aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTatsuya Kinoshita <tats@debian.org>2016-11-14 12:01:08 +0000
committerTatsuya Kinoshita <tats@debian.org>2016-11-14 12:20:44 +0000
commit0c3f5d0e0d9269ad47b8f4b061d7818993913189 (patch)
treebf75b3c2981063176d764c763120551ab5108cc1
parentUpdate ChangeLog (diff)
downloadw3m-0c3f5d0e0d9269ad47b8f4b061d7818993913189.tar.gz
w3m-0c3f5d0e0d9269ad47b8f4b061d7818993913189.zip
Prevent array index out of bounds for symbol
Bug-Debian: https://github.com/tats/w3m/issues/38
-rw-r--r--display.c8
-rw-r--r--file.c2
-rw-r--r--fm.h1
-rw-r--r--symbol.c4
4 files changed, 8 insertions, 7 deletions
diff --git a/display.c b/display.c
index d4f336a..f1d6f99 100644
--- a/display.c
+++ b/display.c
@@ -1129,18 +1129,18 @@ addChar(char c, Lineprop mode)
}
#ifdef USE_M17N
if (w == 2 && WcOption.use_wide)
- addstr(graph2_symbol[(int)c]);
+ addstr(graph2_symbol[(unsigned char)c % N_GRAPH_SYMBOL]);
else
#endif
- addch(*graph_symbol[(int)c]);
+ addch(*graph_symbol[(unsigned char)c % N_GRAPH_SYMBOL]);
}
else {
#ifdef USE_M17N
symbol = get_symbol(DisplayCharset, &w);
- addstr(symbol[(int)c]);
+ addstr(symbol[(unsigned char)c % N_SYMBOL]);
#else
symbol = get_symbol();
- addch(*symbol[(int)c]);
+ addch(*symbol[(unsigned char)c % N_SYMBOL]);
#endif
}
}
diff --git a/file.c b/file.c
index b84a51a..bcb5916 100644
--- a/file.c
+++ b/file.c
@@ -7611,7 +7611,7 @@ conv_symbol(Line *l)
symbol = get_symbol(DisplayCharset, &w);
#endif
}
- Strcat_charp(tmp, symbol[(int)c]);
+ Strcat_charp(tmp, symbol[(unsigned char)c % N_SYMBOL]);
#ifdef USE_M17N
p += len - 1;
pr += len - 1;
diff --git a/fm.h b/fm.h
index ede537b..96d3ab3 100644
--- a/fm.h
+++ b/fm.h
@@ -1109,6 +1109,7 @@ extern char *graph2_symbol[];
extern int symbol_width;
extern int symbol_width0;
#define N_GRAPH_SYMBOL 32
+#define N_SYMBOL (N_GRAPH_SYMBOL + 14)
#define SYMBOL_BASE 0x20
global int no_rc_dir init(FALSE);
global char *rc_dir init(NULL);
diff --git a/symbol.c b/symbol.c
index 50475ae..c047c56 100644
--- a/symbol.c
+++ b/symbol.c
@@ -176,10 +176,10 @@ push_symbol(Str str, char symbol, int width, int n)
#ifdef USE_M17N
if (width == 2)
- p = alt2_symbol[(int)symbol];
+ p = alt2_symbol[(unsigned char)symbol % N_SYMBOL];
else
#endif
- p = alt_symbol[(int)symbol];
+ p = alt_symbol[(unsigned char)symbol % N_SYMBOL];
for (i = 0; i < 2 && *p; i++, p++)
buf[i] = (*p == ' ') ? NBSP_CODE : *p;