[Patches] [ python-Patches-1118602 ] Fix crash in xmlprase_GetInputContext in pyexpat.c

[SourceForge.net]

Patches item #1118602, was opened at 2005-02-08 14:25
Message generated for change (Comment added) made by loewis
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=1118602&group_id=5470

Category: Modules
Group: None
>Status: Closed
>Resolution: Accepted
Priority: 7
Submitted By: Mathieu Fenniak (laotzu0)
Assigned to: Martin v. Löwis (loewis)
Summary: Fix crash in xmlprase_GetInputContext in pyexpat.c

Initial Comment:
I've run across a couple of cases where pyexpat will crash in 
xmlparse_GetInputContext.  The problem stems from the 'offset' 
variable that can be returned from XML_GetInputContext - if it is 
non-zero, then the size being passed into 
PyString_FromStringAndSize is incorrectly too large.  The offset 
should be subtracted from that size.

I cannot provide a test case to reproduce this - my attempts to 
create a minimal test case do not crash.  The application I'm 
developing is using simpleTAL and when a large XML comment 
(multiline Javascript) is entered in the software templates it will 
often crash.  This seems to only occur on a Python installation 
where the module xml.sax.saxlib is not present (i.e. PyXML is not 
installed) - I'm not sure why this is.

----------------------------------------------------------------------

>Comment By: Martin v. Löwis (loewis)
Date: 2005-03-04 15:41

Message:
Logged In: YES 
user_id=21627

Thanks for the patch, applied as

pyexpat.c 2.90 and 2.89.2.1
NEWS 1.1264 and 1.1193.2.31

It turns out that this was essentially a duplicate of 925152.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=1118602&group_id=5470