libxml2 xmlRegEpxFromParse Integer Overflow / Heap Buffer Overflow

libxml2 suffers from an integer overflow that leads to a heap buffer overflow in xmlRegEpxFromParse...