153aa9179Sopenharmony_ciFrom 74263eff5f6212afa2196022ecd2fbc39c6d3c36 Mon Sep 17 00:00:00 2001 253aa9179Sopenharmony_ciFrom: jinsub ahn <jinniahn@gmail.com> 353aa9179Sopenharmony_ciDate: Wed, 30 Mar 2022 06:02:31 +0000 453aa9179Sopenharmony_ciSubject: [PATCH 206/300] fix: xmlXPathParserContext could be double-delete in 553aa9179Sopenharmony_ci OOM case. 653aa9179Sopenharmony_ci 753aa9179Sopenharmony_ciReference:https://github.com/GNOME/libxml2/commit/74263eff5f6212afa2196022ecd2fbc39c6d3c36 853aa9179Sopenharmony_ciConflict:NA 953aa9179Sopenharmony_ci--- 1053aa9179Sopenharmony_ci xpath.c | 2 +- 1153aa9179Sopenharmony_ci 1 file changed, 1 insertion(+), 1 deletion(-) 1253aa9179Sopenharmony_ci 1353aa9179Sopenharmony_cidiff --git a/xpath.c b/xpath.c 1453aa9179Sopenharmony_ciindex c2d8458..e79dcec 100644 1553aa9179Sopenharmony_ci--- a/xpath.c 1653aa9179Sopenharmony_ci+++ b/xpath.c 1753aa9179Sopenharmony_ci@@ -13895,7 +13895,7 @@ xmlXPathRunEval(xmlXPathParserContextPtr ctxt, int toBool) 1853aa9179Sopenharmony_ci xmlMalloc(10 * sizeof(xmlXPathObjectPtr)); 1953aa9179Sopenharmony_ci if (ctxt->valueTab == NULL) { 2053aa9179Sopenharmony_ci xmlXPathPErrMemory(ctxt, "creating evaluation context\n"); 2153aa9179Sopenharmony_ci- xmlFree(ctxt); 2253aa9179Sopenharmony_ci+ return(-1); 2353aa9179Sopenharmony_ci } 2453aa9179Sopenharmony_ci ctxt->valueNr = 0; 2553aa9179Sopenharmony_ci ctxt->valueMax = 10; 2653aa9179Sopenharmony_ci-- 2753aa9179Sopenharmony_ci2.27.0 2853aa9179Sopenharmony_ci 2953aa9179Sopenharmony_ci 30