Date: Thu, 10 Dec 2009 21:23:46 +0000 (UTC) From: Xin LI <delphij@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-vendor@freebsd.org Subject: svn commit: r200368 - vendor/expat/dist/lib Message-ID: <200912102123.nBALNkbp075450@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: delphij Date: Thu Dec 10 21:23:46 2009 New Revision: 200368 URL: http://svn.freebsd.org/changeset/base/200368 Log: Correct a DoS issue when processing XML document with malformed UTF-8 sequences. Obtained from: expat CVS (revisions 1.14 and 1.15) Security: CVE-2009-3560 Modified: vendor/expat/dist/lib/xmltok_impl.c Modified: vendor/expat/dist/lib/xmltok_impl.c ============================================================================== --- vendor/expat/dist/lib/xmltok_impl.c Thu Dec 10 21:18:53 2009 (r200367) +++ vendor/expat/dist/lib/xmltok_impl.c Thu Dec 10 21:23:46 2009 (r200368) @@ -1744,7 +1744,7 @@ PREFIX(updatePosition)(const ENCODING *e const char *end, POSITION *pos) { - while (ptr != end) { + while (ptr < end) { switch (BYTE_TYPE(enc, ptr)) { #define LEAD_CASE(n) \ case BT_LEAD ## n: \
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200912102123.nBALNkbp075450>