Re: [xslt] Bug in "xsltProcessUserParamInternal"

[Daniel Veillard <veillard redhat com>]

On Sat, Apr 27, 2002 at 05:05:11PM +0200, Babak Vahedipour-Kunze wrote:
> Hello Daniel,
> 
> I recently discovered a bug in libxslt 1.0.16 which can cause 
> a process to crash in
> 
>     libxslt/variables.c
>         xsltProcessUserParamInternal(ctxt, name, value, eval).
> 
> All the mess happens during "Name lookup" which, when failed 
> (on lines 753 - 777), leaves behind two dead pointers namely
> "ncname" and "prefix" that now point to xmlFree'd memory. 
> However this does not prevent "ncname" from being xmlStrdup'd
> on line 839 which then will certainly cause weird things.

   Okay tried to fix this in a simple way:

http://cvs.gnome.org/bonsai/cvsquery.cgi?module=libxslt&branch=HEAD&branchtype=match&dir=libxslt&file=&filetype=match&who=veillard&whotype=match&sortby=Date&hours=&date=explicit&mindate=04%2F28%2F02+11%3A46&maxdate=04%2F28%2F02+11%3A48&cvsroot=%2Fcvs%2Fgnome

> almost forgot to mention: libxslt rulez...

   thanks,

Daniel

-- 
Daniel Veillard      | Red Hat Network https://rhn.redhat.com/
veillard@redhat.com  | libxml GNOME XML XSLT toolkit  http://xmlsoft.org/
http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/