153aa9179Sopenharmony_ciFrom a5787229e5c53d522364cd68397cdc61094ac51a Mon Sep 17 00:00:00 2001
253aa9179Sopenharmony_ciFrom: Nick Wellnhofer <wellnhofer@aevum.de>
353aa9179Sopenharmony_ciDate: Sun, 5 Mar 2023 14:09:34 +0100
453aa9179Sopenharmony_ciSubject: [PATCH] malloc-fail: Fix memory leak in xmlSchemaBucketCreate
553aa9179Sopenharmony_ci
653aa9179Sopenharmony_ciFound with libFuzzer, see #344.
753aa9179Sopenharmony_ci
853aa9179Sopenharmony_ciReference:https://github.com/GNOME/libxml2/commit/260d6b8d77d11a20a2614eef99e88e68eaca6550
953aa9179Sopenharmony_ciConflict:NA
1053aa9179Sopenharmony_ci---
1153aa9179Sopenharmony_ci xmlschemas.c | 4 ++--
1253aa9179Sopenharmony_ci 1 file changed, 2 insertions(+), 2 deletions(-)
1353aa9179Sopenharmony_ci
1453aa9179Sopenharmony_cidiff --git a/xmlschemas.c b/xmlschemas.c
1553aa9179Sopenharmony_ciindex 724920b..9ace2b7 100644
1653aa9179Sopenharmony_ci--- a/xmlschemas.c
1753aa9179Sopenharmony_ci+++ b/xmlschemas.c
1853aa9179Sopenharmony_ci@@ -3658,12 +3658,12 @@ xmlSchemaBucketCreate(xmlSchemaParserCtxtPtr pctxt,
1953aa9179Sopenharmony_ci     ret->type = type;
2053aa9179Sopenharmony_ci     ret->globals = xmlSchemaItemListCreate();
2153aa9179Sopenharmony_ci     if (ret->globals == NULL) {
2253aa9179Sopenharmony_ci-	xmlFree(ret);
2353aa9179Sopenharmony_ci+	xmlSchemaBucketFree(ret);
2453aa9179Sopenharmony_ci 	return(NULL);
2553aa9179Sopenharmony_ci     }
2653aa9179Sopenharmony_ci     ret->locals = xmlSchemaItemListCreate();
2753aa9179Sopenharmony_ci     if (ret->locals == NULL) {
2853aa9179Sopenharmony_ci-	xmlFree(ret);
2953aa9179Sopenharmony_ci+	xmlSchemaBucketFree(ret);
3053aa9179Sopenharmony_ci 	return(NULL);
3153aa9179Sopenharmony_ci     }
3253aa9179Sopenharmony_ci     /*
3353aa9179Sopenharmony_ci-- 
3453aa9179Sopenharmony_ci2.27.0
3553aa9179Sopenharmony_ci
36