| Summary | CSS Parser 100% CPU usage |
| Queue | Horde Framework Packages |
| Type | Bug |
| State | Resolved |
| Priority | 2. Medium |
| Owners | jan (at) horde (dot) org |
| Requester | azurit (at) pobox (dot) sk |
| Created | 04/06/2016 (3375 days ago) |
| Due | |
| Updated | 04/08/2016 (3373 days ago) |
| Assigned | 04/06/2016 (3375 days ago) |
| Resolved | 04/07/2016 (3374 days ago) |
| Github Issue Link | |
| Github Pull Request | |
| Milestone | |
| Patch | No |
commit e02440a4ad7932b0c02437e602005b9522d0478d
Author: Jan Schneider <jan@horde.org>
Date: Thu Apr 7 15:21:34 2016 +0200
Add a test for
bug #14318..../test/Horde/Css/Parser/ParserTest.php | 8 ++++++++
1 files changed, 8 insertions(+), 0 deletions(-)
http://github.com/horde/horde/commit/e02440a4ad7932b0c02437e602005b9522d0478d
State ⇒ Resolved
commit c462001168dc27dc786d9dacf244feb06cf33087
Author: Jan Schneider <jan@horde.org>
Date: Thu Apr 7 15:16:51 2016 +0200
[jan] Fix upstream regression causing infite loops with empty CSS
documents (
Bug #14318).framework/Css_Parser/lib/Horde/Css/Parser.php | 5 +++++
framework/Css_Parser/package.xml | 4 ++--
2 files changed, 7 insertions(+), 2 deletions(-)
http://github.com/horde/horde/commit/c462001168dc27dc786d9dacf244feb06cf33087
<!--a75c305b1c0a6022--><style type="text/css">aaa</style>
The problem is with empty <!--a75c305b1c0a6022--><style> tag.
<!--a75c305b1c0a6022--><style type="text/css"></style>
with this (so message size will remain the same):
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
and problem was gone for this message.
newest stable versions.
<!--a75c305b1c0a6022--><style type="text/css"></style>
since the message didn't contain any CSS at all.
New Attachment: 1459524260.M13375P28515.server00,S=5616,W=5735:2,S
(who probably doesn't know that something like this happened).
State ⇒ Feedback
Priority ⇒ 2. Medium
Ticket: 14317Priority ⇒ 3. High
State ⇒ Unconfirmed
Patch ⇒ No
Milestone ⇒
Summary ⇒ CSS Parser 100% CPU usage
Type ⇒ Bug
Queue ⇒ Horde Framework Packages
some cases and possibly causing a DoS (when max_execution_time is
disabled):
2016-04-06T14:23:09+02:00 EMERG: HORDE [imp] Maximum execution time of
120 seconds exceeded [pid 20629 on line 578 of
"/usr/share/php/Horde/Css/Parser/vendor/sabberworm/php-css-parser/lib/Sabberworm/CSS/Parser.php"]
2016-04-06T14:23:08+02:00 EMERG: HORDE [imp] Maximum execution time of
120 seconds exceeded [pid 20617 on line 18 of
"/usr/share/php/Horde/Css/Parser/vendor/sabberworm/php-css-parser/lib/Sabberworm/CSS/Parsing/UnexpectedTokenException.php"]
2016-04-06T14:34:29+02:00 EMERG: HORDE [imp] Maximum execution time of
120 seconds exceeded [pid 7743 on line 96 of
"/usr/share/php/Horde/Css/Parser/vendor/sabberworm/php-css-parser/lib/Sabberworm/CSS/Parser.php"]
Downgrading to 1.0.8 seems to fix the problem.