From 2cf25e6f0e6a814ce6d1d59565c8fb110d3401a9 Mon Sep 17 00:00:00 2001
From: joehni
Date: Sat, 23 Mar 2024 01:29:30 +0100
Subject: [PATCH] Fix encoding in example for CVE-2022-40151.
---
xstream-distribution/src/content/CVE-2022-40151.html | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/xstream-distribution/src/content/CVE-2022-40151.html b/xstream-distribution/src/content/CVE-2022-40151.html
index 5fd80e5b6..d3829677c 100644
--- a/xstream-distribution/src/content/CVE-2022-40151.html
+++ b/xstream-distribution/src/content/CVE-2022-40151.html
@@ -35,11 +35,11 @@ Steps to Reproduce
following code snippet and unmarshal it with XStream:
String xml = new String();
int i = 0;
- for( ; i < 10000; ++i) {
- xml += "";
+ for( ; i < 10000; ++i) {
+ xml += "<set>";
}
- for( ; i > 0; --i) {
- xml += "";
+ for( ; i > 0; --i) {
+ xml += "</set>";
}
XStream xstream = new XStream();