diff options
| author | Zach van Rijn <me@zv.io> | 2022-01-12 14:14:08 +0000 |
|---|---|---|
| committer | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2022-05-01 17:05:44 -0500 |
| commit | 3c74645a3f795c6d5be1a50549bfb18bfda3b16c (patch) | |
| tree | fb0a4a4d722de6181a1381dc091b197294716312 /system/libxml2/CVE-2020-7595.patch | |
| parent | dcdcbc210b327185fc9e79abc0ca0e8f3026a5c5 (diff) | |
| download | packages-3c74645a3f795c6d5be1a50549bfb18bfda3b16c.tar.gz packages-3c74645a3f795c6d5be1a50549bfb18bfda3b16c.tar.bz2 packages-3c74645a3f795c6d5be1a50549bfb18bfda3b16c.tar.xz packages-3c74645a3f795c6d5be1a50549bfb18bfda3b16c.zip | |
system/{libxml2,libxslt}: bump to Adélie-vendored versions temporarily. fixes #359, #463, #464.
Diffstat (limited to 'system/libxml2/CVE-2020-7595.patch')
| -rw-r--r-- | system/libxml2/CVE-2020-7595.patch | 32 |
1 files changed, 0 insertions, 32 deletions
diff --git a/system/libxml2/CVE-2020-7595.patch b/system/libxml2/CVE-2020-7595.patch deleted file mode 100644 index 3dd677497..000000000 --- a/system/libxml2/CVE-2020-7595.patch +++ /dev/null @@ -1,32 +0,0 @@ -From 0e1a49c8907645d2e155f0d89d4d9895ac5112b5 Mon Sep 17 00:00:00 2001 -From: Zhipeng Xie <xiezhipeng1@huawei.com> -Date: Thu, 12 Dec 2019 17:30:55 +0800 -Subject: [PATCH] Fix infinite loop in xmlStringLenDecodeEntities - -When ctxt->instate == XML_PARSER_EOF,xmlParseStringEntityRef -return NULL which cause a infinite loop in xmlStringLenDecodeEntities - -Found with libFuzzer. - -Signed-off-by: Zhipeng Xie <xiezhipeng1@huawei.com> ---- - parser.c | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/parser.c b/parser.c -index d1c31963..a34bb6cd 100644 ---- a/parser.c -+++ b/parser.c -@@ -2646,7 +2646,8 @@ xmlStringLenDecodeEntities(xmlParserCtxtPtr ctxt, const xmlChar *str, int len, - else - c = 0; - while ((c != 0) && (c != end) && /* non input consuming loop */ -- (c != end2) && (c != end3)) { -+ (c != end2) && (c != end3) && -+ (ctxt->instate != XML_PARSER_EOF)) { - - if (c == 0) break; - if ((c == '&') && (str[1] == '#')) { --- -2.24.1 - |