| commit | 8880170e2187d2041c81418711250841d264af02 | [log] [tgz] |
|---|---|---|
| author | Daniel Veillard <veillard@redhat.com> | Mon Aug 27 16:20:05 2012 +0800 |
| committer | Daniel Veillard <veillard@redhat.com> | Mon Aug 27 16:20:05 2012 +0800 |
| tree | 31c4e4f42f5bbe769e1560b335bf85a9323f19f1 | |
| parent | 890faa546bf386816dea59d0f1075bc3a42de263 [diff] |
Fix the XPath arity check to also check the XPath stack limits Example xmlXPathNormalizeFunction() would do CHECK_ARITY(1) and the expect valuePop(ctxt); to return an object, except now valuePop() looks at the XPath stack frames and fails returning NULL, and we end up crashing dereferencing the object. Real solution is to exten CHECK_ARITY() and recompile all XPath functions using it.