Version 7.6.3.2-android, tag libreoffice-7.6.3.2-android
[LibreOffice.git] / external / redland / raptor / 0001-CVE-2020-25713-raptor2-malformed-input-file-can-lead.patch.1
blob1fb279df3e4df9d1ebc33e917da6f34a50b97b35
1 From a549457461874157c8c8e8e8a6e0eec06da4fbd0 Mon Sep 17 00:00:00 2001
2 From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= <caolanm@redhat.com>
3 Date: Tue, 24 Nov 2020 10:30:20 +0000
4 Subject: [PATCH] CVE-2020-25713 raptor2: malformed input file can lead to a
5  segfault
7 due to an out of bounds array access in
8 raptor_xml_writer_start_element_common
10 See:
11 https://bugs.mageia.org/show_bug.cgi?id=27605
12 https://www.openwall.com/lists/oss-security/2020/11/13/1
13 https://gerrit.libreoffice.org/c/core/+/106249
14 ---
15  src/raptor_xml_writer.c | 2 +-
16  1 file changed, 1 insertion(+), 1 deletion(-)
18 diff --git a/src/raptor_xml_writer.c b/src/raptor_xml_writer.c
19 index 56993dc3..4426d38c 100644
20 --- a/src/raptor_xml_writer.c
21 +++ b/src/raptor_xml_writer.c
22 @@ -227,7 +227,7 @@ raptor_xml_writer_start_element_common(raptor_xml_writer* xml_writer,
23            
24            /* check it wasn't an earlier declaration too */
25            for(j = 0; j < nspace_declarations_count; j++)
26 -            if(nspace_declarations[j].nspace == element->attributes[j]->nspace) {
27 +            if(nspace_declarations[j].nspace == element->attributes[i]->nspace) {
28                declare_me = 0;
29                break;
30              }
31 -- 
32 2.28.0