BSD Commit Log Search

   Import expat 2.2.8

   Release 2.2.8 Fri Septemper 13 2019
           Security fixes:
          #317 #318  CVE-2019-15903 -- Fix heap overflow triggered by
                       XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber),
                       and deny internal entities closing the doctype;
                       fixed in commit c20b758c332d9a13afbbb276d30db1d183a85d43

           Bug fixes:
               #240  Fix cases where XML_StopParser did not have any effect
                       when called from inside of an end element handler
               #341  xmlwf: Fix exit code for operation without "-d DIRECTORY";
                       previously, only "-d DIRECTORY" would give you a proper
                       exit code:
                         # xmlwf -d . <<<'<not well-formed>' 2>/dev/null ; echo $?
                         2
                         # xmlwf <<<'<not well-formed>' 2>/dev/null ; echo $?
                         0
                       Now both cases return exit code 2.

           Other changes:
          #299 #302  Windows: Replace LoadLibrary hack to access
                       unofficial API function SystemFunction036 (RtlGenRandom)
                       by using official API function rand_s (needs WinXP+)
               #325  Windows: Drop support for Visual Studio <=7.1/2003
                       and document supported compilers in README.md
               #286  Windows: Remove COM code from xmlwf; in case it turns
                       out needed later, there will be a dedicated repository
                       below https://github.com/libexpat/ for that code
               #322  Windows: Remove explicit MSVC solution and project files.
                       You can generate Visual Studio solution files through
                       CMake, e.g.: cmake -G"Visual Studio 15 2017" .
               #338  xmlwf: Make "xmlwf -h" help output more friendly
               #339  examples: Improve elements.c
          #244 #264  Autotools: Add argument --enable-xml-attr-info
          #239 #301  Autotools: Add arguments
                       --with-getrandom
                       --without-getrandom
                       --with-sys-getrandom
                       --without-sys-getrandom
          #312 #343  Autotools: Fix linking issues with "./configure LD=clang"
                     Autotools: Fix "make run-xmltest" for out-of-source builds
          #329 #336  CMake: Pull all options from Expat <=2.2.7 into namespace
                       prefix EXPAT_ with the exception of DOCBOOK_TO_MAN:
                       - BUILD_doc            -> EXPAT_BUILD_DOCS (plural)
                       - BUILD_examples       -> EXPAT_BUILD_EXAMPLES
                       - BUILD_shared         -> EXPAT_SHARED_LIBS
                       - BUILD_tests          -> EXPAT_BUILD_TESTS
                       - BUILD_tools          -> EXPAT_BUILD_TOOLS
                       - DOCBOOK_TO_MAN       -> DOCBOOK_TO_MAN (unchanged)
                       - INSTALL              -> EXPAT_ENABLE_INSTALL
                       - MSVC_USE_STATIC_CRT  -> EXPAT_MSVC_STATIC_CRT
                       - USE_libbsd           -> EXPAT_WITH_LIBBSD
                       - WARNINGS_AS_ERRORS   -> EXPAT_WARNINGS_AS_ERRORS
                       - XML_CONTEXT_BYTES    -> EXPAT_CONTEXT_BYTES
                       - XML_DEV_URANDOM      -> EXPAT_DEV_URANDOM
                       - XML_DTD              -> EXPAT_DTD
                       - XML_NS               -> EXPAT_NS
                       - XML_UNICODE          -> EXPAT_CHAR_TYPE=ushort (!)
                       - XML_UNICODE_WCHAR_T  -> EXPAT_CHAR_TYPE=wchar_t (!)
          #244 #264  CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF),
                       default OFF
               #326  CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF),
                       default OFF
               #328  CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF),
                       default OFF
          #239 #277  CMake: Add arguments
                       -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
                       -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
               #326  CMake: Install expat_config.h to include directory
               #326  CMake: Generate and install configuration files for
                       future find_package(expat [..] CONFIG [..])
                     CMake: Now produces a summary of applied configuration
                     CMake: Require C++ compiler only when tests are enabled
               #330  CMake: Fix compilation for 16bit character types,
                       i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
               #265  CMake: Fix linking with MinGW
               #330  CMake: Add full support for MinGW; to enable, use
                       -DCMAKE_TOOLCHAIN_FILE=[expat]/cmake/mingw-toolchain.cmake
               #330  CMake: Port "make run-xmltest" from GNU Autotools to CMake
               #316  CMake: Windows: Make binary postfix match MSVC
                       Old: expat[d].lib
                       New: expat[w][d][MD|MT].lib
                     CMake: Migrate files from Windows to Unix line endings
               #308  CMake: Integrate OSS-Fuzz fuzzers, option
                       -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
                #14  Drop an OpenVMS support leftover
       #235 #268 ..
       #270 #310 ..
     #313 #331 #333  Address compiler warnings
       #282 #283 ..
          #284 #285  Address cppcheck warnings
          #294 #295  Address Clang Static Analyzer warnings
           #24 #293  Mass-apply clang-format 9 (and ensure conformance during CI)
                     Version info bumped from 7:9:6 to 7:10:6

           Special thanks to:
               David Loffredo
               Joonun Jang
               Khajapasha Mohammed
               Kishore Kunche
               Marco Maggi
               Mitch Phillips
               Rolf Ade
               xantares
               Zhongyuan Zhou

UnifiedSplitRaw