Commit graph

175 commits

Author SHA1 Message Date
tron
fa9e41feef Remove "-thread" related part of the last change. This is not the
correct fix.
2013-12-28 23:04:36 +00:00
tron
e5cce9cd57 Fix build with GCC (4.8?) under Solaris.
This kind of build problem should probably be handled centrally in
"pkgsrc/mk/wrapper/transform-gcc". But I'm not sure how to check
for the platform in that file.
2013-12-28 20:23:44 +00:00
wiz
1c3c1371b8 Fix bug in gzip decompression.
https://bugzilla.gnome.org/show_bug.cgi?id=712528

This made gnucash unable to read some of its files.

Bump PKGREVISION.
2013-11-25 23:30:23 +00:00
adam
b200b47aeb Changes 2.9.1:
Features:
Support for Python3,
Add xmlXPathSetContextNode and xmlXPathNodeEval

Documentation:
Add documentation for xmllint --xpath
Fix the URL of the SAX documentation from James
Fix spelling of "length"

Portability:
Fix python bindings with versions older than 2.7
rebuild docs:Makefile.am
elfgcchack.h after rebuild in doc
elfgcchack for buf module
Fix a uneeded and wrong extra link parameter
Few cleanup patches for Windows
Fix rpmbuild --nocheck
Fix for win32/configure.js and WITH_THREAD_ALLOC
Fix Broken multi-arch support in xml2-config
Fix a portability issue for GCC < 3.4.0
Windows build fixes
Fix a thread portability problem
Downgrade autoconf requirement to 2.63

Bug Fixes:
Fix a linking error for python bindings
Fix a couple of return without value
Improve the hashing functions
Improve handling of xmlStopParser()
Remove risk of lockup in dictionary initialization
Activate detection of encoding in external subset
Fix an output buffer flushing conversion bug
Fix an old bug in xmlSchemaValidateOneElement
Fix configure cannot remove messages
fix schema validation in combination with xsi:nil
xmlCtxtReadFile doesn't work with literal IPv6 URLs
Fix a few problems with setEntityLoader
Detect excessive entities expansion upon replacement
Fix the flushing out of raw buffers on encoding conversions
Fix some buffer conversion issues
When calling xmlNodeDump make sure we grow the buffer quickly
Fix an error in the progressive DTD parsing code
xmllint should not load DTD by default when using the reader
Try IBM-037 when looking for EBCDIC handlers
Fix potential out of bound access
Fix large parse of file from memory
Fix a bug in the nsclean option of the parser
Fix a regression in 2.9.0 breaking validation while streaming
Remove potential calls to exit()

Improvements:
Regenerated API, and testapi, rebuild documentation
Fix tree iterators broken by 2to3 script
update all tests for Python3 and Python2
A few more fixes for python 3 affecting libxml2.py
Fix compilation on Python3
Converting apibuild.py to python3
First pass at starting porting to python3
updated configure.in for python3
Add support for xpathRegisterVariable in Python
Added a regression tests from bug 694228 data
Cache presence of '<' in entities content
Avoid extra processing on entities
Python binding for xmlRegisterInputCallback
Python bindings: DOM casts everything to xmlNode
Define LIBXML_THREAD_ALLOC_ENABLED via xmlversion.h
Adding streaming validation to runtest checks
Add a --pushsmall option to xmllint

Cleanups:
Switched comment in file to UTF-8 encoding
Extend gitignore
Silent the new python test on input
Cleanup of a duplicate test
Cleanup on duplicate test expressions
Fix compiler warning after 153cf15905cf4ec080612ada6703757d10caba1e
Spec cleanups and a fix for multiarch support
Silence a clang warning
Cleanup the Copyright to be pure MIT Licence wording
rand_seed should be static in dict.c
Fix typos in parser comments
2013-05-26 09:22:14 +00:00
drochner
56b5ec71bd add CVE reference 2013-04-19 09:47:43 +00:00
drochner
81799dfd32 add patch from upstream to fix Multiple Use-After-Free Vulnerabilities
(no CVE# assigned yet)
bump PKGREV
2013-04-18 10:17:42 +00:00
tez
88c9a4f688 Fix for CVE-2013-0338 & CVE-2013-0339
from https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab

bump PKGREVISION
2013-03-08 23:59:31 +00:00
joerg
176b97e178 If Docbook support is requested and therefore the SAX1 interface, make
sure to include the corresponding source.
2013-01-15 15:31:57 +00:00
drochner
dcc4468876 add patch from upstream to fix possible array underflow, leading
to DOS or possible code injection (CVE-2012-5134)
bump PKGREV
2012-12-15 12:39:24 +00:00
asau
1f96787c11 Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. 2012-10-25 06:55:37 +00:00
adam
232054d798 Changes 2.9.0:
Features:
* A few new API entry points,
* More resilient push parser mode,
* A lot of portability improvement,
* Faster XPath evaluation
2012-09-15 10:23:38 +00:00
drochner
f5f395b02c add patches from upstream to fix integer overflows which can cause
DOS or possibly other corruption (CVE-2012-2807)
bump PKGREV
2012-08-01 14:51:37 +00:00
sbd
d2101c94ff Add missing archivers/xz buildlink.
Bump PKGREVISION
2012-06-14 07:39:36 +00:00
wiz
f98e8b0585 Add inet6 to default suggested options. It's 2012. 2012-06-12 15:45:54 +00:00
wiz
377d644b60 Update to 2.8.0:
2.8.0: May 23 2012

    Features: - add lzma compression support (Anders F Bjorklund)

    Documentation: xmlcatalog: Add uri and delegateURI to possible
    add types in man page. (Ville Skyttä), Update README.tests
    (Daniel Veillard), URI handling code is not OOM resilient
    (Daniel Veillard), Fix an error in comment (Daniel Veillard),
    Fixed bug #617016 (Daniel Mustieles), Fixed two typos in the
    README document (Daniel Neel), add generated html files (Anders
    F Bjorklund), Clarify the need to use xmlFreeNode after
    xmlUnlinkNode (Daniel Veillard), Improve documentation a bit
    (Daniel Veillard), Updated URL for lxml python bindings (Daniel
    Veillard)

    Portability: Restore code for Windows compilation (Daniel
    Veillard), Remove git error message during configure (Christian
    Dywan), xmllint: Build fix for endTimer if !defined(HAVE_GETTIMEOFDAY)
    (Patrick R. Gansterer), remove a bashism in confgure.in (John
    Hein), undef ERROR if already defined (Patrick R. Gansterer),
    Fix library problems with mingw-w64 (Michael Cronenworth), fix
    windows build. ifdef addition from bug 666491 makes no sense
    (Rob Richards), prefer native threads on win32 (Sam Thursfield),
    Allow to compile with Visual Studio 2010 (Thomas Lemm), Fix
    mingw's snprintf configure check (Andoni Morales), fixed a
    64bit big endian issue (Marcus Meissner), Fix portability
    failure if netdb.h lacks NO_ADDRESS (Daniel Veillard), Fix
    windows build from lzma addition (Rob Richards), autogen: Only
    check for libtoolize (Colin Walters), Fix the Windows build
    files (Patrick von Reth), 634846 Remove a linking option breaking
    Windows VC10 (Daniel Veillard), 599241 fix an initialization
    problem on Win64 (Andrew W. Nosenko), fix win build (Rob
    Richards)

    Bug fixes: Part for rand_r checking missing (Daniel Veillard),
    Cleanup on randomization (Daniel Veillard), Fix undefined
    reference in python module (Pacho Ramos), Fix a race in
    xmlNewInputStream (Daniel Veillard), Fix weird streaming RelaxNG
    errors (Noam), Fix various bugs in new code raised by the API
    checking (Daniel Veillard), Fix various problems with "make
    dist" (Daniel Veillard), Fix a memory leak in the xzlib code
    (Daniel Veillard), HTML parser error with <noscript> in the
    <head> (Denis Pauk), XSD: optional element in complex type
    extension (Remi Gacogne), Fix html serialization error and
    htmlSetMetaEncoding() (Daniel Veillard), Fix a wrong return
    value in previous patch (Daniel Veillard), Fix an uninitialized
    variable use (Daniel Veillard), Fix a compilation problem with
    --minimum (Brandon Slack), Remove redundant and ungarded include
    of resolv.h (Daniel Veillard), xinclude with parse="text" does
    not use the entity loader (Shaun McCance), Allow to parse 1
    byte HTML files (Denis Pauk), Patch that fixes the skipping of
    the HTML_PARSE_NOIMPLIED flag (Martin Schröder), Avoid memory
    leak if xmlParserInputBufferCreateIO fails (Lin Yi-Li), Prevent
    an infinite loop when dumping a node with encoding problems
    (Timothy Elliott), xmlParseNodeInContext problems with an empty
    document (Tim Elliott), HTML element position is not detected
    propperly (Pavel Andrejs), Fix an off by one pointer access
    (Jüri Aedla), Try to fix a problem with entities in SAX mode
    (Daniel Veillard), Fix a crash with xmllint --path on empty
    results (Daniel Veillard), Fixed bug #667946 (Daniel Mustieles),
    Fix a logic error in Schemas Component Constraints (Ryan Sleevi),
    Fix a wrong enum type use in Schemas Types (Nico Weber), Fix
    SAX2 builder in case of undefined attributes namespace (Daniel
    Veillard), Fix SAX2 builder in case of undefined element
    namespaces (Daniel Veillard), fix reference to STDOUT_FILENO
    on MSVC (Tay Ray Chuan), fix a pair of possible out of array
    char references (Daniel Veillard), Fix an allocation error when
    copying entities (Daniel Veillard), Make sure the parser returns
    when getting a Stop order (Chris Evans), Fix some potential
    problems on reallocation failures(parser.c) (Xia Xinfeng), Fix
    a schema type duration comparison overflow (Daniel Veillard),
    Fix an unimplemented part in RNG value validation (Daniel
    Veillard), Fix missing error status in XPath evaluation (Daniel
    Veillard), Hardening of XPath evaluation (Daniel Veillard),
    Fix an off by one error in encoding (Daniel Veillard), Fix
    RELAX NG include bug #655288 (Shaun McCance), Fix XSD validation
    bug #630130 (Toyoda Eizi), Fix some potential problems on
    reallocation failures (Chris Evans), __xmlRaiseError: fix use
    of the structured callback channel (Dmitry V. Levin),
    __xmlRaiseError: fix the structured callback channel's data
    initialization (Dmitry V. Levin), Fix memory corruption when
    xmlParseBalancedChunkMemoryInternal is called from
    xmlParseBalancedChunk (Rob Richards), Small fix for previous
    commit (Daniel Veillard), Fix a potential freeing error in
    XPath (Daniel Veillard), Fix a potential memory access error
    (Daniel Veillard), Reactivate the shared library versionning
    script (Daniel Veillard)

    Improvements: use mingw C99 compatible functions {v}snprintf
    instead those from MSVC runtime (Roumen Petrov), New symbols
    added for the next release (Daniel Veillard), xmlTextReader
    bails too quickly on error (Andy Lutomirski), Use a hybrid
    allocation scheme in xmlNodeSetContent (Conrad Irwin), Use
    buffers when constructing string node lists. (Conrad Irwin),
    Add HTML parser support for HTML5 meta charset encoding
    declaration (Denis Pauk), wrong message for double hyp"whereis"
    command to xmllint shell (Ryan), Improve xmllint shell (Ryan),
    add function xmlTextReaderRelaxNGValidateCtxt() (Noam Postavsky),
    Add --system support to autogen.sh (Daniel Veillard), Add hash
    randomization to hash and dict structures (Daniel Veillard),
    included xzlib in dist (Anders F Bjorklund), move xz/lzma
    helpers to separate included files (Anders F Bjorklund), add
    generated devhelp files (Anders F Bjorklund), add XML_WITH_LZMA
    to api (Anders F Bjorklund), autogen.sh: Honor NOCONFIGURE
    environment variable (Colin Walters), Improve the error report
    on undefined REFs (Daniel Veillard), Add exception for new W3C
    PI xml-model (Daniel Veillard), Add options to ignore the
    internal encoding (Daniel Veillard), testapi: use the right
    type for the check (Stefan Kost), various: handle return values
    of write calls (Stefan Kost), testWriter:
    xmlTextWriterWriteFormatElement wants an int instead of a long
    int (Stefan Kost), runxmlconf: update to latest testsuite
    version (Stefan Kost), configure: add -Wno-long-long to CFLAGS
    (Stefan Kost), configure: support silent automake rules if
    possible (Stefan Kost), xmlmemory: add a cast as size_t has no
    portable printf modifier (Stefan Kost), __xmlRaiseError: remove
    redundant schannel initialization (Dmitry V. Levin), __xmlRaiseError:
    do cheap code check early (Dmitry V. Levin)

    Cleanups: Cleanups before 2.8.0-rc2 (Daniel Veillard), Avoid
    an extra operation (Daniel Veillard), Remove vestigial
    de-ANSI-fication support. (Javier Jardón), autogen.sh: Fix
    typo (Javier Jardón), Do not use unsigned but unsigned int
    (Daniel Veillard), Remove two references to u_short (Daniel
    Veillard), Fix -Wempty-body warning from clang (Nico Weber),
    Cleanups of lzma support (Daniel Veillard), Augment the list
    of ignored files (Daniel Veillard), python: remove unused
    variable (Stefan Kost), python: flag two unused args (Stefan
    Kost), configure: acconfig.h is deprecated since autoconf-2.50
    (Stefan Kost), xpath: remove unused variable (Stefan Kost)
2012-06-03 22:18:33 +00:00
taca
75eb41319c Add fix for http://secunia.com/advisories/49177/ from repository.
Bump PKGREVISION.
2012-05-21 12:22:53 +00:00
mishka
d152803710 FreeBSD 6 and earlier misses the pthread_equal() stub as well.
While here, improve comments a little bit.
2012-04-27 15:05:02 +00:00
obache
e38aaccae0 Change behavior of libpthread handling
* Disable linkage with pthread for FreeBSD/DragonFly/NetBSD, they have
  pthread_* () stubs in libc (it result in same as the previous behavior).
  * but NetBSD<4.99.36 does not have pthread_equal() stub in libc,
    so define weak reference to it.
* Treat OpenBSD and MirBSD same as Linux to avoid linkage with libpthread.
* Others will be linked with pthread, fixes PR 46254.

tested NetBSD-5.1.2, and confirmed fixed on NetBSD-4.0.1 and OpenBSD-5.0.

Bump PKGREVISION.
2012-04-03 09:08:33 +00:00
drochner
5db40bbdba Add patch from upstream to add hash randomization.
Without that, (untrusted) input can fill hash buckets uneven, causing
high CPU load. (CVE-2012-0841)
To get a patch which is simple enough to get pulled up to the stable
pkgsrc branch, I've not touched "configure" but just assumed that
the POSIX functions rand(), srand() and time() are present.
bump PKGREV
2012-03-09 12:12:27 +00:00
drochner
8ffca39e4a build the library thread-aware, i.e. use <pthread.h> but do not
link against libpthread. (It doesn't create threads, just uses
locking.) This seems to be wanted by some applications, eg vlc
issues a warning on startup (with no visible consequences afaict,
but anyway).
I hope this works for other OSes too. If not, we should probably
add support for these cases to mk/pthread.bl3.mk.
bump PKGREV
2012-02-22 11:10:17 +00:00
joerg
2d94bdc942 Don't use non-ASCII character literals. 2012-01-23 08:10:56 +00:00
drochner
9ead188492 add patch from upstream to fix potential DOS problem (CVE-2011-3905)
bump PKGREV
2012-01-17 14:43:43 +00:00
drochner
d50a2d4662 add 2 patches from upstream:
-fix buffer overflow on entity references with long name (CVE-2011-3919)
-fix error handling on realloc() failure
bump PKGREV
2012-01-12 11:25:10 +00:00
spz
b93a054be2 sundry security patches taken from libxml2 git
among these patches for http://secunia.com/advisories/46632/
2011-11-01 19:21:06 +00:00
drochner
4a29046189 addmore patches from upstream:
-fix more potential problems on reallocation failures (CVE-2011-1944)
-Fix memory corruption
also replace an error handling which doesn't recover from
integer overflow
bump PKGREV
2011-06-06 12:09:01 +00:00
wiz
e2f84ad43f Reset maintainer for retired developers. 2011-02-28 14:52:37 +00:00
drochner
0f9cb99c3a add 3 patches from gnome git:
-fix realloc error handling bug
-fix potential double free (CVE-2010-4494 / SA42721)
bump PKGREVISION
2011-01-03 12:17:43 +00:00
drochner
0d8a2e9065 fix an obviously reversed conditional in "configure" which disabled
symbol versioning, hopefully fixes PR pkg/44154 by Geert Hendrickx
bump PKGREVISION
2010-11-26 13:43:24 +00:00
hauke
1443f52c2c The Darwin 8 /bin/{,k}sh take offense at empty if .. fi blocks,
so comment out the entire statement.
2010-11-26 12:56:21 +00:00
drochner
67712d2960 update to 2.7.8
changes:
-add code to plug in ICU converters by default
-Add xmlSaveOption XML_SAVE_WSNONSIG
-documentation fixes
-portability fixes
-bugfixes, in particular for an XPath problem which can be exploited
 to crash the program by a malformed XPath expression (CVE-2010-4008)
-misc improvements, cleanup
2010-11-25 13:18:38 +00:00
obache
33d15735ee Add patch-aj to include resolv.h conditionally.
https://bugzilla.gnome.org/show_bug.cgi?id=617053
Fixes build on Interix-6.0.
2010-04-28 08:54:30 +00:00
drochner
e92f8c86bf update to 2.7.7
changes:
-Adding a --xpath option to xmllint
-Make HTML parser non-recursive
-misc portability improvements and bugfixes
2010-04-13 16:04:09 +00:00
sno
6f1e3f41b0 Patches out invalid linker flags for solaris. Tested with OpenSolaris/amd64
and Solaris 10/sparc - both with Sun Studio C/C++ 12u1.
Fixes PR pkg/42335 (thanks to Todd Kover for the hint).
2009-11-22 14:05:26 +00:00
drochner
1582a02329 remove most of the hacks which were only to make the selftest
succeed, now that EBCDIC support in NetBSD-current was improved
(see PR lib/42209)
2009-11-15 12:48:24 +00:00
wiz
5950497da0 Set LICENSE. 2009-10-31 03:05:20 +00:00
sno
f30feba279 Add patch to fix compiler error 'operands have incompatible types' 2009-10-25 17:19:44 +00:00
drochner
5294a5c1c3 update to 2.7.6
changes:
-bugfixes
-portability and documentation improvements
-cleanup

pkgsrc note: added some tweaks to EBCDIC support, both to fix non-
portable assumptions in the code and to work around NetBSD deficiencies;
now it needs only a little fix to CP273 (newline conversion) to make
the selftest succeed on NetBSD
2009-10-21 14:55:32 +00:00
tron
21d34c3547 Add patch to fix the security vulnerabilites reported in CVE-2009-2414
and CVE-2009-2416.

The patch was taken from the latest Fedora 11 "libxml2" source RPM.
2009-08-26 10:20:57 +00:00
joerg
73ae0afd90 Remove @dirrm entries from PLISTs 2009-06-14 18:17:11 +00:00
joerg
2d1ba244e9 Simply and speed up buildlink3.mk files and processing.
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
2009-03-20 19:23:50 +00:00
joerg
52ba3606db Add glob to USE_FEATURES only once. 2009-03-16 23:17:14 +00:00
wiz
2f27b04373 Update to 2.7.3:
2.7.3: Jan 18 2009

    * Build fix: fix build when HTML support is not included.
    * Bug fixes: avoid memory overflow in gigantic text nodes,
    indentation problem on the writed (Rob Richards), xmlAddChildList
    pointer problem (Rob Richards and Kevin Milburn), xmlAddChild
    problem with attribute (Rob Richards and Kris Breuker), avoid
    a memory leak in an edge case (Daniel Zimmermann), deallocate
    some pthread data (Alex Ott).
    * Improvements: configure option to avoid rebuilding docs
    (Adrian Bunk), limit text nodes to 10MB max by default, add
    element traversal APIs, add a parser option to enable pre 2.7
    SAX behavior (Rob Richards), add gcc malloc checking (Marcus
    Meissner), add gcc printf like functions parameters checking
    (Marcus Meissner).
2009-02-21 13:58:49 +00:00
tron
0dfc182105 Add fixes for security vulnerabilities reported in CVE-2008-4225 and
CVE-2008-4226 from "libxml2" SVN repository. Bump package revision.
2008-11-24 13:59:16 +00:00
drochner
44d30dc4d1 restore the without-threads config arg which I accidentally commented
out in the last update, bump PKGREVISION
fixes PR pkg/39755 by David A. Holland
2008-10-17 16:06:04 +00:00
drochner
12dc768315 update to 2.7.2
changes:
-Portability fix: fix solaris compilation problem, fix compilation
 if XPath is not configured in
-Bug fixes: nasty entity bug introduced in 2.7.0, restore old behaviour
 when saving an HTML doc with an xml dump function,
 HTML UTF-8 parsing bug, fix reader custom error handlers
-Improvement: xmlSave options for more flexibility to save
 as XML/HTML/XHTML, handle leading BOM in HTML documents
cvs: ----------------------------------------------------------------------
2008-10-16 13:31:57 +00:00
sketch
3acad577ff Need inttypes.h on Solaris 9. 2008-10-13 10:31:24 +00:00
wiz
dd87b7af6b Split off options.mk file.
Remove ancient workaround for sparc64/1.6 problem.
2008-10-09 19:20:36 +00:00
tron
206e58dade Add a fix for CVE-2008-4409 (also known as CVE-2008-4422) from the
GNOME bugzilla. Bump package revision.
2008-10-09 15:01:27 +00:00
wiz
f0da829a4f Update to 2.7.1:
2.7.1: Sep 1 2008

    * Portability fix: Borland C fix (Moritz Both)
    * Bug fixes: python serialization wrappers, XPath QName corner
      case handking and leaks (Martin)
    * Improvement: extend the xmlSave to handle HTML documents and trees
    * Cleanup: python serialization wrappers

2.7.0: Aug 30 2008

    * Documentation: switch ChangeLog to UTF-8, improve mutithreads
    and xmlParserCleanup docs
    * Portability fixes: Older Win32 platforms (Rob Richards), MSVC
    porting fix (Rob Richards), Mac OS X regression tests (Sven
    Herzberg), non GNUCC builds (Rob Richards), compilation on
    Haiku (Andreas F�rber)
    * Bug fixes: various realloc problems (Ashwin), potential
    double-free (Ashwin), regexp crash, icrash with invalid whitespace
    facets (Rob Richards), pattern fix when streaming (William
    Brack), various XML parsing and validation fixes based on the
    W3C regression tests, reader tree skipping function fix (Ashwin),
    Schemas regexps escaping fix (Volker Grabsch), handling of
    entity push errors (Ashwin), fix a slowdown when encoder cant
    serialize characters on output
    * Code cleanup: compilation fix without the reader, without
    the output (Robert Schwebel), python whitespace (Martin), many
    space/tabs cleanups, serious cleanup of the entity handling
    code
    * Improvement: switch parser to XML-1.0 5th edition, add parsing
    flags for old versions, switch URI parsing to RFC 3986, add
    xmlSchemaValidCtxtGetParserCtxt (Holger Kaelberer), new hashing
    functions for dictionnaries (based on Stefan Behnel work),
    improve handling of misplaced html/head/body in HTML parser,
    better regression test tools and code coverage display, better
    algorithms to detect various versions of the billion laughts
    attacks, make arbitrary parser limits avoidable as a parser
    option
2008-09-06 14:58:34 +00:00
dsainty
ace8262701 Add an HTTP download option to MASTER_SITES 2008-05-04 06:59:51 +00:00