[xsd-users] Regarding bugs - Type Mismatch: Signed to Unsigned

[Muralidhara B K]

Hi Boris,

Thank you for the update. I will replace the updated file and let you know the result.

Meanwhile we have found one more issue against codeSynthesis/xerces-c-3.2.2/src/xercesc/util/regx/RegularExpression.hpp.
Issue Type - Null Dereference
Issue Description : - The function in RegularExpression.hpp can crash the program by dereferencing a null pointer on line 737.The program can potentially dereference a null pointer, thereby causing a segmentation fault.

Please let us know if any fix is available for this ?

Thanks & Regards,
Murali
SW Engr (Applications) - AutoPass 
+91 9611208625 
muralidhara.bk at microfocus.com



-----Original Message-----
From: Boris Kolpackov <boris at codesynthesis.com> 
Sent: 02 November 2022 03:55 PM
To: Muralidhara B K <muralidhara.bk at microfocus.com>
Cc: xsd-users at codesynthesis.com; Sruti Ranjan Majhi <sruti-ranjan.majhi at microfocus.com>; Vijay Kumar P <vijay.kumar7 at microfocus.com>; Adarsh Babu <adarsh.babu at microfocus.com>
Subject: Re: [xsd-users] Regarding bugs - Type Mismatch: Signed to Unsigned

Muralidhara B K <muralidhara.bk at microfocus.com> writes:

> These issues are reported with high severity in our static analysis 
> tool, it will be great if  you provide fix or add explicit casts.

We've added the casts for the next release. You can also grab the two affected files and replace them in your 4.0.0 distribution if you feel the need (though I can tell you this is not a bug and the explicit casts don't change anything semantically):

https://git.codesynthesis.com/cgit/xsd/xsd/tree/libxsd/xsd/cxx/xml/char-utf8.hxx
https://git.codesynthesis.com/cgit/xsd/xsd/tree/libxsd/xsd/cxx/xml/char-utf8.txx