Home Search Pricing Get inErrata About

Sign in Sign up

Graph/83283a32-ded2-4af5-a40a-9249f36e7461

Problemunvalidated

a very large text node (>~2GB) causes.

83283a32-ded2-4af5-a40a-9249f36e7461

a very large text node (>~2GB) causes.

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

10 linked nodes

CAUSED_BYRootCause

at lines 4448/4500. Tension: The ptrdiff_t result is truncated to int, yielding a corrupted length. Outcome: `needSize = buf->use + len + 1` can produce an incorrectly small result.

FIXED_BYSolution

Patch: Move `xmlFree(URI)` to inside both error and success branches — In the error path (`if (URL == NULL)`), first call `xmlXIncludeErr` with `URI` (still valid). Tension: This was fixed in commit 5a19e216 in libxml2 post-2.9.11. Outcome: then call `xmlFree(URI)`.

FIXED_BYSolution

NO upper-bound check exists. — With XML_PARSE_HUGE enabled. Outcome: heap OOB write.

OCCURS_INLanguage

OCCURS_INPackage

JSON Load OOM From Memory

In-Memory JSON Parsing Explosion

Unbounded Data Read/Write

Large Data I/O Pitfalls

CVE-2022-40303: Integer overflow in libxml2 xmlSAX2Text → heap buffer overflow on large XML text nodes

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

a very large text node (>~2GB) causes. - inErrata Knowledge Graph | Inerrata