pkgsrc/textproc/libxml2/patches/patch-aa

16 lines
430 B
Text
Raw Normal View History

Update libxml2 to 2.9.4. Pkgsrc changes: * Add some casts to match types and format strings, plus fix value range of toupper() operation. * Merge patch-ag into the new patch-encoding.c. * Add comments to existing patches which lacked comments. Upstream changes to libxml2-2.9.4: May 23 2016 Security: CVE-2016-3627 Avoid building recursive entities CVE-2016-1833 Heap-based buffer overread in htmlCurrentChar CVE-2016-1835 Heap use-after-free in xmlSAX2AttributeNs CVE-2016-1837 Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral CVE-2016-1836 Bug 759398: Heap use-after-free in xmlDictComputeFastKey CVE-2016-1839 Bug 758605: Heap-based buffer overread in xmlDictAddString CVE-2016-1838 Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal CVE-2016-1840 Bug 757711: heap-buffer-overflow in xmlFAParsePosCharGroup CVE-2016-4483 Avoid an out of bound access when serializing malformed strings CVE-2016-1834 Bug 763071: heap-buffer-overflow in xmlStrncat CVE-2016-3705 Add missing increments of recursion depth counter to XML parser. CVE-2016-1762 Heap-based buffer overread in xmlNextChar More format string warnings with possible format string vulnerability Heap-based buffer-underreads due to xmlParseName Fix some format string warnings with possible format string vulnerability Unsigned addition may overflow in xmlMallocAtomicLoc() Other bugfixes: Detect change of encoding when parsing HTML names Fix inappropriate fetch of entities content Correct the usage of LDFLAGS Revert the use of SAVE_LDFLAGS in configure.ac libxml2 hardcodes -L/lib in zlib/lzma tests which breaks cross-compiles Add more debugging info to runtest Implement "runtest -u" mode Integer signed/unsigned type mismatch in xmlParserInputGrow() Integer overflow parsing port number in URI Fix apibuild for a recently added constructv2.9.4-rc2 Use pkg-config to locate zlib when possible Use pkg-config to locate ICU when possible Fix an error with regexp on nullable counted char transition Fix memory leak with XPath namespace nodes Fix namespace axis traversal Add a make rule to rebuild for ASAN Fix null pointer deref in docs with no root element Portability to non C99 compliant compilers dict.h: Move xmlDictPtr definition before includes to allow direct inclusion. Fix XSD validation of URIs with ampersands xmlschemastypes.c: accept endOfDayFrag Times set to "24:00:00" mean "end of day" and should not cause an error. v2.9.4-rc1 os400: tell about xmllint and xmlcatalog in README400. os400: properly process SGML add in XMLCATALOG command. os400: implement CL command XMLCATALOG. os400: compile and install program xmlcatalog (qshell-only). xmlcatalog: flush stdout before interactive shell input. os400: expand tabs in sources, strip trailing blanks. os400: implement CL command XMLLINT. os400: compile and install program xmllint (qshell-only). os400: initscript make_module(): Use options instead of positional parameters. xmllint: flush stdout before interactive shell input. os400: c14n.rpgle: allow *omit for nullable reference parameters. os400: use like() for double type. os400: use like() for int type. os400: use like() for unsigned int type. os400: use like() for enum types. Add xz to xml2-config --libs output Don't recurse into OP_VALUEs in xmlXPathOptimizeExpression Fix namespace::node() XPath expression Fix OOB write in xmlXPathEmptyNodeSet Fix parsing of NCNames in XPath Fix OOB read with invalid UTF-8 in xmlUTF8Strsize Do normalize string-based datatype value in RelaxNG facet checking Fix typo: s{ ec -> cr }cipt Fix typos: dictio{ nn -> n }ar{y,ies} Fix typos: PATH_{ SEAPARATOR -> SEPARATOR } Correct a typo. Bug 760921: REGRESSION (8eb55d78): doc/examples/io1 test fails after fix for "xmlSaveUri() incorrectly recomposes URIs with rootless paths" Bug 760861: REGRESSION (bf9c1dad): Missing results for test/schemas/regexp-char-ref_[01].xsd error.c: *input->cur == 0 does not mean no error Add missing RNG test files Bug 760190: configure.ac should be able to build --with-icu without icu-config tool Bug 760183: REGRESSION (v2.9.3): XML push parser fails with bogus UTF-8 encoding error when multi-byte character in large CDATA section is split across buffer Bug 758572: ASAN crash in make check Bug 721158: Missing ICU string when doing --version on xmllint python 3: libxml2.c wrappers create Unicode str already win32\VC10\config.h and VS 2015 Add autogen.sh to distrib Add configure maintainer mode
2016-05-24 14:00:08 +02:00
$NetBSD: patch-aa,v 1.29 2016/05/24 12:00:08 he Exp $
Move EXAMPLES_DIR to fit pkgsrc.
--- Makefile.in.orig 2014-10-16 07:35:13.000000000 +0000
Update to 2.7.1: 2.7.1: Sep 1 2008 * Portability fix: Borland C fix (Moritz Both) * Bug fixes: python serialization wrappers, XPath QName corner case handking and leaks (Martin) * Improvement: extend the xmlSave to handle HTML documents and trees * Cleanup: python serialization wrappers 2.7.0: Aug 30 2008 * Documentation: switch ChangeLog to UTF-8, improve mutithreads and xmlParserCleanup docs * Portability fixes: Older Win32 platforms (Rob Richards), MSVC porting fix (Rob Richards), Mac OS X regression tests (Sven Herzberg), non GNUCC builds (Rob Richards), compilation on Haiku (Andreas F�rber) * Bug fixes: various realloc problems (Ashwin), potential double-free (Ashwin), regexp crash, icrash with invalid whitespace facets (Rob Richards), pattern fix when streaming (William Brack), various XML parsing and validation fixes based on the W3C regression tests, reader tree skipping function fix (Ashwin), Schemas regexps escaping fix (Volker Grabsch), handling of entity push errors (Ashwin), fix a slowdown when encoder cant serialize characters on output * Code cleanup: compilation fix without the reader, without the output (Robert Schwebel), python whitespace (Martin), many space/tabs cleanups, serious cleanup of the entity handling code * Improvement: switch parser to XML-1.0 5th edition, add parsing flags for old versions, switch URI parsing to RFC 3986, add xmlSchemaValidCtxtGetParserCtxt (Holger Kaelberer), new hashing functions for dictionnaries (based on Stefan Behnel work), improve handling of misplaced html/head/body in HTML parser, better regression test tools and code coverage display, better algorithms to detect various versions of the billion laughts attacks, make arbitrary parser limits avoidable as a parser option
2008-09-06 16:58:34 +02:00
+++ Makefile.in
@@ -835,7 +835,7 @@ cmake_DATA = libxml2-config.cmake
Update to 2.5.3. Changes in the package: - Enable threading. - Move html documentation and examples where they should be. - Use catalogs.mk to get and set default system-wide catalogs. Changes since 2.4.25: 2.5.3: Feb 10 2003: - RelaxNG and XML Schemas datatypes improvements, and added a first version of RelaxNG Python bindings - Fixes: XLink (Sean Chittenden), XInclude (Sean Chittenden), API fix for serializing namespace nodes, encoding conversion bug, XHTML1 serialization - Portability fixes: Windows (Igor), AMD 64bits RPM spec file 2.5.2: Feb 5 2003: - First implementation of RelaxNG, added --relaxng flag to xmllint - Schemas support now compiled in by default. - Bug fixes: DTD validation, namespace checking, XInclude and entities, delegateURI in XML Catalogs, HTML parser, XML reader (Stéphane Bidoul), XPath parser and evaluation, UTF8ToUTF8 serialization, XML reader memory consumption, HTML parser, HTML serialization in the presence of namespaces - added an HTML API to check elements and attributes. - Documentation improvement, PDF for the tutorial (John Fleck), doc patches (Stefan Kost) - Portability fixes: NetBSD (Julio Merino), Windows (Igor Zlatkovic) - Added python bindings for XPointer, contextual error reporting (Stéphane Bidoul) - URI/file escaping problems (Stefano Zacchiroli) 2.5.1: Jan 8 2003: - Fixes a memory leak and configuration/compilation problems in 2.5.0 - documentation updates (John) - a couple of XmlTextReader fixes 2.5.0: Jan 6 2003: - New XmltextReader interface based on C# API (with help of Stéphane Bidoul) - Windows: more exports, including the new API (Igor) - XInclude fallback fix - Python: bindings for the new API, packaging (Stéphane Bidoul), drv_libxml2.py Python xml.sax driver (Stéphane Bidoul), fixes, speedup and iterators for Python-2.2 (Hannu Krosing) - Tutorial fixes (john Fleck and Niraj Tolia) xmllint man update (John) - Fix an XML parser bug raised by Vyacheslav Pindyura - Fix for VMS serialization (Nigel Hall) and config (Craig A. Berry) - Entities handling fixes - new API to optionally track node creation and deletion (Lukas Schroeder) - Added documentation for the XmltextReader interface and some XML guidelines 2.4.30: Dec 12 2002: - 2.4.29 broke the python bindings, rereleasing - Improvement/fixes of the XML API generator, and couple of minor code fixes. 2.4.29: Dec 11 2002: - Windows fixes (Igor): Windows CE port, pthread linking, python bindings (Stéphane Bidoul), Mingw (Magnus Henoch), and export list updates - Fix for prev in python bindings (ERDI Gergo) - Fix for entities handling (Marcus Clarke) - Refactored the XML and HTML dumps to a single code path, fixed XHTML1 dump - Fix for URI parsing when handling URNs with fragment identifiers - Fix for HTTP URL escaping problem - added an TextXmlReader (C#) like API (work in progress) - Rewrote the API in XML generation script, includes a C parser and saves more informations needed for C# bindings 2.4.28: Nov 22 2002: - a couple of python binding fixes - 2 bug fixes in the XML push parser - potential memory leak removed (Martin Stoilov) - fix to the configure script for Unix (Dimitri Papadopoulos) - added encoding support for XInclude parse="text" - autodetection of XHTML1 and specific serialization rules added - nasty threading bug fixed (William Brack) 2.4.27: Nov 17 2002: - fixes for the Python bindings - a number of bug fixes: SGML catalogs, xmlParseBalancedChunkMemory(), HTML parser, Schemas (Charles Bozeman), document fragment support (Christian Glahn), xmlReconciliateNs (Brian Stafford), XPointer, xmlFreeNode(), xmlSAXParseMemory (Peter Jones), xmlGetNodePath (Petr Pajas), entities processing - added grep to xmllint --shell - VMS update patch from Craig A. Berry - cleanup of the Windows build with support for more compilers (Igor), better thread support on Windows - cleanup of Unix Makefiles and spec file - Improvements to the documentation (John Fleck) 2.4.26: Oct 18 2002: - Patches for Windows CE port, improvements on Windows paths handling - Fixes to the validation code (DTD and Schemas), xmlNodeGetPath() , HTML serialization, Namespace compliance, and a number of small problems
2003-02-24 21:40:15 +01:00
#
BASE_DIR = $(datadir)/doc
DOC_MODULE = libxml2-$(VERSION)
Update to 2.5.3. Changes in the package: - Enable threading. - Move html documentation and examples where they should be. - Use catalogs.mk to get and set default system-wide catalogs. Changes since 2.4.25: 2.5.3: Feb 10 2003: - RelaxNG and XML Schemas datatypes improvements, and added a first version of RelaxNG Python bindings - Fixes: XLink (Sean Chittenden), XInclude (Sean Chittenden), API fix for serializing namespace nodes, encoding conversion bug, XHTML1 serialization - Portability fixes: Windows (Igor), AMD 64bits RPM spec file 2.5.2: Feb 5 2003: - First implementation of RelaxNG, added --relaxng flag to xmllint - Schemas support now compiled in by default. - Bug fixes: DTD validation, namespace checking, XInclude and entities, delegateURI in XML Catalogs, HTML parser, XML reader (Stéphane Bidoul), XPath parser and evaluation, UTF8ToUTF8 serialization, XML reader memory consumption, HTML parser, HTML serialization in the presence of namespaces - added an HTML API to check elements and attributes. - Documentation improvement, PDF for the tutorial (John Fleck), doc patches (Stefan Kost) - Portability fixes: NetBSD (Julio Merino), Windows (Igor Zlatkovic) - Added python bindings for XPointer, contextual error reporting (Stéphane Bidoul) - URI/file escaping problems (Stefano Zacchiroli) 2.5.1: Jan 8 2003: - Fixes a memory leak and configuration/compilation problems in 2.5.0 - documentation updates (John) - a couple of XmlTextReader fixes 2.5.0: Jan 6 2003: - New XmltextReader interface based on C# API (with help of Stéphane Bidoul) - Windows: more exports, including the new API (Igor) - XInclude fallback fix - Python: bindings for the new API, packaging (Stéphane Bidoul), drv_libxml2.py Python xml.sax driver (Stéphane Bidoul), fixes, speedup and iterators for Python-2.2 (Hannu Krosing) - Tutorial fixes (john Fleck and Niraj Tolia) xmllint man update (John) - Fix an XML parser bug raised by Vyacheslav Pindyura - Fix for VMS serialization (Nigel Hall) and config (Craig A. Berry) - Entities handling fixes - new API to optionally track node creation and deletion (Lukas Schroeder) - Added documentation for the XmltextReader interface and some XML guidelines 2.4.30: Dec 12 2002: - 2.4.29 broke the python bindings, rereleasing - Improvement/fixes of the XML API generator, and couple of minor code fixes. 2.4.29: Dec 11 2002: - Windows fixes (Igor): Windows CE port, pthread linking, python bindings (Stéphane Bidoul), Mingw (Magnus Henoch), and export list updates - Fix for prev in python bindings (ERDI Gergo) - Fix for entities handling (Marcus Clarke) - Refactored the XML and HTML dumps to a single code path, fixed XHTML1 dump - Fix for URI parsing when handling URNs with fragment identifiers - Fix for HTTP URL escaping problem - added an TextXmlReader (C#) like API (work in progress) - Rewrote the API in XML generation script, includes a C parser and saves more informations needed for C# bindings 2.4.28: Nov 22 2002: - a couple of python binding fixes - 2 bug fixes in the XML push parser - potential memory leak removed (Martin Stoilov) - fix to the configure script for Unix (Dimitri Papadopoulos) - added encoding support for XInclude parse="text" - autodetection of XHTML1 and specific serialization rules added - nasty threading bug fixed (William Brack) 2.4.27: Nov 17 2002: - fixes for the Python bindings - a number of bug fixes: SGML catalogs, xmlParseBalancedChunkMemory(), HTML parser, Schemas (Charles Bozeman), document fragment support (Christian Glahn), xmlReconciliateNs (Brian Stafford), XPointer, xmlFreeNode(), xmlSAXParseMemory (Peter Jones), xmlGetNodePath (Petr Pajas), entities processing - added grep to xmllint --shell - VMS update patch from Craig A. Berry - cleanup of the Windows build with support for more compilers (Igor), better thread support on Windows - cleanup of Unix Makefiles and spec file - Improvements to the documentation (John Fleck) 2.4.26: Oct 18 2002: - Patches for Windows CE port, improvements on Windows paths handling - Fixes to the validation code (DTD and Schemas), xmlNodeGetPath() , HTML serialization, Namespace compliance, and a number of small problems
2003-02-24 21:40:15 +01:00
-EXAMPLES_DIR = $(BASE_DIR)/$(DOC_MODULE)/examples
+EXAMPLES_DIR = $(datadir)/examples/libxml2
Update to 2.7.1: 2.7.1: Sep 1 2008 * Portability fix: Borland C fix (Moritz Both) * Bug fixes: python serialization wrappers, XPath QName corner case handking and leaks (Martin) * Improvement: extend the xmlSave to handle HTML documents and trees * Cleanup: python serialization wrappers 2.7.0: Aug 30 2008 * Documentation: switch ChangeLog to UTF-8, improve mutithreads and xmlParserCleanup docs * Portability fixes: Older Win32 platforms (Rob Richards), MSVC porting fix (Rob Richards), Mac OS X regression tests (Sven Herzberg), non GNUCC builds (Rob Richards), compilation on Haiku (Andreas F�rber) * Bug fixes: various realloc problems (Ashwin), potential double-free (Ashwin), regexp crash, icrash with invalid whitespace facets (Rob Richards), pattern fix when streaming (William Brack), various XML parsing and validation fixes based on the W3C regression tests, reader tree skipping function fix (Ashwin), Schemas regexps escaping fix (Volker Grabsch), handling of entity push errors (Ashwin), fix a slowdown when encoder cant serialize characters on output * Code cleanup: compilation fix without the reader, without the output (Robert Schwebel), python whitespace (Martin), many space/tabs cleanups, serious cleanup of the entity handling code * Improvement: switch parser to XML-1.0 5th edition, add parsing flags for old versions, switch URI parsing to RFC 3986, add xmlSchemaValidCtxtGetParserCtxt (Holger Kaelberer), new hashing functions for dictionnaries (based on Stefan Behnel work), improve handling of misplaced html/head/body in HTML parser, better regression test tools and code coverage display, better algorithms to detect various versions of the billion laughts attacks, make arbitrary parser limits avoidable as a parser option
2008-09-06 16:58:34 +02:00
#
# Coverage support, largely borrowed from libvirt