[jira] [Resolved] (XERCESC-2268) Regexp parser should bound cardinality

     [ https://issues.apache.org/jira/browse/XERCESC-2268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved XERCESC-2268.
-----------------------------------
    Resolution: Implemented

Added, commit 5a5bc2b8581806c35052c523d95efeaf21c122ca

> Regexp parser should bound cardinality
> --------------------------------------
>
>                 Key: XERCESC-2268
>                 URL: https://issues.apache.org/jira/browse/XERCESC-2268
>             Project: Xerces-C++
>          Issue Type: Improvement
>          Components: Regular Expressions
>    Affects Versions: 3.3.0
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>            Priority: Major
>             Fix For: 3.3.1
>
>
> The regexp parser doesn't have a cardinality limit applied to expressions, so of course a massive value unlikely to be encountered in practice in any schema can be impossible to handle in a practical amount of CPU time.
> As a quick fix, a compile time limit in a header can be added to bound the parser. A more extensive fix would require wider changes and a configuration setting in the API.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)