commit | 178ba47be52f77f7b90c6d18f45d7f53b5ea2aff | [log] [tgz] |
---|---|---|
author | Brian C. Young <bcyoung@google.com> | Mon Apr 03 12:39:04 2017 -0700 |
committer | Brian C. Young <bcyoung@google.com> | Mon Apr 10 13:21:54 2017 -0700 |
tree | acd002f00b02475c145242de74b193e6a4b199bb | |
parent | 1a54b826b810c6c8b9055c737034f752e3db4cdb [diff] |
DO NOT MERGE: Disallow namespace nodes in XPointer ranges Namespace nodes must be copied to avoid use-after-free errors. But they don't necessarily have a physical representation in a document, so simply disallow them in XPointer ranges. Found with afl-fuzz. Fixes CVE-2016-4658. Bug: 36554207 Change-Id: Ie570c4a53ae8ca82ed4ca19701ab7d8ba9b0468f