summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #668 from libexpat/issue-667-prepare-releaseR_2_5_0Sebastian Pipping2022-10-2513-26/+34
|\ | | | | Prepare release 2.5.0 (part of #667)
| * Changes: Add note on impact of CVE-2022-43680Sebastian Pipping2022-10-251-1/+3
| |
| * Set release date for version 2.5.0Sebastian Pipping2022-10-242-2/+2
| |
| * Changes: Document #656 #658Sebastian Pipping2022-10-241-0/+3
| |
| * Bump version to 2.5.0Sebastian Pipping2022-10-248-14/+14
| |
| * Bump version info from 9:9:8 to 9:10:8Sebastian Pipping2022-10-243-6/+8
| | | | | | | | See https://verbump.de/ for what these numbers do
| * Sync file headersSebastian Pipping2022-10-244-3/+4
|/
* Merge pull request #666 from libexpat/improve-examplesSebastian Pipping2022-10-244-55/+77
|\ | | | | Improve examples
| * Changes: Document #666Sebastian Pipping2022-10-241-0/+2
| |
| * cmake: Resolve duplication related to building examplesSebastian Pipping2022-10-241-5/+5
| |
| * examples: Add some whitespace for readabilitySebastian Pipping2022-10-242-0/+4
| |
| * examples: Make use of XML_GetBufferSebastian Pipping2022-10-242-6/+18
| |
| * examples/elements.c: Resolve unused include of <wchar.h>Sebastian Pipping2022-10-241-1/+0
| |
| * examples/elements.c: Be consistent across examples regarding OOM detectionSebastian Pipping2022-10-241-0/+5
| |
| * examples: Be consistent across examples regarding read looping and main exitSebastian Pipping2022-10-242-8/+18
| |
| * examples/elements.c: Be consistent in parse error reporting format across ↵Sebastian Pipping2022-10-241-3/+4
| | | | | | | | examples
| * examples/outline.c: Be consistent in main loop exit across examplesSebastian Pipping2022-10-241-7/+3
| |
| * examples/outline.c: Make element handler signatures consistent across examplesSebastian Pipping2022-10-241-9/+9
| |
| * examples/outline.c: Make use of BUFSIZ from stdio.h consistent across examplesSebastian Pipping2022-10-241-4/+2
| |
| * examples: Make passing of depth pointer consistent across examplesSebastian Pipping2022-10-242-9/+9
| |
| * examples: Resolve use of unused variables argc and argvSebastian Pipping2022-10-242-6/+2
| |
| * examples/outline.c: Rename "Buff" to "buf" for consistency across examplesSebastian Pipping2022-10-241-3/+3
| |
| * examples/outline.c: Make "Buff" a local variableSebastian Pipping2022-10-241-2/+1
| |
| * examples/outline.c: Rename variable "p" to "parser"Sebastian Pipping2022-10-241-7/+7
| |
* | Merge pull request #650 from libexpat/issue-649-fix-overeager-dtd-destructionSebastian Pipping2022-10-243-0/+62
|\ \ | | | | | | [CVE-2022-43680] Fix overeager DTD destruction (fixes #649)
| * | Changes: Document #649Sebastian Pipping2022-10-241-0/+5
| | |
| * | tests: Cover overeager DTD destruction in XML_ExternalEntityParserCreateSebastian Pipping2022-10-241-0/+49
| | |
| * | lib: Fix overeager DTD destruction in XML_ExternalEntityParserCreateSebastian Pipping2022-10-241-0/+8
| |/
* | Merge pull request #665 from ↵Sebastian Pipping2022-10-241-1/+1
|\ \ | |/ |/| | | | | libexpat/dependabot/github_actions/actions/upload-artifact-3.1.1 Actions(deps): Bump actions/upload-artifact from 3.1.0 to 3.1.1
| * Actions(deps): Bump actions/upload-artifact from 3.1.0 to 3.1.1dependabot[bot]2022-10-241-1/+1
|/ | | | | | | | | | | | | | Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v3.1.0...v3.1.1) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #663 from libexpat/expat-config-h-multiple-inclusion-guardSebastian Pipping2022-10-235-0/+11
|\ | | | | Protect header expat_config.h from multiple inclusion
| * Protect expat_config.h against multiple inclusionSebastian Pipping2022-10-235-0/+11
|/
* Merge pull request #654 from ↵Sebastian Pipping2022-10-183-9/+62
|\ | | | | | | | | libexpat/issue-613-fix-processing-of-nested-entities Fix processing of nested entities (fixes #613)
| * Changes: Document #613Sebastian Pipping2022-10-171-0/+2
| |
| * tests: Cover suspend with inside nested entites in internalEntityProcessorSebastian Pipping2022-10-171-0/+43
| |
| * lib: Fix suspend with inside nested entites in internalEntityProcessorSebastian Pipping2022-10-171-0/+8
| |
| * lib: Simplify control flow in internalEntityProcessorSebastian Pipping2022-10-171-10/+10
|/ | | | | | | | | | | | | | | | | | | The key is that all branches but the last ended in `return`. ``` BEFORE | AFTER --------------------+-------------------- if (..a..) { | if (..a..) { ..b..; | ..b..; return ..c..; | return ..c..; | } } else if (..d..) { | if (..d..) { ..e..; | ..e..; return ..f..; | return ..f..; } else { | } ..g..; | ..g..; } | ```
* Merge pull request #653 from libexpat/issue-652-stop-leaking-tag-bindingsSebastian Pipping2022-10-173-3/+30
|\ | | | | Stop leaking tag bindings (fixes #652)
| * Changes: Document #652Sebastian Pipping2022-10-071-0/+4
| |
| * lib: Stop leaking opening tag bindings after closing tag mismatch errorSebastian Pipping2022-10-071-3/+3
| | | | | | | | | | .. by moving the opening tag onto the free tag list only *after* the tag match check has passed.
| * tests: Cover leak of opening tag bindings after closing tag mismatch errorSebastian Pipping2022-10-071-0/+23
| |
* | Merge pull request #659 from ↵Sebastian Pipping2022-10-108-8/+8
|\ \ | | | | | | | | | | | | libexpat/dependabot/github_actions/actions/checkout-3.1.0 Actions(deps): Bump actions/checkout from 3.0.2 to 3.1.0
| * | Actions(deps): Bump actions/checkout from 3.0.2 to 3.1.0dependabot[bot]2022-10-108-8/+8
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3.0.2...v3.1.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge pull request #658 from Osyotr/patch-1Sebastian Pipping2022-10-071-1/+1
|\ \ | |/ |/| [2.4.9] CMake: Fix static library name when building with MinGW
| * Fix static library name when building with mingwOsyotr2022-10-071-1/+1
|/ | | | | When building static library with mingw the output file name should be `libexpat.a`, not `libexpat-1.dll`. This is a regression from https://github.com/libexpat/libexpat/pull/624 Original issue: https://github.com/microsoft/vcpkg/issues/27132
* Merge pull request #645 from ↵Sebastian Pipping2022-10-073-1/+66
|\ | | | | | | | | libexpat/issue-612-fix-corruption-from-undefined-entities Fix corruption from undefined entities (fixes #612, variation of #615)
| * Changes: Document #612 #645Sebastian Pipping2022-09-211-0/+9
| |
| * Fix curruption from undefined entities (fixes #612)Jann Horn2022-09-211-1/+1
| |
| * Regression test for #612: tempPool corrupt from attribute types.Rhodri James2022-09-211-0/+56
| | | | | | | | | | | | | | | | | | | | | | Attribute type declarations accumulate the type in m_tempPool. When parsing is skipped because of (for example) a missing parameter entity, the accumulated definition is not cleared out as it normally would be, and corrupts the data passed to future handlers. Note this commit leaves the regression tests failing (which is after all what we were trying to prove).
* | [2.4.9] CMake: Fix generation of pkgconfig file (#656)Osyotr2022-10-041-3/+3
| |