xml-rs
xml-rs copied to clipboard
Invalid XML input is parsed as valid
While I was fuzzing my XMPP parser, I found an invalid sample:
<message xmlns=invalid "jabber:client"/>
This is parsed the same way as this valid sample:
<message xmlns="jabber:client"/>
It would be useful for you to fuzz your library as well, to make sure that kind of issue doesn’t happen in the future.
Thanks! Actually, fuzzing did find some bugs in xml-rs, so this is a thing I probably would like to add, but unfortunately I don't have much time lately :(
Fixed in https://github.com/kornelski/xml-rs/commit/9b99b03