# http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560 # http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?view=patch&r1=1.166&r2=1.164 --- xmlparse.c 2009/09/29 02:49:16 1.164 +++ xmlparse.c 2009/12/29 18:42:05 1.166 @@ -3701,6 +3701,9 @@ return XML_ERROR_UNCLOSED_TOKEN; case XML_TOK_PARTIAL_CHAR: return XML_ERROR_PARTIAL_CHAR; + case -XML_TOK_PROLOG_S: + tok = -tok; + break; case XML_TOK_NONE: #ifdef XML_DTD /* for internal PE NOT referenced between declarations */