From c82270a9a74bd36163cbfaf4f6c20d2d8ca72c8a Mon Sep 17 00:00:00 2001
From: Nick Wellnhofer <wellnhofer@aevum.de>
Date: Sat, 22 Feb 2025 18:51:38 +0100
Subject: [PATCH] regexp: Avoid dangling start/stop pointers in atom

States could be eliminated later, so set start/stop pointers to NULL
after they're used in xmlFAGenerateTransitions.
---
 xmlregexp.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/xmlregexp.c b/xmlregexp.c
index 2a7f762d..f706a177 100644
--- a/xmlregexp.c
+++ b/xmlregexp.c
@@ -1094,8 +1094,6 @@ xmlRegPrintAtom(FILE *output, xmlRegAtomPtr atom) {
 	fprintf(output, "%d entries\n", atom->nbRanges);
 	for (i = 0; i < atom->nbRanges;i++)
 	    xmlRegPrintRange(output, atom->ranges[i]);
-    } else if (atom->type == XML_REGEXP_SUBREG) {
-	fprintf(output, "start %d end %d\n", atom->start->no, atom->stop->no);
     } else {
 	fprintf(output, "\n");
     }
@@ -1615,6 +1613,9 @@ xmlFAGenerateTransitions(xmlRegParserCtxtPtr ctxt, xmlRegStatePtr from,
 	    default:
 		break;
 	}
+        atom->start = NULL;
+        atom->start0 = NULL;
+        atom->stop = NULL;
 	if (xmlRegAtomPush(ctxt, atom) < 0)
 	    return(-1);
 	return(0);