DO NOT MERGE: fix for the XPath nodeTab use-after-free bug from nmehta@

Brian C. Young · andi34 · commit f854f3d605f3 · 2017-06-16T19:56:53.000+02:00
see https://bugs.chromium.org/p/chromium/issues/detail?id=705445 Bug: 36809819 Change-Id: I4832550032669a8e921bd46068281d9daf594ae1 (cherry picked from commit 7f671748797331e20da23db2d95a6116bb1c6c55)
diff --git a/xpath.c b/xpath.c
@@ -4303,7 +4303,7 @@ xmlXPathNewValueTree(xmlNodePtr val) {
     }
     memset(ret, 0 , (size_t) sizeof(xmlXPathObject));
     ret->type = XPATH_XSLT_TREE;
-    ret->boolval = 1;
+    ret->boolval = 0;
     ret->user = (void *) val;
     ret->nodesetval = xmlXPathNodeSetCreate(val);
 #ifdef XP_DEBUG_OBJ_USAGE

Original file line number	Diff line number	Diff line change
`@@ -4303,7 +4303,7 @@ xmlXPathNewValueTree(xmlNodePtr val) {`
`4303`	`4303`	`}`
`4304`	`4304`	`memset(ret, 0 , (size_t) sizeof(xmlXPathObject));`
`4305`	`4305`	`ret->type = XPATH_XSLT_TREE;`
`4306`		`- ret->boolval = 1;`
	`4306`	`+ ret->boolval = 0;`
`4307`	`4307`	`ret->user = (void *) val;`
`4308`	`4308`	`ret->nodesetval = xmlXPathNodeSetCreate(val);`
`4309`	`4309`	`#ifdef XP_DEBUG_OBJ_USAGE`