From 9f86dae98914c994a27dd605a0dbcb8d63d7b905 Mon Sep 17 00:00:00 2001
From: Nick Wellnhofer <wellnhofer@aevum.de>
Date: Sun, 15 Dec 2024 14:27:05 +0100
Subject: [PATCH] test: Add test case for UAF in xmlSchemaIDCFillNodeTables

---
 result/schemas/bug322411_1_1.err |  1 +
 test/schemas/bug322411_1.xml     | 67 ++++++++++++++++++++++++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 result/schemas/bug322411_1_1.err
 create mode 100644 test/schemas/bug322411_1.xml

diff --git a/result/schemas/bug322411_1_1.err b/result/schemas/bug322411_1_1.err
new file mode 100644
index 00000000..082a4245
--- /dev/null
+++ b/result/schemas/bug322411_1_1.err
@@ -0,0 +1 @@
+./test/schemas/bug322411_1.xml validates
diff --git a/test/schemas/bug322411_1.xml b/test/schemas/bug322411_1.xml
new file mode 100644
index 00000000..aaa1f67b
--- /dev/null
+++ b/test/schemas/bug322411_1.xml
@@ -0,0 +1,67 @@
+<ELEMENTS>
+  <ELEMENT>
+    <items>
+      <!-- Some dupls. -->
+      <item>dupl1</item>
+      <item>dupl2</item>
+      <item>dupl3</item>
+      <item>dupl4</item>
+      <item>dupl5</item>
+      <item>dupl6</item>
+      <item>dupl7</item>
+      <item>dupl8</item>
+      <item>dupl9</item>
+      <item>dupl10</item>
+      <item>dupl11</item>
+      <item>dupl12</item>
+      <item>dupl13</item>
+      <item>dupl14</item>
+      <item>dupl15</item>
+      <item>dupl16</item>
+      <item>dupl17</item>
+      <item>dupl18</item>
+      <item>dupl19</item>
+      <item>dupl20</item>
+      <item>dupl21</item>
+      <item>dupl22</item>
+      <item>dupl23</item>
+      <item>dupl24</item>
+      <item>dupl25</item>
+      <items>
+        <!-- Some dupls. -->
+        <item>dupl1</item>
+        <item>dupl2</item>
+        <item>dupl3</item>
+        <item>dupl4</item>
+        <item>dupl5</item>
+        <item>dupl6</item>
+        <item>dupl7</item>
+        <item>dupl8</item>
+        <item>dupl9</item>
+        <item>dupl10</item>
+        <item>dupl11</item>
+        <item>dupl12</item>
+        <item>dupl13</item>
+        <item>dupl14</item>
+        <item>dupl15</item>
+        <item>dupl16</item>
+        <item>dupl17</item>
+        <item>dupl18</item>
+        <item>dupl19</item>
+        <item>dupl20</item>
+        <item>dupl21</item>
+        <item>dupl22</item>
+        <item>dupl23</item>
+        <item>dupl24</item>
+        <item>dupl25</item>
+        <items>
+          <item>dupl1</item>
+          <item>1</item>
+        </items>
+      </items>
+    </items>
+    <!-- Keyrefs. -->
+    <ref>1</ref>
+  </ELEMENT>
+</ELEMENTS>
+