svn commit: r200390 - vendor/expat/dist/lib

Xin LI delphij at FreeBSD.org
Thu Dec 10 18:06:06 PST 2009


Author: delphij
Date: Fri Dec 11 02:06:06 2009
New Revision: 200390
URL: http://svn.freebsd.org/changeset/base/200390

Log:
  Apply a vendor fix (rev 1.165): Don't update next pointer since it could
  confuse tokenizer.
  
  Obtained from:	expat CVS
  Security:	CVE-2009-3720

Modified:
  vendor/expat/dist/lib/xmlparse.c

Modified: vendor/expat/dist/lib/xmlparse.c
==============================================================================
--- vendor/expat/dist/lib/xmlparse.c	Fri Dec 11 02:00:18 2009	(r200389)
+++ vendor/expat/dist/lib/xmlparse.c	Fri Dec 11 02:06:06 2009	(r200390)
@@ -3725,7 +3725,6 @@ doProlog(XML_Parser parser,
         return XML_ERROR_NO_ELEMENTS;
       default:
         tok = -tok;
-        next = end;
         break;
       }
     }


More information about the svn-src-all mailing list