kc3-lang/libxml2/test/errors/759573-2.xml

• Show log

  Commit

• Hash : 00906759
  Author :
  Date : 2016-01-26T16:57:03
  

  Heap-based buffer-underreads due to xmlParseName
  
  For https://bugzilla.gnome.org/show_bug.cgi?id=759573
  
  * parser.c:
  (xmlParseElementDecl): Return early on invalid input to fix
  non-minimized test case (759573-2.xml).  Otherwise the parser
  gets into a bad state in SKIP(3) at the end of the function.
  (xmlParseConditionalSections): Halt parsing when hitting invalid
  input that would otherwise caused xmlParserHandlePEReference()
  to recurse unexpectedly.  This fixes the minimized test case
  (759573.xml).
  
  * result/errors/759573-2.xml: Add.
  * result/errors/759573-2.xml.err: Add.
  * result/errors/759573-2.xml.str: Add.
  * result/errors/759573.xml: Add.
  * result/errors/759573.xml.err: Add.
  * result/errors/759573.xml.str: Add.
  * test/errors/759573-2.xml: Add.
  * test/errors/759573.xml: Add.
  

Download

• test/errors/759573-2.xml

• <?xmh ven="1.0"?>
  <!DOCTYPE test [
  <!ELEMENT test (#PCDATA) >
  <!ENTITY % xx '&#37;zz;
  <![INCLUDE[
  &#37;zz;<!ELEMENTD(&#37;MENT&#37;MENTD&#377;MENTD&#37;zNMT9KENSMYSYSTEM;MENT9&#37;zz;'>
  <!ENTITY % zz '&#60;!ENTITY<?xDOCTYPEm~?>' >
  %xx;ÿggKENSMYNT&#35;MENTD&#372zz;'>
  <!ENBITY % zz '&#60;!EN#3&##37;z ';!EY'#x;g
  <!ENTent ref="bè:b>r.B"/>				
  e		</

Download