Limit size and number of tables to prevent integer overflow

1 files changed, 2 insertions, 2 deletions

diff --git a/file.c b/file.c
index 55f115a..8718dd3 100644
--- a/file.c
+++ b/file.c
@@ -5107,9 +5107,9 @@ HTMLtagproc1(struct parsed_tag *tag, struct html_feed_environ *h_env)
 	return 1;
     case HTML_TABLE:
 	close_anchor(h_env, obuf);
-	obuf->table_level++;
-	if (obuf->table_level >= MAX_TABLE)
+	if (obuf->table_level + 1 >= MAX_TABLE)
 	    break;
+	obuf->table_level++;
 	w = BORDER_NONE;
 	/* x: cellspacing, y: cellpadding */
 	x = 2;