tree 4c1b5b77d7295ebdb4075b7761ae9dc740e9d8e1
parent 846cf015a77b9bca7b90c17c1f608ece3e268dad
author Peter Simons <psimons@suse.com> 1460714215 +0200
committer Daniel Veillard <veillard@redhat.com> 1463880245 +0800

Add missing increments of recursion depth counter to XML parser.

For https://bugzilla.gnome.org/show_bug.cgi?id=765207
CVE-2016-3705
The functions xmlParserEntityCheck() and xmlParseAttValueComplex() used to call
xmlStringDecodeEntities() in a recursive context without incrementing the
'depth' counter in the parser context. Because of that omission, the parser
failed to detect attribute recursions in certain documents before running out
of stack space.