libplist - Library to handle Apple Property List format files in binary or XML

Age	Commit message (Collapse)	Author	Files	Lines
4 days	bytearray: Handle realloc() failure in byte_array_grow()	Comtea04	1	-0/+12
	byte_array_grow() assigned the result of realloc() directly to ba->data and increased the capacity even if realloc() failed, so the following memcpy() in byte_array_append() wrote to NULL + len. On failure, free the old buffer and leave the byte array in a failed state (data == NULL), which byte_array_append() already ignores. The callers check for that state: - the writers (bin, xml, json, openstep and the text output formats) return PLIST_ERR_NO_MEM instead of handing out a NULL/truncated buffer - node_to_xml() base64-encodes <data> directly into the grown buffer, so it must bail out there (only guarded by assert() before) - the OpenStep parser returns PLIST_ERR_NO_MEM for <hex data> instead of silently returning truncated data Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-05-22	Print debug error message when encoutering invalid PLIST_DATE values	Nikias Bassen	1	-0/+1

2026-05-22	common: validate PLIST_DATE values before Time64_T conversion	Nikias Bassen	1	-1/+4
	Avoid undefined behavior when serializing malformed PLIST_DATE values containing NaN, infinity, or values outside the Time64_T range. Add a shared helper for checked date conversion and use it across writer paths.
2026-05-22	refactor: centralize formatting helpers and harden out-plutil	Nikias Bassen	1	-64/+1

2026-03-22	Add OpenStep coercion support for non-OpenStep plist types	Nikias Bassen	1	-28/+115
	- Use PLIST_OPT_COERCE option to coerce PLIST_BOOLEAN, PLIST_DATE, PLIST_UID, and PLIST_NULL to OpenStep-compatible types (1 or 0, ISO 8601 strings, integers, and 'NULL' string) - Add plist_to_openstep_with_options() function to allow passing coercion option (and others) - Update plist_write_to_string() and plist_write_to_stream() accordingly
2026-01-17	Prevent deep nesting of plist structures in all input/output formats	Nikias Bassen	1	-32/+37
	Thanks to @unbengable12 for reporting. Addresses #288, #289, #290, #291, and #292.
2026-01-14	Add circular reference detection to all format writers	Nikias Bassen	1	-2/+21
	Thanks to @LkkkLxy for pointing out the issue.
2025-10-29	OpenStep: Fix possible integer overflow in node_from_openstep	Nikias Bassen	1	-1/+1
	Thanks to @ylwango613 for pointing this out!
2024-11-28	Fix warnings on MSVC	Duncan Ogilvie	1	-0/+4

2023-05-21	Add explicit casts and fix return type mismatches	Nikias Bassen	1	-14/+14

2023-05-14	Make sure function signatures match their declarations in the public header	Nikias Bassen	1	-2/+2

2023-05-13	Add space before PRI* macros, some compilers do not like it	Nikias Bassen	1	-2/+2

2023-05-13	Move PLIST_API to the headers	Nikias Bassen	1	-2/+2

2023-05-07	Silence another false 'shadows builtin function' warning on MinGW	Nikias Bassen	1	-0/+3

2023-05-07	Silence more compiler warning on 32bit systems	Nikias Bassen	1	-22/+22

2023-02-07	Fix build without --enable-debug	Nikias Bassen	1	-0/+2

2023-02-07	Add function to interface to allow enabling/disabling error/debug output for ↵	Nikias Bassen	1	-0/+5
	the format parses This makes the `-d` option work in plistutil that wasn't doing anything
2023-02-06	libcnary: Updated typedefs of node_t and node_list_t to contain pointer	Nikias Bassen	1	-6/+5
	This makes the code more readable. Obviously all the code that uses it is also updated.
2023-01-18	oplist: Prevent too many levels of recursion to prevent stack overflow	Nikias Bassen	1	-1/+9
	Credit to OSS-Fuzz
2023-01-17	oplist: Fix another OOB read	Nikias Bassen	1	-0/+7
	Credit to OSS-Fuzz
2023-01-16	Rename PLIST_UINT to PLIST_INT and add plist_new_int() and plist_get_int_val()	Nikias Bassen	1	-2/+2
	This properly supports getting and setting signed or unsigned integer values. Also, a new helper function plist_int_val_is_negative() was added to determine if a given #PLIST_INT node has a negative value or not. The old type PLIST_UINT is defined as a macro with the value of PLIST_INT for backwards compatibility. This commit also adds int vs. uint support to the C++ interface, and the python bindings in a hopefully useful way.
2023-01-13	oplist: Fix another OOB read	Nikias Bassen	1	-0/+3
	Credit to OSS-Fuzz
2023-01-11	oplist: Plug another memory leak occurring on parse error	Nikias Bassen	1	-0/+1
	Credit to OSS-Fuzz
2023-01-11	oplist: Plug some more memory leaks occuring when parsing fails	Nikias Bassen	1	-4/+5

2023-01-09	oplist: Add more bound checks to prevent OOB reads	Nikias Bassen	1	-2/+32

2023-01-09	oplist: Fix OOB read by checking bounds properly	Nikias Bassen	1	-1/+6
	Credit to OSS-Fuzz
2023-01-09	oplist: Fix use-after-free by setting free'd pointer to NULL	Nikias Bassen	1	-0/+1
	Credit to OSS-Fuzz
2023-01-09	oplist: Plug memory leaks occurring when parsing fails	Nikias Bassen	1	-0/+7

2023-01-08	Add support for OpenStep plist format	Nikias Bassen	1	-0/+861