From c73e63de42ab7105d6bea0cea6bffc39ce9d3fa4 Mon Sep 17 00:00:00 2001
From: Rhodri James <rhodri@kynesim.co.uk>
Date: Fri, 16 Jun 2017 17:51:05 +0100
Subject: [PATCH] Test document name of "1?" is rejected in doctype declaration

---
 expat/tests/runtests.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/expat/tests/runtests.c b/expat/tests/runtests.c
index 227ddbc8..dee14f5a 100644
--- a/expat/tests/runtests.c
+++ b/expat/tests/runtests.c
@@ -6299,6 +6299,17 @@ START_TEST(test_bad_doctype_star)
 }
 END_TEST
 
+START_TEST(test_bad_doctype_query)
+{
+    const char *text =
+        "<!DOCTYPE 1? [ <!ENTITY foo 'bar'> ]>\n"
+        "<1?>&foo;</1?>";
+
+    expect_failure(text, XML_ERROR_INVALID_TOKEN,
+                   "'+' in document name not faulted");
+}
+END_TEST
+
 /*
  * Namespaces tests.
  */
@@ -11768,6 +11779,7 @@ make_suite(void)
     tcase_add_test(tc_basic, test_bad_doctype_utf16);
     tcase_add_test(tc_basic, test_bad_doctype_plus);
     tcase_add_test(tc_basic, test_bad_doctype_star);
+    tcase_add_test(tc_basic, test_bad_doctype_query);
 
     suite_add_tcase(s, tc_namespace);
     tcase_add_checked_fixture(tc_namespace,