[bug #62040] [troff] double-free crash provoked by HTML man(7) output

[G. Branden Robinson]

Update of bug #62040 (project groff):

                  Status:                    None => Confirmed              

    _______________________________________________________

Follow-up Comment #1:

I forgot to credit Alejandro Colomar for the original reproducer.

Here's a smaller one, with comments outlining my suspicion of contributing
factors to the problem.

If you widen the `TP` indentation to 2n, or give the paragraph some "meat"
after the tag (even a single letter), the crash is avoided.


$ cat EXPERIMENTS/tag2.man
.TH foo 1 2022-02-12 "groff test suite"
.TP 1n \" not enough room for 'A' plus a space, so break after 'A'
A
.\" ...but input unexpectedly ends.


It appears to me that whatever in grohtml handles tagged paragraphs is
assuming something will be present, and it goes wrong when it isn't.

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?62040>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/