Re: crash on last usemap

Kalle Olavi Niemitalo <[email protected]> Mon, 29 Dec 2008 20:28:31 +0200
Newsgroups gmane.comp.web.links
Message-ID <[email protected]>
أحمد المحمودي <[email protected]> writes:

> I confirm that I got the same problem with elinks 0.13 (20081129 
> snapshot).

ELinks 0.10.6, 0.11.0, 0.11.5, 0.12pre1, and 0.12pre2 all crash.
The trigger is that there is no newline after the final </MAP>.
Small test case:

<TITLE>Double-free crash in USEMAP</TITLE>
<P><IMG src="/dev/null" usemap="#crasher"></P>
<MAP name="crasher">
<AREA shape="rect" coords="42,42,69,69" href="http://elinks.cz/" alt="see this?">
<!-- no newline at the end of this line --></MAP>

_______________________________________________
elinks-dev mailing list
[email protected]
http://linuxfromscratch.org/mailman/listinfo/elinks-dev
signature.asc (application/pgp-signature, 188 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFJWRbVHm9IGt60eMgRAmkUAKCcndaEiGwOgbYOo8QK6M/rath8ygCeJznd
0Hl/ZSl92qzopCIWmX4euqI=
=0vqN
-----END PGP SIGNATURE-----