commit 54a6f13e95ea5e488d7ba6a9fe60cde35e92fab2
author David Sedlák <xsedla1d@stud.fit.vutbr.cz> Tue Jul 16 15:14:18 2019 +0200
committer David Sedlák <xsedla1d@stud.fit.vutbr.cz> Tue Jul 16 15:14:18 2019 +0200
tree 95d3b5d1f08652fa8d885f8acb62001a46462504
parent a62750b6cf093739f16d55301ac8528aa5fbca76

xml parser BUGFIX double free
value was freed but counter wasn't decremented and lyxml_context_clear then caused double free error

src/xml.c

diff --git a/src/xml.c b/src/xml.c
index b5af06f..23c0307 100644
--- a/src/xml.c
+++ b/src/xml.c
@@ -703,7 +703,7 @@
                     e = (struct lyxml_elem*)context->elements.objs[context->elements.count - 1];
                     LY_CHECK_ERR_GOTO(e->prefix_len != prefix_len || e->name_len != name_len
                                       || (prefix_len && strncmp(prefix, e->prefix, e->prefix_len)) || strncmp(name, e->name, e->name_len),
-                            free(e); LOGVAL(ctx, LY_VLOG_LINE, &fakecontext.line, LYVE_SYNTAX,
+                            free(e); --context->elements.count; LOGVAL(ctx, LY_VLOG_LINE, &fakecontext.line, LYVE_SYNTAX,
                                             "Opening and closing elements tag missmatch (\"%.*s\").", name_len, name),
                             error);
                     /* opening and closing element tags matches */