summaryrefslogtreecommitdiffstats
path: root/expat/expat-CVE-2009-3720.patch
diff options
context:
space:
mode:
Diffstat (limited to 'expat/expat-CVE-2009-3720.patch')
-rw-r--r--expat/expat-CVE-2009-3720.patch14
1 files changed, 14 insertions, 0 deletions
diff --git a/expat/expat-CVE-2009-3720.patch b/expat/expat-CVE-2009-3720.patch
new file mode 100644
index 0000000..994d5ad
--- /dev/null
+++ b/expat/expat-CVE-2009-3720.patch
@@ -0,0 +1,14 @@
+# http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720
+# http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch
+
+--- xmltok_impl.c 2006/11/26 17:34:46 1.13
++++ xmltok_impl.c 2008/06/13 13:18:44 1.15
+@@ -1744,7 +1744,7 @@
+ const char *end,
+ POSITION *pos)
+ {
+- while (ptr != end) {
++ while (ptr < end) {
+ switch (BYTE_TYPE(enc, ptr)) {
+ #define LEAD_CASE(n) \
+ case BT_LEAD ## n: \