• David Kilzer's avatar
    Heap-based buffer-underreads due to xmlParseName · 00906759
    David Kilzer authored
    For https://bugzilla.gnome.org/show_bug.cgi?id=759573
    
    * parser.c:
    (xmlParseElementDecl): Return early on invalid input to fix
    non-minimized test case (759573-2.xml).  Otherwise the parser
    gets into a bad state in SKIP(3) at the end of the function.
    (xmlParseConditionalSections): Halt parsing when hitting invalid
    input that would otherwise caused xmlParserHandlePEReference()
    to recurse unexpectedly.  This fixes the minimized test case
    (759573.xml).
    
    * result/errors/759573-2.xml: Add.
    * result/errors/759573-2.xml.err: Add.
    * result/errors/759573-2.xml.str: Add.
    * result/errors/759573.xml: Add.
    * result/errors/759573.xml.err: Add.
    * result/errors/759573.xml.str: Add.
    * test/errors/759573-2.xml: Add.
    * test/errors/759573.xml: Add.
    00906759
Name
Last commit
Last update
..
HTML Loading commit data...
SVG Loading commit data...
URI Loading commit data...
VC Loading commit data...
XInclude Loading commit data...
XPath Loading commit data...
automata Loading commit data...
c14n Loading commit data...
catalogs Loading commit data...
errors Loading commit data...
expr Loading commit data...
namespaces Loading commit data...
noent Loading commit data...
pattern Loading commit data...
regexp Loading commit data...
relaxng Loading commit data...
schemas Loading commit data...
schematron Loading commit data...
scripts Loading commit data...
valid Loading commit data...
xmlid Loading commit data...
att1 Loading commit data...
att1.rde Loading commit data...
att1.rdr Loading commit data...
att1.sax Loading commit data...
att1.sax2 Loading commit data...
att10 Loading commit data...
att10.rde Loading commit data...
att10.rdr Loading commit data...
att10.sax Loading commit data...
att10.sax2 Loading commit data...
att11 Loading commit data...
att11.rde Loading commit data...
att11.rdr Loading commit data...
att11.sax Loading commit data...
att11.sax2 Loading commit data...
att2 Loading commit data...
att2.rde Loading commit data...
att2.rdr Loading commit data...
att2.sax Loading commit data...
att2.sax2 Loading commit data...
att3 Loading commit data...
att3.rde Loading commit data...
att3.rdr Loading commit data...
att3.sax Loading commit data...
att3.sax2 Loading commit data...
att4 Loading commit data...
att4.rde Loading commit data...
att4.rdr Loading commit data...
att4.sax Loading commit data...
att4.sax2 Loading commit data...
att5 Loading commit data...
att5.rde Loading commit data...
att5.rdr Loading commit data...
att5.sax Loading commit data...
att5.sax2 Loading commit data...
att6 Loading commit data...
att6.rde Loading commit data...
att6.rdr Loading commit data...
att6.sax Loading commit data...
att6.sax2 Loading commit data...
att7 Loading commit data...
att7.rde Loading commit data...
att7.rdr Loading commit data...
att7.sax Loading commit data...
att7.sax2 Loading commit data...
att8 Loading commit data...
att8.rde Loading commit data...
att8.rdr Loading commit data...
att8.sax Loading commit data...
att8.sax2 Loading commit data...
att9 Loading commit data...
att9.rde Loading commit data...
att9.rdr Loading commit data...
att9.sax Loading commit data...
att9.sax2 Loading commit data...
attrib.xml Loading commit data...
attrib.xml.rde Loading commit data...
attrib.xml.rdr Loading commit data...
attrib.xml.sax Loading commit data...
attrib.xml.sax2 Loading commit data...
badcomment.xml Loading commit data...
badcomment.xml.rde Loading commit data...
badcomment.xml.rdr Loading commit data...
badcomment.xml.sax Loading commit data...
badcomment.xml.sax2 Loading commit data...
bigentname.xml Loading commit data...
bigentname.xml.rde Loading commit data...
bigentname.xml.rdr Loading commit data...
bigentname.xml.sax Loading commit data...
bigentname.xml.sax2 Loading commit data...
bigname.xml Loading commit data...
bigname.xml.rde Loading commit data...
bigname.xml.rdr Loading commit data...
bigname.xml.sax Loading commit data...
bigname.xml.sax2 Loading commit data...
bigname2.xml Loading commit data...
bigname2.xml.rde Loading commit data...
bigname2.xml.rdr Loading commit data...
bigname2.xml.sax Loading commit data...
bigname2.xml.sax2 Loading commit data...
cdata Loading commit data...
cdata-2-byte-UTF-8.xml Loading commit data...
cdata-2-byte-UTF-8.xml.rde Loading commit data...
cdata-2-byte-UTF-8.xml.rdr Loading commit data...
cdata-2-byte-UTF-8.xml.sax Loading commit data...
cdata-2-byte-UTF-8.xml.sax2 Loading commit data...
cdata-3-byte-UTF-8.xml Loading commit data...
cdata-3-byte-UTF-8.xml.rde Loading commit data...
cdata-3-byte-UTF-8.xml.rdr Loading commit data...
cdata-3-byte-UTF-8.xml.sax Loading commit data...
cdata-3-byte-UTF-8.xml.sax2 Loading commit data...
cdata-4-byte-UTF-8.xml Loading commit data...
cdata-4-byte-UTF-8.xml.rde Loading commit data...
cdata-4-byte-UTF-8.xml.rdr Loading commit data...
cdata-4-byte-UTF-8.xml.sax Loading commit data...
cdata-4-byte-UTF-8.xml.sax2 Loading commit data...
cdata.rde Loading commit data...
cdata.rdr Loading commit data...
cdata.sax Loading commit data...
cdata.sax2 Loading commit data...
cdata2 Loading commit data...
cdata2.rde Loading commit data...
cdata2.rdr Loading commit data...
cdata2.sax Loading commit data...
cdata2.sax2 Loading commit data...
comment.xml Loading commit data...
comment.xml.rde Loading commit data...
comment.xml.rdr Loading commit data...
comment.xml.sax Loading commit data...
comment.xml.sax2 Loading commit data...
comment2.xml Loading commit data...
comment2.xml.rde Loading commit data...
comment2.xml.rdr Loading commit data...
comment2.xml.sax Loading commit data...
comment2.xml.sax2 Loading commit data...
comment3.xml Loading commit data...
comment3.xml.rde Loading commit data...
comment3.xml.rdr Loading commit data...
comment3.xml.sax Loading commit data...
comment3.xml.sax2 Loading commit data...
comment4.xml Loading commit data...
comment4.xml.rde Loading commit data...
comment4.xml.rdr Loading commit data...
comment4.xml.sax Loading commit data...
comment4.xml.sax2 Loading commit data...
comment5.xml Loading commit data...
comment5.xml.rde Loading commit data...
comment5.xml.rdr Loading commit data...
comment5.xml.sax Loading commit data...
comment5.xml.sax2 Loading commit data...
comment6.xml Loading commit data...
comment6.xml.rde Loading commit data...
comment6.xml.rdr Loading commit data...
comment6.xml.sax Loading commit data...
comment6.xml.sax2 Loading commit data...
dav1 Loading commit data...
dav1.rde Loading commit data...
dav1.rdr Loading commit data...
dav1.sax Loading commit data...
dav1.sax2 Loading commit data...
dav10 Loading commit data...
dav10.rde Loading commit data...
dav10.rdr Loading commit data...
dav10.sax Loading commit data...
dav10.sax2 Loading commit data...
dav11 Loading commit data...
dav11.rde Loading commit data...
dav11.rdr Loading commit data...
dav11.sax Loading commit data...
dav11.sax2 Loading commit data...
dav12 Loading commit data...
dav12.rde Loading commit data...
dav12.rdr Loading commit data...
dav12.sax Loading commit data...
dav12.sax2 Loading commit data...
dav13 Loading commit data...
dav13.rde Loading commit data...
dav13.rdr Loading commit data...
dav13.sax Loading commit data...
dav13.sax2 Loading commit data...
dav15 Loading commit data...
dav15.rde Loading commit data...
dav15.rdr Loading commit data...
dav15.sax Loading commit data...
dav15.sax2 Loading commit data...
dav16 Loading commit data...
dav16.rde Loading commit data...
dav16.rdr Loading commit data...
dav16.sax Loading commit data...
dav16.sax2 Loading commit data...
dav17 Loading commit data...
dav17.rde Loading commit data...
dav17.rdr Loading commit data...
dav17.sax Loading commit data...
dav17.sax2 Loading commit data...
dav18 Loading commit data...
dav18.rde Loading commit data...
dav18.rdr Loading commit data...
dav18.sax Loading commit data...
dav18.sax2 Loading commit data...
dav19 Loading commit data...
dav19.rde Loading commit data...
dav19.rdr Loading commit data...
dav19.sax Loading commit data...
dav19.sax2 Loading commit data...
dav2 Loading commit data...
dav2.rde Loading commit data...
dav2.rdr Loading commit data...
dav2.sax Loading commit data...
dav2.sax2 Loading commit data...
dav3 Loading commit data...
dav3.rde Loading commit data...
dav3.rdr Loading commit data...
dav3.sax Loading commit data...
dav3.sax2 Loading commit data...
dav4 Loading commit data...
dav4.rde Loading commit data...
dav4.rdr Loading commit data...
dav4.sax Loading commit data...
dav4.sax2 Loading commit data...
dav5 Loading commit data...
dav5.rde Loading commit data...
dav5.rdr Loading commit data...
dav5.sax Loading commit data...
dav5.sax2 Loading commit data...
dav6 Loading commit data...
dav6.rde Loading commit data...
dav6.rdr Loading commit data...
dav6.sax Loading commit data...
dav6.sax2 Loading commit data...
dav7 Loading commit data...
dav7.rde Loading commit data...
dav7.rdr Loading commit data...
dav7.sax Loading commit data...
dav7.sax2 Loading commit data...
dav8 Loading commit data...
dav8.rde Loading commit data...
dav8.rdr Loading commit data...
dav8.sax Loading commit data...
dav8.sax2 Loading commit data...
dav9 Loading commit data...
dav9.rde Loading commit data...
dav9.rdr Loading commit data...
dav9.sax Loading commit data...
dav9.sax2 Loading commit data...
defattr.xml Loading commit data...
defattr.xml.rde Loading commit data...
defattr.xml.rdr Loading commit data...
defattr.xml.sax Loading commit data...
defattr.xml.sax2 Loading commit data...
defattr2.xml Loading commit data...
defattr2.xml.rde Loading commit data...
defattr2.xml.rdr Loading commit data...
defattr2.xml.sax Loading commit data...
defattr2.xml.sax2 Loading commit data...
dia1 Loading commit data...
dia1.rde Loading commit data...
dia1.rdr Loading commit data...
dia1.sax Loading commit data...
dia1.sax2 Loading commit data...
dia2 Loading commit data...
dia2.rde Loading commit data...
dia2.rdr Loading commit data...
dia2.sax Loading commit data...
dia2.sax2 Loading commit data...
dtd1 Loading commit data...
dtd1.rde Loading commit data...
dtd1.rdr Loading commit data...
dtd1.sax Loading commit data...
dtd1.sax2 Loading commit data...
dtd10 Loading commit data...
dtd10.rde Loading commit data...
dtd10.rdr Loading commit data...
dtd10.sax Loading commit data...
dtd10.sax2 Loading commit data...
dtd11 Loading commit data...
dtd11.rde Loading commit data...
dtd11.rdr Loading commit data...
dtd11.sax Loading commit data...
dtd11.sax2 Loading commit data...
dtd12 Loading commit data...
dtd12.rde Loading commit data...
dtd12.rdr Loading commit data...
dtd12.sax Loading commit data...
dtd12.sax2 Loading commit data...
dtd13 Loading commit data...
dtd13.rde Loading commit data...
dtd13.rdr Loading commit data...
dtd13.sax Loading commit data...
dtd13.sax2 Loading commit data...
dtd2 Loading commit data...
dtd2.rde Loading commit data...
dtd2.rdr Loading commit data...
dtd2.sax Loading commit data...
dtd2.sax2 Loading commit data...
dtd3 Loading commit data...
dtd3.rde Loading commit data...
dtd3.rdr Loading commit data...
dtd3.sax Loading commit data...
dtd3.sax2 Loading commit data...
dtd4 Loading commit data...
dtd4.rde Loading commit data...
dtd4.rdr Loading commit data...
dtd4.sax Loading commit data...
dtd4.sax2 Loading commit data...
dtd5 Loading commit data...
dtd5.rde Loading commit data...
dtd5.rdr Loading commit data...
dtd5.sax Loading commit data...
dtd5.sax2 Loading commit data...
dtd6 Loading commit data...
dtd6.rde Loading commit data...
dtd6.rdr Loading commit data...
dtd6.sax Loading commit data...
dtd6.sax2 Loading commit data...
dtd7 Loading commit data...
dtd7.rde Loading commit data...
dtd7.rdr Loading commit data...
dtd7.sax Loading commit data...
dtd7.sax2 Loading commit data...
dtd8 Loading commit data...
dtd8.rde Loading commit data...
dtd8.rdr Loading commit data...
dtd8.sax Loading commit data...
dtd8.sax2 Loading commit data...
dtd9 Loading commit data...
dtd9.rde Loading commit data...
dtd9.rdr Loading commit data...
dtd9.sax Loading commit data...
dtd9.sax2 Loading commit data...
ebcdic_566012.xml Loading commit data...
ebcdic_566012.xml.rde Loading commit data...
ebcdic_566012.xml.rdr Loading commit data...
ebcdic_566012.xml.sax Loading commit data...
ebcdic_566012.xml.sax2 Loading commit data...
emptycdata.xml Loading commit data...
emptycdata.xml.rde Loading commit data...
emptycdata.xml.rdr Loading commit data...
emptycdata.xml.sax Loading commit data...
emptycdata.xml.sax2 Loading commit data...
ent1 Loading commit data...
ent1.rde Loading commit data...
ent1.rdr Loading commit data...
ent1.sax Loading commit data...
ent1.sax2 Loading commit data...
ent10 Loading commit data...
ent10.rde Loading commit data...
ent10.rdr Loading commit data...
ent10.sax Loading commit data...
ent10.sax2 Loading commit data...
ent11 Loading commit data...
ent11.rde Loading commit data...
ent11.rdr Loading commit data...
ent11.sax Loading commit data...
ent11.sax2 Loading commit data...
ent12 Loading commit data...
ent12.rde Loading commit data...
ent12.rdr Loading commit data...
ent12.sax Loading commit data...
ent12.sax2 Loading commit data...
ent13 Loading commit data...
ent13.rde Loading commit data...
ent13.rdr Loading commit data...
ent13.sax Loading commit data...
ent13.sax2 Loading commit data...
ent2 Loading commit data...
ent2.rde Loading commit data...
ent2.rdr Loading commit data...
ent2.sax Loading commit data...
ent2.sax2 Loading commit data...
ent3 Loading commit data...
ent3.rde Loading commit data...
ent3.rdr Loading commit data...
ent3.sax Loading commit data...
ent3.sax2 Loading commit data...
ent4 Loading commit data...
ent4.rde Loading commit data...
ent4.rdr Loading commit data...
ent4.sax Loading commit data...
ent4.sax2 Loading commit data...
ent5 Loading commit data...
ent5.rde Loading commit data...
ent5.rdr Loading commit data...
ent5.sax Loading commit data...
ent5.sax2 Loading commit data...
ent6 Loading commit data...
ent6.rde Loading commit data...
ent6.rdr Loading commit data...
ent6.sax Loading commit data...
ent6.sax2 Loading commit data...
ent7 Loading commit data...
ent7.rde Loading commit data...
ent7.rdr Loading commit data...
ent7.sax Loading commit data...
ent7.sax2 Loading commit data...
ent8 Loading commit data...
ent8.rde Loading commit data...
ent8.rdr Loading commit data...
ent8.sax Loading commit data...
ent8.sax2 Loading commit data...
ent9 Loading commit data...
ent9.rde Loading commit data...
ent9.rdr Loading commit data...
ent9.sax Loading commit data...
ent9.sax2 Loading commit data...
ent_738805.xml Loading commit data...
ent_738805.xml.rde Loading commit data...
ent_738805.xml.rdr Loading commit data...
ent_738805.xml.sax Loading commit data...
ent_738805.xml.sax2 Loading commit data...
eve.xml Loading commit data...
eve.xml.rde Loading commit data...
eve.xml.rdr Loading commit data...
eve.xml.sax Loading commit data...
eve.xml.sax2 Loading commit data...
example.dtd Loading commit data...
intsubset.xml Loading commit data...
intsubset.xml.rde Loading commit data...
intsubset.xml.rdr Loading commit data...
intsubset.xml.sax Loading commit data...
intsubset.xml.sax2 Loading commit data...
intsubset2.xml Loading commit data...
intsubset2.xml.rde Loading commit data...
intsubset2.xml.rdr Loading commit data...
intsubset2.xml.sax Loading commit data...
intsubset2.xml.sax2 Loading commit data...
isolat1 Loading commit data...
isolat1.rde Loading commit data...
isolat1.rdr Loading commit data...
isolat1.sax Loading commit data...
isolat1.sax2 Loading commit data...
isolat2 Loading commit data...
isolat2.rde Loading commit data...
isolat2.rdr Loading commit data...
isolat2.sax Loading commit data...
isolat2.sax2 Loading commit data...
isolat3 Loading commit data...
isolat3.rde Loading commit data...
isolat3.rdr Loading commit data...
isolat3.sax Loading commit data...
isolat3.sax2 Loading commit data...
japancrlf.xml Loading commit data...
japancrlf.xml.rde Loading commit data...
japancrlf.xml.rdr Loading commit data...
japancrlf.xml.sax Loading commit data...
japancrlf.xml.sax2 Loading commit data...
ns Loading commit data...
ns.rde Loading commit data...
ns.rdr Loading commit data...
ns.sax Loading commit data...
ns.sax2 Loading commit data...
ns2 Loading commit data...
ns2.rde Loading commit data...
ns2.rdr Loading commit data...
ns2.sax Loading commit data...
ns2.sax2 Loading commit data...
ns3 Loading commit data...
ns3.rde Loading commit data...
ns3.rdr Loading commit data...
ns3.sax Loading commit data...
ns3.sax2 Loading commit data...
ns4 Loading commit data...
ns4.rde Loading commit data...
ns4.rdr Loading commit data...
ns4.sax Loading commit data...
ns4.sax2 Loading commit data...
ns5 Loading commit data...
ns5.rde Loading commit data...
ns5.rdr Loading commit data...
ns5.sax Loading commit data...
ns5.sax2 Loading commit data...
ns6 Loading commit data...
ns6.rde Loading commit data...
ns6.rdr Loading commit data...
ns6.sax Loading commit data...
ns6.sax2 Loading commit data...
ns7 Loading commit data...
ns7.rde Loading commit data...
ns7.rdr Loading commit data...
ns7.sax Loading commit data...
ns7.sax2 Loading commit data...
nsclean.xml Loading commit data...
nsclean.xml.rde Loading commit data...
nsclean.xml.rdr Loading commit data...
nsclean.xml.sax Loading commit data...
nsclean.xml.sax2 Loading commit data...
p3p Loading commit data...
p3p.rde Loading commit data...
p3p.rdr Loading commit data...
p3p.sax Loading commit data...
p3p.sax2 Loading commit data...
pi.xml Loading commit data...
pi.xml.rde Loading commit data...
pi.xml.rdr Loading commit data...
pi.xml.sax Loading commit data...
pi.xml.sax2 Loading commit data...
pi2.xml Loading commit data...
pi2.xml.rde Loading commit data...
pi2.xml.rdr Loading commit data...
pi2.xml.sax Loading commit data...
pi2.xml.sax2 Loading commit data...
rdf1 Loading commit data...
rdf1.rde Loading commit data...
rdf1.rdr Loading commit data...
rdf1.sax Loading commit data...
rdf1.sax2 Loading commit data...
rdf2 Loading commit data...
rdf2.rde Loading commit data...
rdf2.rdr Loading commit data...
rdf2.sax Loading commit data...
rdf2.sax2 Loading commit data...
slashdot.rdf Loading commit data...
slashdot.rdf.rde Loading commit data...
slashdot.rdf.rdr Loading commit data...
slashdot.rdf.sax Loading commit data...
slashdot.rdf.sax2 Loading commit data...
slashdot.xml Loading commit data...
slashdot.xml.rde Loading commit data...
slashdot.xml.rdr Loading commit data...
slashdot.xml.sax Loading commit data...
slashdot.xml.sax2 Loading commit data...
slashdot16.xml Loading commit data...
slashdot16.xml.rde Loading commit data...
slashdot16.xml.rdr Loading commit data...
slashdot16.xml.sax Loading commit data...
slashdot16.xml.sax2 Loading commit data...
svg1 Loading commit data...
svg1.rde Loading commit data...
svg1.rdr Loading commit data...
svg1.sax Loading commit data...
svg1.sax2 Loading commit data...
svg2 Loading commit data...
svg2.rde Loading commit data...
svg2.rdr Loading commit data...
svg2.sax Loading commit data...
svg2.sax2 Loading commit data...
svg3 Loading commit data...
svg3.rde Loading commit data...
svg3.rdr Loading commit data...
svg3.sax Loading commit data...
svg3.sax2 Loading commit data...
title.xml Loading commit data...
title.xml.rde Loading commit data...
title.xml.rdr Loading commit data...
title.xml.sax Loading commit data...
title.xml.sax2 Loading commit data...
tstblanks.xml Loading commit data...
tstblanks.xml.rde Loading commit data...
tstblanks.xml.rdr Loading commit data...
tstblanks.xml.sax Loading commit data...
tstblanks.xml.sax2 Loading commit data...
utf16bebom.xml Loading commit data...
utf16bebom.xml.rde Loading commit data...
utf16bebom.xml.rdr Loading commit data...
utf16bebom.xml.sax Loading commit data...
utf16bebom.xml.sax2 Loading commit data...
utf16bom.xml Loading commit data...
utf16bom.xml.rde Loading commit data...
utf16bom.xml.rdr Loading commit data...
utf16bom.xml.sax Loading commit data...
utf16bom.xml.sax2 Loading commit data...
utf16lebom.xml Loading commit data...
utf16lebom.xml.rde Loading commit data...
utf16lebom.xml.rdr Loading commit data...
utf16lebom.xml.sax Loading commit data...
utf16lebom.xml.sax2 Loading commit data...
utf8bom.xml Loading commit data...
utf8bom.xml.rde Loading commit data...
utf8bom.xml.rdr Loading commit data...
utf8bom.xml.sax Loading commit data...
utf8bom.xml.sax2 Loading commit data...
wap.xml Loading commit data...
wap.xml.rde Loading commit data...
wap.xml.rdr Loading commit data...
wap.xml.sax Loading commit data...
wap.xml.sax2 Loading commit data...
winblanks.xml Loading commit data...
winblanks.xml.rde Loading commit data...
winblanks.xml.rdr Loading commit data...
winblanks.xml.sax Loading commit data...
winblanks.xml.sax2 Loading commit data...
wml.xml Loading commit data...
wml.xml.rde Loading commit data...
wml.xml.rdr Loading commit data...
wml.xml.sax Loading commit data...
wml.xml.sax2 Loading commit data...
xhtml1 Loading commit data...
xhtml1.rde Loading commit data...
xhtml1.rdr Loading commit data...
xhtml1.sax Loading commit data...
xhtml1.sax2 Loading commit data...
xhtmlcomp Loading commit data...
xhtmlcomp.rde Loading commit data...
xhtmlcomp.rdr Loading commit data...
xhtmlcomp.sax Loading commit data...
xhtmlcomp.sax2 Loading commit data...
xml1 Loading commit data...
xml1.rde Loading commit data...
xml1.rdr Loading commit data...
xml1.sax Loading commit data...
xml1.sax2 Loading commit data...
xml2 Loading commit data...
xml2.rde Loading commit data...
xml2.rdr Loading commit data...
xml2.sax Loading commit data...
xml2.sax2 Loading commit data...