Branch :
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
| afd27c21 | 2015-11-09 18:07:18 | Avoid processing entities after encoding conversion failures For https://bugzilla.gnome.org/show_bug.cgi?id=756527 and was also raised by Chromium team in the past When we hit a convwersion failure when switching encoding it is bestter to stop parsing there, this was treated as a fatal error but the parser was continuing to process to extract more errors, unfortunately that makes little sense as the data is obviously corrupt and can potentially lead to unexpected behaviour. | ||
| ab2b9a93 | 2015-11-03 20:40:49 | Avoid extra processing of MarkupDecl when EOF For https://bugzilla.gnome.org/show_bug.cgi?id=756263 One place where ctxt->instate == XML_PARSER_EOF whic was set up by entity detection issues doesn't get noticed, and even overrided | ||
| 18b89885 | 2015-11-03 15:46:29 | Reenable xz support by default For https://bugzilla.gnome.org/show_bug.cgi?id=757466 problem was introduced by commit f3f86ff465c92c79f834d7b981f3c7274a8bb5c8 for https://bugzilla.gnome.org/show_bug.cgi?id=711026 | ||
| f0709e3c | 2015-11-03 15:31:25 | CVE-2015-8035 Fix XZ compression support loop For https://bugzilla.gnome.org/show_bug.cgi?id=757466 DoS when parsing specially crafted XML document if XZ support is compiled in (which wasn't the case for 2.9.2 and master since Nov 2013, fixed in next commit !) | ||
| e724879d | 2015-10-30 21:14:55 | Fix parsing short unclosed comment uninitialized access For https://bugzilla.gnome.org/show_bug.cgi?id=746048 The HTML parser was too optimistic when processing comments and didn't check for the end of the stream on the first 2 characters | ||
| 41ac9049 | 2015-10-27 10:53:44 | Fix an error in previous Conditional section patch an off by one mistake in the change, led to error on correct document where the end of the included entity was exactly the end of the conditional section, leading to regtest failure | ||
| 73c50805 | 2015-10-26 18:33:14 | Correct spelling of "calling" | ||
| b40c1940 | 2015-10-23 19:35:02 | Fix a small error in xmllint --format description Obviously it operates on the output not the input | ||
| bd0526e6 | 2015-10-23 19:02:28 | Another variation of overflow in Conditional sections Which happen after the previous fix to https://bugzilla.gnome.org/show_bug.cgi?id=756456 But stopping the parser and exiting we didn't pop the intermediary entities and doing the SKIP there applies on an input which may be too small | ||
| cf77e605 | 2015-09-30 14:46:29 | Add missing Null check in xmlParseExternalEntityPrivate For https://bugzilla.gnome.org/show_bug.cgi?id=755857 a case where we check for NULL but not everywhere |