components/libxml2/patches/libxml2-Fix-potential-out-of-bound-access.patch
author doug leavitt <doug.leavitt@oracle.com>
Wed, 22 May 2013 10:12:33 -0700
branchs11-update
changeset 2632 af488b226b98
parent 2562 dee01a72a7d4
permissions -rw-r--r--
16763104 backport 15998664 to 11.2 - berkeleydb doesn't build with jdk 1.7

From 6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d Mon Sep 17 00:00:00 2001
From: Daniel Veillard <[email protected]>
Date: Mon, 29 Oct 2012 02:39:55 +0000
Subject: Fix potential out of bound access

---
diff --git a/parser.c b/parser.c
index 0d8d7f2..bd634e9 100644
--- a/parser.c
+++ b/parser.c
@@ -4076,7 +4076,7 @@ xmlParseAttValueComplex(xmlParserCtxtPtr ctxt, int *attlen, int normalize) {
         goto error;
 
     if ((in_space) && (normalize)) {
-        while (buf[len - 1] == 0x20) len--;
+        while ((len > 0) && (buf[len - 1] == 0x20)) len--;
     }
     buf[len] = 0;
     if (RAW == '<') {
--
cgit v0.9.0.2