libplist/src, branch master Library to handle Apple Property List format files in binary or XML Add OpenStep coercion support for non-OpenStep plist types 2026-03-22T18:16:51+00:00 Nikias Bassen 2026-03-22T18:16:51+00:00 c8b36a80bad4a1fe488927af4da0ecbcf10079bb - Use PLIST_OPT_COERCE option to coerce PLIST_BOOLEAN, PLIST_DATE, PLIST_UID, and PLIST_NULL to OpenStep-compatible types (1 or 0, ISO 8601 strings, integers, and 'NULL' string) - Add plist_to_openstep_with_options() function to allow passing coercion option (and others) - Update plist_write_to_string() and plist_write_to_stream() accordingly 
- Use PLIST_OPT_COERCE option to coerce PLIST_BOOLEAN, PLIST_DATE, PLIST_UID, and PLIST_NULL to OpenStep-compatible types (1 or 0, ISO 8601 strings, integers, and 'NULL' string)
- Add plist_to_openstep_with_options() function to allow passing coercion option (and others)
- Update plist_write_to_string() and plist_write_to_stream() accordingly
Add JSON coercion support for non-JSON plist types 2026-03-20T16:12:47+00:00 Calil Khalil 2026-02-21T13:39:24+00:00 3edac28498d883f1f768699ee15ce85a82bb2a7b - Add PLIST_OPT_COERCE option to coerce PLIST_DATE, PLIST_DATA, and PLIST_UID to JSON-compatible types (ISO 8601 strings, Base64 strings, and integers) - Add plist_to_json_with_options() function to allow passing coercion options (and others) - Update plist_write_to_string() and plist_write_to_stream() to support coercion option - Add --coerce flag to plistutil for JSON output - Create plist2json symlink that automatically enables coercion when invoked 
- Add PLIST_OPT_COERCE option to coerce PLIST_DATE, PLIST_DATA, and PLIST_UID to JSON-compatible types (ISO 8601 strings, Base64 strings, and integers)
- Add plist_to_json_with_options() function to allow passing coercion options (and others)
- Update plist_write_to_string() and plist_write_to_stream() to support coercion option
- Add --coerce flag to plistutil for JSON output
- Create plist2json symlink that automatically enables coercion when invoked
xplist: Enforce single root value inside <plist> 2026-02-25T01:27:00+00:00 Sami Kortelainen 2026-02-25T01:27:00+00:00 6e03a1df6d1aa87c8f9e2b35f1a2ca60feca1c0e Ensure that XML property lists contain exactly one root value inside the <plist> element and reject any additional value nodes before </plist>. Add tests covering root value handling and nested CF$UID conversion behavior. Co-authored-by: Sami Kortelainen <sami.kortelainen@piceasoft.com> Co-authored-by: Nikias Bassen <nikias@gmx.li> 
Ensure that XML property lists contain exactly one root value inside the <plist> element and reject any additional value nodes before </plist>.

Add tests covering root value handling and nested CF$UID conversion behavior.

Co-authored-by: Sami Kortelainen <sami.kortelainen@piceasoft.com>
Co-authored-by: Nikias Bassen <nikias@gmx.li>
xplist: Convert nested {CF$UID:<int>} dicts to PLIST_UID safely 2026-02-22T02:39:54+00:00 Sami Kortelainen 2026-02-22T02:39:54+00:00 f5e74fc1e007b8f625d91e40c160785580de8f60 Convert single-entry { "CF$UID" : <integer> } dictionaries to PLIST_UID nodes when closing a dict in the XML parser. Refactor node cleanup logic: - Split plist_free_data() into internal _plist_free_data() - Introduce plist_free_children() to release child nodes separately - Update plist_set_element_val() to free children before changing container node types - Ensure PLIST_DICT hashtables do not free values (assert + force free_func = NULL) This avoids in-place container mutation issues and ensures child nodes and container metadata are released correctly before changing node type. Co-authored-by: Sami Kortelainen <sami.kortelainen@piceasoft.com> Co-authored-by: Nikias Bassen <nikias@gmx.li> 
Convert single-entry { "CF$UID" : <integer> } dictionaries to PLIST_UID
nodes when closing a dict in the XML parser.

Refactor node cleanup logic:
- Split plist_free_data() into internal _plist_free_data()
- Introduce plist_free_children() to release child nodes separately
- Update plist_set_element_val() to free children before changing
  container node types
- Ensure PLIST_DICT hashtables do not free values (assert + force
  free_func = NULL)

This avoids in-place container mutation issues and ensures child
nodes and container metadata are released correctly before
changing node type.

Co-authored-by: Sami Kortelainen <sami.kortelainen@piceasoft.com>
Co-authored-by: Nikias Bassen <nikias@gmx.li>
json: Fix a few memory leaks 2026-02-13T00:05:53+00:00 Nikias Bassen 2026-02-13T00:05:53+00:00 d5a582e95a0535ba2ec916cf0532dfe29bcd7e6e 






bplist: Add overflow check to node offset pointer arithmetic
2026-02-12T01:43:50+00:00

Nikias Bassen

2026-02-12T01:43:50+00:00

9969b8ebeb2dd2ac66e4d18fc15d0340de6e8d0e

Credit to OSSFuzz





Credit to OSSFuzz







jplist: Add another NULL check to prevent NULL pointer dereference
2026-02-12T01:14:45+00:00

Nikias Bassen

2026-02-12T01:13:59+00:00

c4763002d20e845b566edbe499ada85b03d38dc2












plist: make array and dict iterators opaque
2026-02-12T01:10:19+00:00

Nikias Bassen

2026-02-12T01:10:19+00:00

a7e82b846543a4fc8d3291a5a65dd66b0cb84396

Introduce private iterator structs for plist_array_iter and
plist_dict_iter, and fix *_next_item() to properly advance
iterator state and handle malformed containers safely.





Introduce private iterator structs for plist_array_iter and
plist_dict_iter, and fix *_next_item() to properly advance
iterator state and handle malformed containers safely.







Add NULL checks across codebase
2026-02-12T00:20:05+00:00

Nikias Bassen

2026-02-12T00:20:05+00:00

4e82bc85671cfe50763de2637b54cb8576d7976f












plist: Make plist copy and free implementations iterative
2026-02-10T16:45:12+00:00

Nikias Bassen

2026-02-10T16:45:12+00:00

8c78d89041b713bffcb0b09fee4468304a3a54d5

Convert plist_free_node() and plist_copy_node() to iterative
implementations. This avoids unbounded recursion and stack
overflow when handling deeply nested plist data, while
preserving existing semantics and caches.





Convert plist_free_node() and plist_copy_node() to iterative
implementations. This avoids unbounded recursion and stack
overflow when handling deeply nested plist data, while
preserving existing semantics and caches.