Bug#378411: Buffer overflow in XML::Parser::Expat triggered by utf8

2006-09-05 Thread Steinar H. Gunderson
On Mon, Aug 07, 2006 at 10:53:38AM +0200, Joris van Rantwijk wrote: > PS. (and slightly off-topic) My personal opinion is that Perl has > utterly messed up Unicode handling. The documentation uses the terms > "Unicode" and "UTF8" as if they were interchangable. In fact, and as we > see with this bu

Bug#378411: Buffer overflow in XML::Parser::Expat triggered by utf8

2006-08-07 Thread Joris van Rantwijk
On Sat, 2006-08-05 at 14:12 -0400, Joey Hess wrote: > Would just calling Encode::decode_utf8 on the input string in Expat.pm > be the simplest fix? I'm not sure, but I think not. First of all, in the case I reported, the parser reads directly from an input stream. The data is then not touched by E

Bug#378411: Buffer overflow in XML::Parser::Expat triggered by utf8

2006-08-05 Thread Joey Hess
I can't speak for the XML::Parser maintainers, but I would like to see a patch for this, like you proposed creating. My application only missed sending utf8 data in by luck. Would just calling Encode::decode_utf8 on the input string in Expat.pm be the simplest fix? -- see shy jo signature.asc

Bug#378411: Buffer overflow in XML::Parser::Expat triggered by utf8

2006-07-16 Thread Joris van Rantwijk
Package: libxml-parser-perl Version: 2.34-4 Severity: grave A heap overflow can be triggered in the Expat library wrapper when running on an input stream in non-raw mode. This bug has also been reported at CPAN: http://rt.cpan.org/Ticket/Display.html?id=19859 The following example program will