1Release 2.1.0 Sat March 24 2012 2 - Bug Fixes: 3 #1742315: Harmful XML_ParserCreateNS suggestion. 4 #2895533: CVE-2012-1147 - Resource leak in readfilemap.c. 5 #1785430: Expat build fails on linux-amd64 with gcc version>=4.1 -O3. 6 #1983953, 2517952, 2517962, 2649838: 7 Build modifications using autoreconf instead of buildconf.sh. 8 #2815947, #2884086: OBJEXT and EXEEXT support while building. 9 #1990430: CVE-2009-3720 - Parser crash with special UTF-8 sequences. 10 #2517938: xmlwf should return non-zero exit status if not well-formed. 11 #2517946: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml. 12 #2855609: Dangling positionPtr after error. 13 #2894085: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8(). 14 #2958794: CVE-2012-1148 - Memory leak in poolGrow. 15 #2990652: CMake support. 16 #3010819: UNEXPECTED_STATE with a trailing "%" in entity value. 17 #3206497: Unitialized memory returned from XML_Parse. 18 #3287849: make check fails on mingw-w64. 19 #3496608: CVE-2012-0876 - Hash DOS attack. 20 - Patches: 21 #1749198: pkg-config support. 22 #3010222: Fix for bug #3010819. 23 #3312568: CMake support. 24 #3446384: Report byte offsets for attr names and values. 25 - New Features / API changes: 26 Added new API member XML_SetHashSalt() that allows setting an intial 27 value (salt) for hash calculations. This is part of the fix for 28 bug #3496608 to randomize hash parameters. 29 When compiled with XML_ATTR_INFO defined, adds new API member 30 XML_GetAttributeInfo() that allows retrieving the byte 31 offsets for attribute names and values (patch #3446384). 32 Added CMake build system. 33 See bug #2990652 and patch #3312568. 34 Added run-benchmark target to Makefile.in - relies on testdata module 35 present in the same relative location as in the repository. 36 37Release 2.0.1 Tue June 5 2007 38 - Fixed bugs #1515266, #1515600: The character data handler's calling 39 of XML_StopParser() was not handled properly; if the parser was 40 stopped and the handler set to NULL, the parser would segfault. 41 - Fixed bug #1690883: Expat failed on EBCDIC systems as it assumed 42 some character constants to be ASCII encoded. 43 - Minor cleanups of the test harness. 44 - Fixed xmlwf bug #1513566: "out of memory" error on file size zero. 45 - Fixed outline.c bug #1543233: missing a final XML_ParserFree() call. 46 - Fixes and improvements for Windows platform: 47 bugs #1409451, #1476160, #1548182, #1602769, #1717322. 48 - Build fixes for various platforms: 49 HP-UX, Tru64, Solaris 9: patch #1437840, bug #1196180. 50 All Unix: #1554618 (refreshed config.sub/config.guess). 51 #1490371, #1613457: support both, DESTDIR and INSTALL_ROOT, 52 without relying on GNU-Make specific features. 53 #1647805: Patched configure.in to work better with Intel compiler. 54 - Fixes to Makefile.in to have make check work correctly: 55 bugs #1408143, #1535603, #1536684. 56 - Added Open Watcom support: patch #1523242. 57 58Release 2.0.0 Wed Jan 11 2006 59 - We no longer use the "check" library for C unit testing; we 60 always use the (partial) internal implementation of the API. 61 - Report XML_NS setting via XML_GetFeatureList(). 62 - Fixed headers for use from C++. 63 - XML_GetCurrentLineNumber() and XML_GetCurrentColumnNumber() 64 now return unsigned integers. 65 - Added XML_LARGE_SIZE switch to enable 64-bit integers for 66 byte indexes and line/column numbers. 67 - Updated to use libtool 1.5.22 (the most recent). 68 - Added support for AmigaOS. 69 - Some mostly minor bug fixes. SF issues include: #1006708, 70 #1021776, #1023646, #1114960, #1156398, #1221160, #1271642. 71 72Release 1.95.8 Fri Jul 23 2004 73 - Major new feature: suspend/resume. Handlers can now request 74 that a parse be suspended for later resumption or aborted 75 altogether. See "Temporarily Stopping Parsing" in the 76 documentation for more details. 77 - Some mostly minor bug fixes, but compilation should no 78 longer generate warnings on most platforms. SF issues 79 include: #827319, #840173, #846309, #888329, #896188, #923913, 80 #928113, #961698, #985192. 81 82Release 1.95.7 Mon Oct 20 2003 83 - Fixed enum XML_Status issue (reported on SourceForge many 84 times), so compilers that are properly picky will be happy. 85 - Introduced an XMLCALL macro to control the calling 86 convention used by the Expat API; this macro should be used 87 to annotate prototypes and definitions of callback 88 implementations in code compiled with a calling convention 89 other than the default convention for the host platform. 90 - Improved ability to build without the configure-generated 91 expat_config.h header. This is useful for applications 92 which embed Expat rather than linking in the library. 93 - Fixed a variety of bugs: see SF issues #458907, #609603, 94 #676844, #679754, #692878, #692964, #695401, #699323, #699487, 95 #820946. 96 - Improved hash table lookups. 97 - Added more regression tests and improved documentation. 98 99Release 1.95.6 Tue Jan 28 2003 100 - Added XML_FreeContentModel(). 101 - Added XML_MemMalloc(), XML_MemRealloc(), XML_MemFree(). 102 - Fixed a variety of bugs: see SF issues #615606, #616863, 103 #618199, #653180, #673791. 104 - Enhanced the regression test suite. 105 - Man page improvements: includes SF issue #632146. 106 107Release 1.95.5 Fri Sep 6 2002 108 - Added XML_UseForeignDTD() for improved SAX2 support. 109 - Added XML_GetFeatureList(). 110 - Defined XML_Bool type and the values XML_TRUE and XML_FALSE. 111 - Use an incomplete struct instead of a void* for the parser 112 (may not retain). 113 - Fixed UTF-8 decoding bug that caused legal UTF-8 to be rejected. 114 - Finally fixed bug where default handler would report DTD 115 events that were already handled by another handler. 116 Initial patch contributed by Darryl Miles. 117 - Removed unnecessary DllMain() function that caused static 118 linking into a DLL to be difficult. 119 - Added VC++ projects for building static libraries. 120 - Reduced line-length for all source code and headers to be 121 no longer than 80 characters, to help with AS/400 support. 122 - Reduced memory copying during parsing (SF patch #600964). 123 - Fixed a variety of bugs: see SF issues #580793, #434664, 124 #483514, #580503, #581069, #584041, #584183, #584832, #585537, 125 #596555, #596678, #598352, #598944, #599715, #600479, #600971. 126 127Release 1.95.4 Fri Jul 12 2002 128 - Added support for VMS, contributed by Craig Berry. See 129 vms/README.vms for more information. 130 - Added Mac OS (classic) support, with a makefile for MPW, 131 contributed by Thomas Wegner and Daryle Walker. 132 - Added Borland C++ Builder 5 / BCC 5.5 support, contributed 133 by Patrick McConnell (SF patch #538032). 134 - Fixed a variety of bugs: see SF issues #441449, #563184, 135 #564342, #566334, #566901, #569461, #570263, #575168, #579196. 136 - Made skippedEntityHandler conform to SAX2 (see source comment) 137 - Re-implemented WFC: Entity Declared from XML 1.0 spec and 138 added a new error "entity declared in parameter entity": 139 see SF bug report #569461 and SF patch #578161 140 - Re-implemented section 5.1 from XML 1.0 spec: 141 see SF bug report #570263 and SF patch #578161 142 143Release 1.95.3 Mon Jun 3 2002 144 - Added a project to the MSVC workspace to create a wchar_t 145 version of the library; the DLLs are named libexpatw.dll. 146 - Changed the name of the Windows DLLs from expat.dll to 147 libexpat.dll; this fixes SF bug #432456. 148 - Added the XML_ParserReset() API function. 149 - Fixed XML_SetReturnNSTriplet() to work for element names. 150 - Made the XML_UNICODE builds usable (thanks, Karl!). 151 - Allow xmlwf to read from standard input. 152 - Install a man page for xmlwf on Unix systems. 153 - Fixed many bugs; see SF bug reports #231864, #461380, #464837, 154 #466885, #469226, #477667, #484419, #487840, #494749, #496505, 155 #547350. Other bugs which we can't test as easily may also 156 have been fixed, especially in the area of build support. 157 158Release 1.95.2 Fri Jul 27 2001 159 - More changes to make MSVC happy with the build; add a single 160 workspace to support both the library and xmlwf application. 161 - Added a Windows installer for Windows users; includes 162 xmlwf.exe. 163 - Added compile-time constants that can be used to determine the 164 Expat version 165 - Removed a lot of GNU-specific dependencies to aide portability 166 among the various Unix flavors. 167 - Fix the UTF-8 BOM bug. 168 - Cleaned up warning messages for several compilers. 169 - Added the -Wall, -Wstrict-prototypes options for GCC. 170 171Release 1.95.1 Sun Oct 22 15:11:36 EDT 2000 172 - Changes to get expat to build under Microsoft compiler 173 - Removed all aborts and instead return an UNEXPECTED_STATE error. 174 - Fixed a bug where a stray '%' in an entity value would cause an 175 abort. 176 - Defined XML_SetEndNamespaceDeclHandler. Thanks to Darryl Miles for 177 finding this oversight. 178 - Changed default patterns in lib/Makefile.in to fit non-GNU makes 179 Thanks to robin@unrated.net for reporting and providing an 180 account to test on. 181 - The reference had the wrong label for XML_SetStartNamespaceDecl. 182 Reported by an anonymous user. 183 184Release 1.95.0 Fri Sep 29 2000 185 - XML_ParserCreate_MM 186 Allows you to set a memory management suite to replace the 187 standard malloc,realloc, and free. 188 - XML_SetReturnNSTriplet 189 If you turn this feature on when namespace processing is in 190 effect, then qualified, prefixed element and attribute names 191 are returned as "uri|name|prefix" where '|' is whatever 192 separator character is used in namespace processing. 193 - Merged in features from perl-expat 194 o XML_SetElementDeclHandler 195 o XML_SetAttlistDeclHandler 196 o XML_SetXmlDeclHandler 197 o XML_SetEntityDeclHandler 198 o StartDoctypeDeclHandler takes 3 additional parameters: 199 sysid, pubid, has_internal_subset 200 o Many paired handler setters (like XML_SetElementHandler) 201 now have corresponding individual handler setters 202 o XML_GetInputContext for getting the input context of 203 the current parse position. 204 - Added reference material 205 - Packaged into a distribution that builds a sharable library 206