Skip to content

Commit ecfdcbe

Browse files
committed
Prevent deref null pointer in HTMLlineproc0()
Bug-Debian: #42
1 parent 81a2932 commit ecfdcbe

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

file.c

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6330,10 +6330,10 @@ HTMLlineproc0(char *line, struct html_feed_environ *h_env, int internal)
63306330
while (*line != '\0') {
63316331
char *str, *p;
63326332
int is_tag = FALSE;
6333-
int pre_mode = (obuf->table_level >= 0) ? tbl_mode->pre_mode :
6334-
obuf->flag;
6335-
int end_tag = (obuf->table_level >= 0) ? tbl_mode->end_tag :
6336-
obuf->end_tag;
6333+
int pre_mode = (obuf->table_level >= 0 && tbl_mode) ?
6334+
tbl_mode->pre_mode : obuf->flag;
6335+
int end_tag = (obuf->table_level >= 0 && tbl_mode) ?
6336+
tbl_mode->end_tag : obuf->end_tag;
63376337

63386338
if (*line == '<' || obuf->status != R_ST_NORMAL) {
63396339
/*
@@ -6415,7 +6415,7 @@ HTMLlineproc0(char *line, struct html_feed_environ *h_env, int internal)
64156415
}
64166416

64176417
proc_normal:
6418-
if (obuf->table_level >= 0) {
6418+
if (obuf->table_level >= 0 && tbl && tbl_mode) {
64196419
/*
64206420
* within table: in <table>..</table>, all input tokens
64216421
* are fed to the table renderer, and then the renderer

0 commit comments

Comments
 (0)