[
https://issues.apache.org/jira/browse/XERCESC-2268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Scott Cantor reassigned XERCESC-2268:
-------------------------------------
Assignee: Scott Cantor
> Regexp parser should bound cardinality
> --------------------------------------
>
> Key: XERCESC-2268
> URL: https://issues.apache.org/jira/browse/XERCESC-2268
> Project: Xerces-C++
> Issue Type: Improvement
> Components: Regular Expressions
> Affects Versions: 3.3.0
> Reporter: Scott Cantor
> Assignee: Scott Cantor
> Priority: Major
> Fix For: 3.3.1
>
>
> The regexp parser doesn't have a cardinality limit applied to expressions, so
> of course a massive value unlikely to be encountered in practice in any
> schema can be impossible to handle in a practical amount of CPU time.
> As a quick fix, a compile time limit in a header can be added to bound the
> parser. A more extensive fix would require wider changes and a configuration
> setting in the API.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]