GNOME Bugzilla – Bug 760325
Optimizing xpath expressions locks up on larger inputs
Last modified: 2016-04-27 16:07:53 UTC
If xpath.c:xmlXPathOptimizeExpression() is given deeper expressions with leaves constructed by PUSH_LONG_EXPR() (cf. xpath.c), it locks up traversing the expression due to repeated traversals of sub-expressions. See https://code.google.com/p/chromium/issues/detail?id=573768 for a testcase that shows this up. https://codereview.chromium.org/1562133002/ has a candidate fix.
Fixed with the following commit: https://git.gnome.org/browse/libxml2/commit/?id=839689a9a85d81f722997d00ec17a36b17ce6731