Details
Description
The guththila validating parser fails attempting to deallocate an unallocated cell if the xml message constains more than one namespace. The issue is that the validating parser allocates one cell of memory to hold an array of namespaces, but that the code that frees the namespaces believes that each array element is a separate cell. Thus, if the array contains more than one element, the free of the second element fails.
One can see the problem when parsing a SOAP response message identifying two namespaces, e.g., one that begins:
<?xml version="1.0" encoding="UTF-8" ?>
- <env:Envelope xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
- <env:Body>
...
This appears to be a problem introduced as part of fix AXIS2C-785 since 1.1.0 in the development branch; in 1.1.0 the array was not freed at all.