cheng/libexpat
1
0
Fork 0
Code Issues Pull Requests Actions 8 Packages Projects Releases Wiki Activity
3,440 Commits 1 Branch 0 Tags 16 MiB
99cec436fb
Commit Graph

3013 Commits

Author SHA1 Message Date
Sebastian Pipping
99cec436fb Changes: Document CVE-2022-23852 2022-01-24 02:37:47 +01:00
Sebastian Pipping
acf956f14b tests: Cover integer overflow in XML_GetBuffer (CVE-2022-23852) 2022-01-24 02:37:47 +01:00
Samanta Navarro
847a645152 lib: Detect and prevent integer overflow in XML_GetBuffer (CVE-2022-23852) 2022-01-24 02:35:02 +01:00
Samanta Navarro
5a8f5f1d40 Fix typos 
Typos found with codespell.
 2022-01-22 12:06:45 +00:00
Carlo Bramini
1e1b52be2d
[>=2.3.0] Autotools: Fix broken CMake support under Cygwin (#546) 
Autotools: Fix broken CMake support under Cygwin
 2022-01-20 21:03:36 +01:00
Sebastian Pipping
fc4652b2b3 Set expected release date for 2.4.3 2022-01-13 23:47:57 +01:00
Sebastian Pipping
87638f86fd Changes: Streamline item order for 2.4.3 2022-01-13 23:47:57 +01:00
Sebastian Pipping
09044348e1 Changes: Document #528 and #529 2022-01-13 23:47:43 +01:00
Sebastian Pipping
6496a03d40 Sync years in file headers 2022-01-13 23:45:22 +01:00
Sebastian Pipping
d102671bfe Bump version to 2.4.3 2022-01-13 20:08:47 +01:00
Sebastian Pipping
2a6019d0fb Bump version info from 9:2:8 to 9:3:8 
See https://verbump.de/ for what these numbers do
 2022-01-13 20:02:42 +01:00
Sebastian Pipping
8e9f6ea08c Changes: Document CVE-2022-22822 to CVE-2022-22827 2022-01-12 17:01:55 +01:00
Sebastian Pipping
9f93e8036e lib: Prevent integer overflow at multiple places (CVE-2022-22822 to CVE-2022-22827) 
The involved functions are:
- addBinding (CVE-2022-22822)
- build_model (CVE-2022-22823)
- defineAttribute (CVE-2022-22824)
- lookup (CVE-2022-22825)
- nextScaffoldPart (CVE-2022-22826)
- storeAtts (CVE-2022-22827)
 2022-01-12 17:01:55 +01:00
Sebastian Pipping
f488b072b7 Changes: Document integer overflow CVE-2021-46143 2022-01-10 16:51:50 +01:00
Sebastian Pipping
85ae9a2d7d lib: Prevent integer overflow on m_groupSize in function doProlog (CVE-2021-46143) 2022-01-10 16:51:14 +01:00
Sebastian Pipping
572ef7a2ac run.sh.in: Do not use Wine with Cygwin and MSYS2 2022-01-09 23:04:13 +01:00
Sebastian Pipping
f82a72271c Changes: Document CVE-2021-45960 2022-01-05 18:23:42 +01:00
Sebastian Pipping
0adcb34c49 lib: Detect and prevent troublesome left shifts in function storeAtts (CVE-2021-45960) 2022-01-05 18:23:42 +01:00
Sebastian Pipping
9470015a1f Actions: Check for realistic minimum CMake version requirement 2022-01-01 15:58:47 +01:00
Sebastian Pipping
2ed8e19ada CMake: Make call to file(GENERATE [..]) work for CMake <3.19 
Error from CMake 3.7.2 was:

CMake Error at CMakeLists.txt:482 (file):
  file Incorrect arguments to GENERATE subcommand.
 2021-12-31 20:49:00 +01:00
Sebastian Pipping
f4adc65cc8 coverage.sh: Simplify directory naming scheme 2021-12-28 01:25:16 +01:00
Sebastian Pipping
23e820aa25 coverage.sh: Start coveraging -m32 2021-12-28 01:25:16 +01:00
Sebastian Pipping
befef7e52a CMake: Add unofficial flag for passing 32bit compile flag -m32 2021-12-27 22:14:18 +01:00
Sebastian Pipping
c2b5d52404 xmlwf: Address Clang 13 warning -Wunused-but-set-variable 2021-12-26 19:51:44 +01:00
Sebastian Pipping
5bab452b49 lib: Address GCC 11.2.1 compiler warning 
Symptom was:

In file included from xmltok.c:58:
xmltok_ns.c: In function ‘findEncodingNS’:
xmltok.h:276:10: warning: ‘buf’ may be used uninitialized [-Wmaybe-uninitialized]
  276 |   (((enc)->utf8Convert)(enc, fromP, fromLim, toP, toLim))
      |   ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmltok_ns.c:99:3: note: in expansion of macro ‘XmlUtf8Convert’
   99 |   XmlUtf8Convert(enc, &ptr, end, &p, p + ENCODING_MAX - 1);
      |   ^~~~~~~~~~~~~~
xmltok.h:276:10: note: by argument 5 of type ‘const char *’ to ‘enum XML_Convert_Result(const ENCODING *, const char **, const char *, char **, const char *)’ {aka ‘enum XML_Convert_Result(const struct encoding *, const char **, const char *, char **, const char *)’}
  276 |   (((enc)->utf8Convert)(enc, fromP, fromLim, toP, toLim))
      |   ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmltok_ns.c:99:3: note: in expansion of macro ‘XmlUtf8Convert’
   99 |   XmlUtf8Convert(enc, &ptr, end, &p, p + ENCODING_MAX - 1);
      |   ^~~~~~~~~~~~~~
In file included from xmltok.c:1666:
xmltok_ns.c:96:8: note: ‘buf’ declared here
   96 |   char buf[ENCODING_MAX];
      |        ^~~
 2021-12-25 18:15:25 +01:00
Sebastian Pipping
9c42ebdd4a .gitignore: Fully cover ./distribute.sh output 2021-12-19 23:48:00 +01:00
Sebastian Pipping
4d9059d3cf Set expected release date for 2.4.2 2021-12-19 19:29:54 +01:00
Sebastian Pipping
f3f6ae617c Bump version to 2.4.2 2021-12-17 18:01:39 +01:00
Sebastian Pipping
716735e56b Bump version info from 9:1:8 to 9:2:8 
See https://verbump.de/ for what these numbers do
 2021-12-17 18:01:32 +01:00
Sebastian Pipping
96ff8de1d6 Changes: Document #502 #503 #507 #519 + fix reference to #498 2021-12-17 17:50:32 +01:00
Sebastian Pipping
8589e9598a CMake: Ensure libexpat*.lib filenames with MSVC 
This fixes a post-2.4.1 regression from
commit 3486fd6e3d
introduced by pull request #495.
 2021-12-15 16:40:15 +01:00
Sebastian Pipping
8c2b1853cd doc: Fix return value docs on XML_SetBillionLaughs[..] functions (#522) 2021-12-14 01:33:49 +01:00
Sebastian Pipping
5a4ec4cf7f autotools: Sync expat.cmake to agree with CI 2021-11-26 15:15:07 +01:00
Sebastian Pipping
c3300c9bf2 Get attribution headers back in sync 
Follow-up to pull requests #503 and #510
 2021-10-17 16:35:12 +02:00
Sebastian Pipping
105a5c6ee7 Changes: Document #513 and #514 2021-10-17 16:32:08 +02:00
Sebastian Pipping
c05efa1fbf Apply #514 to attribution headers 2021-10-17 16:28:01 +02:00
Dong-hee Na
59734d6e31 Reorder the location of including expat_config.h 2021-10-17 20:45:24 +09:00
Sebastian Pipping
0b7a88b355 Autotools|CMake: Link against libm for function "isnan" 
$ git --no-pager grep -lw isnan
lib/xmlparse.c
tests/runtests.c
xmlwf/xmlwf.c
 2021-09-20 18:27:52 +02:00
Sebastian Pipping
3914c2cb83 Autotools: Get CMake templates back in sync with ubuntu-20.04 2021-07-23 14:26:57 +02:00
Sebastian Pipping
f9eb8a1286 CMake: Improve summary output for multi-config builds 2021-07-06 16:22:38 +02:00
Sebastian Pipping
40bf9fe84a CMake: Report on effective CMake generator 2021-07-06 16:22:38 +02:00
Sebastian Pipping
19dd50990d Autotools: Simplify expat.pc templating (now that we can) 2021-07-06 16:22:38 +02:00
Sebastian Pipping
1d4bb74c34 CMake: Fix pkg-config section "Libs" for multi-config CMake generators 2021-07-06 16:22:38 +02:00
Kai Pastor
663e529eed Update URL in pc file 2021-07-06 16:22:38 +02:00
Sebastian Pipping
3486fd6e3d CMake: Fix pkg-config section "Libs" for non-release MinGW builds 2021-07-06 16:22:38 +02:00
Sebastian Pipping
7cf97a9bda CMake: Apply -DEXPAT_MSVC_STATIC_CRT=ON to off-grid built types 2021-07-06 16:22:38 +02:00
Sebastian Pipping
b73c80a727 CMake: Avoid empty CMAKE_BUILD_TYPE 2021-07-06 16:22:38 +02:00
Sebastian Pipping
a3bc9162e6 CMake: Move _EXPAT_BUILD_TYPE_UPPER up for upcoming re-use 2021-07-06 16:22:38 +02:00
Nicolas Cavallari
76186fb89e doc/reference.html: Docmument that XML_GetBuffers(parser, 0) may be NULL 
Allocating zero bytes with XML_GetBuffers may return NULL or a non-NULL
pointer depending on the current internal buffer state (#502).

Document this behavior, as it can be surprising.
 2021-07-05 16:14:36 +02:00
Sebastian Pipping
00839393f3 Makefile.am: Include buildconf.sh and fuzz/*.c with release archives 2021-06-05 21:17:25 +02:00