Commit 8c9daf790abfc06e8ca3a44652542c577bb67d49

Nick Wellnhofer 2018-09-12T13:42:27

Check return value of nodePush in xmlSAX2StartElement If the maximum depth is exceeded, nodePush halts the parser which results in freeing the input buffer since the previous commit. This invalidates the attribute pointers, so the error condition must be checked. Found by OSS-Fuzz.