* Disable linkage with pthread for FreeBSD/DragonFly/NetBSD, they have
pthread_* () stubs in libc (it result in same as the previous behavior).
* but NetBSD<4.99.36 does not have pthread_equal() stub in libc,
so define weak reference to it.
* Treat OpenBSD and MirBSD same as Linux to avoid linkage with libpthread.
* Others will be linked with pthread, fixes PR 46254.
tested NetBSD-5.1.2, and confirmed fixed on NetBSD-4.0.1 and OpenBSD-5.0.
Bump PKGREVISION.
Without that, (untrusted) input can fill hash buckets uneven, causing
high CPU load. (CVE-2012-0841)
To get a patch which is simple enough to get pulled up to the stable
pkgsrc branch, I've not touched "configure" but just assumed that
the POSIX functions rand(), srand() and time() are present.
bump PKGREV
link against libpthread. (It doesn't create threads, just uses
locking.) This seems to be wanted by some applications, eg vlc
issues a warning on startup (with no visible consequences afaict,
but anyway).
I hope this works for other OSes too. If not, we should probably
add support for these cases to mk/pthread.bl3.mk.
bump PKGREV
-fix more potential problems on reallocation failures (CVE-2011-1944)
-Fix memory corruption
also replace an error handling which doesn't recover from
integer overflow
bump PKGREV
changes:
-add code to plug in ICU converters by default
-Add xmlSaveOption XML_SAVE_WSNONSIG
-documentation fixes
-portability fixes
-bugfixes, in particular for an XPath problem which can be exploited
to crash the program by a malformed XPath expression (CVE-2010-4008)
-misc improvements, cleanup
changes:
-bugfixes
-portability and documentation improvements
-cleanup
pkgsrc note: added some tweaks to EBCDIC support, both to fix non-
portable assumptions in the code and to work around NetBSD deficiencies;
now it needs only a little fix to CP273 (newline conversion) to make
the selftest succeed on NetBSD
2.7.3: Jan 18 2009
* Build fix: fix build when HTML support is not included.
* Bug fixes: avoid memory overflow in gigantic text nodes,
indentation problem on the writed (Rob Richards), xmlAddChildList
pointer problem (Rob Richards and Kevin Milburn), xmlAddChild
problem with attribute (Rob Richards and Kris Breuker), avoid
a memory leak in an edge case (Daniel Zimmermann), deallocate
some pthread data (Alex Ott).
* Improvements: configure option to avoid rebuilding docs
(Adrian Bunk), limit text nodes to 10MB max by default, add
element traversal APIs, add a parser option to enable pre 2.7
SAX behavior (Rob Richards), add gcc malloc checking (Marcus
Meissner), add gcc printf like functions parameters checking
(Marcus Meissner).
changes:
-Portability fix: fix solaris compilation problem, fix compilation
if XPath is not configured in
-Bug fixes: nasty entity bug introduced in 2.7.0, restore old behaviour
when saving an HTML doc with an xml dump function,
HTML UTF-8 parsing bug, fix reader custom error handlers
-Improvement: xmlSave options for more flexibility to save
as XML/HTML/XHTML, handle leading BOM in HTML documents
cvs: ----------------------------------------------------------------------
2.7.1: Sep 1 2008
* Portability fix: Borland C fix (Moritz Both)
* Bug fixes: python serialization wrappers, XPath QName corner
case handking and leaks (Martin)
* Improvement: extend the xmlSave to handle HTML documents and trees
* Cleanup: python serialization wrappers
2.7.0: Aug 30 2008
* Documentation: switch ChangeLog to UTF-8, improve mutithreads
and xmlParserCleanup docs
* Portability fixes: Older Win32 platforms (Rob Richards), MSVC
porting fix (Rob Richards), Mac OS X regression tests (Sven
Herzberg), non GNUCC builds (Rob Richards), compilation on
Haiku (Andreas F�rber)
* Bug fixes: various realloc problems (Ashwin), potential
double-free (Ashwin), regexp crash, icrash with invalid whitespace
facets (Rob Richards), pattern fix when streaming (William
Brack), various XML parsing and validation fixes based on the
W3C regression tests, reader tree skipping function fix (Ashwin),
Schemas regexps escaping fix (Volker Grabsch), handling of
entity push errors (Ashwin), fix a slowdown when encoder cant
serialize characters on output
* Code cleanup: compilation fix without the reader, without
the output (Robert Schwebel), python whitespace (Martin), many
space/tabs cleanups, serious cleanup of the entity handling
code
* Improvement: switch parser to XML-1.0 5th edition, add parsing
flags for old versions, switch URI parsing to RFC 3986, add
xmlSchemaValidCtxtGetParserCtxt (Holger Kaelberer), new hashing
functions for dictionnaries (based on Stefan Behnel work),
improve handling of misplaced html/head/body in HTML parser,
better regression test tools and code coverage display, better
algorithms to detect various versions of the billion laughts
attacks, make arbitrary parser limits avoidable as a parser
option
2.6.29: Jun 12 2007:
- Portability: patches from Andreas Stricke for WinCEi,
fix compilation warnings (William Brack), avoid warnings on Apple OS/X
(Wendy Doyle and Mark Rowe), Windows compilation and threading
improvements (Rob Richards), compilation against old Python versions,
new GNU tar changes (Ryan Hill)
- Documentation: xmlURIUnescapeString comment,
- Bugfixes: xmlBufferAdd problem (Richard Jones), 'make valgrind'
flag fix (Richard Jones), regexp interpretation of \,
htmlCreateDocParserCtxt (Jean-Daniel Dupas), configure.in
typo (Bjorn Reese), entity content failure, xmlListAppend() fix
(Georges-André Silber), XPath number serialization (William Brack),
nanohttp gzipped stream fix (William Brack and Alex Cornejo),
xmlCharEncFirstLine typo (Mark Rowe), uri bug (François Delyon),
XPath string value of PI nodes (William Brack), XPath node set
sorting bugs (William Brack), avoid outputting namespace decl
dups in the writer (Rob Richards), xmlCtxtReset bug, UTF-8 encoding
error handling, recustion on next in catalogs, fix a Relax-NG crash,
workaround wrong file: URIs, htmlNodeDumpFormatOutput on attributes,
invalid character in attribute detection bug, big comments before
internal subset streaming bug, HTML parsing of attributes with : in
the name
- Improvement: keep URI query parts in raw form (Richard Jones),
embed tag support in HTML (Michael Day)
2.6.21: Sep 4 2005:
- build fixes: Cygwin portability fixes (Gerrit P. Haase), calling
convention problems on Windows (Marcus Boerger), cleanups based on
Linus' sparse tool, update of win32/configure.js (Rob Richards),
remove warnings on Windows(Marcus Boerger), compilation without SAX1,
detection of the Python binary, use $GCC inestad of $CC = 'gcc' (Andrew
W. Nosenko), compilation/link with threads and old gcc, compile
problem by C370 on Z/OS,
- bug fixes: http_proxy environments (Peter Breitenlohner), HTML UTF-8
bug (Jiri Netolicky), XPath NaN compare bug (William Brack),
htmlParseScript potential bug, Schemas regexp handling of spaces,
Base64 Schemas comparisons NIST passes, automata build error xsd:all,
xmlGetNodePath for namespaced attributes (Alexander Pohoyda),
xmlSchemas foreign namespaces handling, XML Schemas facet comparison
(Kupriyanov Anatolij), xmlSchemaPSimpleTypeErr error report (Kasimier
Buchcik), xml: namespace ahndling in Schemas (Kasimier), empty model
group in Schemas (Kasimier), wilcard in Schemas (Kasimier), URI
composition (William), xs:anyType in Schemas (Kasimier), Python resolver
emmitting error messages directly, Python xmlAttr.parent (Jakub Piotr
Clapa), trying to fix the file path/URI conversion,
xmlTextReaderGetAttribute fix (Rob Richards), xmlSchemaFreeAnnot memleak
(Kasimier), HTML UTF-8 serialization, streaming XPath, Schemas determinism
detection problem, XInclude bug, Schemas context type (Dean Hill),
validation fix (Derek Poon), xmlTextReaderGetAttribute[Ns] namespaces
(Rob Richards), Schemas type fix (Kuba Nowakowski), UTF-8 parser bug,
error in encoding handling, xmlGetLineNo fixes, bug on entities handling,
entity name extraction in error handling with XInclude, text nodes
in HTML body tags (Gary Coady), xml:id and IDness at the treee level
fixes, XPath streaming patterns bugs.
- improvements: structured interfaces for schemas and RNG error reports
(Marcus Boerger), optimization of the char data inner loop parsing
(thanks to Behdad Esfahbod for the idea), schematron validation
though not finished yet, xmlSaveOption to omit XML declaration,
keyref match error reports (Kasimier), formal expression handling
code not plugged yet, more lax mode for the HTML parser,
parser XML_PARSE_COMPACT option for text nodes allocation.
- documentation: xmllint man page had --nonet duplicated
2.6.20: Jul 10 2005:
- build fixes: Windows build (Rob Richards), Mingw compilation (Igor
Zlatkovic), Windows Makefile (Igor), gcc warnings (Kasimier and
andriy@google.com), use gcc weak references to pthread to avoid the
pthread dependancy on Linux, compilation problem (Steve Nairn),
compiling of subset (Morten Welinder), IPv6/ss_family compilation
(William Brack), compilation when disabling parts of the library,
standalone test distribution.
- bug fixes: bug in lang(), memory cleanup on errors (William Brack),
HTTP query strings (Aron Stansvik), memory leak in DTD (William),
integer overflow in XPath (William), nanoftp buffer size, pattern
"." apth fixup (Kasimier), leak in tree reported by Malcolm Rowe,
replaceNode patch (Brent Hendricks), CDATA with NULL content
(Mark Vakoc), xml:base fixup on XInclude (William), pattern
fixes (William), attribute bug in exclusive c14n (Aleksey Sanin),
xml:space and xml:lang with SAX2 (Rob Richards), namespace
trouble in complex parsing (Malcolm Rowe), XSD type QNames fixes
(Kasimier), XPath streaming fixups (William), RelaxNG bug (Rob Richards),
Schemas for Schemas fixes (Kasimier), removal of ID (Rob Richards),
a small RelaxNG leak, HTML parsing in push mode bug (James Bursa),
failure to detect UTF-8 parsing bugs in CDATA sections, areBlanks()
heuristic failure, duplicate attributes in DTD bug (William).
- improvements: lot of work on Schemas by Kasimier Buchcik both on
conformance and streaming, Schemas validation messages (Kasimier
Buchcik, Matthew Burgess), namespace removal at the python level
(Brent Hendricks), Update to new Schemas regression tests from
W3C/Nist (Kasimier), xmlSchemaValidateFile() (Kasimier), implementation
of xmlTextReaderReadInnerXml and xmlTextReaderReadOuterXml (James Wert),
standalone test framework and programs, new DOM import APIs
xmlDOMWrapReconcileNamespaces() xmlDOMWrapAdoptNode() and
xmlDOMWrapRemoveNode(), extension of xmllint capabilities for
SAX and Schemas regression tests, xmlStopParser() available in
pull mode too, ienhancement to xmllint --shell namespaces support,
Windows port of the standalone testing tools (Kasimier and William),
xmlSchemaValidateStream() xmlSchemaSAXPlug() and xmlSchemaSAXUnplug()
SAX Schemas APIs, Schemas xmlReader support.
catalog path in the relevant files (catalog.c, xmlcatalog.c) directly
rather than defining it in the CFLAGS.
Do not bump pkgrevision since nothing changed in the resulting binaries.
This release includes a lot of fixes and improvement to existing
features plus a few new APIs:
* build fixes:
- Windows
- warnings removal (William Brack)
- maintainer-clean dependency(William)
- build in a different directory (William)
- fixing --with-minimum configure build (William)
- BeOS build (Marcin Konicki)
- compilation on AIX (Dan McNichol)
* bug fixes:
- xmlTextReaderHasAttributes (Rob Richards)
- xmlCtxtReadFile() to use the catalog(s)
- loop on output (William Brack)
- XPath memory leak
- ID deallocation problem (Steve Shepard)
- debugDumpNode crash (William)
- warning not using error callback (William)
- xmlStopParser bug (William)
- UTF-16 with BOM on DTDs (William)
- namespace bug on empty elements in push mode (Rob Richards)
- line and col computations fixups (Aleksey Sanin)
- xmlURIEscape fix (William)
- xmlXPathErr on bad range (William)
- patterns with too many steps
- bug in RNG choice optimization
- line number sometimes missing.
* improvements:
- XSD Schemas (Kasimier Buchcik)
- xmlUTF8Strpos speedup (William)
- XSD error reports (Kasimier Buchcik)
* new APIs:
- added xmlDictExists()
- GetLineNumber and GetColumnNumber for the xmlReader (Aleksey Sanin)
- Dynamic Shared Libraries APIs (mostly Joel Reed)
- error extraction API from regexps
- new XMLSave option for format (Phil Shafer)
* documentation:
- site improvement (John Fleck), FAQ entries (William).
2.6.16: Nov 10 2004:
- general hardening and bug fixing crossing all the API based on new
automated regression testing
- build fix: IPv6 build and test on AIX (Dodji Seketeli)
- bug fixes: problem with XML::Libxml reported by Petr Pajas, encoding
conversion functions return values, UTF-8 bug affecting XPath reported by
Markus Bertheau, catalog problem with NULL entries (William Brack)
- documentation: fix to xmllint man page, some API function descritpion
were updated.
- improvements: DTD validation APIs provided at the Python level (Brent
Hendricks)
changes:
* security fixes on the nanoftp and nanohttp modules
For details see:
http://www.securityfocus.com/archive/1/379383/2004-10-24/2004-10-30/0
* build fixes:
- xmllint detection bug in configure
- building outside the source tree (Thomas Fitzsimmons)
* bug fixes:
- HTML parser on broken ASCII chars in names (William)
- Python paths (Malcolm Tredinnick)
- xmlHasNsProp and default namespace (William)
- saving to python file objects (Malcolm Tredinnick)
- DTD lookup fix (Malcolm)
- save back <group> in catalogs (William)
- tree build fixes (DV and Rob Richards)
- Schemas memory bug
- structured error handler on Python 64bits
- thread local memory deallocation
- memory leak reported by Volker Roth
- xmlValidateDtd in the presence of an internal subset
- entities and _private problem (William)
- xmlBuildRelativeURI error (William).
* improvements:
- better XInclude error reports (William)
- tree debugging module and tests
- convenience functions at the Reader API (Graham Bennett)
- add support for PI in the HTML parser.
Update BUILDLINK_RECOMMENDED to 2.6.15 for the security fix.
2.6.8: Mar 23 2004:
- First step of the cleanup of the serialization code and APIs
- XML Schemas: mixed content (Adam Dickmeiss), QName handling fixes (Adam
Dickmeiss), anyURI for "" (John Belmonte)
- Python: Canonicalization C14N support added (Anthony Carrico)
- xmlDocCopyNode() extension (William)
- Relax-NG: fix when processing XInclude results (William), external
reference in interleave (William), missing error on <choice>
failure (William), memory leak in schemas datatype facets.
- xmlWriter: patch for better DTD support (Alfred Mickautsch)
- bug fixes: xmlXPathLangFunction memory leak (Mike Hommey and William
Brack), no ID errors if using HTML_PARSE_NOERROR, xmlcatalog fallbacks to
URI on SYSTEM lookup failure, XInclude parse flags inheritance (William),
XInclude and XPointer fixes for entities (William), XML parser bug
reported by Holger Rauch, nanohttp fd leak (William), regexps char
groups '-' handling (William), dictionnary reference counting problems,
do not close stderr.
- performance patches from Petr Pajas
- Documentation fixes: XML_CATALOG_FILES in man pages (Mike Hommey)
- compilation and portability fixes: --without-valid, catalog cleanups
(Peter Breitenlohner), MingW patch (Roland Schwingel), cross-compilation
to Windows (Christophe de Vienne), --with-html-dir fixup (Julio Merino
Vidal), Windows build (Eric Zurcher)
2.6.4: Dec 24 2003:
- Windows build fixes (Igor Zlatkovic)
- Some serious XInclude problems reported by Oleg Paraschenko and
- Unix and Makefile packaging fixes (me, William Brack,
- Documentation improvements (John Fleck, William Brack), example fix
(Lucas Brasilino)
- bugfixes: xmlTextReaderExpand() with xmlReaderWalker, XPath handling of
NULL strings (William Brack) , API building reader or parser from
filedescriptor should not close it, changed XPath sorting to be stable
again (William Brack), xmlGetNodePath() generating '(null)' (William
Brack), DTD validation and namespace bug (William Brack), XML Schemas
double inclusion behaviour
2.6.3: Dec 10 2003:
- documentation updates and cleanup (DV, William Brack, John Fleck)
- added a repository of examples, examples from Aleksey Sanin, Dodji
Seketeli, Alfred Mickautsch
- Windows updates: Mark Vakoc, Igor Zlatkovic, Eric Zurcher, Mingw
(Kenneth Haley)
- Unicode range checking (William Brack)
- code cleanup (William Brack)
- Python bindings: doc (John Fleck), bug fixes
- UTF-16 cleanup and BOM issues (William Brack)
- bug fixes: ID and xmlReader validation, XPath (William Brack),
xmlWriter (Alfred Mickautsch), hash.h inclusion problem, HTML parser
(James Bursa), attribute defaulting and validation, some serialization
cleanups, XML_GET_LINE macro, memory debug when using threads (William
Brack), serialization of attributes and entities content, xmlWriter
(Daniel Schulman)
- XInclude bugfix, new APIs and update to the last version including the
namespace change.
- XML Schemas improvements: include (Robert Stepanek), import and
namespace handling, fixed the regression tests troubles, added examples
based on Eric van der Vlist book, regexp fixes
- preliminary pattern support for streaming (needed for schemas
constraints), added xmlTextReaderPreservePattern() to collect subdocument
when streaming.
- various fixes in the structured error handling
Changes:
2.6.2: Nov 4 2003:
- XPath context unregistration fixes
- text node coalescing fixes (Mark Lilback)
- API to screate a W3C Schemas from an existing document (Steve Ball)
- BeOS patches (Marcin 'Shard' Konicki)
- xmlStrVPrintf function added (Aleksey Sanin)
- compilation fixes (Mark Vakoc)
- stdin parsing fix (William Brack)
- a posteriori DTD validation fixes
- xmlReader bug fixes: Walker fixes, python bindings
- fixed xmlStopParser() to really stop the parser and errors
- always generate line numbers when using the new xmlReadxxx
functions
- added XInclude support to the xmlReader interface
- implemented XML_PARSE_NONET parser option
- DocBook XSLT processing bug fixed
- HTML serialization for <p> elements (William Brack and me)
- XPointer failure in XInclude are now handled as resource errors
- fixed xmllint --html to use the HTML serializer on output (added
--xmlout to implement the previous behaviour of saving it using the XML
serializer)
2.6.1: Oct 28 2003:
- Mostly bugfixes after the big 2.6.0 changes
- Unix compilation patches: libxml.m4 (Patrick Welche), warnings cleanup
(William Brack)
- Windows compilation patches (Joachim Bauch, Stephane Bidoul, Igor
Zlatkovic)
- xmlWriter bugfix (Alfred Mickautsch)
- chvalid.[ch]: couple of fixes from Stephane Bidoul
- context reset: error state reset, push parser reset (Graham
Bennett)
- context reuse: generate errors if file is not readable
- defaulted attributes for element coming from internal entities
(Stephane Bidoul)
- Python: tab and spaces mix (William Brack)
- Error handler could crash in DTD validation in 2.6.0
- xmlReader: do not use the document or element _private field
- testSAX.c: avoid a problem with some PIs (Massimo Morara)
- general bug fixes: mandatory encoding in text decl, serializing
Document Fragment nodes, xmlSearchNs 2.6.0 problem (Kasimier Buchcik),
XPath errors not reported, slow HTML parsing of large documents.
2.6.0: Oct 20 2003:
- Major revision release: should be API and ABI compatible but got a lot
of change
- Increased the library modularity, far more options can be stripped out,
a --with-minimum configuration will weight around 160KBytes
- Use per parser and per document dictionnary, allocate names and small
text nodes from the dictionnary
- Switch to a SAX2 like parser rewrote most of the XML parser core,
provides namespace resolution and defaulted attributes, minimize memory
allocations and copies, namespace checking and specific error handling,
immutable buffers, make predefined entities static structures, etc...
- rewrote all the error handling in the library, all errors can be
intercepted at a structured level, with precise information
available.
- New simpler and more generic XML and HTML parser APIs, allowing to
easilly modify the parsing options and reuse parser context for multiple
consecutive documents.
- Similar new APIs for the xmlReader, for options and reuse, provided new
functions to access content as const strings, use them for Python
bindings
- a lot of other smaller API improvements: xmlStrPrintf (Aleksey Sanin),
Walker i.e. reader on a document tree based on Alfred Mickautsch code,
make room in nodes for line numbers, reference counting and future PSVI
extensions, generation of character ranges to be checked with faster
algorithm (William), xmlParserMaxDepth (Crutcher Dunnavant), buffer
access
Changes:
2.5.10: Aug 15 2003:
A bugfixes only release - Windows Makefiles (William Brack)
- UTF-16 support fixes (Mark Itzcovitz)
- Makefile and portability (William Brack) automake, Linux alpha, Mingw
on Windows (Mikhail Grushinskiy)
- HTML parser (Oliver Stoeneberg)
- XInclude performance problem reported by Kevin Ruscoe
- XML parser performance problem reported by Grant Goodale
- xmlSAXParseDTD() bug fix from Malcolm Tredinnick
- and a couple other cleanup
2.5.9: Aug 9 2003:
- bugfixes: IPv6 portability, xmlHasNsProp (Markus Keim), Windows build
(Wiliam Brake, Jesse Pelton, Igor), Schemas (Peter Sobisch), threading
(Rob Richards), hexBinary type (), UTF-16 BOM (Dodji Seketeli),
xmlReader, Relax-NG schemas compilation, namespace handling, EXSLT (Sean
Griffin), HTML parsing problem (William Brack), DTD validation for mixed
content + namespaces, HTML serialization, library initialization,
progressive HTML parser
- better interfaces for Relax-NG error handling (Joachim Bauch, )
- adding xmlXIncludeProcessTree() for XInclud'ing in a subtree
- doc fixes and improvements (John Fleck)
- configure flag for -with-fexceptions when embedding in C++
- couple of new UTF-8 helper functions (William Brack)
- general encoding cleanup + ISO-8859-x without iconv (Peter Jacobi)
- xmlTextReader cleanup + enum for node types (Bjorn Reese)
- general compilation/warning cleanup Solaris/HP-UX/... (William
Brack)
Changes since 2.5.7:
- bugfixes: XPath, XInclude, file/URI mapping, UTF-16 save (Mark
Itzcovitz), UTF-8 checking, URI saving, error printing (William Brack),
PI related memleak, compilation without schemas or without xpath (Joerg
Schmitz-Linneweber/Garry Pennington), xmlUnlinkNode problem with DTDs,
rpm problem on , i86_64, removed a few compilation problems from 2.5.7,
xmlIOParseDTD, and xmlSAXParseDTD (Malcolm Tredinnick)
- portability: DJGPP (MsDos) , OpenVMS (Craig A. Berry)
- William Brack fixed multithreading lock problems
- IPv6 patch for FTP and HTTP accesses (Archana Shah/Wipro)
- Windows fixes (Igor Zlatkovic, Eric Zurcher), threading (Stéphane
Bidoul)
- A few W3C Schemas Structure improvements
- W3C Schemas Datatype improvements (Charlie Bozeman)
- Python bindings for thread globals (Stéphane Bidoul), and method/class
generator
- added --nonet option to xmllint
- documentation improvements (John Fleck)
