Crash when maxOccurs >= 200000

• Key: XERCESC-1051
• Type: Bug
• Status: Resolved
• Resolution: Fixed
• Priority: Major
• Assignee: Alberto Massari
• Reporter: Frank Rast
• Component/s: Validating Parser (XML Schema)
• Affects Version/s: 2.3.0
• Fix Version/s: 3.0.0

Environment

Operating System: Windows NT/2K
Platform: PC

Description

Parser crashes in ContentSpecNode.hpp: ContentSpecNode::~ContentSpecNode().

Steps to reproduce:
validate a xml file against a schema with an element having a maxOccurs >=
200000.

Assumed cause:
Stack overfow

Makeshift resolution:
Set the repeat count to unbounded(-1), when maxOccurs > 500:

inline void ContentSpecNode::setMaxOccurs(int max)
{
    if(max > 500)
        max = -1;
    fMaxOccurs = max;
}