Menu

#100 invalid free due to array modification in pyxStartElement

closed-fixed
nobody
main code (54)
5
2012-12-28
2012-12-12
No

In function pyxStartElement, qsort is used to sort the attributes argument in place.

Since libxml2 keeps track of which attributes have been allocated and which not, this may lead to a program crash when pyxStartElement reorders the elements of the attributes array.

Patch attached.

Discussion

  • Claudio Bley

    Claudio Bley - 2012-12-12
     
  • Claudio Bley

    Claudio Bley - 2012-12-12
    • summary: invalid free due attributes modification in pyxStartElement --> invalid free due to array modification in pyxStartElement
     
  • Noam Postavsky

    Noam Postavsky - 2012-12-14

    Thanks, I applied your patch as commit 9a3a1862b3f315f8bd4cec1b9347cdd9180b4e71.

     
  • Noam Postavsky

    Noam Postavsky - 2012-12-14
    • status: open --> open-fixed
     
  • Noam Postavsky

    Noam Postavsky - 2012-12-28
    • status: open-fixed --> closed-fixed
     
  • Noam Postavsky

    Noam Postavsky - 2012-12-28

    Fixed in 1.4.2

     

Log in to post a comment.

Auth0 Logo