Jeff/Hasnain,

An issue has been created to track the problem:

  https://github.com/adjacentlink/emane/issues/1

and a feature branch has been created with the candidate solution:

 feature/emanegentransportxml

--
Steven Galgano
www.adjacentlink.com


On 06/02/2014 06:04 PM, Ahrenholz, Jeffrey M wrote:
> EMANE (0.8.1, 0.9.1) may stop working for you after installing updates to 
> libxml2 -- as pointed out by Hasnain on the emane-users mailing list (below).
> 
> Here is a patch to emanegentransportxml that will turn off XML validation:
> https://code.google.com/p/coreemu/issues/detail?id=247
> 
> -Jeff
> 
>> -----Original Message-----
>> From: [email protected] [mailto:emane-users-
>> [email protected]] On Behalf Of Hasnain Lakhani
>> Sent: Tuesday, May 20, 2014 1:09 PM
>> To: [email protected]
>> Subject: [emane-users] emanegentransportxml broken with latest libxml2 update
>>
>> Hi,
>>
>> Our tests started failing on Friday. We use EMANE 0.7.4.
>>
>> Debugging showed that EMANE uses external parameters entities in the XML
>> files; specifically the DTD links (I believe). We were getting errors on
>> files that worked perfectly fine previously. The errors would be of the
>> following form:
>>
>>
>>      validity error : No declaration for element param
>>      validity error : No declaration for attribute name of element param
>>      validity error : No declaration for attribute value of element param
>>
>>
>> libxml2 had a security update on Thursday:
>>
>> libxml2 (2.7.8.dfsg-5.1ubuntu4.7) precise-security; urgency=medium
>>
>>   * SECURITY UPDATE: resource exhaustion via external parameter entities
>>     - parser.c: do not fetch external parameter entities.
>>     -
>> https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e0
>> 17260c854df
>>     - CVE-2014-0191
>>  -- Marc Deslauriers <email address hidden>   Thu, 08 May 2014 14:30:38 -0400
>> After downgrading libxml down to 2.7.8.dfsg-5.1ubuntu4.6 we noticed that
>> emanegentransportxml works fine again.
>>
>> This behaviour should be fixed so that it works again with the latest
>> libxml2. I'll be happy to provide further information if needed.
>>
>> Hasnain
> 
> _______________________________________________
> core-users mailing list
> [email protected]
> http://pf.itd.nrl.navy.mil/mailman/listinfo/core-users
> 
_______________________________________________
emane-users mailing list
[email protected]
http://pf.itd.nrl.navy.mil/mailman/listinfo/emane-users

Reply via email to