summaryrefslogtreecommitdiffstats
path: root/mdoc_macro.c
diff options
context:
space:
mode:
authorIngo Schwarze <schwarze@openbsd.org>2016-08-20 15:58:21 +0000
committerIngo Schwarze <schwarze@openbsd.org>2016-08-20 15:58:21 +0000
commitfd0810563728ec789e1ffe4d07db646ce2543711 (patch)
tree28ca328480ce9efafae074d9665b5bd0050e2763 /mdoc_macro.c
parent1a457596e32c18ed30f233db70ab53845b78da17 (diff)
downloadmandoc-fd0810563728ec789e1ffe4d07db646ce2543711.tar.gz
When scanning upwards for a column list to put a .Ta macro in,
ignore body end markers of lists breaking other blocks. Fixing a logical error that caused a NULL deref found by tb@ with afl(1).
Diffstat (limited to 'mdoc_macro.c')
-rw-r--r--mdoc_macro.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/mdoc_macro.c b/mdoc_macro.c
index c5bd45ee..ded91db4 100644
--- a/mdoc_macro.c
+++ b/mdoc_macro.c
@@ -1459,7 +1459,7 @@ phrase_ta(MACRO_PROT_ARGS)
continue;
if (n->tok == MDOC_It && n->type == ROFFT_BODY)
body = n;
- if (n->tok == MDOC_Bl)
+ if (n->tok == MDOC_Bl && n->end == ENDBODY_NOT)
break;
}