Re: BUG #15420: Server crash. Segmentation fault when parsing xml file

From: Andrew Gierth <andrew(at)tao11(dot)riddles(dot)org(dot)uk>
To: Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
Cc: Sergey Mirvoda <sergey(at)mirvoda(dot)com>, Andrey Borodin <x4mmm(at)yandex-team(dot)ru>, Andrew Borodin <borodin(at)octonica(dot)com>, Michael Paquier <michael(at)paquier(dot)xyz>, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #15420: Server crash. Segmentation fault when parsing xml file
Date: 2018-10-05 13:38:52
Message-ID: 87tvm0bjpt.fsf@news-spur.riddles.org.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

>>>>> "Pavel" == Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> writes:

>> I don't yet know about 2.9.8, but the crash with 2.9.4 is a bug in
>> libxml2's error handling which has _nothing to do_ with which API
>> you use. Read the analysis I posted.

Pavel> ok. Probably there are more than one issue. 1. crash, 2. raising
Pavel> huge input lookup, maybe other.

It's certainly possible that the error that provokes the crash is
libxml2 complaining that the tag name is too long or whatever.

Pavel> libxml2 is great library,

HAH. From reading the code, as I have been for much of today, it's
pretty damn bad.

Interestingly, the FreeBSD package build of PG now disables XML by
default on account of libxml2's very poor security record. We need a
better XML library :-(

--
Andrew.

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Pavel Stehule 2018-10-05 13:46:04 Re: BUG #15420: Server crash. Segmentation fault when parsing xml file
Previous Message Pavel Stehule 2018-10-05 13:26:59 Re: BUG #15420: Server crash. Segmentation fault when parsing xml file