dont use dynamic size stack arrays

File.cpp

@@ -333,7 +333,7 @@ std::string File::decode(const char* str) {
   const char* c = strchr(str, '&');
   if (!c) return str;
 
-  char decRet[strlen(str) + 1];
+  char* decRet = new char[strlen(str) + 1];
   const char* last = str;
   char* dstPt = decRet;
 
@@ -358,7 +358,7 @@ std::string File::decode(const char* str) {
     } else {
       const char* e = strchr(c, ';');
       if (e) {
-        char ent[e - 1 - c + 1];
+        char* ent = new char[e - 1 - c + 1];
         memcpy(ent, c + 1, e - 1 - c);
         ent[e - 1 - c] = 0;
         const auto it = xml::ENTITIES.find(ent);
@@ -368,12 +368,15 @@ std::string File::decode(const char* str) {
           dstPt += strlen(utf8);
           last += strlen(ent) + 2;
         }
+        delete[] ent;
       }
     }
   }
 
   strcpy(dstPt, last);
-  return decRet;
+  std::string ret(decRet);
+  delete[] decRet;
+  return ret;
 }
 
 // _____________________________________________________________________________