commit 690ba07bda3157cdea1d449023b982508326ce15
author psi <ledyba@users.sourceforge.jp> Sun Nov 03 10:54:33 2013 +0900
committer psi <ledyba@users.sourceforge.jp> Sun Nov 03 10:54:33 2013 +0900
tree 555d7607f75b817da5af2c5eb30fadaddf0529d2
parent e1979a883b41958456b6a08983824bbbbcee81d4

you have to check len before accsessing "p".

tinyxml2.cpp

diff --git a/tinyxml2.cpp b/tinyxml2.cpp
index 040a2a1..7e4ff40 100755
--- a/tinyxml2.cpp
+++ b/tinyxml2.cpp
@@ -1702,6 +1702,11 @@
 	const char* start = p;

     Clear();

 

+    if ( len == 0 ) {

+        SetError( XML_ERROR_EMPTY_DOCUMENT, 0, 0 );

+        return _errorID;

+    }

+

     if ( !p || !*p ) {

         SetError( XML_ERROR_EMPTY_DOCUMENT, 0, 0 );

         return _errorID;