]>
granicus.if.org Git - libexpat/log
Rhodri James [Wed, 8 Feb 2017 18:28:39 +0000 (18:28 +0000)]
Check handling of long element names with namespaces
Rhodri James [Wed, 8 Feb 2017 15:26:18 +0000 (15:26 +0000)]
Refactor allocator test support
Sebastian Pipping [Sat, 15 Jul 2017 17:48:55 +0000 (19:48 +0200)]
Merge branch 'travis-ci' (issue #23)
Sebastian Pipping [Sat, 15 Jul 2017 17:42:18 +0000 (19:42 +0200)]
Travis CI: Ensure that Clang 4.0 is installed
Sebastian Pipping [Sat, 15 Jul 2017 17:35:38 +0000 (19:35 +0200)]
qa.sh: Use clang for mode "address" to detect memory leaks (#23)
Sebastian Pipping [Sat, 15 Jul 2017 17:29:48 +0000 (19:29 +0200)]
qa.sh: Rename BASE_FLAGS to BASE_COMPILE_FLAGS
Sebastian Pipping [Sat, 15 Jul 2017 17:15:49 +0000 (19:15 +0200)]
Merge branch 'make-check-memory' (issue #23)
Sebastian Pipping [Sat, 15 Jul 2017 17:12:29 +0000 (19:12 +0200)]
Changes: Document test suite memleak fixes
Sebastian Pipping [Sat, 15 Jul 2017 17:09:30 +0000 (19:09 +0200)]
minicheck.c: Protect against potential NULL dereference
Sebastian Pipping [Sat, 15 Jul 2017 17:07:30 +0000 (19:07 +0200)]
minicheck.c: Rename *_dispose to *_free
Rhodri James [Fri, 14 Jul 2017 16:55:51 +0000 (17:55 +0100)]
Free the external entity parser in external_entity_loader_set_encoding()
Removes the last of the memory leaks detected by AddressSanitizer
in the test suite (see Issue #23)
Rhodri James [Fri, 14 Jul 2017 16:53:56 +0000 (17:53 +0100)]
Free all the data structures associated with test cases.
Removes some of the memory leaks discovered by AddressSanitizer
in the test suite (see Issue #23)
Rhodri James [Fri, 14 Jul 2017 16:33:59 +0000 (17:33 +0100)]
Free the content model in dummy_element_decl_handler()
Removes some of the memory leaks found by AddressSanitizer in
the test suite (see Issue #23)
Rhodri James [Fri, 14 Jul 2017 16:22:54 +0000 (17:22 +0100)]
Free external entity parser in external_entity_param()
Removes some of the memory leaks detected by AddressSanitizer in
the test suite (see Issue #23).
Rhodri James [Fri, 14 Jul 2017 16:15:12 +0000 (17:15 +0100)]
Free external entity parser in external_entity_suspender()
Removes some memory leaks detected by AddressSanitizer in
the test suite (see Issue #23)
Rhodri James [Fri, 14 Jul 2017 16:12:31 +0000 (17:12 +0100)]
Free external entity parser in external_entity_param_checker()
Removes some of the memory leaks detected by AddressSanitizer
in the test suite (see Issue #23)
Rhodri James [Fri, 14 Jul 2017 15:59:24 +0000 (16:59 +0100)]
Free external entity parser in external_entity_resetter() when done
Deals with some of the memory leaks found by AddressSanitizer in
the test suite (Issue #23)
Rhodri James [Fri, 14 Jul 2017 15:50:53 +0000 (16:50 +0100)]
Free external entity parser in external_entity_loader() when done.
Removes some memory leaks detected by AddressSanitizer in the
test suite (see Issue #23)
Rhodri James [Fri, 14 Jul 2017 15:49:50 +0000 (16:49 +0100)]
Use correct parser to signal failure in external_entity_loader()
Sebastian Pipping [Wed, 12 Jul 2017 21:55:49 +0000 (23:55 +0200)]
xmlparse.c: Adjust _GNU_SOURCE define in favor of Python (#77)
Sebastian Pipping [Wed, 12 Jul 2017 20:51:25 +0000 (22:51 +0200)]
Changes: Improve 2.2.2 security notes
Sebastian Pipping [Wed, 12 Jul 2017 19:09:39 +0000 (21:09 +0200)]
xmlparse.c: Avoid _GNU_SOURCE macro redefinition (#77)
Sebastian Pipping [Wed, 12 Jul 2017 18:20:22 +0000 (20:20 +0200)]
xmlparse.c: Address compile warning with -DNDEBUG (issue #76)
Sebastian Pipping [Wed, 12 Jul 2017 18:15:18 +0000 (20:15 +0200)]
runtests.c: Protect against -DNDEBUG (issue #76 related)
Sebastian Pipping [Wed, 12 Jul 2017 16:58:20 +0000 (18:58 +0200)]
Prepare release version 2.2.2
Sebastian Pipping [Wed, 12 Jul 2017 16:59:39 +0000 (18:59 +0200)]
Bump version info from 7:3:6 to 7:4:6
Sebastian Pipping [Wed, 5 Jul 2017 20:49:51 +0000 (22:49 +0200)]
Move to C99 (#73) and fix ULL integer literals (#69)
Sebastian Pipping [Wed, 12 Jul 2017 16:32:16 +0000 (18:32 +0200)]
Travis CI: Use -DXML_POOR_ENTROPY to fix compilation
I would use libbsd but it's broken on Ubuntu trusty:
```
/usr/include/bsd/stdlib.h:52:27: error: unknown type name 'u_char'
void arc4random_addrandom(u_char *dat, int datlen);
^
```
https://travis-ci.org/libexpat/libexpat/jobs/
252880355
Sebastian Pipping [Wed, 12 Jul 2017 16:06:21 +0000 (18:06 +0200)]
Changes: Document low quality entropy detection (related to #43)
Sebastian Pipping [Wed, 12 Jul 2017 16:02:04 +0000 (18:02 +0200)]
xmlparse.c: Protect against accidental use of low quality entropy (issue #43)
Sebastian Pipping [Wed, 12 Jul 2017 15:47:55 +0000 (17:47 +0200)]
xmlparse.c: Move includes up (to reduce chance of macro interference)
Commit
6ee259bc84550061979c11a57892a4294a78155a is related.
Sebastian Pipping [Wed, 12 Jul 2017 14:23:03 +0000 (16:23 +0200)]
Changes: Communicate security aspects in detail (#60)
Rhodri James [Mon, 3 Jul 2017 16:47:00 +0000 (17:47 +0100)]
Fix protocolEncodingName. (pull request #70)
Ensure that protocolEncodingName is always either NULL or points
to the correct encoding for the parser, even if the parser is
reset.
Sebastian Pipping [Sun, 9 Jul 2017 20:41:18 +0000 (22:41 +0200)]
Merge branch 'cmake-fixes-from-vtk' (pull request #72)
Sebastian Pipping [Sun, 9 Jul 2017 20:39:49 +0000 (22:39 +0200)]
Changes: Mention CMake improvements
Ben Boeckel [Wed, 2 Nov 2016 12:11:07 +0000 (08:11 -0400)]
cmake: use the current binary directory
This is not necessarily the top-level CMake directory (such as when
expat is included inside of another project's source tree directly), so
we should instead use the one relative to this `CMakeLists.txt` file.
Ben Boeckel [Wed, 26 Oct 2016 17:55:48 +0000 (13:55 -0400)]
ConfigureChecks: configure into the build tree
This helps to keep the source tree cleaner.
Ben Boeckel [Wed, 26 Oct 2016 17:55:47 +0000 (13:55 -0400)]
cmake: include the current directory's ConfigureChecks.cmake
The file we want is always in the same directory. The
`ConfigureChecks.cmake` file is included in many projects and the wrong
`CMAKE_MODULE_PATH` can cause the wrong one to be used here.
Ben Boeckel [Wed, 26 Oct 2016 17:55:47 +0000 (13:55 -0400)]
cmake: remove executable bits from cmake files
These files are not executable and should not be stored as such inside
of the repository.
Sebastian Pipping [Wed, 5 Jul 2017 12:00:55 +0000 (14:00 +0200)]
siphash.h: Ensure <=80 line length
Sebastian Pipping [Wed, 5 Jul 2017 12:06:37 +0000 (14:06 +0200)]
siphash.h: Add const qualifiers
Sebastian Pipping [Sat, 1 Jul 2017 15:30:19 +0000 (17:30 +0200)]
Changes: Add MOX reference
Sebastian Pipping [Sat, 1 Jul 2017 15:26:11 +0000 (17:26 +0200)]
Merge branch 'xmlts-local-cache' (pull request #67)
Rhodri James [Tue, 27 Jun 2017 15:15:55 +0000 (16:15 +0100)]
Add means to avoid downloading xmlts.zip in coverage tests
Modifies target tests/xmlts.zip so that if the environment variable
XMLTS_DIR is set, the xmlts.zip will be copied from there rather
than downloaded again from xml.org. I currently need this
because I have a very limited internet connection.
Sebastian Pipping [Sat, 1 Jul 2017 12:52:24 +0000 (14:52 +0200)]
xmlparse.c: Move includes up to fix macro interference
Guilty is our macro "buffer" resolving to "parser->m_buffer".
Issue #59 is related.
Sebastian Pipping [Sat, 1 Jul 2017 12:41:52 +0000 (14:41 +0200)]
Changes: Mention parameter validation bug
Sebastian Pipping [Sat, 1 Jul 2017 12:33:57 +0000 (14:33 +0200)]
xmlparse.c: Fix parser NULL dereference
errorCode is a macro resolving to parser->m_errorCode.
Issue #59 is related.
Sebastian Pipping [Sat, 1 Jul 2017 11:13:05 +0000 (13:13 +0200)]
Merge branch 'autoreconf-dash-fix' (pull request #68)
Sebastian Pipping [Sat, 1 Jul 2017 11:12:29 +0000 (13:12 +0200)]
Changes: Mention #68, give credit to Kerin Millar
Kerin Millar [Thu, 29 Jun 2017 15:54:28 +0000 (16:54 +0100)]
conftools/get-version.sh: Fix unsafe expansions of $hdr
Also, use $() instead of ``. See http://mywiki.wooledge.org/BashFAQ/082.
Kerin Millar [Thu, 29 Jun 2017 15:51:18 +0000 (16:51 +0100)]
conftools/get-version.sh: Use printf rather than try to infer non-portable echo options
Sebastian Pipping [Wed, 28 Jun 2017 18:09:28 +0000 (20:09 +0200)]
Travis CI: Install dos2unix (#66)
Sebastian Pipping [Wed, 28 Jun 2017 17:42:46 +0000 (19:42 +0200)]
Merge branch 'make-run-xmltest-windows' (#66)
Sebastian Pipping [Wed, 28 Jun 2017 16:57:24 +0000 (18:57 +0200)]
Makefile.in: Waterproof against differences in line endings
For MinGW cross-compilation, second try.
Sebastian Pipping [Wed, 28 Jun 2017 14:03:52 +0000 (16:03 +0200)]
Merge branch 'mingw-crossdev-wine-linuxmint' (#64)
Sebastian Pipping [Tue, 27 Jun 2017 21:23:03 +0000 (23:23 +0200)]
xmlwf/readfilemap.c: Address -Wsign-compare warning
read:
http://pubs.opengroup.org/onlinepubs/
009695399 /functions/read.html
Sebastian Pipping [Tue, 27 Jun 2017 21:09:18 +0000 (23:09 +0200)]
coverage.sh: Symlink libwinpthread-1.dll as well for Linux Mint
Sebastian Pipping [Sun, 25 Jun 2017 22:31:29 +0000 (00:31 +0200)]
tests: Address -Wformat compile warnings
Sebastian Pipping [Sun, 25 Jun 2017 18:15:28 +0000 (20:15 +0200)]
Changes: Give credit to Viktor Szakats (#61)
Viktor Szakats [Sun, 25 Jun 2017 17:42:17 +0000 (19:42 +0200)]
LoadLibrary() call to work correctly regardless of _UNICODE setting
This solution allows the build system to chose whichever mode, instead
of forcing the "ANSI" alternative of the API.
Sebastian Pipping [Sun, 25 Jun 2017 15:53:25 +0000 (17:53 +0200)]
Changes: Mention fix to #60
Václav Slavík [Sun, 25 Jun 2017 15:38:11 +0000 (17:38 +0200)]
Fix building on win32 if _UNICODE is defined
Explicitly use LoadLibraryA() instead of the LoadLibrary() macro, which
may expand to LoadLibraryW() depending on build configuration.
Sebastian Pipping [Sat, 24 Jun 2017 14:11:09 +0000 (16:11 +0200)]
coverage.sh: Fix two comment typos
Sebastian Pipping [Fri, 23 Jun 2017 19:06:56 +0000 (21:06 +0200)]
Merge branch 'haypo-win64_warn' (pull request #58)
Sebastian Pipping [Fri, 23 Jun 2017 19:00:33 +0000 (21:00 +0200)]
siphash.h: Compress change log a bit
Sebastian Pipping [Fri, 23 Jun 2017 18:57:30 +0000 (20:57 +0200)]
Changes/siphash.h: Extend log, give credit to Victor Stinner
Victor Stinner [Fri, 23 Jun 2017 08:39:26 +0000 (10:39 +0200)]
Fix compiler warnings on Windows 64-bit
Explicitly cast on integer downcasting to fix compiler warnings.
Sebastian Pipping [Thu, 22 Jun 2017 18:38:04 +0000 (20:38 +0200)]
Merge branch 'travis-matrix' (pull request #54)
Sebastian Pipping [Thu, 22 Jun 2017 18:31:21 +0000 (20:31 +0200)]
Travis CI: No need to download upfront any more
Since
e9e329b4f44fdc76d854764c86ca99816a890e44
Sebastian Pipping [Thu, 22 Jun 2017 18:26:53 +0000 (20:26 +0200)]
siphash.h: Fix duplicate/leftover line in the header (#57)
Sebastian Pipping [Mon, 19 Jun 2017 18:37:34 +0000 (20:37 +0200)]
Changes: Mention getrandom detection issues on macOS (#52)
Muhammad Kaisar Arkhan [Mon, 19 Jun 2017 12:11:34 +0000 (19:11 +0700)]
Travis CI: Use build matrix
Using the build matrix can help speeding up the CI since they run
simultaneously.
Closes https://github.com/libexpat/libexpat/issues/41
Sebastian Pipping [Sun, 18 Jun 2017 20:03:01 +0000 (22:03 +0200)]
siphash.h: Address lack of stdint.h for Visual Studio 2003-2008
Sebastian Pipping [Sun, 18 Jun 2017 19:50:50 +0000 (21:50 +0200)]
Changes: Start post-2.2.1 section
Sebastian Pipping [Sun, 18 Jun 2017 16:55:10 +0000 (18:55 +0200)]
configure.ac: Fix mis-detection of getrandom on Debian GNU/kFreeBSD (#50)
There is no such thing but we need to link (not just compile) to realize.
spzeidler [Sun, 18 Jun 2017 12:30:22 +0000 (14:30 +0200)]
Fix sh syntax in configure.ac (#49)
The old '==' sh-is-not-C issue
It doesn't matter in bash, but some other sh don't like it, so it's a portability issue
Karl Waclawek [Sat, 17 Jun 2017 16:07:38 +0000 (12:07 -0400)]
Merge branch 'master' of https://github.com/libexpat/libexpat
Karl Waclawek [Sat, 17 Jun 2017 16:05:48 +0000 (12:05 -0400)]
Windows release: Update README, remove VC++ 6.0 files from installer, fix runtests.vcxproj file.
Sebastian Pipping [Sat, 17 Jun 2017 15:44:32 +0000 (17:44 +0200)]
Changes: Add link for SipHash commits
Sebastian Pipping [Sat, 17 Jun 2017 10:04:41 +0000 (12:04 +0200)]
Changes: Add reference to SipHash ticket
Sebastian Pipping [Sat, 17 Jun 2017 10:02:29 +0000 (12:02 +0200)]
win32/expat.iss: Install AUTHORS file, too
Sebastian Pipping [Fri, 16 Jun 2017 23:56:13 +0000 (01:56 +0200)]
Bump version, year, and ID for 2.2.1
Also fill earliest release date
Sebastian Pipping [Fri, 16 Jun 2017 23:44:00 +0000 (01:44 +0200)]
Changes: Mention address leak, add MOX-??? references
Sebastian Pipping [Wed, 14 Jun 2017 11:53:40 +0000 (13:53 +0200)]
Bump version info from 7:2:6 to 7:3:6
Sebastian Pipping [Fri, 16 Jun 2017 23:10:11 +0000 (01:10 +0200)]
Changes: Mention SipHash
Sebastian Pipping [Fri, 16 Jun 2017 23:04:09 +0000 (01:04 +0200)]
Merge branch 'siphash'
Sebastian Pipping [Fri, 16 Jun 2017 23:01:17 +0000 (01:01 +0200)]
Merge branch 'cve-2017-9233'
Sebastian Pipping [Wed, 14 Jun 2017 12:09:58 +0000 (14:09 +0200)]
Changes: Add CVE-2017-9233 info to change log
Rhodri James [Wed, 14 Jun 2017 21:45:07 +0000 (23:45 +0200)]
xmlparse.c: Fix external entity infinite loop bug (CVE-2017-9233)
Rhodri James [Wed, 14 Jun 2017 21:44:45 +0000 (23:44 +0200)]
Tests: Cover external entity infinite loop bug
Sebastian Pipping [Fri, 16 Jun 2017 22:56:27 +0000 (00:56 +0200)]
Changes: Add call for help
Sebastian Pipping [Fri, 16 Jun 2017 22:43:33 +0000 (00:43 +0200)]
Add AUTHORS file
$ git log | fgrep Author: | sed 's, <[^>]\+>,,' | sort | uniq -c | awk '{ if (int($1) >= 20) print }' | sed 's,.*: ,,' | sort
Sebastian Pipping [Fri, 16 Jun 2017 19:30:01 +0000 (21:30 +0200)]
Add master readme as a symlink
Sebastian Pipping [Fri, 16 Jun 2017 19:06:16 +0000 (21:06 +0200)]
Remove amigaconfig.h and macconfig.h (issue #14)
Sebastian Pipping [Fri, 16 Jun 2017 18:47:55 +0000 (20:47 +0200)]
xmlparse.c: Polish ENTROPY_DEBUG
The cast fixes a compile warning.
Sebastian Pipping [Fri, 16 Jun 2017 18:38:52 +0000 (20:38 +0200)]
MinGW: No longer ignore expat_config.h
Previously, "#define XML_CONTEXT_BYTES 1024" from winconfig.h
would render --disable-xml-context ineffective.
Sebastian Pipping [Thu, 15 Jun 2017 21:13:47 +0000 (23:13 +0200)]
Address MemorySanitizer mis-report on SYS_getrandom
Sebastian Pipping [Thu, 15 Jun 2017 20:16:38 +0000 (22:16 +0200)]
Changes: Mention new error code XML_ERROR_INVALID_ARGUMENT
Sebastian Pipping [Thu, 15 Jun 2017 20:04:54 +0000 (22:04 +0200)]
Introduce random-based SHA256 release identifier
Idea is to ease finding bundles of Expat in the wild in the future.
PS: If you need to bundle Expat, please keep your copy up to date.
Sebastian Pipping [Wed, 14 Jun 2017 20:41:44 +0000 (22:41 +0200)]
coverage.sh: Add Windows MinGW cross-compilation