[Libreoffice-commits] core.git: Branch 'libreoffice-4-1' - liborcus/liborcus-handle-invalid-xml.patch.1 liborcus/UnpackedTarball_liborcus.mk

[Markus Mohrhard]

 liborcus/UnpackedTarball_liborcus.mk         |    3 +++
 liborcus/liborcus-handle-invalid-xml.patch.1 |   12 ++++++++++++
 2 files changed, 15 insertions(+)

New commits:
commit cc6ce861fe67be93cb14c6c142fabeeffd1fdcd9
Author: Markus Mohrhard <markus.mohrhard at googlemail.com>
Date:   Fri Dec 13 21:06:04 2013 +0100

    handle invalid xml files in orcus, fdo#63844
    
    Change-Id: I82fff6ab89acece0e46c92bfca2c7faf967639b8
    Signed-off-by: Kohei Yoshida <kohei.yoshida at collabora.com>
    Reviewed-on: https://gerrit.libreoffice.org/7077
    Reviewed-by: Kohei Yoshida <libreoffice at kohei.us>
    Tested-by: Kohei Yoshida <libreoffice at kohei.us>

diff --git a/liborcus/UnpackedTarball_liborcus.mk b/liborcus/UnpackedTarball_liborcus.mk
index e43144d..062999d 100644
--- a/liborcus/UnpackedTarball_liborcus.mk
+++ b/liborcus/UnpackedTarball_liborcus.mk
@@ -21,6 +21,9 @@ liborcus_patches += liborcus_0.1.0-configure.patch
 # don't use dllimport
 liborcus_patches += liborcus_0.1.0-dllimport.patch
 
+# fdo#63844
+liborcus_patches += liborcus-handle-invalid-xml.patch.1
+
 ifeq ($(OS),MACOSX)
 # no "tac" command on OS X, but "tail -r"
 liborcus_patches += liborcus_0.1.0-tac.patch
diff --git a/liborcus/liborcus-handle-invalid-xml.patch.1 b/liborcus/liborcus-handle-invalid-xml.patch.1
new file mode 100644
index 0000000..4cb091d
--- /dev/null
+++ b/liborcus/liborcus-handle-invalid-xml.patch.1
@@ -0,0 +1,12 @@
+diff -ur liborcus.org/include/orcus/sax_parser.hpp liborcus/include/orcus/sax_parser.hpp
+--- liborcus.org/include/orcus/sax_parser.hpp	2013-12-13 20:51:55.126503773 +0100
++++ liborcus/include/orcus/sax_parser.hpp	2013-12-13 20:57:39.076174743 +0100
+@@ -278,6 +278,8 @@
+             special_tag();
+         break;
+         default:
++            if (!is_alpha(c))
++                throw malformed_xml_error("expect an alphabet.");
+             element_open(pos);
+     }
+ }