153aa9179Sopenharmony_ciFrom 3b59fdf001f030e1b2180d3303347119e05d8dcb Mon Sep 17 00:00:00 2001
253aa9179Sopenharmony_ciFrom: Nick Wellnhofer <wellnhofer@aevum.de>
353aa9179Sopenharmony_ciDate: Wed, 15 Feb 2023 13:28:24 +0100
453aa9179Sopenharmony_ciSubject: [PATCH] malloc-fail: Fix memory leak in xmlXIncludeAddNode
553aa9179Sopenharmony_ci
653aa9179Sopenharmony_ciFound with libFuzzer, see #344.
753aa9179Sopenharmony_ci
853aa9179Sopenharmony_ciReference:https://github.com/GNOME/libxml2/commit/3b59fdf001f030e1b2180d3303347119e05d8dcb
953aa9179Sopenharmony_ciConflict:xinclude.c
1053aa9179Sopenharmony_ci
1153aa9179Sopenharmony_ci---
1253aa9179Sopenharmony_ci xinclude.c | 1 +
1353aa9179Sopenharmony_ci 1 file changed, 1 insertion(+)
1453aa9179Sopenharmony_ci
1553aa9179Sopenharmony_cidiff --git a/xinclude.c b/xinclude.c
1653aa9179Sopenharmony_ciindex 6e5b61d..cc22848 100644
1753aa9179Sopenharmony_ci--- a/xinclude.c
1853aa9179Sopenharmony_ci+++ b/xinclude.c
1953aa9179Sopenharmony_ci@@ -660,6 +660,7 @@ xmlXIncludeAddNode(xmlXIncludeCtxtPtr ctxt, xmlNodePtr cur) {
2053aa9179Sopenharmony_ci     ref = xmlXIncludeNewRef(ctxt, URL, cur);
2153aa9179Sopenharmony_ci     xmlFree(URL);
2253aa9179Sopenharmony_ci     if (ref == NULL) {
2353aa9179Sopenharmony_ci+        xmlFree(fragment);
2453aa9179Sopenharmony_ci 	return(-1);
2553aa9179Sopenharmony_ci     }
2653aa9179Sopenharmony_ci     ref->fragment = fragment;
2753aa9179Sopenharmony_ci-- 
2853aa9179Sopenharmony_ci2.27.0
2953aa9179Sopenharmony_ci
30