> BTW I'm fine by this assuming: > - someone keeps an eye on libxml2 upstream in case some security > problem shows up in that part of the code
Yes. > - the code used is the 2.9.0 one where I added quite a bit of > cleanup on memory handling. It is, modulo the fact that QEMU uses glib functions and thus exits on allocation error. The QEMU code would be a good starting point to add a glib URI module. Paolo