The code is already careful to not add items to lists that were
authorschwarze <schwarze@openbsd.org>
Thu, 18 Dec 2014 03:09:42 +0000 (03:09 +0000)
committerschwarze <schwarze@openbsd.org>
Thu, 18 Dec 2014 03:09:42 +0000 (03:09 +0000)
commitd88cb0b9e49c74d02312f01cda16a5cb48414c00
tree7bea6a5ea0d0af4d89a99c9d2b261284ca68a686
parent0b75d96cf9200c719705a2094c0967d4899ff53b
The code is already careful to not add items to lists that were
already closed.  In this respect, also consider lists closed
that have broken another block, their closure pending until the
end of the broken block.  This avoids syntax tree corruption
leading to a NULL pointer access found by jsg@ with afl.
regress/usr.bin/mandoc/mdoc/Bl/break.in
regress/usr.bin/mandoc/mdoc/Bl/break.out_ascii
regress/usr.bin/mandoc/mdoc/Bl/break.out_lint
usr.bin/mandoc/mdoc.h
usr.bin/mandoc/mdoc_macro.c