[jira] [Assigned] (XERCESC-2268) Regexp parser should bound cardinality

     [ https://issues.apache.org/jira/browse/XERCESC-2268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor reassigned XERCESC-2268:
-------------------------------------

    Assignee: Scott Cantor

> Regexp parser should bound cardinality
> --------------------------------------
>
>                 Key: XERCESC-2268
>                 URL: https://issues.apache.org/jira/browse/XERCESC-2268
>             Project: Xerces-C++
>          Issue Type: Improvement
>          Components: Regular Expressions
>    Affects Versions: 3.3.0
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>            Priority: Major
>             Fix For: 3.3.1
>
>
> The regexp parser doesn't have a cardinality limit applied to expressions, so of course a massive value unlikely to be encountered in practice in any schema can be impossible to handle in a practical amount of CPU time.
> As a quick fix, a compile time limit in a header can be added to bound the parser. A more extensive fix would require wider changes and a configuration setting in the API.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)