diff options
| author | Selim Gurun <sgurun@google.com> | 2012-04-03 10:25:15 -0700 |
|---|---|---|
| committer | Jessica Gonzalez <jgaona@codeaurora.org> | 2012-05-01 16:02:31 -0700 |
| commit | 6f87ebf2cabccbb133a5637605ddcf84c0f6ab77 (patch) | |
| tree | bd1c8604cfe2b82843c7907b85a2d1314761aa68 | |
| parent | f4faac137ddd9064872470b799ec8ff436b91ef4 (diff) | |
| download | android_external_libxml2-cm-9.1.0.tar.gz android_external_libxml2-cm-9.1.0.tar.bz2 android_external_libxml2-cm-9.1.0.zip | |
DO NOT MERGE Fix for CVE-2011-3919ics-releaseicscm-9.1.0
Bug: 6086504
Change-Id: I9c5c9868ff4c2fe89f3dabb3267f07d3b67c1b00
| -rw-r--r-- | parser.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -2570,7 +2570,7 @@ xmlStringLenDecodeEntities(xmlParserCtxtPtr ctxt, const xmlChar *str, int len, buffer[nbchars++] = '&'; if (nbchars > buffer_size - i - XML_PARSER_BUFFER_SIZE) { - growBuffer(buffer, XML_PARSER_BUFFER_SIZE); + growBuffer(buffer, i + XML_PARSER_BUFFER_SIZE); } for (;i > 0;i--) buffer[nbchars++] = *cur++; |