From 513699d091189aa7d74e0e340793c8d803580509 Mon Sep 17 00:00:00 2001 From: Cory Quammen Date: Thu, 29 Sep 2022 13:10:00 -0400 Subject: [PATCH] vtkXMLTreeReader: protect against possible nullptr dereference Origin: upstream,https://gitlab.kitware.com/vtk/vtk/-/commit/72119ea71422d2892f2a0475fc282835310f8d9e Forwarded: not-needed Bug-Debian: https://bugs.debian.org/1031877 Vulnerability reported at https://nvd.nist.gov/vuln/detail/CVE-2021-42521. Gbp-Pq: Name 08_CVE-2021-42521.patch --- IO/Infovis/vtkXMLTreeReader.cxx | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/IO/Infovis/vtkXMLTreeReader.cxx b/IO/Infovis/vtkXMLTreeReader.cxx index 02876f00..946c7b9f 100644 --- a/IO/Infovis/vtkXMLTreeReader.cxx +++ b/IO/Infovis/vtkXMLTreeReader.cxx @@ -217,6 +217,12 @@ int vtkXMLTreeReader::RequestData( // Get the root element node xmlNode* rootElement = xmlDocGetRootElement(doc); + if (!rootElement) + { + vtkErrorMacro(<< "Could not get root element of document."); + return 0; + } + vtkXMLTreeReaderProcessElement(builder, -1, rootElement, this->ReadCharData, this->MaskArrays); xmlFreeDoc(doc); -- 2.30.2