From 534f7109d67be81218d79589e38dd8606a7eee5e Mon Sep 17 00:00:00 2001 From: Ingo Schwarze Date: Fri, 3 Mar 2017 11:50:49 +0000 Subject: Fix previous: do not access the byte before the string if the string is empty; found by jsg@ with afl(1). --- roff.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'roff.c') diff --git a/roff.c b/roff.c index ad55d320..a6f27040 100644 --- a/roff.c +++ b/roff.c @@ -1,4 +1,4 @@ -/* $Id: roff.c,v 1.289 2017/02/17 03:03:03 schwarze Exp $ */ +/* $Id: roff.c,v 1.290 2017/03/03 11:50:49 schwarze Exp $ */ /* * Copyright (c) 2008-2012, 2014 Kristaps Dzonsons * Copyright (c) 2010-2015, 2017 Ingo Schwarze @@ -1236,7 +1236,7 @@ deroff(char **dest, const struct roff_node *n) /* Skip trailing backslash. */ sz = strlen(cp); - if (cp[sz - 1] == '\\') + if (sz > 0 && cp[sz - 1] == '\\') sz--; /* Skip trailing whitespace. */ -- cgit v1.2.3-56-ge451