View | Details | Raw Unified
Collapse All | Expand All

(-) SAX2.c.orig (-1 / +7 lines)
 Lines 11-16    Link Here  
#include "libxml.h"
#include "libxml.h"
#include <stdlib.h>
#include <stdlib.h>
#include <string.h>
#include <string.h>
#include <limits.h>
 
#include <libxml/xmlmemory.h>
#include <libxml/xmlmemory.h>
#include <libxml/tree.h>
#include <libxml/tree.h>
#include <libxml/parser.h>
#include <libxml/parser.h>
 Lines 2455-2463    Link Here  
	               (xmlDictOwns(ctxt->dict, lastChild->content))) {
	               (xmlDictOwns(ctxt->dict, lastChild->content))) {
		lastChild->content = xmlStrdup(lastChild->content);
		lastChild->content = xmlStrdup(lastChild->content);
	    }
	    }
	    if ((size_t)ctxt->nodelen > SIZE_T_MAX - (size_t)len || 
	        (size_t)ctxt->nodemem + (size_t)len > SIZE_T_MAX / 2) {
 
	            xmlSAX2ErrMemory(ctxt, "xmlSAX2Characters overflow prevented");
 
	            return;
 
	    }
 
	    if (ctxt->nodelen + len >= ctxt->nodemem) {
	    if (ctxt->nodelen + len >= ctxt->nodemem) {
		xmlChar *newbuf;
		xmlChar *newbuf;
		int size;
 
		size_t size;
 

        
		size = ctxt->nodemem + len;
		size = ctxt->nodemem + len;

        
		size *= 2;
		size *= 2;