Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(262)

Side by Side Diff: third_party/libxml/chromium/libxml2-2.9.4-security-CVE-2017-7375-xmlParsePEReference-xxe.patch

Issue 2797923004: Improve XML serialization, URI parsing, and XPath node set processing. (Closed)
Patch Set: Rebase. Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
(Empty)
1 https://bugzilla.gnome.org/show_bug.cgi?id=780691
2
3 --- src/parser.c
4 +++ src/parser.c
5 @@ -8130,6 +8130,14 @@ xmlParsePEReference(xmlParserCtxtPtr ctxt)
6 if (xmlPushInput(ctxt, input) < 0)
7 return;
8 } else {
9 + if ((entity->etype == XML_EXTERNAL_PARAMETER_ENTITY) &&
10 + ((ctxt->options & XML_PARSE_NOENT) == 0) &&
11 + ((ctxt->options & XML_PARSE_DTDVALID) == 0) &&
12 + ((ctxt->options & XML_PARSE_DTDLOAD) == 0) &&
13 + ((ctxt->options & XML_PARSE_DTDATTR) == 0) &&
14 + (ctxt->replaceEntities == 0) &&
15 + (ctxt->validate == 0))
16 + return;
17 /*
18 * TODO !!!
19 * handle the extra spaces added before and after
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698