739351d476
Change log:95336cb92b..191d55580eFull diff:95336cb92b..191d55580eRoll chromium third_party 4e16929f46..3a8f2a9e1e Change log:4e16929f46..3a8f2a9e1eChanged dependencies: * src/tools:c44a3f5eca..f524a53b81DEPS diff:95336cb92b..191d55580e/DEPS No update to Clang. TBR=titovartem@google.com, BUG=None CQ_INCLUDE_TRYBOTS=master.internal.tryserver.corp.webrtc:linux_internal Change-Id: Ic9c4a62b050383646e9fcf5cc07a5653c14ac06e Reviewed-on: https://webrtc-review.googlesource.com/76120 Reviewed-by: Patrik Höglund <phoglund@webrtc.org> Reviewed-by: Karl Wiberg <kwiberg@webrtc.org> Reviewed-by: Artem Titov <titovartem@webrtc.org> Commit-Queue: Artem Titov <titovartem@webrtc.org> Cr-Commit-Position: refs/heads/master@{#23205}
20 lines
623 B
Diff
20 lines
623 B
Diff
diff --git a/third_party/libxml/src/parserInternals.c b/third_party/libxml/src/parserInternals.c
|
|
index bfc778ac1f77..286fdcea9760 100644
|
|
--- src/parserInternals.c
|
|
+++ src/parserInternals.c
|
|
@@ -1369,8 +1369,13 @@ xmlNewInputStream(xmlParserCtxtPtr ctxt) {
|
|
* should not happen while parsing which is the situation where
|
|
* the id is actually needed.
|
|
*/
|
|
- if (ctxt != NULL)
|
|
+ if (ctxt != NULL) {
|
|
+ if (ctxt->input_id >= INT_MAX) {
|
|
+ xmlErrMemory(ctxt, "Input ID overflow\n");
|
|
+ return(NULL);
|
|
+ }
|
|
input->id = ctxt->input_id++;
|
|
+ }
|
|
|
|
return(input);
|
|
}
|