Prevent segfault due to buffer overflows in addMultirowsForm

Bug-Debian: #21 Bug-Debian: #26
tats · Aug 29, 2016 · 4e46481 · kcwu · Aug 29, 2016 · 4e46481
1 parent 7b88478
commit 4e46481
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/anchor.c b/anchor.c
@@ -685,6 +685,8 @@ addMultirowsForm(Buffer *buf, AnchorList *al)
 	    a->hseq = a_form.hseq;
 	    a->y = a_form.y;
 	    a->end.pos = pos + ecol - col;
+	    if (pos < 1 || a->end.pos >= l->size)
+		continue;
 	    l->lineBuf[pos - 1] = '[';
 	    l->lineBuf[a->end.pos] = ']';
 	    for (k = pos; k < a->end.pos; k++)