[XERCESC-1536] Empty systemID crashes Xerxes Parser

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 2.8.0
• Component/s: Validating Parser (DTD)
• Environment: Windows 32 bit (WinXP Prof), using VC 6.0
• Assignee: Unassigned
• Reporter: Arthur Rother
• Created: 13/Dec/05 00:43
• Updated: 12/Mar/18 04:05
• Resolved: 11/Sep/06 07:42

Description

Using the following declaration crashes Xerces:

<!ENTITY % ISOlat1 PUBLIC "ISO 8879-1986//ENTITIES Added Latin 1//EN" "">

• • Note the empty systemID declaration.**

Background:
Added a OASIS Catalog Resolving Mechanism to our integration of Xerces Parser, callback handler EntityHandler::resolveEntity is supposed to resolve the public ID.
Unfortunately, line

internal/ReaderMgr.cpp:470

handles the string without checking if the pointer const XMLCh* const sysId is NULL. And maybe the sysID pointer shouldn't have been NULL, but the empty string.

Best Regards,
Arthur