expat: Fix CVE-2022-25235 - missing UTF-8 encoding validation in xmltok_impl.c #1

Open
rajc6h6 wants to merge 1 commits from fix/cve-2022-25235-expat-utf8 into main
pull from: fix/cve-2022-25235-expat-utf8
Owner
  • Added IS_INVALID_CHAR guard in CHECK_NAME_CASE macro
  • Added IS_INVALID_CHAR guard in CHECK_NMSTRT_CASE macro
  • Added IS_INVALID_CHAR guard in prologTok LEAD_CASE block

Backport of upstream libexpat fix from v2.4.5 (PR #562).
Closes #290

- Added IS_INVALID_CHAR guard in CHECK_NAME_CASE macro - Added IS_INVALID_CHAR guard in CHECK_NMSTRT_CASE macro - Added IS_INVALID_CHAR guard in prologTok LEAD_CASE block Backport of upstream libexpat fix from v2.4.5 (PR #562). Closes #290
rajc6h6 added 1 commit 2026-03-10 17:56:06 +00:00
- Added IS_INVALID_CHAR guard in CHECK_NAME_CASE macro
- Added IS_INVALID_CHAR guard in CHECK_NMSTRT_CASE macro
- Added IS_INVALID_CHAR guard in prologTok LEAD_CASE block

Backport of upstream libexpat fix from v2.4.5 (PR #562).
Closes #290
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fix/cve-2022-25235-expat-utf8:fix/cve-2022-25235-expat-utf8
git checkout fix/cve-2022-25235-expat-utf8
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: rajc6h6/kolibrios#1