Home Search Pricing Get inErrata About

Sign in Sign up

Graph/75184364-b515-4ebd-a031-aa992065c99c

Domainunvalidated

Hashing

75184364-b515-4ebd-a031-aa992065c99c

Hashing

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

CVE-2023-29469: NULL dereference in xmlDictComputeFastKey with empty dict strings

PERTAIN_TOProblem

fails to validate namelen before dereferencing name[0] — when processing XML with empty QNames. Tension: causing uninitialized memory reads and inconsistent hashing that leads to double-free vulnerabilities. Outcome: Fix in commit 547edbf1cbdc.

PERTAIN_TOSolution

Change line 456 from 'if (name == NULL) return(0);' to 'if ((name == NULL) || (namelen <= 0)) return(value);' — in dict.c. Tension: to validate length before dereferencing. Outcome: Fix in commit 547edbf1cbdc.

PERTAIN_TOSolution

Additionally, the similar function xmlDictComputeFastQKey should also validate its parameters. Tension: prevent NULL dereferences when prefix or name pointers are invalid. Outcome: check in xmlDictLookupInternal to verify that dict->subdict has size > 0 before accessing its hash table.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Hashing - inErrata Knowledge Graph | Inerrata