1
0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2026-01-29 23:42:18 +03:00
Nick Wellnhofer 1098c30a04 Fix user-after-free with xmllint --xinclude --dropdtd
The --dropdtd option can leave dangling pointers in entity reference
nodes. Make sure to skip these nodes when processing XIncludes.

This also avoids scanning entity declarations and even modifying
them inadvertently during XInclude processing.

Move from a block list to an allow list approach to avoid descending
into other node types that can't contain elements.

Fixes #237.
2021-04-22 19:44:26 +02:00
2020-03-08 17:41:53 +01:00
2019-09-30 18:04:38 +02:00
2021-03-01 20:56:40 +01:00
2021-03-20 22:05:33 +01:00
2017-11-27 14:35:29 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2017-11-27 14:35:29 +01:00
2020-03-08 17:41:53 +01:00
2020-07-23 20:46:42 +02:00
2014-10-13 16:06:21 +08:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2012-09-11 13:26:36 +08:00
2020-07-12 18:42:18 +02:00
2020-08-17 02:54:28 +02:00
2019-10-20 18:15:34 +02:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2012-09-11 13:26:36 +08:00
2019-09-30 18:05:45 +02:00
2019-09-30 18:04:38 +02:00
2021-04-22 11:57:32 +02:00
2020-08-17 01:17:39 +02:00
2019-09-30 18:04:38 +02:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-02-11 11:32:23 +01:00
2012-08-17 11:59:01 +08:00
2019-09-30 18:04:38 +02:00
2020-03-08 17:41:53 +01:00
2020-11-30 11:22:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2019-09-30 18:04:38 +02:00
2019-09-30 18:04:38 +02:00
2020-03-08 17:41:53 +01:00
2012-05-07 15:23:25 +08:00
2019-09-30 18:04:38 +02:00
2020-03-08 17:41:53 +01:00
2019-09-30 18:04:38 +02:00
2020-08-17 01:17:39 +02:00
2020-03-08 17:41:53 +01:00
2019-09-30 18:04:38 +02:00
2012-09-11 13:26:36 +08:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2019-09-30 18:04:38 +02:00
2012-09-11 13:26:36 +08:00
2019-09-30 18:04:38 +02:00
2012-09-11 13:26:36 +08:00
2012-09-11 13:26:36 +08:00
2019-09-30 18:04:38 +02:00
2019-09-25 15:27:45 +02:00
2012-09-11 13:26:36 +08:00
2018-11-29 22:11:59 +01:00
2012-09-11 13:26:36 +08:00
2019-09-30 18:04:38 +02:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-03-08 17:41:53 +01:00
2020-11-09 18:17:01 +01:00
2020-03-08 17:41:53 +01:00
2017-11-27 14:33:37 +01:00
2019-11-11 11:29:17 +01:00
2020-03-08 17:41:53 +01:00
2020-06-15 15:23:38 +02:00
2020-03-08 17:41:53 +01:00
2019-09-30 18:04:38 +02:00
2020-08-08 20:37:30 +02:00
2019-09-30 18:04:38 +02:00
2019-09-30 18:04:38 +02:00

                  XML toolkit from the GNOME project

Full documentation is available on-line at
    http://xmlsoft.org/

This code is released under the MIT Licence see the Copyright file.

To build on an Unixised setup:
   ./configure ; make ; make install
   if the ./configure file does not exist, run ./autogen.sh instead.
To build on Windows:
   see instructions on win32/Readme.txt

To assert build quality:
   on an Unixised setup:
      run make tests
   otherwise:
       There is 3 standalone tools runtest.c runsuite.c testapi.c, which
       should compile as part of the build or as any application would.
       Launch them from this directory to get results, runtest checks 
       the proper functioning of libxml2 main APIs while testapi does
       a full coverage check. Report failures to the list.

To report bugs, follow the instructions at: 
  http://xmlsoft.org/bugs.html

A mailing-list xml@gnome.org is available, to subscribe:
    http://mail.gnome.org/mailman/listinfo/xml

The list archive is at:
    http://mail.gnome.org/archives/xml/

All technical answers asked privately will be automatically answered on
the list and archived for public access unless privacy is explicitly
required and justified.

Daniel Veillard

$Id$
Description
Анализатор XML и инструментарий
Readme 52 MiB
Languages
C 85.3%
HTML 7%
Python 4%
POV-Ray SDL 1.2%
CMake 0.6%
Other 1.8%