Version française
Home     About     Download     Resources     Contact us    

This site is updated infrequently. For up-to-date information, please visit the new OCaml website at

Browse thread
ANNOUNCE Xmlm 1.0.2
[ Home ] [ Index: by date | by threads ]
[ Search: ]

[ Message by date: previous | next ] [ Message in thread: previous | next ] [ Thread: previous | next ]
Date: 2009-11-11 (14:02)
From: Daniel_Bünzli <daniel.buenzli@e...>
Subject: ANNOUNCE Xmlm 1.0.2

A new version of Xmlm is available.
It's a security update. All users are recommended to upgrade.

A call to crept into my implementation of namespaces. A
maliciously crafted xml file with a very large amount of attributes on a
single tag can crash your (native code) program by stack overflow. The fix
doesn't affect performance -- a rev and a map makes a t.r. rev_map.