- Removed (made abstract) default implementations of TXPathVariable.AsText(), AsNumber() and
AsBoolean(). These methods are overriden by all TXPathVariable descendants, therefore in
TXPathVariable itself they are dead and only increase executable size.
- Removed debug statement committed by accident in r13256.
tests/xpathts.pp:
* Annotated some tests, added a few tests for name(), namespace-uri() and local-name().
git-svn-id: trunk@13322 -
+ Character count checks for parameter entities, protects against entity expansion attacks using PE's.
+ Cache external PE's so they are only fetched once, considerably reduces traffic and CPU load in
case of attack.
* Do not repeat attempts to read from input stream once the read operation has returned less bytes
than requested.
git-svn-id: trunk@13321 -
case the getter is a function, the result is that first the getter is
called, and subsequently the temp holding the function result is
overwritten (thus not changing anything). This is Delphi-compatible,
and fixes tests/tbf/tb0214*
git-svn-id: trunk@13320 -
not work there (they will raise SIGPIPE signals when socket errors occur,
needs to be fixed by using the SO_NOSIGPIPE option when creating the
sockets; see http://wiki.freepascal.org/fcl-web for more info)
git-svn-id: trunk@13319 -
+ New option TDOMParseOptions.DisallowDoctype - prohibits processing of the DTD (specs compliant,
targeted for SOAP applications).
+ New option TDOMParseOptions.MaxChars - limits max document length, protects against entity
expansion attacks and DoS by feeding in too long documents. Default value of 0 means no
restrictions. Tested with internal and external general entities, TBD with parameter entities.
* Fixed calculation of URIs used to retrieve external entities, they should be evaluated at the
point of entity declaration rather than at the point of resolving (which happens at the first
inclusion).
dom.pp:
* TDOMNode.SetReadOnly, calling Attributes was causing creation of TAttributeMap on every element.
Fixed.
git-svn-id: trunk@13313 -
pointer is of a reference-counted type (reverts r2165, fixes mantis #14019)
* modified test for mantis #4086 (which was "fixed" by r2165) so it still
works and no longer depends on whether or not the compiler uses a
refcounted temp to evaluate certain expressions
git-svn-id: trunk@13310 -
starts with './' (mantis #14020)
* also mark files whose name starts with '.' that are found in subdirectories
as faHidden (not reported, but was due to a similar error)
- removed some unused variables related to the Find* functionality
git-svn-id: trunk@13307 -
TDebugInfoDwarf, so DWARFv2 and DWARFv3 generators can share protected
methods.
* fixed the debug info for sets whose language-level lower bound is not
equal to the actual set base used when storing the data (e.g., a "set
of 1..5" is actually stored as a "set of 0..7" or "set of 0..31")
(mantis #13984)
+ interactive test for the above
git-svn-id: trunk@13302 -
* Use DW_AT_byte_stride when possible, because gdb does not support DW_AT_stride_size
* Add stride to dynamic-array definitions
git-svn-id: trunk@13280 -
recursive with respect to entities, however). This enables more useful backtrace in case of
parsing errors, and makes more fun at profiling.
git-svn-id: trunk@13275 -
