components/libxslt/patches/03-libxslt-Fix-a-bug-in-selecting-XSLT-elements.patch
author Craig Mohrman <craig.mohrman@oracle.com>
Fri, 18 Apr 2014 11:03:12 -0700
branchs11u1-sru
changeset 3086 649b12aa87ce
parent 2471 b1f0e4a84df6
permissions -rw-r--r--
17362112 problem in UTILITY/PHP 18083695 problem in UTILITY/PHP 18181920 remove BUILD_VERSION from php package manifests 18368537 problem in UTILITY/PHP 18368630 problem in UTILITY/PHP

Taken as it's from:

http://git.gnome.org/browse/libxslt/commit/?id=e6a0bc8081271f33b9899eb78e1da1a2a0428419

For https://bugzilla.redhat.com/show_bug.cgi?id=835982
CVE-2012-2825

From e6a0bc8081271f33b9899eb78e1da1a2a0428419 Mon Sep 17 00:00:00 2001
From: Daniel Veillard <[email protected]>
Date: Tue, 07 Aug 2012 03:26:43 +0000
Subject: Fix a bug in selecting XSLT elements

---
diff --git a/libxslt/xsltutils.h b/libxslt/xsltutils.h
index 3886be3..c986a9c 100644
--- a/libxslt/xsltutils.h
+++ b/libxslt/xsltutils.h
@@ -52,8 +52,8 @@ extern "C" {
  * Checks that the element pertains to XSLT namespace.
  */
 #define IS_XSLT_ELEM(n)							\
-    (((n) != NULL) && ((n)->ns != NULL) &&				\
-     (xmlStrEqual((n)->ns->href, XSLT_NAMESPACE)))
+    (((n) != NULL) && ((n)->type == XML_ELEMENT_NODE) &&                \
+     ((n)->ns != NULL) && (xmlStrEqual((n)->ns->href, XSLT_NAMESPACE)))
 
 /**
  * IS_XSLT_NAME:
--
cgit v0.9.0.2