[jira] [Resolved] (XERCESC-2266) Bugs in grammar deserialization from cache
"Scott Cantor (Jira)" <[email protected]>
| Newsgroups | gmane.text.xml.xerces-c.devel |
|---|---|
| Message-ID | <[email protected]> |
[ https://issues.apache.org/jira/browse/XERCESC-2266?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Scott Cantor resolved XERCESC-2266.
-----------------------------------
Assignee: Scott Cantor
Resolution: Fixed
Contributed fixes applied, commit 9ca9ee820dbf12ded5da15411742d41ba80a8cdb
> Bugs in grammar deserialization from cache
> ------------------------------------------
>
> Key: XERCESC-2266
> URL: https://issues.apache.org/jira/browse/XERCESC-2266
> Project: Xerces-C++
> Issue Type: Bug
> Affects Versions: 3.3.0
> Reporter: Scott Cantor
> Assignee: Scott Cantor
> Priority: Major
> Fix For: 3.3.1
>
>
> Various bugs identified in the grammar cache that can be exploited to cause type confusion and other issues if the binary grammar representations on disk were manipulated to exploit them. Only a trusted actor could perform such manipulation, not through XML or DTD inputs.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)