tree 2655a5f002cc161778be10f095e705e6fe144333
parent 72b3c067cedbb80dbbac755cca79ff502c858ad5
author Nick Wellnhofer <wellnhofer@aevum.de> 1619112388 +0200
committer Nick Wellnhofer <wellnhofer@aevum.de> 1619113466 +0200

Fix user-after-free with `xmllint --xinclude --dropdtd`

The --dropdtd option can leave dangling pointers in entity reference
nodes. Make sure to skip these nodes when processing XIncludes.

This also avoids scanning entity declarations and even modifying
them inadvertently during XInclude processing.

Move from a block list to an allow list approach to avoid descending
into other node types that can't contain elements.

Fixes #237.