diff options
author | Tatsuya Kinoshita <tats@debian.org> | 2016-11-15 11:11:52 +0000 |
---|---|---|
committer | Tatsuya Kinoshita <tats@debian.org> | 2016-11-19 05:47:17 +0000 |
commit | 0a04bf8a1cb3868ace621b092d26cefdeb5ec359 (patch) | |
tree | 0476b69f095d69e58fb647fc5a5eeb06b847346d /file.c | |
parent | Prevent global-buffer-overflow write in formUpdateBuffer (diff) | |
download | w3m-0a04bf8a1cb3868ace621b092d26cefdeb5ec359.tar.gz w3m-0a04bf8a1cb3868ace621b092d26cefdeb5ec359.zip |
Prevent infinite recursion with nested table and textarea
Bug-Debian: https://github.com/tats/w3m/issues/20 [CVE-2016-9439]
Origin: https://anonscm.debian.org/cgit/collab-maint/w3m.git/commit/?id=2a4a2fb9f116b50e7c80d573db06c0fdc6c69272
Diffstat (limited to 'file.c')
-rw-r--r-- | file.c | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -6413,6 +6413,7 @@ HTMLlineproc0(char *line, struct html_feed_environ *h_env, int internal) do_blankline(h_env, obuf, indent, 0, h_env->limit); } save_fonteffect(h_env, obuf); + initRenderTable(); renderTable(tbl, tbl_width, h_env); restore_fonteffect(h_env, obuf); obuf->flag &= ~RB_IGNORE_P; |