nokogiri 1.10.8-x64-mingw32 → 1.10.9-x64-mingw32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 61ac8a0b8bc26b0fc44017e8a015a190936f8f3552e8ba686588f0fcb981b1c9
-  data.tar.gz: 7f1ea9c93fb417e3f1c5b9a57d5c99b64ec7e6f9f8729624c4babe09aef43129
+  metadata.gz: ef07fa5caec49fb77110308dacc674fabd6f65ee85bf2cc719d613601e3f829b
+  data.tar.gz: 3e5e73a30259f1d4744f82df54dba92b88c58252739f223c168c34fbeb1606a4
 SHA512:
-  metadata.gz: 38c00127e2456a44c0c6b6aa1a06848dbc008ce0f5196926507fa6bf5f1a2553631cb0f19e5c7e361dec724d86677a407af351e36be2a553c3ecf953bbe57fa9
-  data.tar.gz: c296afc18dd5f29da931b2fc2e4ded5b1555c69e4ea8bf4131e9d13d507bbc037fa64d56cd4f6ee2dd84a98dc37c65e8b07ace826f796d39e54765d9ac8bf7fa
+  metadata.gz: 6c4cca69693f10c2dfee5419133f943e097cfefa0b6b5ed49421ea785c4547dd42b266a9a68c6e50e171e7c91afdc6bdfe1b21908673b47ab392d4b918790f34
+  data.tar.gz: a35d39388bd37eeee35475db1f79615c61e5c006fe5aa027e041adb41271cd054ee63e47867aa770f22856c19ccf2b25396da8eb6a3ba8c7dc2be269af644aaf

data/ext/nokogiri/xml_schema.c

@@ -133,6 +133,31 @@ static VALUE read_memory(VALUE klass, VALUE content)
   return rb_schema;
 }
 
+/* Schema creation will remove and deallocate "blank" nodes.
+ * If those blank nodes have been exposed to Ruby, they could get freed
+ * out from under the VALUE pointer.  This function checks to see if any of
+ * those nodes have been exposed to Ruby, and if so we should raise an exception.
+ */
+static int has_blank_nodes_p(VALUE cache)
+{
+    long i;
+
+    if (NIL_P(cache)) {
+        return 0;
+    }
+
+    for (i = 0; i < RARRAY_LEN(cache); i++) {
+        xmlNodePtr node;
+        VALUE element = rb_ary_entry(cache, i);
+        Data_Get_Struct(element, xmlNode, node);
+        if (xmlIsBlankNode(node)) {
+            return 1;
+        }
+    }
+
+    return 0;
+}
+
 /*
  * call-seq:
  *  from_document(doc)
@@ -152,6 +177,10 @@ static VALUE from_document(VALUE klass, VALUE document)
   /* In case someone passes us a node. ugh. */
   doc = doc->doc;
 
+  if (has_blank_nodes_p(DOC_NODE_CACHE(doc))) {
+    rb_raise(rb_eArgError, "Creating a schema from a document that has blank nodes exposed to Ruby is dangerous");
+  }
+
   ctx = xmlSchemaNewDocParserCtxt(doc);
 
   errors = rb_ary_new();

data/lib/nokogiri/version.rb

@@ -1,6 +1,6 @@
 module Nokogiri
   # The version of Nokogiri you are using
-  VERSION = "1.10.8"
+  VERSION = "1.10.9"
 
   class VersionInfo # :nodoc:
     def jruby?

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: nokogiri
 version: !ruby/object:Gem::Version
-  version: 1.10.8
+  version: 1.10.9
 platform: x64-mingw32
 authors:
 - Aaron Patterson
@@ -14,7 +14,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-02-10 00:00:00.000000000 Z
+date: 2020-03-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: mini_portile2