From f59dac7e6d9f0aad961c5686fe832d95ec1e7b6c Mon Sep 17 00:00:00 2001
From: Tatsuya Kinoshita <tats@debian.org>
Date: Thu, 18 Aug 2016 00:16:18 +0900
Subject: Prevent segfault with incorrect button type

Bug-Debian: https://github.com/tats/w3m/issues/17 [CVE-2016-9437]
Origin: https://anonscm.debian.org/cgit/collab-maint/w3m.git/commit/?id=67be73b03a5ad581e331ec97cb275cd8a52719ed
---
 file.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'file.c')

diff --git a/file.c b/file.c
index b30aa6b..3b7befe 100644
--- a/file.c
+++ b/file.c
@@ -3756,6 +3756,17 @@ process_button(struct parsed_tag *tag)
     if (v == FORM_UNKNOWN)
        return NULL;
 
+    switch (v) {
+    case FORM_INPUT_SUBMIT:
+    case FORM_INPUT_BUTTON:
+    case FORM_INPUT_RESET:
+	break;
+    default:
+	p = "submit";
+	v = FORM_INPUT_SUBMIT;
+	break;
+    }
+
     if (!q) {
        switch (v) {
        case FORM_INPUT_SUBMIT:
-- 
cgit v1.2.3