commit 764465f31506601d7e3e8a56ecf576caed09bf15
author Brett Cannon <bcannon@gmail.com> Thu Aug 13 19:27:12 2009 +0000
committer Brett Cannon <bcannon@gmail.com> Thu Aug 13 19:27:12 2009 +0000
tree 5819594bea0ab8f40f214a516a50b3fea6c2cf9a
parent c4ad0345cf7789dc432ff57ab644db230d8baf1c

Expat could crash if given the wrong kind of input by never stopping its
tokenizing step.

Thanks to Ivan Krstić for the patch.

Misc/NEWS

diff --git a/Misc/NEWS b/Misc/NEWS
index 54758ae..42e14a2 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -1227,6 +1227,9 @@
 Extension Modules
 -----------------
 
+- Fix a segfault in expat when given a specially crafted input lead to the
+  tokenizer not stopping.
+
 - Issue #6561: '\d' in a regex now matches only characters with
   Unicode category 'Nd' (Number, Decimal Digit).  Previously it also
   matched characters with category 'No'.