* mdocml: explicit blocks close out .Nd; fixing data structure corruption
@ 2015-02-11 13:38 schwarze
0 siblings, 0 replies; only message in thread
From: schwarze @ 2015-02-11 13:38 UTC (permalink / raw)
To: source
Log Message:
-----------
explicit blocks close out .Nd; fixing data structure corruption
eventually leading to NULL pointer access;
found by jsg@ with afl, text case #455.
Modified Files:
--------------
mdocml:
mdoc_macro.c
Revision Data
-------------
Index: mdoc_macro.c
===================================================================
RCS file: /home/cvs/mdocml/mdocml/mdoc_macro.c,v
retrieving revision 1.181
retrieving revision 1.182
diff -Lmdoc_macro.c -Lmdoc_macro.c -u -p -r1.181 -r1.182
--- mdoc_macro.c
+++ mdoc_macro.c
@@ -630,6 +630,13 @@ blk_exp_close(MACRO_PROT_ARGS)
break;
}
+ /* Explicit blocks close out description lines. */
+
+ if (n->tok == MDOC_Nd) {
+ rew_last(mdoc, n);
+ continue;
+ }
+
/*
* When finding an open sub block, remember the last
* open explicit block, or, in case there are only
--
To unsubscribe send an email to source+unsubscribe@mdocml.bsd.lv
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2015-02-11 13:38 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-02-11 13:38 mdocml: explicit blocks close out .Nd; fixing data structure corruption schwarze
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).