[jira] [Created] (SANTUARIO-466) Verify signature on big xml using StAX produces OutOfMemory exception

["Gašper Rajšek (JIRA)" <ji...@apache.org>]

Gašper Rajšek created SANTUARIO-466:
---------------------------------------

             Summary: Verify signature on big xml using StAX produces OutOfMemory exception
                 Key: SANTUARIO-466
                 URL: https://issues.apache.org/jira/browse/SANTUARIO-466
             Project: Santuario
          Issue Type: Bug
          Components: Java
    Affects Versions: Java 2.0.8
         Environment: Windows 10 Pro (x64, version 1703)

Testing with JUnit using java version "1.6.0"
Java(TM) SE Runtime Environment (build pwa6460_26sr8fp35ifix-20161110_01(SR8 FP35+IV90630+IV90578))
IBM J9 VM (build 2.6, JRE 1.6.0 Windows 8 amd64-64 Compressed References 20161005_321286 (JIT enabled, AOT enabled)
J9VM - R26_Java626_SR8_20161005_1305_B321286
JIT  - tr.r11_20161001_125404
GC   - R26_Java626_SR8_20161005_1305_B321286_CMPRSS
J9CL - 20161005_321286)
JCL  - 20161020_01
            Reporter: Gašper Rajšek
            Assignee: Colm O hEigeartaigh
            Priority: Blocker
         Attachments: leak_suspect.png, xml_structure_sample.xml

I'm trying to verify xml signature for an xml of size around 900 MB using the code from [https://github.com/coheigea/testcases/tree/master/apache/santuario/santuario-xml-signature/src/test/java/org/apache/coheigea/santuario/xmlsignature]. After running the code I get OutOfMemory exception.

In the attachments is image from IBM HeapAnalyzer where you can see the leak suspect (red border), file XMLSecurityInputProcessor.java. The problem is in the class InternalBufferProcessor which buffers all xml events.

For testing purposes I tried with action XMLSecurityConstants.ENCRYPT which skips the buffering part and the code completes with no exception.

In the attachments is also a sample of my xml structure (if it matters).




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)