termptyesc: fix bug found by tyfuzz

borisfaure · Oct 17, 2018 · df81992 · df81992
1 parent 5e06ee1
commit df81992
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/bin/termptyesc.c b/src/bin/termptyesc.c
@@ -1840,6 +1840,12 @@ _handle_hyperlink(Termpty *ty,
 
          /* /!\ we expect ';' and ':' to be escaped in params */
          end = memchr(s+1, ';', len);
+         if (!end)
+           {
+              ERR("invalid hyperlink escape code: missing ';'"
+                  " (len:%d s:%.*s)", len, len, s);
+              goto end;
+           }
          *end = '\0';
          do
            {