[
https://issues.apache.org/jira/browse/XERCESC-2266?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Scott Cantor resolved XERCESC-2266.
-----------------------------------
Assignee: Scott Cantor
Resolution: Fixed
Contributed fixes applied, commit 9ca9ee820dbf12ded5da15411742d41ba80a8cdb
> Bugs in grammar deserialization from cache
> ------------------------------------------
>
> Key: XERCESC-2266
> URL: https://issues.apache.org/jira/browse/XERCESC-2266
> Project: Xerces-C++
> Issue Type: Bug
> Affects Versions: 3.3.0
> Reporter: Scott Cantor
> Assignee: Scott Cantor
> Priority: Major
> Fix For: 3.3.1
>
>
> Various bugs identified in the grammar cache that can be exploited to cause
> type confusion and other issues if the binary grammar representations on disk
> were manipulated to exploit them. Only a trusted actor could perform such
> manipulation, not through XML or DTD inputs.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
