summaryrefslogtreecommitdiff
path: root/textproc/libxml2/patches/patch-af
diff options
context:
space:
mode:
Diffstat (limited to 'textproc/libxml2/patches/patch-af')
-rw-r--r--textproc/libxml2/patches/patch-af21
1 files changed, 21 insertions, 0 deletions
diff --git a/textproc/libxml2/patches/patch-af b/textproc/libxml2/patches/patch-af
new file mode 100644
index 00000000000..16b3e1788e0
--- /dev/null
+++ b/textproc/libxml2/patches/patch-af
@@ -0,0 +1,21 @@
+$NetBSD: patch-af,v 1.1 2008/10/09 15:01:27 tron Exp $
+
+Patch for CVE-2008-4409 taken from here:
+
+http://bugzilla.gnome.org/show_bug.cgi?id=554660
+http://bugzilla.gnome.org/attachment.cgi?id=119824
+
+--- parser.c.orig 2008-09-01 07:22:40.000000000 +0100
++++ parser.c 2008-10-09 15:22:55.000000000 +0100
+@@ -7225,8 +7225,10 @@
+ * Predefined entites override any extra definition
+ */
+ ent = xmlGetPredefinedEntity(name);
+- if (ent != NULL)
++ if (ent != NULL) {
++ *str = ptr;
+ return(ent);
++ }
+
+ /*
+ * Increate the number of entity references parsed