CVE-2018-16428 11/192111/1
authorDongHun Kwak <dh0128.kwak@samsung.com>
Tue, 30 Oct 2018 07:32:47 +0000 (16:32 +0900)
committerDongHun Kwak <dh0128.kwak@samsung.com>
Tue, 30 Oct 2018 07:33:32 +0000 (16:33 +0900)
commite3e58c4bbcbe6b6aedba1bcc2ea30b98061a3d3a
treeb1e4236121809c159824d737ae84eaa9b20cbb3c
parenta119541e4aef2f98c6bd46cbcd70340cbdd98d75
CVE-2018-16428

If something which looks like a closing tag is left unfinished, but
isn’t paired to an opening tag in the document, the error handling code
would do a null pointer dereference. Avoid that, at the cost of
introducing a new translatable error message.

Includes a test case, courtesy of pdknsk.

Signed-off-by: Philip Withnall <withnall@endlessm.com>
https://gitlab.gnome.org/GNOME/glib/issues/1461

[Model] All
[BinType] AP
[Customer] OPEN

[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A

[Problem] Security patch
[Cause & Measure]
[Checking Method]

[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A

Change-Id: Icd7c1bf8da55b501d9471df5ad18e7c7b0892d6b
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
glib/gmarkup.c