Apply a vendor fix (rev 1.165): Don't update next pointer since it could

confuse tokenizer. Obtained from: expat CVS Security: CVE-2009-3720
2009-12-11 02:06:06 +00:00 · 2009-12-11 02:06:06 +00:00 · 9fcd883dcb
commit 9fcd883dcb
parent e03f057175
1 changed files with 0 additions and 1 deletions
--- a/lib/xmlparse.c
+++ b/lib/xmlparse.c
@ -3725,7 +3725,6 @@ doProlog(XML_Parser parser,
        return XML_ERROR_NO_ELEMENTS;
      default:
        tok = -tok;
-        next = end;
        break;
      }
    }