RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 06:07:34 +00:00
Code Issues Activity Actions

LibXML: Fail gracefully on integer overflow in character references

Browse source 
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47738
This commit is contained in:
Idan Horowitz 2022-07-10 19:48:02 +03:00
parent 1d96c30488
commit 18d25124bf
2 changed files with 14 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
Tests/LibXML/TestParser.cpp
View file

@ -20,3 +20,12 @@ TEST_CASE(char_data_ending)
return Test::Crash::Failure::DidNotCrash;
});
}
TEST_CASE(character_reference_integer_overflow)
{
EXPECT_NO_CRASH("parsing character references that do not fit in 32 bits should not crash", [] {
XML::Parser parser("<G>&#6666666666");
(void)parser.parse();
return Test::Crash::Failure::DidNotCrash;
});
}