mirror of
https://dev.iopsys.eu/feed/openwrt-packages.git
synced 2025-12-20 08:49:55 +08:00
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modifield but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.