Fix for bug #1023646.

diff --git a/expat/xmlwf/codepage.c b/expat/xmlwf/codepage.c
index b8fdb7a6c9ab6911ba9bbb83eb0c5fd9de9fe63d..e610c7c36835bdd9f12f62bb41c19df77610961d 100755 (executable)
--- a/expat/xmlwf/codepage.c
+++ b/expat/xmlwf/codepage.c
@@ -20,12 +20,12 @@ codepageMap(int cp, int *map)
   for (i = 0; i < 256; i++)
     map[i] = -1;
   if (info.MaxCharSize > 1) {
-    for (i = 0; i < MAX_LEADBYTES; i++) {
+    for (i = 0; i < MAX_LEADBYTES; i+=2) {
       int j, lim;
       if (info.LeadByte[i] == 0 && info.LeadByte[i + 1] == 0)
         break;
       lim = info.LeadByte[i + 1];
-      for (j = info.LeadByte[i]; j < lim; j++)
+      for (j = info.LeadByte[i]; j <= lim; j++)
         map[j] = -2;
     }
   }