Here's the relevant pull request: https://github.com/libexpat/libexpat/pull/973