From fff818fe878ca5edfbac85b15e77ada2acb8ea0f Mon Sep 17 00:00:00 2001 From: Russ Cox Date: Mon, 1 Dec 2014 20:15:52 -0500 Subject: libdraw, libframe, acme: fix, guard against inverted range in textsetselect Credit to Roi Martin for noticing that libdraw was being passed a negative string length and for finding the sequence of keystrokes that make acme do it reproducibly. Change-Id: If3f3d04a25c506175f740d3e887d5d83b5cd1bfe Reviewed-on: https://plan9port-review.googlesource.com/1092 Reviewed-by: Russ Cox --- src/libdraw/string.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/libdraw') diff --git a/src/libdraw/string.c b/src/libdraw/string.c index 4e876c17..392a7e8a 100644 --- a/src/libdraw/string.c +++ b/src/libdraw/string.c @@ -67,6 +67,9 @@ _string(Image *dst, Point pt, Image *src, Point sp, Font *f, char *s, Rune *r, i Font *def; Subfont *sf; + if(len < 0) + sysfatal("libdraw: _string len=%d", len); + if(s == nil){ s = ""; sptr = nil; -- cgit v1.2.3