Fix possible buffer overflow in addMultirowsImg

Continuation of 4e46481
tats · Aug 5, 2023 · 9246212 · 9246212
1 parent ee66aab
commit 9246212
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/anchor.c b/anchor.c
@@ -614,6 +614,8 @@ addMultirowsImg(Buffer *buf, AnchorList *al)
 	    a->slave = TRUE;
 	    a->image = img;
 	    a->end.pos = pos + ecol - col;
+	    if (pos < 1 || a->end.pos >= l->size)
+		continue;
 	    for (k = pos; k < a->end.pos; k++)
 		l->propBuf[k] |= PE_IMAGE;
 	    if (a_href.url) {