handle invalid xml files in orcus, fdo#63844

Change-Id: I82fff6ab89acece0e46c92bfca2c7faf967639b8

external/liborcus/UnpackedTarball_liborcus.mk

@@ -21,6 +21,9 @@ liborcus_patches += liborcus_0.1.0-configure.patch
 # don't use dllimport
 liborcus_patches += liborcus_0.1.0-dllimport.patch
 
+# fdo#63844
+liborcus_patches += liborcus-handle-invalid-xml.patch.1
+
 ifeq ($(OS),MACOSX)
 # no "tac" command on OS X, but "tail -r"
 liborcus_patches += liborcus_0.1.0-tac.patch

external/liborcus/liborcus-handle-invalid-xml.patch.1

+diff -ur liborcus.org/include/orcus/sax_parser.hpp liborcus/include/orcus/sax_parser.hpp
+--- liborcus.org/include/orcus/sax_parser.hpp	2013-12-13 20:51:55.126503773 +0100
++++ liborcus/include/orcus/sax_parser.hpp	2013-12-13 20:57:39.076174743 +0100
+@@ -278,6 +278,8 @@
+             special_tag();
+         break;
+         default:
++            if (!is_alpha(c))
++                throw malformed_xml_error("expect an alphabet.");
+             element_open(pos);
+     }
+ }