[
https://issues.apache.org/jira/browse/XERCESJ-1702?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Elliotte Rusty Harold resolved XERCESJ-1702.
--------------------------------------------
Resolution: Won't Fix
This looks like the well known billion laughs attack, with the normal
mitigation. I don't see anything new here. If there's some bug I'm missing
beyond that, please elaborate.
> Parsing XML
> ------------
>
> Key: XERCESJ-1702
> URL: https://issues.apache.org/jira/browse/XERCESJ-1702
> Project: Xerces2-J
> Issue Type: Improvement
> Affects Versions: 2.12.0
> Reporter: Slava G
> Priority: Major
> Attachments: 1_e3e13f0e-7085-4000-a558-5d255ed7a944.xml,
> image-2018-09-16-15-42-10-121.png
>
>
> Hi,
> When I'm trying to parse XML document using :
> _DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();_
> _DocumentBuilder builder = factory.newDocumentBuilder();_
> _builder.parse(File)_
>
> The parsing is stuck in infinite loop:
> {{XMLDocumentScannerImpl(XMLScanner).scanAttributeValue(XMLString, XMLString,
> String, boolean, String) line: not available }}
> {{
> XMLDocumentScannerImpl(XMLDocumentFragmentScannerImpl).scanAttribute(XMLAttributes)
> line: not available }}
> {{ XMLDocumentScannerImpl(XMLDocumentFragmentScannerImpl).scanStartElement()
> line: not available }}
> {{ XMLDocumentScannerImpl$ContentDispatcher.scanRootElementHook() line: not
> available }}
> {{
> XMLDocumentScannerImpl$ContentDispatcher(XMLDocumentFragmentScannerImpl$FragmentContentDispatcher).dispatch(boolean)
> line: not available }}
> {{
> XMLDocumentScannerImpl(XMLDocumentFragmentScannerImpl).scanDocument(boolean)
> line: not available }}
> {{ XIncludeAwareParserConfiguration(XML11Configuration).parse(boolean) line:
> not available }}
> {{ XIncludeAwareParserConfiguration(XML11Configuration).parse(XMLInputSource)
> line: not available }}
> {{ DOMParser(XMLParser).parse(XMLInputSource) line: not available }}
> {{ DOMParser.parse(InputSource) line: not available }}
> {{ DocumentBuilderImpl.parse(InputSource) line: not available }}
> {{ DocumentBuilderImpl(DocumentBuilder).parse(File) line: 205}}
>
> Please see attached XML file that cause this issue.
> Thanks
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
