File libxml2-2.9.0-CVE-2012-5134.patch of Package libxml2

--- libxml2-2.9.0.orig/parser.c	2012-09-11 06:24:08.000000000 +0200
+++ libxml2-2.9.0/parser.c	2012-12-15 16:12:27.441609871 +0100
@@ -4075,7 +4075,7 @@
         goto error;
 
     if ((in_space) && (normalize)) {
-        while (buf[len - 1] == 0x20) len--;
+        while ((len > 0) && (buf[len - 1] == 0x20)) len--;
     }
     buf[len] = 0;
     if (RAW == '<') {
openSUSE Build Service is sponsored by