Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2015-01-29 | Move pkg-config file into src directory | Martin Szulecki | 3 | -0/+25 | |
2015-01-23 | xplist: Plug memory leak by cleaning up libxml2's parser after use | Martin Szulecki | 1 | -0/+16 | |
This is actually considered bad practice. However, it appears this memory leak is otherwise not possible to fix due to a design flaw in how libxml2 handles the lifecycle of it's XML parser. We'll let the community test this in production now and decide. In our tests this change had no drawbacks except fixing the last known memory leak in libplist. | |||||
2015-01-23 | Update and correct some copyright header comments | Martin Szulecki | 2 | -2/+6 | |
2015-01-23 | xplist: Fix limited but possible XXE security vulnerability with XML plists | Martin Szulecki | 1 | -4/+16 | |
By using a specifically crafted XML file an attacker could use plistutil to issue a GET request to an arbitrary URL or disclose a local file. The crafted XML file would be using a custom DTD with an external entity reference pointing to the file. Practical abuse is limited but let's still fix it nevertheless. Related to CVE-2013-0339 for libxml2 and CWE-827. Reported by Loïc Bénis from calypt.com. Thanks! | |||||
2015-01-11 | Pass flag '-avoid-version' to libtool for libplist++ in addition to libplist ↵ | Aaron Burghardt | 1 | -0/+1 | |
for WIN32. | |||||
2014-10-09 | bplist: Fix plist_from_bin() changing value nodes to key nodes in dictionaries | Martin Szulecki | 1 | -11/+33 | |
The parsing logic for binary dictionaries wrongly enforced the key type even on nodes that were already parsed as value nodes. This caused the resulting plist_t node tree to have key nodes instead of value nodes within dictionaries for some valid binary plists. This commit should also generally fixes parsing of binary plist files which use an efficient dictionary reference table. | |||||
2014-10-03 | Drop src/common.h and use byte order macros from config.h directly | Nikias Bassen | 3 | -33/+15 | |
2014-10-03 | Avoid exporting non-public symbols | Nikias Bassen | 9 | -82/+82 | |
2014-09-23 | bplist: Prevent crash in plist_from_bin() when parsing unusually structured ↵ | Nikias Bassen | 1 | -1/+1 | |
binary plist | |||||
2014-09-20 | C++: Make sure String::GetValue() and Key::GetValue() don't crash with NULL ↵ | Nikias Bassen | 2 | -4/+14 | |
strings | |||||
2014-09-20 | Added const to Array.GetSize(), and to 3 Node methods. | Aaron Burghardt | 2 | -5/+5 | |
2014-09-20 | Change Clone() to be const, which required constructors with const ↵ | Aaron Burghardt | 11 | -32/+37 | |
references and a const GetValue(). | |||||
2014-08-25 | Fixed memory leaks in new_xml_plist() and parse_real_node(). | Aaron Burghardt | 2 | -3/+1 | |
2014-08-06 | bplist: Silence compiler warning about 'always true' comparison due to type ↵ | Nikias Bassen | 1 | -2/+6 | |
mismatch | |||||
2014-05-27 | xplist: Fix keys not being output correctly if converted to XML entities | Martin Szulecki | 1 | -5/+11 | |
2014-05-23 | Handle signed vs. unsigned integer values correctly | Nikias Bassen | 2 | -5/+53 | |
2014-05-22 | xplist: Handle DST-affected timezones correctly | Nikias Bassen | 1 | -1/+1 | |
2014-05-22 | xplist: Fix PLIST_DATE handling to respect the Mac epoch | Nikias Bassen | 1 | -2/+4 | |
2014-05-21 | xplist: Fix PLIST_DATE parsing in xml_to_node() | Nikias Bassen | 1 | -1/+1 | |
2014-05-20 | Removed plist_set_type() as it should not be used. | Nikias Bassen | 1 | -30/+0 | |
2014-05-20 | Rename "index" variable as it shadows global declaration on older systems | Martin Szulecki | 3 | -7/+7 | |
2014-05-18 | xplist: Silence compiler warnings about shadowing global declarations | Nikias Bassen | 1 | -8/+8 | |
2014-05-18 | bplist: Fix memory leaking caused by unused nodes in plist_from_bin() | Nikias Bassen | 1 | -0/+9 | |
2014-04-02 | Simplify plist_dict_merge() after plist_dict_set_item() API change | Nikias Bassen | 1 | -3/+0 | |
2014-04-01 | xplist: Fix timezone-bound date/time conversion | Nikias Bassen | 1 | -1/+4 | |
2014-03-29 | Fix endian detection in configure.ac | Chow Loong Jin | 1 | -0/+4 | |
On debian-mips, neither __LITTLE_ENDIAN__ nor __BIG_ENDIAN__ are defined anywhere, so PLIST_BYTE_ORDER defaults to PLIST_LITTLE_ENDIAN when it should really be PLIST_BIG_ENDIAN on this architecture. This fixes issue #13. | |||||
2014-03-28 | build-sys: Fix parallel build | Christophe Fergeau | 1 | -1/+1 | |
On my machine, parallel builds fail with: make[2]: Entering directory `/home/teuf/hack/libplist/src' CCLD libplist.la make[2]: *** No rule to make target `../src/libplist.la', needed by `libplist++.la'. Stop. If $(top_builddir)/src/libplist.la does not exist yet when trying to link libplist++.la, automake/make will not realize the $(top_builddir)/src/libplist.la dependency is the same as the libplist.la target, and will thus be unable to generate $(top_builddir)/src/libplist.la. Using the libplist.la instead fixes this issue. I've checked that srcdir!=builddir and make distcheck still pass after this change. | |||||
2014-03-19 | deprecated plist_dict_insert_item in favor of plist_dict_set_item | Nikias Bassen | 2 | -8/+8 | |
2014-03-19 | plist_dict_set_item: insert key/value pair if key not already present | Nikias Bassen | 1 | -10/+11 | |
2014-02-13 | Replace some LDADD references to use $(top_builddir) for distcheck | Martin Szulecki | 1 | -1/+1 | |
2014-02-13 | fix make distcheck | Nikias Bassen | 1 | -3/+3 | |
2014-02-06 | bplist: prevent segmentation fault in plist_from_bin() | Nikias Bassen | 1 | -0/+3 | |
2013-12-13 | bplist: make plist_utf8_to_utf16 static since it is only used internally | Nikias Bassen | 1 | -1/+1 | |
2013-12-13 | xplist: fix another compiler warning with cast | Nikias Bassen | 1 | -1/+1 | |
2013-12-13 | bytearray: silence compiler warning about pointer arithmetic with cast | Nikias Bassen | 1 | -1/+1 | |
2013-12-13 | base64: silence compiler warning by using correct type | Nikias Bassen | 1 | -1/+2 | |
2013-12-13 | xplist: silence compiler warning | Nikias Bassen | 1 | -1/+1 | |
2013-12-13 | xplist: fix shadowed variable declaration | Nikias Bassen | 1 | -3/+3 | |
2013-12-13 | change build system to autotools | Nikias Bassen | 2 | -59/+47 | |
2013-12-13 | add new plist_dict_merge() function | Nikias Bassen | 1 | -0/+27 | |
2013-11-12 | base64: get rid of strtok_r and use strspn+strcspn instead | Nikias Bassen | 1 | -13/+14 | |
strtok_r is not available on win32 and the designated strtok_s function is reported to not work on windows xp. Hence we use an easier an non-destructive implementation with strspn and strcspn to strip out the whitespace. | |||||
2013-11-12 | base64: fix compilation with win32 | Nikias Bassen | 1 | -0/+4 | |
this is a temporary fix, we'll replace strtok_r with a custom implementation soon. | |||||
2013-10-29 | fixed mavericks compile problem, return iterator of _map.end() instead of ↵ | Jim Koning | 1 | -1/+1 | |
iterator of NULL | |||||
2013-10-17 | UTF-16 surrogate pair fix | shane | 1 | -4/+37 | |
Handle UTF-16 surrogate pair conversion to/from UTF-8 | |||||
2013-10-09 | base64: use strtok_r instead of strtok to make sure we're thread safe | Nikias Bassen | 1 | -2/+3 | |
2013-05-30 | bplist: use __FLOAT_WORD_ORDER__ instead of __VFP_FP__ for floating point ↵ | Nikias Bassen | 1 | -1/+4 | |
endianness detection | |||||
2013-03-19 | C++: added support for PLIST_UID nodes (class Uid) | Nikias Bassen | 3 | -0/+81 | |
2013-03-07 | xml plists: make sure we don't produce <data/> if it's empty | Nikias Bassen | 1 | -0/+9 | |
2012-11-13 | C++ bindings: added support for PLIST_KEY nodes. | Nikias Bassen | 3 | -1/+84 | |
2012-11-08 | Fix crash when converting plists containing comments | Nikias Bassen | 1 | -0/+4 | |
Thanks to free2000fly for pointing this out. The issue was that XML plists with comments converted to binary plists would result in invalid binary nodes, thus converting back these binary plists resulted in a crash. |