Pranjal Jumde 11ed4a7a90 Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral ...

For https://bugzilla.gnome.org/show_bug.cgi?id=760263

* HTMLparser.c: Add BASE_PTR convenience macro.
(htmlParseSystemLiteral): Store length and start position instead
of a pointer while iterating through the public identifier since
the underlying buffer may change, resulting in a stale pointer
being used.
(htmlParsePubidLiteral): Ditto.

2016-05-23 15:01:07 +08:00

205 KiB

Raw Permalink Blame History

View Raw