PM65778: XERCES XML PARSER MAY CORRUPT THE DATA WHEN SEARCHING FOR ESCAPE CHARACTERS WHICH RESULTS IN MAP FAILURE OR CRASH

APAR status

• Closed as program error.

Error description

• Xerces XML parser may corrupt the data when searching for
  escape characters. As a result, the map may fail with various
  error codes or the application may crash.
  

Local fix

• WTXCQ - WTX00040817
  EJ / EJ
  Circumvention: None
  

Problem summary

• Users Affected:
  WebSphere Transformation Extender customers using Xerces XML
  parser and when there are many escape characters in XML data
  
  Problem Description:
  Xerces XML parser may corrupt that data when searching for
  escape characters. As a result, the map may fail with various
  error codes or the application may crash.
  Stack trace of the memory corruption is similar to:
      Error location
          xml4c_5_6::DstxXMLDocHandlerImpl::FormatCDataOrMarkup
          xml4c_5_6::DstxXMLDocHandlerImpl::ConvertToEscape
          xml4c_5_6::DstxXMLDocHandlerImpl::startAnyElemCompTag
          xml4c_5_6::DstxXMLDocHandlerImpl::startElement
          xml4c_5_6::DstxSAXParser::startElement
          xml4c_5_6::DstxXMLScanner::scanStartTagNS
          xml4c_5_6::DstxXMLScanner::scanContent
          xml4c_5_6::DstxXMLScanner::scanDocument
          xml4c_5_6::DstxSAXParser::parse
          xml4c_5_6::DstxXMLDocHandlerHelper::parse
  
  Platforms Affected:
  All
  

Problem conclusion

• Correct xml parser code to allocate sufficient memory to store
  intermediate results.
  
  Delivered in:
  8.3.0.5, 8.4.0.3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WSTX

• Fixed component ID

  5724M4000

Applicable component levels

• R820 PSY

     UP

• R830 PSY

     UP

• R840 PSY

     UP