wok-current annotate libxml2/stuff/CVE-2024-34459.patch @ rev 25792

Fix openbox menu, label keymap on lxpanel and add miss it translation for tazpkg
author Stanislas Leduc <shann@slitaz.org>
date Tue Oct 07 05:55:24 2025 +0000 (2 weeks ago)
parents
children
rev   line source
shann@25728 1 From 8ddc7f13337c9fe7c6b6e616f404b0fffb8a5145 Mon Sep 17 00:00:00 2001
shann@25728 2 From: Nick Wellnhofer <wellnhofer@aevum.de>
shann@25728 3 Date: Wed, 8 May 2024 11:49:31 +0200
shann@25728 4 Subject: [PATCH] [CVE-2024-34459] Fix buffer overread with `xmllint --htmlout`
shann@25728 5
shann@25728 6 Add a missing bounds check.
shann@25728 7 ---
shann@25728 8 xmllint.c | 2 +-
shann@25728 9 1 file changed, 1 insertion(+), 1 deletion(-)
shann@25728 10
shann@25728 11 diff --git a/xmllint.c b/xmllint.c
shann@25728 12 index 0e433b721..62f6b0273 100644
shann@25728 13 --- a/xmllint.c
shann@25728 14 +++ b/xmllint.c
shann@25728 15 @@ -559,7 +559,7 @@ xmlHTMLPrintFileContext(xmlParserInputPtr input) {
shann@25728 16 len = strlen(buffer);
shann@25728 17 snprintf(&buffer[len], sizeof(buffer) - len, "\n");
shann@25728 18 cur = input->cur;
shann@25728 19 - while ((*cur == '\n') || (*cur == '\r'))
shann@25728 20 + while ((cur > base) && ((*cur == '\n') || (*cur == '\r')))
shann@25728 21 cur--;
shann@25728 22 n = 0;
shann@25728 23 while ((cur != base) && (n++ < 80)) {
shann@25728 24 --
shann@25728 25 GitLab