153aa9179Sopenharmony_ciFrom dbc893f5885cf60f9ebed89c363ff810bde3ebb5 Mon Sep 17 00:00:00 2001
253aa9179Sopenharmony_ciFrom: Nick Wellnhofer <wellnhofer@aevum.de>
353aa9179Sopenharmony_ciDate: Fri, 3 Mar 2023 13:02:11 +0100
453aa9179Sopenharmony_ciSubject: [PATCH] malloc-fail: Fix memory leak in xmlCopyNamespaceList
553aa9179Sopenharmony_ci
653aa9179Sopenharmony_ciFound with libFuzzer, see #344.
753aa9179Sopenharmony_ci
853aa9179Sopenharmony_ciReference:https://github.com/GNOME/libxml2/commit/dbc893f5885cf60f9ebed89c363ff810bde3ebb5
953aa9179Sopenharmony_ciConflict:NA
1053aa9179Sopenharmony_ci---
1153aa9179Sopenharmony_ci tree.c | 4 ++++
1253aa9179Sopenharmony_ci 1 file changed, 4 insertions(+)
1353aa9179Sopenharmony_ci
1453aa9179Sopenharmony_cidiff --git a/tree.c b/tree.c
1553aa9179Sopenharmony_ciindex 4a80e28..14d5247 100644
1653aa9179Sopenharmony_ci--- a/tree.c
1753aa9179Sopenharmony_ci+++ b/tree.c
1853aa9179Sopenharmony_ci@@ -4046,6 +4046,10 @@ xmlCopyNamespaceList(xmlNsPtr cur) {
1953aa9179Sopenharmony_ci 
2053aa9179Sopenharmony_ci     while (cur != NULL) {
2153aa9179Sopenharmony_ci         q = xmlCopyNamespace(cur);
2253aa9179Sopenharmony_ci+        if (q == NULL) {
2353aa9179Sopenharmony_ci+            xmlFreeNsList(ret);
2453aa9179Sopenharmony_ci+            return(NULL);
2553aa9179Sopenharmony_ci+        }
2653aa9179Sopenharmony_ci 	if (p == NULL) {
2753aa9179Sopenharmony_ci 	    ret = p = q;
2853aa9179Sopenharmony_ci 	} else {
2953aa9179Sopenharmony_ci-- 
3053aa9179Sopenharmony_ci2.27.0
3153aa9179Sopenharmony_ci
32