diff options
| author | Tatsuya Kinoshita <tats@debian.org> | 2016-08-19 22:12:41 +0000 |
|---|---|---|
| committer | Tatsuya Kinoshita <tats@debian.org> | 2016-11-19 05:11:41 +0000 |
| commit | ffc052b4dfddbb57ae69cfdba254afb8be46eb87 (patch) | |
| tree | 3c65525f121eab4199f7bf95877867e898228369 /file.c | |
| parent | Fix table rowspan and colspan (diff) | |
| download | w3m-ffc052b4dfddbb57ae69cfdba254afb8be46eb87.tar.gz w3m-ffc052b4dfddbb57ae69cfdba254afb8be46eb87.zip | |
Fix uninitialised values for <i> and <dd>
Bug-Debian: https://github.com/tats/w3m/issues/16
[CVE-2016-9435] [CVE-2016-9436]
Origin: https://anonscm.debian.org/cgit/collab-maint/w3m.git/commit/?id=33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd
Diffstat (limited to 'file.c')
| -rw-r--r-- | file.c | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -4669,6 +4669,12 @@ HTMLtagproc1(struct parsed_tag *tag, struct html_feed_environ *h_env) case HTML_DD: CLOSE_A; CLOSE_DT; + if (h_env->envc == 0 || + (h_env->envc_real < h_env->nenv && + envs[h_env->envc].env != HTML_DL && + envs[h_env->envc].env != HTML_DL_COMPACT)) { + PUSH_ENV(HTML_DL); + } if (envs[h_env->envc].env == HTML_DL_COMPACT) { if (obuf->pos > envs[h_env->envc].indent) flushline(h_env, obuf, envs[h_env->envc].indent, 0, |