Bug 175361

Summary: xmllint segmentation fault parsing xsd
Product: Red Hat Enterprise Linux 4 Reporter: Jesús Corrius <jesus>
Component: libxml2Assignee: Daniel Veillard <veillard>
Status: CLOSED UPSTREAM QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 4.0   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-12-09 15:45:05 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
xsd schema
none
strace output none

Description Jesús Corrius 2005-12-09 13:58:05 UTC 
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050923 CentOS/1.0.7-1.4.1.centos4 Firefox/1.0.7

Description of problem:
xmllint segmentation fault parsing while parsing an xsd file

Version-Release number of selected component (if applicable):
libxml2-2.6.16-6

How reproducible:
Always

Steps to Reproduce:
1. xmllint --schema test.xsd
2. Segmentation fault
  

Actual Results:  Segmentation fault

Expected Results:  xmllint doesn't crash

Additional info:
Comment 1 Jesús Corrius 2005-12-09 13:59:46 UTC 
Created attachment 122074 [details]
xsd schema 

This is the file that crashes xmllint
Comment 2 Jesús Corrius 2005-12-09 14:01:41 UTC 
Created attachment 122075 [details]
strace output
Comment 3 Daniel Veillard 2005-12-09 15:45:05 UTC 
XSD support was highly experimental at the time of 2.6.16,
recent release from xmlsoft.org should just work, for example
2.6.22 , it doesn't crash on this input. If you really rely on
XSD, then you should really track upstream releases.
XSD is never activated by libxml2 default processing, so even
though the crash is annoying, I don't think it can lead to a 
security risk.

Daniel