Message-ID: <99aae616-db97-4632-8934-4f39e7105631@postgrespro.ru>
Date: Thu, 25 Jan 2024 15:12:07 +0300
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: BUG #18274: Error 'invalid XML content'
Content-Language: en-US
To: Michael Paquier <michael@paquier.xyz>
Cc: pgsql-bugs@lists.postgresql.org
References: <18274-98d16bc03520665f@postgresql.org>
 <1616257.1704651529@sss.pgh.pa.us>
 <5588db01-45be-48ff-b158-85f789bc502c@postgrespro.ru>
 <1314313.1705259848@sss.pgh.pa.us>
 <0eea123f-388a-41ea-9df3-d4606cf9ed8d@postgrespro.ru>
 <ZaRvbaQ8V9uGxXGD@paquier.xyz>
 <35ef78f9-8958-4225-ae7e-aead71b0feed@postgrespro.ru>
 <ZaZI4WAHZ67ZHq7p@paquier.xyz>
 <24e7412a-890c-46e3-b17d-addc39ff813f@postgrespro.ru>
 <ZacYXgM9A_CSLpD8@paquier.xyz> <ZbHlgrPLtBZyr_QW@paquier.xyz>
From: Dmitry Koval <d.koval@postgrespro.ru>
In-Reply-To: <ZbHlgrPLtBZyr_QW@paquier.xyz>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: 
 <https://www.postgresql.org/message-id/99aae616-db97-4632-8934-4f39e7105631%40postgrespro.ru>
Precedence: bulk

> he security team has discussed 2197d06224a1 after a report from
> coverity regarding the effects that issues like [1] would create in
> the backend, and concluded that this patch should be reverted because
> this could cause the backend to waste plently of CPU and/or memory
> even if the application applied checks on the size of the data given
> in input, and libxml2 does not offer guarantees that input limits are
> respected under XML_PARSE_HUGE.

Thanks for info!

I agree that reverting a patch is a good idea if there are concerns 
about server resources (XML is used by few users and there are even 
fewer users who need to parse elements larger than 10Mb).
For such users it is better to create custom PostgreSQL build.

-- 
With best regards,
Dmitry Koval

Postgres Professional: http://postgrespro.com