Revised fix for issue# 2894085: differentiated between two cases where the next pointer should be updated to the end pointer or not - the differentiating negative token value is -XML_TOK_PROLOG_S.

1 files changed, 4 insertions, 0 deletions

diff --git a/lib/xmlparse.c b/lib/xmlparse.c
index 72488d4..c766d40 100644
--- a/lib/xmlparse.c
+++ b/lib/xmlparse.c
@@ -3701,6 +3701,9 @@ doProlog(XML_Parser parser,
         return XML_ERROR_UNCLOSED_TOKEN;
       case XML_TOK_PARTIAL_CHAR:
         return XML_ERROR_PARTIAL_CHAR;
+      case -XML_TOK_PROLOG_S:
+        tok = -tok;
+        break;
       case XML_TOK_NONE:
 #ifdef XML_DTD
         /* for internal PE NOT referenced between declarations */
@@ -3723,6 +3726,7 @@ doProlog(XML_Parser parser,
         return XML_ERROR_NO_ELEMENTS;
       default:
         tok = -tok;
+        next = end;
         break;
       }
     }