libxml2/result/ent6hex

<?xml version="1.0"?>
<!DOCTYPE doc [
<!ENTITY lt "&#x26;#x3c;">
<!ENTITY gt "&#x26;#x3E;">
<!ENTITY amp "&#x26;#x26;">
<!ENTITY apos "&#x26;#x27;">
<!ENTITY quot "&#x26;#x22;">
]>
<doc/>
Check for invalid redeclarations of predefined entities Implement section "4.6 Predefined Entities" of the XML 1.0 spec and check whether redeclarations of predefined entities match the original definitions. Note that some test cases declared <!ENTITY lt "<"> But the XML spec clearly states that this is illegal: > If the entities lt or amp are declared, they MUST be declared as > internal entities whose replacement text is a character reference to > the respective character (less-than sign or ampersand) being escaped; > the double escaping is REQUIRED for these entities so that references > to them produce a well-formed result. Also fixes #217 but the connection is only tangential. The integer overflow discovered by fuzzing was more related to the fact that various parts of the parser disagreed on whether to prefer predefined entities over their redeclarations. The whole situation is a mess and even depends on legacy parser options. But now that redeclarations are validated, it shouldn't make a difference. As noted in the added comment, this is also one of the cases where overly defensive checks can hide interesting logic bugs from fuzzers. 2021-02-08 20:58:32 +01:00			`<?xml version="1.0"?>`
			`<!DOCTYPE doc [`
			`<!ENTITY lt "&#x3c;">`
			`<!ENTITY gt "&#x3E;">`
			`<!ENTITY amp "&#x26;">`
			`<!ENTITY apos "&#x27;">`
			`<!ENTITY quot "&#x22;">`
			`]>`
			`<doc/>`