Changes 28 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552
  1. NOTE: We are looking for help with a few things:
  2. https://github.com/libexpat/libexpat/labels/help%20wanted
  3. If you can help, please get in touch. Thanks!
  4. Release 2.2.5 Tue October 31 2017
  5. Bug fixes:
  6. #8 If the parser runs out of memory, make sure its internal
  7. state reflects the memory it actually has, not the memory
  8. it wanted to have.
  9. #11 The default handler wasn't being called when it should for
  10. a SYSTEM or PUBLIC doctype if an entity declaration handler
  11. was registered.
  12. #137 #138 Fix a case of mistakenly reported parsing success where
  13. XML_StopParser was called from an element handler
  14. #162 Function XML_ErrorString was returning NULL rather than
  15. a message for code XML_ERROR_INVALID_ARGUMENT
  16. introduced with release 2.2.1
  17. Other changes:
  18. #106 xmlwf: Add argument -N adding notation declarations
  19. #75 #106 Test suite: Resolve expected failure cases where xmlwf
  20. output was incomplete
  21. #127 Windows: Fix test suite compilation
  22. #126 #127 Windows: Fix compilation for Visual Studio 2012
  23. #33 #132 tests: Mass-fix compilation for XML_UNICODE_WCHAR_T
  24. #129 examples: Fix compilation for XML_UNICODE_WCHAR_T
  25. #130 benchmark: Fix compilation for XML_UNICODE_WCHAR_T
  26. #144 xmlwf: Fix compilation for XML_UNICODE_WCHAR_T; still needs
  27. Windows or MinGW for 2-byte wchar_t
  28. #9 Address two Clang Static Analyzer false positives
  29. #59 Resolve troublesome macros hiding parser struct membership
  30. and dereferencing that pointer
  31. #6 Resolve superfluous internal malloc/realloc switch
  32. #153 #155 Improve docbook2x-man detection
  33. #160 Undefine NDEBUG in the test suite (rather than rejecting it)
  34. #161 Address compiler warnings
  35. Version info bumped from 7:6:6 to 7:7:6
  36. Special thanks to:
  37. Benbuck Nason
  38. Hans Wennborg
  39. José Gutiérrez de la Concha
  40. Pedro Monreal Gonzalez
  41. Rhodri James
  42. Rolf Ade
  43. Stephen Groat
  44. and
  45. Core Infrastructure Initiative
  46. Release 2.2.4 Sat August 19 2017
  47. Bug fixes:
  48. #115 Fix copying of partial characters for UTF-8 input
  49. Other changes:
  50. #109 Fix "make check" for non-x86 architectures that default
  51. to unsigned type char (-128..127 rather than 0..255)
  52. #109 coverage.sh: Cover -funsigned-char
  53. Autotools: Introduce --without-xmlwf argument
  54. #65 Autotools: Replace handwritten Makefile with GNU Automake
  55. #43 CMake: Auto-detect high quality entropy extractors, add new
  56. option USE_libbsd=ON to use arc4random_buf of libbsd
  57. #74 CMake: Add -fno-strict-aliasing only where supported
  58. #114 CMake: Always honor manually set BUILD_* options
  59. #114 CMake: Compile man page if docbook2x-man is available, only
  60. #117 Include file tests/xmltest.log.expected in source tarball
  61. (required for "make run-xmltest")
  62. #117 Include (existing) Visual Studio 2013 files in source tarball
  63. Improve test suite error output
  64. #111 Fix some typos in documentation
  65. Version info bumped from 7:5:6 to 7:6:6
  66. Special thanks to:
  67. Jakub Wilk
  68. Joe Orton
  69. Lin Tian
  70. Rolf Eike Beer
  71. Release 2.2.3 Wed August 2 2017
  72. Security fixes:
  73. #82 CVE-2017-11742 -- Windows: Fix DLL hijacking vulnerability
  74. using Steve Holme's LoadLibrary wrapper for/of cURL
  75. Bug fixes:
  76. #85 Fix a dangling pointer issue related to realloc
  77. Other changes:
  78. Increase code coverage
  79. #91 Linux: Allow getrandom to fail if nonblocking pool has not
  80. yet been initialized and read /dev/urandom then, instead.
  81. This is in line with what recent Python does.
  82. #81 Pre-10.7/Lion macOS: Support entropy from arc4random
  83. #86 Check that a UTF-16 encoding in an XML declaration has the
  84. right endianness
  85. #4 #5 #7 Recover correctly when some reallocations fail
  86. Repair "./configure && make" for systems without any
  87. provider of high quality entropy
  88. and try reading /dev/urandom on those
  89. Ensure that user-defined character encodings have converter
  90. functions when they are needed
  91. Fix mis-leading description of argument -c in xmlwf.1
  92. Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
  93. for CloudABI
  94. #100 Fix use of SIPHASH_MAIN in siphash.h
  95. #23 Test suite: Fix memory leaks
  96. Version info bumped from 7:4:6 to 7:5:6
  97. Special thanks to:
  98. Chanho Park
  99. Joe Orton
  100. Pascal Cuoq
  101. Rhodri James
  102. Simon McVittie
  103. Vadim Zeitlin
  104. Viktor Szakats
  105. and
  106. Core Infrastructure Initiative
  107. Release 2.2.2 Wed July 12 2017
  108. Security fixes:
  109. #43 Protect against compilation without any source of high
  110. quality entropy enabled, e.g. with CMake build system;
  111. commit ff0207e6076e9828e536b8d9cd45c9c92069b895
  112. #60 Windows with _UNICODE:
  113. Unintended use of LoadLibraryW with a non-wide string
  114. resulted in failure to load advapi32.dll and degradation
  115. in quality of used entropy when compiled with _UNICODE for
  116. Windows; you can launch existing binaries with
  117. EXPAT_ENTROPY_DEBUG=1 in the environment to inspect the
  118. quality of entropy used during runtime; commits
  119. * 95b95032f907ef1cd17ee7a9a1768010a825d61d
  120. * 73a5a2e9c081f49f2d775cf7ced864158b68dc80
  121. [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
  122. resulted in NULL dereference, previously;
  123. commit ac256dafdffc9622ab0dc2c62fcecb0dfcfa71fe
  124. Bug fixes:
  125. #69 Fix improper use of unsigned long long integer literals
  126. Other changes:
  127. #73 Start requiring a C99 compiler
  128. #49 Fix "==" Bashism in configure script
  129. #50 Fix too eager getrandom detection for Debian GNU/kFreeBSD
  130. #52 and macOS
  131. #51 Address lack of stdint.h in Visual Studio 2003 to 2008
  132. #58 Address compile warnings
  133. #68 Fix "./buildconf.sh && ./configure" for some versions
  134. of Dash for /bin/sh
  135. #72 CMake: Ease use of Expat in context of a parent project
  136. with multiple CMakeLists.txt files
  137. #72 CMake: Resolve mistaken executable permissions
  138. #76 Address compile warning with -DNDEBUG (not recommended!)
  139. #77 Address compile warning about macro redefinition
  140. Special thanks to:
  141. Alexander Bluhm
  142. Ben Boeckel
  143. Cătălin Răceanu
  144. Kerin Millar
  145. László Böszörményi
  146. S. P. Zeidler
  147. Segev Finer
  148. Václav Slavík
  149. Victor Stinner
  150. Viktor Szakats
  151. and
  152. Radically Open Security
  153. Release 2.2.1 Sat June 17 2017
  154. Security fixes:
  155. CVE-2017-9233 -- External entity infinite loop DoS
  156. Details: https://libexpat.github.io/doc/cve-2017-9233/
  157. Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  158. [MOX-002] CVE-2016-9063 -- Detect integer overflow; commit
  159. d4f735b88d9932bd5039df2335eefdd0723dbe20
  160. (Fixed version of existing downstream patches!)
  161. (SF.net) #539 Fix regression from fix to CVE-2016-0718 cutting off
  162. longer tag names; commits
  163. * 896b6c1fd3b842f377d1b62135dccf0a579cf65d
  164. * af507cef2c93cb8d40062a0abe43a4f4e9158fb2
  165. #16 * 0dbbf43fdb20f593ddf4fa1ff67288000dd4a7fd
  166. #25 More integer overflow detection (function poolGrow); commits
  167. * 810b74e4703dcfdd8f404e3cb177d44684775143
  168. * 44178553f3539ce69d34abee77a05e879a7982ac
  169. [MOX-002] Detect overflow from len=INT_MAX call to XML_Parse; commits
  170. * 4be2cb5afcc018d996f34bbbce6374b7befad47f
  171. * 7e5b71b748491b6e459e5c9a1d090820f94544d8
  172. [MOX-005] #30 Use high quality entropy for hash initialization:
  173. * arc4random_buf on BSD, systems with libbsd
  174. (when configured with --with-libbsd), CloudABI
  175. * RtlGenRandom on Windows XP / Server 2003 and later
  176. * getrandom on Linux 3.17+
  177. In a way, that's still part of CVE-2016-5300.
  178. https://github.com/libexpat/libexpat/pull/30/commits
  179. [MOX-005] For the low quality entropy extraction fallback code,
  180. the parser instance address can no longer leak, commit
  181. 04ad658bd3079dd15cb60fc67087900f0ff4b083
  182. [MOX-003] Prevent use of uninitialised variable; commit
  183. [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
  184. Add missing parameter validation to public API functions
  185. and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  186. [MOX-006] * NULL checks; commits
  187. * d37f74b2b7149a3a95a680c4c4cd2a451a51d60a (merge/many)
  188. * 9ed727064b675b7180c98cb3d4f75efba6966681
  189. * 6a747c837c50114dfa413994e07c0ba477be4534
  190. * Negative length (XML_Parse); commit
  191. [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  192. [MOX-001] #35 Change hash algorithm to William Ahern's version of SipHash
  193. to go further with fixing CVE-2012-0876.
  194. https://github.com/libexpat/libexpat/pull/39/commits
  195. Bug fixes:
  196. #32 Fix sharing of hash salt across parsers;
  197. relevant where XML_ExternalEntityParserCreate is called
  198. prior to XML_Parse, in particular (e.g. FBReader)
  199. #28 xmlwf: Auto-disable use of memory-mapping (and parsing
  200. as a single chunk) for files larger than ~1 GB (2^30 bytes)
  201. rather than failing with error "out of memory"
  202. #3 Fix double free after malloc failure in DTD code; commit
  203. 7ae9c3d3af433cd4defe95234eae7dc8ed15637f
  204. #17 Fix memory leak on parser error for unbound XML attribute
  205. prefix with new namespaces defined in the same tag;
  206. found by Google's OSS-Fuzz; commits
  207. * 16f87daae5a16132e479e4f71862128c7a915c73
  208. * b47dbc9745932c160893d433220e462bd605f8cd
  209. xmlwf on Windows: Add missing calls to CloseHandle
  210. New features:
  211. #30 Introduced environment switch EXPAT_ENTROPY_DEBUG=1
  212. for runtime debugging of entropy extraction
  213. Other changes:
  214. Increase code coverage
  215. #33 Reject use of XML_UNICODE_WCHAR_T with sizeof(wchar_t) != 2;
  216. XML_UNICODE_WCHAR_T was never meant to be used outside
  217. of Windows; 4-byte wchar_t is common on Linux
  218. (SF.net) #538 Start using -fno-strict-aliasing
  219. (SF.net) #540 Support compilation against cloudlibc of CloudABI
  220. Allow MinGW cross-compilation
  221. (SF.net) #534 CMake: Introduce option "BUILD_doc" (enabled by default)
  222. to bypass compilation of the xmlwf.1 man page
  223. (SF.net) pr2 CMake: Introduce option "INSTALL" (enabled by default)
  224. to bypass installation of expat files
  225. CMake: Fix ninja support
  226. Autotools: Add parameters --enable-xml-context [COUNT]
  227. and --disable-xml-context; default of context of 1024
  228. bytes enabled unchanged
  229. #14 Drop AmigaOS 4.x code and includes
  230. #14 Drop ancient build systems:
  231. * Borland C++ Builder
  232. * OpenVMS
  233. * Open Watcom
  234. * Visual Studio 6.0
  235. * Pre-X Mac OS (MPW Makefile)
  236. If you happen to rely on some of these, please get in
  237. touch for joining with maintenance.
  238. #10 Move from WIN32 to _WIN32
  239. #13 Fix "make run-xmltest" order instability
  240. Address compile warnings
  241. Bump version info from 7:2:6 to 7:3:6
  242. Add AUTHORS file
  243. Infrastructure:
  244. #1 Migrate from SourceForge to GitHub (except downloads):
  245. https://github.com/libexpat/
  246. #1 Re-create http://libexpat.org/ project website
  247. Start utilizing Travis CI
  248. Special thanks to:
  249. Andy Wang
  250. Don Lewis
  251. Ed Schouten
  252. Karl Waclawek
  253. Pascal Cuoq
  254. Rhodri James
  255. Sergei Nikulov
  256. Tobias Taschner
  257. Viktor Szakats
  258. and
  259. Core Infrastructure Initiative
  260. Mozilla Foundation (MOSS Track 3: Secure Open Source)
  261. Radically Open Security
  262. Release 2.2.0 Tue June 21 2016
  263. Security fixes:
  264. #537 CVE-2016-0718 -- Fix crash on malformed input
  265. CVE-2016-4472 -- Improve insufficient fix to CVE-2015-1283 /
  266. CVE-2015-2716 introduced with Expat 2.1.1
  267. #499 CVE-2016-5300 -- Use more entropy for hash initialization
  268. than the original fix to CVE-2012-0876
  269. #519 CVE-2012-6702 -- Resolve troublesome internal call to srand
  270. that was introduced with Expat 2.1.0
  271. when addressing CVE-2012-0876 (issue #496)
  272. Bug fixes:
  273. Fix uninitialized reads of size 1
  274. (e.g. in little2_updatePosition)
  275. Fix detection of UTF-8 character boundaries
  276. Other changes:
  277. #532 Fix compilation for Visual Studio 2010 (keyword "C99")
  278. Autotools: Resolve use of "$<" to better support bmake
  279. Autotools: Add QA script "qa.sh" (and make target "qa")
  280. Autotools: Respect CXXFLAGS if given
  281. Autotools: Fix "make run-xmltest"
  282. Autotools: Have "make run-xmltest" check for expected output
  283. p90 CMake: Fix static build (BUILD_shared=OFF) on Windows
  284. #536 CMake: Add soversion, support -DNO_SONAME=yes to bypass
  285. #323 CMake: Add suffix "d" to differentiate debug from release
  286. CMake: Define WIN32 with CMake on Windows
  287. Annotate memory allocators for GCC
  288. Address all currently known compile warnings
  289. Make sure that API symbols remain visible despite
  290. -fvisibility=hidden
  291. Remove executable flag from source files
  292. Resolve COMPILED_FROM_DSP in favor of WIN32
  293. Special thanks to:
  294. Björn Lindahl
  295. Christian Heimes
  296. Cristian Rodríguez
  297. Daniel Krügler
  298. Gustavo Grieco
  299. Karl Waclawek
  300. László Böszörményi
  301. Marco Grassi
  302. Pascal Cuoq
  303. Sergei Nikulov
  304. Thomas Beutlich
  305. Warren Young
  306. Yann Droneaud
  307. Release 2.1.1 Sat March 12 2016
  308. Security fixes:
  309. #582: CVE-2015-1283 - Multiple integer overflows in XML_GetBuffer
  310. Bug fixes:
  311. #502: Fix potential null pointer dereference
  312. #520: Symbol XML_SetHashSalt was not exported
  313. Output of "xmlwf -h" was incomplete
  314. Other changes:
  315. #503: Document behavior of calling XML_SetHashSalt with salt 0
  316. Minor improvements to man page xmlwf(1)
  317. Improvements to the experimental CMake build system
  318. libtool now invoked with --verbose
  319. Release 2.1.0 Sat March 24 2012
  320. - Security fixes:
  321. #2958794: CVE-2012-1148 - Memory leak in poolGrow.
  322. #2895533: CVE-2012-1147 - Resource leak in readfilemap.c.
  323. #3496608: CVE-2012-0876 - Hash DOS attack.
  324. #2894085: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
  325. #1990430: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
  326. - Bug Fixes:
  327. #1742315: Harmful XML_ParserCreateNS suggestion.
  328. #1785430: Expat build fails on linux-amd64 with gcc version>=4.1 -O3.
  329. #1983953, 2517952, 2517962, 2649838:
  330. Build modifications using autoreconf instead of buildconf.sh.
  331. #2815947, #2884086: OBJEXT and EXEEXT support while building.
  332. #2517938: xmlwf should return non-zero exit status if not well-formed.
  333. #2517946: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
  334. #2855609: Dangling positionPtr after error.
  335. #2990652: CMake support.
  336. #3010819: UNEXPECTED_STATE with a trailing "%" in entity value.
  337. #3206497: Uninitialized memory returned from XML_Parse.
  338. #3287849: make check fails on mingw-w64.
  339. - Patches:
  340. #1749198: pkg-config support.
  341. #3010222: Fix for bug #3010819.
  342. #3312568: CMake support.
  343. #3446384: Report byte offsets for attr names and values.
  344. - New Features / API changes:
  345. Added new API member XML_SetHashSalt() that allows setting an initial
  346. value (salt) for hash calculations. This is part of the fix for
  347. bug #3496608 to randomize hash parameters.
  348. When compiled with XML_ATTR_INFO defined, adds new API member
  349. XML_GetAttributeInfo() that allows retrieving the byte
  350. offsets for attribute names and values (patch #3446384).
  351. Added CMake build system.
  352. See bug #2990652 and patch #3312568.
  353. Added run-benchmark target to Makefile.in - relies on testdata module
  354. present in the same relative location as in the repository.
  355. Release 2.0.1 Tue June 5 2007
  356. - Fixed bugs #1515266, #1515600: The character data handler's calling
  357. of XML_StopParser() was not handled properly; if the parser was
  358. stopped and the handler set to NULL, the parser would segfault.
  359. - Fixed bug #1690883: Expat failed on EBCDIC systems as it assumed
  360. some character constants to be ASCII encoded.
  361. - Minor cleanups of the test harness.
  362. - Fixed xmlwf bug #1513566: "out of memory" error on file size zero.
  363. - Fixed outline.c bug #1543233: missing a final XML_ParserFree() call.
  364. - Fixes and improvements for Windows platform:
  365. bugs #1409451, #1476160, #1548182, #1602769, #1717322.
  366. - Build fixes for various platforms:
  367. HP-UX, Tru64, Solaris 9: patch #1437840, bug #1196180.
  368. All Unix: #1554618 (refreshed config.sub/config.guess).
  369. #1490371, #1613457: support both, DESTDIR and INSTALL_ROOT,
  370. without relying on GNU-Make specific features.
  371. #1647805: Patched configure.in to work better with Intel compiler.
  372. - Fixes to Makefile.in to have make check work correctly:
  373. bugs #1408143, #1535603, #1536684.
  374. - Added Open Watcom support: patch #1523242.
  375. Release 2.0.0 Wed Jan 11 2006
  376. - We no longer use the "check" library for C unit testing; we
  377. always use the (partial) internal implementation of the API.
  378. - Report XML_NS setting via XML_GetFeatureList().
  379. - Fixed headers for use from C++.
  380. - XML_GetCurrentLineNumber() and XML_GetCurrentColumnNumber()
  381. now return unsigned integers.
  382. - Added XML_LARGE_SIZE switch to enable 64-bit integers for
  383. byte indexes and line/column numbers.
  384. - Updated to use libtool 1.5.22 (the most recent).
  385. - Added support for AmigaOS.
  386. - Some mostly minor bug fixes. SF issues include: #1006708,
  387. #1021776, #1023646, #1114960, #1156398, #1221160, #1271642.
  388. Release 1.95.8 Fri Jul 23 2004
  389. - Major new feature: suspend/resume. Handlers can now request
  390. that a parse be suspended for later resumption or aborted
  391. altogether. See "Temporarily Stopping Parsing" in the
  392. documentation for more details.
  393. - Some mostly minor bug fixes, but compilation should no
  394. longer generate warnings on most platforms. SF issues
  395. include: #827319, #840173, #846309, #888329, #896188, #923913,
  396. #928113, #961698, #985192.
  397. Release 1.95.7 Mon Oct 20 2003
  398. - Fixed enum XML_Status issue (reported on SourceForge many
  399. times), so compilers that are properly picky will be happy.
  400. - Introduced an XMLCALL macro to control the calling
  401. convention used by the Expat API; this macro should be used
  402. to annotate prototypes and definitions of callback
  403. implementations in code compiled with a calling convention
  404. other than the default convention for the host platform.
  405. - Improved ability to build without the configure-generated
  406. expat_config.h header. This is useful for applications
  407. which embed Expat rather than linking in the library.
  408. - Fixed a variety of bugs: see SF issues #458907, #609603,
  409. #676844, #679754, #692878, #692964, #695401, #699323, #699487,
  410. #820946.
  411. - Improved hash table lookups.
  412. - Added more regression tests and improved documentation.
  413. Release 1.95.6 Tue Jan 28 2003
  414. - Added XML_FreeContentModel().
  415. - Added XML_MemMalloc(), XML_MemRealloc(), XML_MemFree().
  416. - Fixed a variety of bugs: see SF issues #615606, #616863,
  417. #618199, #653180, #673791.
  418. - Enhanced the regression test suite.
  419. - Man page improvements: includes SF issue #632146.
  420. Release 1.95.5 Fri Sep 6 2002
  421. - Added XML_UseForeignDTD() for improved SAX2 support.
  422. - Added XML_GetFeatureList().
  423. - Defined XML_Bool type and the values XML_TRUE and XML_FALSE.
  424. - Use an incomplete struct instead of a void* for the parser
  425. (may not retain).
  426. - Fixed UTF-8 decoding bug that caused legal UTF-8 to be rejected.
  427. - Finally fixed bug where default handler would report DTD
  428. events that were already handled by another handler.
  429. Initial patch contributed by Darryl Miles.
  430. - Removed unnecessary DllMain() function that caused static
  431. linking into a DLL to be difficult.
  432. - Added VC++ projects for building static libraries.
  433. - Reduced line-length for all source code and headers to be
  434. no longer than 80 characters, to help with AS/400 support.
  435. - Reduced memory copying during parsing (SF patch #600964).
  436. - Fixed a variety of bugs: see SF issues #580793, #434664,
  437. #483514, #580503, #581069, #584041, #584183, #584832, #585537,
  438. #596555, #596678, #598352, #598944, #599715, #600479, #600971.
  439. Release 1.95.4 Fri Jul 12 2002
  440. - Added support for VMS, contributed by Craig Berry. See
  441. vms/README.vms for more information.
  442. - Added Mac OS (classic) support, with a makefile for MPW,
  443. contributed by Thomas Wegner and Daryle Walker.
  444. - Added Borland C++ Builder 5 / BCC 5.5 support, contributed
  445. by Patrick McConnell (SF patch #538032).
  446. - Fixed a variety of bugs: see SF issues #441449, #563184,
  447. #564342, #566334, #566901, #569461, #570263, #575168, #579196.
  448. - Made skippedEntityHandler conform to SAX2 (see source comment)
  449. - Re-implemented WFC: Entity Declared from XML 1.0 spec and
  450. added a new error "entity declared in parameter entity":
  451. see SF bug report #569461 and SF patch #578161
  452. - Re-implemented section 5.1 from XML 1.0 spec:
  453. see SF bug report #570263 and SF patch #578161
  454. Release 1.95.3 Mon Jun 3 2002
  455. - Added a project to the MSVC workspace to create a wchar_t
  456. version of the library; the DLLs are named libexpatw.dll.
  457. - Changed the name of the Windows DLLs from expat.dll to
  458. libexpat.dll; this fixes SF bug #432456.
  459. - Added the XML_ParserReset() API function.
  460. - Fixed XML_SetReturnNSTriplet() to work for element names.
  461. - Made the XML_UNICODE builds usable (thanks, Karl!).
  462. - Allow xmlwf to read from standard input.
  463. - Install a man page for xmlwf on Unix systems.
  464. - Fixed many bugs; see SF bug reports #231864, #461380, #464837,
  465. #466885, #469226, #477667, #484419, #487840, #494749, #496505,
  466. #547350. Other bugs which we can't test as easily may also
  467. have been fixed, especially in the area of build support.
  468. Release 1.95.2 Fri Jul 27 2001
  469. - More changes to make MSVC happy with the build; add a single
  470. workspace to support both the library and xmlwf application.
  471. - Added a Windows installer for Windows users; includes
  472. xmlwf.exe.
  473. - Added compile-time constants that can be used to determine the
  474. Expat version
  475. - Removed a lot of GNU-specific dependencies to aide portability
  476. among the various Unix flavors.
  477. - Fix the UTF-8 BOM bug.
  478. - Cleaned up warning messages for several compilers.
  479. - Added the -Wall, -Wstrict-prototypes options for GCC.
  480. Release 1.95.1 Sun Oct 22 15:11:36 EDT 2000
  481. - Changes to get expat to build under Microsoft compiler
  482. - Removed all aborts and instead return an UNEXPECTED_STATE error.
  483. - Fixed a bug where a stray '%' in an entity value would cause an
  484. abort.
  485. - Defined XML_SetEndNamespaceDeclHandler. Thanks to Darryl Miles for
  486. finding this oversight.
  487. - Changed default patterns in lib/Makefile.in to fit non-GNU makes
  488. Thanks to [email protected] for reporting and providing an
  489. account to test on.
  490. - The reference had the wrong label for XML_SetStartNamespaceDecl.
  491. Reported by an anonymous user.
  492. Release 1.95.0 Fri Sep 29 2000
  493. - XML_ParserCreate_MM
  494. Allows you to set a memory management suite to replace the
  495. standard malloc,realloc, and free.
  496. - XML_SetReturnNSTriplet
  497. If you turn this feature on when namespace processing is in
  498. effect, then qualified, prefixed element and attribute names
  499. are returned as "uri|name|prefix" where '|' is whatever
  500. separator character is used in namespace processing.
  501. - Merged in features from perl-expat
  502. o XML_SetElementDeclHandler
  503. o XML_SetAttlistDeclHandler
  504. o XML_SetXmlDeclHandler
  505. o XML_SetEntityDeclHandler
  506. o StartDoctypeDeclHandler takes 3 additional parameters:
  507. sysid, pubid, has_internal_subset
  508. o Many paired handler setters (like XML_SetElementHandler)
  509. now have corresponding individual handler setters
  510. o XML_GetInputContext for getting the input context of
  511. the current parse position.
  512. - Added reference material
  513. - Packaged into a distribution that builds a sharable library