1
0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2025-03-11 12:58:16 +03:00
Nick Wellnhofer 9ab01a277d Fix XPointer paths beginning with range-to
The old code would invoke the broken xmlXPtrRangeToFunction. range-to
isn't really a function but a special kind of location step. Remove
this function and always handle range-to in the XPath code.

The old xmlXPtrRangeToFunction could also be abused to trigger a
use-after-free error with the potential for remote code execution.

Found with afl-fuzz.

Fixes CVE-2016-5131.
2016-10-12 13:12:18 +02:00
..
2009-07-09 10:26:22 +02:00
1999-06-02 17:44:04 +00:00
2000-08-27 21:12:29 +00:00
1999-11-17 17:32:38 +00:00
1999-11-17 17:32:38 +00:00
2000-08-27 21:12:29 +00:00
2000-08-27 21:12:29 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00
1999-06-02 17:44:04 +00:00