tree 0a67fcb3d23b1b4fd021d5ae28f4b35a86b3f784
parent 3f8a91036d338e51c059d54397a42d645f019c65
author Nick Wellnhofer <wellnhofer@aevum.de> 1467131692 +0200
committer Nick Wellnhofer <wellnhofer@aevum.de> 1476270738 +0200

Disallow namespace nodes in XPointer ranges

Namespace nodes must be copied to avoid use-after-free errors.
But they don't necessarily have a physical representation in a
document, so simply disallow them in XPointer ranges.

Found with afl-fuzz.

Fixes CVE-2016-4658.