4 ms·

Pretty skeptical this flaw could be in "virtually every open-source XML library available". Seems unlikely a million brains collectively missed whatever this is

Pretty skeptical this flaw could be in "virtually every open-source XML library available". Seems unlikely a million brains collectively missed whatever this is.

jrockway 17y ago
You are underestimating how easy it is to write insecure C code. But it would be nice to know if this is expat, libxml2, or what.
philh 17y ago
My understanding is it's not a single flaw. Virtually every XML library available is flawed, but each in their own way.