From 703b76ebdc22ebaa20c8638c4602e509b6d78ad5 Mon Sep 17 00:00:00 2001
From: Ben Wagner <[email protected]>
Date: Wed, 18 Mar 2026 09:06:06 -0700
Subject: [PATCH] Roll src/third_party/expat/src/ 69d6c054c..6154446fc (209 commits)

https://chromium.googlesource.com/external/github.com/libexpat/libexpat.git/+log/69d6c054c1bd..6154446fccef

$ git log 69d6c054c..6154446fc --date=short --no-merges --format='%ad %ae %s'
2026-03-16 49699333+dependabot[bot] Actions(deps): Bump vmactions/solaris-vm from 1.3.1 to 1.3.2
2026-03-16 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.4.2 to 1.4.3
2026-03-08 10689391+Laserbear test that we do not end up with a zombie PREFIX in the pool
2026-03-08 10689391+Laserbear copy prefix name to pool before lookup
2026-03-06 sebastian misc_tests.c: Cover XML_TOK_INSTANCE_START infinite loop case
2026-03-01 sebastian lib: Reject XML_TOK_INSTANCE_START infinite loop in entityValueProcessor
2026-03-03 francesco.bertolaccini Fix NULL function-pointer dereference for empty external parameter entities
2026-03-03 sebastian mass-cppcheck.sh: Define macro __has_feature for Cppcheck >=2.20.0
2026-03-03 sebastian tests/basic_tests.c: Address Cppcheck >=2.20.0 warning nullPointerOutOfMemory
2026-03-02 49699333+dependabot[bot] Actions(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.0
2026-02-22 sebastian Bump CI off of Ubuntu 22.04 (to fix installation of Clang)
2026-02-22 sebastian tests/basic_tests.c: Make test_buffer_can_grow_to_max work for Ubuntu 24.04 CI
2026-02-16 49699333+dependabot[bot] Actions(deps): Bump vmactions/solaris-vm from 1.3.0 to 1.3.1
2026-02-16 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.4.1 to 1.4.2
2026-02-08 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.3.8 to 1.4.1
2026-02-08 sebastian wasi_sdk.yml: Bump to WASI SDK 30
2026-02-08 sebastian solaris.yml: Bump GitHub Action to 1.3.0 (to no longer allow "run:" to fail silently)
2026-02-08 sebastian freebsd.yml|solaris.yml: Fix misspelled variable "CXX[F]LAGS"
2026-02-08 sebastian freebsd.yml|solaris.yml: Start using "set -u" for robustness
2026-02-07 fsvm88 configure.ac: fix condition for symbol versioning check. Fixes 1146
2026-02-02 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.3.7 to 1.3.8
2026-02-02 49699333+dependabot[bot] Actions(deps): Bump vmactions/solaris-vm from 1.2.6 to 1.2.8
2026-01-30 sebastian Set release date for 2.7.4
2026-01-27 sebastian Bump version to 2.7.4
2026-01-27 sebastian Bump version info from 12:1:11 to 12:2:11
2026-01-21 sebastian Changes: Drop CPython security bindings todos off the list as done
2026-01-20 sebastian Changes: Document changes in Expat 2.7.4
2026-01-29 sebastian Sync file headers
2026-01-29 sebastian .mailmap: Add Berkay and Alfonso
2026-01-26 49699333+dependabot[bot] Actions(deps): Bump actions/checkout from 6.0.1 to 6.0.2
2026-01-25 sebastian autotools-cmake.yml: Cover symbol versioning of off-by-default symbols
2026-01-25 sebastian Rename "exported-symbols-versioned.txt" to "exported-symbols-versioned-default.txt"
2026-01-24 sebastian autotools-cmake.yml: Cover symbol versioning
2026-01-24 sebastian Rename "exported-symbols.txt" to "exported-symbols-unversioned.txt"
2026-01-25 gordon.messmer Introduce disabled-by-default symbol versioning (#1134)
2026-01-24 sebastian Fix libexpat.def.cmake version comments (for CMake with Windows)
2026-01-24 sebastian CMake: Start requiring CMake >=3.17.0 of 2020-03-20
2026-01-24 sebastian solaris.yml: Make Solaris CI use `pkg install` instead of `pkgutil -i`
2026-01-18 sebastian Changes: Document CVE-2026-24515
2026-01-18 sebastian tests: Cover effect of XML_SetUnknownEncodingHandler user data
2026-01-18 sebastian lib: Make XML_ExternalEntityParserCreate copy unknown encoding handler user data
2026-01-23 sebastian solaris.yml: Update package database before trying to install
2026-01-18 sebastian Drop obsolete file expat.m4 that provided Autoconf macro "AM_WITH_EXPAT"
2026-01-12 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.3.6 to 1.3.7
2026-01-12 49699333+dependabot[bot] Actions(deps): Bump vmactions/solaris-vm from 1.2.4 to 1.2.6
2026-01-11 sebastian Extend CI coverage of FreeBSD
2026-01-10 sebastian Make GitHub Actions cover Solaris 11.4
2026-01-11 sebastian fix-xmltest-log.sh: Add exec statement (to dispose of the Bash process earlier)
2026-01-11 sebastian fix-xmltest-log.sh: Prefer command "gsed" (GNU sed) over "sed"
2026-01-10 sebastian configure.ac: Limit -Wno-pedantic-ms-format to MinGW
(...)
2025-09-15 sebastian lib: Drop void pointer casts to free/realloc input that C99 does not need
2025-09-15 sebastian lib: Drop casts around malloc/realloc returns that C99 does not need
2025-09-15 sebastian CI: Upgrade to Clang 21
2025-09-15 clang-format Mass-apply clang-format 21.1.1
2025-09-07 sebastian Changes: Document allocation tracking
2025-09-10 sebastian docs: Promote the contract to call XML_FreeContentModel
2025-09-03 sebastian docs: Document the two allocation tracking API functions
2025-09-03 sebastian fuzz: Be robust towards NULL return from XML_ExternalEntityParserCreate
2025-09-02 sebastian xmlwf: Wire allocation tracker config to existing arguments -a and -b
2025-09-02 sebastian tests: Cover allocation tracking and limiting with tests
2025-09-11 sebastian lib: Exclude the content model from allocation tracking
2025-09-09 sebastian lib: Exclude the main input buffer from allocation tracking
2025-09-07 sebastian lib: Exclude XML_Mem* functions from allocation tracking
2025-09-07 sebastian lib: Make XML_MemFree and XML_FreeContentModel match their siblings
2025-09-01 sebastian lib: Implement tracking of dynamic memory allocations
2025-09-10 sebastian mass-cppcheck.sh: Activate in-code suppression comments
2025-09-01 sebastian lib: Make function dtdCopy use macro MALLOC
2025-09-01 sebastian lib: Make function dtdDestroy use macro FREE
2025-09-01 sebastian lib: Make function dtdReset use macro FREE
2025-09-01 sebastian lib: Make function copyString use macro MALLOC
2025-09-01 sebastian lib: Make function hash tables use macros MALLOC and FREE
2025-09-01 sebastian lib: Make string pools use macros MALLOC, FREE, REALLOC
2025-09-01 sebastian lib: Make function dtdCreate use macro MALLOC
2025-09-10 sebastian Changes: Document change in invocation of Cppcheck
2025-09-10 sebastian Start calling Cppcheck without "--suppress=objectIndex --suppress=unknownMacro"
2025-09-07 sebastian Changes: Document more changes since release Expat 2.7.1
2025-09-03 sebastian docs: Add missing <p>..</p> wrap
2025-09-02 sebastian xmlwf: Mention supported environment variables in --help output
2025-09-02 sebastian xmlwf/xmlwf_helpgen.py: Fix -q argument
2025-09-02 sebastian autotools-cmake.yml: Fix "brew install cmake" for macOS
2025-08-19 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.2.1 to 1.2.3
2025-08-19 49699333+dependabot[bot] Actions(deps): Bump actions/checkout from 4.3.0 to 5.0.0
2025-08-19 sebastian freebsd.yml: Downgrade to FreeBSD 14.3 to fix CI for the moment
2025-08-15 sebastian autotools: Sync CMake templates with CMake 3.31 for macOS
2025-08-11 49699333+dependabot[bot] Actions(deps): Bump actions/checkout from 4.2.2 to 4.3.0
2025-06-30 sebastian autotools: Sync CMake templates with CMake 3.30 for macOS
2025-06-30 sebastian autotools: Allow updates to expat.cmake for a single operating system
2025-05-14 sebastian autotools-cmake.yml: Disable fail-fast to ease debugging
2025-06-16 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.2.0 to 1.2.1
2025-05-30 sebastian windows-binaries.yml: Replace command zip by 7z
2025-05-30 sebastian Drop support for MSVC <=16.0/2019
2025-05-26 gfunni234 XmlInitUnknownEncodingNS: make table const
2025-05-19 gfunni234 Replace the empty for-loops with while loops
2025-05-13 sebastian CI: Upgrade to Clang 20
2025-04-18 sebastian CMake: Drop support for CMake <3.15 + fix -DEXPAT_MSVC_STATIC_CRT=ON
2025-04-18 sebastian CMake: Report on CMake version in use
2025-04-18 sebastian windows-binaries.yml: Enhance description of task "Build installer"
2025-04-14 49699333+dependabot[bot] Actions(deps): Bump vmactions/freebsd-vm from 1.1.9 to 1.2.0
2025-04-04 sebastian freebsd.yml: Cover compilation on FreeBSD
2025-04-05 sebastian ConfigureChecks.cmake: Fix off_t detection for -Werror

Created with:
  roll-dep src/third_party/expat/src
[email protected],[email protected]

Bug: 492812194
Change-Id: Ie73aa972ac9aa76daa32bc91d4155d3bae6f71fd
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7676220
Reviewed-by: Ben Wagner <[email protected]>
Auto-Submit: Ben Wagner <[email protected]>
Commit-Queue: Ben Wagner <[email protected]>
Reviewed-by: Florin Malita <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1601335}
---

diff --git a/DEPS b/DEPS
index 26eb66d..08b0ed7 100644
--- a/DEPS
+++ b/DEPS
@@ -444,7 +444,7 @@
   # Three lines of non-changing comments so that
   # the commit queue can handle CLs rolling libexpat
   # and whatever else without interference from each other.
-  'libexpat_revision': '69d6c054c1bd5258c2a13405a7f5628c72c177c2',
+  'libexpat_revision': '6154446fccefbf3ca644894f598969113b0c7bcd',
   # Three lines of non-changing comments so that
   # the commit queue can handle CLs rolling jetstream-main
   # and whatever else without interference from each other.
diff --git a/third_party/expat/README.chromium b/third_party/expat/README.chromium
index f5f507d9..d6f06eb 100644
--- a/third_party/expat/README.chromium
+++ b/third_party/expat/README.chromium
@@ -1,10 +1,10 @@
 Name: Expat XML Parser
 Short Name: expat
 URL: https://github.com/libexpat/libexpat
-Version: R_2_7_1-22-g69d6c054
-CPEPrefix: cpe:/a:libexpat_project:libexpat:2.7.1
-Date: 2025-04-03
-Revision: 69d6c054c1bd5258c2a13405a7f5628c72c177c2
+Version: R_2_7_4-38-g6154446f
+CPEPrefix: cpe:/a:libexpat_project:libexpat:2.7.4
+Date: 2026-03-17
+Revision: 6154446fccefbf3ca644894f598969113b0c7bcd
 Update Mechanism: Manual
 Security Critical: yes
 Shipped: yes
diff --git a/third_party/expat/include/expat_config/expat_config.h b/third_party/expat/include/expat_config/expat_config.h
index 04f03f52..76d06454 100644
--- a/third_party/expat/include/expat_config/expat_config.h
+++ b/third_party/expat/include/expat_config/expat_config.h
@@ -29,14 +29,11 @@
 #define HAVE_GETPAGESIZE 1
 
 /* Define to 1 if you have the `getrandom' function. */
-/* #define HAVE_GETRANDOM 1 */
+/* #undef HAVE_GETRANDOM */
 
 /* Define to 1 if you have the <inttypes.h> header file. */
 #define HAVE_INTTYPES_H 1
 
-/* Define to 1 if you have the 'bsd' library (-lbsd). */
-/* #undef HAVE_LIBBSD */
-
 /* Define to 1 if you have a working 'mmap' system call. */
 #define HAVE_MMAP 1
 
@@ -56,7 +53,7 @@
 #define HAVE_STRING_H 1
 
 /* Define to 1 if you have `syscall' and `SYS_getrandom'. */
-/* #define HAVE_SYSCALL_GETRANDOM 1 */
+/* #undef HAVE_SYSCALL_GETRANDOM */
 
 /* Define to 1 if you have the <sys/param.h> header file. */
 #define HAVE_SYS_PARAM_H 1
@@ -83,7 +80,7 @@
 #define PACKAGE_NAME "expat"
 
 /* Define to the full name and version of this package. */
-#define PACKAGE_STRING "expat 2.7.1"
+#define PACKAGE_STRING "expat 2.7.4"
 
 /* Define to the one symbol short name of this package. */
 #define PACKAGE_TARNAME "expat"
@@ -92,7 +89,7 @@
 #define PACKAGE_URL ""
 
 /* Define to the version of this package. */
-#define PACKAGE_VERSION "2.7.1"
+#define PACKAGE_VERSION "2.7.4"