source: vbox/trunk/src/libs/libxml2-2.9.14/test/recurse/lol4.patch@ 104195

parser.c

@@ -2505 +2505 @@
             c = CUR_SCHAR(str, l);
         else
             c = 0;
+        if ((nbchars > 500000) &&
+            (ctxt->instate == XML_PARSER_ATTRIBUTE_VALUE)) {
+            xmlFatalErr(ctxt, XML_ERR_ENTITY_LOOP, NULL);
+            goto int_error;
+        }
     }
     buffer[nbchars++] = 0;
     return(buffer);