From 30b0c971676e229dabd2715c200f76bcfe27a714 Mon Sep 17 00:00:00 2001
From: Tatsuya Kinoshita <tats@debian.org>
Date: Mon, 5 Dec 2016 22:36:58 +0900
Subject: Prevent array index out of bounds for tridvalue in feed_table_tag()

Bug-Debian: https://github.com/tats/w3m/issues/71
---
 table.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'table.c')

diff --git a/table.c b/table.c
index a332a22..221db92 100644
--- a/table.c
+++ b/table.c
@@ -2566,8 +2566,10 @@ feed_table_tag(struct table *tbl, char *line, struct table_mode *mode,
 	    }
 	}
 #ifdef ID_EXT
-	if (parsedtag_get_value(tag, ATTR_ID, &p))
+	if (parsedtag_get_value(tag, ATTR_ID, &p)) {
+	    check_row(tbl, tbl->row);
 	    tbl->tridvalue[tbl->row] = Strnew_charp(p);
+	}
 #endif				/* ID_EXT */
 	tbl->trattr = align | valign;
 	break;
-- 
cgit v1.2.3