Nick Wellnhofer c7260a47f1 malloc-fail: Don't call xmlErrMemory in xmlstring.c ...

Functions like xmlStrdup are called in the error handling code
(__xmlRaiseError) which can cause problems like use-after-free or
infinite loops when invoked recursively.

Calling xmlErrMemory without a context argument isn't helpful anyway.

Found with libFuzzer, see #344.

2023-01-24 11:47:33 +01:00

26 KiB

Raw Blame History

View Raw