libplist - Library to handle Apple Property List format files in binary or XML

Age	Commit message (Collapse)	Author	Files	Lines
2015-01-31	bplist: Fix possible crash in plist_from_bin() caused by access to already ↵	Nikias Bassen	1	-3/+5
	freed memory Given a specifically ordered binary plist the function plist_from_bin() would free BPLIST_DICT or BPLIST_ARRAY raw node data that is still required for parsing of following nodes. This commit addresses this issues by moving the memory free to the end of the parsing process.
2015-01-29	m4: Acutally report include path check before doing the check	Martin Szulecki	1	-1/+1

2015-01-29	m4: Use python-config if available to fix Python 3 support on newer distros	Martin Szulecki	1	-0/+6

2015-01-29	plistutil: Plug some memory leaks	Nikias Bassen	1	-2/+6

2015-01-29	plistutil: Use static buffer for stat()	Nikias Bassen	1	-6/+4

2015-01-29	Move pkg-config file into src directory	Martin Szulecki	5	-5/+5

2015-01-29	Improve maintainability and Requires of pkg-config files slightly	Martin Szulecki	2	-9/+7

2015-01-28	Require autoconf 2.64+ to use package bugreport and project URL in AC_INIT	Martin Szulecki	1	-2/+2

2015-01-28	Update README with new git URL, IRC and twitter profile	Martin Szulecki	1	-2/+5

2015-01-23	xplist: Plug memory leak by cleaning up libxml2's parser after use	Martin Szulecki	1	-0/+16
	This is actually considered bad practice. However, it appears this memory leak is otherwise not possible to fix due to a design flaw in how libxml2 handles the lifecycle of it's XML parser. We'll let the community test this in production now and decide. In our tests this change had no drawbacks except fixing the last known memory leak in libplist.
2015-01-23	plistutil: Improve error message for a human if input file reading failed	Martin Szulecki	1	-1/+1

2015-01-23	plistutil: Cleanup code style a bit and remove obsolete extra header	Martin Szulecki	3	-102/+79

2015-01-23	Update and correct some copyright header comments	Martin Szulecki	3	-3/+8

2015-01-23	xplist: Fix limited but possible XXE security vulnerability with XML plists	Martin Szulecki	1	-4/+16
	By using a specifically crafted XML file an attacker could use plistutil to issue a GET request to an arbitrary URL or disclose a local file. The crafted XML file would be using a custom DTD with an external entity reference pointing to the file. Practical abuse is limited but let's still fix it nevertheless. Related to CVE-2013-0339 for libxml2 and CWE-827. Reported by Loïc Bénis from calypt.com. Thanks!
2015-01-23	Add generation of documentation using "make docs"	Martin Szulecki	2	-2/+10

2015-01-11	Pass flag '-avoid-version' to libtool for libplist++ in addition to libplist ↵	Aaron Burghardt	1	-0/+1
	for WIN32.
2014-10-22	Workaround autoconf bug and ensure a C++ compiler is mandatory	Martin Szulecki	1	-0/+10
	If AC_PROG_CXX is used after AC_PROG_CC, it will return "g++" even if no C++ compiler is installed. However, as we need one, testing compiling a program will make configure fail if indeed no C++ compiler is installed.
2014-10-14	Post-release version bump to 1.13	Martin Szulecki	1	-1/+1

2014-10-14	Add "check-news" automake option to ensure correct NEWS file on releases1.12	Martin Szulecki	1	-1/+1

2014-10-14	cython: Enforce default symbol visibility to make bindings loadable	Martin Szulecki	1	-1/+1

2014-10-14	cython: Use output variables instead of relative paths in Makefile	Martin Szulecki	1	-2/+2

2014-10-14	Update NEWS with latest changes	Martin Szulecki	1	-0/+24

2014-10-14	Bump so name correctly as some ABI symbols were removed	Martin Szulecki	1	-1/+1

2014-10-09	bplist: Fix plist_from_bin() changing value nodes to key nodes in dictionaries	Martin Szulecki	1	-11/+33
	The parsing logic for binary dictionaries wrongly enforced the key type even on nodes that were already parsed as value nodes. This caused the resulting plist_t node tree to have key nodes instead of value nodes within dictionaries for some valid binary plists. This commit should also generally fixes parsing of binary plist files which use an efficient dictionary reference table.
2014-10-03	Bump so revision due to ABI changes	Nikias Bassen	1	-1/+1

2014-10-03	Drop src/common.h and use byte order macros from config.h directly	Nikias Bassen	3	-33/+15

2014-10-03	Avoid exporting non-public symbols	Nikias Bassen	12	-143/+141

2014-09-26	plist.h: Move deprecation marker before function declaration to make ↵	Nikias Bassen	1	-1/+2
	non-gcc/clang compilers happy
2014-09-26	C++: Add missing cstddef include to Node.h	Nikias Bassen	1	-0/+1

2014-09-23	bplist: Prevent crash in plist_from_bin() when parsing unusually structured ↵	Nikias Bassen	1	-1/+1
	binary plist
2014-09-20	C++: Make sure String::GetValue() and Key::GetValue() don't crash with NULL ↵	Nikias Bassen	2	-4/+14
	strings
2014-09-20	Added const to Array.GetSize(), and to 3 Node methods.	Aaron Burghardt	4	-9/+9

2014-09-20	Change Clone() to be const, which required constructors with const ↵	Aaron Burghardt	22	-65/+71
	references and a const GetValue().
2014-08-25	Fixed memory leaks in new_xml_plist() and parse_real_node().	Aaron Burghardt	2	-3/+1

2014-08-06	Properly rename header guards according to C++ standard	Nikias Bassen	12	-36/+36

2014-08-06	bplist: Silence compiler warning about 'always true' comparison due to type ↵	Nikias Bassen	1	-2/+6
	mismatch
2014-07-30	cython: Fix compiler warning by actually using the Uid factory	Martin Szulecki	1	-0/+2

2014-07-30	cython: Replace old Pyrex for-from loop with normal one to fix compiler warning	Martin Szulecki	1	-1/+1

2014-07-30	cython: Fix Python library import fail due to removed 'plist_set_type' symbol	Martin Szulecki	1	-4/+1

2014-07-30	cython: Do not export plist_new_key() which should not be used directly	Martin Szulecki	1	-1/+0

2014-07-30	cython: Fix compiler warning about uninitialized struct tm field	Martin Szulecki	1	-9/+8

2014-06-13	test: Fix make clean in relation with out-of-tree build directory	Martin Szulecki	1	-1/+1

2014-05-27	Update AUTHORS from git history	Martin Szulecki	1	-1/+11

2014-05-27	xplist: Fix keys not being output correctly if converted to XML entities	Martin Szulecki	1	-5/+11

2014-05-27	test: Add keys with XML entities to data plist files	Martin Szulecki	5	-2/+10

2014-05-27	test: Fix clean target to remove all generated files	Martin Szulecki	1	-1/+1

2014-05-23	test: Add test cases for integer nodes	Nikias Bassen	9	-2/+78

2014-05-23	test: Add data/7.plist to extra_dist target	Nikias Bassen	1	-1/+1

2014-05-23	Handle signed vs. unsigned integer values correctly	Nikias Bassen	2	-5/+53

2014-05-22	test: Use better test data for timezone tests	Nikias Bassen	3	-2/+12