From 1dfae92eac791f544df425d7fcdf30f169a729c3 Mon Sep 17 00:00:00 2001 From: Nico Weber Date: Mon, 13 Jul 2020 15:20:29 -0400 Subject: [PATCH] LibMarkdown: Reset offset to 0 on each new List line Found by FuzzMarkdown. --- Libraries/LibMarkdown/List.cpp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Libraries/LibMarkdown/List.cpp b/Libraries/LibMarkdown/List.cpp index 15cd47d80a..52bc2816fe 100644 --- a/Libraries/LibMarkdown/List.cpp +++ b/Libraries/LibMarkdown/List.cpp @@ -142,8 +142,10 @@ OwnPtr List::parse(Vector::ConstIterator& lines) first = false; if (!item_builder.is_empty()) item_builder.append(' '); + ASSERT(offset <= line.length()); item_builder.append(line.substring_view(offset, line.length() - offset)); ++lines; + offset = 0; } if (!flush_item_if_needed() || first)