]> granicus.if.org Git - libexpat/log
libexpat
7 years agoValidate parser parameter to XML_SetEncoding
Rhodri James [Tue, 25 Apr 2017 14:49:05 +0000 (15:49 +0100)]
Validate parser parameter to XML_SetEncoding

7 years agoValidate parser parameter to XML_ParserReset()
Rhodri James [Tue, 25 Apr 2017 14:41:01 +0000 (15:41 +0100)]
Validate parser parameter to XML_ParserReset()

7 years agoFix misuse of realloc in tcase_add_test()
Rhodri James [Wed, 24 May 2017 12:23:31 +0000 (13:23 +0100)]
Fix misuse of realloc in tcase_add_test()

7 years agoMerge branch 'mmap-int-max' (fixes #28)
Sebastian Pipping [Wed, 24 May 2017 16:52:27 +0000 (18:52 +0200)]
Merge branch 'mmap-int-max' (fixes #28)

7 years agoChanges: Document fix for #28
Sebastian Pipping [Wed, 24 May 2017 16:48:16 +0000 (18:48 +0200)]
Changes: Document fix for #28

7 years agoDisable memory-mapping for files larger than INT_MAX / 2 + 1
Sebastian Pipping [Mon, 22 May 2017 23:48:52 +0000 (01:48 +0200)]
Disable memory-mapping for files larger than INT_MAX / 2 + 1

7 years agoMakefile: Make xmlwf/filemap.o depend on xmlwf/filemap.h
Sebastian Pipping [Tue, 23 May 2017 20:18:47 +0000 (22:18 +0200)]
Makefile: Make xmlwf/filemap.o depend on xmlwf/filemap.h

7 years agoxmlwf/win32filemap.c: Add two missing calls to CloseHandle
Sebastian Pipping [Mon, 22 May 2017 23:26:17 +0000 (01:26 +0200)]
xmlwf/win32filemap.c: Add two missing calls to CloseHandle

7 years agoMerge branch 'cross-coverage' (pull request #27)
Sebastian Pipping [Tue, 16 May 2017 17:56:57 +0000 (19:56 +0200)]
Merge branch 'cross-coverage' (pull request #27)

7 years agoRemove in favor of https://libexpat.github.io/ (issue #1)
Sebastian Pipping [Thu, 11 May 2017 07:02:03 +0000 (09:02 +0200)]
Remove in favor of https://libexpat.github.io/ (issue #1)

As htdocs/index.html included a change log: A (more recent)
plain text version of the change log can be found at expat/Changes.

7 years agoChanges: Group security notes for 2.1.0 as done in htdocs/index.html
Sebastian Pipping [Thu, 11 May 2017 06:53:47 +0000 (08:53 +0200)]
Changes: Group security notes for 2.1.0 as done in htdocs/index.html

7 years agocoverage.sh: Announce commands
Sebastian Pipping [Mon, 8 May 2017 18:20:50 +0000 (20:20 +0200)]
coverage.sh: Announce commands

7 years agocoverage.sh: Indent output
Sebastian Pipping [Mon, 8 May 2017 18:20:28 +0000 (20:20 +0200)]
coverage.sh: Indent output

7 years agocoverage.sh: Show output of "make check run-xmltest"
Sebastian Pipping [Mon, 8 May 2017 18:19:43 +0000 (20:19 +0200)]
coverage.sh: Show output of "make check run-xmltest"

7 years agoAdd script to collect and combine code coverage across different build configurations
Sebastian Pipping [Sat, 6 May 2017 21:51:42 +0000 (23:51 +0200)]
Add script to collect and combine code coverage across different build configurations

e.g. with XML_CONTEXT_BYTES defined and without

7 years agoMerge branch 'pool-grow-overflow'
Sebastian Pipping [Fri, 5 May 2017 23:42:29 +0000 (01:42 +0200)]
Merge branch 'pool-grow-overflow'

7 years agoAdd issue #25 in change log
Sebastian Pipping [Fri, 5 May 2017 20:10:44 +0000 (22:10 +0200)]
Add issue #25 in change log

7 years agoDetect integer overflow in poolGrow function (issue #25)
Sebastian Pipping [Fri, 5 May 2017 20:04:02 +0000 (22:04 +0200)]
Detect integer overflow in poolGrow function (issue #25)

7 years agoExtract function poolBytesToAllocateFor to add overflow detection (issue #25)
Sebastian Pipping [Fri, 5 May 2017 19:53:12 +0000 (21:53 +0200)]
Extract function poolBytesToAllocateFor to add overflow detection (issue #25)

7 years agoMakefile.in: Have "make clean" remove tests/memcheck.o (fixes #22, related #17)
Sebastian Pipping [Wed, 3 May 2017 16:22:21 +0000 (18:22 +0200)]
Makefile.in: Have "make clean" remove tests/memcheck.o (fixes #22, related #17)

7 years agoChanges: Document CVE-2016-9063
Sebastian Pipping [Mon, 1 May 2017 13:53:47 +0000 (15:53 +0200)]
Changes: Document CVE-2016-9063

7 years agoDetect integer overflow (CVE-2016-9063)
Sebastian Pipping [Wed, 12 Apr 2017 21:55:45 +0000 (23:55 +0200)]
Detect integer overflow (CVE-2016-9063)

Needs XML_CONTEXT_BYTES to be _undefined_ to trigger,
default is defined and set to 1024.

Previously patched downstream, e.g.
https://sources.debian.net/src/expat/2.2.0-2/debian/patches/CVE-2016-9063.patch/
https://bug1274777.bmoattachments.org/attachment.cgi?id=8755538

This version avoids undefined behavior from _signed_ integer overflow.

Signed-off-by: Pascal Cuoq <cuoq@trust-in-soft.com>
7 years agotests: Fix test_byte_info_at_cdata for undefined XML_CONTEXT_BYTES
Sebastian Pipping [Tue, 2 May 2017 22:37:02 +0000 (00:37 +0200)]
tests: Fix test_byte_info_at_cdata for undefined XML_CONTEXT_BYTES

7 years agoDrop Open Watcom specific code (issues #14 and #21)
Sebastian Pipping [Sun, 30 Apr 2017 23:13:40 +0000 (01:13 +0200)]
Drop Open Watcom specific code (issues #14 and #21)

7 years agohtdocs/index.html: Update Git repo and bug report links (issue #1)
Sebastian Pipping [Wed, 26 Apr 2017 21:38:43 +0000 (23:38 +0200)]
htdocs/index.html: Update Git repo and bug report links (issue #1)

7 years agoChanges: Document fix to issue #17
Sebastian Pipping [Wed, 26 Apr 2017 17:05:08 +0000 (19:05 +0200)]
Changes: Document fix to issue #17

7 years agoMANIFEST: Add memcheck.{c,h} (issue #17)
Sebastian Pipping [Tue, 25 Apr 2017 22:08:03 +0000 (00:08 +0200)]
MANIFEST: Add memcheck.{c,h} (issue #17)

7 years agoTidy up attribute prefix bindings on error (fixes #17)
Rhodri James [Tue, 11 Apr 2017 11:44:25 +0000 (12:44 +0100)]
Tidy up attribute prefix bindings on error (fixes #17)

7 years agoPull freeing of attribute bindings into a static function (issue #17)
Rhodri James [Tue, 11 Apr 2017 11:42:12 +0000 (12:42 +0100)]
Pull freeing of attribute bindings into a static function (issue #17)

7 years agoTest to catch Issue #17
Rhodri James [Tue, 25 Apr 2017 22:01:56 +0000 (00:01 +0200)]
Test to catch Issue #17

7 years agoexpat.spec: Pull version back in sync
Sebastian Pipping [Tue, 25 Apr 2017 21:47:00 +0000 (23:47 +0200)]
expat.spec: Pull version back in sync

7 years agoChanges: Document droppings (issue #14)
Sebastian Pipping [Tue, 25 Apr 2017 21:36:46 +0000 (23:36 +0200)]
Changes: Document droppings (issue #14)

7 years ago*.dsp,*.dsw: Drop Visual Studio 6.0 (issue #14)
Sebastian Pipping [Tue, 25 Apr 2017 21:11:48 +0000 (23:11 +0200)]
*.dsp,*.dsw: Drop Visual Studio 6.0 (issue #14)

7 years agowatcom: Drop Open Watcom build system (issue #14)
Sebastian Pipping [Tue, 25 Apr 2017 21:10:21 +0000 (23:10 +0200)]
watcom: Drop Open Watcom build system (issue #14)

7 years agovms: Drop OpenVMS build system (issue #14)
Sebastian Pipping [Tue, 25 Apr 2017 21:09:59 +0000 (23:09 +0200)]
vms: Drop OpenVMS build system (issue #14)

7 years agobcb5: Drop Borland build system (issue #14)
Sebastian Pipping [Tue, 25 Apr 2017 21:08:58 +0000 (23:08 +0200)]
bcb5: Drop Borland build system (issue #14)

7 years agoamiga: Drop AmigaOS 4.x code (issue #14)
Sebastian Pipping [Tue, 25 Apr 2017 21:08:30 +0000 (23:08 +0200)]
amiga: Drop AmigaOS 4.x code (issue #14)

7 years agoconfigure.ac: Add --(en|dis)able-xml-context
Sebastian Pipping [Wed, 12 Apr 2017 21:41:44 +0000 (23:41 +0200)]
configure.ac: Add --(en|dis)able-xml-context

7 years agoutf8_toUtf8: Cut off partial characters in case of sufficient space, too (closes...
Sebastian Pipping [Wed, 29 Mar 2017 17:11:16 +0000 (19:11 +0200)]
utf8_toUtf8: Cut off partial characters in case of sufficient space, too (closes #16)

Also, report XML_CONVERT_INPUT_INCOMPLETE properly.

7 years agoAddress 64bit MinGW compile warning (fixes #15)
Sebastian Pipping [Thu, 16 Mar 2017 14:51:33 +0000 (15:51 +0100)]
Address 64bit MinGW compile warning (fixes #15)

../../../xmlparse.c: In function â€˜generate_hash_secret_salt’:
../../../xmlparse.c:725:42: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast]
       gather_time_entropy() ^ getpid() ^ (unsigned long)parser;
                                          ^

Thanks to Viktor Szakats.

7 years ago"make run-xmltest" order instability once more (issue #13)
Sebastian Pipping [Mon, 13 Mar 2017 20:20:56 +0000 (21:20 +0100)]
"make run-xmltest" order instability once more (issue #13)

7 years agoMakefile: Turn xmlts.zip download to https
Sebastian Pipping [Mon, 13 Mar 2017 17:59:01 +0000 (18:59 +0100)]
Makefile: Turn xmlts.zip download to https

7 years agoTravis: Have xmlts.zip bypass git clean -X
Sebastian Pipping [Mon, 13 Mar 2017 17:52:09 +0000 (18:52 +0100)]
Travis: Have xmlts.zip bypass git clean -X

7 years agoTravis: Inline .travis.sh for better integration
Sebastian Pipping [Mon, 13 Mar 2017 17:43:19 +0000 (18:43 +0100)]
Travis: Inline .travis.sh for better integration

7 years agoTravis: Pull xmlts.zip download out of script section
Sebastian Pipping [Mon, 13 Mar 2017 17:27:11 +0000 (18:27 +0100)]
Travis: Pull xmlts.zip download out of script section

.. so that temporary download issues count for setup issues,
not script execution

7 years agoTravis: Move from sudo to apt addon
Sebastian Pipping [Mon, 13 Mar 2017 17:23:54 +0000 (18:23 +0100)]
Travis: Move from sudo to apt addon

7 years agoCheck that version information is consistent
Rhodri James [Wed, 8 Feb 2017 15:16:19 +0000 (15:16 +0000)]
Check that version information is consistent

7 years agoTest XML_ErrorString range checking
Rhodri James [Wed, 8 Feb 2017 14:40:37 +0000 (14:40 +0000)]
Test XML_ErrorString range checking

7 years agoTests: Make dealing with global parser instance more robust
Sebastian Pipping [Mon, 13 Mar 2017 17:04:04 +0000 (18:04 +0100)]
Tests: Make dealing with global parser instance more robust

7 years agoFree the content model when used
Rhodri James [Wed, 8 Feb 2017 14:27:44 +0000 (14:27 +0000)]
Free the content model when used

7 years agoAdd test coverage of XML_GetInputContext()
Rhodri James [Wed, 8 Feb 2017 14:15:21 +0000 (14:15 +0000)]
Add test coverage of XML_GetInputContext()

7 years agoTests: Address wildcard expansion order variance (fixes #13)
Sebastian Pipping [Mon, 13 Mar 2017 16:39:14 +0000 (17:39 +0100)]
Tests: Address wildcard expansion order variance (fixes #13)

7 years agoCheck byte information behaviour in handlers
Rhodri James [Wed, 8 Feb 2017 14:03:31 +0000 (14:03 +0000)]
Check byte information behaviour in handlers

7 years agoExtend coverage of byte information function tests
Rhodri James [Wed, 8 Feb 2017 13:54:59 +0000 (13:54 +0000)]
Extend coverage of byte information function tests

7 years agoTest byte information functions
Rhodri James [Wed, 8 Feb 2017 13:31:42 +0000 (13:31 +0000)]
Test byte information functions

7 years agoImprove test coverage of XML_ResumeParser
Rhodri James [Wed, 8 Feb 2017 13:06:32 +0000 (13:06 +0000)]
Improve test coverage of XML_ResumeParser

7 years agoExtend test coverage of XML_ResumeParser
Rhodri James [Wed, 8 Feb 2017 12:54:51 +0000 (12:54 +0000)]
Extend test coverage of XML_ResumeParser

7 years agoExtend test coverage of XML_ResumeParser()
Rhodri James [Wed, 8 Feb 2017 12:06:30 +0000 (12:06 +0000)]
Extend test coverage of XML_ResumeParser()

7 years agoTest XML_StopParser() in external entity parsing
Rhodri James [Wed, 8 Feb 2017 11:59:45 +0000 (11:59 +0000)]
Test XML_StopParser() in external entity parsing

7 years agoIncrease test coverage of XML_StopParser
Rhodri James [Tue, 7 Feb 2017 19:43:44 +0000 (19:43 +0000)]
Increase test coverage of XML_StopParser

7 years agoFix __func__ for -std=c89 with GCC 5.4.0 (fixes #12)
Sebastian Pipping [Wed, 8 Mar 2017 21:20:42 +0000 (22:20 +0100)]
Fix __func__ for -std=c89 with GCC 5.4.0 (fixes #12)

GCC 5.4.0 does not define __STDC_VERSION__ when -std=c89 is passed.

7 years agoconfigure.ac: Fix const correctness in check for __func__
Sebastian Pipping [Wed, 8 Mar 2017 21:12:26 +0000 (22:12 +0100)]
configure.ac: Fix const correctness in check for __func__

7 years agoExtend tests of XML_GetBuffer for still more coverage
Rhodri James [Tue, 7 Feb 2017 18:27:01 +0000 (18:27 +0000)]
Extend tests of XML_GetBuffer for still more coverage

7 years agoExtend XML_GetBuffer testing coverage
Rhodri James [Tue, 7 Feb 2017 18:05:55 +0000 (18:05 +0000)]
Extend XML_GetBuffer testing coverage

7 years agoFurther test coverage of XML_GetBuffer
Rhodri James [Tue, 7 Feb 2017 17:23:11 +0000 (17:23 +0000)]
Further test coverage of XML_GetBuffer

7 years agoExtend tests to XML_GetBuffer in various circumstances
Rhodri James [Tue, 7 Feb 2017 15:12:55 +0000 (15:12 +0000)]
Extend tests to XML_GetBuffer in various circumstances

7 years agoTest XML_ParseBuffer API in various parse states
Rhodri James [Tue, 7 Feb 2017 15:00:25 +0000 (15:00 +0000)]
Test XML_ParseBuffer API in various parse states

7 years agoExtend empty string parse tests
Rhodri James [Tue, 7 Feb 2017 12:49:13 +0000 (12:49 +0000)]
Extend empty string parse tests

7 years agoTest parsing a zero-length string
Rhodri James [Tue, 7 Feb 2017 11:55:51 +0000 (11:55 +0000)]
Test parsing a zero-length string

7 years agoCheck parsing is faulted once parser is FINISHED
Rhodri James [Tue, 7 Feb 2017 11:46:55 +0000 (11:46 +0000)]
Check parsing is faulted once parser is FINISHED

7 years agoCheck XML_Parse faults parsing while suspended
Rhodri James [Mon, 6 Feb 2017 18:58:59 +0000 (18:58 +0000)]
Check XML_Parse faults parsing while suspended

7 years agoCheck manual setting of hash salt
Rhodri James [Mon, 6 Feb 2017 18:53:01 +0000 (18:53 +0000)]
Check manual setting of hash salt

7 years agoCheck entity parsing policy can't be changed mid-parse
Rhodri James [Mon, 6 Feb 2017 18:30:36 +0000 (18:30 +0000)]
Check entity parsing policy can't be changed mid-parse

7 years agoTest XML declaration handler
Rhodri James [Tue, 21 Feb 2017 12:47:28 +0000 (12:47 +0000)]
Test XML declaration handler

7 years agoCheck skipped entity handler
Rhodri James [Tue, 21 Feb 2017 12:43:22 +0000 (12:43 +0000)]
Check skipped entity handler

7 years agoCheck clearing of external entity handler parameter
Rhodri James [Tue, 21 Feb 2017 12:37:43 +0000 (12:37 +0000)]
Check clearing of external entity handler parameter

7 years agoTest NotStandalone handlers
Rhodri James [Mon, 6 Feb 2017 17:11:52 +0000 (17:11 +0000)]
Test NotStandalone handlers

7 years agoCall namespace declaration start and end handlers
Rhodri James [Mon, 6 Feb 2017 16:55:29 +0000 (16:55 +0000)]
Call namespace declaration start and end handlers

7 years agoEnsure unparsed entity handler gets set
Rhodri James [Mon, 6 Feb 2017 16:35:04 +0000 (16:35 +0000)]
Ensure unparsed entity handler gets set

This adds test coverage for an obsolete handler that is supported
only for backwards compatibility.  While it is supported, we should
test it.

7 years agoExtend coverage to XML_{Start|End}DoctypeDeclHandler
Rhodri James [Mon, 6 Feb 2017 16:27:09 +0000 (16:27 +0000)]
Extend coverage to XML_{Start|End}DoctypeDeclHandler

7 years agoExtend test_return_ns_triplet() to improve code coverage
Rhodri James [Mon, 6 Feb 2017 15:49:43 +0000 (15:49 +0000)]
Extend test_return_ns_triplet() to improve code coverage

7 years agoTest non-NULL external entity ref handler parameter
Rhodri James [Tue, 21 Feb 2017 12:10:20 +0000 (12:10 +0000)]
Test non-NULL external entity ref handler parameter

7 years agoExtend test of passing parser as userData
Rhodri James [Tue, 21 Feb 2017 11:46:52 +0000 (11:46 +0000)]
Extend test of passing parser as userData

7 years agoConfigure Travis CI (issue #2)
Sebastian Pipping [Sun, 19 Feb 2017 20:31:02 +0000 (21:31 +0100)]
Configure Travis CI (issue #2)

7 years agoTest XML_SetEncoding against memory allocation failures
Rhodri James [Fri, 3 Feb 2017 18:19:56 +0000 (18:19 +0000)]
Test XML_SetEncoding against memory allocation failures

7 years agoTest XML_SetBase against failing memory allocations
Rhodri James [Fri, 3 Feb 2017 18:37:42 +0000 (18:37 +0000)]
Test XML_SetBase against failing memory allocations

7 years agoTest XML_SetEncoding against memory allocation failures
Rhodri James [Fri, 3 Feb 2017 18:19:56 +0000 (18:19 +0000)]
Test XML_SetEncoding against memory allocation failures

7 years agoIncrease test coverage of XML_SetEncoding()
Rhodri James [Fri, 3 Feb 2017 18:13:00 +0000 (18:13 +0000)]
Increase test coverage of XML_SetEncoding()

7 years agoTest freeing a non-existent parser
Rhodri James [Fri, 3 Feb 2017 18:00:20 +0000 (18:00 +0000)]
Test freeing a non-existent parser

7 years agoAdd some coverage of CDATA section handlers
Rhodri James [Fri, 3 Feb 2017 17:50:02 +0000 (17:50 +0000)]
Add some coverage of CDATA section handlers

7 years agoTest XML_ParserReset in external entity parsing is ignored
Rhodri James [Fri, 3 Feb 2017 16:43:11 +0000 (16:43 +0000)]
Test XML_ParserReset in external entity parsing is ignored

7 years agoTest XML_ParserReset in internal entity expansion
Rhodri James [Fri, 3 Feb 2017 16:42:14 +0000 (16:42 +0000)]
Test XML_ParserReset in internal entity expansion

7 years agoTest that XML_ParserReset() does reset the parse state
Rhodri James [Fri, 3 Feb 2017 14:25:41 +0000 (14:25 +0000)]
Test that XML_ParserReset() does reset the parse state

7 years agoTest allocation failures when creating parser with encoding
Rhodri James [Fri, 3 Feb 2017 13:58:11 +0000 (13:58 +0000)]
Test allocation failures when creating parser with encoding

7 years agoTest ID attribute indexing
Rhodri James [Fri, 3 Feb 2017 13:41:24 +0000 (13:41 +0000)]
Test ID attribute indexing

7 years agoTest attribute reporting to start element handler
Rhodri James [Fri, 3 Feb 2017 12:54:37 +0000 (12:54 +0000)]
Test attribute reporting to start element handler

7 years agoTest XML_SetBase() and XML_GetBase() return consistent results
Rhodri James [Thu, 2 Feb 2017 18:38:33 +0000 (18:38 +0000)]
Test XML_SetBase() and XML_GetBase() return consistent results

7 years agoTest XML_UseForeignDTD()
Rhodri James [Thu, 2 Feb 2017 18:06:45 +0000 (18:06 +0000)]
Test XML_UseForeignDTD()

7 years agoAdd coverage test for DTD element declarations with contents
Rhodri James [Thu, 2 Feb 2017 16:13:19 +0000 (16:13 +0000)]
Add coverage test for DTD element declarations with contents

7 years agoTest XML_DefaultCurrent() passes on handling correctly
Rhodri James [Thu, 2 Feb 2017 14:22:57 +0000 (14:22 +0000)]
Test XML_DefaultCurrent() passes on handling correctly