CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2017/03/09 08:27:52
Modified files:
usr.bin/mandoc : roff.c
Log message:
Fix blunder in previous: we must keep the line parse buffer
consistent even when aborting the parsing of the line. That buffer
is not our own, but owned and reused by mparse_buf_r(), read.c.
Returning without cleanup leaked memory and caused write overruns
of the old, typically much smaller buffer in mparse_buf_r().
Promptly noticed by tb@ with afl(1), using MALLOC_OPTIONS=C.