[XERCESC-1504] Access violation during parsing with schema validation turned on if a needed schema is missing.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.5.0, 2.6.0
• Component/s: Validating Parser (XML Schema)
• Environment: win2k on ix86.
• Assignee: Unassigned
• Reporter: Alain Le Guennec
• Created: 21/Sep/05 23:29
• Updated: 22/Sep/05 01:55
• Resolved: 22/Sep/05 01:55

Description

There is an access violation during parsing in some circumstances if schema validation is on
and one of the schema needed to fully validate the document is missing.
Attached is a reduced test case, in the form of a .xsd schema and a .xml document,
which refers to that schema and to another, missing, schema.
Running "DOMPrint.exe -n -s input.xml" will trigger the access violation.
I could reproduce the bug in both xercesc-2.5 and 2.6, but not in xercesc-2.7.
The call-stack is:
xercesc_2_5::RefHashTableOf<xercesc_2_5::DTDAttDef>::findBucketElem(const void * const 0x04601f20, unsigned int & 302830086) line 527 + 3 bytes
xercesc_2_5::RefHashTableOf<xercesc_2_5::DTDAttDef>::get(const void * const 0x04601f20) line 405 + 16 bytes
xercesc_2_5::DTDElementDecl::getAttDef(const unsigned short * const 0x04601f20) line 297
xercesc_2_5::IGXMLScanner::buildAttList(const xercesc_2_5::RefVectorOf<xercesc_2_5::KVStringPair> &

{...}, const unsigned int 2, xercesc_2_5::XMLElementDecl * 0x04782738, xercesc_2_5::RefVectorOf<xercesc_2_5::XMLAttr> & {...}

) line 313 + 12 bytes
xercesc_2_5::IGXMLScanner::scanStartTagNS(unsigned char & 1) line 2843 + 42 bytes
xercesc_2_5::IGXMLScanner::scanContent() line 939
xercesc_2_5::IGXMLScanner::scanDocument(const xercesc_2_5::InputSource &

{...}) line 251 + 8 bytes
xercesc_2_5::AbstractDOMParser::parse(const xercesc_2_5::InputSource & {...}

) line 461
As one can see, a SchemaElementDecl* is wrongly cast to a DTDElementDecl*, hence the access violation!
Best regards,
Alain Le Guennec.

Issue Links

• duplicates: XERCESC-1470 segmentation fault in xerces 2.6.0 on this file for unknown reason