From 5f74dc212497332d05882660db130a37d2f458eb Mon Sep 17 00:00:00 2001 From: Michael R Sweet Date: Sun, 12 Jun 2016 21:12:11 +0000 Subject: [PATCH] mxmlWrite* used a recursive algorithm which could require large amounts of stack space depending on the file (Bug #549, CVE-2016-4571) --- CHANGES | 6 +- doc/reference.html | 2 +- mxml-file.c | 372 +++++++++++++++++++++++---------------------- 3 files changed, 198 insertions(+), 182 deletions(-) diff --git a/CHANGES b/CHANGES index 431f0b0..185e2b1 100644 --- a/CHANGES +++ b/CHANGES @@ -1,10 +1,12 @@ -CHANGES - 2016-06-11 +CHANGES - 2016-06-12 -------------------- CHANGES IN Mini-XML 2.10 - mxmlDelete used a recursive algorithm which could require large - amounts of stack space depending on the file (Bug #549) + amounts of stack space depending on the file (Bug #549, CVE-2016-4570) + - mxmlWrite* used a recursive algorithm which could require large + amounts of stack space depending on the file (Bug #549, CVE-2016-4571) CHANGES IN Mini-XML 2.9 diff --git a/doc/reference.html b/doc/reference.html index 206ba48..0eda342 100644 --- a/doc/reference.html +++ b/doc/reference.html @@ -3,7 +3,7 @@ Documentation - +