Commit Graph

1806 Commits

Author SHA1 Message Date
Sebastian Pipping
4be2cb5afc Detect overflow from len=INT_MAX call to XML_Parse
Relevant only when XML_CONTEXT_BYTES not defined
2017-05-28 23:11:00 +02:00
Sebastian Pipping
70db8d2538 Reject negative length call to XML_Parse 2017-05-28 21:35:12 +02:00
Sebastian Pipping
6a747c837c Set errorCode for XML_Parse on NULL parser
Related to 56c75720c2
2017-05-28 21:31:58 +02:00
Sebastian Pipping
50db475431 Address unused variable warning (for XML_CONTEXT_BYTES not defined) 2017-05-28 20:50:43 +02:00
Sebastian Pipping
84f9ca1066 Fix sharing of hash salt across parsers (issue #31)
This affects when XML_ExternalEntityParserCreate was called
prior to XML_Parse.
2017-05-28 17:32:28 +02:00
Sebastian Pipping
f0b63f56c8 Address warning "initializer element is not computable at load time" 2017-05-28 15:02:19 +02:00
Sebastian Pipping
ad8521ca84 Pull out shared variable and is-unused marker 2017-05-25 21:55:05 +02:00
Sebastian Pipping
13e4b3d05e Autoconf: Add --(with|without)-libbsd for bypassing auto-detection 2017-05-25 21:15:36 +02:00
Sebastian Pipping
ba1fc202c1 Changes: Mention use of high quality entropy sources 2017-05-25 21:15:36 +02:00
Sebastian Pipping
04ad658bd3 Pull parser instance address out of entropy equation to not leak that information 2017-05-25 21:15:36 +02:00
Sebastian Pipping
7a93938687 Start using arc4random_buf with BSD and libbsd 2017-05-25 21:15:36 +02:00
Sebastian Pipping
c9cc7dd3d7 Start using getrandom for entropy extraction with glibc 2.25+ 2017-05-25 20:08:23 +02:00
Sebastian Pipping
01e78c377b Start using RtlGenRandom for entropy extraction on WinXP and later 2017-05-25 20:07:01 +02:00
Sebastian Pipping
a494d5358a Merge branch 'underscore-win32' (remake of pull request #10) 2017-05-25 15:32:09 +02:00
Sebastian Pipping
d923c99e13 Changes: Adjust indentation 2017-05-25 15:25:18 +02:00
Sebastian Pipping
4c6ac5ebc8 Changes: Document move from WIN32 to _WIN32 2017-05-25 15:25:18 +02:00
Sebastian Pipping
50e0dd88f0 Visual Studio 20xx: No longer define WIN32 2017-05-25 15:25:18 +02:00
Sebastian Pipping
078af33952 CMake: No longer define WIN32 2017-05-25 15:25:18 +02:00
Sebastian Pipping
8f25f91e9e Replace WIN32 by _WIN32 in code 2017-05-25 15:25:18 +02:00
Rhodri James
a4dc944f37 Prevent use of uninitialised variable
I don't believe the value of 'next' is actually used if it is not
set by the tokenizer, but this is very hard to prove.  For safety,
we give it a safe default value.
2017-05-24 22:03:43 +02:00
Sebastian Pipping
9ed727064b Validate parser parameter to XML_UseParserAsHandlerArg 2017-05-24 21:09:23 +02:00
Sebastian Pipping
d37f74b2b7 Merge branch 'null-checks' 2017-05-24 21:04:08 +02:00
Sebastian Pipping
b070843f5b Make XML_GetInputContext parameter validation more flexible 2017-05-24 20:52:16 +02:00
Rhodri James
ea1f407c06 Validate parser parameter to XML_DefaultCurrent 2017-05-24 20:49:40 +02:00
Rhodri James
581a4c7ccf Validate parser parameter to XML_MemFree 2017-05-24 20:49:40 +02:00
Rhodri James
fad8400108 Validate parser parameter to XML_MemRealloc 2017-05-24 20:49:40 +02:00
Rhodri James
cca6cdc5f8 Validate parser parameter to XML_MemMalloc 2017-05-24 20:49:40 +02:00
Rhodri James
cbfaa23428 Validate parser parameter to XML_FreeContentModel 2017-05-24 20:49:40 +02:00
Rhodri James
11ec6aefd1 Validate parser parameter to XML_GetCurrentColumnNumber 2017-05-24 20:49:40 +02:00
Rhodri James
1bf78fe1fb Validate parser parameter to XML_GetCurrentLineNumber 2017-05-24 20:49:40 +02:00
Rhodri James
88731abd62 Validate parameters to XML_GetInputContext 2017-05-24 20:49:40 +02:00
Rhodri James
fd2571b27a Validate parser parameter to XML_GetCurrentByteCount 2017-05-24 20:49:40 +02:00
Rhodri James
2253c12304 Validate the parser parameter to XML_GetCurrentByteIndex 2017-05-24 20:49:40 +02:00
Rhodri James
1c365fc049 Validate parser parameter to XML_GetErrorCode 2017-05-24 20:49:40 +02:00
Rhodri James
253c68928e Validate parser parameter for XML_GetParsingStatus 2017-05-24 20:49:40 +02:00
Rhodri James
fadc9db44c Validate parser parameter for XML_ResumeParser 2017-05-24 20:49:40 +02:00
Rhodri James
9ce48e786c Validate parser parameter for XML_StopParser 2017-05-24 20:49:40 +02:00
Rhodri James
49c4ad9210 Validate parser parameter for XML_GetBuffer 2017-05-24 20:49:40 +02:00
Rhodri James
621222bce6 Validate parser parameter for XML_ParseBuffer 2017-05-24 20:49:40 +02:00
Rhodri James
56c75720c2 Validate "parser" and "s" parameters to XML_Parse 2017-05-24 20:49:40 +02:00
Rhodri James
b58abe1e92 Validate parser parameter to XML_SetHashSalt 2017-05-24 20:49:40 +02:00
Rhodri James
2a6ed44fbc Validate parser parameter to XML_SetParamentityParsing 2017-05-24 20:49:40 +02:00
Rhodri James
e5430d8a07 Validate parser parameter to XML_SetXmlDeclHandler 2017-05-24 20:49:40 +02:00
Rhodri James
8fa1d7b48b Validate parser parameter to XML_SetEntityDeclHandler 2017-05-24 20:49:39 +02:00
Rhodri James
571b2fe3b0 Validate parser parameter to XML_SetAttlistDeclHandler 2017-05-24 20:49:39 +02:00
Rhodri James
7f6e542071 Validate parser parameter to XML_SetElementDeclHandler 2017-05-24 20:49:39 +02:00
Rhodri James
62befbddcd Validate parser parameter to XML_SetUnknownEncodingHandler 2017-05-24 20:49:39 +02:00
Rhodri James
23e56eae28 Validate parser parameter to XML_SetSkippedEntityHandler 2017-05-24 20:49:39 +02:00
Rhodri James
ae3785e5fa Validate parser parameter to XML_SetExternalEntityRefHandlerArg 2017-05-24 20:49:39 +02:00
Rhodri James
18e48b4122 Validate parser parameter to XML_SetExternalEntityRefHandler 2017-05-24 20:49:39 +02:00