CVS commit: pkgsrc/textproc/libplist

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Nov  8 15:50:48 UTC 2026

Modified Files:
        pkgsrc/textproc/libplist: Makefile distinfo

Log Message:
libplist: update to 2.8.1.

Version 2.8.1
~~~~~~~~~~~~~

- Changes:
  * bplist: Use length-based range checks for object data
  * bplist: Limit the total number of parsed nodes to prevent memory
    exhaustion from crafted reference expansion
  * bytearray: Grow the buffer geometrically to avoid quadratic appends
    (fixes a timeout when writing large plists)
  * Harden allocation failure handling and size arithmetic across the
    parsers, writers and containers
  * Add tests for the binary plist parser behavior

- Bugfixes:
  * Fix use-after-free in plist_copy_node() when the stack is reallocated
  * Fix double-free in node_from_xml() error paths
  * Fix memory leak in xplist when adding a node to its parent fails
  * Fix leaks and crashes on allocation failure in the XML, binary and
    OpenStep parsers, plist_free_children(), plist_copy_node_shallow(),
    the dict hashtable and plist_to_bin()
  * Report PLIST_ERR_NO_MEM from the XML parser on allocation failure
  * oplist: Fix error detection when parsing 'strings' data
  * time64: Fix signed integer overflow for extreme years in gmtime64_r()
  * Fix plist_get_date_val() rounding and sign handling so that it
    round-trips with plist_set_date_val(); handle out-of-range and NaN
    values without undefined behavior
  * bplist: Guard the uint64_mul_overflow fallback against division by zero
  * Fix leak in integer_set test
  * [github-actions] Add more msys flavors and an arm64 Windows build


To generate a diff of this commit:
cvs rdiff -u -r1.48 -r1.49 pkgsrc/textproc/libplist/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/textproc/libplist/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/libplist/Makefile
diff -u pkgsrc/textproc/libplist/Makefile:1.48 pkgsrc/textproc/libplist/Makefile:1.49
--- pkgsrc/textproc/libplist/Makefile:1.48      Sun Oct  4 15:41:30 2026
+++ pkgsrc/textproc/libplist/Makefile   Sun Nov  8 15:50:48 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.48 2026/10/04 15:41:30 wiz Exp $
+# $NetBSD: Makefile,v 1.49 2026/11/08 15:50:48 wiz Exp $
 
-DISTNAME=      libplist-2.8.0
+DISTNAME=      libplist-2.8.1
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libimobiledevice/}
 GITHUB_RELEASE=        ${PKGVERSION_NOREV}

Index: pkgsrc/textproc/libplist/distinfo
diff -u pkgsrc/textproc/libplist/distinfo:1.14 pkgsrc/textproc/libplist/distinfo:1.15
--- pkgsrc/textproc/libplist/distinfo:1.14      Sun Oct  4 15:41:30 2026
+++ pkgsrc/textproc/libplist/distinfo   Sun Nov  8 15:50:48 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.14 2026/10/04 15:41:30 wiz Exp $
+$NetBSD: distinfo,v 1.15 2026/11/08 15:50:48 wiz Exp $
 
-BLAKE2s (libplist-2.8.0.tar.bz2) = 64e860dc99ad36be358f5c3404a639fac53b2a8306a1269d0b613980a30f601f
-SHA512 (libplist-2.8.0.tar.bz2) = 8adeb6357c3f4059f94002308d7f23b04d43156c5c7bcd62ea2a6bf077990957b8b53026d3ab31b9bfa892fe9d3b88b20219b1b0be208cb1c179ba88926eaa83
-Size (libplist-2.8.0.tar.bz2) = 519245 bytes
+BLAKE2s (libplist-2.8.1.tar.bz2) = b4c9c10428d27683d3d87a0e8f622bbe614c186e227fc4262fe59e80a2e57aff
+SHA512 (libplist-2.8.1.tar.bz2) = 5fac7f1a947b73053f41c6765e3225e822cf64a1defe73ffcadeec21c3af2b048de5a3981ccae44ef617932fe56778a470159d09b85ef0d196da160c70b2470f
+Size (libplist-2.8.1.tar.bz2) = 523602 bytes