Re: BUG #15420: Server crash. Segmentation fault when parsing xml file

From: Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
To: Andrew Gierth <andrew(at)tao11(dot)riddles(dot)org(dot)uk>
Cc: Sergey Mirvoda <sergey(at)mirvoda(dot)com>, Andrey Borodin <x4mmm(at)yandex-team(dot)ru>, Andrew Borodin <borodin(at)octonica(dot)com>, Michael Paquier <michael(at)paquier(dot)xyz>, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #15420: Server crash. Segmentation fault when parsing xml file
Date: 2018-10-05 13:46:04
Message-ID: CAFj8pRB04PJaEj8X1BHtZawwzmAFEcS9z=UjuBRO1BmzQSFPKg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

pá 5. 10. 2018 v 15:39 odesílatel Andrew Gierth <andrew(at)tao11(dot)riddles(dot)org(dot)uk>
napsal:

> >>>>> "Pavel" == Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> writes:
>
> >> I don't yet know about 2.9.8, but the crash with 2.9.4 is a bug in
> >> libxml2's error handling which has _nothing to do_ with which API
> >> you use. Read the analysis I posted.
>
> Pavel> ok. Probably there are more than one issue. 1. crash, 2. raising
> Pavel> huge input lookup, maybe other.
>
> It's certainly possible that the error that provokes the crash is
> libxml2 complaining that the tag name is too long or whatever.
>
> Pavel> libxml2 is great library,
>
> HAH. From reading the code, as I have been for much of today, it's
> pretty damn bad.
>
> Interestingly, the FreeBSD package build of PG now disables XML by
> default on account of libxml2's very poor security record. We need a
> better XML library :-(
>

Is some other with good licence? And with XPath support?

Pavel

>
> --
> Andrew.
>

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Sergey Mirvoda 2018-10-05 13:53:30 Re: BUG #15420: Server crash. Segmentation fault when parsing xml file
Previous Message Andrew Gierth 2018-10-05 13:38:52 Re: BUG #15420: Server crash. Segmentation fault when parsing xml file