<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On 5 June 2015 at 09:23, <span dir="ltr"><<a href="mailto:wenzong.fan@windriver.com" target="_blank">wenzong.fan@windriver.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=":3lt" class="a3s" style="overflow:hidden">+From 213f1fe0d76d30eaed6e5853057defc43e6df2c9 Mon Sep 17 00:00:00 2001<br>
+From: Daniel Veillard <<a href="mailto:veillard@redhat.com">veillard@redhat.com</a>><br>
+Date: Tue, 14 Apr 2015 17:41:48 +0800<br>
+Subject: [PATCH] CVE-2015-1819 Enforce the reader to run in constant memory<br>
+<br>
+One of the operation on the reader could resolve entities<br>
+leading to the classic expansion issue. Make sure the<br>
+buffer used for xmlreader operation is bounded.<br>
+Introduce a new allocation type for the buffers for this effect.<br>
+<br>
+Upstream-Status: Backport</div></blockquote></div><br>No signed-off-by.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Ross</div></div>