Fix possible out-of-bounds write from a \ followed by multiple newlines

Fixes CVE-2017-13738 and CVE-2017-13744.
liblouis · Aug 30, 2017 · edf8ee0 · edf8ee0
1 parent 7bad0a2
commit edf8ee0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/liblouis/compileTranslationTable.c b/liblouis/compileTranslationTable.c
@@ -336,6 +336,7 @@ _lou_getALine (FileInfo * nested)
       if (pch == '\\' && ch == 10)
 	{
 	  nested->linelen--;
+	  pch = ch;
 	  continue;
 	}
       if (ch == 10 || nested->linelen >= MAXSTRING-1)