Taken as it's from:

http://git.gnome.org/browse/libxslt/commit/?id=937ba2a3eb42d288f53c8adc211bd1122869f0bf

For https://bugzilla.redhat.com/show_bug.cgi?id=852935

CVE-2012-2871

From 937ba2a3eb42d288f53c8adc211bd1122869f0bf Mon Sep 17 00:00:00 2001

From: Daniel Veillard <[email protected]>

Date: Wed, 08 Aug 2012 07:31:05 +0000

Subject: Fix default template processing on namespace nodes

---

diff --git a/libxslt/transform.c b/libxslt/transform.c

index 53eefcc..c6df19e 100644

--- a/libxslt/transform.c

+++ b/libxslt/transform.c

@@ -4895,7 +4895,10 @@ xsltApplyTemplates(xsltTransformContextPtr ctxt, xmlNodePtr node,

 	list = xmlXPathNodeSetCreate(NULL);

 	if (list == NULL)

 	    goto error;

-	cur = node->children;

+	if (node->type != XML_NAMESPACE_DECL)

+	    cur = node->children;

+	else

+	    cur = NULL;

 	while (cur != NULL) {

 	    switch (cur->type) {

 		case XML_TEXT_NODE:

@@ -4944,6 +4947,8 @@ xsltApplyTemplates(xsltTransformContextPtr ctxt, xmlNodePtr node,

 		    if (cur->prev != NULL)

 			cur->prev->next = cur->next;

 		    break;

+		case XML_NAMESPACE_DECL:

+		    break;

 		default:

 #ifdef WITH_XSLT_DEBUG_PROCESS

 		    XSLT_TRACE(ctxt,XSLT_TRACE_APPLY_TEMPLATES,xsltGenericDebug(xsltGenericDebugContext,

--

cgit v0.9.0.2