commit | 173a0830dcec769a5f12c5c55ef4ab424b388efb | [log] [tgz] |
---|---|---|
author | Nick Wellnhofer <wellnhofer@aevum.de> | Wed Jul 22 23:15:35 2020 +0200 |
committer | Nick Wellnhofer <wellnhofer@aevum.de> | Wed Jul 22 23:33:04 2020 +0200 |
tree | 89d925f0479e4b8a15cdf16342da0257d768a4c6 | |
parent | 0e5c4fec15dd08115c8a2708dee0127b28a8410e [diff] |
Fix quadratic runtime when push parsing HTML start tags Make sure that htmlParseStartTag doesn't terminate on characters for which IS_CHAR_CH is false like control chars. In htmlParseTryOrFinish, only switch to START_TAG if the next character starts a valid name. Otherwise, htmlParseStartTag might return without consuming all characters up to the final '>'. Found by OSS-Fuzz.