package/libxslt/libxslt-1.1.26-pattern-out-of-bounds-read.patch

   1 From fe5a4fa33eb85bce3253ed3742b1ea6c4b59b41b Mon Sep 17 00:00:00 2001
   2 From: Abhishek Arya <inferno@chromium.org>
   3 Date: Sun, 22 Jan 2012 17:47:50 +0800
   4 Subject: [PATCH] Fix some case of pattern parsing errors
   5
   6 We could accidentally hit an off by one string array access
   7 due to improper loop exit when parsing patterns
   8 ---
   9  libxslt/pattern.c |    2 ++
  10  1 files changed, 2 insertions(+), 0 deletions(-)
  11
  12 diff --git a/libxslt/pattern.c b/libxslt/pattern.c
  13 index 6161376..1155b54 100644
  14 --- a/libxslt/pattern.c
  15 +++ b/libxslt/pattern.c
  16 @@ -1867,6 +1867,8 @@ xsltCompilePatternInternal(const xmlChar *pattern, xmlDocPtr doc,
  17                 while ((pattern[end] != 0) && (pattern[end] != '"'))
  18                     end++;
  19             }
  20 +           if (pattern[end] == 0)
  21 +               break;
  22             end++;
  23         }
  24         if (current == end) {
  25 --
  26 1.7.8.4
  27