[XERCESC-1051] Crash when maxOccurs >= 200000

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3.0
• Fix Version/s: 3.0.0
• Component/s: Validating Parser (XML Schema)
• Environment: Operating System: Windows NT/2K; Platform: PC
• Bugzilla Id: 24703
• Assignee: Alberto Massari
• Reporter: Frank Rast
• Created: 14/Nov/03 18:32
• Updated: 12/Mar/18 03:02
• Resolved: 13/Jul/08 20:02

Description

Parser crashes in ContentSpecNode.hpp: ContentSpecNode::~ContentSpecNode().

Steps to reproduce:
validate a xml file against a schema with an element having a maxOccurs >=
200000.

Assumed cause:
Stack overfow

Makeshift resolution:
Set the repeat count to unbounded(-1), when maxOccurs > 500:

inline void ContentSpecNode::setMaxOccurs(int max)
{
if(max > 500)
max = -1;
fMaxOccurs = max;
}