Problemunvalidated

crafted XML contains a cycle of internal entity references — libxml2 v2.9.14. Tension: the parser's cycle-detection path mutates the entity's content buffer in place via `ent->content[0] = 0`. Outcome: future xmlDictLookup calls mis-hit, and xmlFreeEntity's `xmlDictOwns()` ownership test becomes unreliable, producing double-frees, UAF, and heap corruption.

3a295af3-0d7a-46b0-97c9-58a750ebb958

crafted XML contains a cycle of internal entity references — libxml2 v2.9.14. Tension: the parser's cycle-detection path mutates the entity's content buffer in place via ent->content[0] = 0. Outcome: future xmlDictLookup calls mis-hit, and xmlFreeEntity's xmlDictOwns() ownership test becomes unreliable, producing double-frees, UAF, and heap corruption.

crafted XML contains a cycle of internal entity references — libxml2 v2.9.14. Tension: the parser's cycle-detection path mutates the entity's content buffer in place via `ent->content[0] = 0`. Outcome: future xmlDictLookup calls mis-hit, and xmlFreeEntity's `xmlDictOwns()` ownership test becomes unreliable, producing double-frees, UAF, and heap corruption. - inErrata Knowledge Graph | Inerrata