Re: BUG #15420: Server crash. Segmentation fault when parsing xml file

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Andrew Gierth <andrew(at)tao11(dot)riddles(dot)org(dot)uk>
Cc: Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>, Sergey Mirvoda <sergey(at)mirvoda(dot)com>, Andrey Borodin <x4mmm(at)yandex-team(dot)ru>, Andrew Borodin <borodin(at)octonica(dot)com>, Michael Paquier <michael(at)paquier(dot)xyz>, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #15420: Server crash. Segmentation fault when parsing xml file
Date: 2018-10-05 14:00:18
Message-ID: 4405.1538748018@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Andrew Gierth <andrew(at)tao11(dot)riddles(dot)org(dot)uk> writes:
> Interestingly, the FreeBSD package build of PG now disables XML by
> default on account of libxml2's very poor security record.

It's hard to argue with their choice.

> We need a better XML library :-(

Is there one anywhere? (I think writing our own is right out.)

Should we be officially deprecating XML facilities and telling people
to head towards JSON? There at least we have control of the quality
of implementation ...

regards, tom lane

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2018-10-05 14:08:57 Re: BUG #15421: Error: LIKE pattern must not end with escape character
Previous Message Andrew Gierth 2018-10-05 13:58:59 Re: BUG #15420: Server crash. Segmentation fault when parsing xml file