tree d21cd87061b80c50979bdb306d61979b3dedb397
parent d59035b1a04113d5bb58a9ec20ea8fb27bd46272
author Juraj Vijtiuk <30860583+jvijtiuk@users.noreply.github.com> 1594217998 +0200
committer GitHub <noreply@github.com> 1594217998 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJfBdYOCRBK7hj4Ov3rIwAAdHIIAJM1U8mv0SWV4fdvjWhvnmAt
 KhHdtqKRliSAmcn3qA1PawkhlsnKOlqeG6jIE9gDqSYIJazhhnkIWvcsHGgrqLQC
 05N+yZkGqtDT48Q4G8KJrSK61KJxOfBpgLo7PHuDNlEnFrfwR1um2fELDkTgrfL2
 tw6a2CUnuf/MUxTOz21OptAwpluUf36SBQXXWUn38s3JQrJfMtBRz9kc8BjqA4jV
 ZADADF1uliEOvm/Jz27pJ3f7LHF/LNE8amrOc2m2VXvdXb2zPy5As6rjf2LRk1Dr
 CVGo2aJ8XwlM8N7OF4Cs12kQv+cuRzaAry67pZGCw6ezuBCNPi6sw3cH2YMEf8U=
 =GTFA
 -----END PGP SIGNATURE-----
 

xml BUGFIX heap oob crash issues in lyxml_parse_value (#1129)

Fix an out of bounds write that appeared due to buf being increased in size
only once, even if len + offset + 4 were larger than size by a number
larger than BUFSIZE_STEP. Incrementally increase the buffer size, as long as it
is smaller than len + offset + 4.

Fix uninitialized variable u used to store a UTF-8 character in the same
function to stop valgrind complains about uninitialized reads.