[xmlsec] exc c14n w/o comments bug

Aleksey Sanin aleksey at aleksey.com
Tue May 11 17:50:40 PDT 2004


Tomas,

I compiled the current CVS trunk of LibXML2 and I don't observe
the problem (I added formating to make it readable):

$ d:\sdk\bin\testC14N --exc-without-comments b.xml b.xpath
<wn1:ticket xmlns:i="http://www.w3.org/2001/XMLSchema-instance"
             xmlns:wn0="http://docs.oasis-open.org/wss/2004/01/
                        oasis-200401-wss-wssecurity-utility-1.0.xsd"
             xmlns:wn1="http://xmlsoap.org/Ping" wn0:Id="Id-Ticket1"
             i:nil="true" i:type="wn1:ticketType">
</wn1:ticket>

I also have tested the example you send in the message from 4/20
and I am not able to reproduce the problem (see attached archive
with both examples).

Are you sure that you load correcy versions of the xmlsec and libxml2
libraries? The results you observe are expected with the old version
but I can't explain why you have this issue with the new patched one.



Aleksey


Tomas Sieger wrote:

> Hi,
>  I found another "mutation" of the bug I already reported several weeks 
> ago: multiple namespace declaration in the output of the exclusive c14n 
> w/o comments.
> 
> This time, the bug is really serious. Even libxml2 can't parse its own 
> output :-))).
> 
> You can reproduce the bug using the attached files.
> 
> Run:
> 
>   ./testC14N --exc-without-comments b.xml b.xpath
> 
> I can see this output:
> 
> <wn1:ticket
> xmlns:i="http://www.w3.org/2001/XMLSchema-instance" 
> xmlns:i="http://www.w3.org/2001/XMLSchema-instance" 
> xmlns:wn0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" 
> xmlns:wn1="http://xmlsoap.org/Ping" wn0:Id="Id-Ticket1" i:nil="true" 
> i:type="wn1:ticketType"></wn1:ticket>
> 
> Note the "i" namespace is declared for two times!
> 
> regards,
>  Tomas
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test.tar.gz
Type: application/x-gzip
Size: 2412 bytes
Desc: not available
Url : http://www.aleksey.com/pipermail/xmlsec/attachments/20040511/d5ddc5a1/test.tar-0002.bin


More information about the xmlsec mailing list