CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]        2017/03/09 08:27:52

Modified files:
        usr.bin/mandoc : roff.c 

Log message:
Fix blunder in previous:  we must keep the line parse buffer
consistent even when aborting the parsing of the line.  That buffer
is not our own, but owned and reused by mparse_buf_r(), read.c.
Returning without cleanup leaked memory and caused write overruns
of the old, typically much smaller buffer in mparse_buf_r().
Promptly noticed by tb@ with afl(1), using MALLOC_OPTIONS=C.

Reply via email to