Scott Cantor created XERCESC-2268:
-------------------------------------
Summary: Regexp parser should bound cardinality
Key: XERCESC-2268
URL: https://issues.apache.org/jira/browse/XERCESC-2268
Project: Xerces-C++
Issue Type: Improvement
Components: Regular Expressions
Affects Versions: 3.3.0
Reporter: Scott Cantor
Fix For: 3.3.1
The regexp parser doesn't have a cardinality limit applied to expressions, so
of course a massive value unlikely to be encountered in practice in any schema
can be impossible to handle in a practical amount of CPU time.
As a quick fix, a compile time limit in a header can be added to bound the
parser. A more extensive fix would require wider changes and a configuration
setting in the API.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
