diff options
| author |   Ingo Schwarze <schwarze@openbsd.org> | 2014-12-19 17:12:04 +0000 |
|---|---|---|
| committer | Ingo Schwarze <schwarze@openbsd.org> | 2014-12-19 17:12:04 +0000 |
| commit | 6e13fac22eeefb3e711d98236a94e9f7fefb6442 (patch) | |
| tree | 1c249dbcaf76173824a51bf1c817fd3490440ca2 /term_ps.c | |
| parent | 3e2c5875ed63b44494405e85c9aa899ca0b2c53e (diff) | |
| download | mandoc-6e13fac22eeefb3e711d98236a94e9f7fefb6442.tar.gz mandoc-6e13fac22eeefb3e711d98236a94e9f7fefb6442.tar.zst mandoc-6e13fac22eeefb3e711d98236a94e9f7fefb6442.zip | |
Enforcing an arbitrary, implementation dependent, undocumented limit
by calling assert() when valid user input exceeds it is a bad idea.
Allocate the terminal font stack dynamically instead of crashing
above 10 entries. Issue found by jsg@ with afl.
Diffstat (limited to 'term_ps.c')
| -rw-r--r-- | term_ps.c | 5 |
1 files changed, 4 insertions, 1 deletions
@@ -1,4 +1,4 @@ -/* $Id: term_ps.c,v 1.70 2014/12/01 08:05:52 schwarze Exp $ */ +/* $Id: term_ps.c,v 1.71 2014/12/19 17:12:04 schwarze Exp $ */ /* * Copyright (c) 2010, 2011 Kristaps Dzonsons <kristaps@bsd.lv> * Copyright (c) 2014 Ingo Schwarze <schwarze@openbsd.org> @@ -540,6 +540,9 @@ pspdf_alloc(const struct mchars *mchars, char *outopts) p = mandoc_calloc(1, sizeof(struct termp)); p->symtab = mchars; p->enc = TERMENC_ASCII; + p->fontq = mandoc_reallocarray(NULL, + (p->fontsz = 8), sizeof(enum termfont)); + p->fontq[0] = p->fontl = TERMFONT_NONE; p->ps = mandoc_calloc(1, sizeof(struct termp_ps)); p->advance = ps_advance; |