| OLD | NEW |
| (Empty) | |
| 1 diff --git a/third_party/libxml/src/parser.c b/third_party/libxml/src/parser.c |
| 2 index e3136123dca6..33786f08354d 100644 |
| 3 --- a/parser.c |
| 4 +++ b/parser.c |
| 5 @@ -3426,8 +3426,15 @@ xmlParseNameComplex(xmlParserCtxtPtr ctxt) { |
| 6 xmlFatalErr(ctxt, XML_ERR_NAME_TOO_LONG, "Name"); |
| 7 return(NULL); |
| 8 } |
| 9 - if ((*ctxt->input->cur == '\n') && (ctxt->input->cur[-1] == '\r')) |
| 10 + if ((*ctxt->input->cur == '\n') && (ctxt->input->cur[-1] == '\r')) { |
| 11 + if (ctxt->input->base > ctxt->input->cur - (len + 1)) { |
| 12 + return(NULL); |
| 13 + } |
| 14 return(xmlDictLookup(ctxt->dict, ctxt->input->cur - (len + 1), len)); |
| 15 + } |
| 16 + if (ctxt->input->base > ctxt->input->cur - len) { |
| 17 + return(NULL); |
| 18 + } |
| 19 return(xmlDictLookup(ctxt->dict, ctxt->input->cur - len, len)); |
| 20 } |
| 21 |
| 22 -- |
| 23 2.12.2.715.g7642488e1d-goog |
| 24 |
| OLD | NEW |