jaseg on Nostr: Tonight's fun debugging: It seems a gerbolyze user has managed to trip up *multiple* ...
Tonight's fun debugging: It seems a gerbolyze user has managed to trip up *multiple* XML parsers independently by throwing them an attr of 18MB size to chew on. BeautifulSoup with lxml outright misparses the file, and gerbolyze's svg-flatten with pugixml non-deterministically sometimes misparses it.
https://github.com/jaseg/gerbolyze/issues/46#xml #python #debugging #cpp
Published at
2024-07-04 22:26:55Event JSON
{
"id": "0dcfa7723d6c514e75890f719a5b4276591410804aabbcbbbfc4683d721a2368",
"pubkey": "c2756be6b1216a7f8d6d0f9d48359f79d60ff5eaf7d20e67e45ec8cd6b11abb4",
"created_at": 1720132015,
"kind": 1,
"tags": [
[
"t",
"xml"
],
[
"t",
"python"
],
[
"t",
"debugging"
],
[
"t",
"cpp"
],
[
"proxy",
"https://chaos.social/users/jaseg/statuses/112730571772482561",
"activitypub"
]
],
"content": "Tonight's fun debugging: It seems a gerbolyze user has managed to trip up *multiple* XML parsers independently by throwing them an attr of 18MB size to chew on. BeautifulSoup with lxml outright misparses the file, and gerbolyze's svg-flatten with pugixml non-deterministically sometimes misparses it.\n\nhttps://github.com/jaseg/gerbolyze/issues/46\n\n#xml #python #debugging #cpp",
"sig": "3e7732957be46d023a381ae05a11bee972b85de0006bd82d512bdfd3201fc7f43d1825b9022ab45f745e71775ba16476cdf2b1bd3b85dbe4df93d9993c108755"
}