- Avoid double-free if malloc fails in inputPush - Fix memory leak in xmlLoadEntityContent error path - Fix integer overflow in xmlBufferDump() - Fix use-after-free bugs when calling xmlTextReaderClose() before xmlFreeTextReader() on post-validating parser Prodded by tj@, thanks