Home page logo

oss-sec logo oss-sec mailing list archives

Re: libxml security fix from apple ... any information?
From: Daniel Veillard <veillard () redhat com>
Date: Thu, 4 Aug 2011 22:57:20 +0800

On Thu, Jul 28, 2011 at 09:59:22PM -0700, Billy Rios wrote:
The crash was indeed in libxml2, but I could not get the bug to repro in
Linux.  We took the crash file and fuzzed a bit more on Linux, but no
crashes were observed.

  Just wondering, are you by chance changing the libxml2 buffer allocation
strategy in the application code (function xmlSetBufferAllocationScheme())
and associated global variable (I know I know ...) xmlBufferAllocScheme.
That may explain if you switched to an exact allocation policy why
you hit the buffer overrun while it usually doesn't show up,


Daniel Veillard      | libxml Gnome XML XSLT toolkit  http://xmlsoft.org/
daniel () veillard com  | Rpmfind RPM search engine http://rpmfind.net/
http://veillard.com/ | virtualization library  http://libvirt.org/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]