blob: bd316f938c33bed3b2f3a1f5774beab2e9b84cdc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
$NetBSD: patch-cb,v 1.1.2.2 2010/02/28 14:14:23 spz Exp $
deal with CVE-2009-2625.
--- src/expat/lib/xmltok_impl.c.orig 2009-03-06 12:17:57.000000000 +0000
+++ src/expat/lib/xmltok_impl.c
@@ -1741,7 +1741,7 @@ PREFIX(updatePosition)(const ENCODING *e
const char *end,
POSITION *pos)
{
- while (ptr != end) {
+ while (ptr < end) {
switch (BYTE_TYPE(enc, ptr)) {
#define LEAD_CASE(n) \
case BT_LEAD ## n: \
|
