nekohtml/CVE-2022-24839.patch
wk333 cba72f864f Fix CVE-2022-24839
(cherry picked from commit 7e407e2ee06e8338dbb4d8d67ac548452f98c70d)
2022-04-24 15:43:20 +08:00

23 lines
956 B
Diff

From a800fce3b079def130ed42a408ff1d09f89e773d Mon Sep 17 00:00:00 2001
From: Mike Dalessio <mike.dalessio@gmail.com>
Date: Sun, 3 Apr 2022 19:03:39 -0400
Subject: [PATCH] fix: ensure ill-formed PIs are parsed correctly
---
src/org/cyberneko/html/HTMLScanner.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/org/cyberneko/html/HTMLScanner.java b/src/org/cyberneko/html/HTMLScanner.java
index fe414a4..0519316 100644
--- a/src/org/cyberneko/html/HTMLScanner.java
+++ b/src/org/cyberneko/html/HTMLScanner.java
@@ -2588,7 +2588,7 @@ protected void scanPI() throws IOException {
if (c == '?' || c == '/') {
char c0 = (char)c;
c = fCurrentEntity.read();
- if (c == '>') {
+ if (c == '>' || c == -1) {
break;
}
fStringBuffer.append(c0);