![[BACK]](/icons/back.gif){kind=icon}
Up to [NetBSD + pkgsrc-wip] / pkgsrc / textproc / expat
Request diff between arbitrary revisions - Display revisions graphically
Keyword substitution: kv
Default branch: MAIN
Update expat to 2.1.0, contains security fixes.
Release 2.1.0 Sat March 24 2012
- Bug Fixes:
#1742315: Harmful XML_ParserCreateNS suggestion.
#2895533: CVE-2012-1147 - Resource leak in readfilemap.c.
#1785430: Expat build fails on linux-amd64 with gcc version>=4.1 -O3.
#1983953, 2517952, 2517962, 2649838:
Build modifications using autoreconf instead of buildconf.sh.
#2815947, #2884086: OBJEXT and EXEEXT support while building.
#1990430: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
#2517938: xmlwf should return non-zero exit status if not well-formed.
#2517946: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
#2855609: Dangling positionPtr after error.
#2894085: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
#2958794: CVE-2012-1148 - Memory leak in poolGrow.
#2990652: CMake support.
#3010819: UNEXPECTED_STATE with a trailing "%" in entity value.
#3206497: Unitialized memory returned from XML_Parse.
#3287849: make check fails on mingw-w64.
#3496608: CVE-2012-0876 - Hash DOS attack.
- Patches:
#1749198: pkg-config support.
#3010222: Fix for bug #3010819.
#3312568: CMake support.
#3446384: Report byte offsets for attr names and values.
- New Features / API changes:
Added new API member XML_SetHashSalt() that allows setting an intial
value (salt) for hash calculations. This is part of the fix for
bug #3496608 to randomize hash parameters.
When compiled with XML_ATTR_INFO defined, adds new API member
XML_GetAttributeInfo() that allows retrieving the byte
offsets for attribute names and values (patch #3446384).
Added CMake build system.
See bug #2990652 and patch #3312568.
Added run-benchmark target to Makefile.in - relies on testdata module
present in the same relative location as in the repository.
Pullup ticket 2978 - requested by tron
security patch
Revisions pulled up:
- pkgsrc/textproc/expat/Makefile 1.25
- pkgsrc/textproc/expat/distinfo 1.19
Files added:
- pkgsrc/textproc/expat/patches/patch-ab
-------------------------------------------------------------------------
Module Name: pkgsrc
Committed By: drochner
Date: Tue Jan 26 18:37:02 UTC 2010
Modified Files:
pkgsrc/textproc/expat: Makefile distinfo
Added Files:
pkgsrc/textproc/expat/patches: patch-ab
Log Message:
add patch from upstream CVS to fix CVE-2009-3560
(possible DOS due to crash on bad input)
bump PKGREVISION
To generate a diff of this commit:
cvs rdiff -u -r1.24 -r1.25 pkgsrc/textproc/expat/Makefile
cvs rdiff -u -r1.18 -r1.19 pkgsrc/textproc/expat/distinfo
cvs rdiff -u -r0 -r1.1 pkgsrc/textproc/expat/patches/patch-ab
add patch from upstream CVS to fix CVE-2009-3560 (possible DOS due to crash on bad input) bump PKGREVISION
Pullup ticket 2886 - requested by drochner
security fix
Revisions pulled up:
- pkgsrc/textproc/expat/Makefile 1.24
- pkgsrc/textproc/expat/distinfo 1.17
Files added:
pkgsrc/textproc/expat/patches/patch-aa 1.7
Module Name: pkgsrc
Committed By: drochner
Date: Thu Sep 10 09:59:21 UTC 2009
Modified Files:
pkgsrc/textproc/expat: Makefile distinfo
Added Files:
pkgsrc/textproc/expat/patches: patch-aa
Log Message:
fix SA36425: possible DoS due to an error when parsing certain
UTF-8 sequences
(patch from Python CVS)
bump PKGREVISION
To generate a diff of this commit:
cvs rdiff -u -r1.23 -r1.24 pkgsrc/textproc/expat/Makefile
cvs rdiff -u -r1.16 -r1.17 pkgsrc/textproc/expat/distinfo
cvs rdiff -u -r0 -r1.7 pkgsrc/textproc/expat/patches/patch-aa
fix SA36425: possible DoS due to an error when parsing certain UTF-8 sequences (patch from Python CVS) bump PKGREVISION
Update to 2.0.1:
Release 2.0.1 Tue June 5 2007
- Fixed bugs #1515266, 1515600: The character data handler's calling
of XML_StopParser() was not handled properly; if the parser was
stopped and the handler set to NULL, the parser would segfault.
- Fixed bug #1690883: Expat failed on EBCDIC systems as it assumed
some character constants to be ASCII encoded.
- Minor cleanups of the test harness.
- Fixed xmlwf bug #1513566: "out of memory" error on file size zero.
- Fixed outline.c bug #1543233: missing a final XML_ParserFree() call.
- Fixes and improvements for Windows platform:
bugs #1409451, #1476160, 1548182, 1602769, 1717322.
- Build fixes for various platforms:
HP-UX, Tru64, Solaris 9: patch #1437840, bug #1196180.
All Unix: #1554618 (refreshed config.sub/config.guess).
#1490371, #1613457: support both, DESTDIR and INSTALL_ROOT,
without relying on GNU-Make specific features.
#1647805: Patched configure.in to work better with Intel compiler.
- Fixes to Makefile.in to have make check work correctly:
bugs #1408143, #1535603, #1536684.
- Added Open Watcom support: patch #1523242.
DESTDIR support.
Recursive revision bump / recommended bump for gettext ABI change.
Update to 2.0.0:
Release 2.0.0 Wed Jan 11 2006
- We no longer use the "check" library for C unit testing; we
always use the (partial) internal implementation of the API.
- Report XML_NS setting via XML_GetFeatureList().
- Fixed headers for use from C++.
- XML_GetCurrentLineNumber() and XML_GetCurrentColumnNumber()
now return unsigned integers.
- Added XML_LARGE_SIZE switch to enable 64-bit integers for
byte indexes and line/column numbers.
- Updated to use libtool 1.5.22 (the most recent).
- Added support for AmigaOS.
- Some mostly minor bug fixes. SF issues include: 1006708,
1021776, 1023646, 1114960, 1156398, 1221160, 1271642.
Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions: USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.
Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10 in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
Don't have a comma end an enumeration list, which is apparently not allowed by GCC with -pedantic -ansi. Bump the PKGREVISION.
update to expat-1.95.8
Release 1.95.8 Fri Jul 23 2004
- Major new feature: suspend/resume. Handlers can now request
that a parse be suspended for later resumption or aborted
altogether. See "Temporarily Stopping Parsing" in the
documentation for more details.
- Some mostly minor bug fixes, but compilation should no
longer generate warnings on most platforms. SF issues
include: 827319, 840173, 846309, 888329, 896188, 923913,
928113, 961698, 985192.
update to 1.95.7 bugfixes and compatibility improvements
LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globs
relative to ${WRKSRC}. Remove redundant LIBTOOL_OVERRIDE settings that
are automatically handled by the default setting in bsd.pkg.mk.
replace deprecated USE_GMAKE with USE_GNU_TOOLS+=make.
bl3ify
s/netbsd.org/NetBSD.org/
Bump PKGREVISION of textproc/expat to 1: fix an obvious C bug where types should be declared/defined before they are used. This should fix errors of the form: .../expat.h:657: use of enum `XML_Status' without previous declaration .../expat.h:736: multiple definition of `enum XML_Status'
update to 1.95.6 changes: -Added XML_FreeContentModel(). -Added XML_MemMalloc(), XML_MemRealloc(), XML_MemFree(). -Enhanced the regression test suite. -bugfixes
update to 1.95.5 changes: Added XML_UseForeignDTD() for improved SAX2 support. Added XML_GetFeatureList(). Defined XML_Bool type and the values XML_TRUE and XML_FALSE. Use an incomplete struct instead of a void* for the parser. Fixed UTF-8 decoding bug that caused legal UTF-8 to be rejected. Finally fixed bug where default handler would report DTD events that were already handled by another handler. Initial patch contributed by Darryl Miller. Reduced line-length for all source code and headers to be no longer than 80 characters, to help with AS/400 support. Reduced memory copying during parsing (SF patch #600964). Fixed a variety of bugs.
Merge changes in packages from the buildlink2 branch that have buildlink2.mk files back into the main trunk. This provides sufficient buildlink2 infrastructure to start merging other packages from the buildlink2 branch that have already been converted to use the buildlink2 framework.
Merge changes from pkgsrc-current into the buildlink2 branch for the packages that have buildlink2.mk files.
update to 1.95.4 changes since 1.95.2: -Added the XML_ParserReset() API function -Allow xmlwf to read from standard input -Install a man page for xmlwf on Unix systems -bugfixes -unrelated portability enhancements
Rename USE_BUILDLINK2_ONLY to USE_BUILDLINK2 for less verbosity. Also convert a few more packages to use the buildlink2 framework.
First pass at conversion of various packages to use the buildlink2 framework. Add many buildlink2.mk files to add to the framework. Please see buildlink2.txt for more details.
Mark as USE_BUILDLINK_ONLY as this package is strongly-buildlinked.
update to 1.95.2
changes:
- Added compile-time constants that can be used to determine the
Expat version
- Removed a lot of GNU-specific dependencies to aide portability
among the various Unix flavors.
- Fix the UTF-8 BOM bug.
- Cleaned up warning messages for several compilers.
- Added the -Wall, -Wstrict-prototypes options for GCC.
install the html documentation, bump version to 1.95.1nb1
This is James Clark's expat XML parser library in C. It is a stream oriented parser that requires setting handlers to deal with the structure that the parser discovers in the document.
Initial revision