libplist - Library to handle Apple Property List format files in binary or XML

Age	Commit message (Collapse)	Author	Files	Lines
10 hours	Harden allocation failure handling and size arithmetic	Nikias Bassen	1	-1/+3
	- check malloc/calloc/realloc results in constructors, the JSON and OpenStep writers, the XML text-part helpers and base64 decoding, and return PLIST_ERR_NO_MEM instead of asserting or dereferencing NULL - guard size calculations against overflow in the UTF-8/UTF-16BE conversions, ptrarray, and bytearray - make hash_table_insert() report failure instead of silently dropping the entry; writers propagate PLIST_ERR_NO_MEM, and dict lookup caches are discarded so lookups fall back to a linear search - don't overwrite an earlier parse error code in the XML parser, and report PLIST_ERR_NO_MEM when reading text content fails for lack of memory - OpenStep parser: check node/data/string allocations and dict/array insertion results Based on #323 by bg0d-droid. Co-authored-by: bg0d-droid <81825610+bg0d-droid@users.noreply.github.com>
2026-09-29	bytearray: Handle realloc() failure in byte_array_grow()	Comtea04	1	-0/+7
	byte_array_grow() assigned the result of realloc() directly to ba->data and increased the capacity even if realloc() failed, so the following memcpy() in byte_array_append() wrote to NULL + len. On failure, free the old buffer and leave the byte array in a failed state (data == NULL), which byte_array_append() already ignores. The callers check for that state: - the writers (bin, xml, json, openstep and the text output formats) return PLIST_ERR_NO_MEM instead of handing out a NULL/truncated buffer - node_to_xml() base64-encodes <data> directly into the grown buffer, so it must bail out there (only guarded by assert() before) - the OpenStep parser returns PLIST_ERR_NO_MEM for <hex data> instead of silently returning truncated data Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-05-22	Print debug error message when encoutering invalid PLIST_DATE values	Nikias Bassen	1	-0/+3

2026-05-22	common: validate PLIST_DATE values before Time64_T conversion	Nikias Bassen	1	-1/+4
	Avoid undefined behavior when serializing malformed PLIST_DATE values containing NaN, infinity, or values outside the Time64_T range. Add a shared helper for checked date conversion and use it across writer paths.
2026-05-22	refactor: centralize formatting helpers and harden out-plutil	Nikias Bassen	1	-78/+1

2026-05-22	out-default: harden node serialization paths	Nikias Bassen	1	-23/+63
	Improve robustness and memory safety in node_to_string() and dtostr(): - add missing NULL and allocation checks - fix snprintf() error handling and signed/unsigned conversions - replace sprintf() with snprintf() - fix base64 buffer sizing - switch string offset tracking to size_t - improve malformed data handling for strings and data blobs
2026-01-17	Prevent deep nesting of plist structures in all input/output formats	Nikias Bassen	1	-0/+7
	Thanks to @unbengable12 for reporting. Addresses #288, #289, #290, #291, and #292.
2026-01-14	Add circular reference detection to all format writers	Nikias Bassen	1	-3/+24
	Thanks to @LkkkLxy for pointing out the issue.
2023-05-21	Add explicit casts and fix return type mismatches	Nikias Bassen	1	-10/+10

2023-05-13	Add space before PRI* macros, some compilers do not like it	Nikias Bassen	1	-4/+4

2023-04-16	Add new output-only formats and Define constants for the different plist formats	Nikias Bassen	1	-0/+491
	This commit introduces constants for the different plist formats, and adds 3 new human-readable output-only formats: - PLIST_FORMAT_PRINT: the default human-readable format - PLIST_FORMAT_LIMD: "libimobiledevice" format (used in ideviceinfo) - PLIST_FORMAT_PLUTIL: plutil-style format Also, a new set of write functions has been added: - plist_write_to_string - plist_write_to_stream - plist_write_to_file Plus a simple "dump" function: - plist_print See documentation for details.