rpm/expat
SHA256
1
0
Fork 0
forked from pool/expat
Code Pull Requests Activity

- fix CVE-2009-3560.patch [bnc#566434]

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/expat?expand=0&rev=7
This commit is contained in:
Pavol Rusnak 2010-01-08 14:07:45 +00:00 committed by Git OBS Bridge
parent 5095e284d6
commit 2e3bfa2bcb
2 changed files with 16 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
expat-CVE-2009-3560.patch
View File

@ -1,14 +1,16 @@
http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.164&r2=1.165
http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.164&r2=1.166&view=patch
Index: lib/xmlparse.c
===================================================================
--- lib/xmlparse.c.orig
+++ lib/xmlparse.c
@@ -3725,7 +3725,6 @@ doProlog(XML_Parser parser,
return XML_ERROR_NO_ELEMENTS;
default:
tok = -tok;
- next = end;
break;
}
}
@@ -3703,6 +3703,9 @@ doProlog(XML_Parser parser,
return XML_ERROR_UNCLOSED_TOKEN;
case XML_TOK_PARTIAL_CHAR:
return XML_ERROR_PARTIAL_CHAR;
+ case -XML_TOK_PROLOG_S:
+ tok = -tok;
+ break;
case XML_TOK_NONE:
#ifdef XML_DTD
/* for internal PE NOT referenced between declarations */

5
expat.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Jan 8 15:04:28 CET 2010 - prusnak@suse.cz
- fix CVE-2009-3560.patch [bnc#566434]
-------------------------------------------------------------------
Sun Dec 13 19:28:22 CET 2009 - jengelh@medozas.de