Bug in DOM document.c php_dom_ctx_error_level()

php.internals

Adam Maccabee Trachtenberg

22 years ago
The php_dom_ctx_error_level() function in DOM document.c assumes that input->filename is always non-null. This is not true when the file is an entity. You can trigger this by killing your Internet connection and then loading any XML file that references an external entity. For example: <!ENTITY % HTMLlat1 PUBLIC "-//W3C//ENTITIES Latin 1 for XHTML//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml-lat1.ent"> %HTMLlat1; ]> A patch to fix this is available at: http://www.trachtenberg.com/patches/php_dom_ctx_error_level.txt -adam
-- adam@trachtenberg.com

Christian Stocker

22 years ago
hi adam it's commited. thanks fot the patch chregu On 12/1/03 9:10 AM, Adam Maccabee Trachtenberg wrote:
> The php_dom_ctx_error_level() function in DOM document.c assumes that > input->filename is always non-null. This is not true when the file is > an entity. > > You can trigger this by killing your Internet connection and then > loading any XML file that references an external entity. For example: > > <!ENTITY % HTMLlat1 PUBLIC > "-//W3C//ENTITIES Latin 1 for XHTML//EN" > "http://www.w3.org/TR/xhtml1/DTD/xhtml-lat1.ent"> > %HTMLlat1; > ]> > > A patch to fix this is available at: > http://www.trachtenberg.com/patches/php_dom_ctx_error_level.txt > > -adam >
-- christian stocker | Bitflux GmbH | schoeneggstrasse 5 | ch-8004 zurich phone +41 1 240 56 70 | mobile +41 76 561 88 60 | fax +41 1 240 56 71 http://www.bitflux.ch | chregu@bitflux.ch | gnupg-keyid 0x5CE1DECB