artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 908626a) | patch
When the last line of a table layout turns out to be empty, it is deleted.
authorschwarze <schwarze@openbsd.org>
Wed, 29 Apr 2015 12:44:10 +0000 (12:44 +0000)
committerschwarze <schwarze@openbsd.org>
Wed, 29 Apr 2015 12:44:10 +0000 (12:44 +0000)
commit16f08be4b1abba81be4ac4886c15fed8f48a0898
tree134ea8ad3f4d828779bf8244fc685e96d1d80120tree | snapshot
parent908626a88b01e8a8cb4da04671db7cb81787c3f7commit | diff
When the last line of a table layout turns out to be empty, it is deleted.
Do not just free the struct tbl_row but also make sure that no pointer
to it remains.  Fixing a use after free found by jsg@ with afl.
usr.bin/mandoc/tbl_layout.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim