From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from localhost (fantadrom.bsd.lv [local]);
	by fantadrom.bsd.lv (OpenSMTPD) with ESMTPA id 69966d77;
	for <source@mdocml.bsd.lv>;
	Wed, 11 Feb 2015 08:38:27 -0500 (EST)
Date: Wed, 11 Feb 2015 08:38:27 -0500 (EST)
Message-Id: <6716991213336579630.enqueue@fantadrom.bsd.lv>
X-Mailinglist: mdocml-source
Reply-To: source@mdocml.bsd.lv
MIME-Version: 1.0
From: schwarze@mdocml.bsd.lv
To: source@mdocml.bsd.lv
Subject: mdocml: explicit blocks close out .Nd; fixing data structure corruption  
X-Mailer: activitymail 1.26, http://search.cpan.org/dist/activitymail/
Content-Type: text/plain; charset=utf-8

Log Message:
-----------
explicit blocks close out .Nd; fixing data structure corruption 
eventually leading to NULL pointer access;
found by jsg@ with afl, text case #455.

Modified Files:
--------------
    mdocml:
        mdoc_macro.c

Revision Data
-------------
Index: mdoc_macro.c
===================================================================
RCS file: /home/cvs/mdocml/mdocml/mdoc_macro.c,v
retrieving revision 1.181
retrieving revision 1.182
diff -Lmdoc_macro.c -Lmdoc_macro.c -u -p -r1.181 -r1.182
--- mdoc_macro.c
+++ mdoc_macro.c
@@ -630,6 +630,13 @@ blk_exp_close(MACRO_PROT_ARGS)
 			break;
 		}
 
+		/* Explicit blocks close out description lines. */
+
+		if (n->tok == MDOC_Nd) {
+			rew_last(mdoc, n);
+			continue;
+		}
+
 		/*
 		 * When finding an open sub block, remember the last
 		 * open explicit block, or, in case there are only
--
 To unsubscribe send an email to source+unsubscribe@mdocml.bsd.lv