Merge pull request from GHSA-5x45-qp78-g4p4

* Prevent infinite loop in scanning xml content * Simplify scanning method * Optimization
pjsip · Mar 29, 2022 · 856f87c · 856f87c
1 parent 38c13af
commit 856f87c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pjlib-util/src/pjlib-util/xml.c b/pjlib-util/src/pjlib-util/xml.c
@@ -150,6 +150,8 @@ static pj_xml_node *xml_parse_node( pj_pool_t *pool, pj_scanner *scanner)
 	pj_scan_get_until_ch(scanner, ']', &node->content);
 	while (pj_scan_strcmp(scanner, "]]>", 3)) {
 	    pj_str_t dummy;
+
+	    pj_scan_advance_n(scanner, 1, PJ_FALSE);
 	    pj_scan_get_until_ch(scanner, ']', &dummy);
 	}
 	node->content.slen = scanner->curptr - node->content.ptr;