| commit | 4753a5024c3854eead5384fd4af2927a8c906b7f | [log] [tgz] |
|---|---|---|
| author | Brian C. Young <bcyoung@google.com> | Mon Apr 03 12:54:00 2017 -0700 |
| committer | Brian C. Young <bcyoung@google.com> | Thu Apr 06 17:18:48 2017 -0700 |
| tree | dd65b25758c0be3c5781de5509e5d02c89d9370c | |
| parent | 01c357604fe77000d84cd016eef7c3bdc9088e13 [diff] [blame] |
DO NOT MERGE: fix for the XPath nodeTab use-after-free bug from nmehta@ see https://bugs.chromium.org/p/chromium/issues/detail?id=705445 Bug: 36809819 Change-Id: I4832550032669a8e921bd46068281d9daf594ae1
diff --git a/xpath.c b/xpath.c index 67afbca..3472ff0 100644 --- a/xpath.c +++ b/xpath.c
@@ -4368,7 +4368,7 @@ } memset(ret, 0 , (size_t) sizeof(xmlXPathObject)); ret->type = XPATH_XSLT_TREE; - ret->boolval = 1; + ret->boolval = 0; ret->user = (void *) val; ret->nodesetval = xmlXPathNodeSetCreate(val); #ifdef XP_DEBUG_OBJ_USAGE