Hi, I'm trying to validate an xml file that has an error:

schema.xsd: ----------------------------------

<?xml version="1.0"?>
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema">
  <xs:complexType name="A">
    <xs:all>
      <xs:element name="b" type="xs:string"/>
    </xs:all>
  </xs:complexType>

  <xs:element name="a" type="A"/>
</xs:schema>

wrong-xml.xml: ----------------------------------

<?xml version="1.0"?>
<a>
  <b/>
</a>

----------------------------------------

I get a segmentation fault while validating with the testSchemas executable:

./testSchemas schema.xsd wrong-xml.xml

The problem is that in the method xmlSchemaValAtomicType (found in "xmlschemastypes.c") the pointer "value" is not validated before being used:


static int
xmlSchemaValAtomicType(xmlSchemaTypePtr type, const xmlChar * value,
                       xmlSchemaValPtr * val, xmlNodePtr node, int flags)
{
    xmlSchemaValPtr v;
    xmlChar *norm = NULL;
    int ret = 0;

    if (xmlSchemaTypesInitialized == 0)
        return (-1);
    if (type == NULL)
        return (-1);

    // VALIDATE "value" POINTER BEFORE CONTINUE
    if (value == NULL)
        return (-1)

    // the rest of the method ....


I donwloaded this version of libxml2: libxml2-2.6.9