summaryrefslogtreecommitdiff
path: root/src/pugixml.cpp
diff options
context:
space:
mode:
authorArseny Kapoulkine <arseny.kapoulkine@gmail.com>2015-03-12 20:21:59 -0700
committerArseny Kapoulkine <arseny.kapoulkine@gmail.com>2015-03-12 20:21:59 -0700
commit0542b1869b6970003caa954ebc5f1dea41d48032 (patch)
treeb6845a48a40b9fd6a835e66b3c2a25807e08c1f1 /src/pugixml.cpp
parent604861e520d2d6579674a1c2bd5e59cb10f7ecd2 (diff)
Fix buffer overrun when parsing comments inside DOCTYPE
Diffstat (limited to 'src/pugixml.cpp')
-rw-r--r--src/pugixml.cpp2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/pugixml.cpp b/src/pugixml.cpp
index ce8a79f..4269335 100644
--- a/src/pugixml.cpp
+++ b/src/pugixml.cpp
@@ -2352,7 +2352,7 @@ PUGI__NS_BEGIN
PUGI__SCANFOR(s[0] == '-' && s[1] == '-' && s[2] == '>'); // no need for ENDSWITH because --> can't terminate proper doctype
if (!*s) PUGI__THROW_ERROR(status_bad_doctype, s);
- s += 4;
+ s += 3;
}
else PUGI__THROW_ERROR(status_bad_doctype, s);