153aa9179Sopenharmony_ciFrom 70b21c9f2a31b3ecfe8aa624c01da3ebba9e06c8 Mon Sep 17 00:00:00 2001
253aa9179Sopenharmony_ciFrom: Nick Wellnhofer <wellnhofer@aevum.de>
353aa9179Sopenharmony_ciDate: Sun, 26 Feb 2023 14:33:16 +0100
453aa9179Sopenharmony_ciSubject: [PATCH] malloc-fail: Fix null deref in xmlXPathCompiledEvalInternal
553aa9179Sopenharmony_ci
653aa9179Sopenharmony_ciFound with libFuzzer, see #344.
753aa9179Sopenharmony_ci
853aa9179Sopenharmony_ciReference:https://github.com/GNOME/libxml2/commit/70b21c9f2a31b3ecfe8aa624c01da3ebba9e06c8
953aa9179Sopenharmony_ciConflict:NA
1053aa9179Sopenharmony_ci---
1153aa9179Sopenharmony_ci xpath.c | 2 ++
1253aa9179Sopenharmony_ci 1 file changed, 2 insertions(+)
1353aa9179Sopenharmony_ci
1453aa9179Sopenharmony_cidiff --git a/xpath.c b/xpath.c
1553aa9179Sopenharmony_ciindex d63bdd7..54d9c58 100644
1653aa9179Sopenharmony_ci--- a/xpath.c
1753aa9179Sopenharmony_ci+++ b/xpath.c
1853aa9179Sopenharmony_ci@@ -14370,6 +14370,8 @@ xmlXPathCompiledEvalInternal(xmlXPathCompExprPtr comp,
1953aa9179Sopenharmony_ci     }
2053aa9179Sopenharmony_ci #endif
2153aa9179Sopenharmony_ci     pctxt = xmlXPathCompParserContext(comp, ctxt);
2253aa9179Sopenharmony_ci+    if (pctxt == NULL)
2353aa9179Sopenharmony_ci+        return(-1);
2453aa9179Sopenharmony_ci     res = xmlXPathRunEval(pctxt, toBool);
2553aa9179Sopenharmony_ci 
2653aa9179Sopenharmony_ci     if (pctxt->error != XPATH_EXPRESSION_OK) {
2753aa9179Sopenharmony_ci-- 
2853aa9179Sopenharmony_ci2.27.0
2953aa9179Sopenharmony_ci
30