Bug Report: Unterminated ASP in start tag causes out-of-memory error

From: Randy Waki <rwaki@sun10.whizbanglabs.com> Date: Fri, 10 Sep 1999 09:39:22 -0600 To: "HTML Tidy Mailing List" <html-tidy@w3.org> Message-ID: <000001befba2$a7a402d0$ce9946a6@whizbanglabs.com> · This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 2 June 2009 18:21:23 GMT

If a start tag contains an unterminated ASP construct, 26-Jul-99 Tidy enters
an infinite loop and eventually runs out of memory.  For example:

  <html <%

where the end of file occurs right after the ending %.  A variation which
exercises a slightly different path through the code is:

  <html <% %

In both cases, the problem is in lexer.c, ParseAsp(), which fails to check
for EndOfStream after reading characters.

Thanks,
Randy