summaryrefslogtreecommitdiffstats
path: root/mdoc_man.c
diff options
context:
space:
mode:
authorIngo Schwarze <schwarze@openbsd.org>2015-02-11 14:15:12 +0000
committerIngo Schwarze <schwarze@openbsd.org>2015-02-11 14:15:12 +0000
commita5ec4b155fd2b5756e3494144f8347f3ad03d4c1 (patch)
treea0b8e1637976da0d65a31f32be1f180875f7ef8d /mdoc_man.c
parentac2fcf5a79f33c981e28a5af1816f1f29d7a0be5 (diff)
downloadmandoc-a5ec4b155fd2b5756e3494144f8347f3ad03d4c1.tar.gz
do not access a NULL pointer if an .Eo block lacks a tail;
found by jsg@ with afl, test case #16
Diffstat (limited to 'mdoc_man.c')
-rw-r--r--mdoc_man.c5
1 files changed, 2 insertions, 3 deletions
diff --git a/mdoc_man.c b/mdoc_man.c
index ad3fc626..6bf832e5 100644
--- a/mdoc_man.c
+++ b/mdoc_man.c
@@ -1140,9 +1140,8 @@ pre_eo(DECL_ARGS)
n->child->end != ENDBODY_NOT)
print_word("\\&");
else if (n->end != ENDBODY_NOT ? n->child != NULL :
- n->parent->head->child != NULL &&
- (n->parent->body->child != NULL ||
- n->parent->tail->child != NULL))
+ n->parent->head->child != NULL && (n->child != NULL ||
+ (n->parent->tail != NULL && n->parent->tail->child != NULL)))
outflags &= ~(MMAN_spc | MMAN_nl);
return(1);
}