malloc-fail: Fix use-after-free after xsltSetAttrVTsegment

Found by OSS-Fuzz, see #84.

1 files changed, 1 insertions, 3 deletions

diff --git a/libxslt/attrvt.c b/libxslt/attrvt.c
index a885526e..3d51feda 100644
--- a/libxslt/attrvt.c
+++ b/libxslt/attrvt.c
@@ -155,10 +155,8 @@ xsltSetAttrVTsegment(xsltAttrVTPtr avt, void *val) {
         size_t size = sizeof(xsltAttrVT) +
                       (avt->max_seg + MAX_AVT_SEG) * sizeof(void *);
 	xsltAttrVTPtr tmp = (xsltAttrVTPtr) xmlRealloc(avt, size);
-	if (tmp == NULL) {
-            xsltFreeAttrVT(avt);
+	if (tmp == NULL)
 	    return NULL;
-	}
         avt = tmp;
 	memset(&avt->segments[avt->nb_seg], 0, MAX_AVT_SEG*sizeof(void *));
 	avt->max_seg += MAX_AVT_SEG;