cheng/libexpat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,732 Commits 1 Branch 0 Tags 16 MiB
844e5482c7
Commit Graph

227 Commits

Author SHA1 Message Date
Sebastian Pipping
ba03edc6e6 Changes: Document low quality entropy detection (related to #43) 2017-07-12 18:11:28 +02:00
Sebastian Pipping
a449035d04 Changes: Communicate security aspects in detail (#60) 2017-07-12 16:28:27 +02:00
Sebastian Pipping
61e1a31fdc Changes: Mention CMake improvements 2017-07-09 22:40:17 +02:00
Sebastian Pipping
44b8064042 Changes: Add MOX reference 2017-07-01 17:30:19 +02:00
Sebastian Pipping
b37622e679 Changes: Mention parameter validation bug 2017-07-01 14:43:25 +02:00
Sebastian Pipping
00bd9dab99 Changes: Mention #68, give credit to Kerin Millar 2017-07-01 13:12:29 +02:00
Sebastian Pipping
93baf8759b Changes: Give credit to Viktor Szakats (#61) 2017-06-25 20:15:28 +02:00
Sebastian Pipping
23a533d19b Changes: Mention fix to #60 2017-06-25 17:53:25 +02:00
Sebastian Pipping
a85511958a Changes/siphash.h: Extend log, give credit to Victor Stinner 2017-06-23 21:06:20 +02:00
Sebastian Pipping
956147f81a Changes: Mention getrandom detection issues on macOS (#52) 2017-06-19 20:37:34 +02:00
Sebastian Pipping
c74d380b8f siphash.h: Address lack of stdint.h for Visual Studio 2003-2008 2017-06-18 22:03:01 +02:00
Sebastian Pipping
1ce8ec1c12 Changes: Start post-2.2.1 section 2017-06-18 21:53:55 +02:00
Sebastian Pipping
82b8241c1c Changes: Add link for SipHash commits 2017-06-17 17:44:32 +02:00
Sebastian Pipping
508b1c3023 Changes: Add reference to SipHash ticket 2017-06-17 12:04:41 +02:00
Sebastian Pipping
484cc4e62c Bump version, year, and ID for 2.2.1 
Also fill earliest release date
 2017-06-17 01:58:05 +02:00
Sebastian Pipping
d7ba4e385e Changes: Mention address leak, add MOX-??? references 2017-06-17 01:44:00 +02:00
Sebastian Pipping
b6742eb325 Bump version info from 7:2:6 to 7:3:6 2017-06-17 01:12:35 +02:00
Sebastian Pipping
c2d4688d5b Changes: Mention SipHash 2017-06-17 01:10:11 +02:00
Sebastian Pipping
01bbdedb66 Changes: Add CVE-2017-9233 info to change log 2017-06-17 01:00:45 +02:00
Sebastian Pipping
13a55ba351 Changes: Add call for help 2017-06-17 00:56:27 +02:00
Sebastian Pipping
fa1bda5cd0 Add AUTHORS file 
$ git log | fgrep Author: | sed 's, <[^>]\+>,,' | sort | uniq -c | awk '{ if (int($1) >= 20) print }' | sed 's,.*: ,,' | sort
 2017-06-17 00:48:03 +02:00
Sebastian Pipping
60d00148b5 Changes: Mention new error code XML_ERROR_INVALID_ARGUMENT 2017-06-15 22:18:02 +02:00
Sebastian Pipping
a95e5a6c95 Changes: Mark SourceForge tickets for clarity 2017-06-14 18:02:18 +02:00
Sebastian Pipping
400d260d01 Changes: Fix indentation of a 2.2.1 item 2017-06-14 18:02:18 +02:00
Sebastian Pipping
065486c1ad Changes: Mention commit 7e5b71b748 2017-06-14 17:40:04 +02:00
Sebastian Pipping
a39382bee5 Drop pre-X Mac OS MPW Makefile (issue #14) 2017-06-10 22:54:26 +02:00
Sebastian Pipping
632bb9f39e Changes: Add missing details for 2.2.1 2017-06-07 23:33:39 +02:00
Sebastian Pipping
3518a91e72 Changes: Mention commits of important 2.2.1 fixes 2017-06-07 23:29:49 +02:00
Sebastian Pipping
bf9b32eae3 Changes: Improve classification/order of existing entries for 2.2.1 2017-06-07 21:17:57 +02:00
Sebastian Pipping
120bbbc8cf configure.ac: Disable auto-detection of libbsd 2017-06-01 20:53:44 +02:00
Sebastian Pipping
f356fb56fb Detect and support syscall(SYS_getrandom, [..]) as well 2017-05-31 23:31:15 +02:00
Sebastian Pipping
9e02465f09 Make EXPAT_ENTROPY_DEBUG=1 print entropy source and bytes 2017-05-31 13:28:10 +02:00
Sebastian Pipping
13e4b3d05e Autoconf: Add --(with|without)-libbsd for bypassing auto-detection 2017-05-25 21:15:36 +02:00
Sebastian Pipping
ba1fc202c1 Changes: Mention use of high quality entropy sources 2017-05-25 21:15:36 +02:00
Sebastian Pipping
4c6ac5ebc8 Changes: Document move from WIN32 to _WIN32 2017-05-25 15:25:18 +02:00
Sebastian Pipping
d923c99e13 Changes: Adjust indentation 2017-05-25 15:25:18 +02:00
Sebastian Pipping
957f947029 Changes: Document fix for #28 2017-05-24 18:50:51 +02:00
Sebastian Pipping
14f175334d Changes: Group security notes for 2.1.0 as done in htdocs/index.html 2017-05-11 09:06:19 +02:00
Sebastian Pipping
8bb0d934a6 Add issue #25 in change log 2017-05-06 00:34:11 +02:00
Sebastian Pipping
99e2c0d52a Changes: Document CVE-2016-9063 2017-05-03 00:38:58 +02:00
Sebastian Pipping
d1709a6c43 Changes: Document fix to issue #17 2017-04-26 19:08:46 +02:00
Sebastian Pipping
ca5808563d Changes: Document droppings (issue #14) 2017-04-25 23:51:59 +02:00
Sebastian Pipping
db023e68b7 configure.ac: Add --(en|dis)able-xml-context 2017-04-12 23:41:44 +02:00
Sebastian Pipping
863c43087f Address 64bit MinGW compile warning (fixes #15) 
../../../xmlparse.c: In function ‘generate_hash_secret_salt’:
../../../xmlparse.c:725:42: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast]
       gather_time_entropy() ^ getpid() ^ (unsigned long)parser;
                                          ^

Thanks to Viktor Szakats.
 2017-03-16 15:54:45 +01:00
Sebastian Pipping
94c69e5df1 Changes: Add Rhodri James to special thanks 2017-02-14 23:56:25 +01:00
Sebastian Pipping
64dca0bf4b Changes: Document fix to issue #3 2017-02-14 23:53:53 +01:00
Sebastian Pipping
25a40afb0c CHANGES: Extend special thanks 2016-11-20 18:16:27 +01:00
Sebastian Pipping
12531ad43b Changes: Document pull request #2 2016-11-20 18:12:35 +01:00
Sebastian Pipping
a46258d1f6 Extend change log (issue #534) 2016-08-15 18:48:14 +02:00
Sebastian Pipping
25c6393829 Extend change log 2016-08-12 23:43:56 +02:00
Sebastian Pipping
06b9bcf2a6 Start using -fno-strict-aliasing (bug #538) 2016-08-12 15:45:05 +02:00
Sebastian Pipping
11bbfeed89 Extend change log for issue #540 2016-07-30 16:54:50 +02:00
Sebastian Pipping
0df2c1446e Changes: Fix description of (conditions for) bug #539 2016-07-17 22:34:57 +02:00
Sebastian Pipping
52fdda154b Changes: Document fix to regression bug #539 2016-07-17 20:30:28 +02:00
Sebastian Pipping
fbc46fa2be Move release date to 2016-06-21 2016-06-21 14:58:38 +02:00
Sebastian Pipping
1d4bc08a37 Fix infinite loop 
Regression from 3014589057

https://marcograss.github.io/security/android/chromium/2016/06/17/expat-xml-heap-overflow.html
 2016-06-18 16:33:43 +02:00
Sebastian Pipping
a0eaef2d67 Set version 2.2.0/2016-06-18 where missing 2016-06-18 00:16:21 +02:00
Sebastian Pipping
9751416948 Changes: Adjust case 2016-06-17 23:44:15 +02:00
Sebastian Pipping
92da19f153 Resolve COMPILING_FOR_WINDOWS (ex COMPILED_FROM_DSP) in favor of WIN32 2016-06-13 17:05:16 +02:00
Sebastian Pipping
3f7f01ec09 Extend change log 2016-06-04 22:17:11 +02:00
Sebastian Pipping
43718a3e32 Improve autotools-related entries in upcoming release changes 2016-06-04 17:37:39 +02:00
Sebastian Pipping
07cc2fcacf Mention recently assigned CVEs CVE-2012-6702 and CVE-2016-5300 in plaintext change log 2016-06-04 17:21:04 +02:00
Sebastian Pipping
56e62f1634 Sync plaintext changelog; HTML left to do 2016-06-03 23:36:01 +02:00
Sebastian Pipping
56ceae7046 Sync change log 2016-03-28 22:23:43 +02:00
Sebastian Pipping
ee0adc0d9d Fill release date 2016-03-12 04:21:09 +01:00
Sebastian Pipping
1f08fdbaaa Mention issue #502 in 2.1.1 change log 2016-03-12 02:57:41 +01:00
Sebastian Pipping
e4d859eb2c Write 2.1.1 change log 2016-03-12 00:23:16 +01:00
Fred L. Drake, Jr.
dbc2e3c638 fix typo 2012-04-14 19:51:29 +00:00
Karl Waclawek
62574fc8be Final release notes. 2012-03-24 19:06:25 +00:00
Karl Waclawek
cc3008d7dd Updated Changes for release 2.1.0. 2012-03-11 05:19:09 +00:00
Karl Waclawek
60a139db9c Release preparations. 2012-03-05 14:52:54 +00:00
Karl Waclawek
1b2b6992cc Preparing for release 2.1.0. 2012-03-04 04:00:51 +00:00
Sebastian Pipping
99b8415489 Consistent bug references (now hashmark for all). Regex used: "\b(?<!#)(\d{6,})\b" -> "#\1" 2007-06-06 12:50:08 +00:00
Karl Waclawek
4d2c9d031a Added release date. 2007-06-05 15:06:01 +00:00
Karl Waclawek
940382c933 Added references to newest patches and fixes. 2007-05-14 17:49:19 +00:00
Karl Waclawek
e76fecea10 Forgot to mention xmlwf bugfix. 2006-11-27 03:05:20 +00:00
Karl Waclawek
56e145f7b3 Preparing for release 2.0.1. 2006-11-27 02:51:58 +00:00
Fred L. Drake, Jr.
7622ee5779 record my changes from today and yesterday 2006-07-02 02:11:55 +00:00
Karl Waclawek
1e2e2fc2fe More detail on line/column numbers. 2006-01-11 01:01:23 +00:00
Karl Waclawek
13ef942e37 Updated release date. 2006-01-10 01:24:20 +00:00
Karl Waclawek
8db4a61a9a Prepared for release 2.0.0. 2006-01-06 03:59:05 +00:00
Karl Waclawek
f8412b2167 Added support for 64-bit integers when reporting byte indexes, 
line and column numbers. Can be turned on/off using the
XML_LARGE_SIZE switch.
 2005-12-23 14:45:27 +00:00
Karl Waclawek
b81af0c990 In preparation for next release. 2005-11-27 21:50:47 +00:00
Fred L. Drake, Jr.
a236465479 more changes noted 2005-01-29 05:11:13 +00:00
Fred L. Drake, Jr.
51c170f0cd Report XML_NS setting via XML_GetFeatureList(). 2005-01-29 04:48:44 +00:00
Fred L. Drake, Jr.
ee9719230c remove use of the check library; always use our own testing package 
(this reduces variables and simplifies the build process)
 2005-01-27 06:27:57 +00:00
Fred L. Drake, Jr.
821aaf93b1 add notes for 1.95.8 release 2004-07-23 04:48:36 +00:00
Fred L. Drake, Jr.
1d6a85c8f3 Set the release date. 2003-10-20 21:11:27 +00:00
Fred L. Drake, Jr.
48bff2f30f Updates from last night. 2003-10-17 21:08:30 +00:00
Fred L. Drake, Jr.
f4487b0a0f update to reflect further improvements 2003-10-16 05:05:16 +00:00
Fred L. Drake, Jr.
6590085eff Update to reflect the addition of the XMLCALL macro. 2003-10-15 18:33:27 +00:00
Fred L. Drake, Jr.
0c78684ba5 Minor updates before release. 2003-10-09 12:18:41 +00:00
Fred L. Drake, Jr.
fa49735f8a - bump the versioning information 
- start describing the changes in 1.95.7
 2003-07-15 15:20:35 +00:00
Fred L. Drake, Jr.
c48e483c59 Fix the release date... again. 2003-01-28 05:54:33 +00:00
Fred L. Drake, Jr.
06f1a47c8f Update information on the 1.95.6 release (still pending). 2003-01-25 15:33:21 +00:00
Fred L. Drake, Jr.
e39c6e2237 Last minute updates. 2003-01-24 18:43:20 +00:00
Fred L. Drake, Jr.
e629e75f89 Added notes about the new APIs. 2003-01-16 23:24:38 +00:00
Fred L. Drake, Jr.
b3979b5fbb Start making notes about changes. 2002-10-07 20:25:24 +00:00
Fred L. Drake, Jr.
896b3d1cc9 Fix a name. 2002-09-19 20:19:51 +00:00
Fred L. Drake, Jr.
d784ead9cb A last-minute report suggests a problem with this using at least some 
versions of egcs, so disable FASTCALL for GCC as well.  We are now not using
this for any platform.  ;-(
 2002-09-06 21:49:57 +00:00
Fred L. Drake, Jr.
3aa214ccc1 Revised one of the change notes slightly. 2002-09-06 21:32:19 +00:00
Fred L. Drake, Jr.
16b5677b9b Predict a release date. 
Add a note about the internal calling convention magic.
 2002-09-05 02:00:56 +00:00
Karl Waclawek
1dfb9e1aa6 Added default handler fix. 2002-08-29 18:06:31 +00:00
Fred L. Drake, Jr.
8b72d99dbf Tabs are evil; remove them. 2002-08-29 16:48:01 +00:00
Fred L. Drake, Jr.
ee96d299e7 Fixed indentation, added period. 2002-08-29 16:25:12 +00:00
Karl Waclawek
6c2d89cf39 Added static library build support under VC++ 2002-08-29 16:17:09 +00:00
Fred L. Drake, Jr.
a3e77face0 Added more updates; mostly the list of misc. bugs that have been 
fixed.
 2002-08-27 22:42:52 +00:00
Fred L. Drake, Jr.
6643dbce7b Start a section for the next release. 2002-08-27 16:14:35 +00:00
Fred L. Drake, Jr.
21f26c8ab6 Add a note about the addition of Borland support files. 
Include a couple of additional bug reports that have been dealt with.
 2002-07-12 02:52:42 +00:00
Fred L. Drake, Jr.
437481121a Add a couple more fixed bugs to the list. 2002-07-09 21:28:44 +00:00
Karl Waclawek
775b55c2dc Added to list of changes for 1.95.4. 2002-07-09 21:19:24 +00:00
Fred L. Drake, Jr.
a1864edc2e Add a list of bugs fixed for 1.95.4 so far. 
Set a target release date.
 2002-07-09 18:37:32 +00:00
Fred L. Drake, Jr.
72f20a6169 Added note about Mac OS classic support. 2002-07-08 17:10:38 +00:00
Fred L. Drake, Jr.
295725c655 Started section for 1.95.4, noting the contributed VMS support. 2002-06-05 04:16:29 +00:00
Fred L. Drake, Jr.
0b267aff2a Added a couple more interesting items that had been lurking in the 
forgotten NEWS file.
Set an expected date for the 1.95.3 release.
 2002-05-31 20:42:18 +00:00
Fred L. Drake, Jr.
ccac97847c Add section for Expat 1.95.3. Added blank lines for readability. 2002-05-31 03:45:50 +00:00
Fred L. Drake, Jr.
8c802e078d Fix a couple of stupid typos that I should have caught before release. 2001-07-28 03:29:55 +00:00
Fred L. Drake, Jr.
a0a80f5f43 Settle on a release date, and note that there is now a Windows installer. 2001-07-26 20:32:22 +00:00
Fred L. Drake, Jr.
8ec98c9108 Added preliminary changes for the 1.95.2 release. 2001-07-25 18:10:15 +00:00
Clark Cooper
01947d98ff Inadvertently failed to commit these files for 1.95.1 (apparently I committed 
from the lib directory instead of the main directory)
 2000-12-27 18:08:15 +00:00
Clark Cooper
b1bcd0060a Remove aborts and instead return an UNEXPECTED_STATE error. 2000-10-20 15:37:28 +00:00
Clark Cooper
809a5d2916 Revised fix for abort occurring with a percent followed by whitespace or 
another percent in entity values.
 2000-10-20 15:14:36 +00:00
Clark Cooper
c4ca6cf75e Defined XML_SetEndNamespaceDeclHandler to resolve bug # 116381 2000-10-10 18:48:48 +00:00
Clark Cooper
219c9e2de6 Fix make problems on BSD & HPUX reported in Bug # 116248 2000-10-10 18:34:11 +00:00
Clark Cooper
15447d34ea Fix documentation error reported in Bug report # 116382 2000-10-10 18:30:22 +00:00
Clark Cooper
aa45fb851a Versioning information, fill in Changes file, possible final commit before 
first release (1.95.0)
 2000-09-29 14:57:45 +00:00
Clark Cooper
63d2f68760 Switch to using MANIFEST to build distribution. 
Also fix xmlwf to use current entity declaration signature.
 2000-09-28 19:47:35 +00:00