English version
Accueil     À propos     Téléchargement     Ressources     Contactez-nous    

Ce site est rarement mis à jour. Pour les informations les plus récentes, rendez-vous sur le nouveau site OCaml à l'adresse ocaml.org.

Browse thread
ANNOUNCE Xmlm 1.0.2
[ Home ] [ Index: by date | by threads ]
[ Search: ]

[ Message by date: previous | next ] [ Message in thread: previous | next ] [ Thread: previous | next ]
Date: 2009-11-11 (14:02)
From: Daniel_Bünzli <daniel.buenzli@e...>
Subject: ANNOUNCE Xmlm 1.0.2

A new version of Xmlm is available.
It's a security update. All users are recommended to upgrade.


A call to List.map crept into my implementation of namespaces. A
maliciously crafted xml file with a very large amount of attributes on a
single tag can crash your (native code) program by stack overflow. The fix
doesn't affect performance -- a rev and a map makes a t.r. rev_map.