[Mono-bugs] [Bug 555631] New: XSP crashes with Illegal Instruction when parsing asp tag with quoted attributes inside a similarly quoted HTML attribute

[bugzilla_noreply at novell.com]

http://bugzilla.novell.com/show_bug.cgi?id=555631


           Summary: XSP crashes with Illegal Instruction when parsing asp
                    tag with quoted attributes inside a similarly quoted
                    HTML attribute
    Classification: Mono
           Product: Mono: Class Libraries
           Version: 2.4.x
          Platform: Other
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Sys.Web
        AssignedTo: mhabersack at novell.com
        ReportedBy: NTmatter at gmail.com
         QAContact: mono-bugs at lists.ximian.com
          Found By: ---
           Blocker: ---


--- Comment #0 from Thomas Johnson <NTmatter at gmail.com> 2009-11-15 13:11:31 UTC ---
Created an attachment (id=327592)
ASPX page demonstrating the crash

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us)
AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10

The XSP process crashes when it comes across an ASPX page with an HTML tag with
an attribute containing an ASP tag whose attributes are surrounded by the same
kind of quotes. (eg, nested double-quotes inside double quoted attributes)

On its own, <asp:Literal id='itemColor' text='red' /> and <asp:Literal
id="itemColor" text="red" /> are fine.

When nested inside an HTML tag, <p style="color: <asp:Literal id='itemColor'
text='red' />;"> and <p style='color: <asp:Literal id="itemColor" text="red"
/>;'> are fine as well.

When using the same quotes in both the ASP tag and the attribute, XSP will
crash citing an illegal hardware instruction: <p style="color: <asp:Literal
id="itemColor" text="red" />;"> <p style='color: <asp:Literal id='itemColor'
text='red' />;'>

Reproducible: Always

Steps to Reproduce:
1. Create aspx page containing <a href="<asp:Literal id="crasher" />">Hello</a>
2. Start new instance of XSP
3. Visit created page
Actual Results:  
XSP crashes. In ZSH, "illegal hardware instruction" is printed to the console.
In Bash "Illegal instruction" is printed to the console.

Expected Results:  
Page should render, or at least a 500 Error should be displayed.

Tested against OSX 10.5 and 10.6 with the repackaged version of Mono 2.4.2.3


-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.