19 lines
592 B
Plaintext
19 lines
592 B
Plaintext
$OpenBSD: patch-src_expat_erl_c,v 1.1 2011/06/03 13:45:43 gsoares Exp $
|
|
|
|
Fix for SA44807, ejabberd Nested XML Entities Denial of Service Vulnerability.
|
|
|
|
from upstream git:
|
|
https://git.process-one.net/ejabberd/mainline/commit/bd1df027c622e1f96f9eeaac612a6a956c1ff0b6
|
|
|
|
--- src/expat_erl.c.orig Mon Dec 13 08:21:26 2010
|
|
+++ src/expat_erl.c Fri Jun 3 10:39:09 2011
|
|
@@ -113,6 +113,8 @@ static ErlDrvData expat_erl_start(ErlDrvPort port, cha
|
|
d->parser, (XML_CharacterDataHandler)erlXML_CharacterDataHandler);
|
|
|
|
|
|
+ XML_SetDefaultHandler(d->parser, NULL);
|
|
+
|
|
return (ErlDrvData)d;
|
|
}
|
|
|