#502 potential null pointer dereference

[tomaszmi]

Expat version 2.1.0

There may be a potential null pointer dereference in the xmlparse.c file, line 2914. The lookup function may return NULL and this case is not checked before the line #2914. I'm not familiar with expat details, however in general if such case is not possible, it would be good to make sure the program will be terminated/aborted, for instance using assert:
assert(id);

[tomaszmi]

The similar issue is in the xmlparse.c, line #5478. The id->prefix may be set to null however in the next line the pointer is dereferenced without any check.

[Sandeep L Hegde]

I would like to work on this bug. Please assign it to me.

[tomaszmi]

sahegde1, you are not on the list of people available to be assigned to it.

[Sandeep L Hegde]

Sorry, i am a newbie to open source. How do i add myself to the list.

[Karl Waclawek]

The best approach is to submit a patch in the Patch tracker. We will then review it and merge it into the source code.

[Gaurav]

This surely seems to be a bug. I am attaching the patch for fix.
Please apply the attached patch.

Gaurav

[Sebastian Pipping]

Fixed by commit b3a467e3922a5894a903790673af93b347aba385, included in next release. Closing.