From: Rhodri James <rhodri@kynesim.co.uk>
Date: Fri, 17 Feb 2017 16:32:21 +0000 (+0000)
Subject: Restore original nsAttsSize if reallocation fails
X-Git-Tag: R_2_2_3~28^2~29
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=c90f4bc24cdc3b698d2147d851513bcfc98c31cd;p=libexpat

Restore original nsAttsSize if reallocation fails
---

diff --git a/expat/lib/xmlparse.c b/expat/lib/xmlparse.c
index 00f4b7bd..fd08b4ec 100644
--- a/expat/lib/xmlparse.c
+++ b/expat/lib/xmlparse.c
@@ -3264,6 +3264,7 @@ storeAtts(XML_Parser parser, const ENCODING *enc,
     int j;  /* hash table index */
     unsigned long version = nsAttsVersion;
     int nsAttsSize = (int)1 << nsAttsPower;
+    unsigned char oldNsAttsPower = nsAttsPower;
     /* size of hash table must be at least 2 * (# of prefixed attributes) */
     if ((nPrefixes << 1) >> nsAttsPower) {  /* true for nsAttsPower = 0 */
       NS_ATT *temp;
@@ -3273,8 +3274,11 @@ storeAtts(XML_Parser parser, const ENCODING *enc,
         nsAttsPower = 3;
       nsAttsSize = (int)1 << nsAttsPower;
       temp = (NS_ATT *)REALLOC(nsAtts, nsAttsSize * sizeof(NS_ATT));
-      if (!temp)
+      if (!temp) {
+        /* Restore actual size of memory in nsAtts */
+        nsAttsPower = oldNsAttsPower;
         return XML_ERROR_NO_MEMORY;
+      }
       nsAtts = temp;
       version = 0;  /* force re-initialization of nsAtts hash table */
     }