commit b287b21eb679c80f3041bd496ad1ed32ab9d152d
author aPiecek <piecek@cesnet.cz> Tue May 04 14:24:25 2021 +0200
committer Michal Vasko <mvasko@cesnet.cz> Tue May 04 16:00:45 2021 +0200
tree 2c77f551e4ee4d2d286bee12376c08a46d77cbb7
parent 32874e17e9d91e7505ceb386e0bc96a1189a0edb

xml BUGFIX regard to utf8 in lyxml_parse_value()

src/xml.c

diff --git a/src/xml.c b/src/xml.c
index 2f027b4..e4bc8bd 100644
--- a/src/xml.c
+++ b/src/xml.c
@@ -344,7 +344,7 @@
 #define BUFSIZE_STEP 128
 
     const struct ly_ctx *ctx = xmlctx->ctx; /* shortcut */
-    const char *in = xmlctx->in->current, *start;
+    const char *in = xmlctx->in->current, *start, *in_aux;
     char *buf = NULL;
     size_t offset;   /* read offset in input buffer */
     size_t len;      /* length of the output string (write offset in output buffer) */
@@ -478,7 +478,10 @@
             }
 
             /* continue */
-            ++offset;
+            in_aux = &in[offset];
+            LY_CHECK_ERR_GOTO(ly_getutf8(&in_aux, &n, &u),
+                    LOGVAL(ctx, LY_VCODE_INCHAR, in[offset]), error);
+            offset += u;
         }
     }
 

tests/fuzz/corpus/lyd_parse_mem_xml/pull1537

diff --git a/tests/fuzz/corpus/lyd_parse_mem_xml/pull1537 b/tests/fuzz/corpus/lyd_parse_mem_xml/pull1537
new file mode 100644
index 0000000..4e5141a
--- /dev/null
+++ b/tests/fuzz/corpus/lyd_parse_mem_xml/pull1537
@@ -0,0 +1 @@
+<str xmlns='urn:tests:types'>&apos;Ó<
\ No newline at end of file