kc3-lang/libxml2/test/errors/759573.xml

• Show log

  Commit

• Hash : 00906759
  Author :
  Date : 2016-01-26T16:57:03
  

  Heap-based buffer-underreads due to xmlParseName
  
  For https://bugzilla.gnome.org/show_bug.cgi?id=759573
  
  * parser.c:
  (xmlParseElementDecl): Return early on invalid input to fix
  non-minimized test case (759573-2.xml).  Otherwise the parser
  gets into a bad state in SKIP(3) at the end of the function.
  (xmlParseConditionalSections): Halt parsing when hitting invalid
  input that would otherwise caused xmlParserHandlePEReference()
  to recurse unexpectedly.  This fixes the minimized test case
  (759573.xml).
  
  * result/errors/759573-2.xml: Add.
  * result/errors/759573-2.xml.err: Add.
  * result/errors/759573-2.xml.str: Add.
  * result/errors/759573.xml: Add.
  * result/errors/759573.xml.err: Add.
  * result/errors/759573.xml.str: Add.
  * test/errors/759573-2.xml: Add.
  * test/errors/759573.xml: Add.
  

Download

• test/errors/759573.xml

• <?h?><!DOCTYPEt[<!ELEMENT t (A)><!ENTITY % xx '&#37;<![INCLUDE[000&#37;&#3000;000&#37;z;'><!ENTITYz>%xx;

Download