hugo/MetaCrate
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Implement bounded XML LLSD codec

Browse Source
This commit is contained in:
Chili Palmer
2026-08-09 01:08:14 +00:00
parent 2308e55671
commit 84bc31d031
14 changed files with 853 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
fuzz/corpus/xml_llsd/README.md Normal file
View File

@@ -0,0 +1,6 @@
# XML LLSD security regression corpus
These inputs exercise the XML LLSD parser's entity boundary. DTD declarations,
external entities, and undeclared named entities must be rejected without file
or network access and without entity expansion. The structured-data unit tests
load every fixture directly.

1
fuzz/corpus/xml_llsd/doctype_entity.xml Normal file
View File

@@ -0,0 +1 @@
<!DOCTYPE llsd [<!ENTITY x "expanded">]><llsd><string>&x;</string></llsd>

1
fuzz/corpus/xml_llsd/external_entity.xml Normal file
View File

@@ -0,0 +1 @@
<!DOCTYPE llsd [<!ENTITY x SYSTEM "file:///etc/passwd">]><llsd><string>&x;</string></llsd>

1
fuzz/corpus/xml_llsd/unknown_entity.xml Normal file
View File

@@ -0,0 +1 @@
<llsd><string>&unknown;</string></llsd>