A signed integer overflow was discovered in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES. This function is called by XML_Parse internally.