From kde-commits Sat Jul 25 09:11:27 2009 From: Fathi Boudra Date: Sat, 25 Jul 2009 09:11:27 +0000 To: kde-commits Subject: branches/KDE/3.5/kdelibs/khtml/html Message-Id: <1248513087.937908.6577.nullmailer () svn ! kde ! org> X-MARC-Message: https://marc.info/?l=kde-commits&m=124851309711731 SVN commit 1002164 by fabo: backport CVE-2009-1725 fix M +1 -1 htmltokenizer.cpp --- branches/KDE/3.5/kdelibs/khtml/html/htmltokenizer.cpp #1002163:1002164 @@ -736,7 +736,7 @@ #ifdef TOKEN_DEBUG kdDebug( 6036 ) << "unknown entity!" << endl; #endif - checkBuffer(10); + checkBuffer(11); // ignore the sequence, add it to the buffer as plaintext *dest++ = '&'; for(unsigned int i = 0; i < cBufferPos; i++)