GNOME Bugzilla – Bug 611177
libxml2 crashes when resolving entity references from external files
Last modified: 2017-06-08 11:59:27 UTC
Steps to reproduce: 1) Download and extract the following archive of docbook XML files: http://diveintopython.org/download/diveintopython-xml-5.4.zip 2) Run xmllint --noent diveintopython-5.4/xml/diveintopython.xml A run under valgrind indicates that the parser is trying to access entity data from a memory location that was previously freed. I suspect that the data was freed because it originally came from an external entity.
The same issue goes for libxml 2.7.7.dfsg-2 and 2.7.8.dfsg-3 It faults on mapnik style files, better written here http://trac.mapnik.org/ticket/566 Steps: svn checkout http://svn.openstreetmap.org/applications/rendering/mapnik xmllint --noent mapnik/osm.xml
diveintopython.xml works for me with current git master under ASan, and with 2.9.4 under Valgrind. So I guess this was fixed.