]> granicus.if.org Git - php/commitdiff
Fix bug #72099: xml_parse_into_struct segmentation fault
authorStanislav Malyshev <stas@php.net>
Tue, 28 Jun 2016 08:22:55 +0000 (01:22 -0700)
committerStanislav Malyshev <stas@php.net>
Tue, 28 Jun 2016 08:23:24 +0000 (01:23 -0700)
ext/xml/xml.c

index bf497b2d7c143a07b7741793d39793e90ede993d..72f629ba2c0bcd172c9379dcfd1d8b235c8513a6 100644 (file)
@@ -918,7 +918,7 @@ void _xml_characterDataHandler(void *userData, const XML_Char *s, int len)
                                                break;
                                        } ZEND_HASH_FOREACH_END();
 
-                                       if (parser->level <= XML_MAXLEVEL) {
+                                       if (parser->level <= XML_MAXLEVEL && parser->level > 0) {
                                                array_init(&tag);
 
                                                _xml_add_to_info(parser,parser->ltags[parser->level-1] + parser->toffset);