[jira] [Created] (XERCESC-2235) DFAContentModel::buildDFA(): correctly zero-initialize fFollowList

"Even Rouault (Jira)" <[email protected]>
Newsgroups gmane.text.xml.xerces-c.devel
Message-ID <[email protected]>
Even Rouault created XERCESC-2235:
-------------------------------------

             Summary: DFAContentModel::buildDFA(): correctly zero-initialize fFollowList
                 Key: XERCESC-2235
                 URL: https://issues.apache.org/jira/browse/XERCESC-2235
             Project: Xerces-C++
          Issue Type: Bug
            Reporter: Even Rouault


Due to a copy&paste issue, the intended zero-initialization of
fFollowList wasn't done (copy&paste issue), and thus in case of
OutOfMemory exception when initializing the array, the memory freeing in
cleanup() could access uninitialized elements.

Follow-up of https://github.com/apache/xerces-c/pull/40 / a65990d79d3fc333d7481f010da4e165a88b6cb3

Fixes GDAL's https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42636



--
This message was sent by Atlassian Jira
(v8.20.1#820001)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.