[Open-scap] back port to rhel5.5?

Steve Grubb sgrubb at redhat.com
Thu Apr 21 14:10:43 UTC 2011


On Tuesday, April 19, 2011 06:15:21 PM Menerick, John wrote:
> Looking at the trace, it isn't clear what is happening.  I will need to dig
> into the code.
> 
> OpenScap attempts to load the file into memory, iterating through a chunk
> of file, loads file into memory, iterates, wash/rinse/repeat, then says
> "No Policy to eval...."   For more information, look into
> oscap-xccdf.c:261-281.  

Turns out that the libxml2 package maintainer found the issue and put it in bz 644312. 
For anyone else looking, the patch is something like this:

diff --git a/xmlschemas.c b/xmlschemas.c
index e0d3b7a..3baae05 100644
--- a/xmlschemas.c
+++ b/xmlschemas.c
@@ -22197,7 +22197,7 @@ xmlSchemaXPathEvaluate(xmlSchemaValidCtxtPtr vctxt,
                    "allocating the state object history", NULL);
                return(-1);
            }
-           sto->sizeHistory = 10;
+           sto->sizeHistory = 5;
        } else if (sto->sizeHistory <= sto->nbHistory) {
            sto->sizeHistory *= 2;
            sto->history = (int *) xmlRealloc(sto->history,

There will be a libxml2 errata in the 5.7 update taking care of this.

-Steve




More information about the Open-scap-list mailing list