Fix dangling pointer with `xmllint --dropdtd`

Reset doc->intSubset when dropping the DTD.

1 files changed, 1 insertions, 0 deletions

diff --git a/xmllint.c b/xmllint.c
index dbef273a..a3fe10a2 100644
--- a/xmllint.c
+++ b/xmllint.c
@@ -2426,6 +2426,7 @@ static void parseAndPrintFile(char *filename, xmlParserCtxtPtr rectxt) {
 	dtd = xmlGetIntSubset(doc);
 	if (dtd != NULL) {
 	    xmlUnlinkNode((xmlNodePtr)dtd);
+            doc->intSubset = NULL;
 	    xmlFreeDtd(dtd);
 	}
     }