[xml] Re: [xmlsec] exc c14n w/o comments bug



Aleksey,
you are absolutely right: I tested the old version of libxml2 :-(. The patched version seems to be ok.

 I'm really sorry.

best redards,
  Tomas

Aleksey Sanin wrote:
Tomas,

I compiled the current CVS trunk of LibXML2 and I don't observe
the problem (I added formating to make it readable):

$ d:\sdk\bin\testC14N --exc-without-comments b.xml b.xpath
<wn1:ticket xmlns:i="http://www.w3.org/2001/XMLSchema-instance";
            xmlns:wn0="http://docs.oasis-open.org/wss/2004/01/
                       oasis-200401-wss-wssecurity-utility-1.0.xsd"
            xmlns:wn1="http://xmlsoap.org/Ping"; wn0:Id="Id-Ticket1"
            i:nil="true" i:type="wn1:ticketType">
</wn1:ticket>

I also have tested the example you send in the message from 4/20
and I am not able to reproduce the problem (see attached archive
with both examples).

Are you sure that you load correcy versions of the xmlsec and libxml2
libraries? The results you observe are expected with the old version
but I can't explain why you have this issue with the new patched one.



Aleksey


Tomas Sieger wrote:

Hi,
I found another "mutation" of the bug I already reported several weeks ago: multiple namespace declaration in the output of the exclusive c14n w/o comments.

This time, the bug is really serious. Even libxml2 can't parse its own output :-))).

You can reproduce the bug using the attached files.

Run:

  ./testC14N --exc-without-comments b.xml b.xpath

I can see this output:

<wn1:ticket
xmlns:i="http://www.w3.org/2001/XMLSchema-instance"; xmlns:i="http://www.w3.org/2001/XMLSchema-instance"; xmlns:wn0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"; xmlns:wn1="http://xmlsoap.org/Ping"; wn0:Id="Id-Ticket1" i:nil="true" i:type="wn1:ticketType"></wn1:ticket>

Note the "i" namespace is declared for two times!

regards,
 Tomas



------------------------------------------------------------------------

_______________________________________________
xmlsec mailing list
xmlsec aleksey com
http://www.aleksey.com/mailman/listinfo/xmlsec





[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]