* mdocml: When validating a .Bl list that defaults to -item for want of a
@ 2016-08-10 12:07 schwarze
0 siblings, 0 replies; only message in thread
From: schwarze @ 2016-08-10 12:07 UTC (permalink / raw)
To: source
Log Message:
-----------
When validating a .Bl list that defaults to -item for want of a type,
don't let a subsequent -width access mdoc_argnames[] out of bounds.
Found by tb@ with afl(1).
Modified Files:
--------------
mdocml:
mdoc_validate.c
Revision Data
-------------
Index: mdoc_validate.c
===================================================================
RCS file: /home/cvs/mdocml/mdocml/mdoc_validate.c,v
retrieving revision 1.302
retrieving revision 1.303
diff -Lmdoc_validate.c -Lmdoc_validate.c -u -p -r1.302 -r1.303
--- mdoc_validate.c
+++ mdoc_validate.c
@@ -502,6 +502,7 @@ post_bl_norm(POST_ARGS)
mandoc_msg(MANDOCERR_BL_NOTYPE, mdoc->parse,
n->line, n->pos, "Bl");
n->norm->Bl.type = LIST_item;
+ mdoclt = MDOC_Item;
}
/*
--
To unsubscribe send an email to source+unsubscribe@mdocml.bsd.lv
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2016-08-10 12:07 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-08-10 12:07 mdocml: When validating a .Bl list that defaults to -item for want of a schwarze
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).