2013-09-26 17:14:40 +02:00

16 lines
591 B
Plaintext

$NetBSD: patch-aq,v 1.11 2009/08/18 11:57:33 markd Exp $
KDE svn 1002164 fixes CVE-2009-1725
--- khtml/html/htmltokenizer.cpp.orig 2007-05-14 19:52:39.000000000 +1200
+++ khtml/html/htmltokenizer.cpp
@@ -736,7 +736,7 @@ void HTMLTokenizer::parseEntity(Tokenize
#ifdef TOKEN_DEBUG
kdDebug( 6036 ) << "unknown entity!" << endl;
#endif
- checkBuffer(10);
+ checkBuffer(11);
// ignore the sequence, add it to the buffer as plaintext
*dest++ = '&';
for(unsigned int i = 0; i < cBufferPos; i++)