lib/libxml2
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2025-10-24 13:33:01 +03:00
Code Activity

malloc-fail: Fix buffer overread after htmlParseScript

Browse Source 
Found by OSS-Fuzz, see #344.
This commit is contained in:
Nick Wellnhofer
2023-03-20 15:52:38 +01:00
parent b1319c902f
commit 44ecefc8cc
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
HTMLparser.c
View File

@@ -3139,6 +3139,7 @@ htmlParseScript(htmlParserCtxtPtr ctxt) {
htmlParseErrInt(ctxt, XML_ERR_INVALID_CHAR, htmlParseErrInt(ctxt, XML_ERR_INVALID_CHAR,
"Invalid char in CDATA 0x%X\n", cur); "Invalid char in CDATA 0x%X\n", cur);
} }
NEXTL(l);
if (nbchar >= HTML_PARSER_BIG_BUFFER_SIZE) { if (nbchar >= HTML_PARSER_BIG_BUFFER_SIZE) {
buf[nbchar] = 0; buf[nbchar] = 0;
if (ctxt->sax->cdataBlock!= NULL) { if (ctxt->sax->cdataBlock!= NULL) {
@@ -3152,7 +3153,6 @@ htmlParseScript(htmlParserCtxtPtr ctxt) {
nbchar = 0; nbchar = 0;
SHRINK; SHRINK;
} }
NEXTL(l);
cur = CUR_CHAR(l); cur = CUR_CHAR(l);
} }