From 66c558248a323812fd802116bf429503335248c0 Mon Sep 17 00:00:00 2001
From: kwaclaw <kwaclaw>
Date: Wed, 11 Jun 2008 14:43:57 +0000
Subject: Fix for bug #1990430.

---
 lib/xmltok_impl.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/xmltok_impl.c b/lib/xmltok_impl.c
index 1268819..b71410d 100644
--- a/lib/xmltok_impl.c
+++ b/lib/xmltok_impl.c
@@ -1748,6 +1748,8 @@ PREFIX(updatePosition)(const ENCODING *enc,
     switch (BYTE_TYPE(enc, ptr)) {
 #define LEAD_CASE(n) \
     case BT_LEAD ## n: \
+      if (end - ptr < n) \
+        return; \
       ptr += n; \
       break;
     LEAD_CASE(2) LEAD_CASE(3) LEAD_CASE(4)
-- 
cgit v1.2.1