1
0
mirror of https://gitlab.gnome.org/GNOME/libxslt synced 2025-07-29 15:41:13 +03:00

2244 Commits

Author SHA1 Message Date
923903c59d doap: remove inactive maintainer
Daniel hasn't responded to pings in a long time. This project is up for
grabs.
2025-06-18 08:10:15 -05:00
c8b1ea4b89 Remove myself from maintainers 2025-03-12 19:47:21 +01:00
0a546da509 Bump version 2025-03-12 19:46:32 +01:00
71be7a3263 Release v1.1.43 v1.1.43 2025-03-12 18:38:02 +01:00
ac3b7e09c0 Convert NEWS from ISO-8859-1 to UTF-8 2025-03-12 18:21:48 +01:00
c7c7f1f78d [CVE-2025-24855] Fix use-after-free of XPath context node
There are several places where the XPath context node isn't restored
after modifying it, leading to use-after-free errors with nested XPath
evaluations and dynamically allocated context nodes.

Restore XPath context node in

- xsltNumberFormatGetValue
- xsltEvalXPathPredicate
- xsltEvalXPathStringNs
- xsltComputeSortResultInternal

In some places, the transformation context node was saved and restored
which shouldn't be necessary.

Thanks to Ivan Fratric for the report!

Fixes #128.
2025-03-12 18:15:01 +01:00
46041b65f2 [CVE-2024-55549] Fix UAF related to excluded namespaces
Definitions of excluded namespaces could be deleted in
xsltParseTemplateContent. Store excluded namespace URIs in the
stylesheet's dictionary instead of referencing the namespace definition.

Thanks to Ivan Fratric for the report!

Fixes #127.
2025-03-12 18:14:05 +01:00
1ca27c0d5b python: Don't use removed libxml2 macro 2025-03-09 19:37:24 +01:00
09012e97f5 tests: Skip test_bad.xsl with libxml2 before 2.13 2025-03-09 19:08:24 +01:00
572b24a9c5 python: Don't include nanoftp.h and nanohttp.h
Unneeded and deprecated.
2025-03-09 15:32:18 +01:00
3f00a30f87 extensions: always include stdlib.h 2025-02-27 16:39:41 +01:00
abbb4fda2b tests: Avoid namespace warning on Windows
s:def is treated as a DOS path after recent changes to libxml2.

Fixes #135.
2025-02-27 11:36:46 +01:00
04a38be152 gitlab-ci: Also test modules which are disabled by default 2024-12-29 14:59:19 +01:00
09b41917dd build: Disable debug output and debugger by default
Debug output can cause a notable performance hit even if ignored.

The debugger is probably unused these days.
2024-12-28 15:47:03 +01:00
c7d159b0f7 numbers: Make static variables const 2024-12-21 22:58:58 +01:00
c6e225976c variables: Remove debug code 2024-12-21 22:58:58 +01:00
9e2828aa09 gitlab-ci: Stop including old release script 2024-12-21 22:58:58 +01:00
a60a623a3c exslt: Increase XPath depth in dyn:evaluate
Try to account for extra call stack usage.
2024-12-21 22:58:44 +01:00
9aeca0fcf6 numbers: Stop using libxml2 XPath axis API
These internals were never meant for public consumption and will be
deprecated in libxml2. Handling traversal directly is also a lot easier
except for XPath namespace nodes.
2024-12-19 19:24:25 +01:00
ae147fefb4 gitlab-ci: Add "dist" job to build distribution tarball
Prepare for GNOME Release Service.
2024-12-09 23:02:56 +01:00
941b10fa8a Bump version to 1.1.43 2024-12-09 23:02:51 +01:00
d70dbb900f cmake: Always build Python module as shared library 2024-12-07 15:34:20 +01:00
579e32c88d python: Declare init func with PyMODINIT_FUNC 2024-12-07 15:34:11 +01:00
7504032097 cmake: Fix compatibility in package version file
See https://github.com/microsoft/vcpkg/issues/42315
2024-11-28 21:30:06 +01:00
2ee18b3517 numbers: Use private copy of xmlCopyCharMultiByte
Allows to deprecate the function in libxml2.
2024-11-18 16:58:30 +01:00
329ac5e119 documents: Use xmlCtxtParseDocument if available 2024-11-17 20:46:40 +01:00
bf59c33812 tests: Make runtest compile with older libxml2 versions
This partly reverts commit ce3ad4f93c.

Fixes #125.
2024-11-12 13:36:48 +01:00
5df99903ae python: fix typos
Typos were found with codespell.
2024-10-14 10:20:33 +02:00
35cf78b275 variables: Evaluate globals in source order 2024-09-20 00:25:00 +02:00
c45ed81aeb variables: Fix non-deterministic generated IDs
Evaluate global variables in deterministic order. Otherwise, generated
IDs could be non-deterministic if generate-id() is called.

Fixes #123.
2024-09-19 22:34:29 +02:00
cb1e47d98b exslt: Use C99 NAN macro 2024-09-19 22:34:29 +02:00
06baf50dbc build: Disable EXSLT crypto module by default
The crypto module is a non-standard extension that is likely unused
these days.
2024-09-19 22:34:29 +02:00
220cde60f4 configure.ac: Find libgcrypt via pkg-config
The debian package has dropped the libgcrypt-config script.
Add pkg-config as a fallback mechanism to detect libgcrypt.

The CMake build system already did not use libgcrypt-config.
2024-08-19 14:45:59 +02:00
ab10c15fc7 utils: Account for libxml2 change 2024-07-30 17:57:44 +02:00
f5ee8c954d build: Disable plugins by default
The only plugins are unmaintained for 19 years:

    http://xmlsoft.org/download/plugins/
2024-07-23 02:54:29 +02:00
b2a390bfa9 tests: Make bug-219.xsl compatible with older libxml2
Set encoding explictly.
2024-07-23 02:54:29 +02:00
ff7cf97d80 extensions: Don't use libxml2's "modules" feature
Call POSIX/Windows API directly.
2024-07-23 02:08:32 +02:00
464fd14587 tests: Adjust for libxml2 change 2024-07-23 00:30:10 +02:00
165219e5a3 Release 1.1.42 v1.1.42 2024-07-04 17:49:25 +02:00
5fc5a6b715 functions: Fix unitialized variable warning
Seems like a false positive.
2024-07-04 17:49:25 +02:00
e1117e771c doc: Update documentation 2024-07-04 17:38:15 +02:00
fb08340ec5 cmake: Add LIBXSLT_WITH_PROGRAMS option
Conditionally compile the `xsltproc` executable based on the value of `LIBXSLT_WITH_PROGRAMS`. Option is enabled by default.
2024-07-03 00:08:13 +00:00
8d456f03b6 utils: Don't use deprecated xmlCharEncodingHandler member 2024-07-02 22:27:02 +02:00
081cd6e97a transform: Handle filesystem paths after libxml2 changes
After changes in libxml2 2.13, base URIs and resolved URIs can be
filesystem paths.

Check for invalid URIs and remove fragment before resolving URI in
xsltDocumentFunction.

Handle filesystem paths in xsltCheckRead.

Should fix #116.
2024-07-01 13:21:14 +02:00
3f5ab3a728 cmake: Fix HAVE_GCRYPT check
Should fix #114.
2024-06-22 23:51:46 +02:00
cd923ff30c locale: Work around issue with FreeBSD's strxfrm_l
newlocale seems to require LC_CTYPE_MASK as well. Better switch to
LC_ALL_MASK to avoid similar problems.

Fixes #108.
2024-06-21 22:58:39 +02:00
a85bd17ec5 extensions: Readd call to xmlCheckFilename with older libxml2
Fix spurious warning with libxml2 before 2.13.0 caused by 014b2892.

Fixes #113.
2024-06-21 15:15:52 +02:00
f156f9b983 Release v1.1.41 v1.1.41 2024-06-19 12:34:45 +02:00
aa766fe491 libxslt: Set _FILE_OFFSET_BITS to 64 2024-06-16 16:09:51 +02:00
33ac060d01 xsltproc: Remove unneeded includes 2024-06-16 16:09:51 +02:00