[jira] [Created] (XERCESC-2268) Regexp parser should bound cardinality

Scott Cantor created XERCESC-2268:
-------------------------------------

             Summary: Regexp parser should bound cardinality
                 Key: XERCESC-2268
                 URL: https://issues.apache.org/jira/browse/XERCESC-2268
             Project: Xerces-C++
          Issue Type: Improvement
          Components: Regular Expressions
    Affects Versions: 3.3.0
            Reporter: Scott Cantor
             Fix For: 3.3.1


The regexp parser doesn't have a cardinality limit applied to expressions, so of course a massive value unlikely to be encountered in practice in any schema can be impossible to handle in a practical amount of CPU time.

As a quick fix, a compile time limit in a header can be added to bound the parser. A more extensive fix would require wider changes and a configuration setting in the API.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)