summaryrefslogtreecommitdiffstats
path: root/Modules/expat
diff options
context:
space:
mode:
authorBrett Cannon <bcannon@gmail.com>2009-08-13 19:27:12 (GMT)
committerBrett Cannon <bcannon@gmail.com>2009-08-13 19:27:12 (GMT)
commit764465f31506601d7e3e8a56ecf576caed09bf15 (patch)
tree5819594bea0ab8f40f214a516a50b3fea6c2cf9a /Modules/expat
parentc4ad0345cf7789dc432ff57ab644db230d8baf1c (diff)
downloadcpython-764465f31506601d7e3e8a56ecf576caed09bf15.zip
cpython-764465f31506601d7e3e8a56ecf576caed09bf15.tar.gz
cpython-764465f31506601d7e3e8a56ecf576caed09bf15.tar.bz2
Expat could crash if given the wrong kind of input by never stopping its
tokenizing step. Thanks to Ivan Krstić for the patch.
Diffstat (limited to 'Modules/expat')
-rw-r--r--Modules/expat/xmltok_impl.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/Modules/expat/xmltok_impl.c b/Modules/expat/xmltok_impl.c
index 0ee57ab..f793a6b 100644
--- a/Modules/expat/xmltok_impl.c
+++ b/Modules/expat/xmltok_impl.c
@@ -1741,7 +1741,7 @@ PREFIX(updatePosition)(const ENCODING *enc,
const char *end,
POSITION *pos)
{
- while (ptr != end) {
+ while (ptr < end) {
switch (BYTE_TYPE(enc, ptr)) {
#define LEAD_CASE(n) \
case BT_LEAD ## n: \