Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: P1: Critical
Fix Version/s: None
Affects Version/s: 5.15.2, 6.0.2, 6.3.0
Component/s: XML: Stream Reader/Writer
Labels:
- found_by_oss-fuzz
Environment:
Ubuntu 20.04 LTS
clang 10.0.0, g++ 9.3.0

Build the attached project.
Normal release build, no sanitizers needed.

Run it on the attached input file:

./report input.xml

It won't finish. It's running here for ten minutes of CPU time now, with constant low memory consumption:

    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND  
  38446 qtrob     20   0   75260  34172   7068 R 100.0   0.2  10:04.04 report

Google's oss-fuzz found this as issue 30973. It will be published on May 17th, the latest.

- - Sort By Name
  - Sort By Date
  - Ascending
  - Descending
  - Thumbnails
  - List

report.pro
0.0 kB
24 Mar '21 14:35
main.cpp
0.2 kB
24 Mar '21 14:35
input.xml
387 kB
24 Mar '21 14:35

- Issue Only
- Show All Reviews
- Show Open Reviews

For Gerrit Dashboard: QTBUG-92113
#	Subject	Branch	Project	Status	CR	V
488691,16	Improve XML stream errorString	dev	qt/qtbase	Status: ABANDONED	0	0
488960,37	QXmlStreamReader: Raise error on unexpected tokens	dev	qt/qtbase	Status: MERGED	+2	0
490549,2	QXmlStreamReader: Raise error on unexpected tokens	6.6	qt/qtbase	Status: MERGED	+2	0
490550,3	QXmlStreamReader: Raise error on unexpected tokens	6.5	qt/qtbase	Status: MERGED	+2	0
490553,7	QXmlStreamReader: Raise error on unexpected tokens	tqtc/lts-6.2	qt/tqtc-qtbase	Status: MERGED	+2	0
490554,15	QXmlStreamReader: Raise error on unexpected tokens	tqtc/lts-5.15	qt/tqtc-qtbase	Status: MERGED	+2	0
490636,2	tst_QXmlStream::tokenErrorHandling() - register test directory in CMake	dev	qt/qtbase	Status: MERGED	+2	0
490637,3	QXmlStreamReader: Fix variable naming	dev	qt/qtbase	Status: MERGED	+2	0
490737,5	QXmlStreamReader: Fix variable naming	6.5	qt/qtbase	Status: MERGED	+2	0
490738,2	QXmlStreamReader: Fix variable naming	6.6	qt/qtbase	Status: MERGED	+2	0
490739,2	tst_QXmlStream::tokenErrorHandling() - register test directory in CMake	6.6	qt/qtbase	Status: MERGED	+2	0
490740,7	tst_QXmlStream::tokenErrorHandling() - register test directory in CMake	6.5	qt/qtbase	Status: MERGED	+2	0
490763,6	tst_QXmlStream::tokenErrorHandling() - register test directory in CMake	tqtc/lts-5.15	qt/tqtc-qtbase	Status: MERGED	+2	0
490764,6	tst_QXmlStream::tokenErrorHandling() - register test directory in CMake	tqtc/lts-6.2	qt/tqtc-qtbase	Status: MERGED	+2	0
492442,3	QXmlStreamReader: Fix translation context of error messages	dev	qt/qtbase	Status: MERGED	+2	0
492471,2	QXmlStreamReader: Fix translation context of error messages	6.5	qt/qtbase	Status: MERGED	+2	0
492472,2	QXmlStreamReader: Fix translation context of error messages	6.6	qt/qtbase	Status: MERGED	+2	0