If wlevel in mparse_alloc() is greater than MANDOCLEVEL_FATAL, we'll

throw assertions due to per-file-error not being properly set in mmsg().
This is reasonable behaviour (we shouldn't be able to ignore FATAL after
all).  Thus, make sure wlevel is sanitised.

1 files changed, 2 insertions, 0 deletions

diff --git a/read.c b/read.c
index ac0b23be..9c222eb1 100644
--- a/read.c
+++ b/read.c
@@ -662,6 +662,8 @@ mparse_alloc(enum mparset inttype, enum mandoclevel wlevel, mandocmsg mmsg, void
 {
 	struct mparse	*curp;
 
+	assert(wlevel <= MANDOCLEVEL_FATAL);
+
 	curp = mandoc_calloc(1, sizeof(struct mparse));
 
 	curp->wlevel = wlevel;