msxml3: Fix use-after-free of dom attributes.

In domelem_removeAttributeNode, we call xmlRemoveProp if attributeNode is NULL. Doing this frees the xmlNodePtr, leaving a dangling pointer. Which later in domattr_Release causes a use-after-free.

Found by ASan.

Merge request reports

Loading