chunked_attr.html

Branch :
Show log
Commit
Author : Nick Wellnhofer
Date : 2020-06-28 15:54:23
Hash : 477c7f6a
Message : Fix quadratic runtime in HTML parser Commit eeb99329 removed an important optimization avoiding quadratic runtime when repeatedly scanning the input buffer for terminating characters in the HTML push parser. The related bug is https://bugzilla.gnome.org/show_bug.cgi?id=444994 Make sure that ctxt->checkIndex is always written and store additional parser state in ctxt->inSubset which is unused in the HTML parser. Found by OSS-Fuzz.
test/HTML/chunked_attr.html
<html>
<!--
This tests internal state tracking of the push parser and assumes a chunk
size of 4096 (or a divisor of 4096) and an initial chunk of size 4.
Make sure that the first '<' in the attribute value ends up near
offset 4100.
-->
<body>
<p>
Filler bytes follow:

      100 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      200 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      300 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      400 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      500 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      600 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      700 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      800 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      900 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
     1000 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      100 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      200 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      300 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      400 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      500 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      600 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      700 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      800 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      900 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
     2000 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      100 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      200 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      300 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      400 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      500 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      600 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      700 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
      800 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
xxx
</p>
<div
  fill1="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
  onmouseover="x<b>text</b>x"
  fill2="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
  fill3="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
  fill4="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
  fill5="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
  fill6="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789"
>
</div>
</body>
</html>
kc3-lang/libxml2/test/HTML/chunked_attr.html

Commit

kc3-lang/libxml2 /test/HTML/chunked_attr.html
