Segmentation fault in yyparse due to malformed pattern statement value

[jvijtiuk]

Hello,

this file crashes libyang when it is parsed with lys_parse_path:

module xpath-1.1 {
    namespace "urn:xpath-1.1";
    prefix xp;

    container top {
        leaf identref {
            type mdentityref {
                base:iwo;
                     pattern '[A-Z]+';
                pattern '[A-Z]+';
                   pattern '[A-Z]+';
                    pattern '[A-Z]+';
                pattern '[./key2, 2, 3), 'a') and not(starts-with(./key2, 'a')))";
}

Regards,
Juraj

[ret2libc]

CVE-2019-20396 was assigned to this issue.