Author: delphij
Date: Fri Dec 11 02:06:06 2009
New Revision: 200390
URL: http://svn.freebsd.org/changeset/base/200390
Log:
Apply a vendor fix (rev 1.165): Don't update next pointer since it could
confuse tokenizer.
Obtained from: expat CVS
Security: CVE-2009-3720
Modified:
vendor/expat/dist/lib/xmlparse.c
Modified: vendor/expat/dist/lib/xmlparse.c
==============================================================================
--- vendor/expat/dist/lib/xmlparse.c Fri Dec 11 02:00:18 2009
(r200389)
+++ vendor/expat/dist/lib/xmlparse.c Fri Dec 11 02:06:06 2009
(r200390)
@@ -3725,7 +3725,6 @@ doProlog(XML_Parser parser,
return XML_ERROR_NO_ELEMENTS;
default:
tok = -tok;
- next = end;
break;
}
}
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
