[Patches] [ python-Patches-1173998 ] Python crashes in pyexpat.c if malformed XML is parsed

SourceForge.net noreply at sourceforge.net
Thu Mar 31 15:00:05 CEST 2005


Patches item #1173998, was opened at 2005-03-31 12:59
Message generated for change (Comment added) made by pdecat
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=1173998&group_id=5470

Category: Core (C code)
Group: Python 2.3
Status: Open
Resolution: Works For Me
Priority: 7
Submitted By: pdecat (pdecat)
Assigned to: Nobody/Anonymous (nobody)
Summary: Python crashes in pyexpat.c if malformed XML is parsed

Initial Comment:
If a malformed XML file (containing non unicode
characters) is parsed with pyexpat, python crashes.

Most details on request.

----------------------------------------------------------------------

>Comment By: pdecat (pdecat)
Date: 2005-03-31 15:00

Message:
Logged In: YES 
user_id=1210681

STRING_CONV_FUNC returns NULL if the string is contains
non-ascii and non-unicode characters.

----------------------------------------------------------------------

Comment By: pdecat (pdecat)
Date: 2005-03-31 14:18

Message:
Logged In: YES 
user_id=1210681

Maybe security related, as it can lead to denial of service:
it crashes a Zope server using the ParsedXML product simply
by uploading a malformed XML file.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=1173998&group_id=5470


More information about the Patches mailing list