(decode_composition_emacs_mule):
Give up if NCOMPONENT gets too large to index `component'.
This commit is contained in:
parent
345c105fa4
commit
b1887814c3
1 changed files with 4 additions and 0 deletions
|
@ -811,6 +811,10 @@ decode_composition_emacs_mule (coding, src, src_end,
|
|||
return 0;
|
||||
for (ncomponent = 0; src < src_base + data_len; ncomponent++)
|
||||
{
|
||||
/* If it is longer than this, it can't be valid. */
|
||||
if (ncomponent >= COMPOSITION_DATA_MAX_BUNCH_LENGTH)
|
||||
return 0;
|
||||
|
||||
if (ncomponent % 2 && with_rule)
|
||||
{
|
||||
ONE_MORE_BYTE (gref);
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue