shaba/libxml2
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2025-01-12 09:17:37 +03:00
Code
29beef653c
libxml2/result/HTML/chunked_attr.html
Nick Wellnhofer 477c7f6aff Fix quadratic runtime in HTML parser 
Commit eeb99329 removed an important optimization avoiding quadratic
runtime when repeatedly scanning the input buffer for terminating
characters in the HTML push parser. The related bug is

    https://bugzilla.gnome.org/show_bug.cgi?id=444994

Make sure that ctxt->checkIndex is always written and store additional
parser state in ctxt->inSubset which is unused in the HTML parser.

Found by OSS-Fuzz.
2020-07-06 12:17:20 +02:00

47 lines
9.0 KiB
HTML
Raw Blame History

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html>
<!--
This tests internal state tracking of the push parser and assumes a chunk
size of 4096 (or a divisor of 4096) and an initial chunk of size 4.
Make sure that the first '<' in the attribute value ends up near
offset 4100.
-->
<body>
<p>
Filler bytes follow:
100 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
200 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
300 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
400 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
500 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
600 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
700 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
800 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
900 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
1000 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
100 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
200 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
300 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
400 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
500 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
600 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
700 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
800 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
900 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
2000 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
100 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
200 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
300 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
400 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
500 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
600 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
700 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
800 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789
xxx
</p>
<div fill1="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789" onmouseover="x&lt;b&gt;text&lt;/b&gt;x" fill2="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789" fill3="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789" fill4="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789" fill5="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789" fill6="123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789">
</div>
</body>
</html>
View Git Blame Copy Permalink