Do not advance beyond the closing tag length in xmlParseEndTag2

third_party/libxml/src/parser.c

Index: third_party/libxml/src/parser.c
diff --git a/third_party/libxml/src/parser.c b/third_party/libxml/src/parser.c
index 0677030c2d9607eea36c424bf4f42f81d22245f2..309dc45fea47ac11581bb39c19a4d9e213bc449e 100644
--- a/third_party/libxml/src/parser.c
+++ b/third_party/libxml/src/parser.c
@@ -9826,6 +9826,7 @@ xmlParseEndTag2(xmlParserCtxtPtr ctxt, const xmlChar *prefix,
     SKIP(2);
 
     if ((tlen > 0) && (xmlStrncmp(ctxt->input->cur, ctxt->name, tlen) == 0)) {
+        tlen = strnlen(ctxt->name, tlen);
         if (ctxt->input->cur[tlen] == '>') {
 	    ctxt->input->cur += tlen + 1;
 	    ctxt->input->col += tlen + 1;