mity / md4c

C Markdown parser. Fast. SAX-like interface. Compliant to CommonMark specification.
MIT License
776 stars 146 forks source link

Buffer overflow in md_is_entity_str() #47

Closed mity closed 5 years ago

mity commented 5 years ago

The following input leads to buffer overflow in md_is_entity_str() when used with md2html --github:

www.x.y&&y&&&y&&&&y&&y&&

(Distilled from PR #46 and from https://bugreports.qt.io/browse/QTBUG-72937)