- 28 Jan, 2015 4 commits
-
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
- 23 Jan, 2015 6 commits
-
-
Martin Szulecki authored
This is actually considered bad practice. However, it appears this memory leak is otherwise not possible to fix due to a design flaw in how libxml2 handles the lifecycle of it's XML parser. We'll let the community test this in production now and decide. In our tests this change had no drawbacks except fixing the last known memory leak in libplist.
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
By using a specifically crafted XML file an attacker could use plistutil to issue a GET request to an arbitrary URL or disclose a local file. The crafted XML file would be using a custom DTD with an external entity reference pointing to the file. Practical abuse is limited but let's still fix it nevertheless. Related to CVE-2013-0339 for libxml2 and CWE-827. Reported by Loïc Bénis from calypt.com. Thanks!
-
Martin Szulecki authored
-
- 11 Jan, 2015 1 commit
-
-
Aaron Burghardt authored
-
- 22 Oct, 2014 1 commit
-
-
Martin Szulecki authored
If AC_PROG_CXX is used after AC_PROG_CC, it will return "g++" even if no C++ compiler is installed. However, as we need one, testing compiling a program will make configure fail if indeed no C++ compiler is installed.
-
- 14 Oct, 2014 6 commits
-
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
- 09 Oct, 2014 1 commit
-
-
Martin Szulecki authored
The parsing logic for binary dictionaries wrongly enforced the key type even on nodes that were already parsed as value nodes. This caused the resulting plist_t node tree to have key nodes instead of value nodes within dictionaries for some valid binary plists. This commit should also generally fixes parsing of binary plist files which use an efficient dictionary reference table.
-
- 03 Oct, 2014 3 commits
-
-
Nikias Bassen authored
-
Nikias Bassen authored
-
Nikias Bassen authored
-
- 26 Sep, 2014 1 commit
-
-
Nikias Bassen authored
-
- 25 Sep, 2014 1 commit
-
-
Nikias Bassen authored
-
- 23 Sep, 2014 1 commit
-
-
Nikias Bassen authored
-
- 19 Sep, 2014 3 commits
-
-
Nikias Bassen authored
-
Aaron Burghardt authored
-
Aaron Burghardt authored
Change Clone() to be const, which required constructors with const references and a const GetValue().
-
- 25 Aug, 2014 1 commit
-
-
Aaron Burghardt authored
-
- 05 Aug, 2014 2 commits
-
-
Nikias Bassen authored
-
Nikias Bassen authored
-
- 30 Jul, 2014 5 commits
-
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-
- 13 Jun, 2014 1 commit
-
-
Martin Szulecki authored
-
- 27 May, 2014 3 commits
-
-
Martin Szulecki authored
-
Martin Szulecki authored
-
Martin Szulecki authored
-