Bug Report: Unterminated ASP in start tag causes out-of-memory error from Randy Waki on 1999-09-10 (html-tidy@w3.org from July to September 1999)

From: Randy Waki <rwaki@sun10.whizbanglabs.com>
Date: Fri, 10 Sep 1999 09:39:22 -0600
To: "HTML Tidy Mailing List" <html-tidy@w3.org>
Message-ID: <000001befba2$a7a402d0$ce9946a6@whizbanglabs.com>

If a start tag contains an unterminated ASP construct, 26-Jul-99 Tidy enters
an infinite loop and eventually runs out of memory.  For example:

  <html <%

where the end of file occurs right after the ending %.  A variation which
exercises a slightly different path through the code is:

  <html <% %

In both cases, the problem is in lexer.c, ParseAsp(), which fails to check
for EndOfStream after reading characters.

Thanks,
Randy

Received on Friday, 10 September 1999 11:40:11 UTC