From d56eb40d135517e8d71c863657e7c0579a003d6c Mon Sep 17 00:00:00 2001 From: "Tobias C. Berner" Date: Mon, 30 Nov 2020 18:45:04 +0000 Subject: textproc/libxml2: ship patches via files/ due to gitlab - gitlab has a tendency to change checksum of patches due to metadata changes - switch to including the patches in the tree directly instead of using PATCH_FILES PR: 251040 Submitted by: daniel.engberg.lists@pyret.net Reported by: David Armstrong --- textproc/libxml2/files/patch-CVE-2019-20388 | 33 +++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 textproc/libxml2/files/patch-CVE-2019-20388 (limited to 'textproc/libxml2/files/patch-CVE-2019-20388') diff --git a/textproc/libxml2/files/patch-CVE-2019-20388 b/textproc/libxml2/files/patch-CVE-2019-20388 new file mode 100644 index 000000000000..a049f2c6f019 --- /dev/null +++ b/textproc/libxml2/files/patch-CVE-2019-20388 @@ -0,0 +1,33 @@ +From 7ffcd44d7e6c46704f8af0321d9314cd26e0e18a Mon Sep 17 00:00:00 2001 +From: Zhipeng Xie +Date: Tue, 20 Aug 2019 16:33:06 +0800 +Subject: [PATCH] Fix memory leak in xmlSchemaValidateStream + +When ctxt->schema is NULL, xmlSchemaSAXPlug->xmlSchemaPreRun +alloc a new schema for ctxt->schema and set vctxt->xsiAssemble +to 1. Then xmlSchemaVStart->xmlSchemaPreRun initialize +vctxt->xsiAssemble to 0 again which cause the alloced schema +can not be freed anymore. + +Found with libFuzzer. + +Signed-off-by: Zhipeng Xie +--- + xmlschemas.c | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/xmlschemas.c b/xmlschemas.c +index 301c8449..39d92182 100644 +--- xmlschemas.c ++++ xmlschemas.c +@@ -28090,7 +28090,6 @@ xmlSchemaPreRun(xmlSchemaValidCtxtPtr vctxt) { + vctxt->nberrors = 0; + vctxt->depth = -1; + vctxt->skipDepth = -1; +- vctxt->xsiAssemble = 0; + vctxt->hasKeyrefs = 0; + #ifdef ENABLE_IDC_NODE_TABLES_TEST + vctxt->createIDCNodeTables = 1; +-- +GitLab + -- cgit v1.2.3