diff options
| author |   Ingo Schwarze <schwarze@openbsd.org> | 2016-08-10 12:06:41 +0000 |
|---|---|---|
| committer | Ingo Schwarze <schwarze@openbsd.org> | 2016-08-10 12:06:41 +0000 |
| commit | f965b0d5670820ab294aa254b0297c5406d982cd (patch) | |
| tree | 1b81eed32ac15f37847754a942623e83ca84cd1b /mdoc_validate.c | |
| parent | e6775e844e7d088d1ee8d2dae0875acc005ecfbb (diff) | |
| download | mandoc-f965b0d5670820ab294aa254b0297c5406d982cd.tar.gz mandoc-f965b0d5670820ab294aa254b0297c5406d982cd.tar.zst mandoc-f965b0d5670820ab294aa254b0297c5406d982cd.zip | |
When validating a .Bl list that defaults to -item for want of a type,
don't let a subsequent -width access mdoc_argnames[] out of bounds.
Found by tb@ with afl(1).
Diffstat (limited to 'mdoc_validate.c')
| -rw-r--r-- | mdoc_validate.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/mdoc_validate.c b/mdoc_validate.c index 80ce2080..e6fa51b2 100644 --- a/mdoc_validate.c +++ b/mdoc_validate.c @@ -1,4 +1,4 @@ -/* $Id: mdoc_validate.c,v 1.302 2016/08/09 15:09:27 schwarze Exp $ */ +/* $Id: mdoc_validate.c,v 1.303 2016/08/10 12:06:41 schwarze Exp $ */ /* * Copyright (c) 2008-2012 Kristaps Dzonsons <kristaps@bsd.lv> * Copyright (c) 2010-2016 Ingo Schwarze <schwarze@openbsd.org> @@ -502,6 +502,7 @@ post_bl_norm(POST_ARGS) mandoc_msg(MANDOCERR_BL_NOTYPE, mdoc->parse, n->line, n->pos, "Bl"); n->norm->Bl.type = LIST_item; + mdoclt = MDOC_Item; } /* |