Xerces Vulnerability (Test Case)

View: New views
6 Messages — Rating Filter:   Alert me  

Xerces Vulnerability (Test Case)

by Vinutha Nagaraju :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

I written earlier querying about the patch for following Xerces
vulnerability.
http://www.cert.fi/en/reports/2009/vulnerability2009085.html

Our product (Web Server) uses Xerces 2.6.0, so we are looking for a
reproducible test case to evaluate the impact of this vulnerability. Can
someone please share the relevant details on how this security issue
could be reproduced ?

Thanks,
Vinutha


---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...


xerces-c 2.6.0 source distribution

by Pankaj Thakur-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

My component uses xerces-c 2.6.0 lib. I am not able to get source distribution for this version.
Can any one send relevant link for this source distribution.

Thanks,
Pankaj


      Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew

---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...


Re: xerces-c 2.6.0 source distribution

by Alberto Massari :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

http://archive.apache.org/dist/xml/xerces-c/Xerces-C_2_6_0/

Alberto

Pankaj Thakur wrote:

> Hi,
>
> My component uses xerces-c 2.6.0 lib. I am not able to get source distribution for this version.
> Can any one send relevant link for this source distribution.
>
> Thanks,
> Pankaj
>
>
>       Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: c-dev-unsubscribe@...
> For additional commands, e-mail: c-dev-help@...
>
>
>  


---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...


Re: xerces-c 2.6.0 source distribution

by Pankaj Thakur-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

Thanks for sharing information. Because of some requirement, i am willing to include xerces source code and don't want to use xerces library.
Is it possible to get make file used for xerces compilation or MSVC workspace file which i can use to compile xerces code. Same i will use to include xerces header in my project to make it work without using xerces lib.

Thanks,
Pankaj



----- Original Message ----
From: Alberto Massari <amassari@...>
To: c-dev@...
Cc: c-dev-help@...
Sent: Thu, 15 October, 2009 4:19:24 PM
Subject: Re: xerces-c 2.6.0 source distribution

http://archive.apache.org/dist/xml/xerces-c/Xerces-C_2_6_0/

Alberto

Pankaj Thakur wrote:

> Hi,
>
> My component uses xerces-c 2.6.0 lib. I am not able to get source distribution for this version.
> Can any one send relevant link for this source distribution.
>
> Thanks,
> Pankaj
>
>
>      Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: c-dev-unsubscribe@...
> For additional commands, e-mail: c-dev-help@...
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...


      Connect more, do more and share more with Yahoo! India Mail. Learn more. http://in.overview.mail.yahoo.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...


Linking xercesc_2.lib with MINGW-GCC compiled code.

by Pankaj Thakur-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

I was using MSVC6 to build my application. Now i am porting it to mingw-gcc, i am able to compile my program but once i link available xercesc-2.6.lib gives linker error. Please find below descriptions:

L:\helloxer>g++ -o hello hello.o -L"lib" -l"xerces-c_2"
hello.o:hello.cpp:(.text+0x16d): undefined reference to `_imp___ZN11xercesc_2_66
XMLUni22fgXercescDefaultLocaleE'
hello.o:hello.cpp:(.text+0x175): undefined reference to `_imp___ZN11xercesc_2_61
6XMLPlatformUtils10InitializeEPKcS2_PNS_12PanicHandlerEPNS_13MemoryManagerE'
collect2: ld returned 1 exit status

I am using xercesc_2.lib which i for from 2.6.0 xercesc Bin Distribution. Is it right way of linking or do i need to take xercess2.6.0 source distribution and build lib for mingw?

Please provide your suggestions to fix this.

Thanks,
Pankaj 


 
----- Original Message ----
From: Alberto Massari <amassari@...>
To: c-dev@...
Cc: c-dev-help@...
Sent: Thu, 15 October, 2009 4:19:24 PM
Subject: Re: xerces-c 2.6.0 source distribution

http://archive.apache.org/dist/xml/xerces-c/Xerces-C_2_6_0/

Alberto

Pankaj Thakur wrote:

> Hi,
>
> My component uses xerces-c 2.6.0 lib. I am not able to get source distribution for this version.
> Can any one send relevant link for this source distribution.
>
> Thanks,
> Pankaj
>
>
>      Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: c-dev-unsubscribe@...
> For additional commands, e-mail: c-dev-help@...
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...


      Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew

---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...


Re: Linking xercesc_2.lib with MINGW-GCC compiled code.

by Boris Kolpackov-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi Pankaj,

Pankaj Thakur <pthakur81@...> writes:

> I am using xercesc_2.lib which i for from 2.6.0 xercesc Bin Distribution.
> Is it right way of linking or do i need to take xercess2.6.0 source
> distribution and build lib for mingw?

This library is built using one of the VC++ compiler and the ABI used
by VC++ and g++ are incompatible. So, yes, you will need to build the
Xerces-C++ library for MinGW from source yourself.

Boris

--
Boris Kolpackov, Code Synthesis        http://codesynthesis.com/~boris/blog
Open-source XML data binding for C++   http://codesynthesis.com/products/xsd
XML data binding for embedded systems  http://codesynthesis.com/products/xsde
Command line interface to C++ compiler http://codesynthesis.com/projects/cli


---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@...
For additional commands, e-mail: c-dev-help@...