diff options
| author | Arseny Kapoulkine <arseny.kapoulkine@gmail.com> | 2015-03-12 20:21:59 -0700 |
|---|---|---|
| committer | Arseny Kapoulkine <arseny.kapoulkine@gmail.com> | 2015-03-12 20:21:59 -0700 |
| commit | 0542b1869b6970003caa954ebc5f1dea41d48032 (patch) | |
| tree | b6845a48a40b9fd6a835e66b3c2a25807e08c1f1 /src/pugixml.cpp | |
| parent | 604861e520d2d6579674a1c2bd5e59cb10f7ecd2 (diff) | |
Fix buffer overrun when parsing comments inside DOCTYPE
Diffstat (limited to 'src/pugixml.cpp')
| -rw-r--r-- | src/pugixml.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/pugixml.cpp b/src/pugixml.cpp index ce8a79f..4269335 100644 --- a/src/pugixml.cpp +++ b/src/pugixml.cpp @@ -2352,7 +2352,7 @@ PUGI__NS_BEGIN PUGI__SCANFOR(s[0] == '-' && s[1] == '-' && s[2] == '>'); // no need for ENDSWITH because --> can't terminate proper doctype if (!*s) PUGI__THROW_ERROR(status_bad_doctype, s); - s += 4; + s += 3; } else PUGI__THROW_ERROR(status_bad_doctype, s); |