forked from GNOME/libxml2
-
Notifications
You must be signed in to change notification settings - Fork 0
/
NEWS
3568 lines (3170 loc) · 180 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
NEWS file for libxml2
The change log at
ChangeLog.html
describes the recents commits
to the GIT at
https://gitlab.gnome.org/GNOME/libxml2
code base.Here is the list of public releases:
v2.9.13: Feb 19 2022:
- Security:
[CVE-2022-23308] Use-after-free of ID and IDREF attributes
(Thanks to Shinji Sato for the report)
Use-after-free in xmlXIncludeCopyRange (David Kilzer)
Fix Null-deref-in-xmlSchemaGetComponentTargetNs (huangduirong)
Fix memory leak in xmlXPathCompNodeTest
Fix null pointer deref in xmlStringGetNodeList
Fix several memory leaks found by Coverity (David King)
- Fixed regressions:
Fix regression in RelaxNG pattern matching
Properly handle nested documents in xmlFreeNode
Fix regression with PEs in external DTD
Fix random dropping of characters on dumping ASCII encoded XML (Mohammad Razavi)
Revert "Make schema validation fail with multiple top-level elements"
Fix regression when parsing invalid HTML tags in push mode
Fix regression parsing public IDs literals in HTML
Fix buffering in xmlOutputBufferWrite
Fix whitespace when serializing empty HTML documents
Fix XPath recursion limit
Fix regression in xmlNodeDumpOutputInternal
Work around lxml API abuse
- Bug fixes:
Fix xmlSetTreeDoc with entity references
Fix double counting of CRLF in comments
Make sure to grow input buffer in xmlParseMisc
Don't ignore xmllint options after "-"
Don't normalize namespace URIs in XPointer xmlns() scheme
Fix handling of XSD with empty namespace
Also register HTML document nodes
Make xmllint return an error if arguments are missing
Fix handling of ctxt->base in xmlXPtrEvalXPtrPart
Fix xmllint --maxmem
Fix htmlReadFd, which was using a mix of xml and html context functions (Finn Barber)
Move current position before possible calling of ctxt->sax->characters (Yulin Li)
Fix parse failure when 4-byte character in UTF-16 BE is split across a chunk (David Kilzer)
Patch to forbid epsilon-reduction of final states (Arne Becker)
Avoid segfault at exit when using custom memory functions (Mike Dalessio)
- Tests, code quality, fuzzing:
Remove .travis.yml
Make xmlFuzzReadString return a zero size in error case
Fix unused function warning in testapi.c
Update NewsML DTD in test suite
Add more checks for malloc failures in xmllint.c
Avoid potential integer overflow in xmlstring.c
Run CI tests with UBSan implicit-conversion checks
Fix casting of line numbers in SAX2.c
Fix integer conversion warnings in hash.c
Add explicit casts in runtest.c
Fix integer conversion warning in xmlIconvWrapper
Add suffix to unsigned constant in xmlmemory.c
Add explicit casts in testchar.c
Fix integer conversion warnings in xmlstring.c
Add explicit cast in xmlURIUnescapeString
Remove unused variable in xmlCharEncOutFunc (David King)
- Build system, portability:
Remove xmlwin32version.h
Fix fuzzer test with VPATH build
Support custom prefix when installing Python module
Remove Makefile.win
Remove CVS and SVN-related code
Port python 3.x module to Windows and improve distutils (Chun-wei Fan)
Correctly install the HTML examples into their subdirectory (Mattia Rizzolo)
Refactor the settings of $docdir (Mattia Rizzolo)
Remove unused configure checks (Ben Boeckel)
python/Makefile.am: use *_LIBADD, not *_LDFLAGS for LIBS (Sam James)
Fix check for libtool in autogen.sh
Use version in configure.ac for CMake (Timothy Lyanguzov)
Add CMake alias targets for embedded projects (Markus Rickert)
- Documentation:
Remove SVN keyword anchors
Rework README
Remove README.cvs-commits
Remove old ChangeLog
Update hyperlinks
Remove README.docs
Remove MAINTAINERS
Remove xmltutorial.pdf
Upload documentation to GitLab pages
Document how to escape XML_CATALOG_FILES
Fix libxml2.doap
Update URL for libxml++ C++ binding (Kjell Ahlstedt)
Generate devhelp2 index file (Emmanuele Bassi)
Mention XML_CATALOG_FILES is space-separated (Jan Tojnar)
Add documentaiton for xmllint exit code 10 (Rainer Canavan)
Fix some validation errors in the FAQ (David King)
Add instructions on how to use CMake to compile libxml (Markus Rickert)
v2.9.12: May 13 2021:
- Build system:
Add fuzz.h and seed/regexp to EXTRA_DIST
v2.9.11: May 13 2021:
- Security:
Patch for security issue CVE-2021-3541 (Daniel Veillard)
- Documentation:
Clarify xmlNewDocProp documentation (Nick Wellnhofer)
- Portability:
CMake: Only add postfixes if MSVC (Christopher Degawa),
Fix XPath NaN/Inf for older GCC versions (Nick Wellnhofer),
Use CMake PROJECT_VERSION (Markus Rickert),
Fix warnings in libxml.m4 with autoconf 2.70+. (Simon Josefsson),
Add CI for CMake on MSVC (Markus Rickert),
Update minimum required CMake version (Markus Rickert),
Add variables for configured options to CMake config files (Markus Rickert),
Check if variables exist when defining targets (Markus Rickert),
Check if target exists when reading target properties (Markus Rickert),
Add xmlcatalog target and definition to config files (Markus Rickert),
Remove include directories for link-only dependencies (Markus Rickert),
Fix ICU build in CMake (Markus Rickert),
Configure pkgconfig, xml2-config, and xml2Conf.sh file (Markus Rickert),
Update CMake config files (Markus Rickert),
Add xmlcatalog and xmllint to CMake export (Markus Rickert),
Simplify xmlexports.h (Nick Wellnhofer),
Require dependencies based on enabled CMake options (Markus Rickert),
Use NAMELINK_COMPONENT in CMake install (Markus Rickert),
Add CMake files to EXTRA_DIST (Markus Rickert),
Add missing compile definition for static builds to CMake (Markus Rickert),
Add CI for CMake on Linux and MinGW (Markus Rickert),
Fix variable name in win32/configure.js (Nick Wellnhofer),
Fix version parsing in win32/configure.js (Nick Wellnhofer),
Fix autotools warnings (Nick Wellnhofer),
Update config.h.cmake.in (Markus Rickert),
win32: allow passing *FLAGS on command line (Michael Stahl),
Configure file xmlwin32version.h.in on MSVC (Markus Rickert),
List headers individually (Markus Rickert),
Add CMake build files (Markus Rickert),
Parenthesize Py<type>_Check() in ifs (Miro Hrončok),
Minor fixes to configure.js (Nick Wellnhofer)
- Bug Fixes:
Fix null deref in legacy SAX1 parser (Nick Wellnhofer),
Fix handling of unexpected EOF in xmlParseContent (Nick Wellnhofer),
Fix line numbers in error messages for mismatched tags (Nick Wellnhofer),
Fix htmlTagLookup (Nick Wellnhofer),
Propagate error in xmlParseElementChildrenContentDeclPriv (Nick Wellnhofer),
Fix user-after-free with `xmllint --xinclude --dropdtd` (Nick Wellnhofer),
Fix dangling pointer with `xmllint --dropdtd` (Nick Wellnhofer),
Validate UTF8 in xmlEncodeEntities (Joel Hockey),
Fix use-after-free with `xmllint --html --push` (Nick Wellnhofer),
Allow FP division by zero in xmlXPathInit (Nick Wellnhofer),
Fix xmlGetNodePath with invalid node types (Nick Wellnhofer),
Fix exponential behavior with recursive entities (Nick Wellnhofer),
Fix quadratic behavior when looking up xml:* attributes (Nick Wellnhofer),
Fix slow parsing of HTML with encoding errors (Nick Wellnhofer),
Fix null deref introduced with previous commit (Nick Wellnhofer),
Check for invalid redeclarations of predefined entities (Nick Wellnhofer),
Add the copy of type from original xmlDoc in xmlCopyDoc() (SVGAnimate),
parser.c: shrink the input buffer when appropriate (Mike Dalessio),
Fix infinite loop in HTML parser introduced with recent commits (Nick Wellnhofer),
Fix quadratic runtime when parsing CDATA sections (Nick Wellnhofer),
Fix timeout when handling recursive entities (Nick Wellnhofer),
Fix memory leak in xmlParseElementMixedContentDecl (Nick Wellnhofer),
Fix null deref in xmlStringGetNodeList (Nick Wellnhofer),
use new htmlParseLookupCommentEnd to find comment ends (Mike Dalessio),
htmlParseComment: treat `--!>` as if it closed the comment (Mike Dalessio),
Fix integer overflow in xmlSchemaGetParticleTotalRangeMin (Nick Wellnhofer),
encoding: fix memleak in xmlRegisterCharEncodingHandler() (Xiaoming Ni),
xmlschemastypes.c: xmlSchemaGetFacetValueAsULong add, check "facet->val" (Xiaoming Ni),
Fix null pointer deref in xmlXPtrRangeInsideFunction (Nick Wellnhofer),
Fix quadratic runtime in HTML push parser with null bytes (Nick Wellnhofer),
Avoid quadratic checking of identity-constraints (Michael Matz),
Fix building with ICU 68. (Frederik Seiffert),
Convert python/libxml.c to PY_SSIZE_T_CLEAN (Victor Stinner),
Fix xmlURIEscape memory leaks. (Elliott Hughes),
Avoid call stack overflow with XML reader and recursive XIncludes (Nick Wellnhofer),
Fix caret in regexp character group (Nick Wellnhofer),
parser.c: xmlParseCharData peek behavior fixed wrt newlines (Mike Dalessio),
Fix memory leaks in XPointer string-range function (Nick Wellnhofer),
Fix use-after-free when XIncluding text from Reader (Nick Wellnhofer),
Fix SEGV in xmlSAXParseFileWithData (yanjinjq),
Fix null deref in XPointer expression error path (Nick Wellnhofer),
Don't call xmlXPathInit directly (Nick Wellnhofer),
Fix cleanup of attributes in XML reader (Nick Wellnhofer),
Fix double free in XML reader with XIncludes (Nick Wellnhofer),
Fix memory leak in xmlXIncludeAddNode error paths (Nick Wellnhofer),
Revert "Fix quadratic runtime in xi:fallback processing" (Nick Wellnhofer),
Fix error reporting with xi:fallback (Nick Wellnhofer),
Fix quadratic runtime in xi:fallback processing (Nick Wellnhofer),
Fix corner case with empty xi:fallback (Nick Wellnhofer),
Fix XInclude regression introduced with recent commit (Nick Wellnhofer),
Fix memory leak in runtest.c (Nick Wellnhofer),
Make "xmllint --push --recovery" work (Nick Wellnhofer),
Revert "Do not URI escape in server side includes" (Nick Wellnhofer),
Fix column number accounting in xmlParse*NameAndCompare (Nick Wellnhofer),
Stop counting nbChars in parser context (Nick Wellnhofer),
Fix out-of-bounds read with 'xmllint --htmlout' (Nick Wellnhofer),
Fix exponential runtime and memory in xi:fallback processing (Nick Wellnhofer),
Don't process siblings of root in xmlXIncludeProcess (Nick Wellnhofer),
Don't recurse into xi:include children in xmlXIncludeDoProcess (Nick Wellnhofer),
Fix memory leak in xmlXIncludeIncludeNode error paths (Nick Wellnhofer),
Check for custom free function in global destructor (Nick Wellnhofer),
Fix integer overflow when comparing schema dates (Nick Wellnhofer),
Fix exponential runtime in xmlFARecurseDeterminism (Nick Wellnhofer),
Don't try to handle namespaces when building HTML documents (Nick Wellnhofer),
Fix several quadratic runtime issues in HTML push parser (Nick Wellnhofer),
Fix quadratic runtime when push parsing HTML start tags (Nick Wellnhofer),
Reset XML parser input before reporting errors (David Kilzer),
Fix quadratic runtime when push parsing HTML entity refs (Nick Wellnhofer),
Fix HTML push parser lookahead (Nick Wellnhofer),
Make htmlCurrentChar always translate U+0000 (Nick Wellnhofer),
Fix UTF-8 decoder in HTML parser (Nick Wellnhofer),
Fix quadratic runtime when parsing HTML script content (Nick Wellnhofer),
Reset HTML parser input before reporting error (Nick Wellnhofer),
Fix more quadratic runtime issues in HTML push parser (Nick Wellnhofer),
Fix regression introduced with 477c7f6a (Nick Wellnhofer),
Fix quadratic runtime in HTML parser (Nick Wellnhofer),
Reset HTML parser input before reporting encoding error (Nick Wellnhofer),
Fix integer overflow in xmlFAParseQuantExact (Nick Wellnhofer),
Fix return value of xmlC14NDocDumpMemory (Nick Wellnhofer),
Don't follow next pointer on documents in xmlXPathRunStreamEval (Nick Wellnhofer),
Fix integer overflow in _xmlSchemaParseGYear (Nick Wellnhofer),
Fix integer overflow when parsing {min,max}Occurs (Nick Wellnhofer),
Fix another memory leak in xmlSchemaValAtomicType (Nick Wellnhofer),
Fix unsigned integer overflow in htmlParseTryOrFinish (Nick Wellnhofer),
Fix integer overflow in htmlParseCharRef (Nick Wellnhofer),
Fix undefined behavior in UTF16LEToUTF8 (Nick Wellnhofer),
Fix return value of xmlCharEncOutput (Nick Wellnhofer),
Never expand parameter entities in text declaration (Nick Wellnhofer),
Fix undefined behavior in xmlXPathTryStreamCompile (Nick Wellnhofer),
Fix use-after-free with validating reader (Nick Wellnhofer),
xmlParseBalancedChunkMemory must not be called with NULL doc (Nick Wellnhofer),
Revert "Fix memory leak in xmlParseBalancedChunkMemoryRecover" (Nick Wellnhofer),
Fix memory leak in xmlXIncludeLoadDoc error path (Nick Wellnhofer),
Make schema validation fail with multiple top-level elements (Nick Wellnhofer),
Call xmlCleanupParser on ELF destruction (Samuel Thibault),
Fix copying of entities in xmlParseReference (Nick Wellnhofer),
Fix memory leak in xmlSchemaValidateStream (Zhipeng Xie),
Fix xmlSchemaGetCanonValue formatting for date and dateTime (Kevin Puetz),
Fix memory leak when shared libxml.dll is unloaded (Kevin Puetz),
Fix potentially-uninitialized critical section in Win32 DLL builds (Kevin Puetz),
Fix integer overflow in xmlBufferResize (Nick Wellnhofer),
Check for overflow when allocating two-dimensional arrays (Nick Wellnhofer),
Remove useless comparisons (Nick Wellnhofer),
Fix overflow check in xmlNodeDump (Nick Wellnhofer),
Fix infinite loop in xmlStringLenDecodeEntities (Zhipeng Xie),
Fix freeing of nested documents (Nick Wellnhofer),
Fix more memory leaks in error paths of XPath parser (Nick Wellnhofer),
Fix memory leaks of encoding handlers in xmlsave.c (Nick Wellnhofer),
Fix xml2-config error code (Nick Wellnhofer),
Fix memory leak in error path of XPath expr parser (Nick Wellnhofer),
Fix overflow handling in xmlBufBackToBuffer (Nick Wellnhofer),
Null pointer handling in catalog.c (raniervf),
xml2-config.in: fix regressions introduced by commit 2f2bf4b2c (Dmitry V. Levin)
- Improvements:
Store per-element parser state in a struct (Nick Wellnhofer),
update for xsd:language type check (PaulHiggs),
Update INSTALL.libxml2 (Nick Wellnhofer),
Fix include order in c14n.h (Nick Wellnhofer),
Fix duplicate xmlStrEqual calls in htmlParseEndTag (Nick Wellnhofer),
Speed up htmlCheckAutoClose (Nick Wellnhofer),
Speed up htmlTagLookup (Nick Wellnhofer),
Stop checking attributes for UTF-8 validity (Nick Wellnhofer),
Reduce some fuzzer timeouts (Nick Wellnhofer),
Only run a few CI tests unless scheduled (Nick Wellnhofer),
Improve fuzzer stability (Nick Wellnhofer),
Check for feature flags in fuzzer tests (Nick Wellnhofer),
Another attempt at improving fuzzer stability (Nick Wellnhofer),
Revert "Improve HTML fuzzer stability" (Nick Wellnhofer),
Add charset names to fuzzing dictionaries (Nick Wellnhofer),
Improve HTML fuzzer stability (Nick Wellnhofer),
Add CI for MSVC x86 (Markus Rickert),
Add a flag to not output anything when xmllint succeeded (hhb),
Speed up HTML fuzzer (Nick Wellnhofer),
Remove unused encoding parameter of HTML output functions (Nick Wellnhofer),
Handle malloc failures in fuzzing code (Nick Wellnhofer),
add test coverage for incorrectly-closed comments (Mike Dalessio),
Enforce maximum length of fuzz input (Nick Wellnhofer),
Remove temporary members from struct _xmlXPathContext (Nick Wellnhofer),
Build the Python extension with PY_SSIZE_T_CLEAN (Victor Stinner),
Add CI test for Python 3 (Nick Wellnhofer),
Add fuzzing dictionaries to EXTRA_DIST (Nick Wellnhofer),
Add 'fuzz' subdirectory to DIST_SUBDIRS (Nick Wellnhofer),
Allow port numbers up to INT_MAX (Nick Wellnhofer),
Handle dumps of corrupted documents more gracefully (Nick Wellnhofer),
Limit size of free lists in XML reader when fuzzing (Nick Wellnhofer),
Hardcode maximum XPath recursion depth (Nick Wellnhofer),
Pass URL of main entity in XML fuzzer (Nick Wellnhofer),
Consolidate seed corpus generation (Nick Wellnhofer),
Test fuzz targets with dummy driver (Nick Wellnhofer),
Fix regression introduced with commit d88df4b (Nick Wellnhofer),
Fix regression introduced with commit 74dcc10b (Nick Wellnhofer),
Add TODO comment in xinclude.c (Nick Wellnhofer),
Stop using maxParserDepth in xpath.c (Nick Wellnhofer),
Remove dead code in xinclude.c (Nick Wellnhofer),
Don't add formatting newlines to XInclude nodes (Nick Wellnhofer),
Don't use SAX1 if all element handlers are NULL (Nick Wellnhofer),
Remove unneeded progress checks in HTML parser (Nick Wellnhofer),
Use strcmp when fuzzing (Nick Wellnhofer),
Fix XPath fuzzer (Nick Wellnhofer),
Fuzz XInclude engine (Nick Wellnhofer),
Add XPath and XPointer fuzzer (Nick Wellnhofer),
Update fuzzing code (Nick Wellnhofer),
More *NodeDumpOutput fixes (Nick Wellnhofer),
Fix *NodeDumpOutput functions (Nick Wellnhofer),
Make xmlNodeDumpOutputInternal non-recursive (Nick Wellnhofer),
Make xhtmlNodeDumpOutput non-recursive (Nick Wellnhofer),
Make htmlNodeDumpFormatOutput non-recursive (Nick Wellnhofer),
Fix .gitattributes (Nick Wellnhofer),
Rework control flow in htmlCurrentChar (Nick Wellnhofer),
Make 'xmllint --html --push -' read from stdin (Nick Wellnhofer),
Remove misleading comments in xpath.c (Nick Wellnhofer),
Update to Devhelp index file format version 2 (Andre Klapper),
Set project language to C (Markus Rickert),
Add variable for working directory of XML Conformance Test Suite (Markus Rickert),
Add additional tests and XML Conformance Test Suite (Markus Rickert),
Add command line option for temp directory in runtest (Markus Rickert),
Ensure LF line endings for test files (Markus Rickert),
Enable runtests and testThreads (Markus Rickert),
Limit regexp nesting depth (Nick Wellnhofer),
Fix return values and documentation in encoding.c (Nick Wellnhofer),
Add regexp regression tests (David Kilzer),
Report error for invalid regexp quantifiers (Nick Wellnhofer),
Fix rebuilding docs, by hiding __attribute__((...)) behind a macro. (Martin Vidner),
Copy xs:duration parser from libexslt (Nick Wellnhofer),
Fuzz target for XML Schemas (Nick Wellnhofer),
Move entity recorder to fuzz.c (Nick Wellnhofer),
Fuzz target for HTML parser (Nick Wellnhofer),
Update GitLab CI container (Nick Wellnhofer),
Add options file for xml fuzzer (Nick Wellnhofer),
Add a couple of libFuzzer targets (Nick Wellnhofer),
Guard new calls to xmlValidatePopElement in xml_reader.c (Daniel Cheng),
Add LIBXML_VALID_ENABLED to xmlreader (Łukasz Wojniłowicz),
Fix typos (Nick Wellnhofer),
Disable LeakSanitizer (Nick Wellnhofer),
Stop calling SAX getEntity handler from XMLReader (Nick Wellnhofer),
Add test case for recursive external parsed entities (Nick Wellnhofer),
Enable error tests with entity substitution (Nick Wellnhofer),
Don't load external entity from xmlSAX2GetEntity (Nick Wellnhofer),
Merge code paths loading external entities (Nick Wellnhofer),
Copy some XMLReader option flags to parser context (Nick Wellnhofer),
Add xmlPopOutputCallbacks (Nick Wellnhofer),
Updated Python test reader2.py (Pieter van Oostrum),
Updated python/tests/tstLastError.py (Pieter van Oostrum),
Use random seed in xmlDictComputeFastKey (Ranier Vilela),
Enable more undefined behavior sanitizers (Nick Wellnhofer)
v2.9.10: Oct 30 2019:
- Documentation:
Fix a few more typos ("fonction") (Nick Wellnhofer),
Large batch of typo fixes (Jared Yanovich),
Fix typos: tree: move{ -> s}, reconcil{i -> }ed, h{o -> e}ld by... (Jan Pokorný),
Fix typo: xpath: simpli{ -> fi}ed (Jan Pokorný),
Doc: do not mislead towards "infeasible" scenario wrt. xmlBufNodeDump (Jan Pokorný),
Fix comments in test code (zhouzhongyuan),
fix comment in testReader.c (zhouzhongyuan)
- Portability:
Fix some release issues on Fedora 30 (Daniel Veillard),
Fix exponent digits when running tests under old MSVC (Daniel Richard G),
Work around buggy ceil() function on AIX (Daniel Richard G),
Don't call printf with NULL string in runtest.c (Daniel Richard G),
Switched from unsigned long to ptrdiff_t in parser.c (Stephen Chenney),
timsort.h: support older GCCs (Jérôme Duval),
Make configure.ac work with older pkg-config (Nick Wellnhofer),
Stop defining _REENTRANT on some Win32 platforms (Nick Wellnhofer),
Fix nanohttp.c on MinGW (Nick Wellnhofer),
Fix Windows compiler warning in testC14N.c (Nick Wellnhofer),
Merge testThreadsWin32.c into testThreads.c (Nick Wellnhofer),
Fix Python bindings under Windows (Nick Wellnhofer)
- Bug Fixes:
Another fix for conditional sections at end of document (Nick Wellnhofer),
Fix for conditional sections at end of document (Nick Wellnhofer),
Make sure that Python tests exit with error code (Nick Wellnhofer),
Audit memory error handling in xpath.c (Nick Wellnhofer),
Fix error code in xmlTextWriterStartDocument (Nick Wellnhofer),
Fix integer overflow when counting written bytes (Nick Wellnhofer),
Fix uninitialized memory access in HTML parser (Nick Wellnhofer),
Fix memory leak in xmlSchemaValAtomicType (Nick Wellnhofer),
Disallow conditional sections in internal subset (Nick Wellnhofer),
Fix use-after-free in xmlTextReaderFreeNodeList (Nick Wellnhofer),
Fix Regextests (Nick Wellnhofer),
Fix empty branch in regex (Nick Wellnhofer),
Fix integer overflow in entity recursion check (Nick Wellnhofer),
Don't read external entities or XIncludes from stdin (Nick Wellnhofer),
Fix Schema determinism check of ##other namespaces (Nick Wellnhofer),
Fix potential null deref in xmlSchemaIDCFillNodeTables (zhouzhongyuan),
Fix potential memory leak in xmlBufBackToBuffer (Nick Wellnhofer),
Fix error message when processing XIncludes with fallbacks (Nick Wellnhofer),
Fix memory leak in xmlRegEpxFromParse (zhouzhongyuan),
14:00 is a valid timezone for xs:dateTime (Nick Wellnhofer),
Fix memory leak in xmlParseBalancedChunkMemoryRecover (Zhipeng Xie),
Fix potential null deref in xmlRelaxNGParsePatterns (Nick Wellnhofer),
Misleading error message with xs:{min|max}Inclusive (bettermanzzy),
Fix memory leak in xmlXIncludeLoadTxt (Wang Kirin),
Partial fix for comparison of xs:durations (Nick Wellnhofer),
Fix null deref in xmlreader buffer (zhouzhongyuan),
Fix unability to RelaxNG-validate grammar with choice-based name class (Jan Pokorný),
Fix unability to validate ambiguously constructed interleave for RelaxNG (Jan Pokorný),
Fix possible null dereference in xmlXPathIdFunction (zhouzhongyuan),
fix memory leak in xmlAllocOutputBuffer (zhouzhongyuan),
Fix unsigned int overflow (Jens Eggerstedt),
dict.h: gcc 2.95 doesn't allow multiple storage classes (Nick Wellnhofer),
Fix another code path in xmlParseQName (Nick Wellnhofer),
Make sure that xmlParseQName returns NULL in error case (Nick Wellnhofer),
Fix build without reader but with pattern (Nick Wellnhofer),
Fix memory leak in xmlAllocOutputBufferInternal error path (Nick Wellnhofer),
Fix unsigned integer overflow (Nick Wellnhofer),
Fix return value of xmlOutputBufferWrite (Nick Wellnhofer),
Fix parser termination from "Double hyphen within comment" error (David Warring),
Fix call stack overflow in xmlFreePattern (Nick Wellnhofer),
Fix null deref in previous commit (Nick Wellnhofer),
Fix memory leaks in xmlXPathParseNameComplex error paths (Nick Wellnhofer),
Check for integer overflow in xmlXPtrEvalChildSeq (Nick Wellnhofer),
Fix xmllint dump of XPath namespace nodes (Nick Wellnhofer),
Fix float casts in xmlXPathSubstringFunction (Nick Wellnhofer),
Fix null deref in xmlregexp error path (Nick Wellnhofer),
Fix null pointer dereference in xmlTextReaderReadOuterXml (Nick Wellnhofer),
Fix memory leaks in xmlParseStartTag2 error paths (Nick Wellnhofer),
Fix memory leak in xmlSAX2StartElement (Nick Wellnhofer),
Fix commit "Memory leak in xmlFreeID (xmlreader.c)" (Nick Wellnhofer),
Fix NULL pointer deref in xmlTextReaderValidateEntity (Nick Wellnhofer),
Memory leak in xmlFreeTextReader (Nick Wellnhofer),
Memory leak in xmlFreeID (xmlreader.c) (Nick Wellnhofer)
- Improvements:
Run XML conformance tests under CI (Nick Wellnhofer),
Update GitLab CI config (Nick Wellnhofer),
Propagate memory errors in valuePush (Nick Wellnhofer),
Propagate memory errors in xmlXPathCompExprAdd (Nick Wellnhofer),
Make xmlFreeDocElementContent non-recursive (Nick Wellnhofer),
Enable continuous integration via GitLab CI (Nick Wellnhofer),
Avoid ignored attribute warnings under GCC (Nick Wellnhofer),
Make xmlDumpElementContent non-recursive (Nick Wellnhofer),
Make apibuild.py ignore ATTRIBUTE_NO_SANITIZE (Nick Wellnhofer),
Mark xmlExp* symbols as removed (Nick Wellnhofer),
Make xmlParseConditionalSections non-recursive (Nick Wellnhofer),
Adjust expected error in Python tests (Nick Wellnhofer),
Make xmlTextReaderFreeNodeList non-recursive (Nick Wellnhofer),
Make xmlFreeNodeList non-recursive (Nick Wellnhofer),
Make xmlParseContent and xmlParseElement non-recursive (Nick Wellnhofer),
Remove executable bit from non-executable files (Nick Wellnhofer),
Fix expected output of test/schemas/any4 (Nick Wellnhofer),
Optimize build instructions in README (zhouzhongyuan),
xml2-config.in: Output CFLAGS and LIBS on the same line (Hugh McMaster),
xml2-config: Add a --dynamic switch to print only shared libraries (Hugh McMaster),
Annotate functions with __attribute__((no_sanitize)) (Nick Wellnhofer),
Fix warnings when compiling without reader or push parser (Nick Wellnhofer),
Remove unused member `doc` in xmlSaveCtxt (Nick Wellnhofer),
Limit recursion depth in xmlXPathCompOpEvalPredicate (Nick Wellnhofer),
Remove -Wno-array-bounds (Nick Wellnhofer),
Remove unreachable code in xmlXPathCountFunction (Nick Wellnhofer),
Improve XPath predicate and filter evaluation (Nick Wellnhofer),
Limit recursion depth in xmlXPathOptimizeExpression (Nick Wellnhofer),
Disable hash randomization when fuzzing (Nick Wellnhofer),
Optional recursion limit when parsing XPath expressions (Nick Wellnhofer),
Optional recursion limit when evaluating XPath expressions (Nick Wellnhofer),
Use break statements in xmlXPathCompOpEval (Nick Wellnhofer),
Optional XPath operation limit (Nick Wellnhofer),
Fix compilation with --with-minimum (Nick Wellnhofer),
Check XPath stack after calling functions (Nick Wellnhofer),
Remove debug printf in xmlreader.c (Nick Wellnhofer),
Always define LIBXML_THREAD_ENABLED when enabled (Michael Haubenwallner),
Regenerate NEWS (Nick Wellnhofer),
Change git repo URL (Nick Wellnhofer),
Change bug tracker URL (Nick Wellnhofer),
Remove outdated HTML file (Nick Wellnhofer),
Fix unused function warning in testapi.c (Nick Wellnhofer),
Add some generated test files to .gitignore (Nick Wellnhofer),
Remove unneeded function pointer casts (Nick Wellnhofer),
Fix -Wcast-function-type warnings (GCC 8) (Nick Wellnhofer),
Fix -Wformat-truncation warnings (GCC 8) (Nick Wellnhofer)
- Cleanups:
Rebuild docs (Nick Wellnhofer),
Disable xmlExp regex code (Nick Wellnhofer),
Remove redundant code in xmlRelaxNGValidateState (Nick Wellnhofer),
Remove redundant code in xmlXPathCompRelationalExpr (Nick Wellnhofer)
v2.9.9: Jan 03 2019:
- Security:
CVE-2018-9251 CVE-2018-14567 Fix infinite loop in LZMA decompression (Nick Wellnhofer),
CVE-2018-14404 Fix nullptr deref with XPath logic ops (Nick Wellnhofer),
- Documentation:
reader: Fix documentation comment (Mohammed Sadiq)
- Portability:
Fix MSVC build with lzma (Nick Wellnhofer),
Variables need 'extern' in static lib on Cygwin (Michael Haubenwallner),
Really declare dllexport/dllimport for Cygwin (Michael Haubenwallner),
Merge branch 'patch-2' into 'master' (Nick Wellnhofer),
Change dir to $THEDIR after ACLOCAL_PATH check autoreconf creates aclocal.m4 in $srcdir (Vitaly Buka),
Improve error message if pkg.m4 couldn't be found (Nick Wellnhofer),
NaN and Inf fixes for pre-C99 compilers (Nick Wellnhofer)
- Bug Fixes:
Revert "Support xmlTextReaderNextSibling w/o preparsed doc" (Nick Wellnhofer),
Fix building relative URIs (Thomas Holder),
Problem with data in interleave in RelaxNG validation (Nikolai Weibull),
Fix memory leak in xmlSwitchInputEncodingInt error path (Nick Wellnhofer),
Set doc on element obtained from freeElems (Nick Wellnhofer),
Fix HTML serialization with UTF-8 encoding (Nick Wellnhofer),
Use actual doc in xmlTextReaderRead*Xml (Nick Wellnhofer),
Unlink node before freeing it in xmlSAX2StartElement (Nick Wellnhofer),
Check return value of nodePush in xmlSAX2StartElement (Nick Wellnhofer),
Free input buffer in xmlHaltParser (Nick Wellnhofer),
Reset HTML parser input pointers on encoding failure (Nick Wellnhofer),
Don't run icu_parse_test if EUC-JP is unsupported (Nick Wellnhofer),
Fix xmlSchemaValidCtxtPtr reuse memory leak (Greg Hildstrom),
Fix xmlTextReaderNext with preparsed document (Felix Bünemann),
Remove stray character from comment (Nick Wellnhofer),
Remove a misleading line from xmlCharEncOutput (Andrey Bienkowski),
HTML noscript should not close p (Daniel Veillard),
Don't change context node in xmlXPathRoot (Nick Wellnhofer),
Stop using XPATH_OP_RESET (Nick Wellnhofer),
Revert "Change calls to xmlCharEncInput to set flush false" (Nick Wellnhofer)
- Improvements:
Fix "Problem with data in interleave in RelaxNG validation" (Nikolai Weibull),
cleanup: remove some unreachable code (Thomas Holder),
add --relative to testURI (Thomas Holder),
Remove redefined starts and defines inside include elements (Nikolai Weibull),
Allow choice within choice in nameClass in RELAX NG (Nikolai Weibull),
Look inside divs for starts and defines inside include (Nikolai Weibull),
Add compile and libxml2-config.cmake to .gitignore (Nikolai Weibull),
Stop using doc->charset outside parser code (Nick Wellnhofer),
Add newlines to 'xmllint --xpath' output (Nick Wellnhofer),
Don't include SAX.h from globals.h (Nick Wellnhofer),
Support xmlTextReaderNextSibling w/o preparsed doc (Felix Bünemann),
Don't instruct user to run make when autogen.sh failed (林博仁(Buo-ren Lin)),
Run Travis ASan tests with "sudo: required" (Nick Wellnhofer),
Improve restoring of context size and position (Nick Wellnhofer),
Simplify and harden nodeset filtering (Nick Wellnhofer),
Avoid unnecessary backups of the context node (Nick Wellnhofer),
Fix inconsistency in xmlXPathIsInf (Nick Wellnhofer)
- Cleanups:
v2.9.8: Mar 05 2018:
- Portability:
python: remove single use of _PyVerify_fd (Patrick Welche),
Build more test executables on Windows/MSVC (Nick Wellnhofer),
Stop including ansidecl.h (Nick Wellnhofer),
Fix libz and liblzma detection (Nick Wellnhofer),
Revert "Compile testapi with -Wno-unused-function" (Nick Wellnhofer)
- Bug Fixes:
Fix xmlParserEntityCheck (Nick Wellnhofer),
Halt parser in case of encoding error (Nick Wellnhofer),
Clear entity content in case of errors (Nick Wellnhofer),
Change calls to xmlCharEncInput to set flush false when not final call. Having flush incorrectly set to true causes errors for ICU. (Joel Hockey),
Fix buffer over-read in xmlParseNCNameComplex (Nick Wellnhofer),
Fix ICU library filenames on Windows/MSVC (Nick Wellnhofer),
Fix xmlXPathIsNaN broken by recent commit (Nick Wellnhofer),
Fix -Wenum-compare warnings (Nick Wellnhofer),
Fix callback signature in testapi.c (Nick Wellnhofer),
Fix unused parameter warning without ICU (Nick Wellnhofer),
Fix IO callback signatures (Nick Wellnhofer),
Fix misc callback signatures (Nick Wellnhofer),
Fix list callback signatures (Nick Wellnhofer),
Fix hash callback signatures (Nick Wellnhofer),
Refactor name and type signature for xmlNop (Vlad Tsyrklevich),
Fixed ICU to set flush correctly and provide pivot buffer. (Joel Hockey),
Skip EBCDIC tests if EBCDIC isn't supported (Nick Wellnhofer)
- Improvements:
Disable pointer-overflow UBSan checks under Travis (Nick Wellnhofer),
Improve handling of context input_id (Daniel Veillard),
Add resource file to Windows DLL (ccpaging),
Run Travis tests with -Werror (Nick Wellnhofer),
Build with "-Wall -Wextra" (Nick Wellnhofer),
Fix -Wtautological-pointer-compare warnings (Nick Wellnhofer),
Remove unused AC_CHECKs (Nick Wellnhofer),
Update information about contributing (Nick Wellnhofer),
Fix -Wmisleading-indentation warnings (Nick Wellnhofer),
Don't touch CFLAGS in configure.ac (Nick Wellnhofer),
Ignore function pointer cast warnings (Nick Wellnhofer),
Simplify XPath NaN, inf and -0 handling (Nick Wellnhofer),
Introduce xmlPosixStrdup and update xmlMemStrdup (Nick Wellnhofer),
Add test for ICU flush and pivot buffer (Nick Wellnhofer),
Compile testapi with -Wno-unused-function (Nick Wellnhofer)
2.9.7: Nov 02 2017:
- Documentation:
xmlcatalog: refresh man page wrt. querying system catalog easily (Jan Pokorný)
- Portability:
Fix deprecated Travis compiler flag (Nick Wellnhofer),
Add declaration for DllMain (J. Peter Mugaas),
Fix preprocessor conditional in threads.h (J. Peter Mugaas),
Fix pointer comparison warnings on 64-bit Windows (J. Peter Mugaas),
Fix macro redefinition warning (J. Peter Mugaas),
Default to native threads on MinGW-w64 (Nick Wellnhofer),
Simplify Windows IO functions (Nick Wellnhofer),
Fix runtest on Windows (Nick Wellnhofer),
socklen_t is always int on Windows (Nick Wellnhofer),
Don't redefine socket error codes on Windows (Nick Wellnhofer),
Fix pointer/int cast warnings on 64-bit Windows (Nick Wellnhofer),
Fix Windows compiler warnings in xmlCanonicPath (Nick Wellnhofer)
- Bug Fixes:
xmlcatalog: restore ability to query system catalog easily (Jan Pokorný),
Fix comparison of nodesets to strings (Nick Wellnhofer)
- Improvements:
Add Makefile rules to rebuild HTML man pages (Nick Wellnhofer),
Fix mixed decls and code in timsort.h (Nick Wellnhofer),
Rework handling of return values in thread tests (Nick Wellnhofer),
Fix unused variable warnings in testrecurse (Nick Wellnhofer),
Fix -Wimplicit-fallthrough warnings (J. Peter Mugaas),
Upgrade timsort.h to latest revision (Nick Wellnhofer),
Increase warning level to /W3 under MSVC (Nick Wellnhofer),
Fix a couple of warnings in dict.c and threads.c (Nick Wellnhofer),
Update .gitignore for Windows (Nick Wellnhofer),
Fix unused variable warnings in nanohttp.c (Nick Wellnhofer),
Fix the Windows header mess (Nick Wellnhofer),
Don't include winsock2.h in xmllint.c (Nick Wellnhofer),
Remove generated file python/setup.py from version control (Nick Wellnhofer),
Use __linux__ macro in generated code (Nick Wellnhofer)
v2.9.6: Oct 06 2017:
- Portability:
Change preprocessor OS tests to __linux__ (Nick Wellnhofer)
- Bug Fixes:
Fix XPath stack frame logic (Nick Wellnhofer),
Report undefined XPath variable error message (Nick Wellnhofer),
Fix regression with librsvg (Nick Wellnhofer),
Handle more invalid entity values in recovery mode (Nick Wellnhofer),
Fix structured validation errors (Nick Wellnhofer),
Fix memory leak in LZMA decompressor (Nick Wellnhofer),
Set memory limit for LZMA decompression (Nick Wellnhofer),
Handle illegal entity values in recovery mode (Nick Wellnhofer),
Fix debug dump of streaming XPath expressions (Nick Wellnhofer),
Fix memory leak in nanoftp (Nick Wellnhofer),
Fix memory leaks in SAX1 parser (Nick Wellnhofer)
v2.9.5: Sep 04 2017:
- Security:
Detect infinite recursion in parameter entities (Nick Wellnhofer),
Fix handling of parameter-entity references (Nick Wellnhofer),
Disallow namespace nodes in XPointer ranges (Nick Wellnhofer),
Fix XPointer paths beginning with range-to (Nick Wellnhofer)
- Documentation:
Documentation fixes (Nick Wellnhofer),
Spelling and grammar fixes (Nick Wellnhofer)
- Portability:
Adding README.zOS to list of extra files for the release (Daniel Veillard),
Description of work needed to compile on zOS (Stéphane Michaut),
Porting libxml2 on zOS encoding of code (Stéphane Michaut),
small changes for OS/400 (Patrick Monnerat),
relaxng.c, xmlschemas.c: Fix build on pre-C99 compilers (Chun-wei Fan)
- Bug Fixes:
Problem resolving relative URIs (Daniel Veillard),
Fix unwanted warnings when switching encodings (Nick Wellnhofer),
Fix signature of xmlSchemaAugmentImportedIDC (Daniel Veillard),
Heap-buffer-overflow read of size 1 in xmlFAParsePosCharGroup (David Kilzer),
Fix NULL pointer deref in xmlFAParseCharClassEsc (Nick Wellnhofer),
Fix infinite loops with push parser in recovery mode (Nick Wellnhofer),
Send xmllint usage error to stderr (Nick Wellnhofer),
Fix NULL deref in xmlParseExternalEntityPrivate (Nick Wellnhofer),
Make sure not to call IS_BLANK_CH when parsing the DTD (Nick Wellnhofer),
Fix xmlHaltParser (Nick Wellnhofer),
Fix pathological performance when outputting charrefs (Nick Wellnhofer),
Fix invalid-source-encoding warnings in testWriter.c (Nick Wellnhofer),
Fix duplicate SAX callbacks for entity content (David Kilzer),
Treat URIs with scheme as absolute in C14N (Nick Wellnhofer),
Fix copy-paste errors in error messages (Nick Wellnhofer),
Fix sanity check in htmlParseNameComplex (Nick Wellnhofer),
Fix potential infinite loop in xmlStringLenDecodeEntities (Nick Wellnhofer),
Reset parser input pointers on encoding failure (Nick Wellnhofer),
Fix memory leak in xmlParseEntityDecl error path (Nick Wellnhofer),
Fix xmlBuildRelativeURI for URIs starting with './' (Nick Wellnhofer),
Fix type confusion in xmlValidateOneNamespace (Nick Wellnhofer),
Fix memory leak in xmlStringLenGetNodeList (Nick Wellnhofer),
Fix NULL pointer deref in xmlDumpElementContent (Daniel Veillard),
Fix memory leak in xmlBufAttrSerializeTxtContent (Nick Wellnhofer),
Stop parser on unsupported encodings (Nick Wellnhofer),
Check for integer overflow in memory debug code (Nick Wellnhofer),
Fix buffer size checks in xmlSnprintfElementContent (Nick Wellnhofer),
Avoid reparsing in xmlParseStartTag2 (Nick Wellnhofer),
Fix undefined behavior in xmlRegExecPushStringInternal (Nick Wellnhofer),
Check XPath exponents for overflow (Nick Wellnhofer),
Check for overflow in xmlXPathIsPositionalPredicate (Nick Wellnhofer),
Fix spurious error message (Nick Wellnhofer),
Fix memory leak in xmlCanonicPath (Nick Wellnhofer),
Fix memory leak in xmlXPathCompareNodeSetValue (Nick Wellnhofer),
Fix memory leak in pattern error path (Nick Wellnhofer),
Fix memory leak in parser error path (Nick Wellnhofer),
Fix memory leaks in XPointer error paths (Nick Wellnhofer),
Fix memory leak in xmlXPathNodeSetMergeAndClear (Nick Wellnhofer),
Fix memory leak in XPath filter optimizations (Nick Wellnhofer),
Fix memory leaks in XPath error paths (Nick Wellnhofer),
Do not leak the new CData node if adding fails (David Tardon),
Prevent unwanted external entity reference (Neel Mehta),
Increase buffer space for port in HTTP redirect support (Daniel Veillard),
Fix more NULL pointer derefs in xpointer.c (Nick Wellnhofer),
Avoid function/data pointer conversion in xpath.c (Nick Wellnhofer),
Fix format string warnings (Nick Wellnhofer),
Disallow namespace nodes in XPointer points (Nick Wellnhofer),
Fix comparison with root node in xmlXPathCmpNodes (Nick Wellnhofer),
Fix attribute decoding during XML schema validation (Alex Henrie),
Fix NULL pointer deref in XPointer range-to (Nick Wellnhofer)
- Improvements:
Updating the spec file to reflect Fedora 24 (Daniel Veillard),
Add const in five places to move 1 KiB to .rdata (Bruce Dawson),
Fix missing part of comment for function xmlXPathEvalExpression() (Daniel Veillard),
Get rid of "blanks wrapper" for parameter entities (Nick Wellnhofer),
Simplify handling of parameter entity references (Nick Wellnhofer),
Deduplicate code in encoding.c (Nick Wellnhofer),
Make HTML parser functions take const pointers (Nick Wellnhofer),
Build test programs only when needed (Nick Wellnhofer),
Fix doc/examples/index.py (Nick Wellnhofer),
Fix compiler warnings in threads.c (Nick Wellnhofer),
Fix empty-body warning in nanohttp.c (Nick Wellnhofer),
Fix cast-align warnings (Nick Wellnhofer),
Fix unused-parameter warnings (Nick Wellnhofer),
Rework entity boundary checks (Nick Wellnhofer),
Don't switch encoding for internal parameter entities (Nick Wellnhofer),
Merge duplicate code paths handling PE references (Nick Wellnhofer),
Test SAX2 callbacks with entity substitution (Nick Wellnhofer),
Support catalog and threads tests under --without-sax1 (Nick Wellnhofer),
Misc fixes for 'make tests' (Nick Wellnhofer),
Initialize keepBlanks in HTML parser (Nick Wellnhofer),
Add test cases for bug 758518 (David Kilzer),
Fix compiler warning in htmlParseElementInternal (Nick Wellnhofer),
Remove useless check in xmlParseAttributeListDecl (Nick Wellnhofer),
Allow zero sized memory input buffers (Nick Wellnhofer),
Add TODO comment in xmlSwitchEncoding (Nick Wellnhofer),
Check for integer overflow in xmlXPathFormatNumber (Nick Wellnhofer),
Make Travis print UBSan stacktraces (Nick Wellnhofer),
Add .travis.yml (Nick Wellnhofer),
Fix expected error output in Python tests (Nick Wellnhofer),
Simplify control flow in xmlParseStartTag2 (Nick Wellnhofer),
Disable LeakSanitizer when running API tests (Nick Wellnhofer),
Avoid out-of-bound array access in API tests (Nick Wellnhofer),
Avoid spurious UBSan errors in parser.c (Nick Wellnhofer),
Parse small XPath numbers more accurately (Nick Wellnhofer),
Rework XPath rounding functions (Nick Wellnhofer),
Fix white space in test output (Nick Wellnhofer),
Fix axis traversal from attribute and namespace nodes (Nick Wellnhofer),
Check for trailing characters in XPath expressions earlier (Nick Wellnhofer),
Rework final handling of XPath results (Nick Wellnhofer),
Make xmlXPathEvalExpression call xmlXPathEval (Nick Wellnhofer),
Remove unused variables (Nick Wellnhofer),
Don't print generic error messages in XPath tests (Nick Wellnhofer)
- Cleanups:
Fix a couple of misleading indentation errors (Daniel Veillard),
Remove unnecessary calls to xmlPopInput (Nick Wellnhofer)
2.9.4: May 23 2016:
- Security:
More format string warnings with possible format string vulnerability (David Kilzer),
Avoid building recursive entities (Daniel Veillard),
Heap-based buffer overread in htmlCurrentChar (Pranjal Jumde),
Heap-based buffer-underreads due to xmlParseName (David Kilzer),
Heap use-after-free in xmlSAX2AttributeNs (Pranjal Jumde),
Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (Pranjal Jumde),
Fix some format string warnings with possible format string vulnerability (David Kilzer),
Detect change of encoding when parsing HTML names (Hugh Davenport),
Fix inappropriate fetch of entities content (Daniel Veillard),
Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (Pranjal Jumde),
Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (Pranjal Jumde),
Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (David Kilzer),
Bug 757711: heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (Pranjal Jumde),
Add missing increments of recursion depth counter to XML parser. (Peter Simons)
- Documentation:
Fix typo: s{ ec -> cr }cipt (Jan Pokorný),
Fix typos: dictio{ nn -> n }ar{y,ies} (Jan Pokorný),
Fix typos: PATH_{ SEAPARATOR -> SEPARATOR } (Jan Pokorný),
Correct a typo. (Shlomi Fish)
- Portability:
Correct the usage of LDFLAGS (Mattias Hansson),
Revert the use of SAVE_LDFLAGS in configure.ac (Mattias Hansson),
libxml2 hardcodes -L/lib in zlib/lzma tests which breaks cross-compiles (Mike Frysinger),
Fix apibuild for a recently added construct (Daniel Veillard),
Use pkg-config to locate zlib when possible (Stewart Brodie),
Use pkg-config to locate ICU when possible (Stewart Brodie),
Portability to non C99 compliant compilers (Patrick Monnerat),
dict.h: Move xmlDictPtr definition before includes to allow direct inclusion. (Patrick Monnerat),
os400: tell about xmllint and xmlcatalog in README400. (Patrick Monnerat),
os400: properly process SGML add in XMLCATALOG command. (Patrick Monnerat),
os400: implement CL command XMLCATALOG. (Patrick Monnerat),
os400: compile and install program xmlcatalog (qshell-only). (Patrick Monnerat),
os400: expand tabs in sources, strip trailing blanks. (Patrick Monnerat),
os400: implement CL command XMLLINT. (Patrick Monnerat),
os400: compile and install program xmllint (qshell-only). (Patrick Monnerat),
os400: initscript make_module(): Use options instead of positional parameters. (Patrick Monnerat),
os400: c14n.rpgle: allow *omit for nullable reference parameters. (Patrick Monnerat),
os400: use like() for double type. (Patrick Monnerat),
os400: use like() for int type. (Patrick Monnerat),
os400: use like() for unsigned int type. (Patrick Monnerat),
os400: use like() for enum types. (Patrick Monnerat),
Add xz to xml2-config --libs output (Baruch Siach),
Bug 760190: configure.ac should be able to build --with-icu without icu-config tool <https://bugzilla.gnome.org/show_bug.cgi?id=760190> (David Kilzer),
win32\VC10\config.h and VS 2015 (Bruce Dawson),
Add configure maintainer mode (orzen)
- Bug Fixes:
Avoid an out of bound access when serializing malformed strings (Daniel Veillard),
Unsigned addition may overflow in xmlMallocAtomicLoc() (David Kilzer),
Integer signed/unsigned type mismatch in xmlParserInputGrow() (David Kilzer),
Bug 763071: heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (Pranjal Jumde),
Integer overflow parsing port number in URI (Michael Paddon),
Fix an error with regexp on nullable counted char transition (Daniel Veillard),
Fix memory leak with XPath namespace nodes (Nick Wellnhofer),
Fix namespace axis traversal (Nick Wellnhofer),
Fix null pointer deref in docs with no root element (Hugh Davenport),
Fix XSD validation of URIs with ampersands (Alex Henrie),
xmlschemastypes.c: accept endOfDayFrag Times set to "24:00:00" mean "end of day" and should not cause an error. (Patrick Monnerat),
xmlcatalog: flush stdout before interactive shell input. (Patrick Monnerat),
xmllint: flush stdout before interactive shell input. (Patrick Monnerat),
Don't recurse into OP_VALUEs in xmlXPathOptimizeExpression (Nick Wellnhofer),
Fix namespace::node() XPath expression (Nick Wellnhofer),
Fix OOB write in xmlXPathEmptyNodeSet (Nick Wellnhofer),
Fix parsing of NCNames in XPath (Nick Wellnhofer),
Fix OOB read with invalid UTF-8 in xmlUTF8Strsize (Nick Wellnhofer),
Do normalize string-based datatype value in RelaxNG facet checking (Audric Schiltknecht),
Bug 760921: REGRESSION (8eb55d78): doc/examples/io1 test fails after fix for "xmlSaveUri() incorrectly recomposes URIs with rootless paths" <https://bugzilla.gnome.org/show_bug.cgi?id=760921> (David Kilzer),
Bug 760861: REGRESSION (bf9c1dad): Missing results for test/schemas/regexp-char-ref_[01].xsd <https://bugzilla.gnome.org/show_bug.cgi?id=760861> (David Kilzer),
error.c: *input->cur == 0 does not mean no error (Pavel Raiskup),
Add missing RNG test files (David Kilzer),
Bug 760183: REGRESSION (v2.9.3): XML push parser fails with bogus UTF-8 encoding error when multi-byte character in large CDATA section is split across buffer <https://bugzilla.gnome.org/show_bug.cgi?id=760183> (David Kilzer),
Bug 758572: ASAN crash in make check <https://bugzilla.gnome.org/show_bug.cgi?id=758572> (David Kilzer),
Bug 721158: Missing ICU string when doing --version on xmllint <https://bugzilla.gnome.org/show_bug.cgi?id=721158> (David Kilzer),
python 3: libxml2.c wrappers create Unicode str already (Michael Stahl),
Add autogen.sh to distrib (orzen),
Heap-based buffer overread in xmlNextChar (Daniel Veillard)
- Improvements:
Add more debugging info to runtest (Daniel Veillard),
Implement "runtest -u" mode (David Kilzer),
Add a make rule to rebuild for ASAN (Daniel Veillard)
v2.9.3: Nov 20 2015:
- Security:
CVE-2015-8242 Buffer overead with HTML parser in push mode (Hugh Davenport),
CVE-2015-7500 Fix memory access error due to incorrect entities boundaries (Daniel Veillard),
CVE-2015-7499-2 Detect incoherency on GROW (Daniel Veillard),
CVE-2015-7499-1 Add xmlHaltParser() to stop the parser (Daniel Veillard),
CVE-2015-5312 Another entity expansion issue (David Drysdale),
CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey (David Drysdale),
CVE-2015-7498 Avoid processing entities after encoding conversion failures (Daniel Veillard),
CVE-2015-8035 Fix XZ compression support loop (Daniel Veillard),
CVE-2015-7942-2 Fix an error in previous Conditional section patch (Daniel Veillard),
CVE-2015-7942 Another variation of overflow in Conditional sections (Daniel Veillard),
CVE-2015-1819 Enforce the reader to run in constant memory (Daniel Veillard)
CVE-2015-7941_2 Cleanup conditional section error handling (Daniel Veillard),
CVE-2015-7941_1 Stop parsing on entities boundaries errors (Daniel Veillard),
- Documentation:
Correct spelling of "calling" (Alex Henrie),
Fix a small error in xmllint --format description (Fabien Degomme),
Avoid XSS on the search of xmlsoft.org (Daniel Veillard)
- Portability:
threads: use forward declarations only for glibc (Michael Heimpold),
Update Win32 configure.js to search for configure.ac (Daniel Veillard)
- Bug Fixes:
Bug on creating new stream from entity (Daniel Veillard),
Fix some loop issues embedding NEXT (Daniel Veillard),
Do not print error context when there is none (Daniel Veillard),
Avoid extra processing of MarkupDecl when EOF (Hugh Davenport),
Fix parsing short unclosed comment uninitialized access (Daniel Veillard),
Add missing Null check in xmlParseExternalEntityPrivate (Gaurav Gupta),
Fix a bug in CData error handling in the push parser (Daniel Veillard),
Fix a bug on name parsing at the end of current input buffer (Daniel Veillard),
Fix the spurious ID already defined error (Daniel Veillard),
Fix previous change to node sort order (Nick Wellnhofer),
Fix a self assignment issue raised by clang (Scott Graham),
Fail parsing early on if encoding conversion failed (Daniel Veillard),
Do not process encoding values if the declaration if broken (Daniel Veillard),
Silence clang's -Wunknown-attribute (Michael Catanzaro),
xmlMemUsed is not thread-safe (Martin von Gagern),
Fix support for except in nameclasses (Daniel Veillard),
Fix order of root nodes (Nick Wellnhofer),
Allow attributes on descendant-or-self axis (Nick Wellnhofer),
Fix the fix to Windows locking (Steve Nairn),
Fix timsort invariant loop re: Envisage article (Christopher Swenson),
Don't add IDs in xmlSetTreeDoc (Nick Wellnhofer),
Account for ID attributes in xmlSetTreeDoc (Nick Wellnhofer),
Remove various unused value assignments (Philip Withnall),
Fix missing entities after CVE-2014-3660 fix (Daniel Veillard),
Revert "Missing initialization for the catalog module" (Daniel Veillard)
- Improvements:
Reuse xmlHaltParser() where it makes sense (Daniel Veillard),
xmlStopParser reset errNo (Daniel Veillard),
Re-enable xz support by default (Daniel Veillard),
Recover unescaped less-than character in HTML recovery parsing (Daniel Veillard),
Allow HTML serializer to output HTML5 DOCTYPE (Shaun McCance),
Regression test for bug #695699 (Nick Wellnhofer),
Add a couple of XPath tests (Nick Wellnhofer),
Add Python 3 rpm subpackage (Tomas Radej),
libxml2-config.cmake.in: update include directories (Samuel Martin),
Adding example from bugs 738805 to regression tests (Daniel Veillard)
- Cleanups:
2.9.2: Oct 16 2014:
- Security:
Fix for CVE-2014-3660 billion laugh variant (Daniel Veillard),
CVE-2014-0191 Do not fetch external parameter entities (Daniel Veillard)
- Bug Fixes:
fix memory leak xml header encoding field with XML_PARSE_IGNORE_ENC (Bart De Schuymer),
xmlmemory: handle realloc properly (Yegor Yefremov),
Python generator bug raised by the const change (Daniel Veillard),
Windows Critical sections not released correctly (Daniel Veillard),
Parser error on repeated recursive entity expansion containing < (Daniel Veillard),
xpointer : fixing Null Pointers (Gaurav Gupta),
Remove Unnecessary Null check in xpointer.c (Gaurav Gupta),
parser bug on misformed namespace attributes (Dennis Filder),
Pointer dereferenced before null check (Daniel Veillard),
Leak of struct addrinfo in xmlNanoFTPConnect() (Gaurav Gupta),
Possible overflow in HTMLParser.c (Daniel Veillard),
python/tests/sync.py assumes Python dictionaries are ordered (John Beck),
Fix Enum check and missing break (Gaurav Gupta),
xmlIO: Handle error returns from dup() (Philip Withnall),
Fix a problem properly saving URIs (Daniel Veillard),
wrong error column in structured error when parsing attribute values (Juergen Keil),
wrong error column in structured error when skipping whitespace in xml decl (Juergen Keil),
no error column in structured error handler for xml schema validation errors (Juergen Keil),
Couple of Missing Null checks (Gaurav Gupta),
Add couple of missing Null checks (Daniel Veillard),
xmlschemastypes: Fix potential array overflow (Philip Withnall),
runtest: Fix a memory leak on parse failure (Philip Withnall),
xmlIO: Fix an FD leak on gzdopen() failure (Philip Withnall),
xmlcatalog: Fix a memory leak on quit (Philip Withnall),
HTMLparser: Correctly initialise a stack allocated structure (Philip Withnall),
Check for tmon in _xmlSchemaDateAdd() is incorrect (David Kilzer),
Avoid Possible Null Pointer in trio.c (Gaurav Gupta),
Fix processing in SAX2 in case of an allocation failure (Daniel Veillard),
XML Shell command "cd" does not handle "/" at end of path (Daniel Veillard),
Fix various Missing Null checks (Gaurav Gupta),
Fix a potential NULL dereference (Daniel Veillard),
Add a couple of misisng check in xmlRelaxNGCleanupTree (Gaurav Gupta),
Add a missing argument check (Gaurav Gupta),
Adding a check in case of allocation error (Gaurav Gupta),
xmlSaveUri() incorrectly recomposes URIs with rootless paths (Dennis Filder),
Adding some missing NULL checks (Gaurav),
Fixes for xmlInitParserCtxt (Daniel Veillard),
Fix regressions introduced by CVE-2014-0191 patch (Daniel Veillard),
erroneously ignores a validation error if no error callback set (Daniel Veillard),
xmllint was not parsing the --c14n11 flag (Sérgio Batista),
Avoid Possible null pointer dereference in memory debug mode (Gaurav),
Avoid Double Null Check (Gaurav),
Restore context size and position after XPATH_OP_ARG (Nick Wellnhofer),
Fix xmlParseInNodeContext() if node is not element (Daniel Veillard),
Avoid a possible NULL pointer dereference (Gaurav),
Fix xmlTextWriterWriteElement when a null content is given (Daniel Veillard),
Fix an typo 'onrest' in htmlScriptAttributes (Daniel Veillard),
fixing a ptotential uninitialized access (Daniel Veillard),
Fix an fd leak in an error case (Daniel Veillard),
Missing initialization for the catalog module (Daniel Veillard),
Handling of XPath function arguments in error case (Nick Wellnhofer),
Fix a couple of missing NULL checks (Gaurav),
Avoid a possibility of dangling encoding handler (Gaurav),
Fix HTML push parser to accept HTML_PARSE_NODEFDTD (Arnold Hendriks),
Fix a bug loading some compressed files (Mike Alexander),
Fix XPath node comparison bug (Gaurav),