*** This bug is a security vulnerability ***

Public security bug reported:

The following query causes an assertion failure at line 3465 in
node_items.cpp

import schema namespace s = "http://www.xqdoc.org/1.0";;

let $hostInfo :=<xqdoc xmlns="http://www.xqdoc.org/1.0";>
    <control>
        <date><?processinginstruction aaa?>TS4J<!-- -->5UJ</date>
        <version>N/A</version>
    </control>
    <module type="library">
        <uri>DGQEb8Q</uri>
    </module>
</xqdoc>

return
  validate { $hostInfo }

If i understand correctly the validator should construct only one text
child for <date> with value "TSF4J5UJ"

** Affects: zorba
     Importance: High
     Assignee: Cezar Andrei (cezar-andrei)
         Status: New

** Visibility changed to: Public

** Changed in: zorba
   Importance: Undecided => High

** Changed in: zorba
     Assignee: (unassigned) => Cezar Andrei (cezar-andrei)

-- 
You received this bug notification because you are a member of Zorba
Coders, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/857842

Title:
  Assertion failed with simple content element with comments

Status in Zorba - The XQuery Processor:
  New

Bug description:
  The following query causes an assertion failure at line 3465 in
  node_items.cpp

  import schema namespace s = "http://www.xqdoc.org/1.0";;

  let $hostInfo :=<xqdoc xmlns="http://www.xqdoc.org/1.0";>
      <control>
          <date><?processinginstruction aaa?>TS4J<!-- -->5UJ</date>
          <version>N/A</version>
      </control>
      <module type="library">
          <uri>DGQEb8Q</uri>
      </module>
  </xqdoc>

  return
    validate { $hostInfo }

  If i understand correctly the validator should construct only one text
  child for <date> with value "TSF4J5UJ"

To manage notifications about this bug go to:
https://bugs.launchpad.net/zorba/+bug/857842/+subscriptions

-- 
Mailing list: https://launchpad.net/~zorba-coders
Post to     : zorba-coders@lists.launchpad.net
Unsubscribe : https://launchpad.net/~zorba-coders
More help   : https://help.launchpad.net/ListHelp

Reply via email to