summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2017-10-19Check for integer overflow in xsltAddTextStringtizen_4.0.IoT.p2_releasesubmit/tizen_4.0_base/20171019.015308accepted/tizen/4.0/base/20171103.060838MyoungJune Park2-5/+24
CVE-2017-1000249 author Nick Wellnhofer <wellnhofer@aevum.de> 2017-01-12 14:39:52 (GMT) committer Nick Wellnhofer <wellnhofer@aevum.de> 2017-02-03 11:24:22 (GMT) Limit buffer size in xsltAddTextString to INT_MAX. The issue can be exploited to trigger an out of bounds write on 64-bit systems. Originally reported to Chromium: https://crbug.com/676623 Change-Id: Ibc82e53973e8b2e4ee964c042f42b324295b49a5
2016-06-29Bump to libxslt 1.1.29tizen_4.0.m2_releasetizen_4.0.m1_releasetizen_4.0.IoT.p1_releasesubmit/tizen_base/20160629.052737submit/tizen_4.0_base/20170828.000001submit/tizen_4.0_base/20170828.000000submit/tizen_4.0_base/20170811.071500submit/tizen_3.0_base/20161028.062323submit/tizen_3.0.m2_base/20170104.073748accepted/tizen/base/20160701.180250accepted/tizen/4.0/base/20170828.221230accepted/tizen/4.0/base/20170811.092919accepted/tizen/3.0/base/20161028.102947accepted/tizen/3.0.m2/base/20170104.081837tizen_3.0.m2_basetizen_3.0accepted/tizen_3.0_baseaccepted/tizen_3.0.m2_baseDongHun Kwak8-27/+16
[Model] ALL [BinType] AP [Customer] OPEN [Issue#] N/A [Request] N/A [Occurrence Version] N/A [Problem] Bump to libxslt 1.1.29 [Cause & Measure] Bump to libxslt 1.1.29 [Checking Method] N/A [Team] Open Source Management and Setting Part [Developer] dh0128.kwak [Solution company] Samsung [Change Type] N/A Change-Id: I31d6da7ed4f3da325b071957aa537419cfe3eca6 Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
2016-06-28Merge "Rebase for libxslt-1.1.29" into tizen_baseMyoungJune Park235-29767/+68991
2016-06-22Rebase for libxslt-1.1.29Anas Nashif10-4/+126
Change-Id: I93c4e25d6fe05766a14630ccb146dcc7a63b6ea6 Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
2016-06-22Imported Upstream version 1.1.29upstream/1.1.29DongHun Kwak235-29767/+68991
Change-Id: I7d894ba27f8f8e886dbcece3bb3df8e69059cae9 Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
2014-12-15Bump to version 1.1.28tizen_3.0_ivi_releasetizen_3.0.m2.a1_tv_releasetizen_3.0.m2.a1_mobile_releasetizen_3.0.m1_tv_releasetizen_3.0.m1_mobile_releasesubmit/tizen_ivi/20141225.222222submit/tizen_common/20151019.135620submit/tizen_common/20151015.190624submit/tizen_base/20151223.111112submit/tizen/20141215.231533accepted/tizen/wearable/20141221.093053accepted/tizen/tv/20141221.093032accepted/tizen/mobile/20141221.093111accepted/tizen/ivi/20141225.103506accepted/tizen/common/20141219.104057accepted/tizen/base/20151223.052203tizen_3.0_ivitizen_3.0.m1_tvtizen_3.0.m1_mobiletizen_3.0.2015.q2_commontizen_3.0.2015.q1_commontizen_3.0.2014.q4_commonaccepted/tizen_wearableaccepted/tizen_tvaccepted/tizen_mobileaccepted/tizen_iviaccepted/tizen_3.0_iviKévin THIERRY2-10/+10
Use upstream git repository instead of pristine-tar. Bug-Tizen: TC-1848 Change-Id: Id504c9220dd6d41417ffebc1ebffed32910ce472 Signed-off-by: Kévin THIERRY <kevin.thierry@open.eurogiciel.org>
2014-11-12resetting manifest requested domain to floorAlexandru Cornea2-0/+10
2014-11-12Set license using %licenseAnas Nashif2-5/+8
2014-11-12Fixed baselibs to not require numbered sub-packageAnas Nashif2-6/+4
2014-11-12add packagingAnas Nashif3-45/+0
2014-11-12no networkAnas Nashif1-1/+1
2014-11-12config fixesAnas Nashif2-2/+2
2014-11-12add packagingAnas Nashif2-0/+104
2014-11-12linkflagsAnas Nashif1-1/+1
2014-11-12add packagingAnas Nashif4-0/+52
2012-11-21Release of libxslt 1.1.28v1.1.28Daniel Veillard11-51/+8
* configure.in: updated * doc/libxslt-api.xml doc/libxslt-refs.xml libxslt/libxslt.syms libxslt/xsltwin32config.h win32/libxslt.def.src doc/*.html: regenerated
2012-11-21Remove xsltTransStorageAdd and xsltTransStorageRemove from symbols.xmlDaniel Veillard1-2/+2
Addition to the removal from the header 31312989ab25faf81f9aa9e41d17e0f8f4fe21e7
2012-11-21Fix python build by using libxsltmod_la_CPPFLAGS instead of AM_CPPFLAGSAlexandre Rostovtsev1-6/+5
Commit a2cd8a03 broke the --with-python build by moving includes from INCLUDES to AM_CPPFLAGS. AM_CPPFLAGS gets ignored when a target-specific *_CPPFLAGS variable exists, but at least some automake versions automatically add "libxsltmod_la_CPPFLAGS = -shared" to python/Makefile.in https://bugzilla.gnome.org/show_bug.cgi?id=684637
2012-11-21configure should be more careful with linker scriptIgor Pashev1-4/+7
For https://bugzilla.gnome.org/show_bug.cgi?id=685626 it would assume the system linker for extracting the linker script options, even if GNU ld is in use. Which breaks on Solaris.
2012-11-21autogen.sh cleanupDaniel Richard1-8/+4
This patch fixes minor issues in the autogen.sh script: * Don't print "I am going to run ..." if NOCONFIGURE is set * Print said message with $srcdir path * Print said message once, not twice * Print "Running ..." message once, not twice, and use quoting
2012-11-21consistent use of xslt processorRoumen Petrov1-27/+25
Currently doc/Makefile.am use just build xslt processor, binary detected from configure or just directly call command xsltproc. This patch unify use to binary detected from configure script.
2012-11-21add gcrypt library in LIBADD, not LDFLAGS, as recommendedRoumen Petrov1-2/+2
2012-11-21Fix generate-id() to avoid generating the same IDStewart Brodie1-1/+2
For nodes from different documents, especially for the document node itself which would always get "idp0" as a result. Fixes https://bugzilla.gnome.org/show_bug.cgi?id=688171
2012-11-21Revert "Cleanup libxslt test run outside of srcdir"Daniel Veillard4-57/+48
This reverts commit c159f4e6f19ffb32d89e4b3e094fd27a2f82b9ac. As make check was exhibiting various added failures as a result.
2012-10-25Cleanup libxslt test run outside of srcdirPetr Sumbera4-48/+57
When I configure/build libxslt outside of sources and then run libxslt tests there are some false positives related to using absolute path instead of relative.
2012-10-22Add object files in tests/plugins to .gitignoreNick Wellnhofer1-0/+2
2012-10-21Fix crash with empty xsl:key/@match attributeNick Wellnhofer1-5/+11
See https://bugzilla.gnome.org/show_bug.cgi?id=685328 Also improve some xsl:key error messages.
2012-10-10Crash when passing an uninitialized variable to document()Nick Wellnhofer7-2/+19
https://bugzilla.gnome.org/show_bug.cgi?id=685330 Missing check for NULL
2012-10-10Add missing test docs to EXTRA_DISTNick Wellnhofer1-0/+9
2012-10-09Fix regression: Default namespace not correctly usedNick Wellnhofer6-6/+44
https://bugzilla.gnome.org/show_bug.cgi?id=684564
2012-09-19Fix error on bug-165 regression testDaniel Veillard1-1/+1
Missing error file from the distribution due to a typo
2012-09-12Remove xsltTransStorageAdd and xsltTransStorageRemoveDaniel Veillard1-8/+0
From the header as they were never implemented
2012-09-12Release of libxslt-1.1.27Daniel Veillard46-257/+682
* configure.in doc/symbols.xml doc/xslt.html: updated for the release * NEWS config.h.in doc/* */*.syms : regenerated
2012-09-12Big space and tabs cleanupDaniel Veillard50-1172/+1172
Remove spaces followed by tabs, and space and tabs at the end of lines
2012-09-12Fix authors listDaniel Veillard1-1/+1
2012-09-12Add the saxon:systemId extensionMike Hommey1-0/+29
For https://bugzilla.gnome.org/show_bug.cgi?id=519926 Both Xalan and Saxon have a systemId function (in their respective namespaces) to provide the URI of the file that is being transformed. It would be nice to have that function in libxslt1.1 as well, because then DocBook could use it[0]. [0] See line 250 et seq in /usr/share/xml/docbook/stylesheet/nwalsh/common/stripns.xsl
2012-09-08Add an append mode to document outputDaniel Veillard1-3/+33
It adds the append functionality to <redirect:write> element equivalent of ESXLT:document which opens the local file in append mode and remove the XML Declaration, allowing to potentially stack multiple chunks
2012-09-07Cleanups some of the test makefilesDaniel Richard16-67/+67
* Added missing $(srcdir)/ qualification to some "[ -s ... ]" stderr-output reference file checks * When printing log output for failed tests, quote the log variable, so that diff output is formatted the way it should be (with newlines!) and is not all collapsed into one line * Updated tests/REC/test-7.1.1-3.out with current output to get rid of a spurious test failure
2012-09-07Report errors on variable use in keyDaniel Veillard4-2/+34
For https://bugzilla.gnome.org/show_bug.cgi?id=680938 Variables are forbidden for match or use values of keys * libxslt/xsltutils.c libxslt/xsltutils.h: allows to add flags to XPath expression compilation * libxslt/keys.c: add the XML_XPATH_NOVAR if defined (recent libxml2) * libxslt/pattern.c: add a missing xpath.h include to make sure the defintiion is found there too
2012-09-07The XSLT namespace string is a constant oneDaniel Veillard1-1/+1
Raised by Phil Shafer <phil@juniper.net>
2012-09-06Fix handling of names in xsl:attributeNick Wellnhofer3-44/+14
A prefix of 'xmlns' is actually allowed. It should simply be ignored if a namespace is given. Without a namespace the lookup by prefix will fail anyway. What the spec doesn't allow is an attribute name of 'xmlns' which will now be rejected.
2012-09-06Reserved namespaces in xsl:element and xsl:attributeNick Wellnhofer6-22/+55
For https://bugzilla.gnome.org/show_bug.cgi?id=587360 Correct handling of 'xml' and 'xmlns' namespaces in xsl:element and xsl:attribute.
2012-09-06Add new tests to EXTRA_DISTNick Wellnhofer1-0/+3
2012-09-06Test for bug #680920Nick Wellnhofer4-0/+22
Add test cases for the EXSLT func bug
2012-09-06Null-terminate result string of cry:rc4_decryptNick Wellnhofer1-1/+2
For https://bugzilla.gnome.org/show_bug.cgi?id=675917 The string wasn't 0 terminated
2012-09-05fix regresson in Various "make distcheck" and other fixesRoumen Petrov1-1/+1
The patch 'Various "make distcheck" and other fixes' removes a line in configure EXTRA_LIBS=... LIBXML_LIBS... -EXTRA_LIBS="$EXTRA_LIBS $LIBXML_LIBS $M_LIBS" This is not save as libxslt/Makefile.am define only |EXTRA_LIBS| as dependency: |libxslt_la_LIBADD= $(EXTRA_LIBS)| If platform does not support unresolved dependencies library cannot be linked. Even with support regression tests fail in python test due unresolved "xml"-symbols .
2012-09-04EXSLT date normalization fixJames Muscat3-1/+26
https://bugzilla.gnome.org/show_bug.cgi?id=626855 Dates with timezones but no time components are not normalized correctly Using xsltproc v1.1.26: $ xsltproc --version Using libxml 20706, libxslt 10126 and libexslt 815 xsltproc was compiled against libxml 20704, libxslt 10126 and libexslt 815 libxslt 10126 was compiled against libxml 20704 libexslt 815 was compiled against libxml 20704 Dates that have timezone offsets specified but no time components, for example "1970-01-01+01:00", are not normalized correctly; the timezone part is truncated: date:seconds("1970-01-01") = 0 date:seconds("1970-01-01+01:00") = 0 (not -3600 as expected) Alters the conditions under which exsltDateNormalize() returns without normalizing, and adds test cases demonstrating the new behaviour.
2012-09-04Exit after compilation of invalid func:resultNick Wellnhofer5-0/+25
Second part of bug #680920.
2012-09-04Fix for EXSLT func:functionNick Wellnhofer1-2/+2
For https://bugzilla.gnome.org/show_bug.cgi?id=680920 If the first child of a func:function template is xslt:text, it will be removed by xsltParseTemplateContent. So xsltParseTemplateContent should be called before setting func->content to the first child.
2012-09-04Rewrite EXSLT string:replace to be conformantNick Wellnhofer4-96/+255
For https://bugzilla.gnome.org/show_bug.cgi?id=569703 The libexslt implementation of str:replace fails to conform to its specification on several counts: a) the current version returns a string; it's supposed to return a nodeset. b) the current version treats the replacements as strings; it's supposed to treat them as nodes. c) the current version can modify replacement text; it's supposed to only modify text from the original string. d) the current version ignores the requirement to perform substitutions in descending order of search string length. Steps to reproduce: a) the returning of a string rather than a nodeset can be seen by simply inspecting the code. b) the code explicity converts replacement nodes to strings; this can be seen by inspection. d) the failure to perform substitutions in descending order of search string length can be seen in the lack of any sorting in the source code. c) the problem of modifying text not belonging to the original string can be seen in the following stylesheet, which can be simply applied to itself to produce output. <xsl:stylesheet version="1.0" extension-element-prefixes="str exsl" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:exsl="http://exslt.org/common" xmlns:str="http://exslt.org/strings" > <xsl:variable name="Text"> Price is $1.10 </xsl:variable> <xsl:template match="/"> <xsl:apply-templates select="exsl:node-set($Text)/text()"/> </xsl:template> <xsl:template match="text()"> <xsl:variable name="Replace"> <FromXml> <from>$</from> <from>\</from> </FromXml> <ToTex> <to>\$</to> <to>$\backslash$</to> </ToTex> </xsl:variable> <xsl:value-of select="str:replace(.,exsl:node-set($Replace)/FromXml/from,exsl:node-set($Replace)/ToTex/to)"/> </xsl:template> </xsl:stylesheet> Actual results: The output is: <?xml version="1.0"?> Price is $\backslash$$1.10 Expected results: The output should be: <?xml version="1.0"?> Price is \$1.10 Does this happen every time? yes. Other information: str:replace specification is at: http://www.exslt.org/str/functions/replace/str.replace.html