lib/libxml2
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2025-10-24 13:33:01 +03:00
Code Activity

xinclude: Expand comment about fuzz timeouts

Browse Source
This commit is contained in:
Nick Wellnhofer
2023-09-30 15:47:46 +02:00
parent fa48187304
commit 80a0580f23
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
xinclude.c
View File

@@ -1841,6 +1841,20 @@ xmlXIncludeExpandNode(xmlXIncludeCtxtPtr ctxt, xmlNodePtr node) {
* The XInclude engine offers no protection against exponential * The XInclude engine offers no protection against exponential
* expansion attacks similar to "billion laughs". Avoid timeouts by * expansion attacks similar to "billion laughs". Avoid timeouts by
* limiting the total number of replacements when fuzzing. * limiting the total number of replacements when fuzzing.
*
* Unfortuately, a single XInclude can already result in quadratic
* behavior:
*
* <doc xmlns:xi="http://www.w3.org/2001/XInclude">
* <xi:include xpointer="xpointer(//e)"/>
* <e>
* <e>
* <e>
* <!-- more nested elements -->
* </e>
* </e>
* </e>
* </doc>
*/ */
if (ctxt->incTotal >= 20) if (ctxt->incTotal >= 20)
return(NULL); return(NULL);