From 2e18e9a5987b2a330143528c106c774d4050af47 Mon Sep 17 00:00:00 2001 From: Tatsuya Kinoshita Date: Mon, 7 Nov 2016 01:25:49 +0900 Subject: Prevent memory exhausted due to repeat appending "" Bug-Debian: https://github.com/tats/w3m/issues/23 [CVE-2016-9633] Origin: https://anonscm.debian.org/cgit/collab-maint/w3m.git/commit/?id=216722ed7282cec4338b177ea9ffdd39ad1b8c8c --- file.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'file.c') diff --git a/file.c b/file.c index 660b10e..e82eaf1 100644 --- a/file.c +++ b/file.c @@ -6988,9 +6988,12 @@ completeHTMLstream(struct html_feed_environ *h_env, struct readbuffer *obuf) obuf->table_level = MAX_TABLE - 1; while (obuf->table_level >= 0) { + int tmp = obuf->table_level; table_mode[obuf->table_level].pre_mode &= ~(TBLM_SCRIPT | TBLM_STYLE | TBLM_PLAIN); HTMLlineproc1("", h_env); + if (obuf->table_level >= tmp) + break; } } -- cgit v1.2.3