[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment