diff options
| author | Nick Wellnhofer <wellnhofer@aevum.de> | 2017-07-04 17:13:06 +0200 |
|---|---|---|
| committer | Nick Wellnhofer <wellnhofer@aevum.de> | 2017-07-04 18:51:29 +0200 |
| commit | 8a0c66986e68c1c23fc3bb421b73465937c803b2 (patch) | |
| tree | 085b92439d528992da3702ba3e1f52f8b6a85387 /xmlregexp.c | |
| parent | 52ceced6e7038a6bff4960f3e5e729ed01448a41 (diff) | |
| download | libxml2-8a0c66986e68c1c23fc3bb421b73465937c803b2.tar.gz | |
Fix NULL pointer deref in xmlFAParseCharClassEsc
Found with libFuzzer.
Diffstat (limited to 'xmlregexp.c')
| -rw-r--r-- | xmlregexp.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/xmlregexp.c b/xmlregexp.c index 7dc6eeaf..019399fd 100644 --- a/xmlregexp.c +++ b/xmlregexp.c @@ -4881,7 +4881,8 @@ xmlFAParseCharClassEsc(xmlRegParserCtxtPtr ctxt) { } NEXT; xmlFAParseCharProp(ctxt); - ctxt->atom->neg = 1; + if (ctxt->atom != NULL) + ctxt->atom->neg = 1; if (CUR != '}') { ERROR("Expecting '}'"); return; |