diff --git a/expat-2.0.1-fix3560.patch b/expat-2.0.1-fix3560.patch new file mode 100644 index 0000000..4bf864f --- /dev/null +++ b/expat-2.0.1-fix3560.patch @@ -0,0 +1,17 @@ + +Fix regression in the CVE-2009-3560 patch. + +http://mail.libexpat.org/pipermail/expat-discuss/2009-December/002646.html + +--- expat-2.0.1/lib/xmlparse.c.fix3560 ++++ expat-2.0.1/lib/xmlparse.c +@@ -3703,6 +3703,9 @@ doProlog(XML_Parser parser, + return XML_ERROR_UNCLOSED_TOKEN; + case XML_TOK_PARTIAL_CHAR: + return XML_ERROR_PARTIAL_CHAR; ++ case -XML_TOK_PROLOG_S: ++ tok = -tok; ++ break; + case XML_TOK_NONE: + #ifdef XML_DTD + /* for internal PE NOT referenced between declarations */