Fix possible stack overflow with xml::decode

calamity-inc · Jan 17, 2025 · b644a4a · b644a4a
1 parent 59f84dd
commit b644a4a
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/soup/xml.cpp b/soup/xml.cpp
@@ -68,7 +68,7 @@ NAMESPACE_SOUP
 		auto i = begin;
 		do
 		{
-			if (auto node = parseImpl(i, end, mode))
+			if (auto node = parseImpl(i, end, mode, 1000))
 			{
 				res.emplace_back(std::move(node));
 			}
@@ -77,8 +77,10 @@ NAMESPACE_SOUP
 		return res;
 	}
 
-	UniquePtr<XmlNode> xml::parseImpl(const char*& i, const char* end, const XmlMode& mode)
+	UniquePtr<XmlNode> xml::parseImpl(const char*& i, const char* end, const XmlMode& mode, int max_depth)
 	{
+		SOUP_ASSERT(max_depth != 0, "Depth limit exceeded");
+
 		while (i != end && string::isSpace(*i))
 		{
 			++i;
@@ -393,11 +395,11 @@ NAMESPACE_SOUP
 					text.clear();
 				}
 #if DEBUG_PARSE
-				auto child = parseImpl(i, end, mode);
+				auto child = parseImpl(i, end, mode, max_depth - 1);
 				std::cout << "Recursed for " << child->encode() << std::endl;
 				tag->children.emplace_back(std::move(child));
 #else
-				tag->children.emplace_back(parseImpl(i, end, mode));
+				tag->children.emplace_back(parseImpl(i, end, mode, max_depth - 1));
 #endif
 				if (i == end)
 				{

diff --git a/soup/xml.hpp b/soup/xml.hpp
@@ -21,7 +21,7 @@ NAMESPACE_SOUP
 		[[nodiscard]] static std::vector<UniquePtr<XmlNode>> parse(const std::string& xml, const XmlMode& mode = MODE_XML);
 		[[nodiscard]] static std::vector<UniquePtr<XmlNode>> parse(const char* begin, const char* end, const XmlMode& mode = MODE_XML);
 	private:
-		[[nodiscard]] static UniquePtr<XmlNode> parseImpl(const char*& i, const char* end, const XmlMode& mode);
+		[[nodiscard]] static UniquePtr<XmlNode> parseImpl(const char*& i, const char* end, const XmlMode& mode, int max_depth);
 	};
 
 	struct XmlNode