN sample rates. (#1788)
  • Handle memory allocation failures during JSON serialization to prevent truncated output. (#1772)
  • Guard against overflow in string cloning in internal string utilities. (#1787)
  • Fix a file descriptor leak in old-run processing. (#1792)
Assets 4
Loading