[jira] [Created] (XERCESC-2259) Segmentation fauilt in xerces parse when fgXercesDOMHasPSVIInfo is true

"Lara Blatchford (Jira)" <[email protected]> Tue, 14 Jan 2025 19:55:00 +0000 (UTC)
Newsgroups gmane.text.xml.xerces-c.devel
Message-ID <[email protected]>
Lara Blatchford created XERCESC-2259:
----------------------------------------

             Summary: Segmentation fauilt in xerces parse when fgXercesDOMH=
asPSVIInfo is true
                 Key: XERCESC-2259
                 URL: https://issues.apache.org/jira/browse/XERCESC-2259
             Project: Xerces-C++
          Issue Type: Bug
          Components: DOM
    Affects Versions: 3.2.5
         Environment: RHEL 9, x86_64
            Reporter: Lara Blatchford
         Attachments: xerces_parse_crash.zip

Our application validates against a specific set of schemas, and when a new=
 schema is added to the no namespace schema list, xerces segfaults with the=
 following stack trace:
{quote}{{#0 =C2=A00x00007fd8817b2bca _ZN11xercesc_3_212IGXMLScanner12buildA=
ttListERKNS_11RefVectorOfINS_12KVStringPairEEEmPNS_14XMLElementDeclERNS1_IN=
S_7XMLAttrEEE (libxerces-c-3.2.so + 0x1b2bca)}}
{{#1 =C2=A00x00007fd8817abff0 _ZN11xercesc_3_212IGXMLScanner14scanStartTagN=
SERb (libxerces-c-3.2.so + 0x1abff0)}}
{{#2 =C2=A00x00007fd8817ad9e7 _ZN11xercesc_3_212IGXMLScanner11scanContentEv=
 (libxerces-c-3.2.so + 0x1ad9e7)}}
{{#3 =C2=A00x00007fd8817adc48 _ZN11xercesc_3_212IGXMLScanner12scanDocumentE=
RKNS_11InputSourceE (libxerces-c-3.2.so + 0x1adc48)}}
{{#4 =C2=A00x00007fd8817d0b5c _ZN11xercesc_3_210XMLScanner12scanDocumentEPK=
Ds (libxerces-c-3.2.so + 0x1d0b5c)}}
{{#5 =C2=A00x00007fd8817d4842 _ZN11xercesc_3_210XMLScanner12scanDocumentEPK=
c (libxerces-c-3.2.so + 0x1d4842)}}
{{#6 =C2=A00x00007fd8817e7a2e _ZN11xercesc_3_217AbstractDOMParser5parseEPKc=
 (libxerces-c-3.2.so + 0x1e7a2e)}}
{{#7 =C2=A00x00007fd8817f0fc6 _ZN11xercesc_3_215DOMLSParserImpl8parseURIEPK=
c (libxerces-c-3.2.so + 0x1f0fc6)}}
{{#8 =C2=A00x0000000000403d20 main (xercesparse + 0x3d20)}}
{{#9 =C2=A00x00007fd880e295d0 __libc_start_call_main (libc.so.6 + 0x295d0)}=
}
{{#10 0x00007fd880e29680 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x29680=
)}}
{{=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 #11 0x00000000004=
03ef5 _start (xercesparse + 0x3ef5)}}{quote}
The crash does not occur if the new schema is removed from the schema list,=
 or if fgXercesDOMHasPSVIInfo is set to false =E2=80=93 however, operationa=
lly this parameter must be set to true.

The attached zip contains source for a small test application that demonstr=
ates the crash.=C2=A0 The schema that introduced the crash when added is sc=
hema_xercescrash.xsd, and an example XML file to be validated is fs_xercesc=
rash.xml.=C2=A0 The poi.xsd schema is included in the namespace schema list=
 when the crash occurs.=C2=A0 The crashdemo script shows how the test app i=
s invoked to demonstrate the crash.

[^xerces_parse_crash.zip]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)