We should be doing fuzz testing, both for schemas, and for data files being parsed and unparsed. (fuzzed valid XML infoset input???)

There are tools for this like : http://lcamtuf.coredump.cx/afl/

See also wikipedia on fuzz testing: https://en.wikipedia.org/wiki/Fuzz_testing