https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1311

--- xerces-c-3.0.1/src/xercesc/internal/IGXMLScanner.cpp.cve1311

+++ xerces-c-3.0.1/src/xercesc/internal/IGXMLScanner.cpp

@@ -1533,7 +1533,6 @@

             DTDEntityDecl* declDTD = new (fMemoryManager) DTDEntityDecl(gDTDStr, false, fMemoryManager);

             declDTD->setSystemId(sysId);

             declDTD->setIsExternal(true);

-            Janitor<DTDEntityDecl> janDecl(declDTD);

             // Mark this one as a throw at end

             reader->setThrowAtEnd(true);

@@ -3154,7 +3153,6 @@

     DTDEntityDecl* declDTD = new (fMemoryManager) DTDEntityDecl(gDTDStr, false, fMemoryManager);

     declDTD->setSystemId(src.getSystemId());

     declDTD->setIsExternal(true);

-    Janitor<DTDEntityDecl> janDecl(declDTD);

     // Mark this one as a throw at end

     newReader->setThrowAtEnd(true);