-
Notifications
You must be signed in to change notification settings - Fork 342
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Crash in feedparser 6.0.10 #378
Comments
This is the minimum reproducible example: <content:encoded xmlns:content="bogus">
<![CDATA[
<!h<!h<!h<
]]>
</content:encoded> The crash is coming from within the Python standard library -- On a side note, it appears that Trail of Bits is using Wordpress. Perhaps this is a bug that exists in Wordpress or one of the plugins in its ecosystem and could be fixed there, as well! |
Is there a specific code change in the In the develop branch everything works as expected:
That was why I thought it is a bug in feedparser. |
Yep, I saw the same thing with the The crash is a bug in the feedparser 6.0.10 release. However, that's happening because Wordpress is failing to escape the code in its |
Coincidentally I was about to raise this exact same issue for the same feed. Looking forward to a fix for it |
Hi, just curious if this is going to be addressed at some point. Since the issue seemed fixed in the develop branch, could we get a new release? I understand that this is also a Wordpress issue, but if this can be used with the changes in develop, a release would be great. Thanks (I'll note that I haven't actually checked to see if the feed itself has changed and fixed itself yet) |
The develop branch is not in a state where it can be released yet; it will take many, many hours of work to get it into a stable state, and I can't commit the required time until after the new year. |
I noticed that the latest released version of feedparser crashes, when a CDATA section contains a C Code snippets. Here is an example on how to reproduce the issue.
python -m pip install feedparser
https://blog.trailofbits.com/feed/
I tested the same issue on the develop branch, but the crash does not occur their.
Thanks for your support.
The text was updated successfully, but these errors were encountered: