lib/libxml2
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2025-07-29 11:41:22 +03:00
Code Activity

removed an unprotedted debug message Aleksi Suhonen put a guard against

Browse Source 
* python/libxml.c: removed an unprotedted debug message Aleksi Suhonen
* parser.c: put a guard against infinite document depth, basically
  trying to avoid another kind of DoS attack.
* relaxng.c: some code w.r.t. nameClasses
Daniel
This commit is contained in:
Daniel Veillard
2003-02-03 08:52:58 +00:00
parent fc1a4503fb
commit 3b2e4e1c14
4 changed files with 176 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
parser.c
View File

@ -76,6 +76,14 @@
#include <zlib.h>
#endif
/**
* MAX_DEPTH:
*
* arbitrary depth limit for the XML documents that we allow to
* process. This is not a limitation of the parser but a safety
* boundary feature.
*/
#define MAX_DEPTH 1024
#define XML_PARSER_BIG_BUFFER_SIZE 300
#define XML_PARSER_BUFFER_SIZE 100
@ -191,6 +199,18 @@ nodePush(xmlParserCtxtPtr ctxt, xmlNodePtr value)
return (0);
}
}
#ifdef MAX_DEPTH
if (ctxt->nodeNr > MAX_DEPTH) {
if ((ctxt->sax != NULL) && (ctxt->sax->error != NULL))
ctxt->sax->error(ctxt->userData,
"Excessive depth in document: change MAX_DEPTH = %d\n",
MAX_DEPTH);
ctxt->wellFormed = 0;
ctxt->instate = XML_PARSER_EOF;
if (ctxt->recovery == 0) ctxt->disableSAX = 1;
return(0);
}
#endif
ctxt->nodeTab[ctxt->nodeNr] = value;
ctxt->node = value;
return (ctxt->nodeNr++);