Merge pull request #217 from github/upstream/limit-nested-parens

> 32 nested balanced parens in a link is bananas
commonmark · Nov 5, 2017 · c739195 · c739195
2 parents b40ecdc + 45f4fc9
commit c739195
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/inlines.c b/src/inlines.c
@@ -898,6 +898,8 @@ static bufsize_t manual_scan_link_url_2(cmark_chunk *input, bufsize_t offset,
       else if (input->data[i] == '(') {
         ++nb_p;
         ++i;
+        if (nb_p > 32)
+          return -1;
       } else if (input->data[i] == ')') {
         if (nb_p == 0)
           break;