[Midnightbsd-cvs] [MidnightBSD/src] 7d1a04: Import expat 2.8.3 (trimmed)

Tue Aug 11 18:27:11 EDT 2026

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 7d1a04d2380d2eb6b434dcb212918b9294b352f7
      https://github.com/MidnightBSD/src/commit/7d1a04d2380d2eb6b434dcb212918b9294b352f7
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M Changes
    M Makefile.am
    M Makefile.in
    M README.md
    M configure.ac
    M doc/reference.html
    M doc/xmlwf.1
    M doc/xmlwf.xml
    M examples/element_declarations.c
    M examples/elements.c
    M examples/outline.c
    M lib/ascii.h
    M lib/asciitab.h
    M lib/expat.h
    M lib/expat_external.h
    M lib/fallthrough.h
    M lib/iasciitab.h
    M lib/internal.h
    M lib/latin1tab.h
    M lib/memory_sanitizer.h
    M lib/nametab.h
    M lib/random_arc4random.c
    M lib/random_arc4random.h
    M lib/random_arc4random_buf.c
    M lib/random_arc4random_buf.h
    M lib/random_dev_urandom.c
    M lib/random_dev_urandom.h
    M lib/random_getentropy.c
    M lib/random_getentropy.h
    M lib/random_getrandom.c
    M lib/random_getrandom.h
    M lib/random_rand_s.c
    M lib/random_rand_s.h
    M lib/siphash.h
    M lib/utf8tab.h
    M lib/winconfig.h
    M lib/xcsinc.c
    M lib/xmlparse.c
    M lib/xmlrole.c
    M lib/xmlrole.h
    M lib/xmltok.c
    M lib/xmltok.h
    M lib/xmltok_impl.c
    M lib/xmltok_impl.h
    M lib/xmltok_ns.c
    M tests/acc_tests.c
    M tests/acc_tests.h
    M tests/alloc_tests.c
    M tests/alloc_tests.h
    M tests/basic_tests.c
    M tests/basic_tests.h
    M tests/chardata.c
    M tests/chardata.h
    M tests/common.c
    M tests/common.h
    M tests/dummy.c
    M tests/dummy.h
    M tests/handlers.c
    M tests/handlers.h
    M tests/memcheck.c
    M tests/memcheck.h
    M tests/minicheck.c
    M tests/minicheck.h
    M tests/misc_tests.c
    M tests/misc_tests.h
    M tests/ns_tests.c
    M tests/ns_tests.h
    M tests/nsalloc_tests.c
    M tests/nsalloc_tests.h
    M tests/runtests.c
    M tests/structdata.c
    M tests/structdata.h
    M xmlwf/codepage.c
    M xmlwf/codepage.h
    M xmlwf/ct.c
    M xmlwf/filemap.h
    M xmlwf/readfilemap.c
    M xmlwf/unixfilemap.c
    M xmlwf/win32filemap.c
    M xmlwf/xmlfile.c
    M xmlwf/xmlfile.h
    M xmlwf/xmlmime.c
    M xmlwf/xmlmime.h
    M xmlwf/xmltchar.h
    M xmlwf/xmlwf.c
    M xmlwf/xmlwf_helpgen.py
    M xmlwf/xmlwf_helpgen.sh

  Log Message:
  -----------
  Import expat 2.8.3 (trimmed)

Security fix: CVE-2026-72522 -- an out-of-bounds read and resulting
infinite loop caused by treating low surrogates the same as high
surrogates in the *_toUtf16 functions.  Only builds with 16-bit
character support are affected.

Also fixes support for 2+ GiB documents (regression in 2.8.2) and
rejects an empty version in the XML declaration.

AI-Assisted-by: Claude Opus 5
Signed-off-by: Lucas Holt <luke at foolishgames.com>

  Commit: 526b043c209f5891d361b8e4de16f8828d410a5c
      https://github.com/MidnightBSD/src/commit/526b043c209f5891d361b8e4de16f8828d410a5c
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M contrib/expat/Changes
    M contrib/expat/Makefile.am
    M contrib/expat/Makefile.in
    M contrib/expat/README.md
    M contrib/expat/configure.ac
    M contrib/expat/doc/reference.html
    M contrib/expat/doc/xmlwf.1
    M contrib/expat/doc/xmlwf.xml
    M contrib/expat/examples/element_declarations.c
    M contrib/expat/examples/elements.c
    M contrib/expat/examples/outline.c
    M contrib/expat/lib/ascii.h
    M contrib/expat/lib/asciitab.h
    M contrib/expat/lib/expat.h
    M contrib/expat/lib/expat_external.h
    M contrib/expat/lib/fallthrough.h
    M contrib/expat/lib/iasciitab.h
    M contrib/expat/lib/internal.h
    M contrib/expat/lib/latin1tab.h
    M contrib/expat/lib/memory_sanitizer.h
    M contrib/expat/lib/nametab.h
    M contrib/expat/lib/random_arc4random.c
    M contrib/expat/lib/random_arc4random.h
    M contrib/expat/lib/random_arc4random_buf.c
    M contrib/expat/lib/random_arc4random_buf.h
    M contrib/expat/lib/random_dev_urandom.c
    M contrib/expat/lib/random_dev_urandom.h
    M contrib/expat/lib/random_getentropy.c
    M contrib/expat/lib/random_getentropy.h
    M contrib/expat/lib/random_getrandom.c
    M contrib/expat/lib/random_getrandom.h
    M contrib/expat/lib/random_rand_s.c
    M contrib/expat/lib/random_rand_s.h
    M contrib/expat/lib/siphash.h
    M contrib/expat/lib/utf8tab.h
    M contrib/expat/lib/winconfig.h
    M contrib/expat/lib/xcsinc.c
    M contrib/expat/lib/xmlparse.c
    M contrib/expat/lib/xmlrole.c
    M contrib/expat/lib/xmlrole.h
    M contrib/expat/lib/xmltok.c
    M contrib/expat/lib/xmltok.h
    M contrib/expat/lib/xmltok_impl.c
    M contrib/expat/lib/xmltok_impl.h
    M contrib/expat/lib/xmltok_ns.c
    M contrib/expat/tests/acc_tests.c
    M contrib/expat/tests/acc_tests.h
    M contrib/expat/tests/alloc_tests.c
    M contrib/expat/tests/alloc_tests.h
    M contrib/expat/tests/basic_tests.c
    M contrib/expat/tests/basic_tests.h
    M contrib/expat/tests/chardata.c
    M contrib/expat/tests/chardata.h
    M contrib/expat/tests/common.c
    M contrib/expat/tests/common.h
    M contrib/expat/tests/dummy.c
    M contrib/expat/tests/dummy.h
    M contrib/expat/tests/handlers.c
    M contrib/expat/tests/handlers.h
    M contrib/expat/tests/memcheck.c
    M contrib/expat/tests/memcheck.h
    M contrib/expat/tests/minicheck.c
    M contrib/expat/tests/minicheck.h
    M contrib/expat/tests/misc_tests.c
    M contrib/expat/tests/misc_tests.h
    M contrib/expat/tests/ns_tests.c
    M contrib/expat/tests/ns_tests.h
    M contrib/expat/tests/nsalloc_tests.c
    M contrib/expat/tests/nsalloc_tests.h
    M contrib/expat/tests/runtests.c
    M contrib/expat/tests/structdata.c
    M contrib/expat/tests/structdata.h
    M contrib/expat/xmlwf/codepage.c
    M contrib/expat/xmlwf/codepage.h
    M contrib/expat/xmlwf/ct.c
    M contrib/expat/xmlwf/filemap.h
    M contrib/expat/xmlwf/readfilemap.c
    M contrib/expat/xmlwf/unixfilemap.c
    M contrib/expat/xmlwf/win32filemap.c
    M contrib/expat/xmlwf/xmlfile.c
    M contrib/expat/xmlwf/xmlfile.h
    M contrib/expat/xmlwf/xmlmime.c
    M contrib/expat/xmlwf/xmlmime.h
    M contrib/expat/xmlwf/xmltchar.h
    M contrib/expat/xmlwf/xmlwf.c
    M contrib/expat/xmlwf/xmlwf_helpgen.py
    M contrib/expat/xmlwf/xmlwf_helpgen.sh

  Log Message:
  -----------
  Merge commit '7d1a04d2380d2eb6b434dcb212918b9294b352f7' into stable/4.0

  Commit: f3b9ce4f338192f3ae9e16eec84360cd504920e2
      https://github.com/MidnightBSD/src/commit/f3b9ce4f338192f3ae9e16eec84360cd504920e2
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M UPDATING
    M lib/libexpat/expat_config.h

  Log Message:
  -----------
  lib/libexpat: update for expat 2.8.3

Bump the version strings in the in-tree expat_config.h to 2.8.3.  They
were still reading 2.8.1; the 2.8.2 import did not update them.

SRCS needs no change: 2.8.3 adds no new compilation units, and the new
xcsinc.c from 2.8.2 is #included by xmlparse.c rather than compiled
separately.

Note the expat 2.8.3 update in UPDATING.

AI-Assisted-by: Claude Opus 5
Signed-off-by: Lucas Holt <luke at foolishgames.com>
(cherry picked from commit e2cd1b4a44a84796383b07daaf217831bb6b3c1d)

Compare: https://github.com/MidnightBSD/src/compare/302cfe092747...f3b9ce4f3381

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications