Gumbo HTML解析器节点类型未初始化内存访问漏洞修复

漏洞概述 该漏洞涉及Gumbo库中的 类型处理问题。在Gumbo 0.10.0版本中，虽然引入了 ，但HTML-Gumbo尚未更新以支持这一新类型。这导致在遍历树时，可能会访问未初始化的内存，从而引发潜在的安全问题。 影响范围 受影响版本：Gumbo 0.10.0及之后版本 具体影响：在处理模板节点时，可能会访问未初始化的内存，导致程序行为异常或崩溃。 修复方案 修复内容：在 函数中添加对 类型的处理，确保在遍历树时正确处理模板节点。 具体修改：在 函数中，增加对 类型的判断，确保在处理模板节点时不会访问未初始化的内存。 代码块 ```diff diff --git a/lib/HTML/Gumbo.xs b/lib/HTML/Gumbo.xs index 37612ad..3fac2cf 100644 --- a/lib/HTML/Gumbo.xs +++ b/lib/HTML/Gumbo.xs @@ -30,7 +30,7 @@ typedef enum { GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO_NODE_COMMENT, GUMBO_NODE_WHITESPACE, GUMBO_NODE_CDATA_SECTION, GUMBO_NODE_DOCTYPE, GUMBO_NODE_DOCUMENT, GUMBO_NODE_ELEMENT, GUMBO_NODE_TEXT, GUMBO_NODE_TEMPLATE, GUMBO

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Gumbo HTML解析器节点类型未初始化内存访问漏洞修复

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Gumbo HTML解析器节点类型未初始化内存访问漏洞修复

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！