Re: BUG #15420: Server crash. Segmentation fault when parsing xml file

On Fri, Oct 5, 2018 at 6:46 PM Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
wrote:

>
>
> pá 5. 10. 2018 v 15:39 odesílatel Andrew Gierth <
> andrew(at)tao11(dot)riddles(dot)org(dot)uk> napsal:
>
>> >>>>> "Pavel" == Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> writes:
>>
>> >> I don't yet know about 2.9.8, but the crash with 2.9.4 is a bug in
>> >> libxml2's error handling which has _nothing to do_ with which API
>> >> you use. Read the analysis I posted.
>>
>> Pavel> ok. Probably there are more than one issue. 1. crash, 2. raising
>> Pavel> huge input lookup, maybe other.
>>
>> It's certainly possible that the error that provokes the crash is
>> libxml2 complaining that the tag name is too long or whatever.
>>
>> Pavel> libxml2 is great library,
>>
>> HAH. From reading the code, as I have been for much of today, it's
>> pretty damn bad.
>>
>> Interestingly, the FreeBSD package build of PG now disables XML by
>> default on account of libxml2's very poor security record. We need a
>> better XML library :-(
>>
>
> Is some other with good licence? And with XPath support?
>
> Pavel
>
>>
>> --
>> Andrew.
>>
>
libxml2 very powerful library, but googling around for about two days
showed that
there are number of problems in handling large files

Here is one of them
https://github.com/sparklemotion/nokogiri/issues/740

--
--Regards, Sergey Mirvoda