$NetBSD: patch-aa,v 1.8 2009/11/08 08:34:32 obache Exp $

CVE-2009-3720

--- lib/xmltok_impl.c.orig	2009-09-10 11:37:45.000000000 +0200
+++ lib/xmltok_impl.c
@@ -1744,7 +1744,7 @@ PREFIX(updatePosition)(const ENCODING *e
                        const char *end,
                        POSITION *pos)
 {
-  while (ptr != end) {
+  while (ptr < end) {
     switch (BYTE_TYPE(enc, ptr)) {
 #define LEAD_CASE(n) \
     case BT_LEAD ## n: \
