diff options
| author | Ingo Schwarze <schwarze@openbsd.org> | 2014-11-25 20:00:01 +0000 |
|---|---|---|
| committer | Ingo Schwarze <schwarze@openbsd.org> | 2014-11-25 20:00:01 +0000 |
| commit | a350521d8151422ac228e507357343fe53d34ea1 (patch) | |
| tree | ee5a93d6b5715b17dd39891fa0cc994859cec7eb /mdoc_term.c | |
| parent | e5162e81380b9a4f3a519fe614576af26589f06f (diff) | |
| download | mandoc-a350521d8151422ac228e507357343fe53d34ea1.tar.gz | |
Do not access a NULL pointer when a section has no body,
which can for example happen for .Sh Xo .Sh without .Xc.
Crash found by jsg@ with afl.
Diffstat (limited to 'mdoc_term.c')
| -rw-r--r-- | mdoc_term.c | 15 |
1 files changed, 9 insertions, 6 deletions
diff --git a/mdoc_term.c b/mdoc_term.c index 8f440733..af662bc3 100644 --- a/mdoc_term.c +++ b/mdoc_term.c @@ -1374,14 +1374,17 @@ static int termp_sh_pre(DECL_ARGS) { - /* No vspace between consecutive `Sh' calls. */ - switch (n->type) { case MDOC_BLOCK: - if (n->prev && MDOC_Sh == n->prev->tok) - if (NULL == n->prev->body->child) - break; - term_vspace(p); + /* + * Vertical space before sections, except + * when the previous section was empty. + */ + if (n->prev == NULL || + MDOC_Sh != n->prev->tok || + (n->prev->body != NULL && + n->prev->body->child != NULL)) + term_vspace(p); break; case MDOC_HEAD: term_fontpush(p, TERMFONT_BOLD); |