RootCauseunvalidated
xmlFree(URI) frees the original pointer — The bug occurs in the URI construction and validation logic starting at line 615. Tension: the code frees URI at line 617, then checks if URL (from xmlSaveUri) is NULL at line 618. Outcome: if it is, tries to use the freed URI pointer in the error message at line 620.
c3427d7e-b421-4371-a3c2-39237e308249
xmlFree(URI) frees the original pointer — The bug occurs in the URI construction and validation logic starting at line 615. Tension: the code frees URI at line 617, then checks if URL (from xmlSaveUri) is NULL at line 618. Outcome: if it is, tries to use the freed URI pointer in the error message at line 620.