Santuario
  1. Santuario
  2. SANTUARIO-176

Library rejects unknown KeyInfo children

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: C++ 1.3.1
    • Fix Version/s: C++ 1.6.0
    • Component/s: C++
    • Security Level: Public (Public issues, viewable by everyone)
    • Labels:
      None
    • Environment:
      Operating System: All
      Platform: All

      Description

      The KeyInfo schema is open to extension, but the XML processing code in the library is not. It just rejects any child element it doesn't know about, which would be ok, but it also throws an exception and halts processing, which is not.

      Minimal fix is to ignore the unknown children.

      A better fix is to expose them as a DOM element, but this requires ABI changes, so will wait for 1.5.0.

        Activity

        Mark Thomas made changes -
        Workflow Default workflow, editable Closed status [ 12565603 ] jira [ 12586521 ]
        Mark Thomas made changes -
        Assignee XML Security Developers Mailing List [ security-dev@xml.apache.org ]
        Mark Thomas made changes -
        Workflow jira [ 12539354 ] Default workflow, editable Closed status [ 12565603 ]
        Scott Cantor made changes -
        Fix Version/s C++ 1.6.0 [ 12315941 ]
        Colm O hEigeartaigh made changes -
        Component/s C++ [ 12314102 ]
        Component/s C++ Signature [ 12314097 ]
        Mark Thomas made changes -
        Field Original Value New Value
        issue.field.bugzillaimportkey 45849 12492449
        Hide
        Scott Cantor added a comment -

        Fixed in 1.5.0.

        Show
        Scott Cantor added a comment - Fixed in 1.5.0.
        Hide
        Mark Thomas added a comment -

        Reset assignee so mails go to list.

        Show
        Mark Thomas added a comment - Reset assignee so mails go to list.
        Show
        Scott Cantor added a comment - http://svn.apache.org/viewvc?view=rev&revision=697216
        Scott Cantor created issue -

          People

          • Assignee:
            Unassigned
            Reporter:
            Scott Cantor
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development