-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi, Bill Fenner did a talk today at the IETF on xml2rfc, and briefly
showed XXE. I downloaded the standard edition to my Debian laptop.
I had kaffe installed, and it didn't work with that:
marajade-[/sandel/src/xxe-std-3_1_0] mcr 1132 %bin/xxe&
[2] 30717
marajade-[/sandel/src/xxe-std-3_1_0] mcr 1133 %java.lang.NullPointerException
at com.xmlmind.xmledit.util.FileUtil.fileToURL (FileUtil.java:168)
at com.xmlmind.xmleditapp.start.Start.doScanAddonDir (Start.java:239)
at com.xmlmind.xmleditapp.start.Start.doScanAddonDir (Start.java:202)
at com.xmlmind.xmleditapp.start.Start.scanAddonDir (Start.java:181)
at com.xmlmind.xmleditapp.start.Start.start (Start.java:452)
at com.xmlmind.xmleditapp.start.Start.main (Start.java:707)
I grabbed jre-1_5_0_06-linux-i586 from java.sun.com, extracted that
(I wish Sun would get a clue about their license...), and was able to
start XXE. While waiting to find out where to grab Bill's plug-in for
doing RFC2629, I tried opening a middle-sized docbook format document
that I had. (After adding the docbook plugin)
The document is available at:
www.sandelman.ca/tmp/pluto.8.xml
XXE just hangs loading it. Busy icon for 20 minutes.
While I thought the input validated, it turns out that it doesn't.
(I must have screwed it up recently... thus why I should use XXE...)
Just thought you should know.
- --
] ON HUMILITY: to err is human. To moo, bovine. | firewalls [
] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[
] mcr at xelerance.com http://www.sandelman.ottawa.on.ca/mcr/ |device
driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Finger me for keys
iQEVAwUBRB3THoCLcPvd0N1lAQJtNAf9F2K6aQfrWuIBaPEChkTp/AUzFCYnN5Ha
KCOONsqroAu/0q2E0NkTfV/qFX6Q639QhuDJnrTivvjw7Cq59tjGUxbiSQJ79KDK
m7khQvQDlv4xqYjASsZNh7oy453BAhobatsY9D75ziA4zgM7e6f2OZODR+q8OeqN
DvEEW60MoLYt6Kr248oekT3QZSh53omdk45c84ihM9Ymzb0Gd4eLZ/Xj0ppaCGW+
Q9wkmRawd+h465pUxoaRWNgI5iGKYkktQmpJnKfHQKKGaOKPCusKrXwfIHEM8ms6
FGHyCNQIlGNAFUiv5inPee7+TvG7Fg41vUq1BY2E03PP9CSRLGPQDw==
=qKIe
-----END PGP SIGNATURE-----
