You are viewing a plain text version of this content. The canonical link for it is here.
Posted to j-dev@xerces.apache.org by "Michael Glavassevich (JIRA)" <xe...@xml.apache.org> on 2007/11/15 05:29:44 UTC

[jira] Updated: (XERCESJ-1280) XML Schema: XPath parser gets stuck in infinite loop for some invalid XPath expressions

     [ https://issues.apache.org/jira/browse/XERCESJ-1280?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Glavassevich updated XERCESJ-1280:
------------------------------------------

    Summary: XML Schema: XPath parser gets stuck in infinite loop for some invalid XPath expressions  (was: XML Schema: XPath parser gets stuck in infinite loop for some valid XPath expressions)

> XML Schema: XPath parser gets stuck in infinite loop for some invalid XPath expressions
> ---------------------------------------------------------------------------------------
>
>                 Key: XERCESJ-1280
>                 URL: https://issues.apache.org/jira/browse/XERCESJ-1280
>             Project: Xerces2-J
>          Issue Type: Bug
>          Components: XML Schema Structures
>    Affects Versions: 2.9.1
>            Reporter: Michael Glavassevich
>            Assignee: Michael Glavassevich
>
> Xerces' schema loader hangs in the XPath parser while attempting to process the following invalid schema:
> <?xml version="1.0" encoding="UTF-8"?>
> <schema xmlns="http://www.w3.org/2001/XMLSchema">
>   <complexType name="NewComplexType">
>     <sequence>
>       <element name="NewElement" type="string">
>         <key name="abc">
>           <selector xpath="\"></selector>
>         </key>
>       </element>
>     </sequence>
>   </complexType>
> </schema>
> There's a large case block in the XPath scanner which is missing a "default:" which causes it to loop forever on the same character in the invalid expression without ever progressing to the next character in the string (or breaking out of the loop if it's at the end of the string).
> See https://bugs.eclipse.org/bugs/show_bug.cgi?id=209733 where this bug was first reported.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: j-dev-unsubscribe@xerces.apache.org
For additional commands, e-mail: j-dev-help@xerces.apache.org