libplist - Library to handle Apple Property List format files in binary or XML

Age	Commit message (Collapse)	Author	Files	Lines
2017-01-02	xplist: Make sure to not parse for entities in empty strings	Nikias Bassen	1	-1/+1

2017-01-02	xplist: Allow empty keys in dictionaries	Nikias Bassen	1	-2/+2

2017-01-02	xplist: Allow whitespace after name in closing tag	Nikias Bassen	1	-2/+7
	'</key >' is a perfectly valid closing tag and so is '</key >' (note the newline). This commit will make the parser skip any encountered whitespace before checking for the closing '>'.
2017-01-01	xplist: Fix numerical character entity conversion	Nikias Bassen	1	-2/+6

2016-12-27	Remove unused AC_SUBST for WINDRES	Nikias Bassen	1	-1/+0

2016-12-27	Remove check for pthread on macOS to suppress clang compiler warning	Nikias Bassen	1	-10/+8

2016-12-21	xplist: Fix UaF in code checking for closing tag	Nikias Bassen	1	-2/+2

2016-12-21	xplist: Make sure to correctly parse for closing tags of structured nodes	Nikias Bassen	1	-7/+45

2016-12-21	xplist: Make sure to stop parsing on entity errors	Nikias Bassen	1	-7/+11

2016-12-14	xplist: Remove usage of strlen() wherever possible	Nikias Bassen	1	-45/+66

2016-12-14	xplist: Improve text content parsing, reducing memory usage and unneeded copying	Nikias Bassen	1	-113/+318

2016-12-14	Properly check for the availability of strptime() and make sure to use it	Nikias Bassen	2	-2/+6

2016-12-14	base64: Prevent use of strlen() in base64decode when input buffer size is known	Nikias Bassen	1	-7/+8

2016-11-28	xplist: Fix parsing of adjacent nodes without whitespace between them	Nikias Bassen	1	-2/+1
	The context position counter was increased after encountering a closing node, e.g. '</dict>' or after a closing '</key>' node. When a node followed it directly without any whitespace inbetween, e.g. </dict><key>, parsing would fail since the parser would look at 'key>' instead of '<key>' for the next node to be parsed.
2016-11-27	plist_copy: Duplicate hash tables when copying PLIST_DICT nodes	Nikias Bassen	1	-5/+15

2016-11-18	Updated README	Nikias Bassen	1	-2/+8

2016-11-18	test: Fix test plist having duplicate keys in dictionary	Nikias Bassen	1	-1/+1

2016-11-18	bplist: Remove misleading/redundant `else` from BPLIST_DATE case in ↵	Nikias Bassen	1	-4/+3
	parse_bin_node
2016-11-18	Improve plist_dict_set_item performance for large dictionaries with hash table	Nikias Bassen	5	-18/+119

2016-11-13	xplist: Don't parse XML reserved characters in CDATA blocks	Nikias Bassen	1	-0/+1

2016-11-13	bplist: Fix surrogate parsing range to include U+100000 - U+1FFFFF	Nikias Bassen	1	-2/+2

2016-11-13	xplist: Support converting numerical character entities	Nikias Bassen	1	-3/+51

2016-11-13	xplist: Don't escape " and ' characters in node_to_xml	Nikias Bassen	1	-10/+0

2016-11-13	xplist: Properly parse CDATA blocks in get_text_content()	Nikias Bassen	1	-7/+23

2016-11-10	libcnary: Fix possible NULL pointer dereference in node_iterator_create()	Nikias Bassen	1	-1/+1
	When NULL is passed to node_iterator_create() the code tries to access the begin element of the node list and causes a NULL pointer dereference. The value of list is checked a few lines down and iterator->value is then properly assigned in node_iterator_bind().
2016-11-10	Add new PLIST_IS_* helper macros for the different plist node types	Nikias Bassen	1	-0/+14
	Instead of e.g.: if (plist_get_node_type(plist) == PLIST_STRING) you can now write: if (PLIST_IS_STRING(plist))
2016-11-10	Remove libxml2 private requirement from pkg-config control file	Nikias Bassen	1	-1/+0

2016-11-10	Remove libxml2 requirement from README	Nikias Bassen	1	-4/+1

2016-11-10	bplist: Make sure to error out if allocation of `used_indexes` buffer in ↵	Filippo Bigarella	1	-0/+6
	plist_from_bin() fails If the allocation fails, a lot of bad things can happen so we check the result and return accordingly. We also check that the multiplication used to calculate the buffer size doesn't overflow. Otherwise this could lead to an allocation of a very small buffer compared to what we need, ultimately leading to arbitrary writes later on.
2016-11-10	bplist: Prevent out-of-bounds read in plist_from_bin() when parsing offset_table	Filippo Bigarella	1	-1/+9
	offset_table_index is read from the file, so we have full control over it. This means we can point offset_table essentially anywhere we want, which can lead to an out-of-bounds read when it will be used later on.
2016-11-10	bplist: Make sure the index in parse_bin_node_at_index() is actually within ↵	Filippo Bigarella	1	-4/+13
	the offset table
2016-11-10	bplist: Fix possible out-of-bounds reads in parse_bin_node() with proper ↵	Filippo Bigarella	1	-0/+21
	bounds checking
2016-11-10	bplist: Fix possible out-of-bounds read in parse_dict_node() with proper ↵	Filippo Bigarella	1	-2/+13
	bounds checking
2016-10-31	xplist: Prevent UaF when parsing structured nodes failstime64	Filippo Bigarella	1	-0/+5
	In case parsing inside `node_from_xml` called from line 842 fails, `data` gets freed by the call to `plist_free` at line 899, since `subnode` is actually created by making it point to `data` at line 684. This commit prevents this situation by bailing out whenever parsing in a deeper level of structured nodes fails.
2016-10-31	xplist: Prevent heap buffer overflow when parsing empty tags	Filippo Bigarella	1	-1/+3
	If `ctx->pos - p - 1` is greater than `taglen`, we end up writing outside the buffer pointed to by `tag`. This commit fixes it by checking the bounds of the heap buffer before writing.
2016-10-31	xplist: Prevent NULL pointer dereference when parsing <real> nodes	Filippo Bigarella	1	-0/+8

2016-10-31	base64: Prevent buffer overflow by not decoding blocks with less than 4 chars	Filippo Bigarella	1	-1/+1

2016-10-24	Add pthread detection to configure.ac to get cflags and libs right	Nikias Bassen	3	-2/+495

2016-10-22	Remove libxml2 dependency in favor of custom XML parsing	Nikias Bassen	10	-407/+798

2016-09-19	test: Add additional test case to check extended date range	Nikias Bassen	3	-0/+20

2016-09-19	Use time64 implementation by Michael G Schwern to extend allowed date/time range	Nikias Bassen	6	-12/+1061
	The main benefit of this is to allow date/time values outside of the 32bit time_t range which is very important on 32bit platforms. But there are also some other issues that will be fixed with this, for example on macOS, mktime() will not work for dates < 1902 despite time_t being 64bit. In the same run this commit will also use a reentrant version of gmtime64_r that should help in multithreaded scenarios. Original code taken from: https://github.com/evalEmpire/y2038
2016-09-19	Change internal storage of PLIST_DATE values from struct timeval to double	Nikias Bassen	4	-36/+16
	This removes the timeval union member from the plist_data_t structure. Since struct timeval is 2x64bit on 64bit platforms this member unnecessarily grew the union size to 16 bytes while a size of 8 bytes is sufficient. Also, on 32bit platforms struct timeval is only 2x32bit of size, limiting the range of possible time values. In addition the binary property list format also stores PLIST_DATE nodes as double.
2016-09-08	Make sure plist_cleanup() symbol is actually public	Martin Szulecki	1	-1/+1

2016-06-29	xplist: Plug memory leak when converting PLIST_UID nodes to XML	Nikias Bassen	3	-1/+3
	In node_to_xml nodes of type PLIST_UID are temporarily converted to a PLIST_DICT for an appropriate XML output. Therefore a PLIST_KEY and a PLIST_UINT node is created and inserted into the PLIST_DICT node. Upon completion, the child nodes of the PLIST_DICT node are detached from the original node and freed, however the data of the child nodes - the key string and the uint value - are not. This commit fixes it.
2016-06-29	test: Add another test case for signed/unsigned (multiple) integers	Nikias Bassen	4	-0/+35
	Apart from testing the actual integer signed vs. unsigned value storage and conversion, this test will check that the binary plist optimization is not re-using existing values. Basically it will test the fix that was introduced with commit acd226d1f71a78dd23b47a9a5c4ca8cf8068d509.
2016-06-29	plist_data_compare: Make sure to compare the node sizes for integer nodes	Nikias Bassen	1	-0/+2
	Without this check, e.g. the values -1 and 18446744073709551615 would yield in a match, since the comparison will just compare the uint64_t values. However, any value >= 9223372036854775808 and <= 18446744073709551615 is stored as a 128 bit value in binary plist format to make sure it is recognized as an unsigned value. We store it internally as a uint64_t value, but we set the size to 16 vs. 8 accordingly; so this commit will make sure the binary plist optimization will not re-use matching uint64_t values of actually mismatching signed/unsigned values.
2016-05-12	Implement plist_from_memory()	Christophe Fergeau	2	-0/+26
	Rather than having everyone reimplement binary/XML plist detection by looking at the first bytes of the plist content, it's better to do this detection in libplist and hide that internal detail from library users.
2016-05-12	Add plist_is_binary()	Christophe Fergeau	2	-0/+22
	It can be useful if one needs to know what type of plist a memory buffer contains.
2016-05-12	Allow to run autogen.sh outside $top_srcdir	Christophe Fergeau	1	-11/+18
	This makes it more convenient to do builds out of the source dir.
2016-05-12	bplist: Speed up plist_to_bin conversion for large plists	Nikias Bassen	3	-9/+12
	Using a better hashing algorithm and a larger hash table the conversion is A LOT faster when processing large plists. Thanks to Xiao Deng for reporting this issue and suggesting a fix.