zorba-coders team mailing list archive

[Federico Cavalieri <857842@xxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Public security bug reported:

The following query causes an assertion failure at line 3465 in
node_items.cpp

import schema namespace s = "http://www.xqdoc.org/1.0";;

let $hostInfo :=<xqdoc xmlns="http://www.xqdoc.org/1.0";>
    <control>
        <date><?processinginstruction aaa?>TS4J<!-- -->5UJ</date>
        <version>N/A</version>
    </control>
    <module type="library">
        <uri>DGQEb8Q</uri>
    </module>
</xqdoc>

return
  validate { $hostInfo }

If i understand correctly the validator should construct only one text
child for <date> with value "TSF4J5UJ"

** Affects: zorba
     Importance: High
     Assignee: Cezar Andrei (cezar-andrei)
         Status: New

** Visibility changed to: Public

** Changed in: zorba
   Importance: Undecided => High

** Changed in: zorba
     Assignee: (unassigned) => Cezar Andrei (cezar-andrei)

-- 
You received this bug notification because you are a member of Zorba
Coders, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/857842

Title:
  Assertion failed with simple content element with comments

Status in Zorba - The XQuery Processor:
  New

Bug description:
  The following query causes an assertion failure at line 3465 in
  node_items.cpp

  import schema namespace s = "http://www.xqdoc.org/1.0";;

  let $hostInfo :=<xqdoc xmlns="http://www.xqdoc.org/1.0";>
      <control>
          <date><?processinginstruction aaa?>TS4J<!-- -->5UJ</date>
          <version>N/A</version>
      </control>
      <module type="library">
          <uri>DGQEb8Q</uri>
      </module>
  </xqdoc>

  return
    validate { $hostInfo }

  If i understand correctly the validator should construct only one text
  child for <date> with value "TSF4J5UJ"

To manage notifications about this bug go to:
https://bugs.launchpad.net/zorba/+bug/857842/+subscriptions