[XERCESJ-380] stackOverflow with maxOccurs over 5000 and less than unbounded

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.2
• Fix Version/s: 2.9.1
• Component/s: XML Schema 1.0 Structures
• Environment: Operating System: Windows XP; Platform: PC
• Bugzilla Id: 10764
• Assignee: Michael Glavassevich
• Reporter: afuqua
• Created: 13/Jul/02 05:27
• Updated: 25/Aug/07 16:31
• Resolved: 23/Feb/07 18:23

Description

On Windows XP and NT and 2000, when validating a document with the schema
below, I get a stackOverflow. I've seen the overflow report in 2 different
locations for different schemas:

java.lang.StackOverflowError
at org.apache.xerces.impl.xs.models.XSDFACM.postTreeBuildInit
(XSDFACM.java:899)
....

java.lang.StackOverflowError
at org.apache.xerces.impl.xs.models.XSDFACM.calcFollowList
(XSDFACM.java:732)
....

Here's an example schema to reproduce the problem:

<?xml version="1.0" encoding="UTF-8"?>
<schema xmlns="http://www.w3.org/2001/XMLSchema"
targetNamespace="http://www.iss.net/cpe/stackOverflow"
xmlns:stackOverflow="http://www.iss.net/cpe/stackOverflow"
elementFormDefault="qualified"
attributeFormDefault="unqualified">

<element name="policy" type="stackOverflow:PolicyType"/>

<complexType name="PolicyType">
<sequence>
<!-- fails for me as low as 5000 and up -->
<element name='sensitivity'
type='stackOverflow:sensitivityType' minOccurs='0' maxOccurs='65535'/>
</sequence>
</complexType>

<complexType name="sensitivityType">
<attribute name="sensitivity" type="int" use="required"/>
</complexType>
</schema>

Here's a code excerpt:
DOMParser domParser = new DOMParser();
domParser.setErrorHandler( errorHandler );
domParser.setFeature( "http://xml.org/sax/features/namespaces", true );
domParser.setFeature( "http://apache.org/xml/features/validation/schema",
true );
domParser.setFeature( "http://xml.org/sax/features/validation", true );
domParser.setProperty( "http://apache.org/xml/properties/schema/external-
schemaLocation", ....);
domParser.parse( new InputSource( new StringReader( .... )) );