[Pidgin] #3436: purple_markup_html_to_xhtml in util.c segfaults given invalid html

[Pidgin]

#3436: purple_markup_html_to_xhtml in util.c segfaults given invalid html
------------------------+---------------------------------------------------
  Reporter:  jeffr      |       Owner:  nosnilmot
      Type:  defect     |      Status:  assigned 
  Priority:  minor      |   Milestone:           
 Component:  libpurple  |     Version:  2.2.1    
Resolution:             |    Keywords:           
   Pending:  0          |  
------------------------+---------------------------------------------------
Comment (by QuLogic):

 To be more specific for this example, it expects an "href=" for every
 "<a>". This should ''only'' crash if the href is missing in the first <a>,
 since otherwise, the GString it's accessing is no longer NULL. The GString
 is free'd when a new href is found, so it should still be a valid pointer,
 though it will result in totally incorrect data.

 At least, that's how I see it at the moment.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/3436#comment:3>
Pidgin <http://pidgin.im>
Pidgin