153aa9179Sopenharmony_ciFrom a5787229e5c53d522364cd68397cdc61094ac51a Mon Sep 17 00:00:00 2001 253aa9179Sopenharmony_ciFrom: Nick Wellnhofer <wellnhofer@aevum.de> 353aa9179Sopenharmony_ciDate: Sun, 5 Mar 2023 14:09:34 +0100 453aa9179Sopenharmony_ciSubject: [PATCH] malloc-fail: Fix memory leak in xmlSchemaBucketCreate 553aa9179Sopenharmony_ci 653aa9179Sopenharmony_ciFound with libFuzzer, see #344. 753aa9179Sopenharmony_ci 853aa9179Sopenharmony_ciReference:https://github.com/GNOME/libxml2/commit/260d6b8d77d11a20a2614eef99e88e68eaca6550 953aa9179Sopenharmony_ciConflict:NA 1053aa9179Sopenharmony_ci--- 1153aa9179Sopenharmony_ci xmlschemas.c | 4 ++-- 1253aa9179Sopenharmony_ci 1 file changed, 2 insertions(+), 2 deletions(-) 1353aa9179Sopenharmony_ci 1453aa9179Sopenharmony_cidiff --git a/xmlschemas.c b/xmlschemas.c 1553aa9179Sopenharmony_ciindex 724920b..9ace2b7 100644 1653aa9179Sopenharmony_ci--- a/xmlschemas.c 1753aa9179Sopenharmony_ci+++ b/xmlschemas.c 1853aa9179Sopenharmony_ci@@ -3658,12 +3658,12 @@ xmlSchemaBucketCreate(xmlSchemaParserCtxtPtr pctxt, 1953aa9179Sopenharmony_ci ret->type = type; 2053aa9179Sopenharmony_ci ret->globals = xmlSchemaItemListCreate(); 2153aa9179Sopenharmony_ci if (ret->globals == NULL) { 2253aa9179Sopenharmony_ci- xmlFree(ret); 2353aa9179Sopenharmony_ci+ xmlSchemaBucketFree(ret); 2453aa9179Sopenharmony_ci return(NULL); 2553aa9179Sopenharmony_ci } 2653aa9179Sopenharmony_ci ret->locals = xmlSchemaItemListCreate(); 2753aa9179Sopenharmony_ci if (ret->locals == NULL) { 2853aa9179Sopenharmony_ci- xmlFree(ret); 2953aa9179Sopenharmony_ci+ xmlSchemaBucketFree(ret); 3053aa9179Sopenharmony_ci return(NULL); 3153aa9179Sopenharmony_ci } 3253aa9179Sopenharmony_ci /* 3353aa9179Sopenharmony_ci-- 3453aa9179Sopenharmony_ci2.27.0 3553aa9179Sopenharmony_ci 36