From f4653dcd8be8b2b44814b9a3fd358a7bbb87b8c4 Mon Sep 17 00:00:00 2001
From: Daniel Veillard <veillard@redhat.com>
Date: Fri, 21 Aug 2009 18:40:50 +0200
Subject: [PATCH] 447899 potential double free in xmlFreeTextReader

* xmlreader.c: a document may still be referenced by fakenode,
  just free fakenode before freeing the document.
---
 xmlreader.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/xmlreader.c b/xmlreader.c
index eda32f32..1e562c2c 100644
--- a/xmlreader.c
+++ b/xmlreader.c
@@ -2214,6 +2214,9 @@ xmlFreeTextReader(xmlTextReaderPtr reader) {
 	xmlFree(reader->patternTab);
     }
 #endif
+    if (reader->faketext != NULL) {
+	xmlFreeNode(reader->faketext);
+    }
     if (reader->ctxt != NULL) {
         if (reader->dict == reader->ctxt->dict)
 	    reader->dict = NULL;
@@ -2235,9 +2238,6 @@ xmlFreeTextReader(xmlTextReaderPtr reader) {
 	xmlFree(reader->sax);
     if ((reader->input != NULL)  && (reader->allocs & XML_TEXTREADER_INPUT))
 	xmlFreeParserInputBuffer(reader->input);
-    if (reader->faketext != NULL) {
-	xmlFreeNode(reader->faketext);
-    }
     if (reader->buffer != NULL)
         xmlBufferFree(reader->buffer);
     if (reader->entTab != NULL)