c/libxml2
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/libxml2 synced 2025-03-28 21:33:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

relaxng: Fix tree corruption in xmlRelaxNGParseNameClass

Browse Source 
Don't create cycles in tree structure. This will lead to an infinite
loop or call stack overflow later.

Closes: https://gitlab.gnome.org/GNOME/libxml2/-/issues/711
This commit is contained in:
Seiya Nakata 2024-04-04 11:55:28 +09:00 committed by Nick Wellnhofer
parent 16ccb61dc1
commit 5bb84b47b8
4 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
relaxng.c
View File

@ -5273,7 +5273,7 @@ xmlRelaxNGParseNameClass(xmlRelaxNGParserCtxtPtr ctxt, xmlNodePtr node,
if (tmp != NULL) {
if (last == NULL) {
last = tmp;
} else {
} else if (tmp != ret) {
last->next = tmp;
last = tmp;
}

1
result/relaxng/anyName1_0.err Normal file
View File

@ -0,0 +1 @@
./test/relaxng/anyName1_0.xml validates

15
test/relaxng/anyName1.rng Normal file
View File

@ -0,0 +1,15 @@
<?xml version="1.0" encoding="UTF-8"?>
<grammar xmlns="http://relaxng.org/ns/structure/1.0">
<start>
<element>
<choice>
<name>c</name>
<choice>
<name>a</name>
<name>b</name>
</choice>
</choice>
<empty/>
</element>
</start>
</grammar>

1
test/relaxng/anyName1_0.xml Normal file
View File

@ -0,0 +1 @@
<b/>