Roll libxslt to ac341cbd792ee572941cc9a66e73800219a1a386

third_party/libxslt/libxslt/transform.c

 /*
  * transform.c: Implementation of the XSL Transformation 1.0 engine
  *              transform part, i.e. applying a Stylesheet to a document
  *
  * References:
  *   http://www.w3.org/TR/1999/REC-xslt-19991116
  *
  *   Michael Kay "XSLT Programmer's Reference" pp 637-643
  *   Writing Multiple Output Files
  *
@@ skipping 2668 matching lines @@
                     ctxt->insert = oldInsert;
                 } else {
                     /*
                     * Execute the handler-callback.
                     */
 #ifdef WITH_XSLT_DEBUG_PROCESS
                     XSLT_TRACE(ctxt,XSLT_TRACE_APPLY_TEMPLATE,xsltGenericDebug(xsltGenericDebugContext,
                         "xsltApplySequenceConstructor: extension construct %s\n",
                         cur->name));
 #endif
+                    /*
+                     * Disable the xsltCopyTextString optimization for
+                     * extension elements. Extensions could append text using
+                     * xmlAddChild which will free the buffer pointed to by
+                     * 'lasttext'. This buffer could later be reallocated with
+                     * a different size than recorded in 'lasttsize'. See bug
+                     * #777432.
+                     */
+                    if (cur->psvi == xsltExtMarker) {
+                        ctxt->lasttext = NULL;
+                    }
+
                     ctxt->insert = insert;
 
                     func(ctxt, contextNode, cur, cur->psvi);
 
                     /*
                     * Cleanup temporary tree fragments.
                     */
                     if (oldLocalFragmentTop != ctxt->localRVT)
                         xsltReleaseLocalRVTs(ctxt, oldLocalFragmentTop);
 
@@ skipping 163 matching lines @@
                         "xsltApplySequenceConstructor: failed to find extension %s\n",
                         cur->name);
                 }
             } else {
 #ifdef WITH_XSLT_DEBUG_PROCESS
                 XSLT_TRACE(ctxt,XSLT_TRACE_APPLY_TEMPLATE,xsltGenericDebug(xsltGenericDebugContext,
                     "xsltApplySequenceConstructor: extension construct %s\n",
                     cur->name));
 #endif
 
+                /*
+                 * Disable the xsltCopyTextString optimization for
+                 * extension elements. Extensions could append text using
+                 * xmlAddChild which will free the buffer pointed to by
+                 * 'lasttext'. This buffer could later be reallocated with
+                 * a different size than recorded in 'lasttsize'. See bug
+                 * #777432.
+                 */
+                if (cur->psvi == xsltExtMarker) {
+                    ctxt->lasttext = NULL;
+                }
+
                 ctxt->insert = insert;
 
                 function(ctxt, contextNode, cur, cur->psvi);
                 /*
                 * Cleanup temporary tree fragments.
                 */
                 if (oldLocalFragmentTop != ctxt->localRVT)
                     xsltReleaseLocalRVTs(ctxt, oldLocalFragmentTop);
 
                 ctxt->insert = oldInsert;
@@ skipping 2732 matching lines @@
  ************************************************************************/
 
 #ifdef XSLT_GENERATE_HTML_DOCTYPE
 typedef struct xsltHTMLVersion {
     const char *version;
     const char *public;
     const char *system;
 } xsltHTMLVersion;
 
 static xsltHTMLVersion xsltHTMLVersions[] = {
+    { "5", NULL, "about:legacy-compat" },
     { "4.01frame", "-//W3C//DTD HTML 4.01 Frameset//EN",
       "http://www.w3.org/TR/1999/REC-html401-19991224/frameset.dtd"},
     { "4.01strict", "-//W3C//DTD HTML 4.01//EN",
       "http://www.w3.org/TR/1999/REC-html401-19991224/strict.dtd"},
     { "4.01trans", "-//W3C//DTD HTML 4.01 Transitional//EN",
       "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd"},
     { "4.01", "-//W3C//DTD HTML 4.01 Transitional//EN",
       "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd"},
     { "4.0strict", "-//W3C//DTD HTML 4.01//EN",
       "http://www.w3.org/TR/html4/strict.dtd"},
@@ skipping 796 matching lines @@
                            XSLT_NAMESPACE,
                            (xsltTransformFunction) xsltDebug);
     xsltRegisterExtElement(ctxt, (const xmlChar *) "otherwise",
                            XSLT_NAMESPACE,
                            (xsltTransformFunction) xsltDebug);
     xsltRegisterExtElement(ctxt, (const xmlChar *) "fallback",
                            XSLT_NAMESPACE,
                            (xsltTransformFunction) xsltDebug);
 
 }