Date: Fri, 11 Dec 2009 02:06:06 +0000 (UTC) From: Xin LI <delphij@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-vendor@freebsd.org Subject: svn commit: r200390 - vendor/expat/dist/lib Message-ID: <200912110206.nBB2665b082738@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: delphij Date: Fri Dec 11 02:06:06 2009 New Revision: 200390 URL: http://svn.freebsd.org/changeset/base/200390 Log: Apply a vendor fix (rev 1.165): Don't update next pointer since it could confuse tokenizer. Obtained from: expat CVS Security: CVE-2009-3720 Modified: vendor/expat/dist/lib/xmlparse.c Modified: vendor/expat/dist/lib/xmlparse.c ============================================================================== --- vendor/expat/dist/lib/xmlparse.c Fri Dec 11 02:00:18 2009 (r200389) +++ vendor/expat/dist/lib/xmlparse.c Fri Dec 11 02:06:06 2009 (r200390) @@ -3725,7 +3725,6 @@ doProlog(XML_Parser parser, return XML_ERROR_NO_ELEMENTS; default: tok = -tok; - next = end; break; } }
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200912110206.nBB2665b082738>