[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

ANNOUNCE Xmlm 1.0.2



Hello,

A new version of Xmlm is available.
It's a security update. All users are recommended to upgrade.

http://erratique.ch/software/xmlm

A call to List.map crept into my implementation of namespaces. A
maliciously crafted xml file with a very large amount of attributes on a
single tag can crash your (native code) program by stack overflow. The fix
doesn't affect performance -- a rev and a map makes a t.r. rev_map.

Daniel


Reply to: