The following comment has been added to this issue:
Author: Khaled Noaman
Created: Wed, 11 Aug 2004 2:16 PM
Body:
Fix is in CVS. Would you please verify?
---------------------------------------------------------------------
View this comment:
http://issues.apache.org/jira/browse/XERCESC-1251?page=comments#action_37189
---------------------------------------------------------------------
View the issue:
http://issues.apache.org/jira/browse/XERCESC-1251
Here is an overview of the issue:
---------------------------------------------------------------------
Key: XERCESC-1251
Summary: makeContentModel in ComplexTypeInfo could crash Xerces when creating a
MixedContentModel
Type: Bug
Status: Unassigned
Priority: Critical
Project: Xerces-C++
Components:
Validating Parser (Schema) (Xerces 1.5 or up only)
Versions:
2.5.0
Assignee:
Reporter: Andrew Fang
Created: Tue, 10 Aug 2004 8:14 AM
Updated: Wed, 11 Aug 2004 2:16 PM
Environment: Windows Xp Sp1
Description:
In makeContentModel method in complextypeinfo.cpp, the following code could crash
Xerces:
aSpecNode = new (fMemoryManager) ContentSpecNode(*fContentSpec);
aSpecNode = convertContentSpecTree(aSpecNode, checkUPA);
retModel = buildContentModel(aSpecNode);
delete aSpecNode;
In the case when buildContentModel creates a MixedContentModel model, the statement
"delete aSpecNode" freed fChildren in MixedContentModel. Later access to fChildren
could crash Xerces.
We ran into some crashes due to this bug. One possible fix is to create a QName in the
class MixedContentModel:
line 212
for (unsigned int index = 0; index < fCount; index++) {
fChildren[index] = new QName(*children.elementAt(index));
fChildTypes[index] = childTypes.elementAt(index);
}
---------------------------------------------------------------------
JIRA INFORMATION:
This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
If you want more information on JIRA, or have a bug to report see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
