leethomason/tinyxml2 — pull request #140 by ledyba (2013-11-03 02:00:22+00:00)
Title: you have to check len before accsessing "p".

In "Parse" function, "p" pointer is accessed before checking len parameter.
So, if we call doc->Parse(new byte [0], 0), tinyxml would crash due to segmentation fault.