25 lines
807 B
Diff
25 lines
807 B
Diff
From efcb347440ade24b9f1054671e6bd05e60b4cafd Mon Sep 17 00:00:00 2001
|
|
From: Samanta Navarro <ferivoz@riseup.net>
|
|
Date: Tue, 15 Feb 2022 11:56:57 +0000
|
|
Subject: [PATCH] Prevent integer overflow in copyString
|
|
|
|
The copyString function is only used for encoding string supplied by
|
|
the library user.
|
|
---
|
|
lib/xmlparse.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/lib/xmlparse.c b/lib/xmlparse.c
|
|
index 4b43e613..a39377c2 100644
|
|
--- a/lib/xmlparse.c
|
|
+++ b/lib/xmlparse.c
|
|
@@ -7412,7 +7412,7 @@ getElementType(XML_Parser parser, const ENCODING *enc, const char *ptr,
|
|
|
|
static XML_Char *
|
|
copyString(const XML_Char *s, const XML_Memory_Handling_Suite *memsuite) {
|
|
- int charsRequired = 0;
|
|
+ size_t charsRequired = 0;
|
|
XML_Char *result;
|
|
|
|
/* First determine how long the string is */
|