mirror of
https://git.yoctoproject.org/poky
synced 2026-04-26 09:32:14 +02:00
0734868d9d
Upstream-Status: Backport from [d0c3f01e11,235b15a590] CVE: CVE-2023-39615 (From OE-Core rev: d8a585a8c3712cdce9d9a5241ae7e620bc014ed9) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
37 lines
1.3 KiB
Diff
37 lines
1.3 KiB
Diff
From d0c3f01e110d54415611c5fa0040cdf4a56053f9 Mon Sep 17 00:00:00 2001
|
|
From: Nick Wellnhofer <wellnhofer@aevum.de>
|
|
Date: Sat, 6 May 2023 17:47:37 +0200
|
|
Subject: [PATCH] parser: Fix old SAX1 parser with custom callbacks
|
|
|
|
For some reason, xmlCtxtUseOptionsInternal set the start and end element
|
|
SAX handlers to the internal DOM builder functions when XML_PARSE_SAX1
|
|
was specified. This means that custom SAX handlers could never work with
|
|
that flag because these functions would receive the wrong user data
|
|
argument and crash immediately.
|
|
|
|
Fixes #535.
|
|
|
|
Upstream-Status: Backport from [https://gitlab.gnome.org/GNOME/libxml2/-/commit/d0c3f01e110d54415611c5fa0040cdf4a56053f9]
|
|
CVE: CVE-2023-39615
|
|
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
|
|
---
|
|
parser.c | 2 --
|
|
1 file changed, 2 deletions(-)
|
|
|
|
diff --git a/parser.c b/parser.c
|
|
index 6e09208..7814e6e 100644
|
|
--- a/parser.c
|
|
+++ b/parser.c
|
|
@@ -15156,8 +15156,6 @@ xmlCtxtUseOptionsInternal(xmlParserCtxtPtr ctxt, int options, const char *encodi
|
|
}
|
|
#ifdef LIBXML_SAX1_ENABLED
|
|
if (options & XML_PARSE_SAX1) {
|
|
- ctxt->sax->startElement = xmlSAX2StartElement;
|
|
- ctxt->sax->endElement = xmlSAX2EndElement;
|
|
ctxt->sax->startElementNs = NULL;
|
|
ctxt->sax->endElementNs = NULL;
|
|
ctxt->sax->initialized = 1;
|
|
--
|
|
2.24.4
|
|
|