58 Commits

Author SHA1 Message Date
openeuler-ci-bot
b0aeae3e5e
!127 fix CVE-2022-29824
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-05-09 02:50:25 +00:00
fuanan
0812abf4b4 fix CVE-2022-29824 2022-05-09 09:51:59 +08:00
openeuler-ci-bot
78068ee6b5
!119 fix CVE-2022-23308
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-03-14 09:08:10 +00:00
fuanan
dd365e186a fix CVE-2022-23308 2022-03-09 11:54:11 +08:00
openeuler-ci-bot
6d825831b1
!112 fix valgrind errors in xmlParseBalancedChunkMemoryRecover
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-03-09 03:25:37 +00:00
fuanan
3270cc329a fix valgrind errors in xmlParseBalancedChunkMemoryRecover 2022-02-26 16:51:43 +08:00
openeuler-ci-bot
4eb164c040
!107 use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-02-12 03:32:13 +00:00
fuanan
4b9d60a380 use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild 2022-02-12 11:16:28 +08:00
openeuler-ci-bot
3ffa9ce323 !95 backport upstream patches
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-12-02 08:53:20 +00:00
panxiaohe
0e9039296a backport upstream patches 2021-12-02 14:41:13 +08:00
openeuler-ci-bot
c9ea9ded2f !93 revert commit 382544
From: @henry-fan
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-27 08:14:35 +00:00
Wentao Fan
16413ab2cb revert commit 382544
Signed-off-by: Wentao Fan <fanwentao@huawei.com>
2021-11-27 15:53:43 +08:00
openeuler-ci-bot
d5a0113c09 !90 fix issues about SEGV, memleak, null deref, overflow, etc.
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-11 12:41:45 +00:00
panxiaohe
a3d08d8657 fix issues about SEGV, memleak, overflow, etc. 2021-11-11 20:19:02 +08:00
openeuler-ci-bot
cf302c5c47 !87 Fix heap-use-after-free in xmlAddNextSibling and xmlAddChild
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-11 11:35:41 +00:00
panxiaohe
ed681a2b71 Fix heap-use-after-free in xmlAddNextSibling and xmlAddChild 2021-11-11 17:12:29 +08:00
openeuler-ci-bot
da7b539a6c !80 fix memleaks in xmlXIncludeProcessFlags
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-09 11:42:46 +00:00
panxiaohe
579dae2d55 fix memleaks in xmlXIncludeProcessFlags 2021-11-09 16:59:12 +08:00
openeuler-ci-bot
4e315f2552 !75 [sync] PR-73: 修复FUZZ发现问题Null-deref in xmlSchemaGetComponentTargetNs
From: @openeuler-sync-bot
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-10-30 08:48:28 +00:00
huangduirong
deb136681a fix null deref in xmlSchemaGetComponentTargetNs
(cherry picked from commit cea8343440f6d8e76a281c4bf2818a1fcd9a5231)
2021-10-30 16:06:41 +08:00
openeuler-ci-bot
8666e65196 !69 fix fuzz issues
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-10-25 01:03:39 +00:00
panxiaohe
e59aafaf99 fix fuzz issues 2021-10-23 17:13:09 +08:00
openeuler-ci-bot
d39874f4c9 !66 fix fuzz issues
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-10-22 03:03:35 +00:00
panxiaohe
382544178f fix fuzz issues 2021-10-21 19:30:40 +08:00
openeuler-ci-bot
b1d89bbd8e !61 fix CVE-2021-3541
From: @angela7
Reviewed-by: @openeuler-basic
Signed-off-by: @openeuler-basic
2021-06-04 10:29:25 +08:00
guoxiaoqi
27bfa52c4c fix CVE-2021-3541 2021-06-02 11:06:48 +08:00
openeuler-ci-bot
f4f81e2635 !55 add patches from upstream
From: @zou_lin77
Reviewed-by: @henry-fan,@xiezhipeng1
Signed-off-by: @henry-fan,@xiezhipeng1
2021-05-29 18:00:08 +08:00
zou_lin77
5329b9f9e5 add patches from upstream 2021-05-29 17:41:53 +08:00
openeuler-ci-bot
391930a7ba !48 fix CVE-2021-3517 and CVE-2021-3518
From: @angela7
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-05-28 14:10:37 +08:00
guoxiaoqi
0e25679957 fix CVE-2021-3517 and CVE-2021-3518 2021-05-28 11:40:32 +08:00
openeuler-ci-bot
b5de611ace !43 fix CVE-2021-3537
From: @fly_fzc
Reviewed-by: @openeuler-basic
Signed-off-by: @openeuler-basic
2021-05-28 09:48:04 +08:00
yangkang
ef0a5f66fa fix CVE-2021-3537 2021-05-27 16:40:43 +08:00
openeuler-ci-bot
1fb4f42da8 !37 fix problems detected by oss-fuzz test
From: @liquor1
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-03-03 11:08:28 +08:00
Liquor
ba77c3bc4d fix problems detected by oss-fuzz test 2021-03-02 19:48:37 +08:00
openeuler-ci-bot
67bd5cc0f5 !32 fix problems detected by oss-fuzz test
From: @liquor1
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2020-11-13 14:10:16 +08:00
Liquor
eefe0dc92e fix problems detected by oss-fuzz test 2020-11-12 19:04:00 +08:00
yang_zhuang_zhuang
6af5d9ef65 revert Don-t-try-to-handle-namespaces-when-building-HTML-do.patch 2020-11-12 11:54:43 +08:00
yang_zhuang_zhuang
c7788837ef Fixed some issues found in fuzzing testcases 2020-11-12 11:52:00 +08:00
openeuler-ci-bot
34107a35bb !28 add libxml2-help requires
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2020-11-09 14:28:50 +08:00
panxiaohe
9b0a7bb759 add libxml2-help requires 2020-11-06 16:02:35 +08:00
openeuler-ci-bot
4c5b2cc8ed !26 fix CVE-2020-24977
From: @yang_zhuang_zhuang
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2020-10-15 16:36:07 +08:00
yang_zhuang_zhuang
ad2a15576c Fix CVE-2020-24977 2020-10-15 16:11:48 +08:00
openeuler-ci-bot
c401eaa4b5 !15 Fix fuzz failure
Merge pull request !15 from 邹林/openEuler-20.03-LTS
2020-08-29 15:16:57 +08:00
zou_lin77
c240dacc90 Fix more quadratic runtime issues in HTML push parse
Fix reset HTML parser input before reporting error
2020-08-28 19:55:54 +08:00
openeuler-ci-bot
30d1489b26 !12 openEuler-libxml2
Merge pull request !12 from Liquor/openEuler-20.03-LTS
2020-08-13 17:26:59 +08:00
liquor
6936b35066 Limit regexp nesting depth and Fix exponential runtime in xmlFARecurseDeterminism 2020-08-12 19:30:00 +08:00
openeuler-ci-bot
12addbc3dd !10 openEuler-libxml2
Merge pull request !10 from Liquor/LTS
2020-08-12 16:56:46 +08:00
liquor
00ef2eae10 Fix integer overflow in xmlFAParseQuantExact 2020-08-12 16:20:36 +08:00
openeuler-ci-bot
037a2ae622 !8 libxml2
Merge pull request !8 from syyhao/LTS
2020-07-31 11:19:18 +08:00
Yangyang Shen
e984b33634 Fix use after free with validating reader 2020-07-30 17:32:07 +08:00