Skip to content
  • Nick Wellnhofer's avatar
    Never expand parameter entities in text declaration · a28f7d87
    Nick Wellnhofer authored
    When parsing the text declaration of external DTDs or entities, make
    sure that parameter entities are not expanded. This also fixes a memory
    leak in certain error cases.
    
    The change to xmlSkipBlankChars assumes that the parser state is
    maintained correctly when parsing external DTDs or parameter entities,
    and might expose bugs in the code that were hidden previously.
    
    Found by OSS-Fuzz.
    a28f7d87