Scott Cantor created XERCESC-2266:
-------------------------------------
Summary: Bugs in grammar deserialization from cache
Key: XERCESC-2266
URL: https://issues.apache.org/jira/browse/XERCESC-2266
Project: Xerces-C++
Issue Type: Bug
Affects Versions: 3.3.0
Reporter: Scott Cantor
Fix For: 3.3.1
Various bugs identified in the grammar cache that can be exploited to cause
type confusion and other issues if the binary grammar representations on disk
were manipulated to exploit them. Only a trusted actor could perform such
manipulation, not through XML or DTD inputs.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
