Nick Wellnhofer a28f7d8789 Never expand parameter entities in text declaration ...

When parsing the text declaration of external DTDs or entities, make
sure that parameter entities are not expanded. This also fixes a memory
leak in certain error cases.

The change to xmlSkipBlankChars assumes that the parser state is
maintained correctly when parsing external DTDs or parameter entities,
and might expose bugs in the code that were hidden previously.

Found by OSS-Fuzz.

2020-06-10 14:25:19 +02:00

428 KiB

Raw Blame History

View Raw