Fix crash with unexpected DTD nodes in XSLT.

BUG=127417
Review URL: https://chromiumcodereview.appspot.com/10441148

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@140041 0039d316-1c4b-4281-b951-d872f2087c98

third_party/libxslt/README.chromium

@@ -40,7 +40,8 @@ done ---
 
 Current version: 1.1.26, plus the following patches:
 - A fix to get more compact generated IDs (http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f)
-- Import pattern parsing fix for commit: http://git.gnome.org/browse/libxslt/commit/?id=fe5a4fa33eb85bce3253ed3742b1ea6c4b59b41b 
+- Import pattern parsing fix for commit: http://git.gnome.org/browse/libxslt/commit/?id=fe5a4fa33eb85bce3253ed3742b1ea6c4b59b41b
+- A fix for XSLT node checking (from upstream, commit pending).
 
 
 To import a new snapshot of libxslt:

third_party/libxslt/libxslt/xsltutils.h

@@ -52,8 +52,8 @@ extern "C" {
  * Checks that the element pertains to XSLT namespace.
  */
 #define IS_XSLT_ELEM(n)							\
-    (((n) != NULL) && ((n)->ns != NULL) &&				\
-     (xmlStrEqual((n)->ns->href, XSLT_NAMESPACE)))
+    (((n) != NULL) && ((n)->type == XML_ELEMENT_NODE) &&                \
+     ((n)->ns != NULL) && (xmlStrEqual((n)->ns->href, XSLT_NAMESPACE)))
 
 /**
  * IS_XSLT_NAME: