diff options
| author |   Ingo Schwarze <schwarze@openbsd.org> | 2015-04-29 12:44:58 +0000 |
|---|---|---|
| committer | Ingo Schwarze <schwarze@openbsd.org> | 2015-04-29 12:44:58 +0000 |
| commit | 0745d78af02f9484ee3018377936265fe41b4858 (patch) | |
| tree | 737e2c42d5a8c3e1532c93ba2bb70c87268978fa /roff.c | |
| parent | 973dc20bd12937b90f98a0ba7c750c4f7b189719 (diff) | |
| download | mandoc-0745d78af02f9484ee3018377936265fe41b4858.tar.gz mandoc-0745d78af02f9484ee3018377936265fe41b4858.tar.zst mandoc-0745d78af02f9484ee3018377936265fe41b4858.zip | |
When the last line of a table layout turns out to be empty, it is deleted.
Do not just free the struct tbl_row but also make sure that no pointer
to it remains. Fixing a use after free found by jsg@ with afl.
Diffstat (limited to 'roff.c')
0 files changed, 0 insertions, 0 deletions