numbers: Fix memory leak in xsltFormatNumberConversion

Short-lived regression from f13329a6.

Found by OSS-Fuzz.

1 files changed, 5 insertions, 5 deletions

diff --git a/libxslt/numbers.c b/libxslt/numbers.c
index 8a774a83..e0ae6259 100644
--- a/libxslt/numbers.c
+++ b/libxslt/numbers.c
@@ -993,11 +993,6 @@ xsltFormatNumberConversion(xsltDecimalFormatPtr self,
         return(status);
     }
 
-    buffer = xmlBufferCreate();
-    if (buffer == NULL) {
-	return XPATH_MEMORY_ERROR;
-    }
-
     format_info.integer_hash = 0;
     format_info.integer_digits = 0;
     format_info.frac_digits = 0;
@@ -1287,6 +1282,11 @@ OUTPUT_NUMBER:
             break;
     }
 
+    buffer = xmlBufferCreate();
+    if (buffer == NULL) {
+	return XPATH_MEMORY_ERROR;
+    }
+
     /* Ready to output our number.  First see if "default sign" is required */
     if (default_sign != 0)
 	xmlBufferAdd(buffer, self->minusSign, xmlUTF8Strsize(self->minusSign, 1));