News for hackers. Stuff that matters.

A comment on XML flaws threaten 'enormous' array of apps.

Re:XML flaws threaten 'enormous' array of apps by sgoranson on Thursday August 06, 2009 @08:48AM (#745331)
Pretty skeptical this flaw could be in "virtually every open-source XML library available". Seems unlikely a million brains collectively missed whatever this is.
[ Parent | on HN ]
Re:XML flaws threaten 'enormous' array of apps by jrockway on Thursday August 06, 2009 @09:05AM (#745354)
You are underestimating how easy it is to write insecure C code.

But it would be nice to know if this is expat, libxml2, or what.

[ Parent | on HN ]
Re:XML flaws threaten 'enormous' array of apps by philh on Thursday August 06, 2009 @11:11AM (#745630)
My understanding is it's not a single flaw. Virtually every XML library available is flawed, but each in their own way.
[ Parent | on HN ]