Skip to content

xsltEvalUserParams() and xsltQuoteUserParams() are susceptible to integer overflow

David Kilzer requested to merge ddkilzer/libxslt:ddkilzer/xsltEvalUserParams-and-xsltQuoteUserParams-integer-overflow into master

xsltEvalUserParams() and xsltQuoteUserParams() are susceptible to integer overflow when iterating through const char** array

  • libxslt/variables.c: (xsltEvalUserParams): (xsltQuoteUserParams):
  • Prevent integer overflow by changing the type of indx variables from int to size_t.

Merge request reports