kc3-lang/libxml2/include

Diff

  • Show log

    Commit

  • Hash : 91ac664f
    Author : Nick Wellnhofer
    Date : 2016-04-26T14:47:56 

    Fix OOB write in xmlXPathEmptyNodeSet

xmlXPathEmptyNodeSet would write a NULL pointer just beyond the end of
the nodeTab array. This macro isn't used in libxml2, but in some of the
math functions in libexslt where it can result in heap corruption and
denial of service.

Found by afl-fuzz and ASan.

kmx.io     mail     discord kmxgit v0.4.0